last executing test programs:

23m52.433990548s ago: executing program 0 (id=2762):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200841, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x7, 0x1, 0x717, 0x7, 0x0, 0x8, 0xffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x44010)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003)
r1 = getpid()
stat(0x0, &(0x7f0000000240))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0)
shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13)

23m50.174017291s ago: executing program 0 (id=2771):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000d04fcff", 0x58}], 0x1)

23m50.009939912s ago: executing program 0 (id=2773):
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newtaction={0x47c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0x2000000f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, {0x3d8, 0x1, [@m_gact={0xbc, 0x10, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xfffffff6, 0x6, 0x57}}]}, {0x75, 0x6, "49cbd94e1c1da0506d8c3486118e002fb866ea8b7c5f2c4a6f9822266079b23768c3f0da9271327788aadddc72cc0bd0195b79ce8a9409b789f8e4e8d8cd81a2c79bad904531093b7dd677699f451a33af5b32f0a28cb5586fc7add8339a18a554af36f3bf9de42f92b8c498a333e7f3ee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0xd0, 0x12, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x4, 0xffffffffffffffff, 0x0, 0x6}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0x5, 0x3, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7, 0x3, 0x3, 0x4}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x88d, 0x1, 0x1, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1, 0x4, 0x6, 0x4}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x5c, 0x7, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x23, 0x6, "e1e0e3cb21693e22dcc90f0b9e2d3ddc19bc438bdf3a7ce8193d4e449a66e4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x128, 0xe, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, 'nl80211\x00'}, @TCA_DEF_DATA={0x13, 0x3, '/dev/dri/card#\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'nl80211\x00'}, @TCA_DEF_DATA={0x13, 0x3, '/dev/dri/card#\x00'}, @TCA_DEF_DATA={0xc, 0x3, '^/v+\x92-)\x00'}, @TCA_DEF_DATA={0x13, 0x3, '/dev/dri/card#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0xf, 0x1, 0xf, 0x6ad5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, ']}&\x00'}]}, {0x71, 0x6, "cb2deb8ff54007e791394a2369713c9bee2df96c049fe8ac0dc4e29369bf7cffaadfc3ff4a8aa1a4ccfa1dab291d1154e2c8649a0fb3141e6076757b04fe009694e8415e7ac123d5526a252aba33394c42dd56a091e40e392a04b1d932eea6929532a0d2821023226e18bd3850"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0xc4, 0x0, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8000}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffffffff, 0x7, 0x10000000, 0x0, 0x1}}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x8, 0x1, 0x2, 0xd}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}]}, {0x3d, 0x6, "657a9cdf4897a4d58c227a9fa32e3176cb895dc3b67515d584304a0f94dea7caac697a08ae80ca29879ff9ae7c2d54a3f33e5d2dd0dcc5659a"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x47c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, {0x200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005"], 0x98}}, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
poll(&(0x7f0000000300)=[{r6, 0x252}], 0x1, 0x3)

23m48.663515188s ago: executing program 0 (id=2776):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r2, 0x1, 0x0, 0x0, {0x49}}, 0x14}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20004000)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000140)={0x0, 0x24, 0x1, @thr={&(0x7f0000000500)="70edd06ec3fe56fc0b6b80cf28b871c73a8329d7e0e6788470b159f08d52d50c40990c10c489abc748c0662dd24a2d57434c658c2578eb66d3064408b41504ca13c937567df8c16b508f2b22d2278c3e759d4d4802c6ab4a4f85f45bb9c556a8f1be869599a48fe8a1cc3a8a4062638a57fd01553eac8d500aa5", &(0x7f0000000680)="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"}}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250701f2800c00180008ac0f0057c0b02f251a77d525cc2843162ce1000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fab04abde1d5e8d3fb22a1b50467789dafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973de47a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3287b03fffa370d47eb640dc5b23edb834413dfdbe3626ce79ff2ba2f4f667ddc2d189ea6d02591b447d1d707052e0de467f388cd3233940dde45b15f22a8cf639fcc9b108708edabe8f085af9c8b0a20a6129038f5744d6fb50dadb28a96f08183551ac7b0f2d598afe6e51120751550f3a98d6edc7aea9185ff32b8aaefaa8c6280fd9b47d5d45b2a837e29303628000000000000000000"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

23m48.330258726s ago: executing program 0 (id=2780):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x3, 0x0, &(0x7f00000000c0))
io_setup(0x9, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x0, &(0x7f00000006c0)="9d0923f0792b563330005f93e51f7f83cfddc2e30bc70051f50aa86ea6f71ed9996f019c2d90994356ad36ca14b77d7e8d308cd504abeef8d7782ffa24570ac639", 0x41})
socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xb, &(0x7f0000000140)={0xfffffffffffffffc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
sendto$inet6(r3, 0x0, 0x0, 0x400ad04, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local, 0x80000}, 0x1c)
add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)

23m47.639010039s ago: executing program 0 (id=2782):
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x60100, 0x0)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x8004b706, 0x0)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
dup(0xffffffffffffffff)
syz_open_dev$usbfs(&(0x7f0000000100), 0x2000000000000076, 0x309501)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0xfffffde3, &(0x7f0000000200)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x34, 0x2d, 0x65, 0x65, 0x64, 0x30, 0x61, 0x57, 0x39, 0x30, 0x33, 0x38, 0x30]}, &(0x7f00000005c0)={0x0, "72eb80337f1ed47db6a1768ec9b73020061542519a52e08c63188d1bd903a89b78dd29cacea5ba3cea1065a33f55781825a8286f504c2de89970c7e025cfc5a3", 0x23}, 0x48, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, r4, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
mkdir(&(0x7f0000000400)='./file1\x00', 0x1a1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a80)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r7=>0x0})
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000380)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xfffffffb, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200]}})
connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000320a00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000400f010000105a17684d469812d9e3b65161f924bdca7287ec94784a2248f783913066c072902faf3cca44912a495a6565f00d31343c2c58143b7024e6707f5ca0bbaf6402"], 0x80}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c0012800b00010067656e65766500001c0002800500030004000000060005004e20000005000300b800000008000a00", @ANYRES32], 0x54}}, 0x0)

23m47.338702566s ago: executing program 32 (id=2782):
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x60100, 0x0)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x8004b706, 0x0)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
dup(0xffffffffffffffff)
syz_open_dev$usbfs(&(0x7f0000000100), 0x2000000000000076, 0x309501)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0xfffffde3, &(0x7f0000000200)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x34, 0x2d, 0x65, 0x65, 0x64, 0x30, 0x61, 0x57, 0x39, 0x30, 0x33, 0x38, 0x30]}, &(0x7f00000005c0)={0x0, "72eb80337f1ed47db6a1768ec9b73020061542519a52e08c63188d1bd903a89b78dd29cacea5ba3cea1065a33f55781825a8286f504c2de89970c7e025cfc5a3", 0x23}, 0x48, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, r4, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
mkdir(&(0x7f0000000400)='./file1\x00', 0x1a1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a80)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r7=>0x0})
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000380)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xfffffffb, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200]}})
connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000320a00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000400f010000105a17684d469812d9e3b65161f924bdca7287ec94784a2248f783913066c072902faf3cca44912a495a6565f00d31343c2c58143b7024e6707f5ca0bbaf6402"], 0x80}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c0012800b00010067656e65766500001c0002800500030004000000060005004e20000005000300b800000008000a00", @ANYRES32], 0x54}}, 0x0)

4m52.69174816s ago: executing program 3 (id=5811):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
inotify_init1(0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000940)="0102", 0x0}, 0x50)
mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
kcmp(r0, r0, 0x2, 0xffffffffffffffff, r5)
getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, &(0x7f0000000540))

4m51.234022478s ago: executing program 3 (id=5814):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x4048000000000000, 0x10f282)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x8, 0x1000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000300)='loginuid\x00')
ppoll(&(0x7f0000000000)=[{r6}], 0x1, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x26, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
clock_settime(0x0, &(0x7f0000000000)={0xfffffffffffffffc})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r9}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r10 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$alg(r10, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1)

4m47.593281167s ago: executing program 3 (id=5822):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'veth0_to_hsr\x00', {0x2, 0x4e5f, @rand_addr=0x64010100}})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
unlinkat(0xffffffffffffffff, 0x0, 0x200)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e08003950"], 0x15)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_GETXATTR(r7, &(0x7f0000000480)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',vfdYo=', @ANYRESHEX=r7, @ANYBLOB=',\x00'])
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r8, 0x29, 0x5, &(0x7f0000000000), 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0)

4m46.375875015s ago: executing program 3 (id=5826):
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac)
fanotify_init(0x8, 0x80801)
r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
socket$inet_smc(0x2b, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
epoll_create1(0x0)
epoll_create1(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcfad}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r6, r6, 0x2f, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket(0x10, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000002000000001400006b110e0000a5dcfa4b00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3})
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8520000008000000760000000000000127000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f)
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

4m44.115113292s ago: executing program 3 (id=5836):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'veth0_to_hsr\x00', {0x2, 0x4e5f, @rand_addr=0x64010100}})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
unlinkat(0xffffffffffffffff, 0x0, 0x200)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e08003950"], 0x15)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_GETXATTR(r7, &(0x7f0000000480)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',vfdYo=', @ANYRESHEX=r7, @ANYBLOB=',\x00'])
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r8, 0x29, 0x5, &(0x7f0000000000), 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0)

4m41.019456538s ago: executing program 3 (id=5840):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
r3 = fsopen(&(0x7f00000002c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000100)='0.,:/', 0x0)
listen(r1, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)={0x0, 0x4, 0xff, 0x2a, 0x5})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x100000)
r5 = syz_open_procfs(r4, &(0x7f00000000c0)='gid_map\x00')
writev(r5, &(0x7f0000000080)=[{0x0}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x1, 0x200, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x20, 0x10, 0x3, 0xfffffffd}})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r6, &(0x7f0000000080), 0x51)
socket(0x2, 0x80805, 0x0)

4m25.829808197s ago: executing program 33 (id=5840):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
r3 = fsopen(&(0x7f00000002c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000100)='0.,:/', 0x0)
listen(r1, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)={0x0, 0x4, 0xff, 0x2a, 0x5})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x100000)
r5 = syz_open_procfs(r4, &(0x7f00000000c0)='gid_map\x00')
writev(r5, &(0x7f0000000080)=[{0x0}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x1, 0x200, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x20, 0x10, 0x3, 0xfffffffd}})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r6, &(0x7f0000000080), 0x51)
socket(0x2, 0x80805, 0x0)

4m15.201930371s ago: executing program 5 (id=5903):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0)
sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000010)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
ptrace$pokeuser(0x6, 0x0, 0x80, 0x4)
r3 = socket(0x10, 0x803, 0x4)
getpgid(0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_ts_info})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, 0x0)
mremap(&(0x7f0000383000/0x4000)=nil, 0x4000, 0x2000, 0x4, &(0x7f00000bd000/0x2000)=nil)

4m12.283770049s ago: executing program 5 (id=5913):
ioperm(0x0, 0xd4b7, 0xa)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x38, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x546, 0xffffffff}, 0x0)
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a01000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000600)={0x24, &(0x7f0000000480)={0x40, 0x19, 0x6, {0x6, 0x3, "6e1bb32e"}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000140)=0x2)
close_range(r0, 0xffffffffffffffff, 0x1000000000000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)

4m9.989860564s ago: executing program 5 (id=5919):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0)
sendmsg$rds(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (fail_nth: 3)

4m9.687637246s ago: executing program 5 (id=5920):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e)
setsockopt$inet6_int(r3, 0x29, 0x50, &(0x7f0000000180)=0x1, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
r6 = syz_open_dev$dri(0x0, 0x1, 0x0)
r7 = syz_open_dev$dri(0x0, 0x1, 0x0)
r8 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r8)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

4m6.550966362s ago: executing program 5 (id=5931):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x10d882, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
chdir(&(0x7f0000000080)='./file1\x00') (async)
open(&(0x7f0000000000)='.\x00', 0x10d882, 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (async)

4m5.561414245s ago: executing program 5 (id=5933):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_rr_get_interval(r1, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./bus\x00')
rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00')
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000340))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9]})
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'vxcan1\x00', 0x8})

3m50.279518803s ago: executing program 34 (id=5933):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_rr_get_interval(r1, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./bus\x00')
rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00')
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000340))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9]})
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'vxcan1\x00', 0x8})

29.561804265s ago: executing program 6 (id=6595):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace(0x10, 0x1) (fail_nth: 2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
pipe2$watch_queue(0x0, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"])
keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x10003, 0x2, 0x2000, 0x2000, &(0x7f0000008000/0x2000)=nil})

28.383152313s ago: executing program 6 (id=6599):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc048)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617067657400082400028010000100434f4e4e5345434d41524b00050003000100ffff07000240000000000900010073797a300000000009000200ac782099f873797a32000000001400058008000240000000000800010e00137340662391ce0d4e25936fcae6e27d88e37a4813e6c4fa74e7d5266465eafbcbe39b570e39178f35856c3f5a881cdf34a58adf766924ef11f795bf87fd16c421bb7c7f2acf2e1a85f3754670171d71fef58b712e89b3706ed832fb"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x44110)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000012000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=','])
read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, <r4=>0x0}, 0x2020)
r5 = syz_open_dev$sg(0x0, 0x0, 0x8002)
fcntl$dupfd(r5, 0x0, r5)
ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f0000000a80)=0x1)
syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x0, 0x0, 0xfffe}}, 0x50)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1)
ioctl$TIOCGPTPEER(r6, 0x932, 0x8)

28.231056034s ago: executing program 7 (id=6600):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rename(0x0, 0x0)
fchdir(0xffffffffffffffff)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (fail_nth: 2)

26.488394592s ago: executing program 7 (id=6605):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x24, 0x2, {0xf, "000f000000000000000100000e00"}}}]}, 0x48}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
close(r3)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x22, 0x1, 0xf, "c7aca8", 0x1, 0x9}, {@none, 0xff, 0x80, 0xc7, "18e285", 0x5785, 0x1}]}}}, 0x22)
sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"], 0x18}, 0x0)
recvmsg$kcm(r7, &(0x7f0000000480)={&(0x7f0000000240)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/17, 0x11}], 0x3, &(0x7f0000000400)=""/87, 0x57}, 0x2002)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r10, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0)

26.487846245s ago: executing program 2 (id=6606):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b", @ANYRESOCT=0x0], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x9c, &(0x7f0000000e40)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x7, 0x20, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x97cf, 0xd, 0xca}, {0x6, 0x24, 0x1a, 0xf, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x2e, 0x81}, @country_functional={0xa, 0x24, 0x7, 0x2, 0x9, [0x8, 0x1ff]}, @obex={0x5}, @country_functional={0x10, 0x24, 0x7, 0x9, 0x5, [0x0, 0x5, 0xfffe, 0x81, 0x3ff]}, @dmm={0x7, 0x24, 0x14, 0x100, 0xc}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x3, 0xbd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x1, 0x6}}}}}}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x300, 0x0, 0x8, 0x1, 0x40, 0x91}, 0x23, &(0x7f0000000f40)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x9, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "f0150897015cd38f33273d64df6bf233"}]}, 0xa, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x455}}, {0x2a, &(0x7f0000001000)=@string={0x2a, 0x3, "36cdf90a3240a0d131ff28e170482f95ab570b12709189994819af17947e5966e807d678e78d59bb"}}, {0xe, &(0x7f0000001040)=@string={0xe, 0x3, "c26abd2d20e0799255d6bb37"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x44f}}, {0xf9, &(0x7f0000001180)=@string={0xf9, 0x3, "fc348edced388f8bd1c79e2a53349f56f10b6a6d925fb2352d067afe9a854d0f30ce7a6260b31f72eaa5c94fffd9cea4662ed867626dabaf32310f30592fbe6b55de4fb6a4856cb808b446d6d351721b380dcd06e53c707510c8ee64d5b6162c80d27530aad9cca964d162ab387ad5173d2f02cd6e4f335cbc6adf77ec08431334fec490edd3242fafa06afbe9227b4368009ae3e29df4eed91a33489d82a489634cbec6790f9387b1d6c5ae5027f2db61540f5a10766a40ade8f7863c96fcf40ba58a7ef3114ac993266fe344138f4d9e933fbe16f334705882ca9eaf9b8223ca514bfaf87e577303dd061855b9f9bc21fd1b6291f426"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_usb_connect$uac1(0x0, 0xfd, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x3, 0x1, 0x6, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xb}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x1, 0x6, 0x5}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x0, "6ae51a754dbf"}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0x3, "61fc70"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x4, 0x7b, 0x3, "ab", '&'}, @as_header={0x7, 0x24, 0x1, 0x0, 0xb, 0x1002}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x4, 0x2, 0x7, 'yA', "d7cf31"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xb}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0x81, 'JO'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xc, 0x8, 0x4d, {0x7, 0x25, 0x1, 0x3, 0x8, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x1004}, @as_header={0x7, 0x24, 0x1, 0xfc, 0x3, 0x5}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x5, 0x2, "d0828655b4d5"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x10, 0x3, 0xc, 0x5, "", "2c15"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6f0, 0x5, 0x3, "64844ee0"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x9a6, 0x4, "2281b39ffe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0xff, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7, 0x4}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x10, 0x1, 0xf, 0x28, 0x6}, 0x1dd, &(0x7f0000000200)={0x5, 0xf, 0x1dd, 0x4, [@generic={0xfa, 0x10, 0x4, "5b45593fd3e7cf7dbdb5f6f8610ffb2ef4afc51cd4a6106a9846ba5c90c89b32cb7bba71715096fead0ca11dc43ae4731dd765ae3cff2e70f6f7569bbdb6462c262556c6e4b0fd172d38718c308d09bf9f6b3f7e9421e8730d7fcbd91854ba812c81325967764a7670f84582ef2fa59a50e9984c4693fb6484ead6a1458e9de5206ada5d6211b1d401d6511d229f7362619c3c7962d0bdf488837834610e4787b93b428377d35135eee042aeaa9b082db10e3746de907b96790888389ff6d655a691f1bced803ccf057e3fda8ab43de1ba6e5d3bbfddea319661ff32192fb954c6ebe36f295f2260ad9d2385e5c1124dceef915dbdf512"}, @generic={0x27, 0x10, 0x0, "a9df171e02273bafd3919c0b3e838a4d775553fdd5878f9387be9fafda8621bb33802122"}, @generic={0xb4, 0x10, 0x3, "09ec5c8814eb8fd5842cdc51c58069f0de9662aa2603fc7f8ffa46c012184c724046bc19aa9477875a5c522192c9ffd9aaa4b288889ac31d6d5a10f0adeee38e6ca2ce36468c01d0621e13c1204695f59a8301b722cb9134bdfe695dab05c2b1f849f6aa1264a6b15927c0ddee0970a2a90a3aa136c7e42cde52b26335693b2762a478dc1a2330599ed197b6dfe27d1e657a2f11810703fd33958dfab446a9995c4c247b6c550c7b928a5fa680a6a9a226"}, @ptm_cap={0x3}]}, 0x8, [{0xf1, &(0x7f0000000400)=@string={0xf1, 0x3, "e2e9710c68d5207807864a0d53d7e3b20bb0f8d0a7e800431d1122716674f4a4a1d1ed6ea529f2112e9f6997f2c2756b3a9fb5c73aa55104f320006488be9bf233109d3e69d6d218f85480e7a7c6759fafe53c16aadd14c15cad3b7bcfc12d83c6901146c75c0cda512419714cf154c7c10150b8ed5f977975d4f9d83ef9c0efbce1992f39f11086b4cfa206c183b68e72e2892eb60117872a49c83297d178587d8bd49063581ef4a197b8483c9c95e969996b3a698c1bfcb9089306acf03f8acc071f0c70da0636a814353bc8abf6664f6b5de7d34ba976bbf23bbdcd979c4fb28bf7380d0056537664e7695eb71b"}}, {0x77, &(0x7f0000000500)=@string={0x77, 0x3, "db21f518ca936ffd92b31851767756f0ec705855a87ff44380e1ccc134621f63d4dc26caa8fc80baac1c9b5e9ced4d336fa4f81eef235fbfcd0c6fa1a5b3d817cbff20c06c19b7d8088dc9171bfd2b5ca3487675578332fb8b18c6a05660914c5c1b5408697af7879917611a3b8b92556576cc3ec1"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000580)=@lang_id={0x4}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x458}}, {0x101, &(0x7f0000000640)=@string={0x101, 0x3, "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"}}, {0x23, &(0x7f0000000780)=@string={0x23, 0x3, "5fc693f82eeb920f7e3f4fa88f97421280b177a6dd83efc4b95ce706eb8580ce61"}}]})

26.13921606s ago: executing program 6 (id=6607):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
sendmmsg(r1, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@can={0x1d, r3}, 0x80, 0x0}}], 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
socket(0x26, 0x1, 0x6)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r8 = open_tree(r7, &(0x7f00000005c0)='./file0\x00', 0x89901)
move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x114)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
syz_usb_connect(0x0, 0x3b, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()

23.784490213s ago: executing program 7 (id=6609):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12"], 0x48)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xf000, 0x100, 0x1ff, 0x6, 0x0, [{0x4, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x71, 0x5, '\x00', 0xdf}, {0xd5, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x4, '\x00', 0x72}, {0x9, 0xfc, 0x10, '\x00', 0x81}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa1}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x7c, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf0}, {0x7, 0xb, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x3}, {0x1, 0x0, 0x7, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0x10}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x8}]}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x4, 0xbdb], 0x1, 0x3c4210})
r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501)
syz_open_dev$usbfs(&(0x7f0000000140), 0x5, 0x0)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

23.539275939s ago: executing program 7 (id=6611):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0x6, @win={{0x9, 0x8001, 0xb, 0x4}, 0x0, 0x101, 0x0, 0x6, 0x0, 0x8}}) (fail_nth: 2)

23.236282148s ago: executing program 7 (id=6613):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000000", 0x24)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0)

22.955813886s ago: executing program 6 (id=6614):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="a243e6", 0x3}], 0x1, &(0x7f0000000080)}, 0x0)
socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
capset(0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0)
io_setup(0x1fc, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200000c8)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f0000000340)="1e", 0x1, 0x6004081, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) (fail_nth: 2)
setsockopt(r3, 0x84, 0x82, &(0x7f0000000040)="020000000d80ffff", 0x8)

