last executing test programs:

10m1.732679844s ago: executing program 4 (id=683):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040))
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5)
eventfd2(0xff, 0x80001)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x31, "cbc19de8d51fc1a057020ccfd7da422ceb02449515512b2bde3ea4bdb44a7af50b"}})
bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r4}, 0x20)

9m57.445230936s ago: executing program 4 (id=686):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002800)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfffc, 0xd}, {0x5, 0xfff2}, {0x1, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1810000006fffeff000000000101000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09200000000000650901000000000066000000ffffff80180100002020702500000000002020207b9a20fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
r5 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c)
r6 = dup2(r5, r5)
sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890)

9m56.431977564s ago: executing program 4 (id=690):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000300))
socket(0x26, 0x800, 0x401)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
fcntl$setownex(r6, 0xf, &(0x7f0000000040)={0x0, r2})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x310, 0x220, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [0xff], 'ip6tnl0\x00', 'veth0_to_batadv\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff000000, 0x0, 0xff000000]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id=0x1, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0x775, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x53e)
r7 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00')
ioctl$KDGETMODE(r7, 0x4b3b, 0x0)

9m54.451975673s ago: executing program 4 (id=695):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109842, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$sg(0x0, 0x0, 0x8002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0xe0)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}, {0x0}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a", 0x16}, {&(0x7f00000003c0)="0eb5365284add559306869416978bc7dd6e426fd5024f81a3fe7d312d847c98ee81322037f5c7263f4a4bae9288c2e35b5cee801848d5b34e5da33e488a53f010bbeb36a0e21c1b005a7d7e38d8d4990d6bd4c811723557b40979471d0b4b36f0de8d3c7cf64dc434dc351a271dbcede139bcbb000b878c7552d5026c91f67366d887ecafd65cf5e978a9f2fefd06182afd338", 0x93}], 0x4, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x594}}], 0x18}, 0x40000c1)
fchdir(r6)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})

9m53.192276314s ago: executing program 4 (id=698):
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fchown(r2, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x3bbd, 0x0, &(0x7f0000000540)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
pidfd_getfd(0xffffffffffffffff, r3, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000002b80)=@filter={'filter\x00', 0x42, 0x4, 0x12c8, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10a0, 0x10c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0xfe, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0xffffffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 0x60, 0xc, [0x1c, 0x12, 0x17, 0x1f, 0x3f, 0x2, 0x1, 0x1d, 0x24, 0x2a, 0x13, 0x4, 0xe, 0x9, 0xf, 0x35], 0x2, 0x6, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1328)
r8 = socket(0x10, 0x803, 0x0)
syz_usb_connect(0x2, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a5301124d500000000000000050006000100050924030506030501f909240702020005cbad09240306010103", @ANYRES32=r8], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
r9 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x2, 0x316}, &(0x7f0000000340)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x91a2, 0x0, 0x0, 0x1})
io_uring_enter(r9, 0x3512, 0x0, 0x0, 0x0, 0x0)

9m50.063431779s ago: executing program 4 (id=709):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
tee(r6, r8, 0x4e, 0x0)
write$binfmt_script(r7, &(0x7f0000000800)={'#! ', './file0'}, 0xb)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)

9m34.578937652s ago: executing program 32 (id=709):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
tee(r6, r8, 0x4e, 0x0)
write$binfmt_script(r7, &(0x7f0000000800)={'#! ', './file0'}, 0xb)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)

2m14.341715301s ago: executing program 0 (id=1316):
syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000"/51, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8d"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9a, 0x7060, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x78, 0xb, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x400}}}]}, {0x32, 0x6, "2a1e065d53f9a12a6f0643881fd179759c537f545a6e3aacbb00372cba1068b1e5e61188f48471457bbe706e8044"}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240), &(0x7f0000000280))
fsopen(&(0x7f0000000380)='btrfs\x00', 0x1)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00')
read$msr(r3, &(0x7f0000000040)=""/59, 0xffb5)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="20000000041420002dbd7000fbdbdf250800010002000000080001db0fa40a00a45413d63ae9b162f16bee3c84cfd4e7cec62cef199c6e56c6dbc2d30257c2ffbdaac81b6e6a6c7e12670a3fde9e1c70226f5423d78efba5a9fb78456fda9b2d8a361213ecbc080683843b30e4ca00a6da40bc44699fd4f481fa3ce7663b2026f15769d7ab16c75a6751101bf27e341c9d074f34ab598272457c5d03e765e6f45d4fcb26fbb2feb364c5b88cd555373ac37e696f31b8eb991a632444e34a245bc319dd80d86d89cd867da7b95042832e0090071471d41b00647a874f4013f97838328fd8d5f55400"/242], 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="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", 0xffc}, {&(0x7f0000000540)="633656a4", 0xffffff47}], 0x2}}], 0x1, 0x4000800)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40)

1m49.584391781s ago: executing program 0 (id=1316):
syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000"/51, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8d"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9a, 0x7060, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x78, 0xb, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x400}}}]}, {0x32, 0x6, "2a1e065d53f9a12a6f0643881fd179759c537f545a6e3aacbb00372cba1068b1e5e61188f48471457bbe706e8044"}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240), &(0x7f0000000280))
fsopen(&(0x7f0000000380)='btrfs\x00', 0x1)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00')
read$msr(r3, &(0x7f0000000040)=""/59, 0xffb5)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="20000000041420002dbd7000fbdbdf250800010002000000080001db0fa40a00a45413d63ae9b162f16bee3c84cfd4e7cec62cef199c6e56c6dbc2d30257c2ffbdaac81b6e6a6c7e12670a3fde9e1c70226f5423d78efba5a9fb78456fda9b2d8a361213ecbc080683843b30e4ca00a6da40bc44699fd4f481fa3ce7663b2026f15769d7ab16c75a6751101bf27e341c9d074f34ab598272457c5d03e765e6f45d4fcb26fbb2feb364c5b88cd555373ac37e696f31b8eb991a632444e34a245bc319dd80d86d89cd867da7b95042832e0090071471d41b00647a874f4013f97838328fd8d5f55400"/242], 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="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", 0xffc}, {&(0x7f0000000540)="633656a4", 0xffffff47}], 0x2}}], 0x1, 0x4000800)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40)

1m20.537240531s ago: executing program 0 (id=1316):
syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000"/51, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8d"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9a, 0x7060, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x78, 0xb, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x400}}}]}, {0x32, 0x6, "2a1e065d53f9a12a6f0643881fd179759c537f545a6e3aacbb00372cba1068b1e5e61188f48471457bbe706e8044"}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240), &(0x7f0000000280))
fsopen(&(0x7f0000000380)='btrfs\x00', 0x1)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00')
read$msr(r3, &(0x7f0000000040)=""/59, 0xffb5)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="20000000041420002dbd7000fbdbdf250800010002000000080001db0fa40a00a45413d63ae9b162f16bee3c84cfd4e7cec62cef199c6e56c6dbc2d30257c2ffbdaac81b6e6a6c7e12670a3fde9e1c70226f5423d78efba5a9fb78456fda9b2d8a361213ecbc080683843b30e4ca00a6da40bc44699fd4f481fa3ce7663b2026f15769d7ab16c75a6751101bf27e341c9d074f34ab598272457c5d03e765e6f45d4fcb26fbb2feb364c5b88cd555373ac37e696f31b8eb991a632444e34a245bc319dd80d86d89cd867da7b95042832e0090071471d41b00647a874f4013f97838328fd8d5f55400"/242], 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="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", 0xffc}, {&(0x7f0000000540)="633656a4", 0xffffff47}], 0x2}}], 0x1, 0x4000800)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40)

58.440453491s ago: executing program 0 (id=1316):
syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000"/51, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8d"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9a, 0x7060, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x78, 0xb, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x400}}}]}, {0x32, 0x6, "2a1e065d53f9a12a6f0643881fd179759c537f545a6e3aacbb00372cba1068b1e5e61188f48471457bbe706e8044"}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240), &(0x7f0000000280))
fsopen(&(0x7f0000000380)='btrfs\x00', 0x1)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00')
read$msr(r3, &(0x7f0000000040)=""/59, 0xffb5)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="20000000041420002dbd7000fbdbdf250800010002000000080001db0fa40a00a45413d63ae9b162f16bee3c84cfd4e7cec62cef199c6e56c6dbc2d30257c2ffbdaac81b6e6a6c7e12670a3fde9e1c70226f5423d78efba5a9fb78456fda9b2d8a361213ecbc080683843b30e4ca00a6da40bc44699fd4f481fa3ce7663b2026f15769d7ab16c75a6751101bf27e341c9d074f34ab598272457c5d03e765e6f45d4fcb26fbb2feb364c5b88cd555373ac37e696f31b8eb991a632444e34a245bc319dd80d86d89cd867da7b95042832e0090071471d41b00647a874f4013f97838328fd8d5f55400"/242], 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="72dadefca0f578a05844b9b965ce0977e362ab036480ca216572c4403da2fad44ac3cd82f3c5f630f05b68c41aa12ee72cd0446c61f707075de251560d6f7d1b4344a9ed9dfc77eecb1955ab694fdeb60337a6264997dab1f9a89a722639ced4c7451d70ee13ce2249a7cbc0d79caa54f8f4b6d947a0ae7cad8d80507acbf5fdc14ac57aa3471d78c29ee5adcce001f51417dab0f1110b321dab2245ecf5ccebc1f8bc3bc9e3f1c9b09c1f681a377cf87df172a8d99f00d6d60cd7be19f6da9d0c4fba5ed704576c6434109930e60b529fc0cf2798732a92bb386f5a673b1db74789c0f1e80b7c099775bae987834a3858bc293443dd8b8bacadde386fce30f10c439e8dd16b68e5ef15cfa9920a4831942900b35836749ec55fd525e6d17858c61cb4aab2105ffffc7371c68855f3f42421e09a5b6b8e3c904534897085f97a9ae1d84d125e690d1eadff0f0c286ee4b1ac743f7ef0808874bf1d9070929ca9c7ec970e2bb944a664c7a37ce658311b5984f3a902686ab45948865a7a3a588eb919554e89c15986fc50f592bd503554dbb18e8796e47cfa5f7395fbefc05ac4c1cc9135e4f58811dee05034f56601a44b439aeea9f8490a3b6b42bc54d4e5a046333f92dc46fd21e4b84eeb99f8a30bf7a7b570da734ef3ea236c8536ab0ff4ef3aa766e6ce190a3dd72562f0f7c93d4566a91bd1ec6ff236b1f46f1e37c02f1bf0448740c5752b2377372e1f0756c2b26f3adcd6666b5f5143adc57cc28959b5e3c27318617dbb840c08d44b7dcb2c0fb7461814338704c6b4dca8bb55f6a726489962c8c402c7dc871f9229a7771b516bd76373bcc00d5e70d06d1df1fae0be90a91435f690d8cc2d78835f790a7f0c72f0fc8ff6dbaa182807e11ee12c7cdf2607e66ff8985b0fc10ca1fba921845ffe85b64590c8b7694ea603013b6b7999849e2b830dd34814b41eff4bcd775dfc67f2dacdbfa681b97852766ec33ac9e969b38801771a92b1072b1a58fe28dd95fd0c86338ac3abae6408c9b78ef66456bc2258b8f8ec1091cfd1396637a0240ccaea9977f10137b55f1d1258bce38b3501a273ffc3b5208f561a0fa79b2f3d208e981e26409c4b37fa365024f9a563116ccd11e02dd3d09361dcdeab88152919840a5be743f338f4f4676f0f693413b6d0a82e24903c1f79819d642c068d4e64507ddc405450ae75bac08f615a99835feff9a8cedba1b0222d1a637865238f0abf43014aa9955538a2535f54d7d2d09cc01ca20ceef5d71e8aee8f3712d5519dc0c16252fd3428a0444b7c27f523bc65374b9815af9ee764695db32b6f1f1c260dc41c1c0395470831458e91e7763e4993761e9311650a485df539cf9fdf934ddc13b6f16c2c74da3861a655b18de2f6ea4b96488c11bffba4f7c519ede2d216e443b83d35f34b8427cbc0f9c0fc61f09dffcf8eff02df18069412785a602fcecff04c6b48cdf18cd2126ee48c3c7671602075642462800386e6cf49c7059c0ac6dda8852e20bdf300e71289bb7d0563c1eaf02a014d310f1a575767d8a6797a5feb7a1a938373d06ef0bc9bec35a93ea9d7bda2b67f7326ace9e097b71c4bf39acccf0f393af3f3d0f2962602bed872cd335c63c7641a6240769edc2004e187e3d931d594f3bb8cfa33aae52db9fc9a3622892755c510b0bfd675249e1175283d9bbe55d6bcfc5835d67aa52650ddacd021f913acdc627480b5a4089c6783b0399005146fbb7e33503f131bfc1bbeba54c382ae8ac73c36e7d95c507735ede07ca1912611437a0da1a7f90184667c57b510c7c6107e0700a226168d701ef9c8e378cc8e3481bc586b7d02d5b2234a988258f2c485db7ef8b8ed6b6d0d69d1737de654ff28cf10e40c4f9e5d3f2c5b582d1f95a1713fb28dc5394d4a2ae089cf4e5a62e22b3803912d2caf134a63dc7a1dd2ea3dd0b413c9ea7e9857cb2a5637d7c7fdfd3e01b76e5cfd0dda3c1b2db8c0acacfde209ce54cfae9e1e3b2bd85d7c281aa05700590fc9b085071034bab23011fdc212b46c3d295e5fb0727b1e4c171363dd77043acb714f38cfbd22706521e66a9af786df2a72984fe0c8b55b9df0d26ca2a8021504c7e00a7bda6c0444cddc9cf40a46d90922df7625f04eb97f7bb71680e3b367808264005174339b252c15b741c5f8a8e36a54d36820a18c891bd22cca5c5886394631b8fe04ae678d3f020cdef43fc9194da54ca2b5467127ac384a5ef0fab6b6595e421cfbef60bcbf132fe011e7cab5dcd2688b4011423f9ce55cca94bdc3d95885320e478bd127ce1de862e50a5009253fa409737931ac6b693d330bc140e6dc58622493429bb6574c2c2260be053d542c47d5dfd826f4956931db1da0fdcf3ce2385a9b408f99486d521bed8810736620185eae8aae199dab2c91458584db2ee5fa4ce61bb9c723d5b5195deb2ae7b451e6f0ec09150a31f1f5a4d5ea7aaf1d08bf519ea12828d04d353407c265567b66bc2b7fbcf4e71dfeb131e7c6d3d43dccc4a3dfede8efa204df6c45f3642757f7889f62e95cd8c0eb6a8dfec250debae5f9f9b9fd4d5dab14e5d9a7becc07eeea3a5465875fa11d44177b9a7373195861c049bd7401c6ea2ee6d4252d309d90b6aeb951e8d0dd5d513a40248cf46b5dd5d3edf1bc68f74f64ac6d489bbe66ff6f13a32c4054b59f9bac1de3a163bb862815572dbe12b4055d2ec30f89b9f8d347c66f8e65b5199dac4c54f171a3118df28986013b3153132a0aa31acf2dc3088a2d623a250fddf3aa4f7e53f1193d9f163362c18a05cbeb88e9fd45594e6f59c63dc6773c53908e21d3f41b145987e5c22c230b1ac1d6b6deeed8aea43f4a5ebc27fa7c77fea551eaed8d3560d12e06006dcd5f396e25f91bc0c4e55403fc339d7d371efd3a000305e2567080bfd57690c746c2d34e7dbe2a856114ddecc27709c5c2af149a3e2f17b68edcbcc394e7f96615c169cc2c7eba3821c2737c95f9ce86b19776f37c7d01afc9878daeb202910822eded0dfcf214920038cd6f5fc0313ef38e7e4584c97c2e08c6ced40498b86d185194cd93b7ac7aa05dadbab060d3caca9e9ee5beec4fbc1fbdc54013571663c15eef21752dcc8c5d3bbb2680e4f67eca98437bce3970f59e60dea986483b9874ee0c4cdefbdc0d3488a4fb3f7d441fa7dcf337703529bcf4be863f2ac8bbebd10813f2abddba4333b22152aeb42c970cfb310e573fe8b90c79ab737b2c9716c23b0c114612a406db1546d4384f1f5e1b570d530cd025ad06496a3032e22ee96353d8c45dd5b81f3f429b6874275d80b350d7de806eb4ce5a4c8e8d09cb365b6463d83d6b8b654cbd5141123efaa324e6d2b551e92b30ec1fe79548b962be72669e7f6695815c6df5bdebb405a98b306a0c49c5cde75da290c288ab2a44ba2bf7f1dcdbf098ae55d6c693d5c3eed20dd29fb136ead8ce271413d0c71311211c883e9f64d0edd324e24ced63d1c905cfb5a92ecc7ec6680cb1e930278455b7e36f86013bcb32e5de3e391f44a8f55bdfc5b442c1ec7aa8faf0d6ec608167929c4d65efa73cce63eccb7e787e13718e2b7a36bd2c8f57290e35a45632dfa13db399472d842281498bd4dba66e7c0659fa51e84bea05f162225acc2f83734e838120a65cd93e95b922f36097da89f820f4619fa669527fa8ac3a539b234d3653818bce11ae955e5c8d7cff8bd8ecc6f231d7db627d8e5578f2811e236f193f6870831f41da4a05ecf4d274eb927c56dff69063d87f699b63b3dd757dc12b9671d1f33e5bc684f86cbeb66eaf4b2334097ddb0c8c1a0b084f3d31928a27bdbc55e7ce3c6bddb4a510f0ea889065c1e298d2b3ff321be2d19c9dac6ffaa06562d128bda2b72abf935968457e598fe8b593aa72eecc85044861eda40d0e23dc616273315a81d67898f449579e919cc155325d3aeb4bae948c8a82a990be8cd529d54f896957335a5ce4864af1cbd617d61f084bddc3fbbd9277e8ecb2842db7b89fcde85d3429e6e1fe97aafec76e01b86e2a5e14ddcc0f6751aee179a0c2a245e4f1fc749252460dc3db5f5ba64ad77ace607cbddd68ed7d1768062872070483dcb56ce4eca890325c5407c7f25bbf389e84c891734dab70b3f33d3ca41d75aa4043496928365522baa2f578def1e989162521cb1cdb3538c7c70b44fbb916598f6ee0b349f7a670540d8e73a5c92260e03bba848d5508e59130d87fd04ac77f54ff713366c79c3f3f915b98240049f0933c35066885121c35ea2bce2a84d4a2e08b9c4ecabd1db39d37b437e3d112af6e3513e2906cae47c0095c2765a4aee271bb9cda501b9b67b06dcf96f48f55dbf98bf9b836d6f9c26895707a194f2cceb98e8e4d188f2da271b5220bf72d22139764822b1e20a48edbef6d975f49d69354bb904ebc1a9b72541d2c5af7b33430715e28baa122a96f1bf87fb68e85eb152d68a7a941ffea3709eb44ad97ee0d5e7d2e9db7cef19af354b620364b66a942babf2b246bb1e36593a653d5162e16959ea1e3f0d27bb6fdcff5f6919b2b283d0aa1f33379b23992c543c6961de77f088a67494231d74d1f62d52bb2e3bf088bd1645bfb5fd85bf5d963a4c3114ca1a776e56349b3d06200f31c07d8594f96bbc2867a90cdec7d7fdbec58db194db8de1fbb982869d5c56df0cfca3e5fa08e67973d717fbf4511bf37aa91ed8d268747b425bbcef632ec37045cdcca3659f22704b62eb0e3f56a532bae14c90a0104c0792c7d5ad21cd78e9015c2302fd38f8487c8bf040197b899d7338dfe33209e08f18fa6dbfc50a626f5fdaeebe6cddc0980fac780edfb7e8df665ea4a8da55b0a1d79456ba5ff926220f69ec9da4ea7ac2c658cd1e1b4d3988affb5e8a54c1e186d19d309f17a1935137420f397b973fa879a157643188879d82e509cdb73a6f79d875fd09c673051fbcb6c399d226a5cbef74b36ebc20aa973699d1e0da2f7a70f9af5ce490a480fe8179f49e187f6e1ebc04e8b8008f21da3e895e5ca43d9ade0e451976b02244446e63153942fa7484c006fe11f0f45197a7f436f0782016ea251c1ffd5c82ba2ef0f29623755a6db472559219693722bc95ff501cb804a856339bc9635f511a03d577c3f4ddea4e54b157a4717f0d075c5444da6024183feb99baa5070b0de78a2345bf3a3e20210c48d69f7f797b85793c494a27b3ba8d5957ab3fd57e7bee72366e0039ab9741598abc75dfad2a20317420195f7fc623e11ae91abf18543af88f89614327be073d3fd6790238ced6e523fce18a6cceae458af54b798ec87a37258e5df22c688d35f4531a0d0879f393d40780328ab80e88b5bae1a2885b55e5f93a0e884b7e4b2663abe61802c6fdbb63becb677f81c9583cfb020063605c112997a3111f280e34fd318cb49a595ea880d7d4e3b143832af9643a0b96c2ea7efa531262f100dd3d3fd4c21d731be040594d33baed8fd1cc0aa6f0cf2f8936548d0384f50613b0c0cdeca8a83b375ec8c9632958d06bcc4a0e33de31cdd5dc0449082ac4690a81a3b2b1b6a96826f16223321e81a2a2ab7367f5c5f2ae4cfbdb4708ecbfc6d62ad8cc32b97f2c13ae9953730ea049f79ed411606997ad1603219da7330698781e907d0b29242aa1f1ae216f6ca35d184d1027ad963e0cab2e26b002ab5e583d66bdf203041b216797e095ca372857ed0a54da4b0d69f62e9bf2fdb0a5352cf58ad4e172c8fcefc1e3f5d157c4635a3cf51cb3a43afdb9a618350d62f8470ebf2a32f99", 0xffc}, {&(0x7f0000000540)="633656a4", 0xffffff47}], 0x2}}], 0x1, 0x4000800)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40)

