last executing test programs:

17m24.808960934s ago: executing program 32 (id=1167):
socket$inet_udp(0x2, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_delete(0x0)

7m46.906490106s ago: executing program 33 (id=2877):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x3}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x7d, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x6f, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x5b, 0x0, @gue={{0x1, 0x1, 0x3, 0xfd, 0x100, @void}, "d6a63caa07ae457c4c1152490aa2cc63fcbf270b7f3053119c3291dfb1c7aa9116fb5f25874103d23d12396c1a00a6c8b7e96c065a0b6e1b8e82508af9d3024e05b43f2e0b6838c6edd12829cde5ef"}}}}}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast2=0x80ee3600, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
socket$nl_netfilter(0x10, 0x3, 0xc)
pwrite64(0xffffffffffffffff, &(0x7f0000000080)='3', 0x1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0)

4m6.411285053s ago: executing program 34 (id=3578):
syz_80211_inject_frame(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10000)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)
syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00')
socket$igmp(0x2, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x48094)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r7=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x4000894, &(0x7f0000000000)={0x11, 0xf6, r7, 0x1, 0xd, 0x6, @multicast}, 0x14)

3m28.715437014s ago: executing program 35 (id=3688):
r0 = memfd_secret(0x80000)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x35775dc269d16f33, 0xfffffffffffffffc)
syz_open_dev$dri(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x270, 0x168, 0x9, 0x0, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44804)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x16}]}, 0x10)
sendmmsg(r4, &(0x7f0000003180)=[{{0x0, 0x4d, &(0x7f0000000e80)=[{&(0x7f0000000b00)="0000e7005f97fbf7d2ff7af022d960cc57ca02f1d52510efbfc998226649e5cab237e37de091acf6dc7059ff4eb69c0c376d66ed0f515a89aa7c1440c9ec4ae05c4a566957f27f541b5a7404ef3ad0c04115f12c2bb1965dd42437d3e938f0277131e8ea538a83f73d021a208cae9f8252e12fff4d2052ae6309428d09e8ecb6bd569b6afaa133113e1f927ab7964c111012b4fb4c0cb753b52a23391407ccd54b138f1119833c732f0000000000", 0xae}], 0x1}}], 0x1, 0x1)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10)
write(r7, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24)
ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x1)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000400)={0x1, 0x0, 0x8, 0x0, 0xe54}, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r8}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0xf, 0x0, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x65, 0x0, 0xf9, 0x29, 0x0, @private=0xa010100, @empty}}}})

2m23.345670073s ago: executing program 6 (id=3990):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_open_dev$video4linux(&(0x7f0000000000), 0x7f67, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x26, 0x0, 0x3}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x10001, 0x0, 0x0, 0x0, 0xf6e4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000000, 0x0, 0x9, 0x0, 0x0, 0x10001, 0x2}, 0x0, 0x0)

2m23.051142361s ago: executing program 6 (id=3991):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed8"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f0000000000), 0x6b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000680)=""/127, 0x7f}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0)

2m22.748531167s ago: executing program 8 (id=3993):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00', <r2=>0x0})
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r1, 0x3, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x28008000) (fail_nth: 3)

2m21.949428542s ago: executing program 8 (id=3997):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2518000000100030800c00018008000100ffffffff080003", @ANYRES32=r3, @ANYBLOB="d2c7627c1652ebc5c4ee2bdf"], 0x2c}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000226bd7000fedbdf2507000000000000000c4100000014001462726f6164636173742d6c696e6b0000c4ef902a1a21b7bb8eed699906167efed95adc64989dfc980b1ad92987e85fb07af1098dd9055d989df585f849facaedad08dabe56c932db9c85f0"], 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x1)
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r8, 0x6, 0x17, 0x0, &(0x7f0000000100))
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
fstat(r5, &(0x7f00000002c0))
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYRES32=0x0, @ANYBLOB="0a000600080211000001000005007400040000"], 0x30}, 0x1, 0x0, 0x0, 0x4008814}, 0x0)
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x3, {{@in=@private, @in6=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0xfffffffffffffff8, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000, 0x40000000000000, 0x6}, 0x4, 0x0, 0x1, 0x1, 0x4}, [@offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040050}, 0x4040000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
pselect6(0x40, &(0x7f0000000480)={0x5, 0x9, 0x200000000, 0xfffffffffffffffc, 0x6038ae6a, 0x3, 0x9, 0x100000001}, &(0x7f00000004c0)={0x7, 0x7, 0x6, 0x0, 0x101, 0x4, 0x6, 0x8bc}, &(0x7f0000000580)={0x8, 0xffffffff, 0x101, 0xe, 0xffffffffffffc11c, 0x2845, 0x6, 0x100000000}, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000640)={&(0x7f0000000600), 0x8})
sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000700))
syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002020000ff2505a1a440000102030109023b0001010130070904009f0202060005052406000005240006000d240f010c000000060005000f09056e02100002af060905030220000f0602"], 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x8000)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

2m20.941606173s ago: executing program 6 (id=3999):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x14)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r6 = dup(r5)
read$FUSE(r6, &(0x7f0000002380)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_BMAP(r6, &(0x7f0000000140)={0x18, 0xffffffffffffffda, r7, {0x2}}, 0x18)
write$FUSE_DIRENT(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r5])
chdir(&(0x7f0000000100)='./file0\x00')
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1700000070000100000000000000000007"], 0x24}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbbbbbbbbbbbbb86dd6d000000000004"], 0x4b)
read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)

2m20.103823949s ago: executing program 8 (id=4006):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x1, 0x0, 0xf, 0xa, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010102}, 0x10)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="bd0600df7103800a49a6d33d4c09f57ee96b7cfb937150b30b02796d66271f8ef0", @ANYRES16=r3, @ANYRES32=r4], 0x34}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, 0x0, 0x0)

2m19.563309314s ago: executing program 8 (id=4007):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

2m19.531225515s ago: executing program 6 (id=4008):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x4)
sendmsg$IPSET_CMD_HEADER(r0, 0x0, 0x4)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000006c0)={0x1c, 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000)
syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f0000001b80)={0xa, &(0x7f0000001a00)={0xa, 0x6, 0x110, 0x62, 0x8, 0x0, 0x8, 0x47}, 0x5, &(0x7f0000001a40)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]})
r2 = syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe, 0x40, 0x87, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xe, 0xff, 0x40}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x3, 0xc, 0xc5, 0xff, 0x9}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x2, [{0x31, &(0x7f0000000240)=@string={0x31, 0x3, "82d99c852f47157c26061bbdbc63b5650b7ddfead85c925882c243a1bf53bdd299f9a5f2c2b91b2b8bc2fa439c9db7"}}, {0x7e, &(0x7f00000002c0)=@string={0x7e, 0x3, "52fb5e34c87809b77b03f87a5fc02bb539099736744514a2819e050a48486ab08925841a2e4c9531baf199817dafc6a0b650accd6c895b34044ea01475d837483db65b54502b2a85ace437bfccc0d361abb42111e6abe38407338d5127448a05538333dcf52840aea7c3a33a409885de8ad03fe66462339fc5400008"}}]})
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001880)={0x34, &(0x7f00000005c0)={0x20, 0x5, 0x4e, "1e2d346eeeb784163d03ccb7dc9816e45808dda0ac2f02e41b4dcf73f0311a5f18380ad90e70a9859746ae6b5492c0e011c0f36af614937fde1b9038c3dbf0660a89c51954476d35b6ac06a3db1d"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001780)={0x20, 0x0, 0x77, {0x75, "f36059ccebd53cdcfd62ea234bdfb74742b1e3688a17e4c451f1f276ef60b3e266a9f9db7fc185d9e8b506b75b640f3921f28129dcf345fd7079a796e88c347dbe1845f0d4fd9ae51476b6c54fc59995f3699fd8fc38e7d9ab3bbaec173f9882b03982b4daee8eedeb53c6c7333002a9c09a8c540f"}}, &(0x7f0000001800)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000001840)={0x20, 0x0, 0x1, 0xdb}})

2m19.174457396s ago: executing program 7 (id=4012):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
modify_ldt$write(0x1, &(0x7f0000000300)={0x9, 0x20000000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xc)
syz_open_dev$radio(0x0, 0x1, 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xa8}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0xb0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x4a01, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000f115bcdae773c0360069bdcaf337982efff3ac2b684a124b39709431a2163be02ea61a61d916e65fb5c0239cc342b2e18d6f4d0542651d1d6da82dde3d7aef0a6b8f59cbd12fa355f4f05b01cff9a7aeaf9ce1945e8bb0d6c4168935d359c46e34c127a34d759cb453608f081805be81cb3d248eb491710e599be11487a1ce8f5551a1dd884cf6136195ed9041ca3ae6edf40e574150ef0f082020a09e78eb0f753fbfdf296060305f62a3951833646e355eb98ecaf69ee6114908cf9baa748f042f3746f6386ba5c2e7935424f550739a18ac6bceacdfb9a0cc2dd4aed993e8d42c1b9a69987c6b918c341a21", @ANYRES16=r5, @ANYBLOB="0103000000000000000005000000"], 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, r1, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x44f}}}}, [@NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x5, 0x1}, {0xf0, 0x3}, {0x3, 0x1}, {0x6, 0x6}, {0x6, 0x3}, {0x1}, {0x0, 0x6}, {0x32, 0x6}, {0x6, 0x7}, {0x4, 0x2}, {0xd5, 0x7}, {0x5, 0x3}, {0x9, 0x5}, {0x81, 0x1}, {0x2, 0x4}, {0x3}, {0x9, 0x6}], "d882d611d13909e5"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x5}, {0x2, 0x7}, {0x2, 0x7}, {0xb4, 0x4}, {0x89}, {0xf, 0x3}], "a3acdc060ba10872"}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20008044)
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r6, &(0x7f00000009c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="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", 0x1000}], 0x2)
keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000440)='cifs.spnego\x00', &(0x7f0000000480)='id:cb2e')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x38, 0x701, 0x0, 0x0, {0x8}, [@typed={0xc, 0xbc, 0x0, 0x0, @u64=0x7ff}]}, 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000)

2m17.860442588s ago: executing program 7 (id=4014):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x40000)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000580)={0x80, 0x5, 0x4, 0x0, 0x5})

2m17.693839174s ago: executing program 7 (id=4016):
r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x100)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x0, 0x59455247, 0x500, 0x2d0, 0x0, @discrete={0x5, 0x6}})

2m17.566373683s ago: executing program 7 (id=4018):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000240)='\x94ockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='\xd1S{O', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000340)='dE\x00^\x1b\x19\xabr\xb7a\xa57\xf9\xd5\x8fR\xa0\xf6\xf7IQH\xcdPHSG\x05\x94X\x9d\xb5\xa0\xeb\xa1\xd0\x95j\xf4A\x15y\x83\xeb2\x8e0O\xdaY\xd7\xb8Q\xb4', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000780)='\xb9T\xb9\xf5\x9d\xee/\xc9\xa8\xaa\xe6\xad\xb4s\x002tT5j<\xd4\xfc\x03\x12~\x8d\xf7\xe0\xfc\x96M\x82\xf3\xf5I\xbc*[\x1eX1\xb6\x15\x1a/\x83\x99\x88\xe9\x00\xf3\xefO2\xac\xfe\n\xf4\xed>M\x84D\xf9O!Ywe\x7f\x8b\xd1C\xf3\x7fr\xe8\x1cy\xb4\x00BO\r\x86f^U\xae\x9d\x9e\x15\xa9Oon\xbf\x88vv\xea\xd9\xb6\x11F\xdfq\xa2\x9a\xa0\xfb\xadBT\xf5Q\xd2\xd4\xb7\xa3\xe7\xea\xb1\xc2\xcd\xb4\xe4\x8e\xdc.!Z\x9b\xf3\x92_\xf9$\xba\t\xc3\x8a\x1bO\r\xdeo\xd54\x83\xe2?-\xa4-\xa2\x19\x14\x80[\xa5\x94\xcd\x85\x83\xf6_C\xfe\x89\x88\t\xf2\xa6\xdb\xc1q\xce\x123Y\xdb)\xdc\xd8\x19\x87\x84P\xd9', &(0x7f00000003c0)='dU|\xcb\t\'_\x05\xe0<`\x8a(\xa0G7\xe1\x89\xd5U\xe1L\xa5\xa3\xcb4D\xbe\x02\xefZ%\xdbb{\xccw\x9b\x00'/61, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xf7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0fM\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="d2", 0x1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0)
close(r5)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, {0x3}, {0xf4ef, 0x1000}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800)
setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000200)={0x7, 0x8}, 0x2)

2m16.429856546s ago: executing program 7 (id=4019):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x1, 0x0, 0xf, 0xa, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010102}, 0x10)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="bd0600df7103800a49a6d33d4c09f57ee96b7cfb937150b30b02796d66271f8ef0", @ANYRES16=r3, @ANYRES32=r4], 0x34}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, 0x0, 0x0)

2m15.63414674s ago: executing program 7 (id=4021):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000240)='\x94ockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='\xd1S{O', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000340)='dE\x00^\x1b\x19\xabr\xb7a\xa57\xf9\xd5\x8fR\xa0\xf6\xf7IQH\xcdPHSG\x05\x94X\x9d\xb5\xa0\xeb\xa1\xd0\x95j\xf4A\x15y\x83\xeb2\x8e0O\xdaY\xd7\xb8Q\xb4', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000780)='\xb9T\xb9\xf5\x9d\xee/\xc9\xa8\xaa\xe6\xad\xb4s\x002tT5j<\xd4\xfc\x03\x12~\x8d\xf7\xe0\xfc\x96M\x82\xf3\xf5I\xbc*[\x1eX1\xb6\x15\x1a/\x83\x99\x88\xe9\x00\xf3\xefO2\xac\xfe\n\xf4\xed>M\x84D\xf9O!Ywe\x7f\x8b\xd1C\xf3\x7fr\xe8\x1cy\xb4\x00BO\r\x86f^U\xae\x9d\x9e\x15\xa9Oon\xbf\x88vv\xea\xd9\xb6\x11F\xdfq\xa2\x9a\xa0\xfb\xadBT\xf5Q\xd2\xd4\xb7\xa3\xe7\xea\xb1\xc2\xcd\xb4\xe4\x8e\xdc.!Z\x9b\xf3\x92_\xf9$\xba\t\xc3\x8a\x1bO\r\xdeo\xd54\x83\xe2?-\xa4-\xa2\x19\x14\x80[\xa5\x94\xcd\x85\x83\xf6_C\xfe\x89\x88\t\xf2\xa6\xdb\xc1q\xce\x123Y\xdb)\xdc\xd8\x19\x87\x84P\xd9', &(0x7f00000003c0)='dU|\xcb\t\'_\x05\xe0<`\x8a(\xa0G7\xe1\x89\xd5U\xe1L\xa5\xa3\xcb4D\xbe\x02\xefZ%\xdbb{\xccw\x9b\x00'/61, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xf7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0fM\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100), 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0)
close(r5)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, {0x3}, {0xf4ef, 0x1000}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800)
setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000200)={0x7, 0x8}, 0x2)

2m15.536739562s ago: executing program 6 (id=4022):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x1, 0x0, 0xf, 0xa, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010102}, 0x10)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="bd0600df7103800a49a6d33d4c09f57ee96b7cfb937150b30b02796d66271f8ef0", @ANYRES16=r3, @ANYRES32=r4], 0x34}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, 0x0, 0x0)

2m14.80241736s ago: executing program 6 (id=4024):
r0 = syz_open_dev$cec(0x0, 0x0, 0x501101)
ioctl$CEC_ADAP_G_CONNECTOR_INFO(r0, 0x8044610a, &(0x7f0000000040))
syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x58)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)
semget$private(0x0, 0x4, 0x30e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}}, 0x0)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc)
getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

2m13.362385372s ago: executing program 5 (id=4028):
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x1000800, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_setup(0x2, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0xfdfe}])
dup3(r0, r1, 0x6700000000000000)

2m12.909518528s ago: executing program 5 (id=4030):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000240)='\x94ockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='\xd1S{O', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000340)='dE\x00^\x1b\x19\xabr\xb7a\xa57\xf9\xd5\x8fR\xa0\xf6\xf7IQH\xcdPHSG\x05\x94X\x9d\xb5\xa0\xeb\xa1\xd0\x95j\xf4A\x15y\x83\xeb2\x8e0O\xdaY\xd7\xb8Q\xb4', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000780)='\xb9T\xb9\xf5\x9d\xee/\xc9\xa8\xaa\xe6\xad\xb4s\x002tT5j<\xd4\xfc\x03\x12~\x8d\xf7\xe0\xfc\x96M\x82\xf3\xf5I\xbc*[\x1eX1\xb6\x15\x1a/\x83\x99\x88\xe9\x00\xf3\xefO2\xac\xfe\n\xf4\xed>M\x84D\xf9O!Ywe\x7f\x8b\xd1C\xf3\x7fr\xe8\x1cy\xb4\x00BO\r\x86f^U\xae\x9d\x9e\x15\xa9Oon\xbf\x88vv\xea\xd9\xb6\x11F\xdfq\xa2\x9a\xa0\xfb\xadBT\xf5Q\xd2\xd4\xb7\xa3\xe7\xea\xb1\xc2\xcd\xb4\xe4\x8e\xdc.!Z\x9b\xf3\x92_\xf9$\xba\t\xc3\x8a\x1bO\r\xdeo\xd54\x83\xe2?-\xa4-\xa2\x19\x14\x80[\xa5\x94\xcd\x85\x83\xf6_C\xfe\x89\x88\t\xf2\xa6\xdb\xc1q\xce\x123Y\xdb)\xdc\xd8\x19\x87\x84P\xd9', &(0x7f00000003c0)='dU|\xcb\t\'_\x05\xe0<`\x8a(\xa0G7\xe1\x89\xd5U\xe1L\xa5\xa3\xcb4D\xbe\x02\xefZ%\xdbb{\xccw\x9b\x00'/61, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xf7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0fM\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="d2", 0x1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0)
close(r5)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, {0x3}, {0xf4ef, 0x1000}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800)
setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000200)={0x7, 0x8}, 0x2)

2m11.902031431s ago: executing program 5 (id=4032):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x180, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x90000000}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x64)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000030601010000000010000000000000000900020073797a30000000000900020073797a31000000000900020073797a30000000000500010007"], 0x40}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x1}, 0x50)
get_mempolicy(&(0x7f00000002c0), &(0x7f0000000300), 0x4, &(0x7f0000fff000/0x1000)=nil, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r4, 0x1}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000400000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r6, 0x0)

2m10.742815062s ago: executing program 5 (id=4034):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e0ef455ad", 0x10}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)

2m10.477282899s ago: executing program 5 (id=4036):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x1, 0x0, 0xf, 0xa, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010102}, 0x10)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="bd0600df7103800a49a6d33d4c09f57ee96b7cfb937150b30b02796d66271f8ef0", @ANYRES16=r3, @ANYRES32=r4], 0x34}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, 0x0, 0x0)