22.819007591s ago: executing program 2 (id=6615):
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x30b8c0, 0x0)
socketpair(0x18, 0x800, 0x2, &(0x7f0000000000))
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102)
openat$fuse(0xffffffffffffff9c, &(0x7f0000004380), 0x2, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0)
syz_io_uring_setup(0x1000009e, &(0x7f0000000640)={0x0, 0x99aa, 0x0, 0x1, 0x10d}, &(0x7f00000006c0), &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'})
syz_emit_ethernet(0x15e, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r0], 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280))
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)
accept4(r3, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.stat\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xc, &(0x7f0000000200)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)

21.79859889s ago: executing program 2 (id=6617):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8878, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0xcca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x200000], [0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1]}, 0x45c)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r2, 0x5501)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000004000000000000080000001800016660f000427b25b75f74001c000280ac0600cf6411efee00"/50], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0xc041)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r3, 0x80)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x28843, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0x19}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)

21.798309791s ago: executing program 6 (id=6618):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TCFLSH(r0, 0x8924, 0xfffffffdfffffffb)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3)
sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}}, 0x40000)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x3, 0x0, @local}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)

21.34046815s ago: executing program 6 (id=6619):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80101, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
r2 = gettid()
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x3ff)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x300, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
syz_io_uring_submit(0x0, 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc})
ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r5, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c4600040001ff7f00000000000003003e00ecffffff940200000000000048000000000000000000000000000000000000000000380001"], 0x78)
close(r5)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64)
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3)
syz_open_dev$tty20(0xc, 0x4, 0x1)

20.259559949s ago: executing program 2 (id=6620):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x24, 0x2, {0xf, "000f000000000000000100000e00"}}}]}, 0x48}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
close(r3)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x22, 0x1, 0xf, "c7aca8", 0x1, 0x9}, {@none, 0xff, 0x80, 0xc7, "18e285", 0x5785, 0x1}]}}}, 0x22)
sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"], 0x18}, 0x0)
recvmsg$kcm(r7, &(0x7f0000000480)={&(0x7f0000000240)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/17, 0x11}], 0x3, &(0x7f0000000400)=""/87, 0x57}, 0x2002)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r10, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0)

20.255538863s ago: executing program 4 (id=6621):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000019300)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="2f000000000023f1a3e74b8dbf8533a8c6987823cb000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r2 = socket(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00?'], 0x2c}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x100000}, 0x10)
write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe20000000000000", 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000019380)=ANY=[@ANYRESOCT=r4, @ANYBLOB="3965acca57297d34497605804020f03dabb257d4b67b40d8f81f855f075e75a2f20507560ef3a9d5331ea32c7b7676d9f34a97bfc2efb935122f14619c974fd2fba66c247bf804ebd76233bc893f8526465ec249c4df88d4207d5dee236ce13995b0c4678f73f2558aa3885d6883bbb27c2b2e397cd7ca363813b28921908b2c61458a69263de6f9349eadbf45d58595b7b1a4bb407c6b63b2a82a9d236c6c952227bf6e64139718e424df8fd0cabb14c25143fe240ca4835f927c3d69", @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRESOCT=r4], 0x20)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f0000000280), 0xffffffffffff8002, 0x0)
read$msr(r7, &(0x7f0000032480)=""/102363, 0x1f9e)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000000000020000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000055fbbe6000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)
pwritev2(0xffffffffffffffff, 0x0, 0x58, 0x8, 0xffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r9, &(0x7f0000000180)='4\x00', 0x2)

20.055378141s ago: executing program 7 (id=6622):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
open(0x0, 0x84100, 0x2)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

20.052846263s ago: executing program 4 (id=6623):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000400000000"], 0x48)
ioperm(0x0, 0x2, 0x7e)
setns(0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, <r7=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r5}, &(0x7f00000009c0), &(0x7f0000000a00)=r3}, 0x20)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000240)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x0})
r8 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042)
r9 = dup(r8)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r2}})
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)

19.283269628s ago: executing program 2 (id=6624):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x11, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000440)={0xffffffff, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/135, 0x87}, {&(0x7f00000000c0)=""/94, 0x5e}, {&(0x7f0000000200)=""/110, 0x6e}], &(0x7f0000000180)=[0x3ff, 0x4, 0x381d, 0x3, 0x4, 0xe1, 0x972, 0xf3f4], 0x4}, 0x20)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x102, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000280)={0x0, 0x0})
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='RECLEV\nPHONEOUT\nSPEAKER \'CD\' 0000000000000'], 0xb8)
r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r7, r6, 0x0)

19.083197642s ago: executing program 4 (id=6625):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, &(0x7f00000012c0)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x300, 0x0, 0x8, 0x1, 0x40, 0x91}, 0x23, &(0x7f0000000f40)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x9, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "f0150897015cd38f33273d64df6bf233"}]}, 0xa, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x455}}, {0x2a, &(0x7f0000001000)=@string={0x2a, 0x3, "36cdf90a3240a0d131ff28e170482f95ab570b12709189994819af17947e5966e807d678e78d59bb"}}, {0xe, &(0x7f0000001040)=@string={0xe, 0x3, "c26abd2d20e0799255d6bb37"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x44f}}, {0xf9, &(0x7f0000001180)=@string={0xf9, 0x3, "fc348edced388f8bd1c79e2a53349f56f10b6a6d925fb2352d067afe9a854d0f30ce7a6260b31f72eaa5c94fffd9cea4662ed867626dabaf32310f30592fbe6b55de4fb6a4856cb808b446d6d351721b380dcd06e53c707510c8ee64d5b6162c80d27530aad9cca964d162ab387ad5173d2f02cd6e4f335cbc6adf77ec08431334fec490edd3242fafa06afbe9227b4368009ae3e29df4eed91a33489d82a489634cbec6790f9387b1d6c5ae5027f2db61540f5a10766a40ade8f7863c96fcf40ba58a7ef3114ac993266fe344138f4d9e933fbe16f334705882ca9eaf9b8223ca514bfaf87e577303dd061855b9f9bc21fd1b6291f426"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_usb_connect$uac1(0x0, 0xfd, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x3, 0x1, 0x6, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xb}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x1, 0x6, 0x5}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x0, "6ae51a754dbf"}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0x3, "61fc70"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x4, 0x7b, 0x3, "ab", '&'}, @as_header={0x7, 0x24, 0x1, 0x0, 0xb, 0x1002}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x4, 0x2, 0x7, 'yA', "d7cf31"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xb}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0x81, 'JO'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xc, 0x8, 0x4d, {0x7, 0x25, 0x1, 0x3, 0x8, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x1004}, @as_header={0x7, 0x24, 0x1, 0xfc, 0x3, 0x5}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x5, 0x2, "d0828655b4d5"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x10, 0x3, 0xc, 0x5, "", "2c15"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6f0, 0x5, 0x3, "64844ee0"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x9a6, 0x4, "2281b39ffe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0xff, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7, 0x4}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x10, 0x1, 0xf, 0x28, 0x6}, 0x1dd, &(0x7f0000000200)={0x5, 0xf, 0x1dd, 0x4, [@generic={0xfa, 0x10, 0x4, "5b45593fd3e7cf7dbdb5f6f8610ffb2ef4afc51cd4a6106a9846ba5c90c89b32cb7bba71715096fead0ca11dc43ae4731dd765ae3cff2e70f6f7569bbdb6462c262556c6e4b0fd172d38718c308d09bf9f6b3f7e9421e8730d7fcbd91854ba812c81325967764a7670f84582ef2fa59a50e9984c4693fb6484ead6a1458e9de5206ada5d6211b1d401d6511d229f7362619c3c7962d0bdf488837834610e4787b93b428377d35135eee042aeaa9b082db10e3746de907b96790888389ff6d655a691f1bced803ccf057e3fda8ab43de1ba6e5d3bbfddea319661ff32192fb954c6ebe36f295f2260ad9d2385e5c1124dceef915dbdf512"}, @generic={0x27, 0x10, 0x0, "a9df171e02273bafd3919c0b3e838a4d775553fdd5878f9387be9fafda8621bb33802122"}, @generic={0xb4, 0x10, 0x3, "09ec5c8814eb8fd5842cdc51c58069f0de9662aa2603fc7f8ffa46c012184c724046bc19aa9477875a5c522192c9ffd9aaa4b288889ac31d6d5a10f0adeee38e6ca2ce36468c01d0621e13c1204695f59a8301b722cb9134bdfe695dab05c2b1f849f6aa1264a6b15927c0ddee0970a2a90a3aa136c7e42cde52b26335693b2762a478dc1a2330599ed197b6dfe27d1e657a2f11810703fd33958dfab446a9995c4c247b6c550c7b928a5fa680a6a9a226"}, @ptm_cap={0x3}]}, 0x8, [{0xf1, &(0x7f0000000400)=@string={0xf1, 0x3, "e2e9710c68d5207807864a0d53d7e3b20bb0f8d0a7e800431d1122716674f4a4a1d1ed6ea529f2112e9f6997f2c2756b3a9fb5c73aa55104f320006488be9bf233109d3e69d6d218f85480e7a7c6759fafe53c16aadd14c15cad3b7bcfc12d83c6901146c75c0cda512419714cf154c7c10150b8ed5f977975d4f9d83ef9c0efbce1992f39f11086b4cfa206c183b68e72e2892eb60117872a49c83297d178587d8bd49063581ef4a197b8483c9c95e969996b3a698c1bfcb9089306acf03f8acc071f0c70da0636a814353bc8abf6664f6b5de7d34ba976bbf23bbdcd979c4fb28bf7380d0056537664e7695eb71b"}}, {0x77, &(0x7f0000000500)=@string={0x77, 0x3, "db21f518ca936ffd92b31851767756f0ec705855a87ff44380e1ccc134621f63d4dc26caa8fc80baac1c9b5e9ced4d336fa4f81eef235fbfcd0c6fa1a5b3d817cbff20c06c19b7d8088dc9171bfd2b5ca3487675578332fb8b18c6a05660914c5c1b5408697af7879917611a3b8b92556576cc3ec1"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000580)=@lang_id={0x4}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x458}}, {0x101, &(0x7f0000000640)=@string={0x101, 0x3, "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"}}, {0x23, &(0x7f0000000780)=@string={0x23, 0x3, "5fc693f82eeb920f7e3f4fa88f97421280b177a6dd83efc4b95ce706eb8580ce61"}}]})

18.292469616s ago: executing program 2 (id=6627):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
open(0x0, 0x84100, 0x2)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

17.917187833s ago: executing program 1 (id=6628):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x80000001, 0x803, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x68, 0xffff, 0xff, 0x2f, 0x0, @empty, @loopback}}}})
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f00000006c0)={0x20, r4, 0x2, 0x0, &(0x7f00000004c0)=[{}, {}]})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x20, r4, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]})
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c})
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r4, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0xfffffffffffffd39, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000340)={0x18, r4, 0x2, 0x1c})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000003c0)={0x18, r4})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000500)={0x18, r5, 0x4, 0xfffffffffffffffd})
ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000540)={0x8, r5})
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000580)={0x18, r4})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r4})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1003fff, 0x0, &(0x7f0000ffc000)})
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r3, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1})
ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000d00)={0x8, r4})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r6}, 0x18)
sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000013c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000640)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48, 0x8041}, 0x880)
r7 = io_uring_setup(0x2204, &(0x7f0000000000)={0x0, 0xf320, 0x1, 0x2, 0xb9})
io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, &(0x7f00000075c0)={0x0, 0x0, 0x1}, 0x1)

17.821387299s ago: executing program 1 (id=6629):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40020)

17.820887105s ago: executing program 1 (id=6630):
r0 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x102, 0x0)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f00000000c0))
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f0000000040)='4\x00', 0x2)
r2 = gettid()
syz_open_procfs$pagemap(r2, &(0x7f0000000180))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x2f8}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
ftruncate(r3, 0x1)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x19, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1, 0x2}, {0xc, 0x9}, {0x2, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000051}, 0x20000085)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r6 = memfd_create(&(0x7f0000001100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03', 0x3)
ftruncate(r6, 0xffff)
fcntl$addseals(r6, 0x409, 0x7)
r7 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000000c0)=0x1)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x11, 0x0, 0x3}, 0x2c)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r10, 0x0)

17.7276247s ago: executing program 1 (id=6631):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0x1, &(0x7f0000000080))
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$usbfs(0x0, 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1}, 0x40004)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0)
waitid(0x2, 0x0, &(0x7f0000000200), 0x2, &(0x7f0000000300))
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]})
prlimit64(0x0, 0x9, &(0x7f0000000180)={0x7ff, 0x9}, &(0x7f0000000280))
socket$kcm(0x21, 0x2, 0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000002aec000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000c40)={&(0x7f00000000c0)=@xdp={0x2c, 0x8, r6, 0x13}, 0x80, 0x0}, 0x0)

17.420977856s ago: executing program 1 (id=6632):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
io_submit(0x0, 0x0, &(0x7f0000000180))
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES64=r1], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r6 = dup(r5)
getsockname$packet(r6, 0x0, &(0x7f00000000c0))
getpeername$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', r7, 0x29, 0x1, 0x7, 0x10, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x8000, 0x7, 0x60000000, 0x1}})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"})
unshare(0x68060200)

16.545201652s ago: executing program 1 (id=6633):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000100)='0', 0x1)
read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TCFLSH(r0, 0x8924, 0xfffffffdfffffffb)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3)
sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}}, 0x40000)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x3, 0x0, @local}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)

16.024663403s ago: executing program 4 (id=6634):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0x1, &(0x7f0000000080))
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$usbfs(0x0, 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1}, 0x40004)
waitid(0x2, 0x0, &(0x7f0000000200), 0x2, &(0x7f0000000300))
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]})
prlimit64(0x0, 0x9, &(0x7f0000000180)={0x7ff, 0x9}, &(0x7f0000000280))
socket$kcm(0x21, 0x2, 0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000002aec000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000c40)={&(0x7f00000000c0)=@xdp={0x2c, 0x8, r6, 0x13}, 0x80, 0x0}, 0x0)

15.74145132s ago: executing program 4 (id=6635):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44090}, 0x20008000)
sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB="01000000290b0000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x80}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000980)={0x1000, 0x960, 0x500, 0x10, 0xf, 0xc, 0xf, 0x1, {0x9, 0x7f}, {0xffff, 0x5, 0x1}, {0x5, 0x8, 0x1}, {0x3, 0x401, 0x1}, 0x0, 0x0, 0x400, 0x2, 0x1, 0x0, 0x9, 0x431f4bc9, 0x9, 0x5, 0xdd, 0x10000, 0x4, 0x2, 0x2, 0xb})

15.717647727s ago: executing program 4 (id=6636):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
move_pages(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
ioctl$DRM_IOCTL_VERSION(r0, 0xc0406441, &(0x7f00000001c0)={0x88, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x8, 0x80)
ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socket$nl_route(0x10, 0x3, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/37, 0x25}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x2, 0x701d5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r2}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsetxattr$system_posix_acl(0xfffffffffffffffc, &(0x7f0000000580)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000001fd0710000000000400000000000000100003000000000020000300000000"], 0x24, 0x2)
r4 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r5)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
waitid$P_PIDFD(0x3, r7, 0x0, 0x4, 0x0)
process_madvise(r7, 0x0, 0x0, 0x65, 0x0)

5.994534956s ago: executing program 35 (id=6619):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80101, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
r2 = gettid()
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x3ff)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x300, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
syz_io_uring_submit(0x0, 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc})
ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r5, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c4600040001ff7f00000000000003003e00ecffffff940200000000000048000000000000000000000000000000000000000000380001"], 0x78)
close(r5)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64)
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3)
syz_open_dev$tty20(0xc, 0x4, 0x1)

4.502990677s ago: executing program 36 (id=6622):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
open(0x0, 0x84100, 0x2)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.991053127s ago: executing program 37 (id=6627):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
open(0x0, 0x84100, 0x2)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

993.295847ms ago: executing program 38 (id=6633):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000100)='0', 0x1)
read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TCFLSH(r0, 0x8924, 0xfffffffdfffffffb)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3)
sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}}, 0x40000)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x3, 0x0, @local}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)

0s ago: executing program 39 (id=6636):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
move_pages(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
ioctl$DRM_IOCTL_VERSION(r0, 0xc0406441, &(0x7f00000001c0)={0x88, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x8, 0x80)
ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socket$nl_route(0x10, 0x3, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/37, 0x25}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x2, 0x701d5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r2}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsetxattr$system_posix_acl(0xfffffffffffffffc, &(0x7f0000000580)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000001fd0710000000000400000000000000100003000000000020000300000000"], 0x24, 0x2)
r4 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r5)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
waitid$P_PIDFD(0x3, r7, 0x0, 0x4, 0x0)
process_madvise(r7, 0x0, 0x0, 0x65, 0x0)

kernel console output (not intermixed with test programs):