37.516230363s ago: executing program 0 (id=1316):
syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000"/51, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8d"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9a, 0x7060, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x78, 0xb, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x400}}}]}, {0x32, 0x6, "2a1e065d53f9a12a6f0643881fd179759c537f545a6e3aacbb00372cba1068b1e5e61188f48471457bbe706e8044"}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240), &(0x7f0000000280))
fsopen(&(0x7f0000000380)='btrfs\x00', 0x1)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00')
read$msr(r3, &(0x7f0000000040)=""/59, 0xffb5)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="20000000041420002dbd7000fbdbdf250800010002000000080001db0fa40a00a45413d63ae9b162f16bee3c84cfd4e7cec62cef199c6e56c6dbc2d30257c2ffbdaac81b6e6a6c7e12670a3fde9e1c70226f5423d78efba5a9fb78456fda9b2d8a361213ecbc080683843b30e4ca00a6da40bc44699fd4f481fa3ce7663b2026f15769d7ab16c75a6751101bf27e341c9d074f34ab598272457c5d03e765e6f45d4fcb26fbb2feb364c5b88cd555373ac37e696f31b8eb991a632444e34a245bc319dd80d86d89cd867da7b95042832e0090071471d41b00647a874f4013f97838328fd8d5f55400"/242], 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="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", 0xffc}, {&(0x7f0000000540)="633656a4", 0xffffff47}], 0x2}}], 0x1, 0x4000800)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40)

12.819668223s ago: executing program 2 (id=1803):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_rr_get_interval(r1, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000080), 0x1000000, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
symlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000000280)='./file2\x00')
rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00')
ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000100), 0x5005)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340))
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85513, &(0x7f0000000b00)={{0x1}, 0x0, [0x400000, 0x0, 0x100000001, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x20000000, 0x3, 0xa, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0xb178, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x803, 0x9, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x8, 0xffffffffffffffff, 0x1, 0x0, 0x6, 0x2000000000, 0x0, 0x1, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9]})

11.768407066s ago: executing program 2 (id=1806):
socket$inet6(0xa, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001a8ed011acb01faa"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r4 = dup(r0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0)
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
listen(r8, 0x0)
accept4(r8, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0xc8, &(0x7f0000000100)=""/200, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000380)='\x00', 0x0}, 0x48)
r10 = getpgrp(0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, r10)
r11 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r11, &(0x7f0000000040), 0x10)
listen(r11, 0x0)
r12 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r12, &(0x7f0000000080), 0x10)

11.230494162s ago: executing program 5 (id=1807):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
r1 = creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000200), 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$video(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
gettid()
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000})
fallocate(r6, 0x1, 0x100000000, 0x80000000)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x19, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)

9.263798904s ago: executing program 5 (id=1810):
r0 = socket(0x400000000010, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = dup(0xffffffffffffffff)
write$6lowpan_enable(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_open_procfs$userns(r2, &(0x7f00000000c0))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(r4, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004"], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20)

9.263157178s ago: executing program 1 (id=1811):
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x82)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x36314247}})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$TIOCGPGRP(r4, 0x540f, 0xfffffffffffffffe)
getpid()
io_submit(0x0, 0x0, &(0x7f0000000180))
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r7, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)

9.256757161s ago: executing program 2 (id=1812):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109842, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$sg(0x0, 0x0, 0x8002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0xe0)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364", 0x55}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a", 0x16}, {&(0x7f00000003c0)="0eb5365284add559306869416978bc7dd6e426fd5024f81a3fe7d312d847c98ee81322037f5c7263f4a4bae9288c2e35b5cee801848d5b34e5da33e488a53f010bbeb36a0e21c1b005a7d7e38d8d4990d6bd4c811723557b40979471d0b4b36f0de8d3c7cf64dc434dc351a271dbcede139bcbb000b878c7552d5026c91f67366d887ecafd65cf5e978a9f2fefd06182afd338", 0x93}], 0x4, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x594}}], 0x18}, 0x40000c1)
fchdir(r6)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}]})

7.383050115s ago: executing program 1 (id=1814):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000200)={'netpci0\x00', @broadcast})
write$cgroup_devices(r3, 0x0, 0xffdd)
lstat(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740))
socketpair(0x25, 0x1, 0x5, &(0x7f00000017c0))
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001940)={r2, 0x8, 0x7, 0x8})
getgid()
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4000)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001a40))
r4 = gettid()
process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

7.06957374s ago: executing program 3 (id=1815):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @private2, 0x37, 0x0, 0x2, 0x0, 0x7f, 0x20})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x190)
syz_emit_ethernet(0x26a, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @multicast1, 0x0, "2634784b05261d387c9201200000000000000080000000000600", 0x0, 0xffffffff, 0x5, 0xf6}, 0x3c)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000)
recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x40002160, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback}, 0x1c)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(0xffffffffffffffff, r4, 0x0)
recvmsg$can_raw(r5, &(0x7f0000000800)={&(0x7f00000004c0), 0x80, &(0x7f0000000b80)=[{&(0x7f0000000540)=""/169, 0xa9}, {&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f00000008c0)=""/215, 0xd7}, {&(0x7f0000000a80)=""/254, 0xfe}, {&(0x7f0000000780)=""/108, 0x6c}, {&(0x7f00000009c0)=""/104, 0x68}, {&(0x7f0000000180)}, {&(0x7f00000002c0)=""/30, 0x1e}], 0x8, &(0x7f0000000600)=""/40, 0x28}, 0x12000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)

7.024937378s ago: executing program 2 (id=1816):
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffff9, 0x200)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
get_mempolicy(0x0, &(0x7f00000002c0), 0x744, &(0x7f00000c3000/0x1000)=nil, 0x1)
syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc3}, 0x1, 0x100000000000000}, 0x0)
socket(0x10, 0x3, 0x0)
r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
keyctl$chown(0x4, r4, 0x0, 0x0)
request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='TIPC\x00', r4)

6.865800999s ago: executing program 5 (id=1817):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_submit(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES16, @ANYRESDEC=r0, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xa, 0xc2, &(0x7f0000000580)=""/194, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
fsopen(0x0, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x4, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xea}, {0x2, 0xcc, 0x5, 0xd}, {0xba43, 0x1, 0x3, 0x7ffffffd}, {0x11c, 0xf, 0x9e}]})
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e652043617074557265272030"], 0xb8)
dup3(0xffffffffffffffff, r4, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)

6.776330159s ago: executing program 0 (id=1316):
syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000"/51, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8d"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9a, 0x7060, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x78, 0xb, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x400}}}]}, {0x32, 0x6, "2a1e065d53f9a12a6f0643881fd179759c537f545a6e3aacbb00372cba1068b1e5e61188f48471457bbe706e8044"}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240), &(0x7f0000000280))
fsopen(&(0x7f0000000380)='btrfs\x00', 0x1)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00')
read$msr(r3, &(0x7f0000000040)=""/59, 0xffb5)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="20000000041420002dbd7000fbdbdf250800010002000000080001db0fa40a00a45413d63ae9b162f16bee3c84cfd4e7cec62cef199c6e56c6dbc2d30257c2ffbdaac81b6e6a6c7e12670a3fde9e1c70226f5423d78efba5a9fb78456fda9b2d8a361213ecbc080683843b30e4ca00a6da40bc44699fd4f481fa3ce7663b2026f15769d7ab16c75a6751101bf27e341c9d074f34ab598272457c5d03e765e6f45d4fcb26fbb2feb364c5b88cd555373ac37e696f31b8eb991a632444e34a245bc319dd80d86d89cd867da7b95042832e0090071471d41b00647a874f4013f97838328fd8d5f55400"/242], 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="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", 0xffc}, {&(0x7f0000000540)="633656a4", 0xffffff47}], 0x2}}], 0x1, 0x4000800)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40)

4.552724796s ago: executing program 1 (id=1818):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x400}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
syz_pidfd_open(r1, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
creat(0x0, 0xa4)
userfaultfd(0x80001)
r4 = socket$alg(0x26, 0x5, 0x0)
fsopen(0x0, 0x300)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
ioctl$SIOCSIFMTU(r7, 0x89f2, &(0x7f0000000040)={'bond0\x00', 0xfffffffc})
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
read$FUSE(r6, 0x0, 0x0)

4.548492922s ago: executing program 2 (id=1819):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00')
lseek(r2, 0x7, 0x1)
getdents(r2, 0x0, 0x48)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000000000f84d0a0000000000001d00feff00000000950000000000000060d5bc92d6972de659a61c5cbf963630974eb2ad35725d4301e2d17ee4a50494cab61467197352df267a43501784bd57bcedf7f5829a0fea5ba3102671eab68a75df5185be857a8ff0dbed3396be47a4eaa45e5bb9ff748d68f28c0a20dbd6228c22e48fa4da0bd9c73371ce31e555c1d0a76a833b009cbb66c42474497845db4b85"], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf9, 0x3, 0xd5, '\x00', 0x8})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0)
r8 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

4.535014711s ago: executing program 3 (id=1820):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x57752a92}}, './file0\x00'})
ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000180)=0x8)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}})
r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x408000, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000180380bc41f859f9cc461c19b1b463406a817904", @ANYRES16=0x0, @ANYBLOB="000827bd7000fddbdf2514000000880004805400078008000200070000000800020009000000080001000d000000080001001000000008000400b80d00000800030000000000080004000100000008000100080000000800030003000000080001001f0000000900010073797a31000000000900010073797a30000000000900010073797a31000000000900010073797a3100000000"], 0x9c}}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0))
fsopen(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x205000, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000004c0)=""/65)

4.533383219s ago: executing program 5 (id=1828):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000200)={'netpci0\x00', @broadcast})
write$cgroup_devices(r3, 0x0, 0xffdd)
lstat(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740))
socketpair(0x25, 0x1, 0x5, &(0x7f00000017c0))
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001940)={r2, 0x8, 0x7, 0x8})
getgid()
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4000)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001a40))
r4 = gettid()
process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

3.115496331s ago: executing program 3 (id=1821):
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
socket(0x200000100000011, 0x3, 0x3)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000002480)={0x2020}, 0x2020)
syz_open_dev$tty1(0xc, 0x4, 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(r6, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = getpgid(r0)
prlimit64(r8, 0xb, &(0x7f0000000040)={0x2c5, 0x2}, &(0x7f00000000c0))
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1e0001000000000000000000000000ac1414bb0000000000000000000000004e200000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000001000000006c00020002000000ac1414aa00000000000000"], 0xfc}}, 0x0)

2.977688092s ago: executing program 1 (id=1822):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
r1 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0205648, &(0x7f0000000080)={0xf010000, 0x0, 0x4, 0x10000, 0x0, {0x77359400}, {0x4, 0x8, 0x0, 0x0, 0x0, 0xd, "58d4c2c3"}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0xc010)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), 0x0})
writev(0xffffffffffffffff, &(0x7f00000003c0), 0x100000000000022d)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x10001, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, <r8=>0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r8, 0x0, r7})
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0)
mount$pvfs2(&(0x7f0000000140), &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0), 0x4a, &(0x7f0000000200)={[], [{@subj_user={'subj_user', 0x3d, '=relative'}}, {@seclabel}]})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f})
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xfffff)

1.878260237s ago: executing program 3 (id=1823):
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x6, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x1, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x9, 0x5, 0xcff, 0x0, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x7, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x23a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x1fffc000, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x7, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x675, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x2, 0xffffffff, 0x3, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x6, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x9, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0x1, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x100, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x80000001, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x6, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x81e, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0xa4d5, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0xee5, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0xc, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x1, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x6, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0xffffff12, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r3, &(0x7f00000002c0)="8bdb16f2bb54aae9d3615ace06e160ee2234662df10572dfeb7247bd5ecc5bf7b2e712ea32963603359bfe8b2cdae9fb40373b154b1ebecfa4766194bf0924e2582797b4e686e2a1f4f52d747c3cf2c5f64c10446ee2ea5d3a72b3b9bb12c4f49aa03b8b344dcb3a46ac025af06296c9de92e52072b59ea47f3c515d7faea75ca186298cf6367fca3103928bc6e3b11033d98a75c42a24fe5b4cf6b15d1f1dfb37ef95a3961e1f460e976c0579db6e14967b74cafdcce56efdf87b487cdda1ddb4317ee3ac358756d4a9386a726dd054a25fc7af04e019483bf6331d25f28c7d346f232332213d8855594a", &(0x7f0000000440)=""/97}, 0x20)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f0000000400)={0x1f, @none}, 0x8)
listen(r5, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r6 = inotify_init()
ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0xffffffffffff830c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='illinois\x00', 0x9)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
sendfile(r4, r7, 0x0, 0x8000002b)
write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7)

1.680812554s ago: executing program 1 (id=1824):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000))
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x68d1d5c2})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x88e, 0xd42)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000100)={0xa, 0x0, 0x3, 0xffff, 'syz1\x00', 0x2})

991.728887ms ago: executing program 5 (id=1825):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109842, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$sg(0x0, 0x0, 0x8002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0xe0)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364", 0x55}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a", 0x16}, {&(0x7f00000003c0)="0eb5365284add559306869416978bc7dd6e426fd5024f81a3fe7d312d847c98ee81322037f5c7263f4a4bae9288c2e35b5cee801848d5b34e5da33e488a53f010bbeb36a0e21c1b005a7d7e38d8d4990d6bd4c811723557b40979471d0b4b36f0de8d3c7cf64dc434dc351a271dbcede139bcbb000b878c7552d5026c91f67366d887ecafd65cf5e978a9f2fefd06182afd338", 0x93}], 0x4, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x594}}], 0x18}, 0x40000c1)
fchdir(r6)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})

923.50335ms ago: executing program 3 (id=1826):
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
dup(0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r4 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x1000})
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0x1)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
syz_io_uring_setup(0x4fb0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f)
r8 = fcntl$dupfd(r5, 0x406, r0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8})
clock_gettime(0x0, &(0x7f00000000c0)={<r9=>0x0, <r10=>0x0})
timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000080)={{}, {r9, r10+60000000}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

95.310633ms ago: executing program 3 (id=1827):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109842, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$sg(0x0, 0x0, 0x8002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0xe0)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364", 0x55}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a", 0x16}, {&(0x7f00000003c0)="0eb5365284add559306869416978bc7dd6e426fd5024f81a3fe7d312d847c98ee81322037f5c7263f4a4bae9288c2e35b5cee801848d5b34e5da33e488a53f010bbeb36a0e21c1b005a7d7e38d8d4990d6bd4c811723557b40979471d0b4b36f0de8d3c7cf64dc434dc351a271dbcede139bcbb000b878c7552d5026c91f67366d887ecafd65cf5e978a9f2fefd06182afd338", 0x93}], 0x4, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x594}}], 0x18}, 0x40000c1)
fchdir(r6)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})

70.298539ms ago: executing program 5 (id=1829):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000, 0x100)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x5, 0x10003, 0x6}})
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ppoll(&(0x7f0000000000)=[{r1, 0x8108}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0)
r2 = epoll_create(0x20)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x60002003})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x25dfdbff}, 0x24}, 0x1, 0x0, 0x0, 0x40051}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x76)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x100000000000000)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'macvlan0\x00', 0x2}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r5}, 0x10)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000100), 0x10)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x0)
shutdown(r7, 0x0)
recvmmsg(r7, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000040000000400d0d2df61000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

13.404226ms ago: executing program 1 (id=1830):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0)
readv(0xffffffffffffffff, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)