2m9.793618501s ago: executing program 5 (id=4037):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0)
mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2000)
setresuid(0x0, r5, 0x0)
r6 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newqdisc={0x54, 0x14, 0xf0b, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb, 0x1}, {0x4, 0x9}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd7, 0xfc, 0x200, 0xa, 0x0, 0x4, 0x7e}}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x54}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) (fail_nth: 1)

2m4.189769823s ago: executing program 36 (id=4007):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

2m0.401836848s ago: executing program 37 (id=4021):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000240)='\x94ockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='\xd1S{O', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000340)='dE\x00^\x1b\x19\xabr\xb7a\xa57\xf9\xd5\x8fR\xa0\xf6\xf7IQH\xcdPHSG\x05\x94X\x9d\xb5\xa0\xeb\xa1\xd0\x95j\xf4A\x15y\x83\xeb2\x8e0O\xdaY\xd7\xb8Q\xb4', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000780)='\xb9T\xb9\xf5\x9d\xee/\xc9\xa8\xaa\xe6\xad\xb4s\x002tT5j<\xd4\xfc\x03\x12~\x8d\xf7\xe0\xfc\x96M\x82\xf3\xf5I\xbc*[\x1eX1\xb6\x15\x1a/\x83\x99\x88\xe9\x00\xf3\xefO2\xac\xfe\n\xf4\xed>M\x84D\xf9O!Ywe\x7f\x8b\xd1C\xf3\x7fr\xe8\x1cy\xb4\x00BO\r\x86f^U\xae\x9d\x9e\x15\xa9Oon\xbf\x88vv\xea\xd9\xb6\x11F\xdfq\xa2\x9a\xa0\xfb\xadBT\xf5Q\xd2\xd4\xb7\xa3\xe7\xea\xb1\xc2\xcd\xb4\xe4\x8e\xdc.!Z\x9b\xf3\x92_\xf9$\xba\t\xc3\x8a\x1bO\r\xdeo\xd54\x83\xe2?-\xa4-\xa2\x19\x14\x80[\xa5\x94\xcd\x85\x83\xf6_C\xfe\x89\x88\t\xf2\xa6\xdb\xc1q\xce\x123Y\xdb)\xdc\xd8\x19\x87\x84P\xd9', &(0x7f00000003c0)='dU|\xcb\t\'_\x05\xe0<`\x8a(\xa0G7\xe1\x89\xd5U\xe1L\xa5\xa3\xcb4D\xbe\x02\xefZ%\xdbb{\xccw\x9b\x00'/61, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xf7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0fM\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100), 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0)
close(r5)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, {0x3}, {0xf4ef, 0x1000}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800)
setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000200)={0x7, 0x8}, 0x2)

1m59.681392277s ago: executing program 38 (id=4024):
r0 = syz_open_dev$cec(0x0, 0x0, 0x501101)
ioctl$CEC_ADAP_G_CONNECTOR_INFO(r0, 0x8044610a, &(0x7f0000000040))
syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x58)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)
semget$private(0x0, 0x4, 0x30e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}}, 0x0)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc)
getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

1m54.661961658s ago: executing program 39 (id=4037):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0)
mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2000)
setresuid(0x0, r5, 0x0)
r6 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newqdisc={0x54, 0x14, 0xf0b, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb, 0x1}, {0x4, 0x9}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd7, 0xfc, 0x200, 0xa, 0x0, 0x4, 0x7e}}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x54}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) (fail_nth: 1)

53.393283031s ago: executing program 4 (id=4231):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0x1}, 0x2}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
pipe2$watch_queue(0x0, 0x80)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10)
unshare(0x2c020400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82d", 0x12)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0)
unshare(0x20000400)
syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x3)

51.206023899s ago: executing program 4 (id=4242):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)

50.554010074s ago: executing program 0 (id=4245):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000a00)={0x1, 0x0, [{0x40000081}]})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040))
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x10001, 0x0, 0x201, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x100000001, 0xffffffff, 0x2})
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r8, 0x4b41, &(0x7f0000000f80))
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

49.850106995s ago: executing program 4 (id=4248):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f0000000000), 0x6b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0)

48.787793171s ago: executing program 4 (id=4250):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000001f000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505c5a440000000010109024400010100c000090400002302020000052406000005240004000d240f01090000041c19abfc33e29c2abfb06120000000000000090581032000037fff0905820200"], 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x10, 0x803, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r4 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000380)=""/252, 0xfc}], 0x1}}], 0x1, 0x0, 0x0)
write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r9, 0x40384708, &(0x7f0000000340)={0x158, 0xbe, 0x7f2, 0x8, 0x1a, "3eccd25569e20900"})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xfff7, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

48.676994742s ago: executing program 0 (id=4253):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x40b942b37d0000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
close(r5)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x20, 0x4, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "892f872103d2261f07d58dc52866fcdd5d0695f56b568e3f", "8c2fa1674df1637fd57d66f893744c3893dcf05ee16d002146626b771cb40c4d"}}}}}}}, 0x0)
write$UHID_INPUT(r5, &(0x7f0000000d40)={0x8, {"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", 0x1000}}, 0x1006)

48.474817128s ago: executing program 0 (id=4254):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000002c0001002abd70000000000008000000", @ANYRES32=0x0, @ANYBLOB="0a000080976b640868600000040001"], 0x28}], 0x1}, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r3)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000001c000180060001000a00050006000200110000000600040001150000"], 0x30}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800)
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@alg={0x118, 0x10, 0x10, 0x70bd25, 0x25dfdbfd, {{'drbg_nopr_ctr_aes128\x00'}, '\x00', '\x00', 0x400, 0x400}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x7fff}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x9}]}, 0x118}, 0x1, 0x0, 0x0, 0x20040810}, 0x850)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000340)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6e17fd477051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e", 0x7a}, {&(0x7f0000000080)="ce2ede98d4bde4b9a7931c4e260090a647151bacb721146be7ff4494578b05c18fc56c1571aa57d0f79d3c", 0x2b}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e3d32aa2bf0bd42348d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da241fe082c8f8602308cd2f7dc846c93e62a8d53d22fcabce47b5531463290c970dccfaa7da3e4e457ea05fd85e6fcc1fcae56136f44b991100e3db7c750c3ccb3e01d6598d53d05ca7503d7430f3ff2b79ab629faa1dfb2d0899dd807d28174305bd600e50112aa4d0ec230a89b3078bb60a198eda7169d91005cda3fc9870956d72773b", 0xc7}, {&(0x7f0000000700)="c615271a9dc3c1d27eee864db95e0b71f8e472c141507cddcc8c5cd540e0d67c78a1965515323d75357cb0914b03d9b18c63ca3692399e0aa8be01a5b9883f1e4830cd8b777bb75c27cba21f087b8a8a92ba4353b5e825f3837bfcce5681589bd0ce90380fed43b1ebc4d4c4e3efe4c1a60e3d56753ebac731ddf0a80a42e71cd2fa58a5779bd29d2b7e65156607f7ca769417", 0x93}, {&(0x7f00000003c0)="67eadb57934b9ead1a77f2672409ae94cef03d84d8918fbc8bc6c19a9777c4b7da5a1b41f52f23758f9869f9c9ea21840ac15fee3e953d06dd8640bf6bc1eb14c2bd9dd7badaa075569fd4f318f86e8f5b92097982410cd8c0c9223e079a80d2e9e463eceb148e92b0fb46c9ed97f0a0266131fcb91743cd3ee4c0d2613cd05bc11cf811116e7f64395a5604ae686a4163f834a418887da942c013eff87a5e4e86d322e0c27066ae67765d27fd833f599f5d51f560f28bf8390706a9f86ea17be283cbe08d20ab6d8a694a45d6d6ed071f31621c712aae6d6dd4f43d9aaaa236c54a0e8601a827a115", 0xe9}, {&(0x7f0000000180)="753a9e524dd27ba030d08f808bb67c", 0xf}, {&(0x7f00000002c0)="0ed92d29fe16a58cbe", 0x9}, {0x0}], 0x8}], 0x1, 0x48800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x53, &(0x7f0000000000)=[{0x68b, 0xf, 0x6, 0x6}, {0x2, 0x1, 0x2, 0x40}, {0x8040, 0xbc, 0x9, 0x4}, {0x8, 0x9, 0xe8, 0x7fff}]}, 0x10)
r9 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
syz_usb_disconnect(r9)

47.05488344s ago: executing program 0 (id=4258):
socket$inet6(0xa, 0x11, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = gettid()
timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182)
ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe})
socket$inet_udp(0x2, 0x2, 0x0)

46.002970203s ago: executing program 0 (id=4264):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x1, 0x0, 0xf, 0xa, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010102}, 0x10)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="bd0600df7103800a49a6d33d4c09f57ee96b7cfb937150b30b02796d66271f8ef0", @ANYRES16=r3, @ANYRES32=r4], 0x34}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, 0x0, 0x0)

45.195702319s ago: executing program 4 (id=4267):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x1, 0x0, 0xf, 0xa, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010102}, 0x10)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="bd0600df7103800a49a6d33d4c09f57ee96b7cfb937150b30b02796d66271f8ef0", @ANYRES16=r3, @ANYRES32=r4], 0x34}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, 0x0, 0x0)

43.696422026s ago: executing program 4 (id=4272):
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
r0 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r4 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x8})
ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0cc5640, &(0x7f0000000540)={0x1, @sdr={0x36314d4e, 0x7}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500), 0x0, 0xfffffffffffffffd)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)

42.407695977s ago: executing program 0 (id=4277):
socket$inet(0x10, 0x3, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x62043, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, 0x0) (async)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x100000400000bce) (async)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0xfffffffffffffc39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x1000, 0x7, 0x0, 0x41})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x3, @scatter={0x2, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000000340)=""/203, 0x129}]}, &(0x7f0000000180)="bb881affa01a", 0x0, 0x8001, 0x0, 0x3, 0x0}) (async)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) (async)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) (async)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x200100, 0x0) (async, rerun: 32)
getrlimit(0x9, &(0x7f00000000c0)) (rerun: 32)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32)
r4 = getpid()
recvfrom$rose(0xffffffffffffffff, &(0x7f0000000280)=""/60, 0x3c, 0x10001, &(0x7f00000002c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @null}, 0x1c) (async)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)

28.031444078s ago: executing program 40 (id=4272):
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
r0 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r4 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x8})
ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0cc5640, &(0x7f0000000540)={0x1, @sdr={0x36314d4e, 0x7}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500), 0x0, 0xfffffffffffffffd)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)

27.361120557s ago: executing program 41 (id=4277):
socket$inet(0x10, 0x3, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x62043, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, 0x0) (async)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x100000400000bce) (async)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0xfffffffffffffc39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x1000, 0x7, 0x0, 0x41})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x3, @scatter={0x2, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000000340)=""/203, 0x129}]}, &(0x7f0000000180)="bb881affa01a", 0x0, 0x8001, 0x0, 0x3, 0x0}) (async)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) (async)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) (async)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x200100, 0x0) (async, rerun: 32)
getrlimit(0x9, &(0x7f00000000c0)) (rerun: 32)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32)
r4 = getpid()
recvfrom$rose(0xffffffffffffffff, &(0x7f0000000280)=""/60, 0x3c, 0x10001, &(0x7f00000002c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @null}, 0x1c) (async)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)

10.585771787s ago: executing program 2 (id=4361):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x18, r3, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000000)={0xff, [0x5, 0xfffffffa], 0x3}, 0x10)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0xffffffff]}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)

10.017739807s ago: executing program 9 (id=4364):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0)
ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0xa7, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x1, 0x1, 0x73, 0xc0, 0x7f, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "b6"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x1000, 0x0, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x7}, @obex={0x5}, @dmm={0x7, 0x24, 0x14, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0x6, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x2, 0x1, 0x2, 0xd21, 0x3}, @mdlm_detail={0xffffffffffffff40, 0x24, 0x13, 0x8, "b5f0b489ebc8b9c0b2855efff6a9b6a79deeb568440a33e6d5ea1ab4390854c4574a1634aebd"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xe, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x7, 0x3}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x7, 0xfd, 0xc0, 0x8, 0x5}, 0x20, &(0x7f0000000040)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x4, 0x0, 0x3, [0xf0, 0xffc000]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x8, 0x1, 0x8}]}, 0x6, [{0x77, &(0x7f00000001c0)=@string={0x77, 0x3, "f48b6e2780a8e4bcf3f816d831ccfb822ae98ec40cabec7d9515e89120cc0e3ceca2da76e73332ec5d14ece7c7e93ac7a1f2a22a07f56313ae1e92667955be60729146eafe82971c70b7fc63a6ab83b29cab41b7a2f5a136e40bc68be3ebaea78854b89ae0b9d9dcba2303c0ec6e5fa2abbf67e3ad"}}, {0xdc, &(0x7f0000000240)=@string={0xdc, 0x3, "1aafda6175f46d6d34bd2f00273498f6491457deed7fe6b416875fb97ae5ecbef10b7c52a06942f2b340def4f9758247f8763108b10391321d2e86976883388ac386b3b868d6305a0f5006cf022823988758843355df5c37bb0c8901b7875be9e25a6d06c7c9ae91242d132f7553b5feea9fc147fc2de3b49427fce08e96aaa3b320c09282996247a5457373252b82b3defc225dc087b31e79458a781105d91dab6c531cab636c807cfdf0faa1dbd3d45907b74969f7ff3e69f2503300000000000072f59a977221ddbf96dd29379b1cab0fbc00000000000000"}}, {0xf5, &(0x7f0000000440)=@string={0xf5, 0x3, "9725bc30739879f0f1bc90939bb7931ecf99339ed41048ddd0fe245e7a3741575100ff6df2bda44595094d55ccd7811f5f711400fb5a684aa891581d7f0296be38ed2a51ee90bbb8469ca5cb104b8185d5875b488656249c945be0c0e483abb428c89d5a922d02c9479f428d65b66f0f5e558de4358ca4d4ef902338797ae0cd47026d4574a2e8d8e1c2b24d8454f3b83a0fcf127dcc5b09c54a3e6c8efe8c433d7493abb3cd735ce3430d5ac2c5b56e18996837f528362b004770072a9441effe9730da81979c5b81d6c2d19a4c8b4d748172db6285de27f33ae37e7aa590226bc814e98bc38831d0cc11707f858d5718a824"}}, {0x97, &(0x7f0000000540)=@string={0x97, 0x3, "6ee61fce43cf2f6842f6e2f8045ea54ddc8fa71a373c839e41af8f3c94623f93fc1bda4b559f46a410b3e482c5bea01f84ca72d89b45ad692db565ece634dcf86ce688ac785dc13b94ce7e047a7a5118c8bc39d8421c019ab22fefea8df89a146d55f1dd5d6e05ecb769e04de62c7105cb24e8147aa19e5c886f4ccb5e46018da5740606263a8122878178046745ab811141244d52"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c01}}]})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9.628485144s ago: executing program 2 (id=4365):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x1040, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x12, 0x40002050, 0x0, 0x58)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x19)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r4, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r5, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000080)={0x63, 0x4, 0x4, 0x4, 0x9, 0x81})
recvmmsg(r4, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x25dfdbff}, 0x24}, 0x1, 0x0, 0x0, 0x40051}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

9.027398026s ago: executing program 2 (id=4367):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000)=0xc7, 0x4)
r1 = socket(0x2a, 0x800000002, 0x0)
ioctl$SIOCPNENABLEPIPE(r1, 0x541b, 0x1000000000000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x75, 0x5f, 0x32, 0x20, 0x17dd, 0x5500, 0xf35e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0x42, 0xa4}}]}}]}}, 0x0)

7.370796664s ago: executing program 2 (id=4369):
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4840)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000002c0)={0x3, {{0xa, 0x4e21, 0x1ff, @local, 0x4}}, {{0xa, 0x4e24, 0xc, @empty, 0x10}}}, 0x108)
ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000400)={0x80, 0x80000001})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r6, 0x0, 0x18, 0x0, &(0x7f00000000c0))
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x80010, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00')
bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x40}], 0x2}], 0x1, 0x0)

6.440835405s ago: executing program 2 (id=4371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0})
fcntl$getflags(r2, 0x10cacbe445fb327d)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x3f})
ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r5, 0x5501)
r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0)
ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000340)={0x51, 0xfff8, 0xd, {0x2, 0xdac}, {0x8000, 0x5}, @rumble={0x851c, 0x101}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="63b95fb1d30fd68f835b2dd5c30ec994cbe6b22567ead43adb00d8cc0d47acf2842e8006573f54bf6c8e1895536e04675a"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)

5.404622087s ago: executing program 2 (id=4373):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0x1}, 0x2}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
pipe2$watch_queue(0x0, 0x80)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10)
unshare(0x2c020400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82d", 0x12)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
unshare(0x20000400)
syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x3)
openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

5.382633438s ago: executing program 9 (id=4374):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0})
fcntl$getflags(r2, 0x10cacbe445fb327d)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x3f})
ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r5, 0x5501) (fail_nth: 3)
r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0)
ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000340)={0x51, 0xfff8, 0xd, {0x2, 0xdac}, {0x8000, 0x5}, @rumble={0x851c, 0x101}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="63b95fb1d30fd68f835b2dd5c30ec994cbe6b22567ead43adb00d8cc0d47acf2842e8006573f54bf6c8e1895536e04675a"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)

4.610534478s ago: executing program 1 (id=4314):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket(0x2c, 0x4, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x481e)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010100, @remote, 0x1, 0x3, [@empty, @multicast1, @empty]}, 0x1c)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$setperm(0x5, 0x0, 0x30010001)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r5)
chdir(&(0x7f0000000300)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"})

4.254921202s ago: executing program 9 (id=4377):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) (fail_nth: 3)

3.951726013s ago: executing program 3 (id=4378):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0)

3.520034252s ago: executing program 9 (id=4379):
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4840)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000002c0)={0x3, {{0xa, 0x4e21, 0x1ff, @local, 0x4}}, {{0xa, 0x4e24, 0xc, @empty, 0x10}}}, 0x108)
ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000400)={0x80, 0x80000001})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r6, 0x0, 0x18, 0x0, &(0x7f00000000c0))
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x80010, 0xffffffffffffffff, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x40}], 0x2}], 0x1, 0x0)

3.519778901s ago: executing program 3 (id=4380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000030601010000000010000000000000000900020073797a30000000000900020073797a31000000000900020073797a30000000000500010007"], 0x40}}, 0x0)

3.510991187s ago: executing program 1 (id=4381):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
epoll_create(0x802)