 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2195.062414][T31754] RSP: 002b:00007f0556df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2195.062430][T31754] RAX: ffffffffffffffda RBX: 00007f05591b5fa0 RCX: 00007f0558f8e169
[ 2195.062442][T31754] RDX: 0000200000000040 RSI: 0000000000005403 RDI: 0000000000000003
[ 2195.062452][T31754] RBP: 00007f0556df6090 R08: 0000000000000000 R09: 0000000000000000
[ 2195.062462][T31754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2195.062472][T31754] R13: 0000000000000000 R14: 00007f05591b5fa0 R15: 00007ffd0608f648
[ 2195.062495][T31754]  </TASK>
[ 2195.302531][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2195.624330][T31755] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2195.824422][T31758] overlayfs: conflicting options: nfs_export=on,index=off
[ 2195.830503][T31601] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2195.956467][T31759] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6239'.
[ 2195.961323][T31601] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 2196.169304][T31762] lo speed is unknown, defaulting to 1000
[ 2196.175763][T31762] lo speed is unknown, defaulting to 1000
[ 2196.314764][T31601] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2196.346796][T31601] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2196.399018][T28713] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 2196.446346][T31601] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2196.611738][T28713] usb 7-1: Using ep0 maxpacket: 32
[ 2196.631082][T31601] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2196.640238][T28713] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[ 2196.650834][T28713] usb 7-1: config 0 has no interface number 0
[ 2197.108012][T28713] usb 7-1: config 0 interface 184 has no altsetting 0
[ 2197.117119][T28713] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2197.149160][T28713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2197.157167][T28713] usb 7-1: Product: syz
[ 2197.169790][T28713] usb 7-1: Manufacturer: syz
[ 2197.174394][T28713] usb 7-1: SerialNumber: syz
[ 2197.191992][T28713] usb 7-1: config 0 descriptor??
[ 2197.210232][T28713] smsc75xx v1.0.0
[ 2197.350380][   T30] kauditd_printk_skb: 10 callbacks suppressed
[ 2197.350395][   T30] audit: type=1400 audit(1745386896.814:1611): avc:  denied  { getopt } for  pid=31774 comm="syz.7.6245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 2197.454080][T31776] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6245'.
[ 2197.641465][T31601] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2197.705725][T31601] 8021q: adding VLAN 0 to HW filter on device team0
[ 2197.773404][T23027] Bluetooth: hci4: command 0x0406 tx timeout
[ 2197.784893][T31650] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2197.792033][T31650] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2197.844276][T31650] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2197.850406][T31763] program syz.6.6241 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2197.851402][T31650] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2197.864638][T31763] 9pnet_virtio: no channels available for device syz
[ 2197.888251][T31778] batadv_slave_0: entered promiscuous mode
[ 2197.905081][T31777] batadv_slave_0: left promiscuous mode
[ 2198.006473][T31601] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2198.017288][T31601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2198.217634][T28713] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[ 2198.239843][T31789] veth0_vlan: left promiscuous mode
[ 2198.246366][T31789] veth0_vlan: entered promiscuous mode
[ 2198.272446][T31789] lo speed is unknown, defaulting to 1000
[ 2198.279497][T31789] lo speed is unknown, defaulting to 1000
[ 2198.990372][T28713] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[ 2199.000229][T28713] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 2199.011032][T28713] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 2199.022239][T28713] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 2199.033171][T28713] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 2199.051995][T28713] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[ 2199.074585][T28713] usb 7-1: USB disconnect, device number 10
[ 2199.258689][T31601] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2199.286052][T31803] FAULT_INJECTION: forcing a failure.
[ 2199.286052][T31803] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2199.332098][T31803] CPU: 0 UID: 0 PID: 31803 Comm: syz.6.6253 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2199.332123][T31803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2199.332134][T31803] Call Trace:
[ 2199.332140][T31803]  <TASK>
[ 2199.332147][T31803]  dump_stack_lvl+0x16c/0x1f0
[ 2199.332174][T31803]  should_fail_ex+0x512/0x640
[ 2199.332196][T31803]  _copy_from_user+0x2e/0xd0
[ 2199.332216][T31803]  __sys_bpf+0x21d/0x4d80
[ 2199.332242][T31803]  ? __pfx___sys_bpf+0x10/0x10
[ 2199.332264][T31803]  ? ksys_write+0x190/0x240
[ 2199.332283][T31803]  ? __mutex_unlock_slowpath+0x161/0x6a0
[ 2199.332322][T31803]  ? fput+0x70/0xf0
[ 2199.332341][T31803]  ? ksys_write+0x1b9/0x240
[ 2199.332356][T31803]  ? __pfx_ksys_write+0x10/0x10
[ 2199.332369][T31803]  ? rcu_is_watching+0x12/0xc0
[ 2199.332394][T31803]  __x64_sys_bpf+0x78/0xc0
[ 2199.332416][T31803]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2199.332436][T31803]  do_syscall_64+0xcd/0x260
[ 2199.332458][T31803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2199.332474][T31803] RIP: 0033:0x7fd642d8e169
[ 2199.332487][T31803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2199.332502][T31803] RSP: 002b:00007fd643cd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2199.332518][T31803] RAX: ffffffffffffffda RBX: 00007fd642fb5fa0 RCX: 00007fd642d8e169
[ 2199.332528][T31803] RDX: 0000000000000090 RSI: 0000200000000200 RDI: 0000000000000005
[ 2199.332538][T31803] RBP: 00007fd643cd2090 R08: 0000000000000000 R09: 0000000000000000
[ 2199.332547][T31803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2199.332555][T31803] R13: 0000000000000000 R14: 00007fd642fb5fa0 R15: 00007ffee4c2e628
[ 2199.332576][T31803]  </TASK>
[ 2199.556207][T31800] netlink: 472 bytes leftover after parsing attributes in process `syz.7.6251'.
[ 2200.527720][T31601] veth0_vlan: entered promiscuous mode
[ 2200.668339][T31601] veth1_vlan: entered promiscuous mode
[ 2200.715122][T31829] netlink: 'syz.6.6257': attribute type 10 has an invalid length.
[ 2200.740823][T31828] trusted_key: encrypted_key: keyword 'loadTwÂñyK¾s' not recognized
[ 2200.755483][T31829] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[ 2200.807419][   T30] audit: type=1400 audit(1745386900.244:1612): avc:  denied  { read } for  pid=31827 comm="syz.7.6258" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 2200.887709][   T30] audit: type=1400 audit(1745386900.244:1613): avc:  denied  { open } for  pid=31827 comm="syz.7.6258" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 2200.959477][T31829] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 2201.019038][   T30] audit: type=1400 audit(1745386900.244:1614): avc:  denied  { ioctl } for  pid=31827 comm="syz.7.6258" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 2201.033239][T31829] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[ 2201.447319][T31601] veth0_macvtap: entered promiscuous mode
[ 2201.496411][T31601] veth1_macvtap: entered promiscuous mode
[ 2201.605215][T31601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2201.629574][T31844] FAULT_INJECTION: forcing a failure.
[ 2201.629574][T31844] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2201.639029][T31601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2201.645531][T31844] CPU: 0 UID: 0 PID: 31844 Comm: syz.7.6261 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2201.645552][T31844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2201.645561][T31844] Call Trace:
[ 2201.645566][T31844]  <TASK>
[ 2201.645572][T31844]  dump_stack_lvl+0x16c/0x1f0
[ 2201.645596][T31844]  should_fail_ex+0x512/0x640
[ 2201.645615][T31844]  _copy_to_user+0x32/0xd0
[ 2201.645634][T31844]  simple_read_from_buffer+0xcb/0x170
[ 2201.645659][T31844]  proc_fail_nth_read+0x197/0x270
[ 2201.645682][T31844]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2201.645705][T31844]  ? rw_verify_area+0xcf/0x680
[ 2201.645724][T31844]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2201.645747][T31844]  vfs_read+0x1de/0xc70
[ 2201.645771][T31844]  ? __pfx___mutex_lock+0x10/0x10
[ 2201.645791][T31844]  ? __pfx_vfs_read+0x10/0x10
[ 2201.645823][T31844]  ? __fget_files+0x20e/0x3c0
[ 2201.645845][T31844]  ksys_read+0x12a/0x240
[ 2201.645857][T31844]  ? __pfx_ksys_read+0x10/0x10
[ 2201.645886][T31844]  do_syscall_64+0xcd/0x260
[ 2201.645908][T31844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2201.645923][T31844] RIP: 0033:0x7efc4b38cb7c
[ 2201.645935][T31844] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 2201.645949][T31844] RSP: 002b:00007efc4c221030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2201.645963][T31844] RAX: ffffffffffffffda RBX: 00007efc4b5b5fa0 RCX: 00007efc4b38cb7c
[ 2201.645973][T31844] RDX: 000000000000000f RSI: 00007efc4c2210a0 RDI: 0000000000000004
[ 2201.645982][T31844] RBP: 00007efc4c221090 R08: 0000000000000000 R09: 0000000000000000
[ 2201.645991][T31844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2201.646000][T31844] R13: 0000000000000000 R14: 00007efc4b5b5fa0 R15: 00007ffd1f8d6728
[ 2201.646020][T31844]  </TASK>
[ 2201.731667][T31848] FAULT_INJECTION: forcing a failure.
[ 2201.731667][T31848] name failslab, interval 1, probability 0, space 0, times 0
[ 2201.971634][T31601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2201.982352][T31601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2201.992543][T31601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2202.003495][T31848] CPU: 1 UID: 0 PID: 31848 Comm: syz.7.6263 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2202.003518][T31848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2202.003528][T31848] Call Trace:
[ 2202.003534][T31848]  <TASK>
[ 2202.003541][T31848]  dump_stack_lvl+0x16c/0x1f0
[ 2202.003567][T31848]  should_fail_ex+0x512/0x640
[ 2202.003585][T31848]  ? fs_reclaim_acquire+0xae/0x150
[ 2202.003609][T31848]  ? tomoyo_encode2+0x100/0x3e0
[ 2202.003631][T31848]  should_failslab+0xc2/0x120
[ 2202.003651][T31848]  __kmalloc_noprof+0xd2/0x510
[ 2202.003667][T31848]  ? d_absolute_path+0x136/0x1a0
[ 2202.003692][T31848]  tomoyo_encode2+0x100/0x3e0
[ 2202.003718][T31848]  tomoyo_encode+0x29/0x50
[ 2202.003740][T31848]  tomoyo_realpath_from_path+0x18f/0x6e0
[ 2202.003771][T31848]  tomoyo_path_number_perm+0x245/0x580
[ 2202.003791][T31848]  ? tomoyo_path_number_perm+0x237/0x580
[ 2202.003821][T31848]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2202.003843][T31848]  ? find_held_lock+0x2b/0x80
[ 2202.003886][T31848]  ? find_held_lock+0x2b/0x80
[ 2202.003906][T31848]  ? hook_file_ioctl_common+0x145/0x410
[ 2202.003928][T31848]  ? __fget_files+0x20e/0x3c0
[ 2202.003949][T31848]  security_file_ioctl+0x9b/0x240
[ 2202.003974][T31848]  __x64_sys_ioctl+0xb7/0x200
[ 2202.003999][T31848]  do_syscall_64+0xcd/0x260
[ 2202.004023][T31848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2202.004040][T31848] RIP: 0033:0x7efc4b38e169
[ 2202.004054][T31848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2202.004070][T31848] RSP: 002b:00007efc4c221038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2202.004087][T31848] RAX: ffffffffffffffda RBX: 00007efc4b5b5fa0 RCX: 00007efc4b38e169
[ 2202.004099][T31848] RDX: 0000200000000000 RSI: 00000000c0585609 RDI: 0000000000000003
[ 2202.004109][T31848] RBP: 00007efc4c221090 R08: 0000000000000000 R09: 0000000000000000
[ 2202.004119][T31848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2202.004129][T31848] R13: 0000000000000000 R14: 00007efc4b5b5fa0 R15: 00007ffd1f8d6728
[ 2202.004153][T31848]  </TASK>
[ 2202.004250][T31848] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2202.252351][T31601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2202.359160][T31601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2202.369795][T31601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2202.402253][T31601] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2202.623640][   T30] audit: type=1400 audit(1745386902.064:1615): avc:  denied  { read write } for  pid=31841 comm="syz.6.6260" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 2202.681673][T31601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2202.706588][T31601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2202.769050][   T30] audit: type=1400 audit(1745386902.064:1616): avc:  denied  { open } for  pid=31841 comm="syz.6.6260" path="/69/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 2202.778532][T31601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2202.846066][T31601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2202.874779][T31601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2202.908923][T31601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2202.933673][T31601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2202.944488][T31601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2202.958660][T31601] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2203.062583][T31849] lo speed is unknown, defaulting to 1000
[ 2203.073210][T31601] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2203.089146][T31601] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2203.097837][T31601] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2203.106550][T31601] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2203.166386][T31863] 9pnet_fd: Insufficient options for proto=fd
[ 2203.538491][T31849] lo speed is unknown, defaulting to 1000
[ 2203.707038][T31649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2203.725172][T31649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2203.912068][ T6875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2203.942940][ T6875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2204.029559][T31873] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[ 2204.036092][T31873] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 2204.069241][T31873] vhci_hcd vhci_hcd.0: Device attached
[ 2204.101044][T31874] vhci_hcd: cannot find the pending unlink 2147483647
[ 2204.201015][T31878] FAULT_INJECTION: forcing a failure.
[ 2204.201015][T31878] name failslab, interval 1, probability 0, space 0, times 0
[ 2204.233991][T31878] CPU: 0 UID: 0 PID: 31878 Comm: syz.2.6270 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2204.234015][T31878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2204.234025][T31878] Call Trace:
[ 2204.234031][T31878]  <TASK>
[ 2204.234038][T31878]  dump_stack_lvl+0x16c/0x1f0
[ 2204.234066][T31878]  should_fail_ex+0x512/0x640
[ 2204.234084][T31878]  ? fs_reclaim_acquire+0xae/0x150
[ 2204.234110][T31878]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 2204.234133][T31878]  should_failslab+0xc2/0x120
[ 2204.234152][T31878]  __kmalloc_noprof+0xd2/0x510
[ 2204.234176][T31878]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 2204.234202][T31878]  ? tomoyo_profile+0x47/0x60
[ 2204.234221][T31878]  tomoyo_path_number_perm+0x245/0x580
[ 2204.234240][T31878]  ? tomoyo_path_number_perm+0x237/0x580
[ 2204.234263][T31878]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2204.234285][T31878]  ? find_held_lock+0x2b/0x80
[ 2204.234330][T31878]  ? find_held_lock+0x2b/0x80
[ 2204.234350][T31878]  ? hook_file_ioctl_common+0x145/0x410
[ 2204.234373][T31878]  ? __fget_files+0x20e/0x3c0
[ 2204.234393][T31878]  security_file_ioctl+0x9b/0x240
[ 2204.234418][T31878]  __x64_sys_ioctl+0xb7/0x200
[ 2204.234444][T31878]  do_syscall_64+0xcd/0x260
[ 2204.234470][T31878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2204.234487][T31878] RIP: 0033:0x7f0558f8e169
[ 2204.234501][T31878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2204.234516][T31878] RSP: 002b:00007f0556df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2204.234532][T31878] RAX: ffffffffffffffda RBX: 00007f05591b5fa0 RCX: 00007f0558f8e169
[ 2204.234542][T31878] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 2204.234552][T31878] RBP: 00007f0556df6090 R08: 0000000000000000 R09: 0000000000000000
[ 2204.234562][T31878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2204.234571][T31878] R13: 0000000000000000 R14: 00007f05591b5fa0 R15: 00007ffd0608f648
[ 2204.234595][T31878]  </TASK>
[ 2204.234601][T31878] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2204.327285][T20121] usb 35-1: new high-speed USB device number 3 using vhci_hcd
[ 2204.539019][T23330] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 2204.734311][T23330] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2204.750162][T23330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2204.761791][T23330] usb 2-1: Product: syz
[ 2204.765958][T23330] usb 2-1: Manufacturer: syz
[ 2204.770892][T23330] usb 2-1: SerialNumber: syz
[ 2204.794453][T23330] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2204.810130][   T30] audit: type=1400 audit(1745386904.264:1617): avc:  denied  { firmware_load } for  pid=5874 comm="kworker/1:6" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 2204.813909][ T5874] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2204.989703][   T30] audit: type=1400 audit(1745386904.344:1618): avc:  denied  { map } for  pid=31888 comm="syz.4.6271" path="socket:[140447]" dev="sockfs" ino=140447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 2206.025849][ T5874] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2206.933863][  T971] usb 2-1: USB disconnect, device number 24
[ 2206.945916][ T5874] ath9k_htc: Failed to initialize the device
[ 2206.985917][  T971] usb 2-1: ath9k_htc: USB layer deinitialized
[ 2206.996116][T31874] vhci_hcd: connection reset by peer
[ 2207.093260][T31649] vhci_hcd: stop threads
[ 2207.315383][T31919] 9pnet_fd: Insufficient options for proto=fd
[ 2207.685431][T31649] vhci_hcd: release socket
[ 2207.692025][T31649] vhci_hcd: disconnect device
[ 2209.178263][T31937] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12)
[ 2209.184881][T31937] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 2209.231454][T31937] vhci_hcd vhci_hcd.0: Device attached
[ 2209.290855][T31941] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2209.385487][T31942] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2209.451057][ T5874] vhci_hcd: vhci_device speed not set
[ 2210.145351][T31937] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(16)
[ 2210.151972][T31937] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 2210.163156][T31937] vhci_hcd vhci_hcd.0: Device attached
[ 2210.211550][T31942] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(19)
[ 2210.218168][T31942] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 2210.257313][T20121] vhci_hcd: vhci_device speed not set
[ 2210.263300][ T5874] usb 47-1: new full-speed USB device number 2 using vhci_hcd
[ 2210.286068][T31942] vhci_hcd vhci_hcd.0: Device attached
[ 2211.188521][T31937] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(18)
[ 2211.195157][T31937] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 2211.200537][T31942] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2211.207591][T31960] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2211.350685][T31942] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2211.439361][T31937] vhci_hcd vhci_hcd.0: Device attached
[ 2211.591727][T31952] vhci_hcd: connection closed
[ 2211.594115][T31938] vhci_hcd: connection reset by peer
[ 2211.606906][T31947] vhci_hcd: connection closed
[ 2211.607401][ T6875] vhci_hcd: stop threads
[ 2211.620083][T31944] vhci_hcd: connection closed
[ 2212.049906][ T6875] vhci_hcd: release socket
[ 2212.138535][ T6875] vhci_hcd: disconnect device
[ 2212.147063][ T6875] vhci_hcd: stop threads
[ 2212.151548][ T6875] vhci_hcd: release socket
[ 2212.156073][ T6875] vhci_hcd: disconnect device
[ 2212.209942][ T6875] vhci_hcd: stop threads
[ 2212.228302][ T6875] vhci_hcd: release socket
[ 2212.246935][ T6875] vhci_hcd: disconnect device
[ 2212.337690][ T6875] vhci_hcd: stop threads
[ 2212.342844][ T6875] vhci_hcd: release socket
[ 2212.347280][ T6875] vhci_hcd: disconnect device
[ 2212.987291][T31988] veth0_vlan: entered allmulticast mode
[ 2213.022916][T31988] veth0_vlan: left promiscuous mode
[ 2213.032033][T31988] veth0_vlan: entered promiscuous mode
[ 2213.085048][T31988] lo speed is unknown, defaulting to 1000
[ 2213.092085][T31988] lo speed is unknown, defaulting to 1000
[ 2213.590444][T31983] netlink: 472 bytes leftover after parsing attributes in process `syz.4.6290'.
[ 2214.543409][T31998] rdma_rxe: rxe_newlink: failed to add lo
[ 2214.645356][ T5872] IPVS: starting estimator thread 0...
[ 2214.922003][T32001] IPVS: using max 41 ests per chain, 98400 per kthread
[ 2215.359047][ T5874] vhci_hcd: vhci_device speed not set
[ 2215.694589][T32006] overlayfs: missing 'lowerdir'
[ 2216.067393][T32010] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2216.910534][T32011] syzkaller0: entered promiscuous mode
[ 2216.960486][T32011] syzkaller0: entered allmulticast mode
[ 2217.156989][T32013] ceph: No mds server is up or the cluster is laggy
[ 2217.169501][ T5926] libceph: connect (1)[c::]:6789 error -101
[ 2217.196632][T32022] tipc: Enabling <ib:lo> not permitted
[ 2217.202165][T32022] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[ 2217.226427][ T5926] libceph: mon0 (1)[c::]:6789 connect error
[ 2217.597009][T32028] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64
[ 2217.608530][T32028] audit: out of memory in audit_log_start
[ 2217.891892][T32040] rdma_rxe: rxe_newlink: failed to add lo
[ 2217.944767][ T5926] usb 5-1: new low-speed USB device number 36 using dummy_hcd
[ 2218.009277][T28713] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 2218.226557][ T5926] usb 5-1: descriptor type invalid, skip
[ 2218.232421][T28713] usb 7-1: Using ep0 maxpacket: 16
[ 2218.232551][T32042] netlink: 472 bytes leftover after parsing attributes in process `syz.7.6305'.
[ 2218.237641][ T5926] usb 5-1: descriptor type invalid, skip
[ 2218.268924][ T5926] usb 5-1: descriptor type invalid, skip
[ 2218.271156][T28713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2218.287916][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[ 2218.298273][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2218.301089][ T5874] IPVS: starting estimator thread 0...
[ 2218.308524][T28713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2218.323847][ T5926] usb 5-1: config 0 has no interfaces?
[ 2218.329475][T28713] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2218.342455][T28713] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 2218.351704][T28713] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2218.362875][T28713] usb 7-1: config 0 descriptor??
[ 2218.372020][ T5926] usb 5-1: string descriptor 0 read error: -22
[ 2218.378258][ T5926] usb 5-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.40
[ 2218.389030][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2218.398407][T32039] lo speed is unknown, defaulting to 1000
[ 2218.406581][ T5926] usb 5-1: config 0 descriptor??
[ 2218.416812][T32039] lo speed is unknown, defaulting to 1000
[ 2218.459121][T32044] IPVS: using max 46 ests per chain, 110400 per kthread
[ 2218.907283][T28713] shield 0003:0955:7214.0015: unknown main item tag 0x0
[ 2219.360365][T28713] shield 0003:0955:7214.0015: unknown main item tag 0x0
[ 2219.378394][T28713] shield 0003:0955:7214.0015: unknown main item tag 0x0
[ 2219.404973][T32053] overlayfs: conflicting options: nfs_export=on,index=off
[ 2219.476311][T28713] shield 0003:0955:7214.0015: unknown main item tag 0x0
[ 2219.514110][T28713] shield 0003:0955:7214.0015: unknown main item tag 0x0
[ 2219.535695][ T5926] usb 5-1: USB disconnect, device number 36
[ 2219.549716][T28713] input: HID 0955:7214 Haptics as /devices/virtual/input/input41
[ 2219.761338][T28713] shield 0003:0955:7214.0015: Registered Thunderstrike controller
[ 2219.780277][T28713] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0
[ 2219.874637][T31113] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 2219.886061][T31113] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 2219.916736][T28713] usb 7-1: USB disconnect, device number 11
[ 2219.947076][T31113] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 2219.993521][T32061] lo speed is unknown, defaulting to 1000