0s ago: executing program 2 (id=1831):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = syz_io_uring_setup(0x5ade, &(0x7f0000000300)={0x0, 0xe34f, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x100001, 0x4, 0xfffffffe, {0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}, 0x101}}}})
io_uring_enter(r1, 0x5b43, 0x0, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(r7, 0x5412, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
rmdir(0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x1000000, 0xd)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8000)

kernel console output (not intermixed with test programs):

async page read
[  556.384589][ T9150] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  556.393835][ T9150] Buffer I/O error on dev nbd3, logical block 0, async page read
[  556.401939][ T9150] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  556.411249][ T9150] Buffer I/O error on dev nbd3, logical block 0, async page read
[  556.419097][ T9150] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  556.428587][ T9150] Buffer I/O error on dev nbd3, logical block 0, async page read
[  556.437846][ T9150] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  556.447108][ T9150] Buffer I/O error on dev nbd3, logical block 0, async page read
[  556.455158][ T9150] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  556.478634][ T9150] Buffer I/O error on dev nbd3, logical block 0, async page read
[  556.491069][ T9150] ldm_validate_partition_table(): Disk read failed.
[  556.498204][ T9150] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  556.507512][ T9150] Buffer I/O error on dev nbd3, logical block 0, async page read
[  556.519173][ T9150] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  556.878247][ T9150] Buffer I/O error on dev nbd3, logical block 0, async page read
[  557.221815][ T9150] Dev nbd3: unable to read RDB block 0
[  557.227901][ T9150]  nbd3: unable to read partition table
[  557.374713][ T9150] ldm_validate_partition_table(): Disk read failed.
[  557.571716][ T9150] Dev nbd3: unable to read RDB block 0
[  557.719539][ T9150]  nbd3: unable to read partition table
[  557.885459][T10271] input: syz1 as /devices/virtual/input/input21
[  558.563023][T10280] overlayfs: failed to resolve './file0': -2
[  559.058395][T10287] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  559.421089][T10269] Bluetooth: hci1: command 0x0405 tx timeout
[  561.442033][   T30] audit: type=1400 audit(2000000144.610:481): avc:  denied  { ioctl } for  pid=10282 comm="syz.5.988" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  561.800840][   T30] audit: type=1400 audit(2000000144.930:482): avc:  denied  { bind } for  pid=10297 comm="syz.0.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  561.830200][   T30] audit: type=1400 audit(2000000144.990:483): avc:  denied  { kexec_image_load } for  pid=10299 comm="syz.2.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  561.904585][   T30] audit: type=1400 audit(2000000145.310:484): avc:  denied  { ioctl } for  pid=10297 comm="syz.0.992" path="socket:[24847]" dev="sockfs" ino=24847 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  562.488412][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  564.157104][T10322] lo speed is unknown, defaulting to 1000
[  564.163590][T10322] lo speed is unknown, defaulting to 1000
[  565.070552][T10332] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  565.990394][   T30] audit: type=1400 audit(2000000149.380:485): avc:  denied  { connect } for  pid=10329 comm="syz.2.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  566.047090][T10346] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1000'.
[  566.617527][T10355] xt_CT: You must specify a L4 protocol and not use inversions on it
[  567.245527][T10337] input: syz1 as /devices/virtual/input/input22
[  567.385576][T10352] overlayfs: missing 'lowerdir'
[  568.247434][   T30] audit: type=1326 audit(2000000151.680:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.2.999" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cfe98e969 code=0x0
[  570.056043][T10336] lo speed is unknown, defaulting to 1000
[  570.374576][T10336] lo speed is unknown, defaulting to 1000
[  571.503627][T10386] block nbd0: server does not support multiple connections per device.
[  571.631400][T10386] block nbd0: shutting down sockets
[  571.690929][ T5860] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  572.080862][ T5860] usb 1-1: Using ep0 maxpacket: 8
[  572.106526][ T5860] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  572.166304][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.214585][ T5860] usb 1-1: Product: syz
[  572.218767][ T5860] usb 1-1: Manufacturer: syz
[  572.249241][ T5860] usb 1-1: SerialNumber: syz
[  572.261256][ T5860] usb 1-1: config 0 descriptor??
[  574.361796][ T5860] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  574.690930][ T5860] gspca_sunplus: reg_w_riv err -71
[  574.696124][ T5860] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  574.756372][ T5860] usb 1-1: USB disconnect, device number 9
[  575.070022][T10429] lo speed is unknown, defaulting to 1000
[  575.082767][T10429] lo speed is unknown, defaulting to 1000
[  575.432228][T10430] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1015'.
[  575.692006][T10421] x_tables: ip6_tables: mh match: only valid for protocol 135
[  575.961276][   T30] audit: type=1400 audit(2000000159.290:487): avc:  denied  { load_policy } for  pid=10426 comm="syz.0.1016" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  576.766143][T10431] SELinux: failed to load policy
[  577.283655][T10435] netlink: 'syz.5.1017': attribute type 2 has an invalid length.
[  577.794187][T10453] netlink: 'syz.2.1018': attribute type 21 has an invalid length.
[  577.802158][T10453] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1018'.
[  577.811688][T10453] netlink: 'syz.2.1018': attribute type 6 has an invalid length.
[  577.819434][T10453] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1018'.
[  579.466512][T10474] Cannot find add_set index 0 as target
[  582.811749][T10498] x_tables: ip6_tables: mh match: only valid for protocol 135
[  582.982685][T10502] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  583.023939][T10502] input: syz1 as /devices/virtual/input/input23
[  584.678692][T10269] Bluetooth: hci1: command 0x0405 tx timeout
[  584.783472][T10518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1031'.
[  585.755586][   T30] audit: type=1400 audit(2000000168.690:488): avc:  denied  { create } for  pid=10511 comm="syz.5.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  585.949178][   T30] audit: type=1400 audit(2000000168.930:489): avc:  denied  { sys_admin } for  pid=10511 comm="syz.5.1032" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  586.105929][T10526] new mount options do not match the existing superblock, will be ignored
[  586.127686][T10526] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  586.506027][   T30] audit: type=1400 audit(2000000169.570:490): avc:  denied  { remount } for  pid=10507 comm="syz.0.1030" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  587.595537][T10544] lo speed is unknown, defaulting to 1000
[  587.602682][T10544] lo speed is unknown, defaulting to 1000
[  591.123848][T10547] ceph: No mds server is up or the cluster is laggy
[  591.214184][T10572] sg_write: data in/out 1876711487/120 bytes for SCSI command 0x0-- guessing data in;
[  591.214184][T10572]    program syz.1.1039 not setting count and/or reply_len properly
[  593.417550][T10598] x_tables: ip6_tables: mh match: only valid for protocol 135
[  596.396035][T10631] lo speed is unknown, defaulting to 1000
[  596.414212][T10631] lo speed is unknown, defaulting to 1000
[  597.085326][T10618] wg2: entered promiscuous mode
[  597.666726][T10645] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  598.956516][T10659] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  600.413358][T10675] batadv1: entered promiscuous mode
[  600.895384][T10677] x_tables: ip6_tables: mh match: only valid for protocol 135
[  603.034905][   T30] audit: type=1400 audit(2000000186.180:491): avc:  denied  { getopt } for  pid=10691 comm="syz.1.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  603.247581][T10695] syz.3.1057 (10695): drop_caches: 2
[  604.037325][   T30] audit: type=1800 audit(2000000187.480:492): pid=10704 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1063" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  609.581163][T10788] x_tables: ip6_tables: mh match: only valid for protocol 135
[  610.472774][T10802] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  610.773492][   T30] audit: type=1400 audit(2000000193.910:493): avc:  denied  { connect } for  pid=10794 comm="syz.1.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  611.328155][T10810] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  611.336160][T10810] overlayfs: failed to set xattr on upper
[  611.342252][T10810] overlayfs: ...falling back to redirect_dir=nofollow.
[  611.349139][T10810] overlayfs: ...falling back to metacopy=off.
[  611.355406][T10810] overlayfs: ...falling back to index=off.
[  611.361308][T10810] overlayfs: ...falling back to uuid=null.
[  613.488552][T10835] siw: device registration error -23
[  613.527058][T10834] binder: 10824:10834 ioctl c0306201 200000000240 returned -14
[  613.953313][   T30] audit: type=1400 audit(2000000197.400:494): avc:  denied  { ioctl } for  pid=10826 comm="syz.0.1083" path="socket:[26187]" dev="sockfs" ino=26187 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  614.785393][T10851] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  614.792868][T10851] overlayfs: failed to set xattr on upper
[  614.799284][T10851] overlayfs: ...falling back to redirect_dir=nofollow.
[  614.807787][T10851] overlayfs: ...falling back to metacopy=off.
[  614.814035][T10851] overlayfs: ...falling back to index=off.
[  614.819884][T10851] overlayfs: ...falling back to uuid=null.
[  615.780099][T10857] x_tables: ip6_tables: mh match: only valid for protocol 135
[  617.985326][T10890] delete_channel: no stack
[  618.694434][T10886] delete_channel: no stack
[  618.722414][T10897] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  618.730240][T10897] overlayfs: failed to set xattr on upper
[  618.737103][T10897] overlayfs: ...falling back to redirect_dir=nofollow.
[  618.744384][T10897] overlayfs: ...falling back to metacopy=off.
[  618.750642][T10897] overlayfs: ...falling back to index=off.
[  618.760015][T10897] overlayfs: ...falling back to uuid=null.
[  619.381360][T10912] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  619.388327][T10912] overlayfs: failed to set xattr on upper
[  619.394068][T10912] overlayfs: ...falling back to redirect_dir=nofollow.
[  619.401747][T10912] overlayfs: ...falling back to metacopy=off.
[  619.408441][T10912] overlayfs: ...falling back to index=off.
[  619.414587][T10912] overlayfs: ...falling back to uuid=null.
[  620.520350][T10924] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  620.843535][T10931] x_tables: ip6_tables: mh match: only valid for protocol 135
[  621.656636][   T30] audit: type=1400 audit(2000000204.720:495): avc:  denied  { search } for  pid=10930 comm="syz.3.1102" name="/" dev="configfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  624.133740][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  625.100869][   T30] audit: type=1400 audit(2000000208.300:496): avc:  denied  { audit_write } for  pid=10955 comm="syz.0.1107" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  625.231307][T10957] mkiss: ax0: crc mode is auto.
[  625.455173][T10964] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  625.462365][T10964] overlayfs: failed to set xattr on upper
[  625.468124][T10964] overlayfs: ...falling back to redirect_dir=nofollow.
[  625.475281][T10964] overlayfs: ...falling back to metacopy=off.
[  625.481445][T10964] overlayfs: ...falling back to index=off.
[  625.487289][T10964] overlayfs: ...falling back to uuid=null.
[  626.030396][T10972] siw: device registration error -23
[  626.565773][T10976] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  626.573692][T10976] overlayfs: failed to set xattr on upper
[  626.580847][T10976] overlayfs: ...falling back to redirect_dir=nofollow.
[  626.587785][T10976] overlayfs: ...falling back to metacopy=off.
[  626.594075][T10976] overlayfs: ...falling back to index=off.
[  626.599955][T10976] overlayfs: ...falling back to uuid=null.
[  626.859595][T10269] Bluetooth: hci1: command 0x0405 tx timeout
[  627.860951][T10988] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  628.320047][T10992] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  628.427540][T10995] x_tables: ip6_tables: mh match: only valid for protocol 135
[  628.910361][T10997] input: syz0 as /devices/virtual/input/input24
[  629.890890][   T30] audit: type=1400 audit(2000000213.270:497): avc:  denied  { ioctl } for  pid=11000 comm="syz.3.1118" path="socket:[26486]" dev="sockfs" ino=26486 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  630.423851][   T30] audit: type=1326 audit(2000000213.830:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707398e969 code=0x7ffc0000
[  631.407690][   T30] audit: type=1326 audit(2000000213.830:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707398e969 code=0x7ffc0000
[  631.431732][   T30] audit: type=1326 audit(2000000213.830:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f707398e969 code=0x7ffc0000
[  632.221328][   T30] audit: type=1326 audit(2000000213.830:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707398e969 code=0x7ffc0000
[  633.215704][   T30] audit: type=1326 audit(2000000213.830:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707398e969 code=0x7ffc0000
[  633.330857][   T30] audit: type=1326 audit(2000000213.840:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f707398e969 code=0x7ffc0000
[  634.246220][T11037] overlay: ./file0 is not a directory
[  634.612970][T11052] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  637.245562][T11062] syz.0.1130 (11062): drop_caches: 2
[  638.987529][   T30] audit: type=1400 audit(2000000222.320:504): avc:  denied  { firmware_load } for  pid=11075 comm="syz.0.1135" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  639.180871][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  639.356245][   T24] usb 6-1: unable to read config index 0 descriptor/start: -61
[  639.442133][   T24] usb 6-1: can't read configurations, error -61
[  640.311384][   T30] audit: type=1400 audit(2000000223.740:505): avc:  denied  { create } for  pid=11090 comm="syz.0.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  640.369403][   T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  640.645703][   T24] usb 6-1: unable to read config index 0 descriptor/start: -61
[  640.698959][   T24] usb 6-1: can't read configurations, error -61
[  640.754298][   T30] audit: type=1800 audit(2000000224.190:506): pid=11080 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1134" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  640.757018][   T24] usb usb6-port1: attempt power cycle
[  641.295491][T11108] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  641.302786][T11108] overlayfs: failed to set xattr on upper
[  641.921834][T11108] overlayfs: ...falling back to redirect_dir=nofollow.
[  641.945358][T11108] overlayfs: ...falling back to metacopy=off.
[  641.959447][T11108] overlayfs: ...falling back to index=off.
[  642.001492][T11108] overlayfs: ...falling back to uuid=null.
[  642.711565][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1145'.
[  643.010809][T11128] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  643.018375][T11128] overlayfs: failed to set xattr on upper
[  643.024551][T11128] overlayfs: ...falling back to redirect_dir=nofollow.
[  643.076773][T11128] overlayfs: ...falling back to metacopy=off.
[  643.083222][T11128] overlayfs: ...falling back to index=off.
[  643.089105][T11128] overlayfs: ...falling back to uuid=null.
[  644.276804][T11149] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[  644.287321][T11149] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[  645.520595][   T30] audit: type=1400 audit(2000000228.930:507): avc:  denied  { ioctl } for  pid=11159 comm="syz.2.1153" path="socket:[27744]" dev="sockfs" ino=27744 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  645.980885][T11171] syz.5.1151 (11171): drop_caches: 2
[  646.000319][T11171] syz.5.1151 (11171): drop_caches: 2
[  649.480940][ T5864] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  649.489141][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[  649.894772][ T5864] usb 3-1: device descriptor read/64, error -32
[  650.183029][ T5864] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  651.380186][T11219] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  651.530783][ T5864] usb 3-1: Using ep0 maxpacket: 16
[  653.066691][T11231] xt_time: invalid argument - start or stop time greater than 23:59:59
[  653.223636][ T5864] usb 3-1: device descriptor read/all, error -71
[  653.268001][ T5864] usb usb3-port1: attempt power cycle
[  653.510741][T11238] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  653.970844][   T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  656.182421][T11242] overlayfs: overlapping lowerdir path
[  656.876059][T11260] x_tables: ip6_tables: mh match: only valid for protocol 135
[  656.981105][   T24] usb 6-1: device not accepting address 7, error -71
[  657.240039][T11261] x_tables: ip6_tables: mh match: only valid for protocol 135
[  660.209546][T11282] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  661.280921][   T30] audit: type=1400 audit(2000000244.430:508): avc:  denied  { ioctl } for  pid=11286 comm="syz.5.1182" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  661.880773][ T5860] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  661.944985][   T30] audit: type=1400 audit(2000000245.390:509): avc:  denied  { write } for  pid=11290 comm="syz.0.1183" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  662.210819][ T5860] usb 6-1: device descriptor read/64, error -71
[  663.016665][ T5860] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  663.463801][T11310] overlayfs: failed to resolve './file0': -2
[  663.550858][ T5860] usb 6-1: device descriptor read/64, error -71
[  664.290675][T11319] x_tables: ip6_tables: mh match: only valid for protocol 135
[  664.616513][ T5860] usb usb6-port1: attempt power cycle
[  665.412600][T11325] overlayfs: missing 'workdir'
[  665.791330][ T5860] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  665.832832][ T5860] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  665.883081][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.900254][ T5860] usb 6-1: Product: syz
[  665.906536][ T5860] usb 6-1: Manufacturer: syz
[  665.915294][ T5860] usb 6-1: SerialNumber: syz
[  666.109358][ T5860] usb 6-1: config 0 descriptor??
[  666.445706][   T30] audit: type=1400 audit(2000000249.870:510): avc:  denied  { read } for  pid=11334 comm="syz.0.1193" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  667.519696][   T30] audit: type=1400 audit(2000000249.870:511): avc:  denied  { open } for  pid=11334 comm="syz.0.1193" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  667.733283][T11355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1206'.
[  668.122654][   T30] audit: type=1400 audit(2000000251.460:512): avc:  denied  { ioctl } for  pid=11351 comm="syz.2.1196" path="socket:[27311]" dev="sockfs" ino=27311 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  668.496543][ T5860] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22
[  668.543746][   T30] audit: type=1326 audit(2000000251.780:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf18e969 code=0x7ffc0000
[  668.785839][ T5860] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[  668.813048][ T5860] usb 6-1: USB disconnect, device number 11
[  668.957494][   T30] audit: type=1326 audit(2000000251.780:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf18e969 code=0x7ffc0000
[  669.090931][   T30] audit: type=1326 audit(2000000251.790:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41bf18e969 code=0x7ffc0000
[  669.133704][T11368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1198'.
[  669.157729][T11362] nfs: Unknown parameter 'TIPCv2'
[  669.213655][T11356] SELinux:  Context - is not valid (left unmapped).
[  669.276546][   T30] audit: type=1326 audit(2000000251.790:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf18e969 code=0x7ffc0000
[  669.312213][   T30] audit: type=1326 audit(2000000251.790:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf18e969 code=0x7ffc0000
[  669.343688][   T30] audit: type=1326 audit(2000000251.790:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f41bf18e969 code=0x7ffc0000
[  669.483869][T11376] overlayfs: failed to resolve './file0': -2