3.346709811s ago: executing program 3 (id=4382):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000840)={0xa0, 0x0, 0x0, {{0x0, 0x3, 0xff, 0x0, 0xf1, 0x800008, {0x3, 0x8, 0x8002313, 0x9, 0x9, 0x8, 0x8, 0x80, 0x0, 0xc000, 0x7, 0x0, 0x0, 0x1, 0x200}}, {0x0, 0x18}}}, 0xa0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000ae000000ae00000007000000100000000000000a01000000000000000100000d0000000001000000010000000c00000000000007000000000a0000000000001101000000070000000b000000000000010000000041000d010100000000000012030000000a0000000000000a020002000000030000005c00000004000000040000000a0000000700000003000000ff0000000300000079260a0000000000000b0500000002000000000000070000001b0000006100300e3000"], &(0x7f0000000280)=""/97, 0xcf, 0x61, 0x3, 0x9}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="f3ac6a7a9a80cfad4a82318c80c910092f46ba8993fad929ab80db9ac3f433f9d66c05a9e65e75465af995c633dd501ab9e3cb083bbcbe3f97bc561ddd8a1262054c56f85cee538298b620", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @flow_dissector, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/hardlockup_count', 0x0, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x2c, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES8=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000001836000002000000000000000000000018320000010000000000000000000000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180000000000000000000000940f000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x5d, &(0x7f0000000780)=""/93, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xc, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r3, r4], &(0x7f0000000440)=[{0x0, 0x5, 0x6, 0x8}], 0x10, 0x8}, 0x94)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = socket(0xa, 0x801, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00', @ANYRES32=<r8=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702740ca9a6cebfe74a0158e80000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES16=r1, @ANYBLOB="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", @ANYRES8=<r10=>r5], 0x48)
close(0x3)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50)
r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="2c02800844526522998be2a09a8195df1c6bc16a24fb3345a280d8c00eec8d7fb69cc98f0a0a7116d434bbdbe6cf7e4757751063b36a6ce164a2f1", @ANYRES32, @ANYRES64=r11, @ANYRESHEX=r8, @ANYRESHEX=r10, @ANYBLOB="2f68d47329d2a2a87a5531a9e8eda3ec5f97256e007cec3def0b3a892866ac5d1d638339a73a75d74f78121b7ba16f6ef8f33d3bf2abeab74f2a47cb8b66d866ddd3258e377db411911bfd1c676a89bf29afb6bda78ce399c5fc70a6c854038c7d7f0b962a4927b1db44e9e14ec5f0cb0f4b04ff7d9161425c437b92383d3e700221cae6a81e15215ab12c2c457bb47fff6913cfd382b05cd5bf52df856d42a5e665c42a2f7c96ed443b669efeae5048d3f5f5c1067762f5b2e3cfc8935cf4366d57a1b14ca81f3abae8", @ANYRESOCT=r12, @ANYRES8=r7, @ANYRES32=r5, @ANYRESDEC=r13], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r14}, 0x18)
r15 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r15, 0x0)
r16 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r16, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
getsockopt(r6, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54)
timer_create(0x1, 0x0, &(0x7f0000044000))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}}, 0x0)

3.337432748s ago: executing program 1 (id=4383):
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x1, 0x3, 0xfffffffe, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x6, 0x2})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000020c0), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1)

2.6267768s ago: executing program 3 (id=4384):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x1040, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x12, 0x40002050, 0x0, 0x58)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x19)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r4, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r5, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000080)={0x63, 0x4, 0x4, 0x4, 0x9, 0x81})
recvmmsg(r4, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x25dfdbff}, 0x24}, 0x1, 0x0, 0x0, 0x40051}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

2.567374006s ago: executing program 9 (id=4385):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

2.060191672s ago: executing program 9 (id=4386):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="48c5"], 0x69)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
msgget$private(0x0, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x121}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20040880)

1.963608374s ago: executing program 3 (id=4387):
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
r0 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x8})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006772657461700000", @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x3)

1.84671265s ago: executing program 1 (id=4388):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0x1}, 0x2}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
pipe2$watch_queue(0x0, 0x80)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10)
unshare(0x2c020400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82d", 0x12)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
unshare(0x20000400)
syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x3)
openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

1.250594438s ago: executing program 8 (id=4319):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='westwood\x00', 0x9)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9a1e9c0af34f8e1024ef6820e849d68938c25a72d1e01d5080ed41e9bd098e864bf5f57dc7f210c286a44bc9c59888ef9f67c77be4085b2c7a04b1", 0x3b}], 0x1}, 0x4008840)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
sendmmsg$sock(r0, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000006c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x13}, 0x19}}, 0x80, 0x0}}, {{&(0x7f0000004b00)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000004ec0)=[{&(0x7f0000004d80)="61a4886326dce18db36674f9893085d590337ca24a00d91795e68b5bf32de1b2da108e0694c3e305fa70a28a4e56d9", 0x2f}, {&(0x7f0000004dc0)="17a507d066b385384d4095c05444814a589a8aeff243ec06021b2beaeac803274b5e3d96da644f458025fef885f6ca6340e143a09a14e7d4fea2c3413ed28ab2ac9a7c286b19a101df94ff416c9dcd693cdc2e0e78eef840a33ee45a113999d90b940894aa97a1e34a834a92ece1b42460fb54e48a46fb408ea35b401332c232021f7768e330d3b6b471113e3313ffcc7938f04dab905f3bf5d9f99871259d74bd360e7705acd8be282559d5594307ed6bd5fe38bd1687b96dcf21128f908bc9ce94a2438800ea01ae998d66ef3250234eab86102fd0648181a89349d86d7ece1c1a", 0xe2}], 0x2}}], 0x5, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

805.144674ms ago: executing program 3 (id=4389):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae5", @ANYRESHEX=0x0], 0x0)

557.91414ms ago: executing program 8 (id=4390):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0xf, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_crypto(0x10, 0x3, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee01}}, './file0\x00'})
getgroups(0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0)
read$msr(r2, &(0x7f0000019380)=""/102400, 0x19000)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
read$FUSE(r3, 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)

545.590759ms ago: executing program 1 (id=4391):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x1040, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x12, 0x40002050, 0x0, 0x58)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x19)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r4, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r5, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000080)={0x63, 0x4, 0x4, 0x4, 0x9, 0x81})
recvmmsg(r4, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x25dfdbff}, 0x24}, 0x1, 0x0, 0x0, 0x40051}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window={0x3, 0x3b7, 0x100}, @window={0x3, 0x7, 0x6}], 0x3)

0s ago: executing program 1 (id=4392):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