[ 2220.005157][T31113] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 2220.013510][T32071] FAULT_INJECTION: forcing a failure.
[ 2220.013510][T32071] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2220.037087][T32071] CPU: 0 UID: 0 PID: 32071 Comm: syz.6.6310 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2220.037103][T32071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2220.037109][T32071] Call Trace:
[ 2220.037113][T32071]  <TASK>
[ 2220.037117][T32071]  dump_stack_lvl+0x16c/0x1f0
[ 2220.037137][T32071]  should_fail_ex+0x512/0x640
[ 2220.037152][T32071]  _copy_from_user+0x2e/0xd0
[ 2220.037165][T32071]  restore_altstack+0x93/0x170
[ 2220.037176][T32071]  ? __pfx_restore_altstack+0x10/0x10
[ 2220.037187][T32071]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2220.037199][T32071]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2220.037213][T32071]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 2220.037225][T32071]  ? set_current_blocked+0xdd/0x120
[ 2220.037237][T32071]  __do_sys_rt_sigreturn+0x13c/0x230
[ 2220.037254][T32071]  ? __pfx___do_sys_rt_sigreturn+0x10/0x10
[ 2220.037273][T32071]  do_syscall_64+0xcd/0x260
[ 2220.037289][T32071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2220.037300][T32071] RIP: 0033:0x7fd642d2a359
[ 2220.037309][T32071] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[ 2220.037319][T32071] RSP: 002b:00007fd643cd1340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f
[ 2220.037329][T32071] RAX: ffffffffffffffda RBX: 00007fd642fb5fa0 RCX: 00007fd642d2a359
[ 2220.037335][T32071] RDX: 00007fd643cd1340 RSI: 00007fd643cd1470 RDI: 0000000000000021
[ 2220.037341][T32071] RBP: 00007fd643cd2090 R08: 0000000000000000 R09: 00000000fffffffc
[ 2220.037348][T32071] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[ 2220.037354][T32071] R13: 0000000000000000 R14: 00007fd642fb5fa0 R15: 00007ffee4c2e628
[ 2220.037366][T32071]  </TASK>
[ 2220.229475][T32061] lo speed is unknown, defaulting to 1000
[ 2221.295908][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 2221.302425][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 2222.979148][T31113] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 2223.533716][T32115] lo speed is unknown, defaulting to 1000
[ 2223.550391][T32115] lo speed is unknown, defaulting to 1000
[ 2223.819197][T31113] usb 2-1: Using ep0 maxpacket: 8
[ 2223.826809][T31113] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 2223.836194][T31113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2223.857714][T31113] usb 2-1: config 0 descriptor??
[ 2224.146354][T32123] mkiss: ax0: crc mode is auto.
[ 2224.803780][T31113] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 2224.922084][T32128] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[ 2225.092407][   T30] audit: type=1400 audit(1745386924.554:1619): avc:  denied  { create } for  pid=32129 comm="syz.4.6327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 2225.119231][   T30] audit: type=1400 audit(1745386924.574:1620): avc:  denied  { sys_admin } for  pid=32129 comm="syz.4.6327" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 2225.205804][T32130] lo speed is unknown, defaulting to 1000
[ 2225.229523][T32130] lo speed is unknown, defaulting to 1000
[ 2225.327996][   T30] audit: type=1400 audit(1745386924.784:1621): avc:  denied  { bind } for  pid=32136 comm="syz.6.6329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2226.695757][T32153] overlayfs: conflicting options: nfs_export=on,index=off
[ 2226.708010][T32153] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 2226.717289][T32153] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 2226.726088][T32153] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 2226.734890][T32153] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 2226.744969][T32153] batman_adv: batadv0: Adding interface: geneve2
[ 2226.751315][T32153] batman_adv: batadv0: Interface activated: geneve2
[ 2226.786018][T32108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6321'.
[ 2226.798769][T32108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6321'.
[ 2226.852203][T32158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2226.933151][T32108] geneve2: entered promiscuous mode
[ 2226.938354][T32108] geneve2: entered allmulticast mode
[ 2226.965235][T32158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2227.064085][T31113] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[ 2227.074468][T31113] asix 2-1:0.0: probe with driver asix failed with error -71
[ 2227.099163][T31113] usb 2-1: USB disconnect, device number 25
[ 2227.208694][T32168] wg1: mtu less than device minimum
[ 2227.214325][T32167] mkiss: ax0: crc mode is auto.
[ 2227.607421][T32174] lo speed is unknown, defaulting to 1000
[ 2227.625867][T32174] lo speed is unknown, defaulting to 1000
[ 2228.958428][T32195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2229.002341][T32196] veth0_vlan: left promiscuous mode
[ 2229.008265][T32196] veth0_vlan: entered promiscuous mode
[ 2229.030761][T32196] lo speed is unknown, defaulting to 1000
[ 2229.068592][T32196] lo speed is unknown, defaulting to 1000
[ 2229.459085][T32203] block nbd2: Device being setup by another task
[ 2229.553952][T32202] block nbd2: shutting down sockets
[ 2229.598215][T32203] nbd2: detected capacity change from 0 to 510
[ 2229.678126][T32208] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6347'.
[ 2229.916537][T32214] mkiss: ax0: crc mode is auto.
[ 2230.704364][T32218] lo speed is unknown, defaulting to 1000
[ 2230.740597][T32218] lo speed is unknown, defaulting to 1000
[ 2230.854808][   T30] audit: type=1400 audit(1745386930.284:1622): avc:  denied  { connect } for  pid=32228 comm="syz.4.6353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2231.257319][T32237] netlink: 472 bytes leftover after parsing attributes in process `syz.6.6355'.
[ 2231.281723][T31113] IPVS: starting estimator thread 0...
[ 2231.379673][T32238] IPVS: using max 79 ests per chain, 189600 per kthread
[ 2232.135817][T32249] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2232.223012][   T30] audit: type=1400 audit(1745386931.654:1623): avc:  denied  { mount } for  pid=32247 comm="syz.4.6360" name="/" dev="configfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 2232.763689][   T30] audit: type=1400 audit(1745386931.654:1624): avc:  denied  { search } for  pid=32247 comm="syz.4.6360" name="/" dev="configfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 2232.786468][   T30] audit: type=1400 audit(1745386931.654:1625): avc:  denied  { read } for  pid=32247 comm="syz.4.6360" name="/" dev="configfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 2232.808679][   T30] audit: type=1400 audit(1745386931.654:1626): avc:  denied  { open } for  pid=32247 comm="syz.4.6360" path="/" dev="configfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 2232.831930][   T30] audit: type=1326 audit(1745386931.664:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32247 comm="syz.4.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2232.856853][   T30] audit: type=1326 audit(1745386931.664:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32247 comm="syz.4.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2232.883707][   T30] audit: type=1326 audit(1745386931.664:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32247 comm="syz.4.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2232.907770][   T30] audit: type=1326 audit(1745386931.674:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32247 comm="syz.4.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2232.931474][   T30] audit: type=1326 audit(1745386931.674:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32247 comm="syz.4.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2233.290102][T32251] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2233.632845][T23027] Bluetooth: hci0: command 0x0406 tx timeout
[ 2234.185104][T32260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6362'.
[ 2234.524642][T32273] overlayfs: conflicting options: nfs_export=on,index=off
[ 2234.651258][T32274] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 2234.784927][T32274] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 2234.794516][T32274] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 2234.804418][T32274] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 2235.348183][T32274] batman_adv: batadv0: Adding interface: geneve3
[ 2235.354655][T32274] batman_adv: batadv0: Interface activated: geneve3
[ 2235.455049][T32281] netlink: 472 bytes leftover after parsing attributes in process `syz.4.6368'.
[ 2236.247150][T32295] veth1_to_bond: entered allmulticast mode
[ 2236.332728][T32296] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2236.344470][T32296] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 2236.560324][T32288] veth1_to_bond: left allmulticast mode
[ 2236.951885][T32300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6373'.
[ 2237.495002][T32309] batadv_slave_0: entered promiscuous mode
[ 2237.922315][T32320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6378'.
[ 2238.164106][T32307] batadv_slave_0: left promiscuous mode
[ 2238.724543][T32335] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6384'.
[ 2240.050793][T32349] overlayfs: conflicting options: nfs_export=on,index=off
[ 2240.239280][ T5872] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 2240.469272][ T5872] usb 2-1: Using ep0 maxpacket: 16
[ 2240.587832][ T5872] usb 2-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config
[ 2240.601357][ T5872] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2240.616756][ T5872] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[ 2240.628133][   T30] kauditd_printk_skb: 21 callbacks suppressed
[ 2240.628146][   T30] audit: type=1400 audit(1745386940.094:1653): avc:  denied  { ioctl } for  pid=32365 comm="syz.4.6391" path="socket:[141462]" dev="sockfs" ino=141462 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 2240.805314][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2240.895197][ T5872] usb 2-1: config 0 descriptor??
[ 2242.239049][T28713] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[ 2242.391768][T32382] batadv_slave_0: entered promiscuous mode
[ 2242.412137][T28713] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2242.423307][T28713] usb 5-1: not running at top speed; connect to a high speed hub
[ 2242.436347][T28713] usb 5-1: config 253 has an invalid interface number: 140 but max is 0
[ 2242.534853][T28713] usb 5-1: config 253 has no interface number 0
[ 2242.545230][T28713] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b
[ 2242.554563][T28713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2242.562622][T28713] usb 5-1: Product: ؤ꒼ﺒ∿衡ᦺ
[ 2242.568050][T28713] usb 5-1: Manufacturer: â°Š
[ 2242.572721][T28713] usb 5-1: SerialNumber: syz
[ 2242.892024][T28713] usbtest 5-1:253.140: Linux gadget zero
[ 2242.953623][T28713] usbtest 5-1:253.140: full-speed {control in/out int-out} tests (+alt)
[ 2242.964834][T28713] usb 5-1: USB disconnect, device number 37
[ 2242.998296][T32379] batadv_slave_0: left promiscuous mode
[ 2243.045668][T20121] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[ 2243.280181][T32397] veth0_vlan: left promiscuous mode
[ 2243.286676][T32397] veth0_vlan: entered promiscuous mode
[ 2243.317154][T32397] lo speed is unknown, defaulting to 1000
[ 2243.324188][T32397] lo speed is unknown, defaulting to 1000
[ 2243.851293][T20121] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 2243.889027][T20121] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2244.109440][T32405] veth0_vlan: left promiscuous mode
[ 2244.118895][T32405] veth0_vlan: entered promiscuous mode
[ 2244.211803][T32405] lo speed is unknown, defaulting to 1000
[ 2244.223113][T32405] lo speed is unknown, defaulting to 1000
[ 2244.615513][T20121] usb 7-1: config 0 descriptor??
[ 2244.622096][T20121] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 2244.790688][ T5874] usb 2-1: USB disconnect, device number 26
[ 2245.181757][T32407] mkiss: ax0: crc mode is auto.
[ 2245.342379][T32411] lo speed is unknown, defaulting to 1000
[ 2245.510941][T32411] lo speed is unknown, defaulting to 1000
[ 2245.940727][T20121] gspca_sonixj: reg_r err -110
[ 2245.956030][T20121] sonixj 7-1:0.0: probe with driver sonixj failed with error -110
[ 2246.584614][T32441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2246.597461][   T30] audit: type=1400 audit(1745386946.044:1654): avc:  denied  { override_creds } for  pid=32445 comm="syz.4.6407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 2246.895445][T32444] lo speed is unknown, defaulting to 1000
[ 2246.902239][T32444] lo speed is unknown, defaulting to 1000
[ 2246.910901][   T30] audit: type=1400 audit(1745386946.364:1655): avc:  denied  { watch watch_reads } for  pid=32452 comm="syz.4.6408" path="/22" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 2246.985699][   T30] audit: type=1400 audit(1745386946.374:1656): avc:  denied  { append } for  pid=32452 comm="syz.4.6408" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 2247.416260][T28713] usb 7-1: USB disconnect, device number 12
[ 2247.719090][T32471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6412'.
[ 2247.744534][   T30] audit: type=1400 audit(1745386947.174:1657): avc:  denied  { ioctl } for  pid=32468 comm="syz.6.6412" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 2247.793200][   T55] Bluetooth: hci4: unexpected event for opcode 0x200c
[ 2249.065180][T32477] mkiss: ax0: crc mode is auto.
[ 2249.483608][T32489] veth0_vlan: left promiscuous mode
[ 2249.493472][T32489] veth0_vlan: entered promiscuous mode
[ 2249.867586][T32489] lo speed is unknown, defaulting to 1000
[ 2249.876133][T32489] lo speed is unknown, defaulting to 1000
[ 2250.569024][T31113] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 2251.028969][T31113] usb 2-1: Using ep0 maxpacket: 8
[ 2251.038390][T31113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 2251.799037][T31113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2251.809844][T31113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 2251.822577][T31113] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82
[ 2251.835303][T31113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2251.843321][T31113] usb 2-1: Product: syz
[ 2251.847540][T31113] usb 2-1: Manufacturer: syz
[ 2251.852275][T31113] usb 2-1: SerialNumber: syz
[ 2251.890110][T31113] usb 2-1: config 0 descriptor??
[ 2252.275125][T28713] usb 2-1: USB disconnect, device number 27
[ 2253.112226][   T30] audit: type=1400 audit(1745386952.564:1658): avc:  denied  { create } for  pid=32520 comm="syz.6.6420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 2253.149701][   T30] audit: type=1400 audit(1745386952.564:1659): avc:  denied  { bind } for  pid=32520 comm="syz.6.6420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 2253.311262][   T30] audit: type=1400 audit(1745386952.764:1660): avc:  denied  { write } for  pid=32526 comm="syz.2.6425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 2253.332416][T28713] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 2253.399030][T31113] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 2253.491930][T28713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2253.505933][T28713] usb 5-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=33.c2
[ 2253.522751][T32532] mkiss: ax0: crc mode is auto.
[ 2253.524746][T28713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2253.575131][T28713] usb 5-1: config 0 descriptor??
[ 2253.719790][T31113] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2253.730436][T31113] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 2253.746957][T28713] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 2253.756948][T28713] usb 5-1: MIDIStreaming interface descriptor not found
[ 2253.776333][T31113] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2253.801714][T31113] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 2253.825494][T31113] usb 7-1: SerialNumber: syz
[ 2253.838871][T31113] usb 7-1: bad CDC descriptors
[ 2253.968632][T32537] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2254.038843][ T5874] usb 7-1: USB disconnect, device number 13
[ 2254.095405][T23027] Bluetooth: hci2: command 0x0406 tx timeout
[ 2254.519875][T32541] veth0_vlan: left promiscuous mode
[ 2254.525933][T32541] veth0_vlan: entered promiscuous mode
[ 2254.543475][T32541] lo speed is unknown, defaulting to 1000
[ 2254.549903][T32541] lo speed is unknown, defaulting to 1000
[ 2256.211616][T31113] usb 5-1: USB disconnect, device number 38
[ 2257.029228][T32558] netlink: 472 bytes leftover after parsing attributes in process `syz.4.6432'.
[ 2257.044191][   T30] audit: type=1326 audit(1745386955.944:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2257.107085][T32558] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 2257.164593][T32554] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 2257.198392][  T971] IPVS: starting estimator thread 0...
[ 2257.219062][T32559] Invalid logical block size (1)
[ 2257.249366][   T30] audit: type=1326 audit(1745386955.944:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2257.359091][T32562] IPVS: using max 38 ests per chain, 91200 per kthread
[ 2257.479126][   T30] audit: type=1326 audit(1745386955.944:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2257.759063][   T30] audit: type=1326 audit(1745386955.944:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2257.821348][   T30] audit: type=1326 audit(1745386955.944:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2257.849703][   T30] audit: type=1326 audit(1745386955.944:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2257.856911][T32574] fuse: Bad value for 'user_id'
[ 2257.885479][T32574] fuse: Bad value for 'user_id'
[ 2258.125722][T31113] Process accounting resumed
[ 2258.135226][   T30] audit: type=1326 audit(1745386955.944:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2258.290605][T31113] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 2258.463100][T32582] loop6: detected capacity change from 0 to 63
[ 2258.523980][   T30] audit: type=1326 audit(1745386955.944:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2258.597950][T31113] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2258.616605][T31113] usb 7-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=33.c2
[ 2258.630192][T31113] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2258.636826][   T30] audit: type=1326 audit(1745386955.954:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2258.639999][T31113] usb 7-1: config 0 descriptor??
[ 2258.665599][   T30] audit: type=1326 audit(1745386955.954:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2258.739295][   T30] audit: type=1326 audit(1745386955.954:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2258.763034][   T30] audit: type=1326 audit(1745386955.954:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2258.789088][   T30] audit: type=1326 audit(1745386955.954:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2258.847492][   T30] audit: type=1400 audit(1745386957.254:1674): avc:  denied  { setopt } for  pid=32571 comm="syz.2.6437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2258.918810][   T30] audit: type=1400 audit(1745386957.934:1675): avc:  denied  { map } for  pid=32573 comm="syz.1.6439" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 2258.980603][T31113] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 2258.987798][T31113] usb 7-1: MIDIStreaming interface descriptor not found
[ 2259.037604][   T30] audit: type=1400 audit(1745386957.934:1676): avc:  denied  { execute } for  pid=32573 comm="syz.1.6439" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 2259.121234][T32598] veth0_vlan: left promiscuous mode
[ 2259.127175][T32598] veth0_vlan: entered promiscuous mode
[ 2259.149466][T32598] lo speed is unknown, defaulting to 1000
[ 2259.155804][T32598] lo speed is unknown, defaulting to 1000
[ 2259.389001][ T5874] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 2259.411507][ T5872] usb 7-1: USB disconnect, device number 14
[ 2259.513669][T32606] overlayfs: conflicting options: nfs_export=on,index=off
[ 2259.569212][ T5874] usb 5-1: Using ep0 maxpacket: 16
[ 2259.577128][T32606] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 2259.581048][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2259.586664][T32606] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 2259.606605][T32606] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 2259.606709][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 2259.627523][T32606] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 2259.656377][T32607] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6444'.
[ 2259.661377][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2259.722582][T32606] batman_adv: batadv0: Adding interface: geneve2
[ 2259.729020][T32606] batman_adv: batadv0: Interface activated: geneve2
[ 2259.767493][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2259.919229][ T5874] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[ 2260.034136][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2260.062179][ T5874] usb 5-1: config 0 descriptor??
[ 2260.076339][T32600] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2260.133204][ T5874] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input42
[ 2260.869049][T31113] usb 3-1: new low-speed USB device number 25 using dummy_hcd
[ 2261.003749][ T5874] usb 5-1: USB disconnect, device number 39
[ 2261.003898][    C0] pxrc 5-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19
[ 2261.171794][T31113] usb 3-1: device descriptor read/64, error -71
[ 2261.313810][T31920] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 2261.449248][T31113] usb 3-1: new low-speed USB device number 26 using dummy_hcd
[ 2261.506958][T31920] usb 2-1: Using ep0 maxpacket: 16
[ 2261.572034][T31920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2261.642485][T31920] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[ 2261.743065][T31113] usb 3-1: device descriptor read/64, error -71
[ 2261.765417][T32622] lo speed is unknown, defaulting to 1000
[ 2261.786362][T31920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2261.814030][T32622] lo speed is unknown, defaulting to 1000
[ 2261.845294][T31920] usb 2-1: config 0 descriptor??
[ 2261.859390][T31113] usb usb3-port1: attempt power cycle
[ 2261.871122][T32624] lo speed is unknown, defaulting to 1000
[ 2262.044072][T32632] veth0_vlan: entered allmulticast mode
[ 2262.122090][T32632] veth0_vlan: left promiscuous mode
[ 2262.132578][T32632] veth0_vlan: entered promiscuous mode
[ 2262.269204][T32632] lo speed is unknown, defaulting to 1000
[ 2262.542510][T32624] lo speed is unknown, defaulting to 1000
[ 2262.627161][T31920] apple 0003:05AC:024B.0016: unexpected long global item
[ 2262.643324][T31920] apple 0003:05AC:024B.0016: parse failed
[ 2262.649144][T31113] usb 3-1: new low-speed USB device number 27 using dummy_hcd
[ 2262.658064][T31920] apple 0003:05AC:024B.0016: probe with driver apple failed with error -22
[ 2262.771047][T31113] usb 3-1: device descriptor read/8, error -71
[ 2262.784578][T32632] lo speed is unknown, defaulting to 1000
[ 2262.892782][ T5872] usb 2-1: USB disconnect, device number 28
[ 2263.139602][T31113] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[ 2263.260636][T31113] usb 3-1: device descriptor read/8, error -71
[ 2263.412481][T31113] usb usb3-port1: unable to enumerate USB device
[ 2263.793191][T32640] mkiss: ax0: crc mode is auto.
[ 2263.917528][T32652] IPv6: sit1: Disabled Multicast RS
[ 2265.563541][T32661] Set syz1 is full, maxelem 65536 reached
[ 2266.275357][   T30] audit: type=1326 audit(1745386965.734:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32672 comm="syz.7.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2266.362254][   T30] audit: type=1326 audit(1745386965.734:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32672 comm="syz.7.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2266.686877][   T30] audit: type=1326 audit(1745386965.734:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32672 comm="syz.7.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2266.710663][   T30] audit: type=1326 audit(1745386965.734:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32672 comm="syz.7.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2266.738329][   T30] audit: type=1326 audit(1745386965.734:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32672 comm="syz.7.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2266.771485][   T30] audit: type=1326 audit(1745386965.734:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32672 comm="syz.7.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2266.795085][   T30] audit: type=1326 audit(1745386965.764:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32672 comm="syz.7.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2266.819288][   T30] audit: type=1326 audit(1745386965.764:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32672 comm="syz.7.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2266.843920][T32684] Invalid logical block size (1)