[  670.680021][   T30] audit: type=1400 audit(2000000252.660:519): avc:  denied  { relabelfrom } for  pid=11351 comm="syz.2.1196" name="PACKET" dev="sockfs" ino=27312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  672.624159][T11352] syz.2.1196: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  672.677640][T11352] CPU: 1 UID: 0 PID: 11352 Comm: syz.2.1196 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  672.677658][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  672.677665][T11352] Call Trace:
[  672.677669][T11352]  <TASK>
[  672.677673][T11352]  dump_stack_lvl+0x16c/0x1f0
[  672.677694][T11352]  warn_alloc+0x248/0x3a0
[  672.677707][T11352]  ? __pfx_warn_alloc+0x10/0x10
[  672.677722][T11352]  ? __get_vm_area_node+0x1dc/0x330
[  672.677737][T11352]  ? __get_vm_area_node+0x208/0x330
[  672.677756][T11352]  __vmalloc_node_range_noprof+0x1110/0x1540
[  672.677778][T11352]  ? packet_set_ring+0xb07/0x18d0
[  672.677797][T11352]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  672.677815][T11352]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  672.677827][T11352]  ? rcu_is_watching+0x12/0xc0
[  672.677841][T11352]  ? trace_kmalloc+0x2b/0xd0
[  672.677854][T11352]  ? __kmalloc_noprof+0x242/0x510
[  672.677864][T11352]  ? packet_set_ring+0xb07/0x18d0
[  672.677880][T11352]  vzalloc_noprof+0x6b/0x90
[  672.677896][T11352]  ? packet_set_ring+0xb07/0x18d0
[  672.677911][T11352]  packet_set_ring+0xb07/0x18d0
[  672.677945][T11352]  packet_setsockopt+0x121b/0x3360
[  672.677977][T11352]  ? __pfx_packet_setsockopt+0x10/0x10
[  672.678004][T11352]  ? selinux_netlbl_socket_setsockopt+0x183/0x470
[  672.678033][T11352]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[  672.678059][T11352]  ? futex_wake+0x18d/0x4e0
[  672.678092][T11352]  ? __lock_acquire+0x5ca/0x1ba0
[  672.678126][T11352]  ? selinux_socket_setsockopt+0x6a/0x80
[  672.678152][T11352]  ? __pfx_packet_setsockopt+0x10/0x10
[  672.678179][T11352]  do_sock_setsockopt+0x221/0x470
[  672.678204][T11352]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  672.678245][T11352]  __sys_setsockopt+0x1a0/0x230
[  672.678269][T11352]  __x64_sys_setsockopt+0xbd/0x160
[  672.678287][T11352]  ? do_syscall_64+0x91/0x260
[  672.678313][T11352]  ? lockdep_hardirqs_on+0x7c/0x110
[  672.678337][T11352]  do_syscall_64+0xcd/0x260
[  672.678365][T11352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.678384][T11352] RIP: 0033:0x7f4cfe98e969
[  672.678399][T11352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  672.678417][T11352] RSP: 002b:00007f4cff805038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  672.678435][T11352] RAX: ffffffffffffffda RBX: 00007f4cfebb5fa0 RCX: 00007f4cfe98e969
[  672.678447][T11352] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000004
[  672.678463][T11352] RBP: 00007f4cfea10ab1 R08: 000000000000001c R09: 0000000000000000
[  672.678474][T11352] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  672.678485][T11352] R13: 0000000000000000 R14: 00007f4cfebb5fa0 R15: 00007ffd7e699628
[  672.678509][T11352]  </TASK>
[  672.678551][T11352] Mem-Info:
[  673.131681][T11352] active_anon:12810 inactive_anon:0 isolated_anon:0
[  673.131681][T11352]  active_file:16347 inactive_file:40848 isolated_file:0
[  673.131681][T11352]  unevictable:768 dirty:303 writeback:0
[  673.131681][T11352]  slab_reclaimable:7176 slab_unreclaimable:103974
[  673.131681][T11352]  mapped:34575 shmem:7764 pagetables:925
[  673.131681][T11352]  sec_pagetables:0 bounce:0
[  673.131681][T11352]  kernel_misc_reclaimable:0
[  673.131681][T11352]  free:1297779 free_pcp:3596 free_cma:0
[  673.247286][T11398] overlayfs: missing 'workdir'
[  673.381808][T11352] Node 0 active_anon:48540kB inactive_anon:0kB active_file:65252kB inactive_file:163192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138164kB dirty:1212kB writeback:0kB shmem:27020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11616kB pagetables:3700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  673.614377][T11352] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  673.946491][T11352] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  674.206701][T11352] lowmem_reserve[]: 0 2484 2486 2486 2486
[  674.441829][T11352] Node 0 DMA32 free:1271388kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:54496kB inactive_anon:0kB active_file:65252kB inactive_file:161376kB unevictable:1536kB writepending:1064kB present:3129332kB managed:2543896kB mlocked:0kB bounce:0kB free_pcp:4060kB local_pcp:1168kB free_cma:0kB
[  674.502087][T11352] lowmem_reserve[]: 0 0 1 1 1
[  674.507789][T11352] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB
[  674.554820][T11352] lowmem_reserve[]: 0 0 0 0 0
[  674.820857][T11352] Node 1 Normal free:3911288kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  675.259007][T11352] lowmem_reserve[]: 0 0 0 0 0
[  675.387002][T11352] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  675.406421][T11352] Node 0 DMA32: 54*4kB (UE) 114*8kB (UE) 384*16kB (UME) 519*32kB (UME) 425*64kB (ME) 78*128kB (UME) 38*256kB (ME) 18*512kB (ME) 7*1024kB (ME) 4*2048kB (UME) 287*4096kB (UM) = 1270920kB
[  675.595461][T11352] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB
[  675.865821][T11352] Node 1 Normal: 202*4kB (UME) 58*8kB (UE) 48*16kB (UME) 212*32kB (UME) 78*64kB (UME) 33*128kB (UE) 16*256kB (UM) 8*512kB (UM) 4*1024kB (UME) 5*2048kB (UME) 945*4096kB (M) = 3911288kB
[  675.884558][T11352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  675.932423][T11352] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  675.942817][T11352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  675.952697][T11352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  675.962241][T11352] 66010 total pagecache pages
[  675.966975][T11352] 0 pages in swap cache
[  675.971327][T11352] Free swap  = 124996kB
[  675.975789][T11352] Total swap = 124996kB
[  675.979983][T11352] 2097051 pages RAM
[  675.984117][T11352] 0 pages HighMem/MovableOnly
[  675.988864][T11352] 428971 pages reserved
[  675.993316][T11352] 0 pages cma reserved
[  676.819573][T11419] Failed to initialize the IGMP autojoin socket (err -2)
[  677.721343][T11427] overlay: ./file0 is not a directory
[  678.211333][T11440] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  679.390064][ T5905] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  680.154738][T11459] overlayfs: missing 'workdir'
[  680.693344][ T5905] usb 6-1: config 0 has no interfaces?
[  680.701493][ T5905] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  680.719724][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.734800][ T5905] usb 6-1: Product: syz
[  680.871135][ T5905] usb 6-1: Manufacturer: syz
[  680.875767][ T5905] usb 6-1: SerialNumber: syz
[  681.837783][ T5905] usb 6-1: config 0 descriptor??
[  681.843167][ T5905] usb 6-1: can't set config #0, error -71
[  681.850210][ T5905] usb 6-1: USB disconnect, device number 12
[  682.681584][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  682.681623][   T30] audit: type=1400 audit(2000000266.040:521): avc:  denied  { map } for  pid=11469 comm="syz.5.1225" path="/proc/312/mounts" dev="proc" ino=28333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  682.716139][   T30] audit: type=1400 audit(2000000266.040:522): avc:  denied  { execute } for  pid=11469 comm="syz.5.1225" path="/proc/312/mounts" dev="proc" ino=28333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  683.665683][T11494] bridge0: port 2(bridge_slave_1) entered disabled state
[  683.673240][T11494] bridge0: port 1(bridge_slave_0) entered disabled state
[  684.051629][T11494] bridge0: entered allmulticast mode
[  684.080109][T11496] bridge_slave_1: left allmulticast mode
[  684.201491][T11496] bridge_slave_1: left promiscuous mode
[  684.207665][T11496] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.149771][T11496] bridge_slave_0: left allmulticast mode
[  685.361571][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  685.450906][T11496] bridge_slave_0: left promiscuous mode
[  685.478290][T11496] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.777757][T11513] program syz.3.1232 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  686.781206][   T30] audit: type=1400 audit(2000000270.220:523): avc:  denied  { listen } for  pid=11516 comm="syz.3.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  687.454102][   T30] audit: type=1400 audit(2000000270.220:524): avc:  denied  { connect } for  pid=11516 comm="syz.3.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  687.485029][T11527] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1236'.
[  688.135862][T11538] wg1: entered promiscuous mode
[  688.140955][T11538] wg1: entered allmulticast mode
[  688.444428][   T30] audit: type=1400 audit(2000000271.880:525): avc:  denied  { setcheckreqprot } for  pid=11534 comm="syz.5.1239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  688.910820][ T5917] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  689.570853][ T5917] usb 2-1: Using ep0 maxpacket: 16
[  689.577659][ T5917] usb 2-1: config 12 has an invalid interface number: 3 but max is 1
[  689.591432][ T5917] usb 2-1: config 12 has an invalid interface number: 110 but max is 1
[  689.615167][ T5917] usb 2-1: config 12 has no interface number 0
[  689.633521][ T5917] usb 2-1: config 12 has no interface number 1
[  689.651018][ T5917] usb 2-1: config 12 interface 110 has no altsetting 0
[  689.705928][ T5917] usb 2-1: New USB device found, idVendor=05c6, idProduct=9203, bcdDevice=7c.38
[  690.322172][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.398900][ T5917] usb 2-1: Product: syz
[  690.456425][ T5917] usb 2-1: Manufacturer: syz
[  690.525694][ T5917] usb 2-1: SerialNumber: syz
[  690.696837][T11553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  691.350897][   T30] audit: type=1800 audit(2000000274.790:526): pid=11561 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1244" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  693.125957][ T5917] usb 2-1: unknown number of interfaces: 2
[  693.161446][ T5917] usb 2-1: USB disconnect, device number 12
[  694.449677][T11584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=11584 comm=syz.1.1250
[  694.651491][   T30] audit: type=1400 audit(2000000278.100:527): avc:  denied  { connect } for  pid=11582 comm="syz.1.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  694.859068][T11583] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  695.393635][T11596] vivid-000: disconnect
[  696.554587][T11593] vivid-000: reconnect
[  702.082348][T11624] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  702.092296][T11624] overlayfs: failed to set xattr on upper
[  702.098035][T11624] overlayfs: ...falling back to redirect_dir=nofollow.
[  702.109362][T11624] overlayfs: ...falling back to metacopy=off.
[  702.117669][T11624] overlayfs: ...falling back to index=off.
[  702.210430][T11624] overlayfs: ...falling back to uuid=null.
[  703.375133][T11640] Can't find ip_set type hash:net,por
[  705.597111][T11657] overlayfs: failed to resolve './file0': -2
[  705.822599][   T30] audit: type=1400 audit(2000000289.260:528): avc:  denied  { bind } for  pid=11633 comm="syz.0.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  706.768949][T11667] syz.3.1268 (11667): drop_caches: 2
[  706.819214][T11667] syz.3.1268 (11667): drop_caches: 2
[  706.854021][ T5864] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  707.447127][   T30] audit: type=1400 audit(2000000290.740:529): avc:  denied  { sqpoll } for  pid=11668 comm="syz.5.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  707.523050][ T5864] usb 3-1: unable to read config index 0 descriptor/start: -61
[  707.553752][ T5864] usb 3-1: can't read configurations, error -61
[  708.406507][ T5864] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  708.594239][ T5864] usb 3-1: unable to read config index 0 descriptor/start: -61
[  708.754864][ T5864] usb 3-1: can't read configurations, error -61
[  708.823434][ T5864] usb usb3-port1: attempt power cycle
[  709.597710][T11691] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  709.604858][T11691] overlayfs: failed to set xattr on upper
[  709.610845][T11691] overlayfs: ...falling back to redirect_dir=nofollow.
[  709.618954][T11691] overlayfs: ...falling back to metacopy=off.
[  709.625586][T11691] overlayfs: ...falling back to index=off.
[  709.631486][T11691] overlayfs: ...falling back to uuid=null.
[  710.907053][T11704] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 80084503, magic 45 != 6b]
[  710.941870][   T30] audit: type=1400 audit(2000000294.350:530): avc:  denied  { read } for  pid=11703 comm="syz.2.1278" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  711.001612][   T30] audit: type=1400 audit(2000000294.350:531): avc:  denied  { open } for  pid=11703 comm="syz.2.1278" path="/260/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  711.051089][   T30] audit: type=1400 audit(2000000294.350:532): avc:  denied  { ioctl } for  pid=11703 comm="syz.2.1278" path="/260/file0/file0" dev="fuse" ino=0 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  711.785655][T11714] Invalid logical block size (254)
[  712.369846][T11718] syz.0.1281 (11718): drop_caches: 2
[  712.409629][T11718] syz.0.1281 (11718): drop_caches: 2
[  713.946063][   T30] audit: type=1400 audit(2000000297.300:533): avc:  denied  { write } for  pid=11729 comm="syz.3.1284" name="file0" dev="tmpfs" ino=1379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  713.970764][   T30] audit: type=1400 audit(2000000297.300:534): avc:  denied  { open } for  pid=11729 comm="syz.3.1284" path="/251/file0" dev="tmpfs" ino=1379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  714.574207][   T30] audit: type=1400 audit(2000000297.520:535): avc:  denied  { ioctl } for  pid=11729 comm="syz.3.1284" path="/251/file0" dev="tmpfs" ino=1379 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  715.205731][T11738] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  715.205731][T11738]    program syz.0.1285 not setting count and/or reply_len properly
[  715.793773][T11749] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  715.800856][T11749] overlayfs: failed to set xattr on upper
[  715.806700][T11749] overlayfs: ...falling back to redirect_dir=nofollow.
[  715.813683][T11749] overlayfs: ...falling back to metacopy=off.
[  715.819788][T11749] overlayfs: ...falling back to index=off.
[  715.825720][T11749] overlayfs: ...falling back to uuid=null.
[  722.309963][   T30] audit: type=1400 audit(2000000305.750:536): avc:  denied  { create } for  pid=11787 comm="syz.5.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  722.884838][   T30] audit: type=1400 audit(2000000306.330:537): avc:  denied  { read } for  pid=11787 comm="syz.5.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  723.802286][T11800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1299'.
[  724.561018][   T30] audit: type=1326 audit(2000000307.900:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.5.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bad8e969 code=0x7ffc0000
[  724.596357][   T30] audit: type=1326 audit(2000000307.910:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.5.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bad8e969 code=0x7ffc0000
[  725.106721][   T30] audit: type=1326 audit(2000000307.910:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.5.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd3bad8e969 code=0x7ffc0000
[  725.214870][   T30] audit: type=1326 audit(2000000307.910:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.5.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bad8e969 code=0x7ffc0000
[  725.247798][   T30] audit: type=1326 audit(2000000307.910:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.5.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bad8e969 code=0x7ffc0000
[  726.056048][   T30] audit: type=1326 audit(2000000307.910:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.5.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fd3bad8e969 code=0x7ffc0000
[  726.093415][   T30] audit: type=1326 audit(2000000307.910:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.5.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bad8e969 code=0x7ffc0000
[  726.117951][   T30] audit: type=1326 audit(2000000307.910:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.5.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bad8e969 code=0x7ffc0000
[  726.141329][    C1] vkms_vblank_simulate: vblank timer overrun
[  726.988751][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'.
[  726.998288][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'.
[  727.323632][T11827] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  727.330840][T11827] overlayfs: failed to set xattr on upper
[  727.336546][T11827] overlayfs: ...falling back to redirect_dir=nofollow.
[  727.343794][T11827] overlayfs: ...falling back to metacopy=off.
[  727.349850][T11827] overlayfs: ...falling back to index=off.
[  727.355701][T11827] overlayfs: ...falling back to uuid=null.
[  727.465578][T11831] syz.1.1308: attempt to access beyond end of device
[  727.465578][T11831] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0
[  727.520011][T11831] syz.1.1308: attempt to access beyond end of device
[  727.520011][T11831] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0
[  727.622668][T11831] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  727.637190][T11831] syz.1.1308: attempt to access beyond end of device
[  727.637190][T11831] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0
[  727.656690][T11831] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  728.195451][T11831] syz.1.1308: attempt to access beyond end of device
[  728.195451][T11831] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0
[  728.270414][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  728.270429][   T30] audit: type=1400 audit(2000000311.700:559): avc:  denied  { mount } for  pid=11829 comm="syz.1.1308" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  728.422760][T11831] syz.1.1308: attempt to access beyond end of device
[  728.422760][T11831] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0
[  728.437206][T11831] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  728.451635][T11831] syz.1.1308: attempt to access beyond end of device
[  728.451635][T11831] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0
[  728.583577][T11831] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  728.607253][T11831] syz.1.1308: attempt to access beyond end of device
[  728.607253][T11831] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0
[  728.622356][T11831] syz.1.1308: attempt to access beyond end of device
[  728.622356][T11831] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0
[  729.115061][T11831] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  729.273698][T11831] syz.1.1308: attempt to access beyond end of device
[  729.273698][T11831] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0
[  729.361120][T11831] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  729.376385][T11831] syz.1.1308: attempt to access beyond end of device
[  729.376385][T11831] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  729.392370][T11831] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  729.402919][T11831] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  729.412523][T11831] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[  729.429295][T11834] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  729.441034][T11834] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  729.451801][T11834] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  729.463545][T11834] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  729.481356][T11834] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  729.493516][T11834] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  729.508962][T11834] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  729.520545][T11834] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  729.530221][T11834] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[  729.746071][   T30] audit: type=1400 audit(2000000313.180:560): avc:  denied  { connect } for  pid=11848 comm="syz.5.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  729.895297][   T30] audit: type=1400 audit(2000000313.340:561): avc:  denied  { unmount } for  pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  730.544080][ T8288] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.580941][ T5860] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  730.730769][ T5860] usb 6-1: Using ep0 maxpacket: 32
[  730.745146][ T5860] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  730.775448][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.800831][ T5860] usb 6-1: Product: syz
[  730.823442][ T5860] usb 6-1: Manufacturer: syz
[  730.854978][ T5860] usb 6-1: SerialNumber: syz
[  730.867298][ T5860] usb 6-1: config 0 descriptor??