.768326][T21269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1340.818500][   T59] hsr_slave_0: left promiscuous mode
[ 1340.826991][   T59] hsr_slave_1: left promiscuous mode
[ 1340.840466][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1340.855851][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1340.869176][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1340.887682][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1340.920519][   T59] hsr_slave_0: left promiscuous mode
[ 1340.926831][   T59] hsr_slave_1: left promiscuous mode
[ 1340.933076][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1340.942170][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1340.956607][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1341.002465][   T59] veth1_macvtap: left promiscuous mode
[ 1341.011144][   T59] veth0_macvtap: left promiscuous mode
[ 1341.017539][   T59] veth1_vlan: left promiscuous mode
[ 1341.028041][   T59] veth0_vlan: left promiscuous mode
[ 1341.037788][   T59] veth1_macvtap: left promiscuous mode
[ 1341.043479][   T59] veth0_macvtap: left promiscuous mode
[ 1341.054854][   T59] veth1_vlan: left promiscuous mode
[ 1341.060315][   T59] veth0_vlan: left promiscuous mode
[ 1341.362514][   T30] kauditd_printk_skb: 34 callbacks suppressed
[ 1341.362531][   T30] audit: type=1400 audit(1752220228.581:9459): avc:  denied  { bind } for  pid=21361 comm="syz.3.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1341.411952][   T30] audit: type=1400 audit(1752220228.581:9460): avc:  denied  { setopt } for  pid=21361 comm="syz.3.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1341.444045][   T30] audit: type=1400 audit(1752220228.581:9461): avc:  denied  { write } for  pid=21361 comm="syz.3.4070" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1341.716760][   T30] audit: type=1400 audit(1752220228.941:9462): avc:  denied  { mount } for  pid=21365 comm="syz.3.4072" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 1341.738519][T20817] Bluetooth: hci3: command tx timeout
[ 1341.857885][   T59] team0 (unregistering): Port device team_slave_1 removed
[ 1341.901971][   T59] team0 (unregistering): Port device team_slave_0 removed
[ 1342.300811][   T59] lo (unregistering): left allmulticast mode
[ 1342.664165][   T59] team0 (unregistering): Port device team_slave_1 removed
[ 1342.715870][   T59] team0 (unregistering): Port device team_slave_0 removed
[ 1343.100768][   T59] lo (unregistering): left allmulticast mode
[ 1343.117057][T21231] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1343.154257][   T30] audit: type=1400 audit(1752220230.371:9463): avc:  denied  { unmount } for  pid=17875 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 1343.258273][T21231] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1343.285920][T21231] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1343.355634][T21269] hsr_slave_0: entered promiscuous mode
[ 1343.361965][T21269] hsr_slave_1: entered promiscuous mode
[ 1343.393305][T21269] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1343.532735][T21269] Cannot create hsr debugfs directory
[ 1343.766695][T21231] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1343.807801][T20817] Bluetooth: hci3: command tx timeout
[ 1343.820024][T21199] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1344.355569][T21399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1344.364218][T21399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1344.481795][   T30] audit: type=1400 audit(1752220231.691:9464): avc:  denied  { read } for  pid=21398 comm="syz.3.4074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1344.985262][T21233] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1345.116503][T21233] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1345.338958][T21233] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1345.530486][T21233] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1345.938034][T21231] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1346.469721][   T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.512198][T21231] 8021q: adding VLAN 0 to HW filter on device team0
[ 1346.632222][   T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.654960][T14692] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1346.662174][T14692] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1346.719640][T14692] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1346.726836][T14692] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1346.739348][T21199] veth0_vlan: entered promiscuous mode
[ 1346.779770][   T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.830893][T21199] veth1_vlan: entered promiscuous mode
[ 1346.852914][T21269] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1346.925763][   T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.976940][T21269] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1347.048832][T21432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1347.089608][T21269] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1347.093747][T21432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1347.134637][T21199] veth0_macvtap: entered promiscuous mode
[ 1347.155874][T21269] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1347.210350][T21199] veth1_macvtap: entered promiscuous mode
[ 1347.440357][T21233] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1347.449685][T21199] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1347.467676][T21199] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1347.482596][T21199] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1347.492626][T21199] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1347.507698][T21199] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1347.518261][T21199] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1347.536838][   T59] bridge_slave_1: left allmulticast mode
[ 1347.542586][   T59] bridge_slave_1: left promiscuous mode
[ 1347.552424][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1347.563789][   T59] bridge_slave_0: left allmulticast mode
[ 1347.569476][   T59] bridge_slave_0: left promiscuous mode
[ 1347.575866][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1347.707356][   T30] audit: type=1400 audit(1752220234.931:9465): avc:  denied  { read write } for  pid=21447 comm="syz.3.4076" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1347.737870][   T30] audit: type=1400 audit(1752220234.931:9466): avc:  denied  { open } for  pid=21447 comm="syz.3.4076" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1347.761860][   T30] audit: type=1400 audit(1752220234.931:9467): avc:  denied  { mount } for  pid=21447 comm="syz.3.4076" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 1347.935157][   T30] audit: type=1400 audit(1752220235.151:9468): avc:  denied  { read } for  pid=21447 comm="syz.3.4076" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1347.952548][T21454] block device autoloading is deprecated and will be removed.
[ 1347.957964][   T30] audit: type=1400 audit(1752220235.151:9469): avc:  denied  { open } for  pid=21447 comm="syz.3.4076" path="/213/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1348.015317][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1348.027896][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1348.037980][   T59] bond0 (unregistering): Released all slaves
[ 1348.118770][T21231] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1348.204685][   T30] audit: type=1400 audit(1752220235.401:9470): avc:  denied  { unmount } for  pid=17875 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 1348.677645][T21471] syz.3.4077: attempt to access beyond end of device
[ 1348.677645][T21471] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1348.691031][T21471] gfs2: error -5 reading superblock
[ 1348.948773][T21233] 8021q: adding VLAN 0 to HW filter on device team0
[ 1348.978293][T21231] veth0_vlan: entered promiscuous mode
[ 1349.060916][T14698] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1349.068119][T14698] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1349.095210][T14698] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1349.102454][T14698] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1349.204883][T21231] veth1_vlan: entered promiscuous mode
[ 1349.257783][T20417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1349.265890][T20417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1349.286814][   T59] hsr_slave_0: left promiscuous mode
[ 1349.293038][   T59] hsr_slave_1: left promiscuous mode
[ 1349.346202][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1349.573492][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1349.639121][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1349.653090][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1349.682356][   T59] veth1_macvtap: left promiscuous mode
[ 1349.697118][   T59] veth0_macvtap: left promiscuous mode
[ 1349.702772][   T59] veth1_vlan: left promiscuous mode
[ 1349.714644][   T59] veth0_vlan: left promiscuous mode
[ 1349.901288][   T30] audit: type=1400 audit(1752220237.121:9471): avc:  denied  { ioctl } for  pid=21487 comm="syz.3.4079" path="socket:[83816]" dev="sockfs" ino=83816 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1350.512325][   T59] team0 (unregistering): Port device team_slave_1 removed
[ 1350.554337][   T59] team0 (unregistering): Port device team_slave_0 removed
[ 1350.944521][   T59] lo (unregistering): left allmulticast mode
[ 1351.042162][T21269] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1351.077672][T14698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1351.103125][T21269] 8021q: adding VLAN 0 to HW filter on device team0
[ 1351.125160][T14698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1351.150494][T21231] veth0_macvtap: entered promiscuous mode
[ 1351.165951][T21515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1351.177178][T21515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1351.198164][T14681] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1351.205326][T14681] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1351.231458][   T30] audit: type=1400 audit(1752220238.451:9472): avc:  denied  { mounton } for  pid=21199 comm="syz-executor" path="/root/syzkaller.vtJs8C/syz-tmp" dev="sda1" ino=2066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 1351.277160][T21233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1351.290734][T21233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1351.302256][   T30] audit: type=1400 audit(1752220238.451:9473): avc:  denied  { mount } for  pid=21199 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1351.328049][T21231] veth1_macvtap: entered promiscuous mode
[ 1351.503509][   T30] audit: type=1400 audit(1752220238.451:9474): avc:  denied  { mount } for  pid=21199 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1352.051873][T20471] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1352.059080][T20471] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1352.198480][T21231] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1352.244487][T21231] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1352.658348][T21231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.670389][T21231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.699785][T21231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.766679][T21231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.898642][T21233] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1353.033268][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1353.070171][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 1353.070188][   T30] audit: type=1400 audit(1752220240.291:9486): avc:  denied  { append } for  pid=21546 comm="syz.9.4081" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1353.077097][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1353.159721][T21269] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1353.227679][ T6441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1353.243424][T21551] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4081'.
[ 1353.259358][ T6441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1353.288233][T21551] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4081'.
[ 1353.417928][T21269] veth0_vlan: entered promiscuous mode
[ 1353.576166][T21269] veth1_vlan: entered promiscuous mode
[ 1353.662128][T21565] fuse: Bad value for 'fd'
[ 1353.668823][T21565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4055'.
[ 1353.747757][T21565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4055'.
[ 1353.913270][T21233] veth0_vlan: entered promiscuous mode
[ 1353.922206][T21269] veth0_macvtap: entered promiscuous mode
[ 1353.945637][T21269] veth1_macvtap: entered promiscuous mode
[ 1353.967641][T21233] veth1_vlan: entered promiscuous mode
[ 1354.000894][T21269] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1354.033030][T21269] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1354.066582][T21269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.094244][T21269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.106033][T21269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.118597][T21269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.183151][T21233] veth0_macvtap: entered promiscuous mode
[ 1354.247984][T21233] veth1_macvtap: entered promiscuous mode
[ 1354.460826][T21233] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1354.506587][   T30] audit: type=1400 audit(1752220241.731:9487): avc:  denied  { name_connect } for  pid=21572 comm="syz.0.4082" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[ 1354.556008][T21233] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1354.602093][T21233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.640388][   T30] audit: type=1400 audit(1752220241.831:9488): avc:  denied  { setopt } for  pid=21572 comm="syz.0.4082" laddr=fe80::e lport=48234 faddr=fe80::bb fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1354.653399][T21233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.688584][T21233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.767829][T21233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.797037][   T30] audit: type=1400 audit(1752220242.021:9489): avc:  denied  { append } for  pid=21578 comm="syz.0.4084" name="v4l-subdev0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1354.871629][   T30] audit: type=1400 audit(1752220242.021:9490): avc:  denied  { create } for  pid=21578 comm="syz.0.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1354.898380][T20471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1354.917279][T20471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1354.988109][   T30] audit: type=1400 audit(1752220242.021:9491): avc:  denied  { write } for  pid=21578 comm="syz.0.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1355.044364][T20471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1355.117093][T20471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1355.463235][T21598] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4086'.
[ 1355.571239][T14686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1355.609122][T14686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1355.762128][T21603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4061'.
[ 1355.820595][T21603] 9pnet_fd: Insufficient options for proto=fd
[ 1355.901574][   T30] audit: type=1400 audit(1752220243.091:9492): avc:  denied  { ioctl } for  pid=21596 comm="syz.2.4061" path="socket:[85579]" dev="sockfs" ino=85579 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1355.988920][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1356.107425][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1356.173276][   T30] audit: type=1400 audit(1752220243.101:9493): avc:  denied  { bind } for  pid=21596 comm="syz.2.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1356.493496][   T30] audit: type=1400 audit(1752220243.291:9494): avc:  denied  { bind } for  pid=21602 comm="syz.9.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1356.564753][   T30] audit: type=1400 audit(1752220243.291:9495): avc:  denied  { name_bind } for  pid=21602 comm="syz.9.4088" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[ 1356.880847][T21623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4089'.
[ 1357.120248][T21623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4089'.
[ 1357.645105][T21633] block device autoloading is deprecated and will be removed.
[ 1358.315200][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 1358.315216][   T30] audit: type=1400 audit(1752220245.541:9500): avc:  denied  { read } for  pid=21644 comm="syz.4.4096" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1358.421604][   T30] audit: type=1400 audit(1752220245.571:9501): avc:  denied  { open } for  pid=21644 comm="syz.4.4096" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1358.642430][   T30] audit: type=1400 audit(1752220245.571:9502): avc:  denied  { rename } for  pid=21644 comm="syz.4.4096" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1358.927344][T21665] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4098'.
[ 1359.187613][   T30] audit: type=1400 audit(1752220246.411:9503): avc:  denied  { read } for  pid=21669 comm="syz.4.4100" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1359.426734][   T30] audit: type=1400 audit(1752220246.411:9504): avc:  denied  { open } for  pid=21669 comm="syz.4.4100" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1359.896336][   T30] audit: type=1400 audit(1752220246.731:9505): avc:  denied  { write } for  pid=21669 comm="syz.4.4100" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1359.921782][   T30] audit: type=1400 audit(1752220246.741:9506): avc:  denied  { ioctl } for  pid=21669 comm="syz.4.4100" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x561b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1359.991255][T21685] FAULT_INJECTION: forcing a failure.
[ 1359.991255][T21685] name failslab, interval 1, probability 0, space 0, times 0
[ 1360.078060][T21685] CPU: 0 UID: 0 PID: 21685 Comm: syz.2.4102 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1360.078088][T21685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1360.078100][T21685] Call Trace:
[ 1360.078106][T21685]  <TASK>
[ 1360.078113][T21685]  dump_stack_lvl+0x16c/0x1f0
[ 1360.078143][T21685]  should_fail_ex+0x512/0x640
[ 1360.078165][T21685]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[ 1360.078192][T21685]  should_failslab+0xc2/0x120
[ 1360.078218][T21685]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 1360.078241][T21685]  ? __pmd_alloc+0xbf/0x930
[ 1360.078261][T21685]  __pmd_alloc+0xbf/0x930
[ 1360.078275][T21685]  ? __pud_alloc+0x526/0x750
[ 1360.078294][T21685]  __handle_mm_fault+0xaac/0x5490
[ 1360.078322][T21685]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1360.078341][T21685]  ? __pfx_mt_find+0x10/0x10
[ 1360.078381][T21685]  ? find_vma+0xbf/0x140
[ 1360.078406][T21685]  ? __pfx_find_vma+0x10/0x10
[ 1360.078434][T21685]  handle_mm_fault+0x589/0xd10
[ 1360.078454][T21685]  ? __pkru_allows_pkey+0x51/0xb0
[ 1360.078482][T21685]  do_user_addr_fault+0x7a6/0x1370
[ 1360.078510][T21685]  ? rcu_is_watching+0x12/0xc0
[ 1360.078535][T21685]  exc_page_fault+0x5c/0xb0
[ 1360.078559][T21685]  asm_exc_page_fault+0x26/0x30
[ 1360.078576][T21685] RIP: 0010:__put_user_4+0xd/0x20
[ 1360.078599][T21685] Code: 66 89 01 31 c9 0f 01 ca e9 90 5b 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90
[ 1360.078614][T21685] RSP: 0018:ffffc900048cfe28 EFLAGS: 00050206
[ 1360.078629][T21685] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00002000000001c0
[ 1360.078639][T21685] RDX: ffff88802ca74880 RSI: ffffffff89569314 RDI: ffffffff8c158f60
[ 1360.078650][T21685] RBP: 1ffff92000919fc9 R08: 3b8f596bbd88045d R09: 0000000000000000
[ 1360.078660][T21685] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004
[ 1360.078670][T21685] R13: 0000000000000005 R14: 0000000000000003 R15: dffffc0000000000
[ 1360.078689][T21685]  ? __sys_socketpair+0x114/0x5a0
[ 1360.078712][T21685]  __sys_socketpair+0x120/0x5a0
[ 1360.078732][T21685]  ? __pfx___sys_socketpair+0x10/0x10
[ 1360.078753][T21685]  ? __pfx_ksys_write+0x10/0x10
[ 1360.078781][T21685]  __x64_sys_socketpair+0x96/0x100
[ 1360.078799][T21685]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1360.078822][T21685]  do_syscall_64+0xcd/0x4c0
[ 1360.078849][T21685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1360.078865][T21685] RIP: 0033:0x7f7e4d18e929
[ 1360.078880][T21685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1360.078896][T21685] RSP: 002b:00007f7e4e0d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[ 1360.078911][T21685] RAX: ffffffffffffffda RBX: 00007f7e4d3b5fa0 RCX: 00007f7e4d18e929
[ 1360.078922][T21685] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f
[ 1360.078932][T21685] RBP: 00007f7e4e0d9090 R08: 0000000000000000 R09: 0000000000000000
[ 1360.078942][T21685] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[ 1360.078952][T21685] R13: 0000000000000001 R14: 00007f7e4d3b5fa0 R15: 00007fffbc55f7a8
[ 1360.078975][T21685]  </TASK>
[ 1360.134622][T21681] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4094'.
[ 1360.136579][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1360.146996][T21681] : entered promiscuous mode
[ 1360.150985][   T30] audit: type=1400 audit(1752220247.361:9507): avc:  denied  { getopt } for  pid=21643 comm="syz.9.4094" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1361.017254][   T30] audit: type=1400 audit(1752220248.241:9508): avc:  denied  { write } for  pid=21700 comm="syz.0.4106" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 1361.183950][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.421997][T17353] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1361.743413][T17353] usb 1-1: Using ep0 maxpacket: 32
[ 1361.750135][T17353] usb 1-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[ 1361.760785][T17353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1361.834760][T21727] FAULT_INJECTION: forcing a failure.
[ 1361.834760][T21727] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1361.847934][T21727] CPU: 0 UID: 0 PID: 21727 Comm: syz.2.4111 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1361.847960][T21727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1361.847970][T21727] Call Trace:
[ 1361.847977][T21727]  <TASK>
[ 1361.847988][T21727]  dump_stack_lvl+0x16c/0x1f0
[ 1361.848017][T21727]  should_fail_ex+0x512/0x640
[ 1361.848044][T21727]  _copy_from_user+0x2e/0xd0
[ 1361.848070][T21727]  ____sys_sendmsg+0x607/0xc70
[ 1361.848091][T21727]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1361.848113][T21727]  ? __pfx__kstrtoull+0x10/0x10
[ 1361.848136][T21727]  ___sys_sendmsg+0x134/0x1d0
[ 1361.848161][T21727]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1361.848197][T21727]  ? find_held_lock+0x2b/0x80
[ 1361.848235][T21727]  __sys_sendmmsg+0x200/0x420
[ 1361.848261][T21727]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1361.848304][T21727]  ? fput+0x70/0xf0
[ 1361.848320][T21727]  ? ksys_write+0x1ac/0x250
[ 1361.848347][T21727]  __x64_sys_sendmmsg+0x9c/0x100
[ 1361.848370][T21727]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1361.848394][T21727]  do_syscall_64+0xcd/0x4c0
[ 1361.848420][T21727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1361.848438][T21727] RIP: 0033:0x7f7e4d18e929
[ 1361.848452][T21727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1361.848469][T21727] RSP: 002b:00007f7e4e097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1361.848486][T21727] RAX: ffffffffffffffda RBX: 00007f7e4d3b6160 RCX: 00007f7e4d18e929
[ 1361.848497][T21727] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000008
[ 1361.848507][T21727] RBP: 00007f7e4e097090 R08: 0000000000000000 R09: 0000000000000000
[ 1361.848517][T21727] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001
[ 1361.848527][T21727] R13: 0000000000000000 R14: 00007f7e4d3b6160 R15: 00007fffbc55f7a8
[ 1361.848551][T21727]  </TASK>