[ 2267.063833][   T30] audit: type=1326 audit(1745386966.284:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32672 comm="syz.7.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2267.089466][   T30] audit: type=1326 audit(1745386966.284:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32672 comm="syz.7.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4b38e169 code=0x7ffc0000
[ 2267.093425][T32692] syz.4.6463: attempt to access beyond end of device
[ 2267.093425][T32692] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 2267.167383][T32688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6464'.
[ 2268.709625][T32707] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6466'.
[ 2268.762493][T32707] bridge_slave_1: left allmulticast mode
[ 2268.768190][T32707] bridge_slave_1: left promiscuous mode
[ 2268.776084][T32707] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2270.055144][T32707] bridge_slave_0: left allmulticast mode
[ 2270.061466][T32707] bridge_slave_0: left promiscuous mode
[ 2270.266143][T32707] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2271.625321][T32713] Falling back ldisc for ptm2.
[ 2274.214656][T32746] Set syz1 is full, maxelem 65536 reached
[ 2274.274424][T32755] lo speed is unknown, defaulting to 1000
[ 2274.286128][T32755] lo speed is unknown, defaulting to 1000
[ 2274.849011][T28713] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 2275.034419][T28713] usb 7-1: Using ep0 maxpacket: 16
[ 2275.143780][T28713] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2275.181236][T28713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2275.216955][T28713] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2275.259079][T28713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2275.276822][T28713] usb 7-1: Product: syz
[ 2275.289044][T28713] usb 7-1: Manufacturer: syz
[ 2275.293650][T28713] usb 7-1: SerialNumber: syz
[ 2275.300258][T28713] usb 7-1: config 0 descriptor??
[ 2275.313331][T28713] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2275.339076][T28713] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[ 2275.618036][  T312] mkiss: ax0: crc mode is auto.
[ 2276.671782][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 2276.671796][   T30] audit: type=1400 audit(1745386976.134:1689): avc:  denied  { append } for  pid=32764 comm="syz.6.6483" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 2276.701199][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2276.816138][T28713] em28xx 7-1:0.0: chip ID is em2874
[ 2277.198722][  T327] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6488'.
[ 2277.309987][  T319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6483'.
[ 2277.389304][  T319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6483'.
[ 2277.597948][  T314] xt_CT: No such helper "snmp_trap"
[ 2279.167712][T28713] usb 7-1: USB disconnect, device number 15
[ 2279.183426][T28713] em28xx 7-1:0.0: Disconnecting em28xx
[ 2279.205656][T28713] em28xx 7-1:0.0: Freeing device
[ 2279.419120][ T5874] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 2279.679095][ T5874] usb 5-1: Using ep0 maxpacket: 32
[ 2280.389039][    T9] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[ 2280.529009][    T9] usb 3-1: device descriptor read/64, error -71
[ 2280.636536][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2280.656088][ T5874] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2280.665217][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2280.668673][  T373] mkiss: ax0: crc mode is auto.
[ 2280.680700][ T5874] usb 5-1: config 0 descriptor??
[ 2280.778997][    T9] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[ 2280.819752][ T5874] hub 5-1:0.0: USB hub found
[ 2281.009043][    T9] usb 3-1: device descriptor read/64, error -71
[ 2281.048683][  T381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6503'.
[ 2281.062738][   T30] audit: type=1400 audit(1745386980.504:1690): avc:  denied  { read } for  pid=348 comm="syz.4.6494" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 2281.120521][ T5874] hub 5-1:0.0: 1 port detected
[ 2281.121170][   T30] audit: type=1400 audit(1745386980.504:1691): avc:  denied  { open } for  pid=348 comm="syz.4.6494" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 2281.152780][    T9] usb usb3-port1: attempt power cycle
[ 2281.178477][  T349] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2281.198768][  T349] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 2281.237253][  T381] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=381 comm=syz.1.6503
[ 2281.254568][  T349] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2281.264541][  T349] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 2281.296403][  T349] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2281.304258][  T389] openvswitch: netlink: IP tunnel dst address not specified
[ 2281.309050][  T349] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2281.352063][  T349] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2281.358128][  T349] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 2281.373128][  T349] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2281.384525][  T349] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 2281.440973][   T30] audit: type=1400 audit(1745386980.894:1692): avc:  denied  { execute } for  pid=390 comm="syz.6.6507" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 2281.474902][  T349] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 2281.549070][    T9] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[ 2281.579435][    T9] usb 3-1: device descriptor read/8, error -71
[ 2281.630126][ T5874] hub 5-1:0.0: hub_hub_status failed (err = -71)
[ 2281.636752][ T5874] hub 5-1:0.0: config failed, can't get hub status (err -71)
[ 2282.322673][    T9] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[ 2282.363954][ T5874] usbhid 5-1:0.0: can't add hid device: -71
[ 2282.369468][    T9] usb 3-1: device descriptor read/8, error -71
[ 2282.370880][ T5874] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 2282.410074][ T5874] usb 5-1: USB disconnect, device number 40
[ 2282.609258][   T30] audit: type=1400 audit(1745386981.944:1693): avc:  denied  { ioctl } for  pid=401 comm="syz.7.6509" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 2282.611091][    T9] usb usb3-port1: unable to enumerate USB device
[ 2282.782486][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 2282.818742][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 2283.149131][   T55] Bluetooth: hci4: command 0x0406 tx timeout
[ 2283.292987][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[ 2283.369140][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[ 2283.375204][T28870] Bluetooth: hci0: command 0x0406 tx timeout
[ 2283.449028][   T55] Bluetooth: hci1: command 0x0405 tx timeout
[ 2284.171211][  T410] Set syz1 is full, maxelem 65536 reached
[ 2284.451716][  T419] mkiss: ax0: crc mode is auto.
[ 2284.476200][  T422] tmpfs: Unknown parameter ''
[ 2285.099111][   T30] audit: type=1326 audit(1745386984.544:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=412 comm="syz.2.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0558f8e169 code=0x7ffc0000
[ 2285.188216][   T30] audit: type=1326 audit(1745386984.544:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=412 comm="syz.2.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0558f8e169 code=0x7ffc0000
[ 2285.212327][   T55] Bluetooth: hci4: command 0x0406 tx timeout
[ 2285.299154][   T30] audit: type=1326 audit(1745386984.544:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=412 comm="syz.2.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f0558f8e169 code=0x7ffc0000
[ 2285.358391][  T426] Invalid logical block size (1)
[ 2285.373363][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[ 2285.379044][   T30] audit: type=1326 audit(1745386984.544:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=412 comm="syz.2.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0558f8e169 code=0x7ffc0000
[ 2285.422435][  T429] use of bytesused == 0 is deprecated and will be removed in the future,
[ 2285.430966][  T429] use the actual size instead.
[ 2285.450919][T28870] Bluetooth: hci0: command 0x0406 tx timeout
[ 2285.456929][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[ 2285.529311][   T55] Bluetooth: hci1: command 0x0405 tx timeout
[ 2286.019226][   T30] audit: type=1326 audit(1745386984.544:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=412 comm="syz.2.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0558f8e169 code=0x7ffc0000
[ 2286.042872][   T30] audit: type=1326 audit(1745386984.544:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=412 comm="syz.2.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0558f8e169 code=0x7ffc0000
[ 2286.069637][   T30] audit: type=1326 audit(1745386984.544:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=412 comm="syz.2.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0558f8e169 code=0x7ffc0000
[ 2286.093245][   T30] audit: type=1326 audit(1745386984.784:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=412 comm="syz.2.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0558f8e169 code=0x7ffc0000
[ 2286.117505][   T30] audit: type=1326 audit(1745386984.784:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=412 comm="syz.2.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0558f8e169 code=0x7ffc0000
[ 2286.167033][  T436] overlayfs: conflicting options: nfs_export=on,index=off
[ 2286.171366][  T430] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 2286.182951][  T430] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 2286.191740][  T430] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 2286.200641][  T430] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 2286.210843][  T430] batman_adv: batadv0: Adding interface: geneve2
[ 2286.217173][  T430] batman_adv: batadv0: Interface activated: geneve2
[ 2286.678862][  T451] netlink: 'syz.6.6525': attribute type 1 has an invalid length.
[ 2286.981499][  T451] bond1: entered promiscuous mode
[ 2286.986865][  T451] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2287.005569][  T454] bond1: (slave bridge1): making interface the new active one
[ 2287.013138][  T454] bridge1: entered promiscuous mode
[ 2287.019643][  T454] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 2287.364408][  T462] FAULT_INJECTION: forcing a failure.
[ 2287.364408][  T462] name failslab, interval 1, probability 0, space 0, times 0
[ 2287.377118][  T462] CPU: 1 UID: 0 PID: 462 Comm: syz.4.6523 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2287.377141][  T462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2287.377151][  T462] Call Trace:
[ 2287.377158][  T462]  <TASK>
[ 2287.377165][  T462]  dump_stack_lvl+0x16c/0x1f0
[ 2287.377192][  T462]  should_fail_ex+0x512/0x640
[ 2287.377210][  T462]  ? __kmalloc_noprof+0xbf/0x510
[ 2287.377229][  T462]  ? alloc_pipe_info+0x1ec/0x590
[ 2287.377246][  T462]  should_failslab+0xc2/0x120
[ 2287.377265][  T462]  __kmalloc_noprof+0xd2/0x510
[ 2287.377281][  T462]  ? alloc_pipe_info+0x12b/0x590
[ 2287.377303][  T462]  alloc_pipe_info+0x1ec/0x590
[ 2287.377324][  T462]  splice_direct_to_actor+0x77d/0xa30
[ 2287.377352][  T462]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2287.377382][  T462]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2287.377409][  T462]  ? __pfx___might_resched+0x10/0x10
[ 2287.377436][  T462]  do_splice_direct+0x174/0x240
[ 2287.377462][  T462]  ? __pfx_do_splice_direct+0x10/0x10
[ 2287.377487][  T462]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2287.377513][  T462]  ? bpf_lsm_file_permission+0x9/0x10
[ 2287.377536][  T462]  ? security_file_permission+0x71/0x210
[ 2287.377560][  T462]  ? rw_verify_area+0xcf/0x680
[ 2287.377586][  T462]  do_sendfile+0xafd/0xe50
[ 2287.377615][  T462]  ? __pfx_do_sendfile+0x10/0x10
[ 2287.377639][  T462]  ? __fget_files+0x20e/0x3c0
[ 2287.377661][  T462]  __x64_sys_sendfile64+0x1d8/0x220
[ 2287.377679][  T462]  ? ksys_write+0x1b9/0x240
[ 2287.377693][  T462]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2287.377711][  T462]  ? rcu_is_watching+0x12/0xc0
[ 2287.377738][  T462]  do_syscall_64+0xcd/0x260
[ 2287.377764][  T462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2287.377781][  T462] RIP: 0033:0x7ff764d8e169
[ 2287.377795][  T462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2287.377811][  T462] RSP: 002b:00007ff765b13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2287.377827][  T462] RAX: ffffffffffffffda RBX: 00007ff764fb6160 RCX: 00007ff764d8e169
[ 2287.377839][  T462] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[ 2287.377848][  T462] RBP: 00007ff765b13090 R08: 0000000000000000 R09: 0000000000000000
[ 2287.377857][  T462] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001
[ 2287.377868][  T462] R13: 0000000000000000 R14: 00007ff764fb6160 R15: 00007ffca8ef6858
[ 2287.377891][  T462]  </TASK>
[ 2287.618382][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2287.653820][   T55] Bluetooth: hci1: command 0x0405 tx timeout
[ 2287.706357][   T30] kauditd_printk_skb: 16 callbacks suppressed
[ 2287.706372][   T30] audit: type=1400 audit(1745386987.164:1719): avc:  denied  { ioctl } for  pid=460 comm="syz.1.6526" path="socket:[144688]" dev="sockfs" ino=144688 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 2287.740257][   T30] audit: type=1326 audit(1745386987.164:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=438 comm="syz.2.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0558f8e169 code=0x7ffc0000
[ 2287.768183][   T30] audit: type=1326 audit(1745386987.164:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=438 comm="syz.2.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0558f8e169 code=0x7ffc0000
[ 2287.791596][  T463] Invalid logical block size (1)
[ 2287.811583][   T30] audit: type=1400 audit(1745386987.204:1722): avc:  denied  { append } for  pid=465 comm="syz.7.6527" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2287.848504][  T468] mkiss: ax0: crc mode is auto.
[ 2288.155789][  T471] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6529'.
[ 2288.725942][   T30] audit: type=1326 audit(1745386988.184:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=476 comm="syz.4.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2288.867694][   T30] audit: type=1326 audit(1745386988.244:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=476 comm="syz.4.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2288.903814][   T30] audit: type=1326 audit(1745386988.244:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=476 comm="syz.4.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2288.937563][   T30] audit: type=1326 audit(1745386988.244:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=476 comm="syz.4.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2288.961288][   T30] audit: type=1326 audit(1745386988.244:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=476 comm="syz.4.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2288.987773][   T30] audit: type=1326 audit(1745386988.354:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=476 comm="syz.4.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2289.061922][  T485] Invalid logical block size (1)
[ 2289.384072][  T492] 9pnet_fd: Insufficient options for proto=fd
[ 2290.023186][  T493] overlayfs: conflicting options: nfs_export=on,index=off
[ 2290.891889][  T511] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6538'.
[ 2290.909350][  T511] fuse: Bad value for 'fd'
[ 2291.336893][  T512] 9pnet_fd: Insufficient options for proto=fd
[ 2293.276642][T28713] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[ 2294.032493][T28713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2294.050521][T28713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2294.060371][T28713] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 2294.082351][  T534] mkiss: ax0: crc mode is auto.
[ 2294.088838][T28713] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2294.393629][T28713] usb 7-1: config 0 descriptor??
[ 2294.456095][  T532] lo speed is unknown, defaulting to 1000
[ 2294.475730][  T532] lo speed is unknown, defaulting to 1000
[ 2294.954190][T28713] usbhid 7-1:0.0: can't add hid device: -71
[ 2294.960177][T28713] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2295.008725][T28713] usb 7-1: USB disconnect, device number 16
[ 2295.114703][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 2295.114720][   T30] audit: type=1400 audit(1745386994.554:1736): avc:  denied  { mounton } for  pid=544 comm="syz.2.6545" path="mnt:[4026532819]" dev="nsfs" ino=4026532819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 2295.204274][   T30] audit: type=1400 audit(1745386994.564:1737): avc:  denied  { read } for  pid=544 comm="syz.2.6545" dev="sockfs" ino=144081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2295.724636][  T552] pim6reg: entered allmulticast mode
[ 2295.928004][  T563] veth0_vlan: left promiscuous mode
[ 2295.934546][  T563] veth0_vlan: entered promiscuous mode
[ 2296.016496][  T563] lo speed is unknown, defaulting to 1000
[ 2296.042018][  T563] lo speed is unknown, defaulting to 1000
[ 2296.660247][  T573] overlayfs: conflicting options: nfs_export=on,index=off
[ 2297.953947][  T585] mkiss: ax0: crc mode is auto.
[ 2298.730673][   T30] audit: type=1400 audit(1745386998.184:1738): avc:  denied  { setattr } for  pid=566 comm="syz.2.6550" name="ttyS3" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[ 2298.981066][  T600] FAULT_INJECTION: forcing a failure.
[ 2298.981066][  T600] name failslab, interval 1, probability 0, space 0, times 0
[ 2299.023211][  T600] CPU: 1 UID: 0 PID: 600 Comm: syz.1.6557 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2299.023236][  T600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2299.023246][  T600] Call Trace:
[ 2299.023252][  T600]  <TASK>
[ 2299.023258][  T600]  dump_stack_lvl+0x16c/0x1f0
[ 2299.023284][  T600]  should_fail_ex+0x512/0x640
[ 2299.023302][  T600]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 2299.023322][  T600]  should_failslab+0xc2/0x120
[ 2299.023341][  T600]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 2299.023358][  T600]  ? __alloc_skb+0x2b2/0x380
[ 2299.023381][  T600]  __alloc_skb+0x2b2/0x380
[ 2299.023399][  T600]  ? __pfx___alloc_skb+0x10/0x10
[ 2299.023422][  T600]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 2299.023450][  T600]  netlink_alloc_large_skb+0x69/0x130
[ 2299.023474][  T600]  netlink_sendmsg+0x6a1/0xdd0
[ 2299.023501][  T600]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2299.023532][  T600]  ____sys_sendmsg+0xa95/0xc70
[ 2299.023557][  T600]  ? copy_msghdr_from_user+0x10a/0x160
[ 2299.023576][  T600]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2299.023611][  T600]  ___sys_sendmsg+0x134/0x1d0
[ 2299.023632][  T600]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2299.023680][  T600]  __sys_sendmsg+0x16d/0x220
[ 2299.023709][  T600]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2299.023736][  T600]  ? rcu_is_watching+0x12/0xc0
[ 2299.023764][  T600]  do_syscall_64+0xcd/0x260
[ 2299.023789][  T600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2299.023806][  T600] RIP: 0033:0x7f48e9f8e169
[ 2299.023820][  T600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2299.023836][  T600] RSP: 002b:00007f48ead12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2299.023851][  T600] RAX: ffffffffffffffda RBX: 00007f48ea1b5fa0 RCX: 00007f48e9f8e169
[ 2299.023862][  T600] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000004
[ 2299.023872][  T600] RBP: 00007f48ead12090 R08: 0000000000000000 R09: 0000000000000000
[ 2299.023882][  T600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2299.023892][  T600] R13: 0000000000000000 R14: 00007f48ea1b5fa0 R15: 00007ffce55e6d98
[ 2299.023914][  T600]  </TASK>
[ 2299.265367][  T605] FAULT_INJECTION: forcing a failure.
[ 2299.265367][  T605] name failslab, interval 1, probability 0, space 0, times 0
[ 2299.278120][  T605] CPU: 1 UID: 0 PID: 605 Comm: syz.2.6560 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2299.278143][  T605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2299.278153][  T605] Call Trace:
[ 2299.278159][  T605]  <TASK>
[ 2299.278166][  T605]  dump_stack_lvl+0x16c/0x1f0
[ 2299.278193][  T605]  should_fail_ex+0x512/0x640
[ 2299.278211][  T605]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 2299.278233][  T605]  should_failslab+0xc2/0x120
[ 2299.278252][  T605]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 2299.278269][  T605]  ? __alloc_skb+0x2b2/0x380
[ 2299.278292][  T605]  __alloc_skb+0x2b2/0x380
[ 2299.278311][  T605]  ? __pfx___alloc_skb+0x10/0x10
[ 2299.278329][  T605]  ? selinux_socket_getpeersec_dgram+0x1a4/0x370
[ 2299.278351][  T605]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[ 2299.278379][  T605]  netlink_alloc_large_skb+0x69/0x130
[ 2299.278404][  T605]  netlink_sendmsg+0x6a1/0xdd0
[ 2299.278431][  T605]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2299.278463][  T605]  ____sys_sendmsg+0xa95/0xc70
[ 2299.278488][  T605]  ? copy_msghdr_from_user+0x10a/0x160
[ 2299.278508][  T605]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2299.278544][  T605]  ___sys_sendmsg+0x134/0x1d0
[ 2299.278565][  T605]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2299.278616][  T605]  __sys_sendmsg+0x16d/0x220
[ 2299.278636][  T605]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2299.278664][  T605]  ? rcu_is_watching+0x12/0xc0
[ 2299.278691][  T605]  do_syscall_64+0xcd/0x260
[ 2299.278715][  T605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2299.278732][  T605] RIP: 0033:0x7f0558f8e169
[ 2299.278746][  T605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2299.278761][  T605] RSP: 002b:00007f0556df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2299.278778][  T605] RAX: ffffffffffffffda RBX: 00007f05591b5fa0 RCX: 00007f0558f8e169
[ 2299.278789][  T605] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000004
[ 2299.278799][  T605] RBP: 00007f0556df6090 R08: 0000000000000000 R09: 0000000000000000
[ 2299.278809][  T605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2299.278820][  T605] R13: 0000000000000000 R14: 00007f05591b5fa0 R15: 00007ffd0608f648
[ 2299.278842][  T605]  </TASK>
[ 2299.500832][  T606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6561'.
[ 2300.517831][  T623] FAULT_INJECTION: forcing a failure.
[ 2300.517831][  T623] name failslab, interval 1, probability 0, space 0, times 0
[ 2300.660245][  T623] CPU: 0 UID: 0 PID: 623 Comm: syz.2.6565 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2300.660273][  T623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2300.660284][  T623] Call Trace:
[ 2300.660290][  T623]  <TASK>
[ 2300.660297][  T623]  dump_stack_lvl+0x16c/0x1f0
[ 2300.660325][  T623]  should_fail_ex+0x512/0x640
[ 2300.660343][  T623]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 2300.660363][  T623]  should_failslab+0xc2/0x120
[ 2300.660380][  T623]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 2300.660396][  T623]  ? __alloc_skb+0x2b2/0x380
[ 2300.660420][  T623]  __alloc_skb+0x2b2/0x380
[ 2300.660439][  T623]  ? __pfx___alloc_skb+0x10/0x10
[ 2300.660461][  T623]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 2300.660490][  T623]  netlink_alloc_large_skb+0x69/0x130
[ 2300.660514][  T623]  netlink_sendmsg+0x6a1/0xdd0
[ 2300.660541][  T623]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2300.660574][  T623]  ____sys_sendmsg+0xa95/0xc70
[ 2300.660601][  T623]  ? copy_msghdr_from_user+0x10a/0x160
[ 2300.660621][  T623]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2300.660658][  T623]  ___sys_sendmsg+0x134/0x1d0
[ 2300.660680][  T623]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2300.660732][  T623]  __sys_sendmsg+0x16d/0x220
[ 2300.660753][  T623]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2300.660782][  T623]  ? rcu_is_watching+0x12/0xc0
[ 2300.660809][  T623]  do_syscall_64+0xcd/0x260
[ 2300.660834][  T623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2300.660851][  T623] RIP: 0033:0x7f0558f8e169