[  730.885677][ T5860] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  730.895031][ T8288] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  731.832994][ T8288] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.004053][ T5860] gspca_stk1135: reg_w 0x3 err -71
[  732.026797][T11884] Failed to initialize the IGMP autojoin socket (err -2)
[  732.142763][ T5860] gspca_stk1135: serial bus timeout: status=0x00
[  732.180312][ T5860] gspca_stk1135: Sensor write failed
[  732.958651][ T5860] gspca_stk1135: serial bus timeout: status=0x00
[  732.965901][ T5860] gspca_stk1135: Sensor write failed
[  732.971684][ T5860] gspca_stk1135: serial bus timeout: status=0x00
[  732.978012][ T5860] gspca_stk1135: Sensor read failed
[  733.030819][ T5860] gspca_stk1135: serial bus timeout: status=0x00
[  733.037396][ T5860] gspca_stk1135: Sensor read failed
[  733.051860][ T5860] gspca_stk1135: Detected sensor type unknown (0x0)
[  733.067320][ T5860] gspca_stk1135: serial bus timeout: status=0x00
[  733.085532][ T5860] gspca_stk1135: Sensor read failed
[  733.097440][ T5860] gspca_stk1135: serial bus timeout: status=0x00
[  733.106783][ T5860] gspca_stk1135: Sensor read failed
[  733.119678][ T5860] gspca_stk1135: serial bus timeout: status=0x00
[  733.126441][ T5860] gspca_stk1135: Sensor write failed
[  733.131989][ T5860] gspca_stk1135: serial bus timeout: status=0x00
[  733.138348][ T5860] gspca_stk1135: Sensor write failed
[  733.145994][ T5860] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[  733.165249][ T5860] usb 6-1: USB disconnect, device number 13
[  733.206475][T10269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  733.216003][T10269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  733.224942][T10269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  733.233109][T10269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  733.240461][T10269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  733.273787][ T8288] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.408651][T11898] Failed to initialize the IGMP autojoin socket (err -2)
[  733.644257][   T30] audit: type=1400 audit(2000000317.076:562): avc:  denied  { ioctl } for  pid=11905 comm="syz.5.1322" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  734.172351][T11917] netdevsim netdevsim3: Direct firmware load for .
[  734.172351][T11917]  failed with error -2
[  734.253536][T11917] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  734.253536][T11917] 
[  734.413872][T11930] vivid-002: disconnect
[  734.486626][   T30] audit: type=1400 audit(2000000317.836:563): avc:  denied  { write } for  pid=11927 comm="syz.1.1324" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  734.509330][    C1] vkms_vblank_simulate: vblank timer overrun
[  734.730469][T11927] vivid-002: reconnect
[  734.894794][T11937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1325'.
[  735.137763][T11942] hfs: can't find a HFS filesystem on dev nullb0
[  735.272307][   T53] Bluetooth: hci3: command tx timeout
[  736.008100][   T30] audit: type=1400 audit(2000000319.416:564): avc:  denied  { create } for  pid=11948 comm="syz.5.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  737.245330][T11952] vhci_hcd vhci_hcd.0: failed to lookup sock
[  737.428272][   T53] Bluetooth: hci3: command tx timeout
[  737.628258][T11957] netlink: set zone limit has 4 unknown bytes
[  738.100774][   T30] audit: type=1400 audit(2000000321.536:565): avc:  denied  { create } for  pid=11960 comm="syz.5.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  738.356093][T11961] 9pnet_fd: Insufficient options for proto=fd
[  738.409719][ T8288] bond0 (unregistering): Released all slaves
[  739.426606][T11898] chnl_net:caif_netlink_parms(): no params data found
[  739.512279][   T53] Bluetooth: hci3: command tx timeout
[  741.580813][   T53] Bluetooth: hci3: command tx timeout
[  743.621322][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1337'.
[  743.635677][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1337'.
[  743.649454][T11999] netlink: 'syz.5.1337': attribute type 3 has an invalid length.
[  744.191484][T11898] bridge0: port 1(bridge_slave_0) entered blocking state
[  744.283774][T11898] bridge0: port 1(bridge_slave_0) entered disabled state
[  744.304147][T11898] bridge_slave_0: entered allmulticast mode
[  744.385406][T11898] bridge_slave_0: entered promiscuous mode
[  744.553537][T11898] bridge0: port 2(bridge_slave_1) entered blocking state
[  744.560627][T11898] bridge0: port 2(bridge_slave_1) entered disabled state
[  744.693367][T11898] bridge_slave_1: entered allmulticast mode
[  744.709602][T11898] bridge_slave_1: entered promiscuous mode
[  746.670208][   T30] audit: type=1400 audit(2000000330.096:566): avc:  denied  { bind } for  pid=12029 comm="syz.3.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  746.785966][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  747.026217][T12030] ptrace attach of "./syz-executor exec"[5809] was attempted by "./syz-executor exec"[12030]
[  747.693686][   T30] audit: type=1400 audit(2000000331.136:567): avc:  denied  { create } for  pid=12032 comm="syz.1.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  747.944560][T12048] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  747.944560][T12048]    program syz.2.1345 not setting count and/or reply_len properly
[  748.153158][ T8288] hsr_slave_0: left promiscuous mode
[  748.171682][ T8288] hsr_slave_1: left promiscuous mode
[  748.219793][ T8288] veth1_macvtap: left promiscuous mode
[  748.225776][ T8288] veth0_macvtap: left promiscuous mode
[  748.231862][ T8288] veth1_vlan: left promiscuous mode
[  748.241731][ T8288] veth0_vlan: left promiscuous mode
[  748.624807][T12059] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  751.313720][T12079] slcan: can't register candev
[  751.318663][T12079] Falling back ldisc for ptm0.
[  751.418248][T12083] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1350'.
[  752.681742][   T30] audit: type=1400 audit(2000000000.800:568): avc:  granted  { setsecparam } for  pid=12084 comm="syz.2.1353" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  752.840271][T12104] program syz.5.1355 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  754.620879][T10269] Bluetooth: hci3: command 0x0405 tx timeout
[  755.223385][   T30] audit: type=1400 audit(2000000002.630:569): avc:  denied  { execute } for  pid=12110 comm="syz.3.1357" path="/dev/dsp" dev="devtmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  756.545251][T12129] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.1362'.
[  757.253706][T11898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  757.268155][   T24] lo speed is unknown, defaulting to 1000
[  757.279023][   T24] infiniband syz0: ib_query_port failed (-19)
[  757.309561][T11898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  757.380972][T12090] syzkaller1: entered promiscuous mode
[  757.386448][T12090] syzkaller1: entered allmulticast mode
[  757.413165][T12129] Failed to initialize the IGMP autojoin socket (err -2)
[  757.620327][T11898] team0: Port device team_slave_0 added
[  757.693570][T11898] team0: Port device team_slave_1 added
[  758.048218][T11898] batman_adv: batadv0: Adding interface: batadv_slave_0
[  758.176281][T12143] overlayfs: missing 'lowerdir'
[  758.368857][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  758.398011][ T5908] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  758.422689][T11898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  758.452979][T11898] batman_adv: batadv0: Adding interface: batadv_slave_1
[  758.461690][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  758.488162][T11898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  758.580895][ T5908] usb 3-1: Using ep0 maxpacket: 8
[  758.587559][ T5908] usb 3-1: config 0 interface 0 has no altsetting 0
[  758.614996][ T5908] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00
[  758.795621][T12150] fuse: Bad value for 'group_id'
[  758.800639][T12150] fuse: Bad value for 'group_id'
[  758.823711][T12150] overlayfs: conflicting options: userxattr,verity=require
[  759.212034][   T30] audit: type=1400 audit(2000000007.040:570): avc:  denied  { setopt } for  pid=12144 comm="syz.5.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  759.231622][    C1] vkms_vblank_simulate: vblank timer overrun
[  759.246541][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.400537][ T5908] usb 3-1: config 0 descriptor??
[  761.255663][T12163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  761.270638][T12163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  761.563658][T12173] fuse: Bad value for 'fd'
[  761.609735][T11898] hsr_slave_0: entered promiscuous mode
[  761.711398][T11898] hsr_slave_1: entered promiscuous mode
[  761.744593][T11898] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  761.978144][T12176] netlink: 'syz.1.1373': attribute type 39 has an invalid length.
[  761.981280][T11898] Cannot create hsr debugfs directory
[  761.989703][ T5908] usb 3-1: string descriptor 0 read error: -71
[  762.207570][ T5908] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input26
[  762.916278][ T5170] bcm5974 3-1:0.0: could not read from device
[  763.062730][ T5908] usb 3-1: USB disconnect, device number 18
[  763.095476][T12187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1375'.
[  763.849212][T11541] udevd[11541]: Error opening device "/dev/input/event4": No such file or directory
[  763.881647][T11541] udevd[11541]: Unable to EVIOCGABS device "/dev/input/event4"
[  763.963422][T12191] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  763.970689][T12191] overlayfs: failed to set xattr on upper
[  763.976547][T12191] overlayfs: ...falling back to redirect_dir=nofollow.
[  763.983614][T12191] overlayfs: ...falling back to metacopy=off.
[  763.990412][T12191] overlayfs: ...falling back to index=off.
[  763.997161][T12191] overlayfs: ...falling back to uuid=null.
[  764.142526][T11541] udevd[11541]: Unable to EVIOCGABS device "/dev/input/event4"
[  764.208742][T11541] udevd[11541]: Unable to EVIOCGABS device "/dev/input/event4"
[  764.231485][T11541] udevd[11541]: Unable to EVIOCGABS device "/dev/input/event4"
[  765.526558][T12211] overlayfs: missing 'lowerdir'
[  765.836268][T12209] Failed to initialize the IGMP autojoin socket (err -2)
[  766.872358][T12223] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  767.690550][   T30] audit: type=1400 audit(2000000015.650:571): avc:  denied  { listen } for  pid=12218 comm="syz.2.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  769.991809][T12236] netlink: 'syz.5.1385': attribute type 4 has an invalid length.
[  770.055738][T12233] Failed to initialize the IGMP autojoin socket (err -2)
[  770.841417][ T5917] lo speed is unknown, defaulting to 1000
[  770.954723][ T5917] syz2: Port: 1 Link DOWN
[  771.655823][   T30] audit: type=1400 audit(2000000019.400:572): avc:  denied  { setopt } for  pid=12243 comm="syz.2.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  771.815012][T12253] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  771.823616][T12253] overlayfs: failed to set xattr on upper
[  771.829776][T12253] overlayfs: ...falling back to redirect_dir=nofollow.
[  771.839352][T12253] overlayfs: ...falling back to metacopy=off.
[  771.845726][T12253] overlayfs: ...falling back to index=off.
[  771.851781][T12253] overlayfs: ...falling back to uuid=null.
[  772.007630][   T30] audit: type=1400 audit(2000000019.400:573): avc:  denied  { ioctl } for  pid=12243 comm="syz.2.1387" path="socket:[30814]" dev="sockfs" ino=30814 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  773.325683][T12265] overlayfs: missing 'lowerdir'
[  774.245008][T12270] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1393'.
[  774.302532][T11898] netdevsim netdevsim0 netdevsim0: renamed from eth5
[  774.510212][T11898] netdevsim netdevsim0 netdevsim1: renamed from eth6
[  774.849946][   T30] audit: type=1400 audit(2000000022.890:574): avc:  denied  { lock } for  pid=12274 comm="syz.5.1394" path="socket:[30959]" dev="sockfs" ino=30959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  775.834577][T11898] netdevsim netdevsim0 netdevsim2: renamed from eth7
[  775.943785][T11898] netdevsim netdevsim0 netdevsim3: renamed from eth8
[  776.900868][T12286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  778.683457][   T30] audit: type=1400 audit(2000000026.810:575): avc:  denied  { bind } for  pid=12297 comm="syz.5.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  779.654235][T11898] 8021q: adding VLAN 0 to HW filter on device bond0
[  779.798273][T11898] 8021q: adding VLAN 0 to HW filter on device team0
[  780.487858][T12322] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  780.944846][T12325] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  780.952063][T12325] overlayfs: failed to set xattr on upper
[  780.957838][T12325] overlayfs: ...falling back to redirect_dir=nofollow.
[  780.964854][T12325] overlayfs: ...falling back to metacopy=off.
[  780.971113][T12325] overlayfs: ...falling back to index=off.
[  780.976973][T12325] overlayfs: ...falling back to uuid=null.
[  781.157424][ T8282] bridge0: port 1(bridge_slave_0) entered blocking state
[  781.164564][ T8282] bridge0: port 1(bridge_slave_0) entered forwarding state
[  781.291877][T12329] hfsplus: unable to find HFS+ superblock
[  781.350410][ T8282] bridge0: port 2(bridge_slave_1) entered blocking state
[  781.357569][ T8282] bridge0: port 2(bridge_slave_1) entered forwarding state
[  781.593670][T12332] netlink: 'syz.1.1404': attribute type 2 has an invalid length.
[  781.611209][T12332] netlink: 'syz.1.1404': attribute type 1 has an invalid length.
[  783.577265][T12345] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1409'.
[  783.661723][T12345] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  783.670464][T12345] overlayfs: missing 'lowerdir'
[  785.035707][T12360] vlan3: entered allmulticast mode
[  785.041004][T12360] vlan1: entered allmulticast mode
[  786.487597][T12372] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  786.512130][T12372] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  787.089638][   T30] audit: type=1400 audit(2000000035.160:576): avc:  denied  { create } for  pid=12376 comm="syz.1.1417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  787.137472][T11898] 8021q: adding VLAN 0 to HW filter on device batadv0
[  787.261756][T12370] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1414'.
[  787.279607][T12370] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  787.358892][T12379] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  787.786272][   T30] audit: type=1400 audit(2000000035.510:577): avc:  denied  { relabelto } for  pid=12376 comm="syz.1.1417" name="bus" dev="tmpfs" ino=1605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  787.834043][   T30] audit: type=1400 audit(2000000035.510:578): avc:  denied  { associate } for  pid=12376 comm="syz.1.1417" name="bus" dev="tmpfs" ino=1605 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  787.839011][T12370] overlayfs: missing 'lowerdir'
[  787.942533][   T30] audit: type=1400 audit(2000000036.060:579): avc:  denied  { rmdir } for  pid=5810 comm="syz-executor" name="bus" dev="tmpfs" ino=1605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  787.968538][    C1] vkms_vblank_simulate: vblank timer overrun
[  788.820708][T12388] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  788.827836][T12388] overlayfs: failed to set xattr on upper
[  788.836486][T12388] overlayfs: ...falling back to redirect_dir=nofollow.
[  788.850699][T12388] overlayfs: ...falling back to metacopy=off.
[  788.858943][T12388] overlayfs: ...falling back to index=off.
[  788.867061][T12388] overlayfs: ...falling back to uuid=null.
[  789.217349][T11898] veth0_vlan: entered promiscuous mode
[  790.647646][T11898] veth1_vlan: entered promiscuous mode
[  790.705294][   T30] audit: type=1400 audit(2000000038.700:580): avc:  denied  { watch_sb } for  pid=12396 comm="syz.3.1421" path="/284" dev="tmpfs" ino=1556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  793.512640][ T5864] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  795.228089][   T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  795.241085][   T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  795.258830][   T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  795.266646][   T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  795.274237][   T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  795.292079][T12443] Failed to initialize the IGMP autojoin socket (err -2)
[  795.373045][T12449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12449 comm=syz.2.1433
[  795.665051][T12451] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  797.367956][   T53] Bluetooth: hci5: command tx timeout
[  797.571145][   T30] audit: type=1400 audit(2000000045.700:581): avc:  denied  { getopt } for  pid=12461 comm="syz.2.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  798.807813][T12474] ntfs3(nullb0): Primary boot signature is not NTFS.
[  798.853597][T12474] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  799.430779][   T53] Bluetooth: hci5: command tx timeout
[  801.273143][T12515] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  801.972665][T12515] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  801.989112][   T53] Bluetooth: hci5: command tx timeout
[  802.303462][T12526] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  802.583447][   T30] audit: type=1400 audit(2000000050.710:582): avc:  denied  { ioctl } for  pid=12523 comm="syz.3.1450" path="socket:[31725]" dev="sockfs" ino=31725 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  803.270758][T12541] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  804.291739][T12530] 9pnet_fd: Insufficient options for proto=fd
[  804.305007][   T53] Bluetooth: hci5: command tx timeout
[  804.511708][   T53] Bluetooth: hci0: command tx timeout
[  804.757693][T12523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  804.877256][T12547] siw: device registration error -23
[  804.926266][   T30] audit: type=1400 audit(2000000002.140:583): avc:  denied  { create } for  pid=12546 comm="syz.2.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  804.949051][T12443] netdevsim netdevsim0 netdevsim0: renamed from eth5
[  805.017962][   T30] audit: type=1400 audit(2000000002.260:584): avc:  denied  { write } for  pid=12542 comm="syz.1.1454" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  805.257295][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  805.418684][T12543] ceph: No mds server is up or the cluster is laggy
[  805.456203][T12443] netdevsim netdevsim0 netdevsim1: renamed from eth6
[  805.480726][   T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  805.583505][ T5908] libceph: mon0 (1)[c::]:6789 connect error
[  805.589915][T12545] SELinux: failed to load policy
[  806.146014][   T10] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  806.157154][   T10] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  806.172857][   T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  806.199188][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.230527][T12443] netdevsim netdevsim0 netdevsim2: renamed from eth7
[  806.793246][T12572] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  806.797372][   T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  806.949264][T12443] netdevsim netdevsim0 netdevsim3: renamed from eth8
[  807.737037][   T10] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2
[  807.744381][T12167] udevd[12167]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  807.844267][T12578] netlink: 'syz.2.1461': attribute type 16 has an invalid length.
[  807.852344][T12578] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1461'.
[  808.098329][   T10] usb 6-1: USB disconnect, device number 14
[  808.231218][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  808.292501][T12585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1464'.
[  809.550777][ T5908] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  809.666043][T12586] overlayfs: missing 'lowerdir'
[  809.748211][ T5908] usb 6-1: device descriptor read/64, error -71
[  810.390757][ T5908] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  810.624316][T12609] input input27: cannot allocate more than FF_MAX_EFFECTS effects
[  810.652441][T12609] Failed to initialize the IGMP autojoin socket (err -2)
[  811.011471][ T5908] usb 6-1: device descriptor read/64, error -71
[  811.078177][   T30] audit: type=1400 audit(2000000008.320:585): avc:  denied  { remount } for  pid=12610 comm="syz.2.1469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  811.092204][T12443] veth0_macvtap: entered promiscuous mode
[  811.109957][   T30] audit: type=1400 audit(2000000008.320:586): avc:  denied  { mounton } for  pid=12610 comm="syz.2.1469" path="/302/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  811.123198][ T5908] usb usb6-port1: attempt power cycle