[ 1362.038346][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1362.078227][   T30] audit: type=1400 audit(1752220249.301:9509): avc:  denied  { create } for  pid=21722 comm="syz.3.4112" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1362.105168][T17353] usb 1-1: config 0 descriptor??
[ 1362.116226][T17353] usb 1-1: dvb_usb_v2: found a 'Anysee' in warm state
[ 1362.127814][T17353] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1362.145431][T17353] dvb_usb_anysee 1-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[ 1362.242185][T21724] netlink: 'syz.3.4112': attribute type 8 has an invalid length.
[ 1363.386052][T21738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4106'.
[ 1363.582732][   T30] audit: type=1400 audit(1752220250.801:9510): avc:  denied  { bind } for  pid=21700 comm="syz.0.4106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1364.534824][   T30] audit: type=1326 audit(1752220250.891:9511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4d18e929 code=0x7ffc0000
[ 1364.578666][   T30] audit: type=1326 audit(1752220250.891:9512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4d18e929 code=0x7ffc0000
[ 1364.612552][   T30] audit: type=1326 audit(1752220250.891:9513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e4d18e929 code=0x7ffc0000
[ 1364.646358][   T30] audit: type=1326 audit(1752220250.891:9514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4d18e929 code=0x7ffc0000
[ 1364.674323][   T30] audit: type=1326 audit(1752220250.891:9515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4d18e929 code=0x7ffc0000
[ 1364.965156][ T5939] usb 1-1: USB disconnect, device number 39
[ 1365.012588][   T30] audit: type=1326 audit(1752220250.901:9516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e4d18e929 code=0x7ffc0000
[ 1365.049801][   T30] audit: type=1326 audit(1752220250.901:9517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4d18e929 code=0x7ffc0000
[ 1365.084067][   T30] audit: type=1326 audit(1752220250.901:9518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e4d18e52b code=0x7ffc0000
[ 1365.133661][   T30] audit: type=1326 audit(1752220250.901:9519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e4d18d290 code=0x7ffc0000
[ 1365.198431][T21758] overlayfs: failed to resolve './file1': -2
[ 1365.498104][T21768] FAULT_INJECTION: forcing a failure.
[ 1365.498104][T21768] name failslab, interval 1, probability 0, space 0, times 0
[ 1365.525209][T21768] CPU: 0 UID: 0 PID: 21768 Comm: syz.4.4121 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1365.525237][T21768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1365.525247][T21768] Call Trace:
[ 1365.525254][T21768]  <TASK>
[ 1365.525261][T21768]  dump_stack_lvl+0x16c/0x1f0
[ 1365.525290][T21768]  should_fail_ex+0x512/0x640
[ 1365.525313][T21768]  ? fs_reclaim_acquire+0xae/0x150
[ 1365.525332][T21768]  ? tomoyo_encode2+0x100/0x3e0
[ 1365.525354][T21768]  should_failslab+0xc2/0x120
[ 1365.525380][T21768]  __kmalloc_noprof+0xd2/0x510
[ 1365.525402][T21768]  ? d_absolute_path+0x136/0x1a0
[ 1365.525423][T21768]  tomoyo_encode2+0x100/0x3e0
[ 1365.525448][T21768]  tomoyo_encode+0x29/0x50
[ 1365.525470][T21768]  tomoyo_realpath_from_path+0x18f/0x6e0
[ 1365.525501][T21768]  tomoyo_path_number_perm+0x245/0x580
[ 1365.525521][T21768]  ? tomoyo_path_number_perm+0x237/0x580
[ 1365.525544][T21768]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1365.525566][T21768]  ? find_held_lock+0x2b/0x80
[ 1365.525610][T21768]  ? find_held_lock+0x2b/0x80
[ 1365.525631][T21768]  ? hook_file_ioctl_common+0x145/0x410
[ 1365.525653][T21768]  ? __fget_files+0x20e/0x3c0
[ 1365.525681][T21768]  security_file_ioctl+0x9b/0x240
[ 1365.525707][T21768]  __x64_sys_ioctl+0xb7/0x210
[ 1365.525728][T21768]  do_syscall_64+0xcd/0x4c0
[ 1365.525754][T21768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1365.525771][T21768] RIP: 0033:0x7f7c0038e929
[ 1365.525786][T21768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1365.525802][T21768] RSP: 002b:00007f7c0127c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1365.525819][T21768] RAX: ffffffffffffffda RBX: 00007f7c005b5fa0 RCX: 00007f7c0038e929
[ 1365.525830][T21768] RDX: 0000000000000000 RSI: 000000008008551c RDI: 0000000000000003
[ 1365.525840][T21768] RBP: 00007f7c0127c090 R08: 0000000000000000 R09: 0000000000000000
[ 1365.525850][T21768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1365.525860][T21768] R13: 0000000000000000 R14: 00007f7c005b5fa0 R15: 00007fff6b0c4758
[ 1365.525885][T21768]  </TASK>
[ 1365.525900][T21768] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1365.813872][ T5961] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1366.129557][T21778] netlink: 241 bytes leftover after parsing attributes in process `syz.0.4124'.
[ 1366.520216][T21783] netlink: 'syz.2.4125': attribute type 1 has an invalid length.
[ 1366.550384][ T5961] usb 10-1: config index 0 descriptor too short (expected 1828, got 36)
[ 1366.570821][ T5961] usb 10-1: config 4 has an invalid descriptor of length 255, skipping remainder of the config
[ 1366.589040][ T5961] usb 10-1: config 4 has 0 interfaces, different from the descriptor's value: 9
[ 1366.612349][ T5961] usb 10-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[ 1366.671625][ T5961] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1366.700023][ T6441] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1366.923490][T21789] FAULT_INJECTION: forcing a failure.
[ 1366.923490][T21789] name failslab, interval 1, probability 0, space 0, times 0
[ 1367.080744][T21789] CPU: 0 UID: 0 PID: 21789 Comm: syz.4.4126 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1367.080772][T21789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1367.080782][T21789] Call Trace:
[ 1367.080789][T21789]  <TASK>
[ 1367.080798][T21789]  dump_stack_lvl+0x16c/0x1f0
[ 1367.080828][T21789]  should_fail_ex+0x512/0x640
[ 1367.080851][T21789]  ? fs_reclaim_acquire+0xae/0x150
[ 1367.080872][T21789]  should_failslab+0xc2/0x120
[ 1367.080897][T21789]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1367.080924][T21789]  ? md_ioctl+0x81c/0x44f0
[ 1367.080949][T21789]  md_ioctl+0x81c/0x44f0
[ 1367.080968][T21789]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1367.080991][T21789]  ? __pfx_md_ioctl+0x10/0x10
[ 1367.081008][T21789]  ? irqentry_exit+0x3b/0x90
[ 1367.081030][T21789]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1367.081062][T21789]  ? blkdev_ioctl+0xc7/0x6d0
[ 1367.081083][T21789]  ? __x86_indirect_its_thunk_r15+0x80/0x80
[ 1367.081105][T21789]  ? __pfx_md_ioctl+0x10/0x10
[ 1367.081125][T21789]  blkdev_ioctl+0x277/0x6d0
[ 1367.081143][T21789]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1367.081159][T21789]  ? security_file_ioctl+0xd1/0x240
[ 1367.081181][T21789]  ? security_file_ioctl+0x33/0x240
[ 1367.081204][T21789]  ? __sanitizer_cov_trace_pc+0x4/0x70
[ 1367.081225][T21789]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1367.081247][T21789]  __x64_sys_ioctl+0x18b/0x210
[ 1367.081267][T21789]  do_syscall_64+0xcd/0x4c0
[ 1367.081293][T21789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1367.081312][T21789] RIP: 0033:0x7f7c0038e929
[ 1367.081327][T21789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1367.081343][T21789] RSP: 002b:00007f7c0127c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1367.081362][T21789] RAX: ffffffffffffffda RBX: 00007f7c005b5fa0 RCX: 00007f7c0038e929
[ 1367.081373][T21789] RDX: 0000000000000000 RSI: 0000000090000915 RDI: 0000000000000004
[ 1367.081383][T21789] RBP: 00007f7c0127c090 R08: 0000000000000000 R09: 0000000000000000
[ 1367.081394][T21789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1367.081404][T21789] R13: 0000000000000000 R14: 00007f7c005b5fa0 R15: 00007fff6b0c4758
[ 1367.081427][T21789]  </TASK>
[ 1367.629666][T21803] overlayfs: failed to resolve './file1': -2
[ 1367.653744][T21807] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[ 1369.592783][T17102] Bluetooth: hci5: command 0x1003 tx timeout
[ 1369.609222][T20817] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1370.622145][   T10] usb 10-1: USB disconnect, device number 2
[ 1370.730866][T21816] FAULT_INJECTION: forcing a failure.
[ 1370.730866][T21816] name fail_futex, interval 1, probability 0, space 0, times 1
[ 1370.796939][T21816] CPU: 0 UID: 0 PID: 21816 Comm: syz.2.4133 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1370.796964][T21816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1370.796973][T21816] Call Trace:
[ 1370.796978][T21816]  <TASK>
[ 1370.796985][T21816]  dump_stack_lvl+0x16c/0x1f0
[ 1370.797014][T21816]  should_fail_ex+0x512/0x640
[ 1370.797039][T21816]  get_futex_key+0x1d0/0x1540
[ 1370.797065][T21816]  ? __pfx_get_futex_key+0x10/0x10
[ 1370.797092][T21816]  ? find_held_lock+0x2b/0x80
[ 1370.797116][T21816]  futex_wait_multiple_setup+0x12f/0x740
[ 1370.797144][T21816]  futex_wait_multiple+0xe6/0x480
[ 1370.797164][T21816]  ? __pfx_futex_wait_multiple+0x10/0x10
[ 1370.797182][T21816]  ? __kmalloc_noprof+0x242/0x510
[ 1370.797204][T21816]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1370.797234][T21816]  __do_sys_futex_waitv+0x17f/0x2c0
[ 1370.797261][T21816]  ? __pfx___do_sys_futex_waitv+0x10/0x10
[ 1370.797302][T21816]  do_syscall_64+0xcd/0x4c0
[ 1370.797328][T21816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1370.797344][T21816] RIP: 0033:0x7f7e4d18e929
[ 1370.797358][T21816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1370.797374][T21816] RSP: 002b:00007f7e4e0d9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1
[ 1370.797390][T21816] RAX: ffffffffffffffda RBX: 00007f7e4d3b5fa0 RCX: 00007f7e4d18e929
[ 1370.797400][T21816] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180
[ 1370.797409][T21816] RBP: 00007f7e4e0d9090 R08: 0000000000000000 R09: 0000000000000000
[ 1370.797418][T21816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1370.797428][T21816] R13: 0000000000000000 R14: 00007f7e4d3b5fa0 R15: 00007fffbc55f7a8
[ 1370.797450][T21816]  </TASK>
[ 1370.994482][   T30] kauditd_printk_skb: 100 callbacks suppressed
[ 1370.994498][   T30] audit: type=1400 audit(1752220258.211:9620): avc:  denied  { bind } for  pid=21818 comm="syz.9.4134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1371.620637][   T30] audit: type=1400 audit(1752220258.841:9621): avc:  denied  { read } for  pid=21824 comm="syz.3.4136" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1371.648631][T21834] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1371.654145][T21836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4135'.
[ 1371.729172][T21834] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1371.746670][   T30] audit: type=1400 audit(1752220258.871:9622): avc:  denied  { listen } for  pid=21824 comm="syz.3.4136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1371.771263][   T30] audit: type=1400 audit(1752220258.991:9623): avc:  denied  { firmware_load } for  pid=21824 comm="syz.3.4136" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1371.789055][T21834] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1371.876739][   T30] audit: type=1400 audit(1752220259.101:9624): avc:  denied  { unmount } for  pid=21199 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1371.901634][T20817] Bluetooth: hci4: Malformed Event: 0x02
[ 1372.057248][   T30] audit: type=1400 audit(1752220259.161:9625): avc:  denied  { ioctl } for  pid=21839 comm="syz.2.4137" path="socket:[87058]" dev="sockfs" ino=87058 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1372.138647][   T30] audit: type=1400 audit(1752220259.271:9626): avc:  denied  { accept } for  pid=21844 comm="syz.9.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1372.243384][   T30] audit: type=1400 audit(1752220259.331:9627): avc:  denied  { create } for  pid=21844 comm="syz.9.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1372.328903][   T30] audit: type=1400 audit(1752220259.331:9628): avc:  denied  { ioctl } for  pid=21844 comm="syz.9.4139" path="socket:[87194]" dev="sockfs" ino=87194 ioctlcmd=0x3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1372.713769][   T30] audit: type=1326 audit(1752220259.541:9629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.3.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4c98e929 code=0x7ffc0000
[ 1372.765297][T21860] netlink: 241 bytes leftover after parsing attributes in process `syz.9.4143'.
[ 1374.966600][T21886] sctp: [Deprecated]: syz.9.4148 (pid 21886) Use of int in max_burst socket option deprecated.
[ 1374.966600][T21886] Use struct sctp_assoc_value instead
[ 1375.181306][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4151'.
[ 1375.332696][T21895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4152'.
[ 1375.410014][T21905] capability: warning: `syz.9.4154' uses 32-bit capabilities (legacy support in use)
[ 1377.890280][T21955] FAULT_INJECTION: forcing a failure.
[ 1377.890280][T21955] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1377.907376][T21955] CPU: 1 UID: 0 PID: 21955 Comm: syz.2.4165 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1377.907404][T21955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1377.907415][T21955] Call Trace:
[ 1377.907422][T21955]  <TASK>
[ 1377.907430][T21955]  dump_stack_lvl+0x16c/0x1f0
[ 1377.907459][T21955]  should_fail_ex+0x512/0x640
[ 1377.907487][T21955]  _copy_to_user+0x32/0xd0
[ 1377.907514][T21955]  snd_pcm_oss_ioctl+0x1a89/0x37a0
[ 1377.907535][T21955]  ? hook_file_ioctl_common+0x145/0x410
[ 1377.907553][T21955]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[ 1377.907575][T21955]  ? selinux_file_ioctl+0xb4/0x270
[ 1377.907601][T21955]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[ 1377.907619][T21955]  __x64_sys_ioctl+0x18b/0x210
[ 1377.907643][T21955]  do_syscall_64+0xcd/0x4c0
[ 1377.907670][T21955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1377.907688][T21955] RIP: 0033:0x7f7e4d18e929
[ 1377.907703][T21955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1377.907720][T21955] RSP: 002b:00007f7e4e0b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1377.907738][T21955] RAX: ffffffffffffffda RBX: 00007f7e4d3b6080 RCX: 00007f7e4d18e929
[ 1377.907750][T21955] RDX: 0000200000000140 RSI: 000000008010500c RDI: 0000000000000003
[ 1377.907760][T21955] RBP: 00007f7e4e0b8090 R08: 0000000000000000 R09: 0000000000000000
[ 1377.907771][T21955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1377.907781][T21955] R13: 0000000000000001 R14: 00007f7e4d3b6080 R15: 00007fffbc55f7a8
[ 1377.907805][T21955]  </TASK>
[ 1378.516023][T21964] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[ 1378.732817][T21962] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4167'.
[ 1378.866002][   T30] kauditd_printk_skb: 18 callbacks suppressed
[ 1378.866018][   T30] audit: type=1400 audit(1752220266.091:9648): avc:  denied  { read write } for  pid=21974 comm="syz.3.4169" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1378.896426][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1380.006761][   T30] audit: type=1400 audit(1752220266.131:9649): avc:  denied  { open } for  pid=21974 comm="syz.3.4169" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1380.239915][T21992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4173'.
[ 1380.254132][T21992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=21992 comm=syz.4.4173
[ 1380.308294][T21993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4171'.
[ 1380.421727][T21993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=21993 comm=syz.3.4171
[ 1380.466197][T22004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1380.476458][T22004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1380.614334][   T30] audit: type=1400 audit(1752220267.831:9650): avc:  denied  { mac_admin } for  pid=21997 comm="syz.2.4175" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1380.625048][T22008] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 1380.827605][   T30] audit: type=1400 audit(1752220268.051:9651): avc:  denied  { mounton } for  pid=21998 comm="syz.0.4174" path="/proc/66/task" dev="proc" ino=86847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 1380.933415][ T5939] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1380.987376][   T30] audit: type=1400 audit(1752220268.051:9652): avc:  denied  { associate } for  pid=21998 comm="syz.0.4174" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1381.027279][   T30] audit: type=1400 audit(1752220268.191:9653): avc:  denied  { create } for  pid=21997 comm="syz.2.4175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1381.133587][ T5939] usb 10-1: Using ep0 maxpacket: 16
[ 1381.148157][ T5939] usb 10-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[ 1381.187954][ T5939] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1381.189110][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4178'.
[ 1381.211153][ T5939] usb 10-1: Product: syz
[ 1381.252032][ T5939] usb 10-1: Manufacturer: syz
[ 1381.364306][ T5939] usb 10-1: SerialNumber: syz
[ 1381.931227][ T5939] usb 10-1: config 0 descriptor??
[ 1381.982137][ T5939] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[ 1382.187916][ T5939] gp8psk: usb in 128 operation failed.
[ 1382.211073][ T5939] gp8psk: usb in 137 operation failed.
[ 1382.230361][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1382.258863][ T5939] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[ 1382.303049][ T5939] usb 10-1: media controller created
[ 1382.312701][T22033] overlayfs: failed to resolve './file0': -2
[ 1382.372573][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1382.398195][ T5939] gp8psk_fe: Frontend revision 1 attached
[ 1382.436882][ T5939] usb 10-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[ 1382.472869][ T5939] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[ 1382.566822][T22041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1382.594108][   T10] usb 3-1: new full-speed USB device number 99 using dummy_hcd
[ 1382.604362][T22041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1382.651986][T22041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1382.684402][T22041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1382.756118][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1382.781585][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[ 1382.799544][   T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1382.813419][   T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1382.837271][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1382.855200][ T5939] gp8psk: usb in 138 operation failed.
[ 1382.861144][ T5939] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[ 1382.890642][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1382.899999][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1382.912392][ T5939] gp8psk: found Genpix USB device pID = 201 (hex)
[ 1382.932890][   T10] usb 3-1: Product: syz
[ 1382.998108][T22053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4185'.
[ 1383.010208][T22053] openvswitch: : Dropping previously announced user features
[ 1383.356031][ T5939] usb 10-1: USB disconnect, device number 3
[ 1383.362441][   T10] usb 3-1: Manufacturer: syz
[ 1383.368127][   T10] usb 3-1: SerialNumber: syz
[ 1383.509370][ T5939] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[ 1383.622081][   T10] usb 3-1: 0:2 : does not exist
[ 1383.654590][   T10] usb 3-1: USB disconnect, device number 99
[ 1383.813288][T22061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4186'.
[ 1383.853060][T22061] : entered promiscuous mode
[ 1384.464539][T22077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4191'.
[ 1384.499399][T22077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=22077 comm=syz.2.4191
[ 1385.135494][T22080] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4190'.
[ 1385.156614][T17353] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[ 1385.179406][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4190'.
[ 1385.318021][T22088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4193'.
[ 1385.327107][T22088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4193'.
[ 1385.378975][T17353] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[ 1385.396281][T17353] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1385.416724][T17353] usb 3-1: config 220 has no interface number 2
[ 1385.423778][T17353] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1385.466687][   T30] audit: type=1326 audit(1752220272.691:9654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.3.4195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c4c98e929 code=0x0
[ 1385.522980][T17353] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1385.615523][T17353] usb 3-1: config 220 interface 76 has no altsetting 0
[ 1385.687091][T17353] usb 3-1: config 220 interface 1 has no altsetting 0
[ 1385.715689][T17353] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1385.742235][T17353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1385.763383][T17353] usb 3-1: Product: syz
[ 1385.819773][T17353] usb 3-1: Manufacturer: syz
[ 1385.831436][T17353] usb 3-1: SerialNumber: syz
[ 1386.105088][T17353] usb 3-1: selecting invalid altsetting 0
[ 1386.123055][T17353] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[ 1386.149885][T17353] usb 3-1: No valid video chain found.
[ 1386.190621][T17353] usb 3-1: selecting invalid altsetting 0
[ 1386.223432][T17353] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[ 1386.313933][T17353] usb 3-1: USB disconnect, device number 100
[ 1387.003428][   T30] audit: type=1400 audit(1752220274.181:9655): avc:  denied  { mounton } for  pid=22112 comm="syz.0.4197" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 1387.957061][   T30] audit: type=1400 audit(1752220274.191:9656): avc:  denied  { mount } for  pid=22112 comm="syz.0.4197" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1388.003234][   T30] audit: type=1400 audit(1752220274.201:9657): avc:  denied  { watch } for  pid=22112 comm="syz.0.4197" path="/newroot/23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1388.048485][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1388.085447][   T30] audit: type=1400 audit(1752220274.201:9658): avc:  denied  { watch_sb watch_reads } for  pid=22112 comm="syz.0.4197" path="/newroot/23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1388.528844][   T30] audit: type=1400 audit(1752220275.721:9659): avc:  denied  { unlink } for  pid=22135 comm="syz.3.4202" name="#4a" dev="tmpfs" ino=1333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1388.948302][   T30] audit: type=1400 audit(1752220276.171:9660): avc:  denied  { ioctl } for  pid=22153 comm="syz.9.4204" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1388.986888][T22154] input: syz1 as /devices/virtual/input/input34
[ 1389.047821][   T30] audit: type=1400 audit(1752220276.261:9661): avc:  denied  { read } for  pid=5187 comm="acpid" name="event4" dev="devtmpfs" ino=4909 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1389.071178][   T30] audit: type=1400 audit(1752220276.261:9662): avc:  denied  { open } for  pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4909 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1389.099826][   T30] audit: type=1400 audit(1752220276.261:9663): avc:  denied  { ioctl } for  pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4909 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1391.165743][T22166] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4209'.
[ 1391.174901][T22166] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4209'.
[ 1391.187684][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1391.187702][   T30] audit: type=1400 audit(1752220278.351:9666): avc:  denied  { mount } for  pid=22169 comm="syz.4.4210" name="/" dev="rpc_pipefs" ino=88146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[ 1392.370752][T22181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1392.416384][   T30] audit: type=1400 audit(1752220279.641:9667): avc:  denied  { mount } for  pid=22183 comm="syz.0.4215" name="/" dev="configfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 1392.420542][T22181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1392.560557][T22186] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4214'.