[ 2300.660865][  T623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2300.660881][  T623] RSP: 002b:00007f0556dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2300.660898][  T623] RAX: ffffffffffffffda RBX: 00007f05591b6080 RCX: 00007f0558f8e169
[ 2300.660909][  T623] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[ 2300.660920][  T623] RBP: 00007f0556dd5090 R08: 0000000000000000 R09: 0000000000000000
[ 2300.660930][  T623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2300.660939][  T623] R13: 0000000000000001 R14: 00007f05591b6080 R15: 00007ffd0608f648
[ 2300.660962][  T623]  </TASK>
[ 2301.023185][  T633] FAULT_INJECTION: forcing a failure.
[ 2301.023185][  T633] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2301.036301][  T633] CPU: 0 UID: 0 PID: 633 Comm: syz.1.6567 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2301.036325][  T633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2301.036334][  T633] Call Trace:
[ 2301.036341][  T633]  <TASK>
[ 2301.036348][  T633]  dump_stack_lvl+0x16c/0x1f0
[ 2301.036374][  T633]  should_fail_ex+0x512/0x640
[ 2301.036396][  T633]  _copy_from_user+0x2e/0xd0
[ 2301.036417][  T633]  copy_msghdr_from_user+0x98/0x160
[ 2301.036438][  T633]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 2301.036465][  T633]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[ 2301.036493][  T633]  ___sys_sendmsg+0xfe/0x1d0
[ 2301.036515][  T633]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2301.036567][  T633]  __sys_sendmsg+0x16d/0x220
[ 2301.036588][  T633]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2301.036624][  T633]  do_syscall_64+0xcd/0x260
[ 2301.036649][  T633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2301.036666][  T633] RIP: 0033:0x7f48e9f8e169
[ 2301.036680][  T633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2301.036696][  T633] RSP: 002b:00007f48e7dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2301.036712][  T633] RAX: ffffffffffffffda RBX: 00007f48ea1b6160 RCX: 00007f48e9f8e169
[ 2301.036724][  T633] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[ 2301.036734][  T633] RBP: 00007f48e7dd5090 R08: 0000000000000000 R09: 0000000000000000
[ 2301.036744][  T633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2301.036754][  T633] R13: 0000000000000000 R14: 00007f48ea1b6160 R15: 00007ffce55e6d98
[ 2301.036777][  T633]  </TASK>
[ 2301.299246][  T630] lo speed is unknown, defaulting to 1000
[ 2301.312984][  T630] lo speed is unknown, defaulting to 1000
[ 2301.445441][   T30] audit: type=1400 audit(1745387000.904:1739): avc:  denied  { read } for  pid=628 comm="syz.6.6568" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 2301.539690][   T30] audit: type=1400 audit(1745387000.994:1740): avc:  denied  { open } for  pid=628 comm="syz.6.6568" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 2301.638347][  T634] lo speed is unknown, defaulting to 1000
[ 2301.647359][  T640] random: crng reseeded on system resumption
[ 2301.654166][   T30] audit: type=1400 audit(1745387001.104:1741): avc:  denied  { append } for  pid=639 comm="syz.1.6571" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 2302.072643][  T644] mkiss: ax0: crc mode is auto.
[ 2302.315100][  T634] lo speed is unknown, defaulting to 1000
[ 2303.758898][  T678] FAULT_INJECTION: forcing a failure.
[ 2303.758898][  T678] name failslab, interval 1, probability 0, space 0, times 0
[ 2303.775384][  T678] CPU: 1 UID: 0 PID: 678 Comm: syz.4.6579 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2303.775407][  T678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2303.775417][  T678] Call Trace:
[ 2303.775422][  T678]  <TASK>
[ 2303.775429][  T678]  dump_stack_lvl+0x16c/0x1f0
[ 2303.775456][  T678]  should_fail_ex+0x512/0x640
[ 2303.775472][  T678]  ? __kmalloc_noprof+0xbf/0x510
[ 2303.775490][  T678]  ? bpf_test_init.isra.0+0x9e/0x140
[ 2303.775509][  T678]  should_failslab+0xc2/0x120
[ 2303.775527][  T678]  __kmalloc_noprof+0xd2/0x510
[ 2303.775543][  T678]  ? __lock_acquire+0x5ca/0x1ba0
[ 2303.775561][  T678]  bpf_test_init.isra.0+0x9e/0x140
[ 2303.775582][  T678]  bpf_prog_test_run_xdp+0x4f0/0x1540
[ 2303.775611][  T678]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 2303.775633][  T678]  ? __might_fault+0x70/0x190
[ 2303.775654][  T678]  ? fput+0x70/0xf0
[ 2303.775673][  T678]  ? __bpf_prog_get+0xa0/0x290
[ 2303.775684][  T678]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 2303.775698][  T678]  __sys_bpf+0x1485/0x4d80
[ 2303.775713][  T678]  ? __pfx___sys_bpf+0x10/0x10
[ 2303.775727][  T678]  ? ksys_write+0x190/0x240
[ 2303.775738][  T678]  ? __mutex_unlock_slowpath+0x161/0x6a0
[ 2303.775761][  T678]  ? fput+0x70/0xf0
[ 2303.775772][  T678]  ? ksys_write+0x1b9/0x240
[ 2303.775780][  T678]  ? __pfx_ksys_write+0x10/0x10
[ 2303.775792][  T678]  __x64_sys_bpf+0x78/0xc0
[ 2303.775805][  T678]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2303.775819][  T678]  do_syscall_64+0xcd/0x260
[ 2303.775835][  T678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2303.775846][  T678] RIP: 0033:0x7ff764d8e169
[ 2303.775855][  T678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2303.775865][  T678] RSP: 002b:00007ff765b55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2303.775875][  T678] RAX: ffffffffffffffda RBX: 00007ff764fb5fa0 RCX: 00007ff764d8e169
[ 2303.775882][  T678] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 2303.775894][  T678] RBP: 00007ff765b55090 R08: 0000000000000000 R09: 0000000000000000
[ 2303.775900][  T678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2303.775906][  T678] R13: 0000000000000000 R14: 00007ff764fb5fa0 R15: 00007ffca8ef6858
[ 2303.775919][  T678]  </TASK>
[ 2304.003524][  T971] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 2304.328980][  T971] usb 2-1: Using ep0 maxpacket: 16
[ 2304.367240][  T971] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 2305.261818][  T680] bridge0: entered promiscuous mode
[ 2305.267051][  T680] bridge0: entered allmulticast mode
[ 2305.296812][  T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2305.359907][  T971] usb 2-1: config 0 descriptor??
[ 2305.384433][  T971] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 2305.446887][  T677] lo speed is unknown, defaulting to 1000
[ 2305.471185][  T687] FAULT_INJECTION: forcing a failure.
[ 2305.471185][  T687] name failslab, interval 1, probability 0, space 0, times 0
[ 2305.486363][  T687] CPU: 0 UID: 0 PID: 687 Comm: syz.4.6582 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2305.486387][  T687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2305.486397][  T687] Call Trace:
[ 2305.486406][  T687]  <TASK>
[ 2305.486413][  T687]  dump_stack_lvl+0x16c/0x1f0
[ 2305.486441][  T687]  should_fail_ex+0x512/0x640
[ 2305.486459][  T687]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 2305.486481][  T687]  should_failslab+0xc2/0x120
[ 2305.486500][  T687]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 2305.486517][  T687]  ? __alloc_skb+0x2b2/0x380
[ 2305.486540][  T687]  __alloc_skb+0x2b2/0x380
[ 2305.486558][  T687]  ? __pfx___alloc_skb+0x10/0x10
[ 2305.486579][  T687]  ? down_write+0x14d/0x200
[ 2305.486608][  T687]  alloc_skb_with_frags+0xe0/0x860
[ 2305.486637][  T687]  sock_alloc_send_pskb+0x7fb/0x990
[ 2305.486664][  T687]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 2305.486685][  T687]  ? find_held_lock+0x2b/0x80
[ 2305.486707][  T687]  ? dccp_sendmsg+0x2da/0xd10
[ 2305.486728][  T687]  ? rcu_is_watching+0x12/0xc0
[ 2305.486747][  T687]  ? __local_bh_enable_ip+0xa4/0x120
[ 2305.486774][  T687]  dccp_sendmsg+0x2f8/0xd10
[ 2305.486797][  T687]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[ 2305.486824][  T687]  ? __pfx_dccp_sendmsg+0x10/0x10
[ 2305.486847][  T687]  ? __import_iovec+0x1c8/0x660
[ 2305.486866][  T687]  ? __might_fault+0xe3/0x190
[ 2305.486888][  T687]  ? __might_fault+0x13b/0x190
[ 2305.486905][  T687]  ? __pfx_dccp_sendmsg+0x10/0x10
[ 2305.486927][  T687]  inet_sendmsg+0x119/0x140
[ 2305.486944][  T687]  ____sys_sendmsg+0x973/0xc70
[ 2305.486969][  T687]  ? copy_msghdr_from_user+0x10a/0x160
[ 2305.486989][  T687]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2305.487018][  T687]  ? __pfx__kstrtoull+0x10/0x10
[ 2305.487047][  T687]  ___sys_sendmsg+0x134/0x1d0
[ 2305.487069][  T687]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2305.487101][  T687]  ? find_held_lock+0x2b/0x80
[ 2305.487137][  T687]  __sys_sendmmsg+0x200/0x420
[ 2305.487160][  T687]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 2305.487189][  T687]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2305.487221][  T687]  ? fput+0x70/0xf0
[ 2305.487240][  T687]  ? ksys_write+0x1b9/0x240
[ 2305.487255][  T687]  ? __pfx_ksys_write+0x10/0x10
[ 2305.487269][  T687]  ? rcu_is_watching+0x12/0xc0
[ 2305.487293][  T687]  __x64_sys_sendmmsg+0x9c/0x100
[ 2305.487312][  T687]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2305.487333][  T687]  do_syscall_64+0xcd/0x260
[ 2305.487358][  T687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2305.487374][  T687] RIP: 0033:0x7ff764d8e169
[ 2305.487388][  T687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2305.487404][  T687] RSP: 002b:00007ff765b55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2305.487420][  T687] RAX: ffffffffffffffda RBX: 00007ff764fb5fa0 RCX: 00007ff764d8e169
[ 2305.487431][  T687] RDX: 0000000000000002 RSI: 0000200000003b00 RDI: 0000000000000004
[ 2305.487441][  T687] RBP: 00007ff765b55090 R08: 0000000000000000 R09: 0000000000000000
[ 2305.487451][  T687] R10: 0000000060008841 R11: 0000000000000246 R12: 0000000000000001
[ 2305.487460][  T687] R13: 0000000000000000 R14: 00007ff764fb5fa0 R15: 00007ffca8ef6858
[ 2305.487483][  T687]  </TASK>
[ 2305.808986][  T677] lo speed is unknown, defaulting to 1000
[ 2305.840180][  T690] mkiss: ax0: crc mode is auto.
[ 2305.950192][  T971] gspca_sonixj: reg_w1 err -110
[ 2305.955074][  T971] sonixj 2-1:0.0: probe with driver sonixj failed with error -110
[ 2306.549085][   T30] audit: type=1326 audit(1745387005.944:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.4.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2306.637699][   T30] audit: type=1326 audit(1745387005.944:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.4.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2307.134420][   T30] audit: type=1326 audit(1745387005.944:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.4.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2307.261079][   T30] audit: type=1326 audit(1745387005.944:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.4.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2307.288597][   T30] audit: type=1326 audit(1745387005.944:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.4.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2307.315736][   T30] audit: type=1326 audit(1745387005.944:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.4.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2307.323930][  T706] autofs: Unknown parameter ';„O¯9w´”EËÐM<¤:v@-¡€†pEÑðy^Äa%×÷¼Xøfº ^8_í}.bPœhÊ<}(à€¡®*UG™‰j�†QT}ú›ó¢�ï("Üù¶?¾µ!
ë'
[ 2307.341791][   T30] audit: type=1326 audit(1745387005.944:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.4.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2307.354611][  T696] Invalid logical block size (1)
[ 2307.380921][   T30] audit: type=1326 audit(1745387005.944:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.4.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2307.404808][   T30] audit: type=1326 audit(1745387006.004:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.4.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2307.477392][   T30] audit: type=1326 audit(1745387006.004:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.4.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff764d8e169 code=0x7ffc0000
[ 2307.563925][  T710] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6590'.
[ 2307.765637][  T722] mkiss: ax0: crc mode is auto.
[ 2307.861719][  T971] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 2308.639150][  T971] usb 5-1: Using ep0 maxpacket: 16
[ 2308.675112][  T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2308.758960][  T971] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2308.781640][  T971] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2308.791002][  T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2308.801242][  T971] usb 5-1: config 0 descriptor??
[ 2308.865189][  T731] FAULT_INJECTION: forcing a failure.
[ 2308.865189][  T731] name failslab, interval 1, probability 0, space 0, times 0
[ 2308.873307][T31920] usb 2-1: USB disconnect, device number 29
[ 2308.883910][  T731] CPU: 0 UID: 0 PID: 731 Comm: syz.6.6595 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2308.883931][  T731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2308.883942][  T731] Call Trace:
[ 2308.883948][  T731]  <TASK>
[ 2308.883955][  T731]  dump_stack_lvl+0x16c/0x1f0
[ 2308.883982][  T731]  should_fail_ex+0x512/0x640
[ 2308.884000][  T731]  ? __kmalloc_cache_noprof+0x57/0x3e0
[ 2308.884028][  T731]  should_failslab+0xc2/0x120
[ 2308.884047][  T731]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 2308.884073][  T731]  ? kstrdup_quotable_cmdline+0x52/0x210
[ 2308.884101][  T731]  kstrdup_quotable_cmdline+0x52/0x210
[ 2308.884127][  T731]  __report_access+0x4b/0x3c0
[ 2308.884145][  T731]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2308.884168][  T731]  task_work_run+0x14d/0x240
[ 2308.884189][  T731]  ? __pfx_task_work_run+0x10/0x10
[ 2308.884221][  T731]  ? trace_irq_enable.constprop.0+0x2f/0x120
[ 2308.884244][  T731]  syscall_exit_to_user_mode+0x27b/0x2a0
[ 2308.884267][  T731]  do_syscall_64+0xda/0x260
[ 2308.884291][  T731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2308.884307][  T731] RIP: 0033:0x7fd642d8e169
[ 2308.884321][  T731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2308.884337][  T731] RSP: 002b:00007fd643cb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065
[ 2308.884353][  T731] RAX: ffffffffffffffff RBX: 00007fd642fb6080 RCX: 00007fd642d8e169
[ 2308.884364][  T731] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010
[ 2308.884374][  T731] RBP: 00007fd643cb1090 R08: 0000000000000000 R09: 0000000000000000
[ 2308.884384][  T731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2308.884394][  T731] R13: 0000000000000001 R14: 00007fd642fb6080 R15: 00007ffee4c2e628
[ 2308.884417][  T731]  </TASK>
[ 2308.885769][  T731] ptrace attach of "(null)"[30218] was attempted by "./syz-executor exec"[731]
[ 2309.331766][  T733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=733 comm=syz.2.6596
[ 2309.353734][  T733] bridge0: port 3(syz_tun) entered blocking state
[ 2309.365237][  T733] bridge0: port 3(syz_tun) entered disabled state
[ 2309.374068][  T733] syz_tun: entered allmulticast mode
[ 2309.409040][  T733] syz_tun: entered promiscuous mode
[ 2309.446830][  T737] ptrace attach of "./syz-executor exec"[30651] was attempted by "./syz-executor exec"[737]
[ 2309.702597][  T733] bridge0: port 3(syz_tun) entered blocking state
[ 2309.709152][  T733] bridge0: port 3(syz_tun) entered forwarding state
[ 2309.982109][  T745] hub 9-0:1.0: USB hub found
[ 2309.982771][  T745] hub 9-0:1.0: 1 port detected
[ 2310.667823][  T750] block device autoloading is deprecated and will be removed.
[ 2310.999561][  T747] md: md2 stopped.
[ 2311.207240][  T752] FAULT_INJECTION: forcing a failure.
[ 2311.207240][  T752] name failslab, interval 1, probability 0, space 0, times 0
[ 2311.207269][  T752] CPU: 1 UID: 0 PID: 752 Comm: syz.7.6600 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2311.207291][  T752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2311.207302][  T752] Call Trace:
[ 2311.207307][  T752]  <TASK>
[ 2311.207315][  T752]  dump_stack_lvl+0x16c/0x1f0
[ 2311.207342][  T752]  should_fail_ex+0x512/0x640
[ 2311.207360][  T752]  ? fs_reclaim_acquire+0xae/0x150
[ 2311.207386][  T752]  ? tomoyo_encode2+0x100/0x3e0
[ 2311.207408][  T752]  should_failslab+0xc2/0x120
[ 2311.207427][  T752]  __kmalloc_noprof+0xd2/0x510
[ 2311.207444][  T752]  ? d_absolute_path+0x136/0x1a0
[ 2311.207471][  T752]  tomoyo_encode2+0x100/0x3e0
[ 2311.207497][  T752]  tomoyo_encode+0x29/0x50
[ 2311.207519][  T752]  tomoyo_realpath_from_path+0x18f/0x6e0
[ 2311.207550][  T752]  tomoyo_path_number_perm+0x245/0x580
[ 2311.207570][  T752]  ? tomoyo_path_number_perm+0x237/0x580
[ 2311.207593][  T752]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2311.207616][  T752]  ? find_held_lock+0x2b/0x80
[ 2311.207660][  T752]  ? find_held_lock+0x2b/0x80
[ 2311.207679][  T752]  ? hook_file_ioctl_common+0x145/0x410
[ 2311.207702][  T752]  ? __fget_files+0x20e/0x3c0
[ 2311.207723][  T752]  security_file_ioctl+0x9b/0x240
[ 2311.207748][  T752]  __x64_sys_ioctl+0xb7/0x200
[ 2311.207774][  T752]  do_syscall_64+0xcd/0x260
[ 2311.207799][  T752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2311.207821][  T752] RIP: 0033:0x7efc4b38e169
[ 2311.207835][  T752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2311.207851][  T752] RSP: 002b:00007efc4c1df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2311.207868][  T752] RAX: ffffffffffffffda RBX: 00007efc4b5b6160 RCX: 00007efc4b38e169
[ 2311.207879][  T752] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003
[ 2311.207889][  T752] RBP: 00007efc4c1df090 R08: 0000000000000000 R09: 0000000000000000
[ 2311.207899][  T752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2311.207909][  T752] R13: 0000000000000000 R14: 00007efc4b5b6160 R15: 00007ffd1f8d6728
[ 2311.207932][  T752]  </TASK>
[ 2311.207946][  T752] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2311.208085][  T752] hub 9-0:1.0: USB hub found
[ 2311.208318][  T752] hub 9-0:1.0: 1 port detected
[ 2311.303647][  T971] usbhid 5-1:0.0: can't add hid device: -71
[ 2311.972849][  T971] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 2311.983965][  T971] usb 5-1: USB disconnect, device number 41
[ 2312.186678][  T774] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6605'.
[ 2312.279134][T31113] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 2313.738998][T31113] usb 3-1: Using ep0 maxpacket: 8
[ 2313.748226][T31113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 2313.760707][T31113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2313.770931][T31113] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2313.781091][T31113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64
[ 2313.792601][T31113] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 2313.802065][T31113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2314.188898][  T784] mkiss: ax0: crc mode is auto.
[ 2314.424686][  T788] kvm: pic: level sensitive irq not supported
[ 2314.424995][  T788] kvm: pic: non byte read
[ 2314.438621][  T788] kvm: pic: non byte read
[ 2314.445134][  T788] kvm: pic: non byte read
[ 2314.455239][  T788] kvm: pic: non byte read
[ 2314.573036][  T792] FAULT_INJECTION: forcing a failure.
[ 2314.573036][  T792] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2314.588940][  T792] CPU: 0 UID: 0 PID: 792 Comm: syz.1.6610 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2314.588963][  T792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2314.588973][  T792] Call Trace:
[ 2314.588979][  T792]  <TASK>
[ 2314.588985][  T792]  dump_stack_lvl+0x16c/0x1f0
[ 2314.589012][  T792]  should_fail_ex+0x512/0x640
[ 2314.589034][  T792]  _copy_to_user+0x32/0xd0
[ 2314.589055][  T792]  simple_read_from_buffer+0xcb/0x170
[ 2314.589082][  T792]  proc_fail_nth_read+0x197/0x270
[ 2314.589106][  T792]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2314.589132][  T792]  ? rw_verify_area+0xcf/0x680
[ 2314.589152][  T792]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2314.589177][  T792]  vfs_read+0x1de/0xc70
[ 2314.589207][  T792]  ? __pfx___mutex_lock+0x10/0x10
[ 2314.589230][  T792]  ? __pfx_vfs_read+0x10/0x10
[ 2314.589261][  T792]  ? __fget_files+0x20e/0x3c0
[ 2314.589284][  T792]  ksys_read+0x12a/0x240
[ 2314.589299][  T792]  ? __pfx_ksys_read+0x10/0x10
[ 2314.589322][  T792]  ? rcu_is_watching+0x12/0xc0
[ 2314.589350][  T792]  do_syscall_64+0xcd/0x260
[ 2314.589375][  T792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2314.589392][  T792] RIP: 0033:0x7f48e9f8cb7c
[ 2314.589405][  T792] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 2314.589421][  T792] RSP: 002b:00007f48e7df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2314.589437][  T792] RAX: ffffffffffffffda RBX: 00007f48ea1b6080 RCX: 00007f48e9f8cb7c
[ 2314.589448][  T792] RDX: 000000000000000f RSI: 00007f48e7df60a0 RDI: 0000000000000009
[ 2314.589458][  T792] RBP: 00007f48e7df6090 R08: 0000000000000000 R09: 0000000000000000
[ 2314.589468][  T792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2314.589478][  T792] R13: 0000000000000000 R14: 00007f48ea1b6080 R15: 00007ffce55e6d98
[ 2314.589501][  T792]  </TASK>
[ 2315.835123][  T810] FAULT_INJECTION: forcing a failure.
[ 2315.835123][  T810] name failslab, interval 1, probability 0, space 0, times 0
[ 2315.848284][  T810] CPU: 0 UID: 0 PID: 810 Comm: syz.6.6614 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2315.848307][  T810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2315.848316][  T810] Call Trace:
[ 2315.848320][  T810]  <TASK>
[ 2315.848325][  T810]  dump_stack_lvl+0x16c/0x1f0
[ 2315.848345][  T810]  should_fail_ex+0x512/0x640
[ 2315.848359][  T810]  should_failslab+0xc2/0x120
[ 2315.848371][  T810]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 2315.848389][  T810]  ? sel_netport_sid+0x5b1/0xbe0
[ 2315.848405][  T810]  sel_netport_sid+0x5b1/0xbe0
[ 2315.848421][  T810]  selinux_socket_connect_helper.isra.0+0x399/0x550
[ 2315.848436][  T810]  ? __pfx_selinux_socket_connect_helper.isra.0+0x10/0x10
[ 2315.848450][  T810]  ? irqentry_exit+0x3b/0x90
[ 2315.848465][  T810]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2315.848482][  T810]  ? selinux_sctp_bind_connect+0x147/0x2c0
[ 2315.848496][  T810]  ? __sanitizer_cov_trace_switch+0x34/0x90
[ 2315.848518][  T810]  selinux_sctp_bind_connect+0x24b/0x2c0
[ 2315.848533][  T810]  security_sctp_bind_connect+0x238/0x260
[ 2315.848552][  T810]  sctp_sendmsg+0x15c9/0x1ee0
[ 2315.848563][  T810]  ? avc_has_perm+0x11a/0x1c0
[ 2315.848576][  T810]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 2315.848590][  T810]  ? __pfx_sock_has_perm+0x10/0x10
[ 2315.848603][  T810]  ? __might_fault+0xe3/0x190
[ 2315.848618][  T810]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 2315.848629][  T810]  inet_sendmsg+0x119/0x140
[ 2315.848640][  T810]  __sys_sendto+0x431/0x510
[ 2315.848652][  T810]  ? __pfx___sys_sendto+0x10/0x10
[ 2315.848674][  T810]  ? ksys_write+0x1b9/0x240
[ 2315.848683][  T810]  ? __pfx_ksys_write+0x10/0x10
[ 2315.848694][  T810]  __x64_sys_sendto+0xe0/0x1c0
[ 2315.848705][  T810]  ? do_syscall_64+0x91/0x260
[ 2315.848718][  T810]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2315.848731][  T810]  do_syscall_64+0xcd/0x260
[ 2315.848746][  T810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2315.848812][  T810] RIP: 0033:0x7fd642d8e169
[ 2315.848826][  T810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2315.848839][  T810] RSP: 002b:00007fd643cb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 2315.848850][  T810] RAX: ffffffffffffffda RBX: 00007fd642fb6080 RCX: 00007fd642d8e169
[ 2315.848856][  T810] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000006
[ 2315.848862][  T810] RBP: 00007fd643cb1090 R08: 0000200000000400 R09: 000000000000001c
[ 2315.848869][  T810] R10: 0000000006004081 R11: 0000000000000246 R12: 0000000000000001
[ 2315.848875][  T810] R13: 0000000000000000 R14: 00007fd642fb6080 R15: 00007ffee4c2e628
[ 2315.848888][  T810]  </TASK>
[ 2316.737648][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 2316.737666][   T30] audit: type=1400 audit(1745387016.184:1756): avc:  denied  { connect } for  pid=815 comm="syz.2.6617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 2316.825208][   T30] audit: type=1400 audit(1745387016.284:1757): avc:  denied  { bind } for  pid=815 comm="syz.2.6617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 2316.847709][  T809] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2316.866942][   T30] audit: type=1400 audit(1745387016.294:1758): avc:  denied  { listen } for  pid=815 comm="syz.2.6617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 2317.082593][  T824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6617'.
[ 2317.913306][  T828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6620'.