[  811.178690][T12443] veth1_macvtap: entered promiscuous mode
[  811.329242][T12443] batman_adv: batadv0: Interface activated: batadv_slave_0
[  811.585192][T12443] batman_adv: batadv0: Interface activated: batadv_slave_1
[  811.657492][T12443] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  812.311734][T12443] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  812.632021][   T30] audit: type=1804 audit(2000000009.860:587): pid=12629 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1473" name="/newroot/294/file1" dev="fuse" ino=1 res=1 errno=0
[  812.913373][T12443] wireguard: wg0: Could not create IPv4 socket
[  812.928382][T12443] wireguard: wg1: Could not create IPv4 socket
[  812.977837][T12443] wireguard: wg2: Could not create IPv4 socket
[  813.214425][T12643] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  813.221826][T12643] overlayfs: failed to set xattr on upper
[  813.227796][T12643] overlayfs: ...falling back to redirect_dir=nofollow.
[  813.235031][T12643] overlayfs: ...falling back to metacopy=off.
[  813.241494][T12643] overlayfs: ...falling back to index=off.
[  813.248184][T12643] overlayfs: ...falling back to uuid=null.
[  813.924006][T12650] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  813.936472][   T10] kernel read not supported for file /vga_arbiter (pid: 10 comm: kworker/0:1)
[  815.949158][T12658] netlink: 'syz.3.1479': attribute type 39 has an invalid length.
[  815.982563][   T53] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  818.110876][ T5864] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  818.660766][ T5864] usb 3-1: Using ep0 maxpacket: 16
[  818.691192][ T5864] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  818.746453][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  818.825891][ T5864] usb 3-1: Product: syz
[  818.867451][ T5864] usb 3-1: Manufacturer: syz
[  818.908102][ T5864] usb 3-1: SerialNumber: syz
[  819.030785][ T5864] usb 3-1: config 0 descriptor??
[  819.360904][T12703] overlayfs: missing 'lowerdir'
[  819.627229][   T30] audit: type=1326 audit(2000000016.850:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.3.1487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8221b8e969 code=0x0
[  820.625217][T12710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1488'.
[  820.660177][  T971] usb 3-1: USB disconnect, device number 19
[  821.282083][T12720] sd 0:0:1:0: device reset
[  822.053615][T12722] SELinux: security_context_str_to_sid (5ýÆÉ]ÖS9q#“�ë) failed with errno=-22
[  822.554115][T10269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  822.563381][T10269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  822.572336][T10269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  822.580722][T10269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  822.589263][T10269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  822.698231][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'.
[  824.792065][   T53] Bluetooth: hci3: command tx timeout
[  824.987491][T12725] Failed to initialize the IGMP autojoin socket (err -2)
[  827.066202][   T53] Bluetooth: hci3: command tx timeout
[  827.068454][T12769] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  827.088904][T12769] qnx6: wrong signature (magic) in superblock #1.
[  827.095521][T12769] qnx6: unable to read the first superblock
[  827.449633][T12774] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  827.511104][T12774] input: syz1 as /devices/virtual/input/input28
[  828.879396][T12784] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1498'.
[  828.904743][T12786] overlayfs: missing 'lowerdir'
[  828.949524][T12778] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  829.002797][T12778] overlayfs: missing 'lowerdir'
[  829.112332][   T53] Bluetooth: hci3: command tx timeout
[  829.277362][T12792] netlink: 'syz.2.1502': attribute type 1 has an invalid length.
[  829.403297][T12792] bond1: entered promiscuous mode
[  829.408419][T12792] bond1: entered allmulticast mode
[  829.421319][T12795] bond1: (slave ip6gretap1): making interface the new active one
[  829.429306][T12795] ip6gretap1: entered promiscuous mode
[  829.439456][T12795] ip6gretap1: entered allmulticast mode
[  829.452133][T12795] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  831.180783][   T53] Bluetooth: hci3: command tx timeout
[  832.945005][T12816] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[  832.953900][T12816] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[  833.034512][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'.
[  833.116902][T12835] tmpfs: Bad value for 'mpol'
[  834.008596][   T30] audit: type=1400 audit(2000000031.240:589): avc:  denied  { ioctl } for  pid=12841 comm="syz.1.1510" path="socket:[34500]" dev="sockfs" ino=34500 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  836.214279][T12850] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2
[  837.905546][T12863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1515'.
[  837.981251][T12867] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  837.998309][T12867] overlayfs: missing 'lowerdir'
[  839.095256][T12725] netdevsim netdevsim0 netdevsim0: renamed from eth5
[  839.460427][T12870] syzkaller1: entered promiscuous mode
[  839.466557][T12870] syzkaller1: entered allmulticast mode
[  839.577073][T12725] netdevsim netdevsim0 netdevsim1: renamed from eth6
[  839.830830][  T971] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  839.942835][T12725] netdevsim netdevsim0 netdevsim2: renamed from eth7
[  840.042357][   T30] audit: type=1400 audit(2000000003.090:590): avc:  denied  { connect } for  pid=12899 comm="syz.3.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  840.069782][T12725] netdevsim netdevsim0 netdevsim3: renamed from eth8
[  840.123885][  T971] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  840.194873][  T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.235655][  T971] usb 2-1: Product: syz
[  840.890727][  T971] usb 2-1: Manufacturer: syz
[  840.902917][  T971] usb 2-1: SerialNumber: syz
[  840.972167][  T971] usb 2-1: config 0 descriptor??
[  841.713165][   T30] audit: type=1800 audit(2000000004.370:591): pid=12926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1521" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0
[  843.427105][  T971] usb-storage 2-1:0.0: USB Mass Storage device detected
[  843.589212][  T971] usb 2-1: USB disconnect, device number 14
[  844.961026][T12725] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  845.024407][T12725] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  845.092942][T12725] wireguard: wg0: Could not create IPv4 socket
[  845.112533][T12725] wireguard: wg1: Could not create IPv4 socket
[  845.392448][T12952] netlink: 568 bytes leftover after parsing attributes in process `syz.1.1528'.
[  845.751437][T12725] wireguard: wg2: Could not create IPv4 socket
[  847.689437][T12978] ubi31: attaching mtd0
[  847.750290][T12978] ubi31: scanning is finished
[  847.755423][T12978] ubi31: empty MTD device detected
[  848.589040][T12978] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  848.958026][   T30] audit: type=1400 audit(2000000012.000:592): avc:  denied  { accept } for  pid=12985 comm="syz.5.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  849.617312][T13000] input: syz0 as /devices/virtual/input/input29
[  849.946827][   T30] audit: type=1400 audit(2000000012.780:593): avc:  denied  { setopt } for  pid=12995 comm="syz.2.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  851.827404][T13038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1538'.
[  852.707998][T13042] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  852.714641][T13042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  852.778798][T13042] vhci_hcd vhci_hcd.0: Device attached
[  852.808242][T13050] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13)
[  852.814858][T13050] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  852.845553][T13053] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  852.875972][T13053] input: syz1 as /devices/virtual/input/input30
[  853.081037][ T5908] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  853.850198][T13050] vhci_hcd vhci_hcd.0: Device attached
[  854.002203][T13042] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12)
[  854.008908][T13042] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  854.011844][T13050] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  854.027536][T10269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  854.043491][T10269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  854.059466][T13042] vhci_hcd vhci_hcd.0: Device attached
[  854.067463][T10269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  854.076567][T10269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  854.084639][T10269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  854.106027][T13058] Failed to initialize the IGMP autojoin socket (err -2)
[  854.239049][T13042] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(21)
[  854.245644][T13042] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  854.253269][T13061] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16)
[  854.259860][T13061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  854.294660][T13050] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  854.305189][T13042] vhci_hcd vhci_hcd.0: Device attached
[  854.673359][T13061] vhci_hcd vhci_hcd.0: Device attached
[  854.788706][T13042] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  854.832451][T13042] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  854.858739][T13042] vhci_hcd vhci_hcd.0: port 0 already used
[  855.005225][T13065] vhci_hcd: connection closed
[  855.005444][ T5972] vhci_hcd: stop threads
[  855.015680][T13056] vhci_hcd: connection closed
[  855.018528][T13051] vhci_hcd: connection closed
[  855.019049][T13063] vhci_hcd: connection closed
[  855.023738][T13044] vhci_hcd: connection reset by peer
[  855.063000][ T5972] vhci_hcd: release socket
[  855.071900][ T5972] vhci_hcd: disconnect device
[  855.085109][ T5972] vhci_hcd: stop threads
[  855.089360][ T5972] vhci_hcd: release socket
[  855.111637][ T5972] vhci_hcd: disconnect device
[  855.117862][ T5972] vhci_hcd: stop threads
[  855.130883][ T5972] vhci_hcd: release socket
[  855.138875][ T5972] vhci_hcd: disconnect device
[  855.150167][ T5972] vhci_hcd: stop threads
[  855.160200][ T5972] vhci_hcd: release socket
[  855.177324][ T5972] vhci_hcd: disconnect device
[  855.189054][ T5972] vhci_hcd: stop threads
[  855.199108][ T5972] vhci_hcd: release socket
[  855.209302][ T5972] vhci_hcd: disconnect device
[  855.342755][T13084] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  855.350255][T13084] UDF-fs: Scanning with blocksize 512 failed
[  855.357751][T13084] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  855.365354][T13084] UDF-fs: Scanning with blocksize 1024 failed
[  855.372549][T13084] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  855.380054][T13084] UDF-fs: Scanning with blocksize 2048 failed
[  855.387170][T13084] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  855.394708][T13084] UDF-fs: Scanning with blocksize 4096 failed
[  856.144183][   T53] Bluetooth: hci3: command tx timeout
[  857.756507][   T30] audit: type=1400 audit(2000000020.800:594): avc:  denied  { cmd } for  pid=13092 comm="syz.2.1546" path="socket:[36119]" dev="sockfs" ino=36119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  858.220706][   T53] Bluetooth: hci3: command tx timeout
[  859.177301][T13117] evm: overlay not supported
[  859.489973][ T5908] vhci_hcd: vhci_device speed not set
[  860.309509][   T53] Bluetooth: hci3: command tx timeout
[  860.535754][T13058] netdevsim netdevsim0 netdevsim0: renamed from eth5
[  860.897818][T13143] fuse: Bad value for 'fd'
[  861.605425][ T5864] usb usb36-port1: attempt power cycle
[  861.614312][T13058] netdevsim netdevsim0 netdevsim1: renamed from eth6
[  861.975852][T13058] netdevsim netdevsim0 netdevsim2: renamed from eth7
[  862.381001][   T53] Bluetooth: hci3: command tx timeout
[  862.541277][ T5864] usb usb36-port1: unable to enumerate USB device
[  863.114231][T13058] netdevsim netdevsim0 netdevsim3: renamed from eth8
[  863.272919][   T30] audit: type=1400 audit(2000000026.260:595): avc:  denied  { ioctl } for  pid=13157 comm="syz.5.1558" path="pid:[4026532793]" dev="nsfs" ino=4026532793 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  863.297612][    C0] vkms_vblank_simulate: vblank timer overrun
[  863.702530][T13164] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1559'.
[  863.711729][T13164] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1559'.
[  863.720884][T13164] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1559'.
[  865.277327][T13184] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=13184 comm=syz.3.1563
[  865.290567][   T30] audit: type=1400 audit(2000000028.340:596): avc:  denied  { setopt } for  pid=13175 comm="syz.3.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  865.310270][    C0] vkms_vblank_simulate: vblank timer overrun
[  867.414813][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'.
[  867.955108][   T30] audit: type=1400 audit(2000000030.560:597): avc:  denied  { write } for  pid=13210 comm="syz.5.1569" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  868.263254][T13058] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  868.464497][T13058] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  869.001084][T13058] wireguard: wg0: Could not create IPv4 socket
[  869.009413][T13058] wireguard: wg1: Could not create IPv4 socket
[  869.036294][T13058] wireguard: wg2: Could not create IPv4 socket
[  869.665242][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  870.057697][T13238] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  870.074451][T13238] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  871.377495][T13253] netlink: 'syz.1.1576': attribute type 10 has an invalid length.
[  871.385527][T13253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1576'.
[  871.440470][T13253] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  872.680077][T13274] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  872.686712][T13274] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  873.000219][T13281] tipc: Started in network mode
[  873.018779][T13281] tipc: Node identity c6aee1dc93a, cluster identity 4711
[  873.047542][T13274] vhci_hcd vhci_hcd.0: Device attached
[  873.058455][T13281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  873.081068][T13282] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13)
[  873.087683][T13282] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  873.095585][T13282] vhci_hcd vhci_hcd.0: Device attached
[  873.110731][T13274] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12)
[  873.117331][T13274] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  873.134398][T13274] vhci_hcd vhci_hcd.0: Device attached
[  873.143839][T13283] tipc: Disabling bearer <eth:syzkaller0>
[  873.160332][T13282] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17)
[  873.166928][T13282] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  873.202411][   T30] audit: type=1400 audit(2000000036.240:598): avc:  denied  { map } for  pid=13240 comm="syz.5.1574" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  873.228448][T13282] vhci_hcd vhci_hcd.0: Device attached
[  873.259665][T13274] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16)
[  873.266270][T13274] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  873.282598][ T5917] vhci_hcd: vhci_device speed not set
[  873.297302][T13274] vhci_hcd vhci_hcd.0: Device attached
[  873.331775][   T30] audit: type=1326 audit(2000000036.350:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.5.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bad8e969 code=0x7fc00000
[  873.355616][ T5917] usb 35-1: new full-speed USB device number 3 using vhci_hcd
[  873.370896][   T30] audit: type=1326 audit(2000000036.350:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.5.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3bad8e969 code=0x7fc00000
[  873.376452][T13282] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  873.402604][   T30] audit: type=1326 audit(2000000036.350:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.5.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bad8e969 code=0x7fc00000
[  873.402649][   T30] audit: type=1326 audit(2000000036.350:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.5.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bad8e969 code=0x7fc00000
[  873.402690][   T30] audit: type=1326 audit(2000000036.350:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.5.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bad8e969 code=0x7fc00000
[  873.402728][   T30] audit: type=1326 audit(2000000036.350:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.5.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bad8e969 code=0x7fc00000
[  873.402775][   T30] audit: type=1326 audit(2000000036.350:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.5.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bad8e969 code=0x7fc00000
[  873.402816][   T30] audit: type=1326 audit(2000000036.350:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.5.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bad8e969 code=0x7fc00000
[  873.402856][   T30] audit: type=1326 audit(2000000036.350:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.5.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bad8e969 code=0x7fc00000
[  873.482564][T13274] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  873.678384][T13274] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  873.700898][T13274] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(26)
[  873.707516][T13274] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  873.721995][T13274] vhci_hcd vhci_hcd.0: Device attached
[  873.805704][T13292] vhci_hcd: connection closed
[  873.805949][T13290] vhci_hcd: connection closed
[  873.806016][   T13] vhci_hcd: stop threads
[  873.810869][T13301] vhci_hcd: connection closed
[  873.816132][T13276] vhci_hcd: connection reset by peer
[  873.819693][T13287] vhci_hcd: connection closed
[  873.824884][   T13] vhci_hcd: release socket
[  873.829646][T13284] vhci_hcd: connection closed
[  873.836814][   T13] vhci_hcd: disconnect device
[  873.873765][   T13] vhci_hcd: stop threads
[  873.878023][   T13] vhci_hcd: release socket
[  873.910655][   T13] vhci_hcd: disconnect device
[  873.921299][   T13] vhci_hcd: stop threads
[  873.925555][   T13] vhci_hcd: release socket
[  874.028745][   T13] vhci_hcd: disconnect device
[  874.048030][   T13] vhci_hcd: stop threads
[  874.059092][   T13] vhci_hcd: release socket
[  874.071359][   T13] vhci_hcd: disconnect device
[  874.837214][   T13] vhci_hcd: stop threads
[  874.902180][   T13] vhci_hcd: release socket
[  874.964290][   T13] vhci_hcd: disconnect device
[  875.089782][   T13] vhci_hcd: stop threads
[  875.148565][   T13] vhci_hcd: release socket
[  875.274617][   T13] vhci_hcd: disconnect device
[  875.537842][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1585'.
[  877.190281][T13349] hub 2-0:1.0: USB hub found
[  877.200799][T13349] hub 2-0:1.0: 1 port detected
[  878.464596][ T5917] vhci_hcd: vhci_device speed not set
[  878.516438][   T30] kauditd_printk_skb: 427 callbacks suppressed
[  878.516468][   T30] audit: type=1400 audit(2000000041.550:1035): avc:  denied  { relabelfrom } for  pid=13327 comm="syz.3.1586" name="" dev="pipefs" ino=36907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  878.618127][    C0] vkms_vblank_simulate: vblank timer overrun
[  878.836525][T13359] overlayfs: overlapping lowerdir path
[  879.033518][T13364] ntfs3(nullb0): Primary boot signature is not NTFS.
[  879.040864][T13364] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  879.359595][T13368] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  879.372546][T13368] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  879.388506][T13368] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  879.399874][T13368] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  879.425030][T13368] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  879.458786][T13365] Failed to initialize the IGMP autojoin socket (err -2)
[  879.525841][   T30] audit: type=1400 audit(2000000042.570:1036): avc:  denied  { getopt } for  pid=13357 comm="syz.5.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  879.628460][T13363] can: request_module (can-proto-0) failed.
[  880.243879][   T10] usb usb36-port1: attempt power cycle
[  880.300737][ T5864] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  880.554637][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  880.595283][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  880.774073][ T5864] usb 2-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00