[ 1392.691974][T22191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4213'.
[ 1393.320235][   T30] audit: type=1400 audit(1752220280.541:9668): avc:  denied  { unmount } for  pid=21231 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 1393.844393][T22197] input: syz0 as /devices/virtual/input/input35
[ 1393.869538][T22197] input: failed to attach handler leds to device input35, error: -6
[ 1394.032986][T22207] FAULT_INJECTION: forcing a failure.
[ 1394.032986][T22207] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1394.050613][T22207] CPU: 0 UID: 0 PID: 22207 Comm: syz.0.4219 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1394.050642][T22207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1394.050652][T22207] Call Trace:
[ 1394.050658][T22207]  <TASK>
[ 1394.050666][T22207]  dump_stack_lvl+0x16c/0x1f0
[ 1394.050698][T22207]  should_fail_ex+0x512/0x640
[ 1394.050725][T22207]  _copy_from_user+0x2e/0xd0
[ 1394.050751][T22207]  __sys_bpf+0x21d/0x4d80
[ 1394.050779][T22207]  ? __pfx___sys_bpf+0x10/0x10
[ 1394.050802][T22207]  ? ksys_write+0x190/0x250
[ 1394.050830][T22207]  ? __mutex_unlock_slowpath+0x161/0x6a0
[ 1394.050911][T22207]  ? fput+0x70/0xf0
[ 1394.050932][T22207]  ? ksys_write+0x1ac/0x250
[ 1394.050952][T22207]  ? __pfx_ksys_write+0x10/0x10
[ 1394.050976][T22207]  __x64_sys_bpf+0x78/0xc0
[ 1394.051003][T22207]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1394.051026][T22207]  do_syscall_64+0xcd/0x4c0
[ 1394.051053][T22207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1394.051072][T22207] RIP: 0033:0x7f4bea18e929
[ 1394.051086][T22207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1394.051102][T22207] RSP: 002b:00007f4beafa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1394.051119][T22207] RAX: ffffffffffffffda RBX: 00007f4bea3b6080 RCX: 00007f4bea18e929
[ 1394.051130][T22207] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005
[ 1394.051141][T22207] RBP: 00007f4beafa0090 R08: 0000000000000000 R09: 0000000000000000
[ 1394.051151][T22207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1394.051160][T22207] R13: 0000000000000000 R14: 00007f4bea3b6080 R15: 00007fff28d6e138
[ 1394.051185][T22207]  </TASK>
[ 1394.222694][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1395.030129][T22219] openvswitch: netlink: EtherType 0 is less than min 600
[ 1395.283438][T22214] dummy0: entered promiscuous mode
[ 1395.302314][T22214] bond0: entered promiscuous mode
[ 1395.340231][T22214] bond_slave_0: entered promiscuous mode
[ 1395.375838][T22214] bond_slave_1: entered promiscuous mode
[ 1395.424021][T22214] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[ 1395.432037][T22214] Cannot create hsr debugfs directory
[ 1395.464828][T22214] hsr1: entered allmulticast mode
[ 1395.499201][T22214] dummy0: entered allmulticast mode
[ 1395.522844][T22214] bond0: entered allmulticast mode
[ 1395.531309][T22226] FAULT_INJECTION: forcing a failure.
[ 1395.531309][T22226] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1395.543338][T22214] bond_slave_0: entered allmulticast mode
[ 1395.549564][T22226] CPU: 0 UID: 0 PID: 22226 Comm: syz.3.4225 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1395.549588][T22226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1395.549598][T22226] Call Trace:
[ 1395.549603][T22226]  <TASK>
[ 1395.549610][T22226]  dump_stack_lvl+0x16c/0x1f0
[ 1395.549636][T22226]  should_fail_ex+0x512/0x640
[ 1395.549660][T22226]  _copy_from_user+0x2e/0xd0
[ 1395.549685][T22226]  bpf_test_init.isra.0+0xe2/0x140
[ 1395.549710][T22226]  bpf_prog_test_run_xdp+0x4f0/0x1590
[ 1395.549740][T22226]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1395.549763][T22226]  ? __might_fault+0x90/0x190
[ 1395.549786][T22226]  ? fput+0x70/0xf0
[ 1395.549800][T22226]  ? __bpf_prog_get+0x97/0x2a0
[ 1395.549818][T22226]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1395.549840][T22226]  __sys_bpf+0x1485/0x4d80
[ 1395.549863][T22226]  ? __pfx___sys_bpf+0x10/0x10
[ 1395.549884][T22226]  ? ksys_write+0x190/0x250
[ 1395.549905][T22226]  ? __mutex_unlock_slowpath+0x161/0x6a0
[ 1395.549940][T22226]  ? fput+0x70/0xf0
[ 1395.549952][T22226]  ? ksys_write+0x1ac/0x250
[ 1395.549969][T22226]  ? __pfx_ksys_write+0x10/0x10
[ 1395.549991][T22226]  __x64_sys_bpf+0x78/0xc0
[ 1395.550011][T22226]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1395.550030][T22226]  do_syscall_64+0xcd/0x4c0
[ 1395.550052][T22226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1395.550068][T22226] RIP: 0033:0x7f3c4c98e929
[ 1395.550082][T22226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1395.550098][T22226] RSP: 002b:00007f3c4d7ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1395.550114][T22226] RAX: ffffffffffffffda RBX: 00007f3c4cbb5fa0 RCX: 00007f3c4c98e929
[ 1395.550126][T22226] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 1395.550137][T22226] RBP: 00007f3c4d7ac090 R08: 0000000000000000 R09: 0000000000000000
[ 1395.550147][T22226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1395.550157][T22226] R13: 0000000000000000 R14: 00007f3c4cbb5fa0 R15: 00007ffd9d1e3078
[ 1395.550181][T22226]  </TASK>
[ 1395.565363][T22227] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22227 comm=syz.0.4223
[ 1395.576555][T22214] bond_slave_1: entered allmulticast mode
[ 1395.946454][T22234] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4229'.
[ 1395.995481][T20817] Bluetooth: hci0: Malformed Event: 0x02
[ 1396.622546][T22246] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4227'.
[ 1397.374395][   T10] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[ 1397.693419][T17353] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1397.723395][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1397.734059][   T10] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[ 1397.743136][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1397.794029][   T10] usb 3-1: config 0 descriptor??
[ 1397.809999][   T30] audit: type=1400 audit(1752220285.021:9669): avc:  denied  { read } for  pid=22263 comm="syz.0.4239" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1397.810748][T22264] FAULT_INJECTION: forcing a failure.
[ 1397.810748][T22264] name failslab, interval 1, probability 0, space 0, times 0
[ 1397.833254][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1397.845355][   T10] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state
[ 1397.864492][T17353] usb 10-1: device descriptor read/64, error -71
[ 1397.873609][   T10] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1397.882267][T22264] CPU: 1 UID: 0 PID: 22264 Comm: syz.0.4239 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1397.882293][T22264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1397.882305][T22264] Call Trace:
[ 1397.882311][T22264]  <TASK>
[ 1397.882319][T22264]  dump_stack_lvl+0x16c/0x1f0
[ 1397.882348][T22264]  should_fail_ex+0x512/0x640
[ 1397.882372][T22264]  ? __kmalloc_noprof+0xbf/0x510
[ 1397.882398][T22264]  ? sctp_send_reset_streams+0x3d7/0xf00
[ 1397.882423][T22264]  should_failslab+0xc2/0x120
[ 1397.882449][T22264]  __kmalloc_noprof+0xd2/0x510
[ 1397.882471][T22264]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1397.882493][T22264]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1397.882515][T22264]  sctp_send_reset_streams+0x3d7/0xf00
[ 1397.882543][T22264]  ? __local_bh_enable_ip+0xa4/0x120
[ 1397.882576][T22264]  sctp_setsockopt+0x484c/0xb870
[ 1397.882597][T22264]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[ 1397.882622][T22264]  ? proc_fail_nth_write+0x9f/0x250
[ 1397.882648][T22264]  ? __pfx_sctp_setsockopt+0x10/0x10
[ 1397.882667][T22264]  ? __lock_acquire+0x622/0x1c90
[ 1397.882689][T22264]  ? selinux_socket_setsockopt+0x6a/0x80
[ 1397.882708][T22264]  ? sock_common_setsockopt+0x2e/0xf0
[ 1397.882737][T22264]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1397.882763][T22264]  do_sock_setsockopt+0x224/0x470
[ 1397.882790][T22264]  ? __pfx_do_sock_setsockopt+0x10/0x10
[ 1397.882831][T22264]  __sys_setsockopt+0x1a0/0x230
[ 1397.882858][T22264]  __x64_sys_setsockopt+0xbd/0x160
[ 1397.882879][T22264]  ? do_syscall_64+0x91/0x4c0
[ 1397.882903][T22264]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1397.882926][T22264]  do_syscall_64+0xcd/0x4c0
[ 1397.882952][T22264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1397.882970][T22264] RIP: 0033:0x7f4bea18e929
[ 1397.882984][T22264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1397.883001][T22264] RSP: 002b:00007f4beafc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1397.883019][T22264] RAX: ffffffffffffffda RBX: 00007f4bea3b5fa0 RCX: 00007f4bea18e929
[ 1397.883030][T22264] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000009
[ 1397.883040][T22264] RBP: 00007f4beafc1090 R08: 000000000001000f R09: 0000000000000000
[ 1397.883051][T22264] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[ 1397.883061][T22264] R13: 0000000000000000 R14: 00007f4bea3b5fa0 R15: 00007fff28d6e138
[ 1397.883085][T22264]  </TASK>
[ 1398.123415][   T10] dvb_usb_anysee 3-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[ 1398.192315][T22251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4234'.
[ 1398.301068][   T43] usb 3-1: USB disconnect, device number 101
[ 1398.317203][   T30] audit: type=1400 audit(1752220285.021:9670): avc:  denied  { open } for  pid=22263 comm="syz.0.4239" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1398.340994][T17353] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1398.383997][T22269] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4241'.
[ 1398.473385][T17353] usb 10-1: device descriptor read/64, error -71
[ 1398.677120][T17353] usb usb10-port1: attempt power cycle
[ 1398.918407][T22276] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1399.095179][T17353] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1399.290659][T17353] usb 10-1: device descriptor read/8, error -71
[ 1399.498011][T22282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4245'.
[ 1399.533775][T22282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4245'.
[ 1399.653761][T17353] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1399.772064][T17353] usb 10-1: device descriptor read/8, error -71
[ 1399.795337][T22287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4246'.
[ 1399.809430][T22287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4246'.
[ 1400.179705][T17353] usb usb10-port1: unable to enumerate USB device
[ 1400.879075][   T30] audit: type=1400 audit(1752220288.101:9671): avc:  denied  { read } for  pid=22302 comm="syz.0.4253" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1400.904432][   T30] audit: type=1400 audit(1752220288.101:9672): avc:  denied  { open } for  pid=22302 comm="syz.0.4253" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1400.941005][   T30] audit: type=1400 audit(1752220288.121:9673): avc:  denied  { ioctl } for  pid=22302 comm="syz.0.4253" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1400.968993][   T30] audit: type=1400 audit(1752220288.151:9674): avc:  denied  { name_bind } for  pid=22302 comm="syz.0.4253" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[ 1401.039552][   T30] audit: type=1400 audit(1752220288.261:9675): avc:  denied  { create } for  pid=22308 comm="syz.0.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1401.065302][   T30] audit: type=1400 audit(1752220288.291:9676): avc:  denied  { write } for  pid=22308 comm="syz.0.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1401.233420][ T5939] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1401.960241][ T5939] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1401.990190][ T5939] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1402.009199][ T5939] usb 10-1: config 1 has no interface number 0
[ 1402.015814][ T5939] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1402.027739][ T5939] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1402.057798][ T5939] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1402.091219][ T5939] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1402.109844][ T5939] usb 10-1: Product: syz
[ 1402.127965][ T5939] usb 10-1: Manufacturer: syz
[ 1402.133736][ T5939] usb 10-1: SerialNumber: syz
[ 1402.575605][   T30] audit: type=1400 audit(1752220289.801:9677): avc:  denied  { create } for  pid=22304 comm="syz.9.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[ 1402.668498][   T30] audit: type=1400 audit(1752220289.821:9678): avc:  denied  { write } for  pid=22304 comm="syz.9.4252" path="socket:[89250]" dev="sockfs" ino=89250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[ 1403.013551][   T30] audit: type=1400 audit(1752220290.211:9679): avc:  denied  { write } for  pid=22326 comm="syz.3.4259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1403.033208][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1403.092904][   T30] audit: type=1400 audit(1752220290.211:9680): avc:  denied  { create } for  pid=22326 comm="syz.3.4259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1403.296549][   T30] audit: type=1400 audit(1752220290.521:9681): avc:  denied  { getopt } for  pid=22344 comm="syz.3.4263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1403.323963][   T30] audit: type=1400 audit(1752220290.541:9682): avc:  denied  { write } for  pid=22344 comm="syz.3.4263" path="socket:[89260]" dev="sockfs" ino=89260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1403.564243][T22351] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 1404.478633][T22356] lo: entered allmulticast mode
[ 1404.505326][ T5939] cdc_ncm 10-1:1.1: failed GET_NTB_PARAMETERS
[ 1404.513771][T22361] netlink: 241 bytes leftover after parsing attributes in process `syz.2.4268'.
[ 1404.676231][ T5939] cdc_ncm 10-1:1.1: bind() failure
[ 1404.800832][ T5939] usb 10-1: USB disconnect, device number 8
[ 1404.853799][ T1115] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1404.863058][T22358] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4266'.
[ 1405.834799][T22373] FAULT_INJECTION: forcing a failure.
[ 1405.834799][T22373] name failslab, interval 1, probability 0, space 0, times 0
[ 1405.883370][T22373] CPU: 1 UID: 0 PID: 22373 Comm: syz.9.4271 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1405.883396][T22373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1405.883407][T22373] Call Trace:
[ 1405.883413][T22373]  <TASK>
[ 1405.883421][T22373]  dump_stack_lvl+0x16c/0x1f0
[ 1405.883447][T22373]  should_fail_ex+0x512/0x640
[ 1405.883468][T22373]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 1405.883493][T22373]  should_failslab+0xc2/0x120
[ 1405.883518][T22373]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 1405.883540][T22373]  ? __alloc_skb+0x2b2/0x380
[ 1405.883567][T22373]  __alloc_skb+0x2b2/0x380
[ 1405.883587][T22373]  ? __pfx___alloc_skb+0x10/0x10
[ 1405.883612][T22373]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 1405.883645][T22373]  netlink_alloc_large_skb+0x69/0x130
[ 1405.883665][T22373]  netlink_sendmsg+0x6a1/0xdd0
[ 1405.883684][T22373]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1405.883710][T22373]  ____sys_sendmsg+0xa98/0xc70
[ 1405.883728][T22373]  ? copy_msghdr_from_user+0x10a/0x160
[ 1405.883750][T22373]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1405.883785][T22373]  ___sys_sendmsg+0x134/0x1d0
[ 1405.883813][T22373]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1405.883833][T22373]  ? __lock_acquire+0x622/0x1c90
[ 1405.883880][T22373]  __sys_sendmsg+0x16d/0x220
[ 1405.883904][T22373]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1405.883943][T22373]  do_syscall_64+0xcd/0x4c0
[ 1405.883969][T22373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1405.883987][T22373] RIP: 0033:0x7fdf5718e929
[ 1405.884001][T22373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1405.884017][T22373] RSP: 002b:00007fdf58013038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1405.884035][T22373] RAX: ffffffffffffffda RBX: 00007fdf573b5fa0 RCX: 00007fdf5718e929
[ 1405.884046][T22373] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[ 1405.884056][T22373] RBP: 00007fdf58013090 R08: 0000000000000000 R09: 0000000000000000
[ 1405.884066][T22373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1405.884075][T22373] R13: 0000000000000000 R14: 00007fdf573b5fa0 R15: 00007ffdf51b3238
[ 1405.884099][T22373]  </TASK>
[ 1406.107454][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1406.244566][T22375] openvswitch: netlink: Geneve option length err (len 256, max 255).
[ 1406.503737][ T5884] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1406.833458][ T5884] usb 10-1: Using ep0 maxpacket: 8
[ 1406.843818][T17102] Bluetooth: hci5: command 0x1003 tx timeout
[ 1406.850582][T20817] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1406.871191][ T5884] usb 10-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1406.918008][ T5884] usb 10-1: config 0 has an invalid interface number: 21 but max is 0
[ 1406.984208][ T5884] usb 10-1: config 0 has no interface number 0
[ 1407.008253][ T5884] usb 10-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1407.026636][ T5884] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1407.040361][ T5884] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1407.091709][ T5884] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1407.101747][ T5884] usb 10-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[ 1407.115315][ T5884] usb 10-1: Product: syz
[ 1407.123015][ T5884] usb 10-1: config 0 descriptor??
[ 1407.132038][T22375] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1407.156354][   T30] audit: type=1400 audit(1752220294.381:9683): avc:  denied  { setopt } for  pid=22381 comm="syz.3.4276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1407.443834][ T5884] usb 10-1: USB disconnect, device number 9
[ 1407.650897][T17353] usb 3-1: new full-speed USB device number 102 using dummy_hcd
[ 1407.816311][T17353] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1407.833928][T17353] usb 3-1: not running at top speed; connect to a high speed hub
[ 1407.857347][T17353] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1407.877208][T17353] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1407.904048][T17353] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1407.924668][T17353] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1407.973386][T17353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1407.981456][T17353] usb 3-1: Product: syz
[ 1408.003380][T17353] usb 3-1: Manufacturer: syz
[ 1408.008026][T17353] usb 3-1: SerialNumber: syz
[ 1408.163270][T22390] x_tables: duplicate underflow at hook 2
[ 1408.256305][T17353] usb 3-1: 0:2 : does not exist
[ 1408.263180][T22388] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns
[ 1408.293498][T17353] usb 3-1: USB disconnect, device number 102
[ 1408.509869][T22393] netlink: 241 bytes leftover after parsing attributes in process `syz.9.4280'.
[ 1409.979367][T17353] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1410.315848][T17353] usb 10-1: Using ep0 maxpacket: 16
[ 1410.420480][T17353] usb 10-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[ 1410.537442][T22408] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4284'.
[ 1410.895955][T17353] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1410.905122][T17353] usb 10-1: Product: syz
[ 1410.910594][T17353] usb 10-1: Manufacturer: syz
[ 1410.915492][T17353] usb 10-1: SerialNumber: syz
[ 1410.924694][T17353] usb 10-1: config 0 descriptor??
[ 1410.944667][T17353] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[ 1411.132568][T17353] gp8psk: usb in 128 operation failed.
[ 1411.139046][T17353] gp8psk: usb in 137 operation failed.
[ 1411.155785][T17353] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1411.228594][T22412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4285'.
[ 1411.267338][T22412] : entered promiscuous mode
[ 1411.333636][T17353] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[ 1411.614941][T22415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1411.661209][T22416] FAULT_INJECTION: forcing a failure.
[ 1411.661209][T22416] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1411.674432][T22416] CPU: 0 UID: 0 PID: 22416 Comm: syz.3.4286 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1411.674457][T22416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1411.674468][T22416] Call Trace:
[ 1411.674475][T22416]  <TASK>
[ 1411.674481][T22416]  dump_stack_lvl+0x16c/0x1f0
[ 1411.674510][T22416]  should_fail_ex+0x512/0x640
[ 1411.674536][T22416]  _copy_from_user+0x2e/0xd0
[ 1411.674562][T22416]  drm_ioctl+0x4fb/0xc30
[ 1411.674592][T22416]  ? __pfx_drm_prime_handle_to_fd_ioctl+0x10/0x10
[ 1411.674615][T22416]  ? __pfx_drm_ioctl+0x10/0x10
[ 1411.674636][T22416]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1411.674671][T22416]  ? selinux_file_ioctl+0xbc/0x270
[ 1411.674703][T22416]  ? __pfx_drm_ioctl+0x10/0x10
[ 1411.674728][T22416]  __x64_sys_ioctl+0x18b/0x210
[ 1411.674750][T22416]  do_syscall_64+0xcd/0x4c0
[ 1411.674775][T22416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1411.674792][T22416] RIP: 0033:0x7f3c4c98e929
[ 1411.674806][T22416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1411.674823][T22416] RSP: 002b:00007f3c4d78b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1411.674839][T22416] RAX: ffffffffffffffda RBX: 00007f3c4cbb6080 RCX: 00007f3c4c98e929
[ 1411.674850][T22416] RDX: 0000200000000080 RSI: 00000000c00c642d RDI: 0000000000000007
[ 1411.674860][T22416] RBP: 00007f3c4d78b090 R08: 0000000000000000 R09: 0000000000000000
[ 1411.674871][T22416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1411.674881][T22416] R13: 0000000000000000 R14: 00007f3c4cbb6080 R15: 00007ffd9d1e3078
[ 1411.674905][T22416]  </TASK>
[ 1412.033633][T22415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1412.224603][T17353] usb 10-1: media controller created
[ 1412.249378][T17353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1412.277640][T17353] gp8psk_fe: Frontend revision 1 attached
[ 1412.296152][T17353] usb 10-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[ 1412.314541][T17353] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[ 1412.375690][T17353] gp8psk: usb in 138 operation failed.
[ 1412.381207][T17353] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[ 1412.413353][T17353] gp8psk: found Genpix USB device pID = 201 (hex)
[ 1412.434007][T17353] usb 10-1: USB disconnect, device number 10
[ 1412.550628][T17353] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[ 1412.642398][T22426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4289'.
[ 1412.665189][T22426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4289'.
[ 1413.243816][T17353] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1413.414223][T17353] usb 10-1: Using ep0 maxpacket: 8
[ 1413.427703][T17353] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1413.443725][T17353] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1413.474693][T17353] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1413.502950][T17353] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1413.530525][T17353] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1413.556603][T17353] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1413.565170][T17353] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1413.611639][T17353] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1413.643405][T17353] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1413.689901][T17353] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1413.716898][T17353] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1413.734198][T17353] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1413.756576][T17353] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1413.784045][T17353] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1413.814201][T17353] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1413.837918][T17353] usb 10-1: string descriptor 0 read error: -22
[ 1413.846124][T17353] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1413.873603][T17353] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1413.904270][T17353] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1413.923582][ T5961] usb 3-1: new full-speed USB device number 103 using dummy_hcd