[ 2318.018210][  T830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6621'.
[ 2319.183152][   T30] audit: type=1326 audit(1745387018.644:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.2.6624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0558f8e169 code=0x0
[ 2319.215325][   T30] audit: type=1326 audit(1745387018.674:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e9f8e169 code=0x7ffc0000
[ 2319.215443][   T30] audit: type=1326 audit(1745387018.674:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e9f8e169 code=0x7ffc0000
[ 2319.215640][   T30] audit: type=1326 audit(1745387018.674:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f48e9f8e169 code=0x7ffc0000
[ 2319.215734][   T30] audit: type=1326 audit(1745387018.674:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e9f8e169 code=0x7ffc0000
[ 2319.215834][   T30] audit: type=1326 audit(1745387018.674:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e9f8e169 code=0x7ffc0000
[ 2319.215943][   T30] audit: type=1326 audit(1745387018.674:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.1.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48e9f8e169 code=0x7ffc0000
[ 2319.299002][  T848] Invalid logical block size (1)
[ 2320.401123][  T859] netlink: 472 bytes leftover after parsing attributes in process `syz.1.6630'.
[ 2320.403706][  T859] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 2320.985161][  T866] veth0_vlan: left promiscuous mode
[ 2320.988028][  T866] veth0_vlan: entered promiscuous mode
[ 2321.079834][  T866] lo speed is unknown, defaulting to 1000
[ 2321.081604][  T866] lo speed is unknown, defaulting to 1000
[ 2332.278502][T28870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2332.279594][T28870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2332.281868][T28870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2332.282923][T28870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2332.283407][T28870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2332.305196][  T887] lo speed is unknown, defaulting to 1000
[ 2332.305806][  T887] lo speed is unknown, defaulting to 1000
[ 2332.447106][  T887] chnl_net:caif_netlink_parms(): no params data found
[ 2332.485958][  T887] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2332.486030][  T887] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2332.486094][  T887] bridge_slave_0: entered allmulticast mode
[ 2332.486777][  T887] bridge_slave_0: entered promiscuous mode
[ 2332.487889][  T887] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2332.487951][  T887] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2332.488015][  T887] bridge_slave_1: entered allmulticast mode
[ 2332.488695][  T887] bridge_slave_1: entered promiscuous mode
[ 2332.505767][  T887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2332.507508][  T887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2332.524010][  T887] team0: Port device team_slave_0 added
[ 2332.525993][  T887] team0: Port device team_slave_1 added
[ 2332.539178][  T887] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2332.539191][  T887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2332.539213][  T887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2332.540795][  T887] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2332.540807][  T887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2332.540827][  T887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2332.563409][  T887] hsr_slave_0: entered promiscuous mode
[ 2332.563830][  T887] hsr_slave_1: entered promiscuous mode
[ 2332.564107][  T887] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2332.564124][  T887] Cannot create hsr debugfs directory
[ 2333.767234][T28870] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2333.768240][T28870] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2333.769370][T28870] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2333.775356][T28870] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2333.775851][T28870] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2334.329011][   T55] Bluetooth: hci5: command tx timeout
[ 2335.270937][T28870] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2335.274734][T28870] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2335.275463][T28870] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2335.276208][T28870] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2335.276705][T28870] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2335.849144][   T55] Bluetooth: hci6: command tx timeout
[ 2336.419157][   T55] Bluetooth: hci5: command tx timeout
[ 2337.280516][T28870] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 2337.284188][T28870] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 2337.285154][T28870] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 2337.285920][T28870] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 2337.286404][T28870] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 2337.289198][T28870] Bluetooth: hci7: command tx timeout
[ 2337.939167][   T55] Bluetooth: hci6: command tx timeout
[ 2338.266284][T28870] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 2338.268289][T28870] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 2338.269161][T28870] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 2338.273670][T28870] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 2338.274199][T28870] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 2338.498998][   T55] Bluetooth: hci5: command tx timeout
[ 2339.369110][   T55] Bluetooth: hci7: command tx timeout
[ 2339.369149][T28870] Bluetooth: hci8: command tx timeout
[ 2340.009098][T28870] Bluetooth: hci6: command tx timeout
[ 2340.329097][T28870] Bluetooth: hci9: command tx timeout
[ 2340.569121][T28870] Bluetooth: hci5: command tx timeout
[ 2341.449048][T28870] Bluetooth: hci7: command tx timeout
[ 2341.459046][T28870] Bluetooth: hci8: command tx timeout
[ 2342.089256][T28870] Bluetooth: hci6: command tx timeout
[ 2342.409056][T28870] Bluetooth: hci9: command tx timeout
[ 2343.529144][T28870] Bluetooth: hci7: command tx timeout
[ 2343.529180][T28870] Bluetooth: hci8: command tx timeout
[ 2344.173754][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.173804][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 2344.489014][   T55] Bluetooth: hci9: command tx timeout
[ 2345.609032][   T55] Bluetooth: hci8: command tx timeout
[ 2346.569127][   T55] Bluetooth: hci9: command tx timeout
[ 2392.445363][T28870] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 2392.446170][T28870] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 2392.448011][T28870] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 2392.448784][T28870] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 2392.449886][T28870] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 2393.823116][T28870] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 2393.823840][T28870] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 2393.825051][T28870] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 2393.825816][T28870] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 2393.826312][T28870] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 2394.489126][T28870] Bluetooth: hci10: command tx timeout
[ 2395.320371][   T55] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 2395.322876][   T55] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 2395.323558][   T55] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 2395.324841][   T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 2395.325814][   T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 2395.849100][   T55] Bluetooth: hci11: command tx timeout
[ 2396.578964][   T55] Bluetooth: hci10: command tx timeout
[ 2397.330397][T28870] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 2397.331550][T28870] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 2397.332310][T28870] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 2397.333174][T28870] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 2397.334201][T28870] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 2397.369190][   T55] Bluetooth: hci12: command tx timeout
[ 2397.929040][   T55] Bluetooth: hci11: command tx timeout
[ 2398.649017][   T55] Bluetooth: hci10: command tx timeout
[ 2398.824403][T28870] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 2398.826500][T28870] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 2398.827224][T28870] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 2398.827978][T28870] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 2398.828460][T28870] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 2399.378993][   T55] Bluetooth: hci13: command tx timeout
[ 2399.448966][   T55] Bluetooth: hci12: command tx timeout
[ 2400.018984][   T55] Bluetooth: hci11: command tx timeout
[ 2400.729004][   T55] Bluetooth: hci10: command tx timeout
[ 2400.889120][   T55] Bluetooth: hci14: command tx timeout
[ 2401.449056][   T55] Bluetooth: hci13: command tx timeout
[ 2401.529083][   T55] Bluetooth: hci12: command tx timeout
[ 2402.089070][   T55] Bluetooth: hci11: command tx timeout
[ 2402.968996][   T55] Bluetooth: hci14: command tx timeout
[ 2403.532095][   T55] Bluetooth: hci13: command tx timeout
[ 2403.609059][   T55] Bluetooth: hci12: command tx timeout
[ 2405.049092][   T55] Bluetooth: hci14: command tx timeout
[ 2405.611008][   T55] Bluetooth: hci13: command tx timeout
[ 2405.614795][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 2405.614840][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 2407.129048][   T55] Bluetooth: hci14: command tx timeout
[ 2453.051248][T28870] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 2453.053523][T28870] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 2453.054457][T28870] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 2453.055191][T28870] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 2453.055713][T28870] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 2453.894518][T28870] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[ 2453.896421][T28870] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[ 2453.897598][T28870] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[ 2453.898788][T28870] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[ 2453.901407][T28870] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[ 2455.129227][T28870] Bluetooth: hci15: command tx timeout
[ 2455.905474][   T55] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[ 2455.906497][   T55] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[ 2455.907685][   T55] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[ 2455.908685][   T55] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[ 2455.911466][   T55] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[ 2455.929121][T28870] Bluetooth: hci16: command tx timeout
[ 2457.219145][  T951] Bluetooth: hci15: command tx timeout
[ 2457.394150][  T950] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[ 2457.395557][  T950] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[ 2457.396525][  T950] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[ 2457.397780][  T950] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[ 2457.398279][  T950] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[ 2457.929027][  T951] Bluetooth: hci17: command tx timeout
[ 2458.019053][  T951] Bluetooth: hci16: command tx timeout
[ 2458.888958][  T951] Bluetooth: hci7: command 0x0406 tx timeout
[ 2458.894581][  T950] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[ 2458.901041][  T950] Bluetooth: hci5: command 0x0406 tx timeout
[ 2458.901096][  T950] Bluetooth: hci6: command 0x0406 tx timeout
[ 2458.906115][  T949] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[ 2458.907602][  T949] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[ 2458.909526][  T949] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[ 2458.915743][   T55] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[ 2459.299010][  T951] Bluetooth: hci15: command tx timeout
[ 2459.449119][  T951] Bluetooth: hci18: command tx timeout
[ 2460.009106][  T951] Bluetooth: hci17: command tx timeout
[ 2460.089078][T23027] Bluetooth: hci16: command tx timeout
[ 2460.969108][T23027] Bluetooth: hci19: command tx timeout
[ 2461.369018][T23027] Bluetooth: hci15: command tx timeout
[ 2461.528983][T23027] Bluetooth: hci18: command tx timeout
[ 2462.089122][  T951] Bluetooth: hci17: command tx timeout
[ 2462.169233][  T951] Bluetooth: hci16: command tx timeout
[ 2463.048996][  T951] Bluetooth: hci19: command tx timeout
[ 2463.608971][  T951] Bluetooth: hci18: command tx timeout
[ 2464.008928][  T951] Bluetooth: hci9: command 0x0406 tx timeout
[ 2464.018942][T23027] Bluetooth: hci8: command 0x0406 tx timeout
[ 2464.169009][T28870] Bluetooth: hci17: command tx timeout
[ 2465.129245][T28870] Bluetooth: hci19: command tx timeout
[ 2465.689032][T28870] Bluetooth: hci18: command tx timeout
[ 2467.061103][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 2467.061155][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 2467.208964][T28870] Bluetooth: hci19: command tx timeout
[ 2472.809079][   T31] INFO: task kworker/0:2:971 blocked for more than 143 seconds.
[ 2472.809104][   T31]       Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0
[ 2472.809115][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2472.809124][   T31] task:kworker/0:2     state:D stack:17768 pid:971   tgid:971   ppid:2      task_flags:0x4288160 flags:0x00004000
[ 2472.809173][   T31] Workqueue: usb_hub_wq hub_event
[ 2472.809195][   T31] Call Trace:
[ 2472.809202][   T31]  <TASK>
[ 2472.809214][   T31]  __schedule+0x116f/0x5de0
[ 2472.809254][   T31]  ? __pfx___schedule+0x10/0x10
[ 2472.809274][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 2472.809300][   T31]  ? find_held_lock+0x2b/0x80
[ 2472.809328][   T31]  ? schedule+0x2d7/0x3a0
[ 2472.809353][   T31]  schedule+0xe7/0x3a0
[ 2472.809374][   T31]  schedule_timeout+0x257/0x290
[ 2472.809394][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 2472.809422][   T31]  ? mark_held_locks+0x49/0x80
[ 2472.809438][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2472.809461][   T31]  __wait_for_common+0x2fc/0x4e0
[ 2472.809484][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 2472.809506][   T31]  ? __pfx___wait_for_common+0x10/0x10
[ 2472.809532][   T31]  ? devtmpfs_submit_req+0x94/0x100
[ 2472.809563][   T31]  devtmpfs_submit_req+0xa8/0x100
[ 2472.809589][   T31]  devtmpfs_delete_node+0xf6/0x160
[ 2472.809614][   T31]  ? __pfx_devtmpfs_delete_node+0x10/0x10
[ 2472.809654][   T31]  ? kobject_put+0xab/0x5a0
[ 2472.809680][   T31]  ? __pfx_klist_children_put+0x10/0x10
[ 2472.809701][   T31]  ? klist_children_put+0x44/0x60
[ 2472.809732][   T31]  ? klist_put+0xf9/0x1b0
[ 2472.809756][   T31]  device_del+0x734/0x9f0
[ 2472.809783][   T31]  ? __pfx_device_del+0x10/0x10
[ 2472.809815][   T31]  usb_disconnect+0x594/0x920
[ 2472.809848][   T31]  hub_event+0x1c57/0x4fa0
[ 2472.809888][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[ 2472.809908][   T31]  ? __pfx_hub_event+0x10/0x10
[ 2472.809924][   T31]  ? debug_object_deactivate+0x1ec/0x3a0
[ 2472.809959][   T31]  ? rcu_is_watching+0x12/0xc0
[ 2472.809984][   T31]  process_one_work+0x9cc/0x1b70
[ 2472.810013][   T31]  ? __pfx_hub_event+0x10/0x10
[ 2472.810030][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 2472.810058][   T31]  ? assign_work+0x1a0/0x250
[ 2472.810079][   T31]  worker_thread+0x6c8/0xf10
[ 2472.810138][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 2472.810151][   T31]  kthread+0x3c2/0x780
[ 2472.810163][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.810174][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.810184][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.810195][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.810206][   T31]  ? rcu_is_watching+0x12/0xc0
[ 2472.810220][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.810231][   T31]  ret_from_fork+0x45/0x80
[ 2472.810243][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.810254][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2472.810278][   T31]  </TASK>
[ 2472.810335][   T31] INFO: task kworker/0:7:5926 blocked for more than 143 seconds.
[ 2472.810343][   T31]       Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0
[ 2472.810350][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2472.810355][   T31] task:kworker/0:7     state:D stack:22808 pid:5926  tgid:5926  ppid:2      task_flags:0x4288160 flags:0x00004000
[ 2472.810386][   T31] Workqueue: md_misc mddev_delayed_delete
[ 2472.810399][   T31] Call Trace:
[ 2472.810403][   T31]  <TASK>
[ 2472.810409][   T31]  __schedule+0x116f/0x5de0
[ 2472.810431][   T31]  ? __pfx___schedule+0x10/0x10
[ 2472.810443][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 2472.810458][   T31]  ? find_held_lock+0x2b/0x80
[ 2472.810472][   T31]  ? schedule+0x2d7/0x3a0
[ 2472.810487][   T31]  schedule+0xe7/0x3a0
[ 2472.810500][   T31]  schedule_timeout+0x257/0x290
[ 2472.810512][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 2472.810528][   T31]  ? mark_held_locks+0x49/0x80
[ 2472.810538][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2472.810552][   T31]  __wait_for_common+0x2fc/0x4e0
[ 2472.810566][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 2472.810580][   T31]  ? __pfx___wait_for_common+0x10/0x10
[ 2472.810596][   T31]  ? devtmpfs_submit_req+0x94/0x100
[ 2472.810615][   T31]  devtmpfs_submit_req+0xa8/0x100
[ 2472.810631][   T31]  devtmpfs_delete_node+0xf6/0x160
[ 2472.810647][   T31]  ? __pfx_devtmpfs_delete_node+0x10/0x10
[ 2472.810664][   T31]  ? __call_rcu_common.constprop.0+0x3e5/0x9f0
[ 2472.810676][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2472.810697][   T31]  ? kernfs_put+0x4e/0x60
[ 2472.810709][   T31]  ? sysfs_remove_group+0xc6/0x180
[ 2472.810735][   T31]  device_del+0x734/0x9f0
[ 2472.810753][   T31]  ? __pfx_device_del+0x10/0x10
[ 2472.810769][   T31]  ? _raw_spin_unlock_irq+0x44/0x50
[ 2472.810784][   T31]  del_gendisk+0x486/0xc40
[ 2472.810798][   T31]  ? __pfx_del_gendisk+0x10/0x10
[ 2472.810809][   T31]  ? kernfs_put.part.0+0x18b/0x630
[ 2472.810825][   T31]  md_kobj_release+0xb2/0x100
[ 2472.810839][   T31]  kobject_put+0x1e4/0x5a0
[ 2472.810856][   T31]  process_one_work+0x9cc/0x1b70
[ 2472.810873][   T31]  ? __pfx_release_one_tty+0x10/0x10
[ 2472.810889][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 2472.810906][   T31]  ? assign_work+0x1a0/0x250
[ 2472.810919][   T31]  worker_thread+0x6c8/0xf10
[ 2472.810936][   T31]  ? __kthread_parkme+0x19e/0x250
[ 2472.810953][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 2472.810965][   T31]  kthread+0x3c2/0x780
[ 2472.810979][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.810989][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.811000][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.811010][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.811021][   T31]  ? rcu_is_watching+0x12/0xc0
[ 2472.811035][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.811046][   T31]  ret_from_fork+0x45/0x80
[ 2472.811057][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.811069][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2472.811091][   T31]  </TASK>
[ 2472.811118][   T31] INFO: task kworker/0:4:31113 blocked for more than 143 seconds.
[ 2472.811125][   T31]       Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0
[ 2472.811132][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2472.811137][   T31] task:kworker/0:4     state:D stack:23608 pid:31113 tgid:31113 ppid:2      task_flags:0x4208060 flags:0x00004000
[ 2472.811165][   T31] Workqueue: usb_hub_wq hub_event
[ 2472.811175][   T31] Call Trace:
[ 2472.811179][   T31]  <TASK>
[ 2472.811185][   T31]  __schedule+0x116f/0x5de0
[ 2472.811202][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[ 2472.811214][   T31]  ? __pfx___schedule+0x10/0x10
[ 2472.811230][   T31]  ? find_held_lock+0x2b/0x80
[ 2472.811244][   T31]  ? schedule+0x2d7/0x3a0
[ 2472.811259][   T31]  schedule+0xe7/0x3a0
[ 2472.811272][   T31]  schedule_timeout+0x257/0x290
[ 2472.811284][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 2472.811299][   T31]  ? mark_held_locks+0x49/0x80
[ 2472.811309][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2472.811323][   T31]  __wait_for_common+0x2fc/0x4e0
[ 2472.811337][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 2472.811351][   T31]  ? __pfx___wait_for_common+0x10/0x10
[ 2472.811367][   T31]  ? devtmpfs_submit_req+0x94/0x100
[ 2472.811385][   T31]  devtmpfs_submit_req+0xa8/0x100
[ 2472.811401][   T31]  devtmpfs_create_node+0x18a/0x230
[ 2472.811417][   T31]  ? __pfx_devtmpfs_create_node+0x10/0x10
[ 2472.811434][   T31]  ? up_write+0x1b2/0x520
[ 2472.811450][   T31]  ? kernfs_create_link+0x1bd/0x240
[ 2472.811466][   T31]  ? kernfs_put+0x35/0x60
[ 2472.811478][   T31]  ? sysfs_do_create_link_sd+0xbb/0x140
[ 2472.811492][   T31]  device_add+0x10bd/0x1a70
[ 2472.811507][   T31]  ? __pfx_device_add+0x10/0x10
[ 2472.811517][   T31]  ? usb_detect_static_quirks+0x335/0x3e0
[ 2472.811538][   T31]  usb_new_device+0xd07/0x1a20
[ 2472.811558][   T31]  ? __pfx_usb_new_device+0x10/0x10
[ 2472.811579][   T31]  hub_event+0x2eb7/0x4fa0
[ 2472.811610][   T31]  ? __pfx_hub_event+0x10/0x10
[ 2472.811621][   T31]  ? debug_object_deactivate+0x1ec/0x3a0
[ 2472.811640][   T31]  ? rcu_is_watching+0x12/0xc0
[ 2472.811656][   T31]  process_one_work+0x9cc/0x1b70
[ 2472.811672][   T31]  ? __pfx_hcd_resume_work+0x10/0x10
[ 2472.811684][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 2472.811701][   T31]  ? assign_work+0x1a0/0x250
[ 2472.811713][   T31]  worker_thread+0x6c8/0xf10
[ 2472.811734][   T31]  ? __kthread_parkme+0x19e/0x250
[ 2472.811751][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 2472.811764][   T31]  kthread+0x3c2/0x780
[ 2472.811775][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.811785][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.811796][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.811807][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.811817][   T31]  ? rcu_is_watching+0x12/0xc0
[ 2472.811831][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.811842][   T31]  ret_from_fork+0x45/0x80
[ 2472.811853][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.811864][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2472.811887][   T31]  </TASK>
[ 2472.811904][   T31] INFO: task syz.6.6619:825 blocked for more than 143 seconds.
[ 2472.811911][   T31]       Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0
[ 2472.811917][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2472.811922][   T31] task:syz.6.6619      state:D stack:26392 pid:825   tgid:820   ppid:30218  task_flags:0x400040 flags:0x00004004
[ 2472.811954][   T31] Call Trace:
[ 2472.811958][   T31]  <TASK>
[ 2472.811964][   T31]  __schedule+0x116f/0x5de0
[ 2472.811977][   T31]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 2472.811995][   T31]  ? __pfx___schedule+0x10/0x10
[ 2472.812011][   T31]  ? find_held_lock+0x2b/0x80
[ 2472.812025][   T31]  ? schedule+0x2d7/0x3a0
[ 2472.812039][   T31]  schedule+0xe7/0x3a0
[ 2472.812053][   T31]  schedule_timeout+0x257/0x290
[ 2472.812064][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 2472.812080][   T31]  ? mark_held_locks+0x49/0x80
[ 2472.812090][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2472.812104][   T31]  __wait_for_common+0x2fc/0x4e0
[ 2472.812118][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 2472.812132][   T31]  ? __pfx___wait_for_common+0x10/0x10
[ 2472.812147][   T31]  ? devtmpfs_submit_req+0x94/0x100
[ 2472.812166][   T31]  devtmpfs_submit_req+0xa8/0x100
[ 2472.812182][   T31]  devtmpfs_create_node+0x18a/0x230
[ 2472.812198][   T31]  ? __pfx_devtmpfs_create_node+0x10/0x10
[ 2472.812214][   T31]  ? up_write+0x1b2/0x520
[ 2472.812230][   T31]  ? kernfs_create_link+0x1bd/0x240
[ 2472.812246][   T31]  ? kernfs_put+0x35/0x60
[ 2472.812258][   T31]  ? sysfs_do_create_link_sd+0xbb/0x140
[ 2472.812272][   T31]  device_add+0x10bd/0x1a70
[ 2472.812283][   T31]  ? __pfx_device_add+0x10/0x10
[ 2472.812294][   T31]  ? kfree_const+0x4d/0x60
[ 2472.812310][   T31]  device_create_groups_vargs+0x1f8/0x270
[ 2472.812324][   T31]  device_create+0xed/0x130
[ 2472.812336][   T31]  ? __pfx_device_create+0x10/0x10
[ 2472.812348][   T31]  ? is_console_locked+0x9/0x20
[ 2472.812364][   T31]  ? con_is_visible+0x65/0x150
[ 2472.812376][   T31]  ? csi_J+0x54a/0xad0
[ 2472.812394][   T31]  vcs_make_sysfs+0x32/0x80
[ 2472.812408][   T31]  vc_allocate+0x501/0x880