[  881.229563][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.255418][ T5864] usb 2-1: config 0 descriptor??
[  881.259069][   T10] usb usb36-port1: unable to enumerate USB device
[  881.275376][ T5864] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  881.510888][T13368] Bluetooth: hci3: command tx timeout
[  882.973399][ T5864] usb 2-1: USB disconnect, device number 15
[  883.421338][   T30] audit: type=1400 audit(2000000046.330:1037): avc:  denied  { create } for  pid=13398 comm="syz.5.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  883.618728][T13368] Bluetooth: hci3: command tx timeout
[  884.941298][   T30] audit: type=1400 audit(2000000047.970:1038): avc:  denied  { setattr } for  pid=13415 comm="syz.3.1600" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  885.670711][T13368] Bluetooth: hci3: command tx timeout
[  885.705748][T13365] netdevsim netdevsim0 netdevsim0: renamed from eth5
[  886.456284][T13365] netdevsim netdevsim0 netdevsim1: renamed from eth6
[  886.636191][T13365] netdevsim netdevsim0 netdevsim2: renamed from eth7
[  887.353110][T13365] netdevsim netdevsim0 netdevsim3: renamed from eth8
[  887.536657][T13449] could not allocate digest TFM handle cbcmac-aes-neon
[  887.740704][T13368] Bluetooth: hci3: command tx timeout
[  888.007943][T13463] ntfs3(nullb0): Primary boot signature is not NTFS.
[  888.015071][T13463] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  888.410202][T13466] random: crng reseeded on system resumption
[  888.466443][T13468] kvm: kvm [13456]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b)
[  889.116473][T13462] can: request_module (can-proto-0) failed.
[  889.447345][T13482] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1609'.
[  889.456514][T13482] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1609'.
[  889.465666][T13482] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1609'.
[  889.864631][T13482] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1609'.
[  889.880198][T13482] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1609'.
[  889.889393][T13482] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1609'.
[  890.157571][T13498] qrtr: Invalid version 0
[  890.166077][T13498] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[13498]
[  891.965457][   T30] audit: type=1400 audit(2000000054.580:1039): avc:  granted  { setsecparam } for  pid=13504 comm="syz.5.1612" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  892.480688][   T30] audit: type=1804 audit(2000000055.090:1040): pid=13513 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1611" name="/newroot/343/file1" dev="fuse" ino=1 res=1 errno=0
[  892.786293][T13365] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  893.421665][T13365] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  893.542205][T13527] ubi31: attaching mtd0
[  893.568339][T13527] ubi31: scanning is finished
[  893.899849][T13525] 
@0Ù: renamed from bond_slave_1 (while UP)
[  893.983124][   T53] Bluetooth: hci3: command 0x0405 tx timeout
[  894.167423][T13527] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  894.291027][T13365] wireguard: wg0: Could not create IPv4 socket
[  894.300007][T13365] wireguard: wg1: Could not create IPv4 socket
[  894.308530][T13365] wireguard: wg2: Could not create IPv4 socket
[  895.500640][ T5813] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  895.770153][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  897.199767][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  897.288194][ T5813] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  897.448417][T13541] delete_channel: no stack
[  897.640721][ T5813] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  897.740606][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.071185][ T5813] usb 6-1: config 0 descriptor??
[  898.102207][ T5813] usb 6-1: can't set config #0, error -71
[  898.152280][ T5813] usb 6-1: USB disconnect, device number 18
[  899.803128][T13611] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1622'.
[  899.822106][T13611] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1622'.
[  899.871079][T13611] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1622'.
[  899.988115][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  899.997479][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  900.005493][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  900.014236][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  900.021685][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  900.095357][T13628] fuse: Bad value for 'fd'
[  900.107489][T13611] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1622'.
[  900.111476][T13621] Failed to initialize the IGMP autojoin socket (err -2)
[  900.123992][T13611] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1622'.
[  900.133312][T13611] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1622'.
[  900.404847][   T30] audit: type=1400 audit(2000000063.250:1041): avc:  denied  { create } for  pid=13626 comm="syz.2.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  900.879799][T13646] ubi31: attaching mtd0
[  900.897857][T13646] ubi31: scanning is finished
[  902.912344][T13611] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1622'.
[  902.945560][   T53] Bluetooth: hci3: command tx timeout
[  902.967967][T13611] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1622'.
[  903.041460][T13646] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  903.172035][T13611] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1622'.
[  904.333723][T13668] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1631'.
[  905.024783][   T53] Bluetooth: hci3: command tx timeout
[  907.100700][   T53] Bluetooth: hci3: command tx timeout
[  907.495761][T13705] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  907.944532][   T30] audit: type=1400 audit(2000000070.860:1042): avc:  denied  { create } for  pid=13706 comm="syz.5.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  908.224423][   T30] audit: type=1400 audit(2000000070.860:1043): avc:  denied  { ioctl } for  pid=13706 comm="syz.5.1637" path="socket:[38674]" dev="sockfs" ino=38674 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  909.046197][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1636'.
[  909.191474][   T53] Bluetooth: hci3: command tx timeout
[  909.424508][T13730] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  910.481308][T13751] ubi31: attaching mtd0
[  911.755005][T13751] ubi31: scanning is finished
[  912.721801][T13751] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  914.564964][T13778] SELinux: failed to load policy
[  915.712224][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1653'.
[  918.939475][T13621] netdevsim netdevsim0 netdevsim0: renamed from eth5
[  919.012951][T13817] overlayfs: failed to resolve './file0': -2
[  919.183399][   T30] audit: type=1400 audit(2000000082.220:1044): avc:  denied  { append } for  pid=13822 comm="syz.1.1659" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  919.203331][T13621] netdevsim netdevsim0 netdevsim1: renamed from eth6
[  919.655207][   T30] audit: type=1400 audit(2000000082.700:1045): avc:  denied  { write } for  pid=13830 comm="syz.3.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  919.681242][T13831] vivid-001: =================  START STATUS  =================
[  919.688861][T13831] vivid-001: Radio HW Seek Mode: Bounded
[  919.726286][T13831] vivid-001: Radio Programmable HW Seek: false
[  919.749820][T13831] vivid-001: RDS Rx I/O Mode: Block I/O
[  919.760233][T13831] vivid-001: Generate RBDS Instead of RDS: false
[  919.769438][T13831] vivid-001: RDS Reception: true
[  919.783148][T13831] vivid-001: RDS Program Type: 0 inactive
[  919.789878][T13831] vivid-001: RDS PS Name:  inactive
[  919.794324][T13621] netdevsim netdevsim0 netdevsim2: renamed from eth7
[  919.803351][T13831] vivid-001: RDS Radio Text:  inactive
[  919.808909][T13831] vivid-001: RDS Traffic Announcement: false inactive
[  919.820358][T13831] vivid-001: RDS Traffic Program: false inactive
[  919.911457][T13831] vivid-001: RDS Music: false inactive
[  919.916968][T13831] vivid-001: ==================  END STATUS  ==================
[  920.005416][T13621] netdevsim netdevsim0 netdevsim3: renamed from eth8
[  920.547121][T13848] netlink: 'syz.1.1663': attribute type 10 has an invalid length.
[  922.140671][T13368] Bluetooth: hci5: command 0xfc11 tx timeout
[  922.148302][   T53] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  922.224669][T13837] sp0: Synchronizing with TNC
[  923.069024][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1666'.
[  923.142706][   T30] audit: type=1400 audit(2000000001.340:1046): avc:  denied  { getopt } for  pid=13881 comm="syz.1.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  923.370259][T13621] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  924.108041][T13621] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  924.157566][T13621] wireguard: wg0: Could not create IPv4 socket
[  924.165961][T13621] wireguard: wg1: Could not create IPv4 socket
[  924.177049][T13621] wireguard: wg2: Could not create IPv4 socket
[  924.818885][T13896] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1669'.
[  926.125267][T13927] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1674'.
[  926.455747][T13933] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  928.276868][   T30] audit: type=1804 audit(2000000006.470:1047): pid=13987 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1678" name="/newroot/196/file1" dev="fuse" ino=1 res=1 errno=0
[  929.355594][T13368] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  929.369284][T13368] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  929.373663][T14001] bridge0: entered allmulticast mode
[  929.382001][T13368] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  929.390666][T13368] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  929.398461][T13368] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  929.471066][T14005] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1681'.
[  929.481421][T14005] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1681'.
[  929.491653][T14005] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1681'.
[  929.495577][T14003] Failed to initialize the IGMP autojoin socket (err -2)
[  929.751977][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1682'.
[  931.121203][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  931.501697][   T53] Bluetooth: hci3: command tx timeout
[  931.679488][T14037] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  931.995220][T14043] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1686'.
[  932.264156][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  932.279777][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1685'.
[  932.354730][T14046] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  932.375772][T14046] input: syz1 as /devices/virtual/input/input32
[  932.720261][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  932.861617][T14039] ceph: No mds server is up or the cluster is laggy
[  933.581031][T13368] Bluetooth: hci3: command tx timeout
[  933.895362][T14065] syz.5.1689 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  933.923091][   T30] audit: type=1400 audit(2000000012.080:1048): avc:  denied  { setopt } for  pid=14051 comm="syz.5.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  935.700905][T13368] Bluetooth: hci3: command 0x040f tx timeout
[  936.276997][   T30] audit: type=1400 audit(2000000014.480:1049): avc:  denied  { bind } for  pid=14082 comm="syz.1.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  936.623010][   T30] audit: type=1400 audit(2000000014.500:1050): avc:  denied  { accept } for  pid=14082 comm="syz.1.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  936.656611][T14093] netlink: 'syz.3.1696': attribute type 10 has an invalid length.
[  936.664560][T14093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1696'.
[  937.006382][T14074] syz.5.1693 (14074): drop_caches: 2
[  937.013615][T14093] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  937.742434][   T53] Bluetooth: hci3: command 0x040f tx timeout
[  937.748585][ T5894] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  938.083469][T14118] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  938.122802][T14119] input: syz1 as /devices/virtual/input/input33
[  938.328790][ T5894] usb 6-1: unable to get BOS descriptor or descriptor too short
[  938.454086][ T5894] usb 6-1: config 1 has an invalid interface number: 121 but max is 0
[  938.576936][ T5894] usb 6-1: config 1 has no interface number 0
[  938.734215][ T5894] usb 6-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97
[  938.790061][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.843764][T14124] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  938.887904][T14124] input: syz1 as /devices/virtual/input/input34
[  939.164136][T14003] netdevsim netdevsim0 netdevsim0: renamed from eth5
[  939.631338][ T5894] usb 6-1: Product: syz
[  939.635563][ T5894] usb 6-1: Manufacturer: syz
[  939.640198][ T5894] usb 6-1: SerialNumber: syz
[  939.880804][   T53] Bluetooth: hci3: command 0x040f tx timeout
[  940.949433][ T5894] usb 6-1: can't set config #1, error -71
[  940.994063][T14003] netdevsim netdevsim0 netdevsim1: renamed from eth6
[  941.011422][ T5894] usb 6-1: USB disconnect, device number 19
[  941.108468][T14003] netdevsim netdevsim0 netdevsim2: renamed from eth7
[  941.474852][T14127] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1703'.
[  941.938014][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'.
[  941.949090][T14003] netdevsim netdevsim0 netdevsim3: renamed from eth8
[  941.955870][T14137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1706'.
[  943.177966][T14003] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  944.225216][T14003] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  944.675314][T14183] netlink: 'syz.2.1712': attribute type 10 has an invalid length.
[  944.683274][T14183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1712'.
[  945.110454][T14183] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  945.175520][T14003] wireguard: wg0: Could not create IPv4 socket
[  945.207654][   T30] audit: type=1400 audit(2000000023.400:1051): avc:  denied  { setopt } for  pid=14188 comm="syz.1.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  945.372149][T14003] wireguard: wg1: Could not create IPv4 socket
[  945.562911][T14003] wireguard: wg2: Could not create IPv4 socket
[  946.781970][T14213] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  946.821322][T14213] input: syz1 as /devices/virtual/input/input35
[  950.166743][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'.
[  951.454564][T14261] SELinux: failed to load policy
[  951.544813][T14277] netlink: 'syz.2.1726': attribute type 10 has an invalid length.
[  951.558836][T13368] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  951.572702][T13368] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  951.586791][T13368] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  951.596089][T13368] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  951.604936][T13368] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  951.650939][T14277] team0: Device ipvlan1 failed to register rx_handler
[  951.804686][T14278] Failed to initialize the IGMP autojoin socket (err -2)
[  952.570800][T14301] bio_check_eod: 14 callbacks suppressed
[  952.570816][T14301] syz.3.1727: attempt to access beyond end of device
[  952.570816][T14301] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  952.817391][   T30] audit: type=1400 audit(2000000030.320:1052): avc:  denied  { execute } for  pid=14288 comm="syz.5.1728" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  952.842024][    C1] vkms_vblank_simulate: vblank timer overrun
[  953.101929][T14291] program syz.1.1729 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  953.247403][T14309] netlink: 'syz.5.1730': attribute type 10 has an invalid length.
[  953.256042][T14309] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1730'.
[  953.463487][T14291] netlink: 'syz.1.1729': attribute type 1 has an invalid length.
[  953.620116][T14315] overlayfs: missing 'lowerdir'
[  954.417239][T13368] Bluetooth: hci3: command tx timeout
[  954.430856][   T30] audit: type=1400 audit(2000000031.900:1053): avc:  denied  { connect } for  pid=14311 comm="syz.3.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  954.473928][T14309] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  954.490010][T14291] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  955.071316][   T30] audit: type=1400 audit(2000000033.280:1054): avc:  denied  { append } for  pid=14323 comm="syz.1.1733" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  955.310608][ T5860] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  955.552785][T14340] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  955.581455][   T30] audit: type=1400 audit(2000000033.750:1055): avc:  denied  { append } for  pid=14332 comm="syz.5.1736" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  955.930787][ T5860] usb 2-1: Using ep0 maxpacket: 16
[  955.937406][ T5860] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  955.964959][ T5860] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  955.990115][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  956.023770][ T5860] usb 2-1: config 0 descriptor??
[  956.285193][T14351] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  956.323933][T14351] input: syz1 as /devices/virtual/input/input36
[  956.460732][T13368] Bluetooth: hci3: command tx timeout
[  957.401382][T14326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1733'.
[  957.410336][T14326] tipc: Started in network mode
[  957.415351][T14326] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711
[  957.424405][T14326] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  957.436772][ T5864] usb 2-1: USB disconnect, device number 16
[  957.687292][T14278] netdevsim netdevsim0 netdevsim0: renamed from eth5
[  957.719288][T14278] netdevsim netdevsim0 netdevsim1: renamed from eth6
[  957.859648][T14278] netdevsim netdevsim0 netdevsim2: renamed from eth7
[  958.400228][T14278] netdevsim netdevsim0 netdevsim3: renamed from eth8
[  958.540651][T13368] Bluetooth: hci3: command tx timeout
[  959.557800][ T5908] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  959.778822][ T5908] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  959.950046][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.138924][ T5908] usb 6-1: config 0 descriptor??
[  960.371455][ T5908] cp210x 6-1:0.0: cp210x converter detected
[  960.390661][   T30] audit: type=1400 audit(2000000038.550:1056): avc:  denied  { listen } for  pid=14389 comm="syz.2.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  960.564862][T14278] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  960.630360][T13368] Bluetooth: hci3: command tx timeout
[  960.733607][T14278] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  961.354080][T14278] wireguard: wg0: Could not create IPv4 socket
[  961.406381][T14278] wireguard: wg1: Could not create IPv4 socket
[  961.426963][T14278] wireguard: wg2: Could not create IPv4 socket
[  962.561469][ T5908] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71
[  962.568971][ T5908] cp210x 6-1:0.0: querying part number failed
[  962.584047][ T5908] usb 6-1: cp210x converter now attached to ttyUSB0
[  962.698823][ T5908] usb 6-1: USB disconnect, device number 20
[  962.771302][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  962.783518][ T5908] cp210x 6-1:0.0: device disconnected
[  962.982772][T14423] kAFS: No cell specified
[  963.148402][T14429] netlink: 'syz.2.1748': attribute type 11 has an invalid length.
[  963.156478][T14429] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1748'.
[  965.052435][T14440] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  965.059715][T14444] netlink: 'syz.2.1750': attribute type 11 has an invalid length.
[  965.067937][T14444] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1750'.
[  965.874292][T14460] netlink: 'syz.3.1753': attribute type 1 has an invalid length.
[  965.882139][T14460] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1753'.
[  966.337021][T14451] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  969.095027][T14495] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  970.451306][   T30] audit: type=1400 audit(2000000048.360:1057): avc:  denied  { mount } for  pid=14477 comm="syz.1.1758" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  970.556671][   T30] audit: type=1400 audit(2000000048.370:1058): avc:  denied  { remount } for  pid=14477 comm="syz.1.1758" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  970.776170][   T30] audit: type=1400 audit(2000000048.980:1059): avc:  denied  { unmount } for  pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  970.796238][    C1] vkms_vblank_simulate: vblank timer overrun