[ 1414.086238][ T5961] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1414.097807][ T5961] usb 3-1: not running at top speed; connect to a high speed hub
[ 1414.124306][ T5961] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1414.173466][ T5961] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1414.201636][ T5961] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1414.224945][T22433] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4292'.
[ 1414.236636][ T5961] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1414.254519][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1414.289452][ T5961] usb 3-1: Product: syz
[ 1414.303603][ T5961] usb 3-1: Manufacturer: syz
[ 1414.317223][ T5961] usb 3-1: SerialNumber: syz
[ 1414.333832][T17353] usb 10-1: USB disconnect, device number 11
[ 1415.055652][ T5961] usb 3-1: 0:2 : does not exist
[ 1415.175876][ T5961] usb 3-1: USB disconnect, device number 103
[ 1415.516067][T22444] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4295'.
[ 1416.450300][T22455] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4297'.
[ 1416.464018][T22455] openvswitch: : Dropping previously announced user features
[ 1416.766942][   T30] audit: type=1400 audit(1752220303.651:9684): avc:  denied  { remove_name } for  pid=22449 comm="syz.2.4298" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1417.155501][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4299'.
[ 1417.175115][   T30] audit: type=1400 audit(1752220303.651:9685): avc:  denied  { unlink } for  pid=22449 comm="syz.2.4298" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1417.355797][T22462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4302'.
[ 1418.291937][T22469] syz.3.4303: attempt to access beyond end of device
[ 1418.291937][T22469] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1418.305593][T22469] gfs2: error -5 reading superblock
[ 1418.683372][ T5884] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1418.864522][ T5884] usb 10-1: Using ep0 maxpacket: 8
[ 1418.874829][ T5884] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1419.326174][ T5884] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[ 1419.338281][ T5884] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1419.349522][ T5884] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[ 1419.361057][ T5884] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1419.372500][ T5884] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1419.382537][ T5884] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1419.397971][ T5884] usb 10-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[ 1419.462954][ T5884] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1419.501591][ T5884] usb 10-1: Product: syz
[ 1419.518091][ T5884] usb 10-1: Manufacturer: syz
[ 1419.677247][ T5884] usb 10-1: SerialNumber: syz
[ 1419.800429][T22480] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4305'.
[ 1420.000460][T22481] syz.2.4306: attempt to access beyond end of device
[ 1420.000460][T22481] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1420.013818][T22481] gfs2: error -5 reading superblock
[ 1420.084361][ T5884] usb 10-1: config 0 descriptor??
[ 1420.142462][T22463] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1420.171235][ T5884] ati_remote 10-1:0.0: Initializing ati_remote hardware failed.
[ 1420.181958][ T5884] ati_remote 10-1:0.0: probe with driver ati_remote failed with error -5
[ 1420.304998][   T43] usb 10-1: USB disconnect, device number 12
[ 1420.436824][T22483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1420.446793][T22483] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1421.077660][T22496] netlink: 241 bytes leftover after parsing attributes in process `syz.9.4312'.
[ 1421.498843][T22503] netlink: 241 bytes leftover after parsing attributes in process `syz.3.4313'.
[ 1421.935309][T22506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1421.973701][T22506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1422.324439][T22506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1422.333121][T22506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1422.418958][T17102] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1422.461381][T17102] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1422.492691][T22517] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4318'.
[ 1422.506396][T17102] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1422.536358][T17102] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1422.545723][T17102] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1422.609005][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.211649][T17102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1423.222100][T17102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1423.235245][T17102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1423.249135][T17102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1423.273417][T17102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1423.856142][   T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1423.973573][ T5884] usb 3-1: new full-speed USB device number 104 using dummy_hcd
[ 1424.062008][T22543] syz.3.4324: attempt to access beyond end of device
[ 1424.062008][T22543] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1424.075341][T22543] gfs2: error -5 reading superblock
[ 1424.180234][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1424.262059][ T5884] usb 3-1: not running at top speed; connect to a high speed hub
[ 1424.287277][ T5884] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1424.290643][   T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1424.296254][ T5884] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1424.296275][ T5884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1424.298043][ T5884] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1424.338418][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1424.350608][ T5884] usb 3-1: Product: syz
[ 1424.355132][ T5884] usb 3-1: Manufacturer: syz
[ 1424.371212][ T5884] usb 3-1: SerialNumber: syz
[ 1424.397200][   T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1424.458637][   T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1424.475653][T22515] chnl_net:caif_netlink_parms(): no params data found
[ 1424.622373][T22515] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1424.636574][T22515] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1424.647430][T22515] bridge_slave_0: entered allmulticast mode
[ 1424.659159][T22515] bridge_slave_0: entered promiscuous mode
[ 1424.705973][T22515] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1424.713222][T22515] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1424.720704][T22515] bridge_slave_1: entered allmulticast mode
[ 1424.728335][T22515] bridge_slave_1: entered promiscuous mode
[ 1424.748592][   T30] audit: type=1400 audit(1752220567.969:9686): avc:  denied  { append } for  pid=22550 comm="syz.3.4326" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1424.777370][   T30] audit: type=1400 audit(1752220567.999:9687): avc:  denied  { create } for  pid=22550 comm="syz.3.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1424.797502][   T30] audit: type=1400 audit(1752220567.999:9688): avc:  denied  { read write } for  pid=22550 comm="syz.3.4326" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1424.833749][T20817] Bluetooth: hci5: command tx timeout
[ 1424.835472][   T30] audit: type=1400 audit(1752220567.999:9689): avc:  denied  { open } for  pid=22550 comm="syz.3.4326" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1424.842112][ T5884] usb 3-1: 0:2 : does not exist
[ 1424.865282][   T30] audit: type=1400 audit(1752220568.019:9690): avc:  denied  { create } for  pid=22550 comm="syz.3.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1424.912163][T22515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1424.940534][T22524] chnl_net:caif_netlink_parms(): no params data found
[ 1424.953734][ T5884] usb 3-1: USB disconnect, device number 104
[ 1424.959605][T22515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1425.003041][T22554] FAULT_INJECTION: forcing a failure.
[ 1425.003041][T22554] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1425.030319][T22554] CPU: 0 UID: 0 PID: 22554 Comm: syz.9.4327 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1425.030347][T22554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1425.030358][T22554] Call Trace:
[ 1425.030364][T22554]  <TASK>
[ 1425.030372][T22554]  dump_stack_lvl+0x16c/0x1f0
[ 1425.030400][T22554]  should_fail_ex+0x512/0x640
[ 1425.030424][T22554]  _copy_to_user+0x32/0xd0
[ 1425.030449][T22554]  simple_read_from_buffer+0xcb/0x170
[ 1425.030470][T22554]  proc_fail_nth_read+0x197/0x270
[ 1425.030488][T22554]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1425.030507][T22554]  ? rw_verify_area+0xcf/0x680
[ 1425.030524][T22554]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1425.030544][T22554]  vfs_read+0x1e4/0xc60
[ 1425.030566][T22554]  ? __pfx___mutex_lock+0x10/0x10
[ 1425.030589][T22554]  ? __pfx_vfs_read+0x10/0x10
[ 1425.030614][T22554]  ? __fget_files+0x20e/0x3c0
[ 1425.030644][T22554]  ksys_read+0x12a/0x250
[ 1425.030665][T22554]  ? __pfx_ksys_read+0x10/0x10
[ 1425.030695][T22554]  do_syscall_64+0xcd/0x4c0
[ 1425.030720][T22554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1425.030738][T22554] RIP: 0033:0x7fdf5718d33c
[ 1425.030753][T22554] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1425.030769][T22554] RSP: 002b:00007fdf58013030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1425.030788][T22554] RAX: ffffffffffffffda RBX: 00007fdf573b5fa0 RCX: 00007fdf5718d33c
[ 1425.030799][T22554] RDX: 000000000000000f RSI: 00007fdf580130a0 RDI: 0000000000000006
[ 1425.030809][T22554] RBP: 00007fdf58013090 R08: 0000000000000000 R09: 0000000000000000
[ 1425.030819][T22554] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1425.030830][T22554] R13: 0000000000000000 R14: 00007fdf573b5fa0 R15: 00007ffdf51b3238
[ 1425.030854][T22554]  </TASK>
[ 1425.214157][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1425.474453][T20817] Bluetooth: hci1: command tx timeout
[ 1425.517198][T22515] team0: Port device team_slave_0 added
[ 1425.618209][T22515] team0: Port device team_slave_1 added
[ 1425.782329][T22515] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1425.794909][T22515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1425.820864][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1425.879896][T22515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1425.892094][   T59] bridge_slave_1: left allmulticast mode
[ 1425.901050][   T59] bridge_slave_1: left promiscuous mode
[ 1425.908706][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1425.928534][   T59] bridge_slave_0: left allmulticast mode
[ 1425.942137][   T59] bridge_slave_0: left promiscuous mode
[ 1425.948232][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1425.958645][T22568] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4330'.
[ 1426.341138][   T30] audit: type=1400 audit(1752220569.449:9691): avc:  denied  { write } for  pid=22569 comm="syz.9.4332" path="socket:[90153]" dev="sockfs" ino=90153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1427.068600][T20817] Bluetooth: hci5: command tx timeout
[ 1427.420458][T22572] syz.9.4332 (22572): drop_caches: 2
[ 1427.484421][T22577] FAULT_INJECTION: forcing a failure.
[ 1427.484421][T22577] name failslab, interval 1, probability 0, space 0, times 0
[ 1427.498033][T22577] CPU: 1 UID: 0 PID: 22577 Comm: syz.2.4333 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1427.498059][T22577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1427.498070][T22577] Call Trace:
[ 1427.498077][T22577]  <TASK>
[ 1427.498084][T22577]  dump_stack_lvl+0x16c/0x1f0
[ 1427.498114][T22577]  should_fail_ex+0x512/0x640
[ 1427.498143][T22577]  should_failslab+0xc2/0x120
[ 1427.498169][T22577]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 1427.498194][T22577]  ? __inet_hash_connect+0x7cb/0x1e30
[ 1427.498225][T22577]  __inet_hash_connect+0x7cb/0x1e30
[ 1427.498258][T22577]  ? __pfx___inet6_check_established+0x10/0x10
[ 1427.498291][T22577]  ? __pfx___inet_hash_connect+0x10/0x10
[ 1427.498320][T22577]  ? inet6_hash_connect+0xe2/0x180
[ 1427.498356][T22577]  tcp_v6_connect+0x1301/0x2170
[ 1427.498371][T22577]  ? stack_trace_save+0x8e/0xc0
[ 1427.498404][T22577]  ? __pfx_tcp_v6_connect+0x10/0x10
[ 1427.498421][T22577]  ? kasan_save_stack+0x33/0x60
[ 1427.498444][T22577]  ? tcp_sendmsg_fastopen+0x24d/0x750
[ 1427.498464][T22577]  ? tcp_sendmsg_locked+0x18e5/0x42b0
[ 1427.498484][T22577]  ? tcp_sendmsg+0x2e/0x50
[ 1427.498502][T22577]  ? inet6_sendmsg+0xb9/0x140
[ 1427.498526][T22577]  ? __sys_sendto+0x376/0x520
[ 1427.498545][T22577]  ? __x64_sys_sendto+0xe0/0x1c0
[ 1427.498582][T22577]  ? __inet_stream_connect+0x3c8/0x1020
[ 1427.498603][T22577]  __inet_stream_connect+0x3c8/0x1020
[ 1427.498631][T22577]  ? __pfx___inet_stream_connect+0x10/0x10
[ 1427.498668][T22577]  tcp_sendmsg_fastopen+0x3ed/0x750
[ 1427.498695][T22577]  tcp_sendmsg_locked+0x18e5/0x42b0
[ 1427.498719][T22577]  ? avc_has_perm+0x11a/0x1c0
[ 1427.498739][T22577]  ? __lock_acquire+0xb8a/0x1c90
[ 1427.498764][T22577]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[ 1427.498789][T22577]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1427.498809][T22577]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1427.498836][T22577]  ? __local_bh_enable_ip+0xa4/0x120
[ 1427.498862][T22577]  tcp_sendmsg+0x2e/0x50
[ 1427.498881][T22577]  ? __pfx_tcp_sendmsg+0x10/0x10
[ 1427.498901][T22577]  inet6_sendmsg+0xb9/0x140
[ 1427.498927][T22577]  __sys_sendto+0x376/0x520
[ 1427.498949][T22577]  ? __pfx___sys_sendto+0x10/0x10
[ 1427.498992][T22577]  ? ksys_write+0x1ac/0x250
[ 1427.499014][T22577]  ? __pfx_ksys_write+0x10/0x10
[ 1427.499040][T22577]  __x64_sys_sendto+0xe0/0x1c0
[ 1427.499061][T22577]  ? do_syscall_64+0x91/0x4c0
[ 1427.499085][T22577]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1427.499107][T22577]  do_syscall_64+0xcd/0x4c0
[ 1427.499133][T22577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1427.499152][T22577] RIP: 0033:0x7f7e4d18e929
[ 1427.499167][T22577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1427.499185][T22577] RSP: 002b:00007f7e4e097038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1427.499202][T22577] RAX: ffffffffffffffda RBX: 00007f7e4d3b6160 RCX: 00007f7e4d18e929
[ 1427.499215][T22577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[ 1427.499241][T22577] RBP: 00007f7e4e097090 R08: 0000200000b63fe4 R09: 000000000000001c
[ 1427.499252][T22577] R10: 0000000020000841 R11: 0000000000000246 R12: 0000000000000001
[ 1427.499263][T22577] R13: 0000000000000000 R14: 00007f7e4d3b6160 R15: 00007fffbc55f7a8
[ 1427.499292][T22577]  </TASK>
[ 1427.891295][T20817] Bluetooth: hci1: command tx timeout
[ 1429.154660][T20817] Bluetooth: hci5: command tx timeout
[ 1429.163010][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1429.183378][   T10] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 1429.207169][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1429.224826][   T59] bond0 (unregistering): Released all slaves
[ 1429.368052][   T10] usb 3-1: Using ep0 maxpacket: 8
[ 1429.433831][T17353] usb 10-1: new full-speed USB device number 13 using dummy_hcd
[ 1429.443188][   T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1429.463186][   T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 57, changing to 7
[ 1429.496959][T22515] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1429.504774][T22515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1429.534379][T22515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1429.554123][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1429.598781][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1429.607827][   T10] usb 3-1: Product: syz
[ 1429.615363][T17353] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1429.616706][   T10] usb 3-1: Manufacturer: syz
[ 1429.629252][   T10] usb 3-1: SerialNumber: syz
[ 1429.630349][T17353] usb 10-1: not running at top speed; connect to a high speed hub
[ 1429.642376][   T59] : left promiscuous mode
[ 1429.659554][T17353] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1429.671412][T17353] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1429.683415][T17353] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1429.704774][T17353] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1429.714463][T17353] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1429.722645][T17353] usb 10-1: Product: syz
[ 1429.730061][T17353] usb 10-1: Manufacturer: syz
[ 1429.736348][T17353] usb 10-1: SerialNumber: syz
[ 1429.870892][T22524] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1429.889748][T22524] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1429.909837][T22524] bridge_slave_0: entered allmulticast mode
[ 1429.917726][T22524] bridge_slave_0: entered promiscuous mode
[ 1429.953849][T20817] Bluetooth: hci1: command tx timeout
[ 1429.971053][T22524] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1429.987211][T22524] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1429.996904][T22524] bridge_slave_1: entered allmulticast mode
[ 1430.004868][T22524] bridge_slave_1: entered promiscuous mode
[ 1430.021038][T22515] hsr_slave_0: entered promiscuous mode
[ 1430.031832][T22515] hsr_slave_1: entered promiscuous mode
[ 1430.305255][T17353] usb 10-1: 0:2 : does not exist
[ 1430.317722][T17353] usb 10-1: USB disconnect, device number 13
[ 1430.348095][   T59] hsr_slave_0: left promiscuous mode
[ 1430.364060][   T59] hsr_slave_1: left promiscuous mode
[ 1430.374397][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1430.389224][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1430.406911][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1430.420888][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1430.477803][   T59] veth1_macvtap: left promiscuous mode
[ 1430.491072][   T59] veth0_macvtap: left promiscuous mode
[ 1430.503030][   T59] veth1_vlan: left promiscuous mode
[ 1430.521620][   T59] veth0_vlan: left promiscuous mode
[ 1431.058128][   T10] usb 3-1: 2:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[ 1431.074675][   T10] usb 3-1: found format II with max.bitrate = 242, frame size=2
[ 1431.083023][   T10] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1431.181575][   T10] usb 3-1: USB disconnect, device number 105
[ 1431.233821][T20817] Bluetooth: hci5: command tx timeout
[ 1432.059001][T20817] Bluetooth: hci1: command tx timeout
[ 1432.342532][   T30] audit: type=1400 audit(1752220575.559:9692): avc:  denied  { ioctl } for  pid=22622 comm="syz.9.4345" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=91200 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1432.761927][   T30] audit: type=1400 audit(1752220575.979:9693): avc:  denied  { create } for  pid=22619 comm="syz.2.4344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 1432.871260][   T30] audit: type=1400 audit(1752220576.059:9694): avc:  denied  { sys_admin } for  pid=22619 comm="syz.2.4344" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 1433.061542][T22627] kvm: emulating exchange as write
[ 1433.251196][   T59] team0 (unregistering): Port device team_slave_1 removed
[ 1433.293041][   T59] team0 (unregistering): Port device team_slave_0 removed
[ 1433.448146][T17353] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1433.633428][T17353] usb 10-1: Using ep0 maxpacket: 16
[ 1433.646912][T17353] usb 10-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[ 1433.656542][T17353] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1433.664714][T17353] usb 10-1: Product: syz
[ 1433.668981][T17353] usb 10-1: Manufacturer: syz
[ 1433.673739][T17353] usb 10-1: SerialNumber: syz
[ 1433.680782][T17353] usb 10-1: config 0 descriptor??
[ 1433.688594][T17353] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[ 1433.761569][   T59] lo (unregistering): left allmulticast mode
[ 1433.772360][T22524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1433.895005][T17353] gp8psk: usb in 128 operation failed.
[ 1433.902203][T17353] gp8psk: usb in 137 operation failed.
[ 1433.908563][T17353] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1433.937234][T22524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1433.947990][T17353] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[ 1433.957689][T17353] usb 10-1: media controller created
[ 1433.963190][   T30] audit: type=1400 audit(1752220577.179:9695): avc:  denied  { relabelfrom } for  pid=22633 comm="syz.3.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1433.988803][   T30] audit: type=1400 audit(1752220577.179:9696): avc:  denied  { relabelto } for  pid=22633 comm="syz.3.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1433.999935][T17353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1434.046519][T17353] gp8psk_fe: Frontend revision 1 attached
[ 1434.053071][T17353] usb 10-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[ 1434.068419][T17353] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[ 1434.110309][T17353] gp8psk: usb in 138 operation failed.
[ 1434.120100][T22632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1434.128742][T17353] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[ 1434.139547][T22632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1434.163339][T17353] gp8psk: found Genpix USB device pID = 201 (hex)
[ 1434.171215][T22524] team0: Port device team_slave_0 added
[ 1434.214678][T22524] team0: Port device team_slave_1 added
[ 1434.286497][T22524] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1434.303501][T22524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1434.330827][   T30] audit: type=1400 audit(1752220577.529:9697): avc:  denied  { add_name } for  pid=22635 comm="syz.3.4348" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1434.393826][   T30] audit: type=1400 audit(1752220577.529:9698): avc:  denied  { create } for  pid=22635 comm="syz.3.4348" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1434.397971][T17353] usb 10-1: USB disconnect, device number 14
[ 1434.415459][T22524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1434.445045][   T30] audit: type=1400 audit(1752220577.529:9699): avc:  denied  { associate } for  pid=22635 comm="syz.3.4348" name="net_prio.prioidx" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1434.470173][T22524] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1434.477389][T22524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1434.513265][T22524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1434.546830][T17353] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[ 1434.621873][T22524] hsr_slave_0: entered promiscuous mode
[ 1434.632260][T22524] hsr_slave_1: entered promiscuous mode
[ 1434.639181][T22524] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1434.647388][T22524] Cannot create hsr debugfs directory
[ 1434.796270][   T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1434.924292][   T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1435.007711][   T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1435.042360][T22515] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1435.052831][T22515] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1435.092833][   T59] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[ 1435.117476][   T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1435.147226][T22515] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1435.199707][T22515] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1435.249906][T22647] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4351'.
[ 1435.731800][T22657] netlink: 241 bytes leftover after parsing attributes in process `syz.3.4353'.
[ 1436.454557][   T59] bridge_slave_1: left allmulticast mode
[ 1436.499242][   T59] bridge_slave_1: left promiscuous mode
[ 1436.514669][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1436.828408][   T59] bridge_slave_0: left allmulticast mode
[ 1436.843372][   T59] bridge_slave_0: left promiscuous mode