[ 2472.812423][   T31]  ? __pfx_vc_allocate+0x10/0x10
[ 2472.812443][   T31]  con_install+0xa1/0x600
[ 2472.812460][   T31]  ? __pfx_con_install+0x10/0x10
[ 2472.812477][   T31]  ? __pfx_con_install+0x10/0x10
[ 2472.812494][   T31]  tty_init_dev.part.0+0x99/0x500
[ 2472.812505][   T31]  tty_open+0xa50/0xf90
[ 2472.812517][   T31]  ? __pfx_tty_open+0x10/0x10
[ 2472.812528][   T31]  ? chrdev_open+0x58c/0x6a0
[ 2472.812541][   T31]  ? __pfx_tty_open+0x10/0x10
[ 2472.812551][   T31]  chrdev_open+0x231/0x6a0
[ 2472.812563][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 2472.812576][   T31]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[ 2472.812597][   T31]  do_dentry_open+0x741/0x1c10
[ 2472.812608][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 2472.812622][   T31]  vfs_open+0x82/0x3f0
[ 2472.812637][   T31]  path_openat+0x1e5e/0x2d40
[ 2472.812653][   T31]  ? __pfx_path_openat+0x10/0x10
[ 2472.812668][   T31]  do_filp_open+0x20b/0x470
[ 2472.812679][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 2472.812699][   T31]  ? alloc_fd+0x471/0x7d0
[ 2472.812713][   T31]  do_sys_openat2+0x11b/0x1d0
[ 2472.812731][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2472.812747][   T31]  ? __pfx___schedule+0x10/0x10
[ 2472.812762][   T31]  __x64_sys_openat+0x174/0x210
[ 2472.812776][   T31]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2472.812795][   T31]  do_syscall_64+0xcd/0x260
[ 2472.812811][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2472.812823][   T31] RIP: 0033:0x7fd642d8cad0
[ 2472.812832][   T31] RSP: 002b:00007fd643c8fb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2472.812843][   T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd642d8cad0
[ 2472.812850][   T31] RDX: 0000000000000002 RSI: 00007fd643c8fc10 RDI: 00000000ffffff9c
[ 2472.812857][   T31] RBP: 00007fd643c8fc10 R08: 0000000000000000 R09: 00007fd643c8f986
[ 2472.812864][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 2472.812871][   T31] R13: 0000000000000000 R14: 00007fd642fb6160 R15: 00007ffee4c2e628
[ 2472.812885][   T31]  </TASK>
[ 2472.812889][   T31] INFO: task syz.7.6622:834 blocked for more than 143 seconds.
[ 2472.812896][   T31]       Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0
[ 2472.812903][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2472.812907][   T31] task:syz.7.6622      state:D stack:28248 pid:834   tgid:832   ppid:30651  task_flags:0x400040 flags:0x00000004
[ 2472.812937][   T31] Call Trace:
[ 2472.812940][   T31]  <TASK>
[ 2472.812946][   T31]  __schedule+0x116f/0x5de0
[ 2472.812963][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[ 2472.812977][   T31]  ? __pfx___schedule+0x10/0x10
[ 2472.812992][   T31]  ? find_held_lock+0x2b/0x80
[ 2472.813006][   T31]  ? schedule+0x2d7/0x3a0
[ 2472.813021][   T31]  schedule+0xe7/0x3a0
[ 2472.813034][   T31]  schedule_preempt_disabled+0x13/0x30
[ 2472.813048][   T31]  __mutex_lock+0x6c7/0xb90
[ 2472.813064][   T31]  ? ptmx_open+0xff/0x360
[ 2472.813079][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 2472.813093][   T31]  ? __pfx_ida_alloc_range+0x10/0x10
[ 2472.813109][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2472.813126][   T31]  ? __pfx_devpts_acquire+0x10/0x10
[ 2472.813138][   T31]  ? __pfx_ptmx_open+0x10/0x10
[ 2472.813152][   T31]  ? ptmx_open+0xff/0x360
[ 2472.813164][   T31]  ptmx_open+0xff/0x360
[ 2472.813178][   T31]  ? __pfx_ptmx_open+0x10/0x10
[ 2472.813191][   T31]  chrdev_open+0x231/0x6a0
[ 2472.813203][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 2472.813215][   T31]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[ 2472.813235][   T31]  do_dentry_open+0x741/0x1c10
[ 2472.813245][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 2472.813260][   T31]  vfs_open+0x82/0x3f0
[ 2472.813274][   T31]  path_openat+0x1e5e/0x2d40
[ 2472.813290][   T31]  ? __pfx_path_openat+0x10/0x10
[ 2472.813304][   T31]  do_filp_open+0x20b/0x470
[ 2472.813315][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 2472.813336][   T31]  ? alloc_fd+0x471/0x7d0
[ 2472.813350][   T31]  do_sys_openat2+0x11b/0x1d0
[ 2472.813363][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2472.813382][   T31]  __x64_sys_openat+0x174/0x210
[ 2472.813396][   T31]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2472.813410][   T31]  ? xfd_validate_state+0x5d/0x180
[ 2472.813426][   T31]  do_syscall_64+0xcd/0x260
[ 2472.813442][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2472.813453][   T31] RIP: 0033:0x7efc4b38e169
[ 2472.813461][   T31] RSP: 002b:00007efc4c221038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2472.813471][   T31] RAX: ffffffffffffffda RBX: 00007efc4b5b5fa0 RCX: 00007efc4b38e169
[ 2472.813479][   T31] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[ 2472.813486][   T31] RBP: 00007efc4b410a68 R08: 0000000000000000 R09: 0000000000000000
[ 2472.813493][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2472.813499][   T31] R13: 0000000000000001 R14: 00007efc4b5b5fa0 R15: 00007ffd1f8d6728
[ 2472.813513][   T31]  </TASK>
[ 2472.813518][   T31] INFO: task syz.2.6627:851 blocked for more than 143 seconds.
[ 2472.813525][   T31]       Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0
[ 2472.813532][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2472.813536][   T31] task:syz.2.6627      state:D stack:28856 pid:851   tgid:850   ppid:30480  task_flags:0x400040 flags:0x00000004
[ 2472.813566][   T31] Call Trace:
[ 2472.813569][   T31]  <TASK>
[ 2472.813575][   T31]  __schedule+0x116f/0x5de0
[ 2472.813592][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[ 2472.813605][   T31]  ? __pfx___schedule+0x10/0x10
[ 2472.813621][   T31]  ? find_held_lock+0x2b/0x80
[ 2472.813635][   T31]  ? schedule+0x2d7/0x3a0
[ 2472.813649][   T31]  schedule+0xe7/0x3a0
[ 2472.813662][   T31]  schedule_preempt_disabled+0x13/0x30
[ 2472.813676][   T31]  __mutex_lock+0x6c7/0xb90
[ 2472.813692][   T31]  ? ptmx_open+0xff/0x360
[ 2472.813706][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 2472.813721][   T31]  ? __pfx_ida_alloc_range+0x10/0x10
[ 2472.813740][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2472.813757][   T31]  ? __pfx_devpts_acquire+0x10/0x10
[ 2472.813770][   T31]  ? __pfx_ptmx_open+0x10/0x10
[ 2472.813786][   T31]  ? ptmx_open+0xff/0x360
[ 2472.813799][   T31]  ptmx_open+0xff/0x360
[ 2472.813813][   T31]  ? __pfx_ptmx_open+0x10/0x10
[ 2472.813826][   T31]  chrdev_open+0x231/0x6a0
[ 2472.813838][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 2472.813850][   T31]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[ 2472.813870][   T31]  do_dentry_open+0x741/0x1c10
[ 2472.813881][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 2472.813895][   T31]  vfs_open+0x82/0x3f0
[ 2472.813910][   T31]  path_openat+0x1e5e/0x2d40
[ 2472.813925][   T31]  ? __pfx_path_openat+0x10/0x10
[ 2472.813940][   T31]  do_filp_open+0x20b/0x470
[ 2472.813951][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 2472.813971][   T31]  ? alloc_fd+0x471/0x7d0
[ 2472.813985][   T31]  do_sys_openat2+0x11b/0x1d0
[ 2472.813998][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2472.814017][   T31]  __x64_sys_openat+0x174/0x210
[ 2472.814031][   T31]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2472.814046][   T31]  ? do_user_addr_fault+0x843/0x1370
[ 2472.814062][   T31]  do_syscall_64+0xcd/0x260
[ 2472.814078][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2472.814089][   T31] RIP: 0033:0x7f0558f8e169
[ 2472.814097][   T31] RSP: 002b:00007f0556df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2472.814107][   T31] RAX: ffffffffffffffda RBX: 00007f05591b5fa0 RCX: 00007f0558f8e169
[ 2472.814114][   T31] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[ 2472.814121][   T31] RBP: 00007f0559010a68 R08: 0000000000000000 R09: 0000000000000000
[ 2472.814128][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2472.814136][   T31] R13: 0000000000000001 R14: 00007f05591b5fa0 R15: 00007ffd0608f648
[ 2472.814149][   T31]  </TASK>
[ 2472.814154][   T31] INFO: task syz.1.6633:872 blocked for more than 143 seconds.
[ 2472.814161][   T31]       Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0
[ 2472.814167][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2472.814172][   T31] task:syz.1.6633      state:D stack:28856 pid:872   tgid:871   ppid:30937  task_flags:0x400040 flags:0x00000004
[ 2472.814202][   T31] Call Trace:
[ 2472.814205][   T31]  <TASK>
[ 2472.814211][   T31]  __schedule+0x116f/0x5de0
[ 2472.814228][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[ 2472.814241][   T31]  ? __pfx___schedule+0x10/0x10
[ 2472.814257][   T31]  ? find_held_lock+0x2b/0x80
[ 2472.814271][   T31]  ? schedule+0x2d7/0x3a0
[ 2472.814285][   T31]  schedule+0xe7/0x3a0
[ 2472.814298][   T31]  schedule_preempt_disabled+0x13/0x30
[ 2472.814312][   T31]  __mutex_lock+0x6c7/0xb90
[ 2472.814328][   T31]  ? ptmx_open+0xff/0x360
[ 2472.814342][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 2472.814356][   T31]  ? __pfx_ida_alloc_range+0x10/0x10
[ 2472.814371][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2472.814388][   T31]  ? __pfx_devpts_acquire+0x10/0x10
[ 2472.814400][   T31]  ? __pfx_ptmx_open+0x10/0x10
[ 2472.814414][   T31]  ? ptmx_open+0xff/0x360
[ 2472.814426][   T31]  ptmx_open+0xff/0x360
[ 2472.814439][   T31]  ? __pfx_ptmx_open+0x10/0x10
[ 2472.814453][   T31]  chrdev_open+0x231/0x6a0
[ 2472.814464][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 2472.814477][   T31]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[ 2472.814497][   T31]  do_dentry_open+0x741/0x1c10
[ 2472.814507][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 2472.814521][   T31]  vfs_open+0x82/0x3f0
[ 2472.814535][   T31]  path_openat+0x1e5e/0x2d40
[ 2472.814551][   T31]  ? __pfx_path_openat+0x10/0x10
[ 2472.814565][   T31]  do_filp_open+0x20b/0x470
[ 2472.814576][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 2472.814596][   T31]  ? alloc_fd+0x471/0x7d0
[ 2472.814610][   T31]  do_sys_openat2+0x11b/0x1d0
[ 2472.814623][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2472.814642][   T31]  __x64_sys_openat+0x174/0x210
[ 2472.814656][   T31]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2472.814671][   T31]  ? do_user_addr_fault+0x843/0x1370
[ 2472.814687][   T31]  do_syscall_64+0xcd/0x260
[ 2472.814703][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2472.814714][   T31] RIP: 0033:0x7f48e9f8e169
[ 2472.814721][   T31] RSP: 002b:00007f48ead12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2472.814736][   T31] RAX: ffffffffffffffda RBX: 00007f48ea1b5fa0 RCX: 00007f48e9f8e169
[ 2472.814743][   T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 2472.814750][   T31] RBP: 00007f48ea010a68 R08: 0000000000000000 R09: 0000000000000000
[ 2472.814757][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2472.814764][   T31] R13: 0000000000000001 R14: 00007f48ea1b5fa0 R15: 00007ffce55e6d98
[ 2472.814777][   T31]  </TASK>
[ 2472.814782][   T31] INFO: task syz.4.6636:882 blocked for more than 143 seconds.
[ 2472.814789][   T31]       Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0
[ 2472.814796][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2472.814801][   T31] task:syz.4.6636      state:D stack:28856 pid:882   tgid:881   ppid:31601  task_flags:0x400140 flags:0x00000004
[ 2472.814829][   T31] Call Trace:
[ 2472.814833][   T31]  <TASK>
[ 2472.814839][   T31]  __schedule+0x116f/0x5de0
[ 2472.814855][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[ 2472.814868][   T31]  ? __pfx___schedule+0x10/0x10
[ 2472.814884][   T31]  ? find_held_lock+0x2b/0x80
[ 2472.814898][   T31]  ? schedule+0x2d7/0x3a0
[ 2472.814913][   T31]  schedule+0xe7/0x3a0
[ 2472.814926][   T31]  schedule_preempt_disabled+0x13/0x30
[ 2472.814940][   T31]  rwsem_down_read_slowpath+0x62f/0xb60
[ 2472.814959][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[ 2472.814981][   T31]  ? __pfx___might_resched+0x10/0x10
[ 2472.814996][   T31]  ? try_to_unlazy+0x24e/0x660
[ 2472.815013][   T31]  down_read+0xef/0x480
[ 2472.815029][   T31]  ? __pfx_down_read+0x10/0x10
[ 2472.815046][   T31]  ? lookup_fast+0x156/0x610
[ 2472.815064][   T31]  path_openat+0x88a/0x2d40
[ 2472.815079][   T31]  ? __pfx_path_openat+0x10/0x10
[ 2472.815093][   T31]  do_filp_open+0x20b/0x470
[ 2472.815104][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 2472.815124][   T31]  ? alloc_fd+0x471/0x7d0
[ 2472.815138][   T31]  do_sys_openat2+0x11b/0x1d0
[ 2472.815152][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2472.815170][   T31]  __x64_sys_openat+0x174/0x210
[ 2472.815184][   T31]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2472.815199][   T31]  ? do_user_addr_fault+0x843/0x1370
[ 2472.815215][   T31]  do_syscall_64+0xcd/0x260
[ 2472.815231][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2472.815242][   T31] RIP: 0033:0x7ff764d8cad0
[ 2472.815250][   T31] RSP: 002b:00007ff765b54b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2472.815260][   T31] RAX: ffffffffffffffda RBX: 0000000000000080 RCX: 00007ff764d8cad0
[ 2472.815267][   T31] RDX: 0000000000000080 RSI: 00007ff765b54c10 RDI: 00000000ffffff9c
[ 2472.815274][   T31] RBP: 00007ff765b54c10 R08: 0000000000000000 R09: 002367732f766564
[ 2472.815281][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 2472.815288][   T31] R13: 0000000000000000 R14: 00007ff764fb5fa0 R15: 00007ffca8ef6858
[ 2472.815302][   T31]  </TASK>
[ 2472.815316][   T31] 
[ 2472.815316][   T31] Showing all locks held in the system:
[ 2472.815323][   T31] 2 locks held by kdevtmpfs/26:
[ 2472.815330][   T31]  #0: ffff88801c6d8950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0x132/0x2a0
[ 2472.815365][   T31]  #1: ffffffff8eef43a8 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0
[ 2472.815397][   T31] 1 lock held by khungtaskd/31:
[ 2472.815403][   T31]  #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 2472.815435][   T31] 3 locks held by kworker/0:2/971:
[ 2472.815441][   T31]  #0: ffff88801f2c2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 2472.815469][   T31]  #1: ffffc900039cfd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 2472.815496][   T31]  #2: ffff888144f61198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0
[ 2472.815533][   T31] 2 locks held by getty/5584:
[ 2472.815539][   T31]  #0: ffff88814d27b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 2472.815568][   T31]  #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 2472.815595][   T31] 2 locks held by kworker/0:7/5926:
[ 2472.815602][   T31]  #0: ffff88801f2c3948 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 2472.815629][   T31]  #1: ffffc90004457d18 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 2472.815659][   T31] 3 locks held by kworker/0:3/28713:
[ 2472.815665][   T31]  #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 2472.815692][   T31]  #1: ffffc9000b96fd18 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 2472.815719][   T31]  #2: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[ 2472.815756][   T31] 3 locks held by kworker/0:4/31113:
[ 2472.815762][   T31]  #0: ffff88801f2c2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 2472.815789][   T31]  #1: ffffc90004aefd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 2472.815816][   T31]  #2: ffff8880291ed198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0
[ 2472.815842][   T31] 4 locks held by kworker/u8:36/31647:
[ 2472.815848][   T31]  #0: ffff88801c2f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 2472.815875][   T31]  #1: ffffc90004c3fd18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 2472.815902][   T31]  #2: ffffffff90115010 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30
[ 2472.815932][   T31]  #3: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x230
[ 2472.815962][   T31] 3 locks held by kworker/u8:37/31648:
[ 2472.815968][   T31]  #0: ffff8880316c6948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 2472.815996][   T31]  #1: ffffc90004c2fd18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 2472.816028][   T31]  #2: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30
[ 2472.816058][   T31] 3 locks held by kworker/u8:39/31650:
[ 2472.816064][   T31]  #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 2472.816092][   T31]  #1: ffffc90004b77d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 2472.816120][   T31]  #2: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[ 2472.816152][   T31] 3 locks held by syz.6.6619/825:
[ 2472.816158][   T31]  #0: ffffffff8f0a44c8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x53e/0xf90
[ 2472.816182][   T31]  #1: ffff88804a67b1c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x37/0x500
[ 2472.816206][   T31]  #2: ffffffff8e3ace40 (console_lock){+.+.}-{0:0}, at: con_install+0x99/0x600
[ 2472.816236][   T31] 1 lock held by syz.7.6622/834:
[ 2472.816242][   T31]  #0: ffffffff8f0a44c8 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0xff/0x360
[ 2472.816270][   T31] 1 lock held by syz.2.6627/851:
[ 2472.816276][   T31]  #0: ffffffff8f0a44c8 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0xff/0x360
[ 2472.816303][   T31] 1 lock held by syz.1.6633/872:
[ 2472.816309][   T31]  #0: ffffffff8f0a44c8 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0xff/0x360
[ 2472.816340][   T31] 1 lock held by syz.4.6636/882:
[ 2472.816346][   T31]  #0: ffff88801c6d8950 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: path_openat+0x88a/0x2d40
[ 2472.816374][   T31] 2 locks held by syz-executor/887:
[ 2472.816380][   T31]  #0: ffffffff90868640 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0
[ 2472.816410][   T31]  #1: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000
[ 2472.816439][   T31] 1 lock held by syz-executor/898:
[ 2472.816445][   T31]  #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[ 2472.816473][   T31] 1 lock held by syz-executor/903:
[ 2472.816479][   T31]  #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[ 2472.816507][   T31] 1 lock held by syz-executor/907:
[ 2472.816513][   T31]  #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[ 2472.816541][   T31] 1 lock held by syz-executor/912:
[ 2472.816547][   T31]  #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[ 2472.816575][   T31] 1 lock held by syz-executor/918:
[ 2472.816581][   T31]  #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[ 2472.816609][   T31] 1 lock held by syz-executor/922:
[ 2472.816615][   T31]  #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[ 2472.816643][   T31] 1 lock held by syz-executor/927:
[ 2472.816649][   T31]  #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[ 2472.816677][   T31] 1 lock held by syz-executor/931:
[ 2472.816682][   T31]  #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[ 2472.816710][   T31] 1 lock held by syz-executor/936:
[ 2472.816716][   T31]  #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[ 2472.816748][   T31] 1 lock held by syz-executor/940:
[ 2472.816754][   T31]  #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[ 2472.816782][   T31] 1 lock held by syz-executor/944:
[ 2472.816788][   T31]  #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[ 2472.816817][   T31] 1 lock held by syz-executor/947:
[ 2472.816823][   T31]  #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[ 2472.816851][   T31] 1 lock held by syz-executor/953:
[ 2472.816857][   T31]  #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[ 2472.816885][   T31] 1 lock held by syz-executor/956:
[ 2472.816891][   T31]  #0: ffffffff9012aea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[ 2472.816919][   T31] 
[ 2472.816922][   T31] =============================================
[ 2472.816922][   T31] 
[ 2472.816927][   T31] NMI backtrace for cpu 0
[ 2472.816933][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2472.816946][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2472.816952][   T31] Call Trace:
[ 2472.816955][   T31]  <TASK>
[ 2472.816959][   T31]  dump_stack_lvl+0x116/0x1f0
[ 2472.816973][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 2472.816985][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2472.816996][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 2472.817008][   T31]  watchdog+0xf70/0x12c0
[ 2472.817022][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2472.817031][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2472.817045][   T31]  ? __kthread_parkme+0x19e/0x250
[ 2472.817061][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2472.817071][   T31]  kthread+0x3c2/0x780
[ 2472.817082][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.817091][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.817100][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.817110][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.817120][   T31]  ? rcu_is_watching+0x12/0xc0
[ 2472.817132][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.817143][   T31]  ret_from_fork+0x45/0x80
[ 2472.817153][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.817163][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2472.817184][   T31]  </TASK>
[ 2472.817188][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 2472.817221][    C1] NMI backtrace for cpu 1
[ 2472.817230][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2472.817246][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2472.817252][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 2472.817269][    C1] Code: 25 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 3a 17 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 2472.817281][    C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6
[ 2472.817291][    C1] RAX: 000000000df049d7 RBX: 0000000000000001 RCX: ffffffff8b72b419
[ 2472.817300][    C1] RDX: 0000000000000000 RSI: ffffffff8dbef846 RDI: ffffffff8bf465c0
[ 2472.817308][    C1] RBP: ffffed1003b5e488 R08: 0000000000000001 R09: ffffed10170a65bd
[ 2472.817316][    C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001
[ 2472.817324][    C1] R13: ffff88801daf2440 R14: ffffffff90864910 R15: 0000000000000000
[ 2472.817333][    C1] FS:  0000000000000000(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000
[ 2472.817346][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2472.817355][    C1] CR2: 00007fc83273174f CR3: 000000002a3ac000 CR4: 00000000003526f0
[ 2472.817363][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2472.817371][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2472.817379][    C1] Call Trace:
[ 2472.817383][    C1]  <TASK>
[ 2472.817388][    C1]  default_idle+0x13/0x20
[ 2472.817405][    C1]  default_idle_call+0x6d/0xb0
[ 2472.817422][    C1]  do_idle+0x391/0x510
[ 2472.817439][    C1]  ? __pfx_do_idle+0x10/0x10
[ 2472.817455][    C1]  ? trace_sched_exit_tp+0x31/0x130
[ 2472.817474][    C1]  cpu_startup_entry+0x4f/0x60
[ 2472.817489][    C1]  start_secondary+0x21d/0x2b0
[ 2472.817502][    C1]  ? __pfx_start_secondary+0x10/0x10
[ 2472.817516][    C1]  common_startup_64+0x13e/0x148
[ 2472.817537][    C1]  </TASK>
[ 2472.818202][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 2472.818210][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) 
[ 2472.818222][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2472.818229][   T31] Call Trace:
[ 2472.818232][   T31]  <TASK>
[ 2472.818236][   T31]  dump_stack_lvl+0x3d/0x1f0
[ 2472.818251][   T31]  panic+0x71c/0x800
[ 2472.818261][   T31]  ? __pfx_panic+0x10/0x10
[ 2472.818270][   T31]  ? __pfx__printk+0x10/0x10
[ 2472.818278][   T31]  ? ret_from_fork_asm+0x1a/0x30
[ 2472.818298][   T31]  ? nmi_backtrace_stall_check+0x6e/0x540
[ 2472.818313][   T31]  ? irq_work_queue+0xce/0x100
[ 2472.818326][   T31]  ? watchdog+0xdda/0x12c0
[ 2472.818336][   T31]  ? watchdog+0xdcd/0x12c0
[ 2472.818348][   T31]  watchdog+0xdeb/0x12c0
[ 2472.818361][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2472.818371][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2472.818386][   T31]  ? __kthread_parkme+0x19e/0x250
[ 2472.818402][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2472.818412][   T31]  kthread+0x3c2/0x780
[ 2472.818423][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.818433][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.818443][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.818453][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.818463][   T31]  ? rcu_is_watching+0x12/0xc0
[ 2472.818476][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.818487][   T31]  ret_from_fork+0x45/0x80
[ 2472.818497][   T31]  ? __pfx_kthread+0x10/0x10
[ 2472.818508][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2472.818528][   T31]  </TASK>
[ 2472.818719][   T31] Kernel Offset: disabled