[  971.849818][   T30] audit: type=1400 audit(2000000050.050:1060): avc:  denied  { connect } for  pid=14557 comm="syz.1.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  972.906469][T14572] netlink: 'syz.1.1765': attribute type 15 has an invalid length.
[  973.062625][T14572] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1765'.
[  973.798682][T14580] ieee802154 phy1 wpan1: encryption failed: -22
[  973.994604][T14585] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  974.002347][T14585] UDF-fs: Scanning with blocksize 512 failed
[  974.014249][T14585] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  974.026114][T14585] UDF-fs: Scanning with blocksize 1024 failed
[  974.034619][T14585] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  974.042646][T14585] UDF-fs: Scanning with blocksize 2048 failed
[  974.175756][T14585] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  974.183369][T14585] UDF-fs: Scanning with blocksize 4096 failed
[  975.137051][T13368] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  975.427163][T13368] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  975.436138][T13368] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  975.449824][T13368] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  975.471204][T13368] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  975.584133][T14590] Failed to initialize the IGMP autojoin socket (err -2)
[  977.767310][T13368] Bluetooth: hci3: command tx timeout
[  977.830918][T14624] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  977.985183][T14626] input: syz1 as /devices/virtual/input/input37
[  978.289353][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1773'.
[  979.279905][T14642] netlink: 'syz.3.1776': attribute type 1 has an invalid length.
[  979.822048][T13368] Bluetooth: hci3: command tx timeout
[  979.901698][T14649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  980.562277][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1780'.
[  980.572578][T14660] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  980.580574][T14660] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  980.918875][T14642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  981.910868][T13368] Bluetooth: hci3: command tx timeout
[  983.486310][   T30] audit: type=1326 audit(2000000061.690:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14686 comm="syz.3.1786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8221b8e969 code=0x0
[  983.600298][T14693] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1785'.
[  984.000674][T13368] Bluetooth: hci3: command tx timeout
[  984.633476][T14702] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  984.653411][T14702] input: syz1 as /devices/virtual/input/input38
[  985.918675][T14590] netdevsim netdevsim0 netdevsim0: renamed from eth5
[  985.947421][T14590] netdevsim netdevsim0 netdevsim1: renamed from eth6
[  986.911565][T14590] netdevsim netdevsim0 netdevsim2: renamed from eth7
[  987.715513][T14730] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  987.747213][T14730] input: syz1 as /devices/virtual/input/input39
[  988.464655][T14590] netdevsim netdevsim0 netdevsim3: renamed from eth8
[  992.504205][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1799'.
[  992.621100][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  994.044338][T14779] netlink: 'syz.1.1802': attribute type 15 has an invalid length.
[  994.221572][T14779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1802'.
[  994.586930][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1804'.
[  995.424097][   T30] audit: type=1400 audit(2000000073.620:1062): avc:  denied  { accept } for  pid=14804 comm="syz.2.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  996.851103][T14590] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  996.974538][T14590] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  997.014454][T14590] wireguard: wg0: Could not create IPv4 socket
[  997.031930][T14590] wireguard: wg1: Could not create IPv4 socket
[  997.043758][T14590] wireguard: wg2: Could not create IPv4 socket
[  999.541363][T14850] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  999.550887][T14850] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1002.906861][   T30] audit: type=1326 audit(2000000080.940:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14912 comm="syz.1.1818" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f707398e969 code=0x0
[ 1004.014783][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1004.024763][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1004.041065][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1004.052605][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1004.061857][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1004.230446][ T5864] libceph: mon0 (1)[c::]:6789 connect error
[ 1004.268923][T14947] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1821'.
[ 1004.769717][T14937] orangefs_mount: mount request failed with -4
[ 1004.825996][T14943] ceph: No mds server is up or the cluster is laggy
[ 1004.880022][T14938] Failed to initialize the IGMP autojoin socket (err -2)
[ 1006.185384][T14968] overlayfs: missing 'lowerdir'
[ 1006.969472][   T53] Bluetooth: hci3: command tx timeout
[ 1007.440853][   T30] audit: type=1400 audit(2000000085.280:1064): avc:  denied  { map } for  pid=14980 comm="syz.1.1830" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1007.447188][T14990] overlayfs: missing 'lowerdir'
[ 1007.758120][   T30] audit: type=1400 audit(2000000085.280:1065): avc:  denied  { execute } for  pid=14980 comm="syz.1.1830" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1007.811370][T14989] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1007.817944][T14989] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1007.823980][T14989] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1007.830073][T14989] ==================================================================
[ 1007.838132][T14989] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x1d4/0x200
[ 1007.847343][T14989] Read of size 8 at addr ffff88802a070558 by task syz.1.1830/14989
[ 1007.855229][T14989] 
[ 1007.857552][T14989] CPU: 1 UID: 0 PID: 14989 Comm: syz.1.1830 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[ 1007.857575][T14989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1007.857586][T14989] Call Trace:
[ 1007.857593][T14989]  <TASK>
[ 1007.857600][T14989]  dump_stack_lvl+0x116/0x1f0
[ 1007.857632][T14989]  print_report+0xc3/0x670
[ 1007.857651][T14989]  ? __virt_addr_valid+0x5e/0x590
[ 1007.857678][T14989]  ? __phys_addr+0xc6/0x150
[ 1007.857705][T14989]  ? __list_del_entry_valid_or_report+0x1d4/0x200
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1007.857736][T14989]  kasan_report+0xe0/0x110
[ 1007.857755][T14989]  ? __list_del_entry_valid_or_report+0x1d4/0x200
[ 1007.857788][T14989]  __list_del_entry_valid_or_report+0x1d4/0x200
[ 1007.857821][T14989]  bt_accept_unlink+0x34/0x2e0
[ 1007.857850][T14989]  l2cap_sock_teardown_cb+0x1a3/0x3c0
[ 1007.857874][T14989]  l2cap_chan_del+0xba/0x8f0
[ 1007.857898][T14989]  l2cap_conn_del+0x37a/0x730
[ 1007.857924][T14989]  ? hci_conn_failed+0x14f/0x330
[ 1007.857945][T14989]  l2cap_connect_cfm+0x9e1/0xf80
[ 1007.857975][T14989]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1007.858003][T14989]  ? hci_connect_le_scan_cleanup+0xb6/0x6b0
[ 1007.858024][T14989]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1007.858056][T14989]  hci_conn_failed+0x1ba/0x330
[ 1007.858078][T14989]  hci_abort_conn_sync+0x740/0xb40
[ 1007.858100][T14989]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[ 1007.858124][T14989]  ? find_held_lock+0x2b/0x80
[ 1007.858148][T14989]  ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0
[ 1007.858172][T14989]  ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0
[ 1007.858195][T14989]  hci_disconnect_all_sync.constprop.0+0x104/0x3c0
[ 1007.858221][T14989]  hci_suspend_sync+0x770/0xab0
[ 1007.858245][T14989]  ? __pfx_hci_suspend_sync+0x10/0x10
[ 1007.858268][T14989]  ? hci_send_monitor_ctrl_event+0x560/0x5b0
[ 1007.858286][T14989]  ? __pfx_mgmt_suspending+0x10/0x10
[ 1007.858316][T14989]  hci_suspend_dev+0x308/0x500
[ 1007.858333][T14989]  ? __pfx_hci_suspend_dev+0x10/0x10
[ 1007.858349][T14989]  ? rcu_barrier+0x341/0x6e0
[ 1007.858378][T14989]  ? kobject_get+0xbb/0x150
[ 1007.858407][T14989]  hci_suspend_notifier+0x28d/0x2f0
[ 1007.858427][T14989]  notifier_call_chain+0xbc/0x410
[ 1007.858453][T14989]  ? __pfx_hci_suspend_notifier+0x10/0x10
[ 1007.858474][T14989]  blocking_notifier_call_chain_robust+0xc8/0x160
[ 1007.858503][T14989]  ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10
[ 1007.858533][T14989]  ? do_raw_spin_unlock+0x172/0x230
[ 1007.858557][T14989]  pm_notifier_call_chain_robust+0x27/0x60
[ 1007.858586][T14989]  snapshot_open+0x189/0x2b0
[ 1007.858612][T14989]  ? __pfx_snapshot_open+0x10/0x10
[ 1007.858637][T14989]  misc_open+0x35d/0x420
[ 1007.858666][T14989]  ? __pfx_misc_open+0x10/0x10
[ 1007.858693][T14989]  chrdev_open+0x234/0x6a0
[ 1007.858712][T14989]  ? __pfx_chrdev_open+0x10/0x10
[ 1007.858731][T14989]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[ 1007.858762][T14989]  do_dentry_open+0x744/0x1c10
[ 1007.858791][T14989]  ? __pfx_chrdev_open+0x10/0x10
[ 1007.858812][T14989]  vfs_open+0x82/0x3f0
[ 1007.858834][T14989]  path_openat+0x1e5e/0x2d40
[ 1007.858855][T14989]  ? __pfx_path_openat+0x10/0x10
[ 1007.858876][T14989]  do_filp_open+0x20b/0x470
[ 1007.858893][T14989]  ? __pfx_do_filp_open+0x10/0x10
[ 1007.858920][T14989]  ? alloc_fd+0x471/0x7d0
[ 1007.858952][T14989]  do_sys_openat2+0x11b/0x1d0
[ 1007.858974][T14989]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1007.859001][T14989]  __x64_sys_openat+0x174/0x210
[ 1007.859023][T14989]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1007.859053][T14989]  ? rcu_is_watching+0x12/0xc0
[ 1007.859081][T14989]  do_syscall_64+0xcd/0x260
[ 1007.859112][T14989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1007.859132][T14989] RIP: 0033:0x7f707398e969
[ 1007.859148][T14989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1007.859167][T14989] RSP: 002b:00007f70747fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1007.859185][T14989] RAX: ffffffffffffffda RBX: 00007f7073bb6240 RCX: 00007f707398e969
[ 1007.859198][T14989] RDX: 0000000000008800 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[ 1007.859210][T14989] RBP: 00007f7073a10ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1007.859221][T14989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1007.859232][T14989] R13: 0000000000000000 R14: 00007f7073bb6240 R15: 00007fff78bdf9e8
[ 1007.859250][T14989]  </TASK>
[ 1007.859257][T14989] 
[ 1008.277495][T14989] Allocated by task 24:
[ 1008.281633][T14989]  kasan_save_stack+0x33/0x60
[ 1008.286294][T14989]  kasan_save_track+0x14/0x30
[ 1008.290951][T14989]  __kasan_kmalloc+0xaa/0xb0
[ 1008.295532][T14989]  __kmalloc_node_track_caller_noprof+0x221/0x510
[ 1008.301932][T14989]  kmalloc_reserve+0xef/0x2c0
[ 1008.306596][T14989]  __alloc_skb+0x166/0x380
[ 1008.310993][T14989]  reset_per_cpu_data+0x26/0x240
[ 1008.315913][T14989]  send_dm_alert+0x1e/0xf0
[ 1008.320317][T14989]  process_one_work+0x9cf/0x1b70
[ 1008.325238][T14989]  worker_thread+0x6c8/0xf10
[ 1008.329810][T14989]  kthread+0x3c2/0x780
[ 1008.333860][T14989]  ret_from_fork+0x45/0x80
[ 1008.338259][T14989]  ret_from_fork_asm+0x1a/0x30
[ 1008.343013][T14989] 
[ 1008.345316][T14989] Freed by task 5864:
[ 1008.349272][T14989]  kasan_save_stack+0x33/0x60
[ 1008.353927][T14989]  kasan_save_track+0x14/0x30
[ 1008.358584][T14989]  kasan_save_free_info+0x3b/0x60
[ 1008.363596][T14989]  __kasan_slab_free+0x51/0x70
[ 1008.368342][T14989]  kfree+0x2b6/0x4d0
[ 1008.372223][T14989]  skb_free_head+0x108/0x1d0
[ 1008.376795][T14989]  pskb_expand_head+0x3b6/0x10b0
[ 1008.381716][T14989]  netlink_trim+0x22d/0x310
[ 1008.386200][T14989]  netlink_broadcast_filtered+0xca/0xf10
[ 1008.391815][T14989]  send_dm_alert+0xad/0xf0
[ 1008.396216][T14989]  process_one_work+0x9cf/0x1b70
[ 1008.401135][T14989]  worker_thread+0x6c8/0xf10
[ 1008.405707][T14989]  kthread+0x3c2/0x780
[ 1008.409755][T14989]  ret_from_fork+0x45/0x80
[ 1008.414153][T14989]  ret_from_fork_asm+0x1a/0x30
[ 1008.418905][T14989] 
[ 1008.421210][T14989] The buggy address belongs to the object at ffff88802a070000
[ 1008.421210][T14989]  which belongs to the cache kmalloc-2k of size 2048
[ 1008.435245][T14989] The buggy address is located 1368 bytes inside of
[ 1008.435245][T14989]  freed 2048-byte region [ffff88802a070000, ffff88802a070800)
[ 1008.449195][T14989] 
[ 1008.451502][T14989] The buggy address belongs to the physical page:
[ 1008.457888][T14989] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a070
[ 1008.466628][T14989] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1008.475108][T14989] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1008.483068][T14989] page_type: f5(slab)
[ 1008.487032][T14989] raw: 00fff00000000040 ffff88801b442000 0000000000000000 dead000000000001
[ 1008.495600][T14989] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 1008.504165][T14989] head: 00fff00000000040 ffff88801b442000 0000000000000000 dead000000000001
[ 1008.512817][T14989] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 1008.521471][T14989] head: 00fff00000000003 ffffea0000a81c01 00000000ffffffff 00000000ffffffff
[ 1008.530125][T14989] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1008.538771][T14989] page dumped because: kasan: bad access detected
[ 1008.545165][T14989] page_owner tracks the page as allocated
[ 1008.550855][T14989] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1095, tgid 1095 (kworker/u8:5), ts 68613973400, free_ts 68600655017
[ 1008.572020][T14989]  post_alloc_hook+0x181/0x1b0
[ 1008.576775][T14989]  get_page_from_freelist+0x135c/0x3920
[ 1008.582303][T14989]  __alloc_frozen_pages_noprof+0x263/0x23a0
[ 1008.588177][T14989]  alloc_pages_mpol+0x1fb/0x550
[ 1008.593012][T14989]  new_slab+0x244/0x340
[ 1008.597152][T14989]  ___slab_alloc+0xd9c/0x1940
[ 1008.601815][T14989]  __slab_alloc.constprop.0+0x56/0xb0
[ 1008.607174][T14989]  __kmalloc_node_track_caller_noprof+0x2ee/0x510
[ 1008.613571][T14989]  kmalloc_reserve+0xef/0x2c0
[ 1008.618233][T14989]  pskb_expand_head+0x22d/0x10b0
[ 1008.623156][T14989]  netlink_trim+0x22d/0x310
[ 1008.627647][T14989]  netlink_broadcast_filtered+0xca/0xf10
[ 1008.633264][T14989]  nlmsg_notify+0x9e/0x220
[ 1008.637665][T14989]  rtmsg_ifinfo+0x174/0x1a0
[ 1008.642153][T14989]  netif_state_change+0x17f/0x3b0
[ 1008.647164][T14989]  linkwatch_do_dev+0x12b/0x160
[ 1008.652005][T14989] page last free pid 5873 tgid 5873 stack trace:
[ 1008.658306][T14989]  __free_frozen_pages+0x69d/0xff0
[ 1008.663417][T14989]  qlist_free_all+0x4e/0x120
[ 1008.667998][T14989]  kasan_quarantine_reduce+0x195/0x1e0
[ 1008.673447][T14989]  __kasan_slab_alloc+0x69/0x90
[ 1008.678278][T14989]  __kmalloc_noprof+0x1d4/0x510
[ 1008.683122][T14989]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1008.688658][T14989]  tomoyo_path_perm+0x274/0x460
[ 1008.693497][T14989]  security_inode_getattr+0x116/0x290
[ 1008.698868][T14989]  vfs_fstat+0x4b/0xd0
[ 1008.702930][T14989]  __do_sys_newfstat+0x91/0x110
[ 1008.707766][T14989]  do_syscall_64+0xcd/0x260
[ 1008.712260][T14989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.718141][T14989] 
[ 1008.720460][T14989] Memory state around the buggy address:
[ 1008.726074][T14989]  ffff88802a070400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1008.734124][T14989]  ffff88802a070480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1008.742168][T14989] >ffff88802a070500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1008.750209][T14989]                                                     ^
[ 1008.757120][T14989]  ffff88802a070580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1008.765167][T14989]  ffff88802a070600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1008.773208][T14989] ==================================================================
[ 1008.781318][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1008.845792][T14989] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1008.853009][T14989] CPU: 1 UID: 0 PID: 14989 Comm: syz.1.1830 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[ 1008.863338][T14989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1008.873390][T14989] Call Trace:
[ 1008.876665][T14989]  <TASK>
[ 1008.879594][T14989]  dump_stack_lvl+0x3d/0x1f0
[ 1008.884200][T14989]  panic+0x71c/0x800
[ 1008.888114][T14989]  ? __pfx_panic+0x10/0x10
[ 1008.892545][T14989]  ? mark_held_locks+0x49/0x80
[ 1008.897323][T14989]  ? preempt_schedule_thunk+0x16/0x30
[ 1008.902701][T14989]  ? __list_del_entry_valid_or_report+0x1d4/0x200
[ 1008.909131][T14989]  ? preempt_schedule_common+0x44/0xc0
[ 1008.914606][T14989]  ? __list_del_entry_valid_or_report+0x1d4/0x200
[ 1008.921034][T14989]  check_panic_on_warn+0xab/0xb0
[ 1008.925973][T14989]  end_report+0x107/0x170
[ 1008.930318][T14989]  kasan_report+0xee/0x110
[ 1008.934740][T14989]  ? __list_del_entry_valid_or_report+0x1d4/0x200
[ 1008.941174][T14989]  __list_del_entry_valid_or_report+0x1d4/0x200
[ 1008.947429][T14989]  bt_accept_unlink+0x34/0x2e0
[ 1008.952209][T14989]  l2cap_sock_teardown_cb+0x1a3/0x3c0
[ 1008.957595][T14989]  l2cap_chan_del+0xba/0x8f0
[ 1008.962197][T14989]  l2cap_conn_del+0x37a/0x730
[ 1008.966877][T14989]  ? hci_conn_failed+0x14f/0x330
[ 1008.971820][T14989]  l2cap_connect_cfm+0x9e1/0xf80
[ 1008.976772][T14989]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1008.982243][T14989]  ? hci_connect_le_scan_cleanup+0xb6/0x6b0
[ 1008.988139][T14989]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1008.993608][T14989]  hci_conn_failed+0x1ba/0x330
[ 1008.998373][T14989]  hci_abort_conn_sync+0x740/0xb40
[ 1009.003478][T14989]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[ 1009.009108][T14989]  ? find_held_lock+0x2b/0x80
[ 1009.013774][T14989]  ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0
[ 1009.020356][T14989]  ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0
[ 1009.026934][T14989]  hci_disconnect_all_sync.constprop.0+0x104/0x3c0
[ 1009.033424][T14989]  hci_suspend_sync+0x770/0xab0
[ 1009.038263][T14989]  ? __pfx_hci_suspend_sync+0x10/0x10
[ 1009.043623][T14989]  ? hci_send_monitor_ctrl_event+0x560/0x5b0
[ 1009.049588][T14989]  ? __pfx_mgmt_suspending+0x10/0x10
[ 1009.054868][T14989]  hci_suspend_dev+0x308/0x500
[ 1009.059618][T14989]  ? __pfx_hci_suspend_dev+0x10/0x10
[ 1009.064884][T14989]  ? rcu_barrier+0x341/0x6e0
[ 1009.069470][T14989]  ? kobject_get+0xbb/0x150
[ 1009.073966][T14989]  hci_suspend_notifier+0x28d/0x2f0
[ 1009.079152][T14989]  notifier_call_chain+0xbc/0x410
[ 1009.084166][T14989]  ? __pfx_hci_suspend_notifier+0x10/0x10
[ 1009.089874][T14989]  blocking_notifier_call_chain_robust+0xc8/0x160
[ 1009.096289][T14989]  ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10
[ 1009.103308][T14989]  ? do_raw_spin_unlock+0x172/0x230
[ 1009.108496][T14989]  pm_notifier_call_chain_robust+0x27/0x60
[ 1009.114298][T14989]  snapshot_open+0x189/0x2b0
[ 1009.118881][T14989]  ? __pfx_snapshot_open+0x10/0x10
[ 1009.123985][T14989]  misc_open+0x35d/0x420
[ 1009.128226][T14989]  ? __pfx_misc_open+0x10/0x10
[ 1009.132979][T14989]  chrdev_open+0x234/0x6a0
[ 1009.137380][T14989]  ? __pfx_chrdev_open+0x10/0x10
[ 1009.142302][T14989]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[ 1009.149061][T14989]  do_dentry_open+0x744/0x1c10
[ 1009.153819][T14989]  ? __pfx_chrdev_open+0x10/0x10
[ 1009.158743][T14989]  vfs_open+0x82/0x3f0
[ 1009.162801][T14989]  path_openat+0x1e5e/0x2d40
[ 1009.167379][T14989]  ? __pfx_path_openat+0x10/0x10
[ 1009.172303][T14989]  do_filp_open+0x20b/0x470
[ 1009.176789][T14989]  ? __pfx_do_filp_open+0x10/0x10
[ 1009.181805][T14989]  ? alloc_fd+0x471/0x7d0
[ 1009.186128][T14989]  do_sys_openat2+0x11b/0x1d0
[ 1009.190790][T14989]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1009.195977][T14989]  __x64_sys_openat+0x174/0x210
[ 1009.200817][T14989]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1009.206175][T14989]  ? rcu_is_watching+0x12/0xc0
[ 1009.210933][T14989]  do_syscall_64+0xcd/0x260
[ 1009.215428][T14989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1009.221306][T14989] RIP: 0033:0x7f707398e969
[ 1009.225706][T14989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1009.245300][T14989] RSP: 002b:00007f70747fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1009.253699][T14989] RAX: ffffffffffffffda RBX: 00007f7073bb6240 RCX: 00007f707398e969
[ 1009.261655][T14989] RDX: 0000000000008800 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[ 1009.269607][T14989] RBP: 00007f7073a10ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1009.277561][T14989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1009.285514][T14989] R13: 0000000000000000 R14: 00007f7073bb6240 R15: 00007fff78bdf9e8
[ 1009.293476][T14989]  </TASK>
[ 1009.296659][T14989] Kernel Offset: disabled
[ 1009.300959][T14989] Rebooting in 86400 seconds..