[ 1436.851882][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1436.926856][   T30] audit: type=1400 audit(1752220580.149:9700): avc:  denied  { read } for  pid=22667 comm="syz.9.4356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1437.604689][   T30] audit: type=1400 audit(1752220580.709:9701): avc:  denied  { write } for  pid=22667 comm="syz.9.4356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1437.866150][   T30] audit: type=1400 audit(1752220581.019:9702): avc:  denied  { name_bind } for  pid=22667 comm="syz.9.4356" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 1437.887548][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1438.754088][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1438.766328][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1438.776054][   T59] bond0 (unregistering): Released all slaves
[ 1438.988452][T22515] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1439.041986][T22515] 8021q: adding VLAN 0 to HW filter on device team0
[ 1439.050138][T22695] netlink: 241 bytes leftover after parsing attributes in process `syz.2.4361'.
[ 1439.525458][T22700] netlink: 241 bytes leftover after parsing attributes in process `syz.3.4363'.
[ 1439.723968][T20471] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1439.731109][T20471] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1439.936102][T14698] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1439.943250][T14698] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1439.973843][ T5884] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1440.269885][ T5884] usb 10-1: Using ep0 maxpacket: 16
[ 1440.296264][   T59] hsr_slave_0: left promiscuous mode
[ 1440.326146][ T5884] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1440.339748][   T59] hsr_slave_1: left promiscuous mode
[ 1440.345302][ T5884] usb 10-1: config 0 has no interface number 0
[ 1440.356353][ T5884] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1440.365809][ T5884] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1440.395057][ T5884] usb 10-1: Product: syz
[ 1440.398600][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1440.399856][ T5884] usb 10-1: Manufacturer: syz
[ 1440.416728][ T5884] usb 10-1: SerialNumber: syz
[ 1440.426528][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1440.434504][ T5884] usb 10-1: config 0 descriptor??
[ 1440.446637][ T5884] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1440.448190][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1440.479779][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1440.493648][   T30] audit: type=1400 audit(1752220583.719:9703): avc:  denied  { setopt } for  pid=22712 comm="syz.2.4367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1440.527404][   T59] veth1_macvtap: left promiscuous mode
[ 1440.532939][   T59] veth0_macvtap: left promiscuous mode
[ 1440.541347][   T59] veth1_vlan: left promiscuous mode
[ 1440.546663][   T59] veth0_vlan: left promiscuous mode
[ 1440.759548][ T5961] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 1440.918891][ T5961] usb 3-1: Using ep0 maxpacket: 32
[ 1440.955957][ T5961] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e
[ 1440.976794][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1440.984906][ T5961] usb 3-1: Product: syz
[ 1440.998289][ T5961] usb 3-1: Manufacturer: syz
[ 1441.002932][ T5961] usb 3-1: SerialNumber: syz
[ 1441.022228][ T5961] usb 3-1: config 0 descriptor??
[ 1441.037476][ T5961] cypress_m8 3-1:0.0: HID->COM RS232 Adapter converter detected
[ 1441.047176][ T5961] cyphidcom ttyUSB0: required endpoint is missing
[ 1441.069737][T22701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1441.078692][T22701] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1441.121705][   T59] team0 (unregistering): Port device team_slave_1 removed
[ 1441.171694][   T59] team0 (unregistering): Port device team_slave_0 removed
[ 1441.246497][ T5961] usb 3-1: USB disconnect, device number 106
[ 1441.258561][ T5961] cypress_m8 3-1:0.0: device disconnected
[ 1441.626087][T22524] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1441.646660][T22524] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1441.708398][T22524] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1441.739742][T22524] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1442.099290][   T30] audit: type=1400 audit(1752220585.319:9704): avc:  denied  { getopt } for  pid=22715 comm="syz.3.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1442.118777][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1442.923578][ T5884] gspca_spca1528: reg_r err -110
[ 1442.928660][ T5884] spca1528 10-1:0.1: probe with driver spca1528 failed with error -110
[ 1443.139766][T20925] usb 10-1: USB disconnect, device number 15
[ 1443.182481][T22524] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1443.214763][T22524] 8021q: adding VLAN 0 to HW filter on device team0
[ 1443.230007][T20471] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1443.237237][T20471] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1443.320347][T20471] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1443.327553][T20471] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1443.423696][T22740] input: syz1 as /devices/virtual/input/input38
[ 1443.868494][T22515] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1443.946389][T22515] veth0_vlan: entered promiscuous mode
[ 1443.979808][T22515] veth1_vlan: entered promiscuous mode
[ 1444.112724][T22515] veth0_macvtap: entered promiscuous mode
[ 1444.135242][T22515] veth1_macvtap: entered promiscuous mode
[ 1444.166779][T22515] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1444.211750][T22515] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1444.232914][T22524] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1444.250000][T22515] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.260532][T22515] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.270264][T22515] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.293873][T22515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.460391][T22756] FAULT_INJECTION: forcing a failure.
[ 1444.460391][T22756] name failslab, interval 1, probability 0, space 0, times 0
[ 1444.473148][T22756] CPU: 1 UID: 0 PID: 22756 Comm: syz.9.4374 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1444.473173][T22756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1444.473184][T22756] Call Trace:
[ 1444.473191][T22756]  <TASK>
[ 1444.473198][T22756]  dump_stack_lvl+0x16c/0x1f0
[ 1444.473228][T22756]  should_fail_ex+0x512/0x640
[ 1444.473250][T22756]  ? __kmalloc_noprof+0xbf/0x510
[ 1444.473277][T22756]  ? input_ff_create+0x60/0x350
[ 1444.473300][T22756]  should_failslab+0xc2/0x120
[ 1444.473324][T22756]  __kmalloc_noprof+0xd2/0x510
[ 1444.473358][T22756]  input_ff_create+0x60/0x350
[ 1444.473388][T22756]  uinput_ioctl_handler.isra.0+0x1181/0x1df0
[ 1444.473417][T22756]  ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540
[ 1444.473444][T22756]  ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10
[ 1444.473470][T22756]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1444.473511][T22756]  ? selinux_file_ioctl+0x180/0x270
[ 1444.473533][T22756]  ? selinux_file_ioctl+0xb4/0x270
[ 1444.473557][T22756]  ? __pfx_uinput_ioctl+0x10/0x10
[ 1444.473584][T22756]  __x64_sys_ioctl+0x18b/0x210
[ 1444.473607][T22756]  do_syscall_64+0xcd/0x4c0
[ 1444.473634][T22756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1444.473652][T22756] RIP: 0033:0x7fdf5718e929
[ 1444.473667][T22756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1444.473683][T22756] RSP: 002b:00007fdf57fd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1444.473700][T22756] RAX: ffffffffffffffda RBX: 00007fdf573b6160 RCX: 00007fdf5718e929
[ 1444.473711][T22756] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008
[ 1444.473722][T22756] RBP: 00007fdf57fd1090 R08: 0000000000000000 R09: 0000000000000000
[ 1444.473732][T22756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1444.473742][T22756] R13: 0000000000000000 R14: 00007fdf573b6160 R15: 00007ffdf51b3238
[ 1444.473767][T22756]  </TASK>
[ 1444.750332][ T6441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1444.769940][ T6441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1444.791235][T21534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1444.844058][T21534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1445.606965][T22769] FAULT_INJECTION: forcing a failure.
[ 1445.606965][T22769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1445.656093][T22769] CPU: 1 UID: 0 PID: 22769 Comm: syz.9.4377 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1445.656120][T22769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1445.656131][T22769] Call Trace:
[ 1445.656138][T22769]  <TASK>
[ 1445.656146][T22769]  dump_stack_lvl+0x16c/0x1f0
[ 1445.656174][T22769]  should_fail_ex+0x512/0x640
[ 1445.656199][T22769]  _copy_to_user+0x32/0xd0
[ 1445.656223][T22769]  simple_read_from_buffer+0xcb/0x170
[ 1445.656247][T22769]  proc_fail_nth_read+0x197/0x270
[ 1445.656267][T22769]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1445.656287][T22769]  ? rw_verify_area+0xcf/0x680
[ 1445.656304][T22769]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1445.656323][T22769]  vfs_read+0x1e4/0xc60
[ 1445.656348][T22769]  ? __pfx___mutex_lock+0x10/0x10
[ 1445.656373][T22769]  ? __pfx_vfs_read+0x10/0x10
[ 1445.656400][T22769]  ? __fget_files+0x20e/0x3c0
[ 1445.656429][T22769]  ksys_read+0x12a/0x250
[ 1445.656447][T22769]  ? __pfx_ksys_read+0x10/0x10
[ 1445.656475][T22769]  do_syscall_64+0xcd/0x4c0
[ 1445.656500][T22769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1445.656517][T22769] RIP: 0033:0x7fdf5718d33c
[ 1445.656533][T22769] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1445.656549][T22769] RSP: 002b:00007fdf58013030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1445.656570][T22769] RAX: ffffffffffffffda RBX: 00007fdf573b5fa0 RCX: 00007fdf5718d33c
[ 1445.656580][T22769] RDX: 000000000000000f RSI: 00007fdf580130a0 RDI: 0000000000000004
[ 1445.656590][T22769] RBP: 00007fdf58013090 R08: 0000000000000000 R09: 0000000000000000
[ 1445.656600][T22769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1445.656610][T22769] R13: 0000000000000000 R14: 00007fdf573b5fa0 R15: 00007ffdf51b3238
[ 1445.656633][T22769]  </TASK>
[ 1445.856335][T22524] veth0_vlan: entered promiscuous mode
[ 1445.867371][T22524] veth1_vlan: entered promiscuous mode
[ 1446.031627][T22524] veth0_macvtap: entered promiscuous mode
[ 1446.183123][T22524] veth1_macvtap: entered promiscuous mode
[ 1446.729801][   T30] audit: type=1400 audit(1752220589.949:9705): avc:  denied  { listen } for  pid=22780 comm="syz.3.4382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1446.749483][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1446.755706][T22524] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1446.763651][   T30] audit: type=1400 audit(1752220589.979:9706): avc:  denied  { connect } for  pid=22780 comm="syz.3.4382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1446.783359][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1447.235583][T22524] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1447.280730][T22524] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.351810][T22524] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.381357][T22524] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.406736][T22524] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.563566][T14689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1447.603738][T14689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1447.756394][T14698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1448.177011][T14698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1448.824188][T22811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1448.850208][T22811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1449.324717][   T30] audit: type=1400 audit(1752220592.539:9707): avc:  denied  { getopt } for  pid=22818 comm="syz.8.4390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1449.474046][   T31] INFO: task kworker/0:2:973 blocked for more than 143 seconds.
[ 1449.482005][   T31]       Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0
[ 1449.634238][   T30] audit: type=1400 audit(1752220592.729:9708): avc:  denied  { write } for  pid=22818 comm="syz.8.4390" name="ipv6_route" dev="proc" ino=4026533718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[ 1449.659662][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1449.720805][   T31] task:kworker/0:2     state:D stack:22600 pid:973   tgid:973   ppid:2      task_flags:0x4208060 flags:0x00004000
[ 1449.733496][   T31] Workqueue: usb_hub_wq hub_event
[ 1449.738544][   T31] Call Trace:
[ 1449.741817][   T31]  <TASK>
[ 1449.745223][   T31]  __schedule+0x116a/0x5de0
[ 1449.752423][   T31]  ? device_unregister+0x1d/0xc0
[ 1449.758288][   T31]  ? i2c_del_adapter+0x53e/0x6f0
[ 1449.766575][   T31]  ? dvb_usbv2_exit.isra.0+0x45b/0x9f0
[ 1449.772144][   T31]  ? dvb_usbv2_probe+0x1f61/0x3e50
[ 1449.777613][   T31]  ? __device_attach_driver+0x151/0x310
[ 1449.785522][   T31]  ? __pfx___schedule+0x10/0x10
[ 1449.790370][   T31]  ? find_held_lock+0x2b/0x80
[ 1449.797142][   T31]  ? schedule+0x2d7/0x3a0
[ 1449.801558][   T31]  schedule+0xe7/0x3a0
[ 1449.808021][   T31]  schedule_timeout+0x257/0x290
[ 1449.812992][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1449.820021][   T31]  ? mark_held_locks+0x49/0x80
[ 1449.827149][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1449.832553][   T31]  __wait_for_common+0x2fc/0x4e0
[ 1449.837825][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1449.843475][   T31]  ? __pfx___wait_for_common+0x10/0x10
[ 1449.849016][   T31]  ? __pfx_device_del+0x10/0x10
[ 1449.861143][   T31]  ? kobject_put+0xab/0x5a0
[ 1449.866051][   T31]  i2c_del_adapter+0x546/0x6f0
[ 1449.870907][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[ 1449.877147][   T31]  ? kfree+0x2b4/0x4d0
[ 1449.881258][   T31]  ? media_device_cleanup+0x53/0x80
[ 1449.886803][   T31]  ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0
[ 1449.892401][   T31]  dvb_usbv2_exit.isra.0+0x45b/0x9f0
[ 1449.898116][   T31]  dvb_usbv2_probe+0x1f61/0x3e50
[ 1449.903212][   T31]  ? __pfx_dvb_usbv2_probe+0x10/0x10
[ 1449.908778][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1449.914269][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1449.920099][   T31]  ? __pm_runtime_set_status+0x13c/0xa80
[ 1449.928561][   T31]  usb_probe_interface+0x300/0x9c0
[ 1449.934024][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1449.940062][   T31]  really_probe+0x23e/0xa90
[ 1449.944946][   T31]  __driver_probe_device+0x1de/0x440
[ 1449.950353][   T31]  driver_probe_device+0x4c/0x1b0
[ 1449.956747][   T31]  __device_attach_driver+0x1df/0x310
[ 1449.963061][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1449.970506][   T31]  bus_for_each_drv+0x156/0x1e0
[ 1449.976180][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1449.983987][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1449.990043][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1449.998292][   T31]  __device_attach+0x1e4/0x4b0
[ 1450.004871][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1450.010256][   T31]  ? do_raw_spin_unlock+0x172/0x230
[ 1450.015831][   T31]  bus_probe_device+0x17f/0x1c0
[ 1450.020951][   T31]  device_add+0x1148/0x1a70
[ 1450.027160][   T31]  ? __pfx_device_add+0x10/0x10
[ 1450.032039][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1450.037893][   T31]  usb_set_configuration+0x1187/0x1e20
[ 1450.043589][   T31]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 1450.049810][   T31]  usb_generic_driver_probe+0xb1/0x110
[ 1450.055683][   T31]  usb_probe_device+0xec/0x3e0
[ 1450.060896][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[ 1450.066675][   T31]  really_probe+0x23e/0xa90
[ 1450.071305][   T31]  __driver_probe_device+0x1de/0x440
[ 1450.077778][   T31]  ? usb_driver_applicable+0x1c7/0x220
[ 1450.083549][   T31]  driver_probe_device+0x4c/0x1b0
[ 1450.089093][   T31]  __device_attach_driver+0x1df/0x310
[ 1450.103569][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1450.110298][   T31]  bus_for_each_drv+0x156/0x1e0
[ 1450.116149][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1450.124332][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1450.130418][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1450.136661][   T31]  __device_attach+0x1e4/0x4b0
[ 1450.141493][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1450.147161][   T31]  ? do_raw_spin_unlock+0x172/0x230
[ 1450.152453][   T31]  bus_probe_device+0x17f/0x1c0
[ 1450.157669][   T31]  device_add+0x1148/0x1a70
[ 1450.162228][   T31]  ? __pfx_device_add+0x10/0x10
[ 1450.167410][   T31]  ? add_device_randomness+0xb7/0xf0
[ 1450.172902][   T31]  ? usb_new_device+0x44b/0x1a20
[ 1450.178217][   T31]  usb_new_device+0xd07/0x1a20
[ 1450.183191][   T31]  ? __pfx_usb_new_device+0x10/0x10
[ 1450.188992][   T31]  ? __mutex_unlock_slowpath+0x161/0x6a0
[ 1450.195850][   T31]  hub_event+0x2eb7/0x4fa0
[ 1450.200419][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1450.205636][   T31]  ? vdso_join_timens+0x220/0x250
[ 1450.210720][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1450.216595][   T31]  process_one_work+0x9cf/0x1b70
[ 1450.222715][   T31]  ? __pfx_hcd_resume_work+0x10/0x10
[ 1450.228893][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 1450.234624][   T31]  ? assign_work+0x1a0/0x250
[ 1450.239440][   T31]  worker_thread+0x6c8/0xf10
[ 1450.244420][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1450.249627][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1450.255210][   T31]  kthread+0x3c5/0x780
[ 1450.259374][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.264388][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1450.269241][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.276743][T20817] Bluetooth: hci0: command 0x0406 tx timeout
[ 1450.285427][   T31]  ret_from_fork+0x5d7/0x6f0
[ 1450.290121][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.295216][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1450.300106][   T31]  </TASK>
[ 1450.309615][   T31] 
[ 1450.309615][   T31] Showing all locks held in the system:
[ 1450.321432][   T31] 1 lock held by khungtaskd/31:
[ 1450.327428][   T31]  #0: ffffffff8e5c4e80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 1450.340614][   T31] 5 locks held by kworker/u8:4/59:
[ 1450.346027][   T31] 5 locks held by kworker/0:2/973:
[ 1450.351473][   T31]  #0: ffff888022eaed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1450.363161][   T31]  #1: ffffc9000397fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1450.374872][   T31]  #2: ffff888143f83198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0
[ 1450.384036][   T31]  #3: ffff888066ae3198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0
[ 1450.393589][   T31]  #4: ffff888031334160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0
[ 1450.403016][   T31] 2 locks held by getty/5591:
[ 1450.408228][   T31]  #0: ffff8880374320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1450.420244][   T31]  #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 1450.430689][   T31] 
[ 1450.434748][   T31] =============================================
[ 1450.434748][   T31] 
[ 1450.443652][   T31] NMI backtrace for cpu 0
[ 1450.443666][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1450.443688][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1450.443699][   T31] Call Trace:
[ 1450.443705][   T31]  <TASK>
[ 1450.443712][   T31]  dump_stack_lvl+0x116/0x1f0
[ 1450.443740][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 1450.443760][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1450.443787][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1450.443807][   T31]  watchdog+0xf70/0x12c0
[ 1450.443833][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1450.443850][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1450.443874][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1450.443900][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1450.443919][   T31]  kthread+0x3c5/0x780
[ 1450.443937][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.443955][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1450.443978][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.444001][   T31]  ret_from_fork+0x5d7/0x6f0
[ 1450.444026][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.444044][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1450.444075][   T31]  </TASK>
[ 1450.444081][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1450.562085][    C1] NMI backtrace for cpu 1
[ 1450.562100][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1450.562117][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1450.562126][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1450.562148][    C1] Code: eb 6b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 d9 21 00 fb f4 <e9> 7c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1450.562161][    C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2
[ 1450.562173][    C1] RAX: 0000000007071dd3 RBX: 0000000000000001 RCX: ffffffff8b883c79
[ 1450.562182][    C1] RDX: 0000000000000000 RSI: ffffffff8de329a6 RDI: ffffffff8c158f60
[ 1450.562191][    C1] RBP: ffffed1003cde488 R08: 0000000000000001 R09: ffffed10170a6645
[ 1450.562200][    C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001
[ 1450.562209][    C1] R13: ffff88801e6f2440 R14: ffffffff90a98350 R15: 0000000000000000
[ 1450.562218][    C1] FS:  0000000000000000(0000) GS:ffff888124815000(0000) knlGS:0000000000000000
[ 1450.562232][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1450.562248][    C1] CR2: 0000200000024000 CR3: 00000000327ee000 CR4: 00000000003526f0
[ 1450.562257][    C1] Call Trace:
[ 1450.562263][    C1]  <TASK>
[ 1450.562268][    C1]  default_idle+0x13/0x20
[ 1450.562287][    C1]  default_idle_call+0x6d/0xb0
[ 1450.562298][    C1]  do_idle+0x391/0x510
[ 1450.562318][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1450.562334][    C1]  ? trace_sched_exit_tp+0x31/0x130
[ 1450.562354][    C1]  cpu_startup_entry+0x4f/0x60
[ 1450.562370][    C1]  start_secondary+0x21d/0x2b0
[ 1450.562389][    C1]  ? __pfx_start_secondary+0x10/0x10
[ 1450.562408][    C1]  common_startup_64+0x13e/0x148
[ 1450.562430][    C1]  </TASK>
[ 1450.735119][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1450.745310][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1450.752177][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1450.763967][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1450.774012][   T31] Call Trace:
[ 1450.777274][   T31]  <TASK>
[ 1450.780192][   T31]  dump_stack_lvl+0x3d/0x1f0
[ 1450.784777][   T31]  panic+0x71c/0x800
[ 1450.788662][   T31]  ? __pfx___irq_work_queue_local+0x10/0x10
[ 1450.794546][   T31]  ? __pfx_panic+0x10/0x10
[ 1450.798951][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1450.804324][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1450.810290][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1450.815649][   T31]  ? watchdog+0xdda/0x12c0
[ 1450.820127][   T31]  ? watchdog+0xdcd/0x12c0
[ 1450.824544][   T31]  watchdog+0xdeb/0x12c0
[ 1450.828799][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1450.833471][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1450.838669][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1450.843693][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1450.848366][   T31]  kthread+0x3c5/0x780
[ 1450.852420][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.857001][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1450.861752][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.866326][   T31]  ret_from_fork+0x5d7/0x6f0
[ 1450.870907][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.875481][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1450.880239][   T31]  </TASK>
[ 1450.883429][   T31] Kernel Offset: disabled
[ 1450.887732][   T31] Rebooting in 86400 seconds..