last executing test programs:

15m31.879983671s ago: executing program 32 (id=169):
r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@private, @empty, <r2=>0x0}, &(0x7f0000000040)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r2, 0x29, 0x7, 0x0, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0xf, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7, 0x1, 0x4a, 0x8}})
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000340), 0x651, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'lo\x00'})
socket(0x10, 0x803, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000400)="120000001200e76f00341658a585107b462e", 0x12, 0x20004050, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sync_file_range(r7, 0x6, 0x9fd, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r8 = syz_open_dev$usbfs(&(0x7f0000001d00), 0xf, 0x101301)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000001d40))
ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000001d80)=@usbdevfs_connect)
ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000001dc0)=0x1)
getpriority(0x1, r0)

10m20.452102311s ago: executing program 33 (id=759):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2)
rename(&(0x7f00000001c0)='./file0/file0\x00', 0x0)
r2 = socket(0x15, 0x5, 0x0)
connect$unix(r2, &(0x7f0000002840)=@abs={0xa}, 0x6e)
getsockname(r2, 0x0, &(0x7f00000028c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000700), 0x407f, 0xffffffffffffffff, 0x4}, 0x38)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r0, r0, 0x2f, 0x0, @void}, 0x10)
mq_open(&(0x7f0000000040)='#]#*\x00', 0x40, 0x2, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000740)={0x9, [0x200, 0x8, 0x7f, 0x6, 0x5, 0x8, 0x40, 0x7ff, 0x8001]}, 0x16)
recvmmsg(r4, &(0x7f0000002740)=[{{&(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/17, 0x11}, {&(0x7f0000000900)=""/38, 0x26}, {&(0x7f0000000940)=""/137, 0x89}, {&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000000b00)=""/16, 0x10}, {&(0x7f0000000b40)=""/142, 0x8e}, {&(0x7f0000000c00)=""/189, 0xbd}], 0x8}, 0x21fcd4}, {{&(0x7f0000000d40)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000dc0)=""/32, 0x20}, {&(0x7f0000000e00)=""/48, 0x30}, {&(0x7f0000000e40)=""/201, 0xc9}, {&(0x7f0000000f40)=""/80, 0x50}, {&(0x7f0000000fc0)=""/31, 0x1f}, {&(0x7f0000001000)=""/205, 0xcd}, {&(0x7f0000001100)=""/146, 0x92}, {&(0x7f00000011c0)=""/35, 0x23}, {&(0x7f0000001200)=""/241, 0xf1}], 0x9, &(0x7f00000013c0)=""/248, 0xf8}, 0x6fca24bc}, {{&(0x7f00000014c0)=@alg, 0x80, &(0x7f0000002700)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/198, 0xc6}, {&(0x7f0000002640)=""/58, 0x3a}, {&(0x7f0000002680)=""/118, 0x76}], 0x4}, 0xb9}], 0x3, 0x100, &(0x7f0000002800))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
pselect6(0x900, 0x0, 0x0, &(0x7f00000000c0)={0x1f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000002900)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000002940)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000002980)={@initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x800, 0x1, 0xff, 0x2, 0x0, 0x100}, 0x20)
ioctl(r5, 0x3b8f, &(0x7f0000000700)="280000000600")
bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r3, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r0, 0x4, r0}, 0x10)

8m8.136551367s ago: executing program 34 (id=1062):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000, 0x1f00}, 0x700)

7m39.080330845s ago: executing program 7 (id=1119):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x3, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e, 0x3}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8)
mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f0000000440)='debugfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x4)
r2 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f000004b680)=0x410000002)
r3 = syz_open_procfs$namespace(0x0, &(0x7f000004b6c0)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f000004b700)={{}, {0x0, 0x80000000}})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f000004b740)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f000004b780)={0x2020}, 0x2020)
inotify_init1(0x0)
openat(0xffffffffffffff9c, &(0x7f000004d7c0)='./binfmt/status\x00', 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r6 = getpgrp(0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)

7m38.922639962s ago: executing program 7 (id=1121):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
pwritev(r0, &(0x7f0000001080)=[{&(0x7f0000000080)="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", 0x1000}], 0x1, 0x8, 0x5)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001140)='./sys\x00', &(0x7f0000001180)='sysfs\x00', 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigsuspend(&(0x7f0000001340)={[0x4]}, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./sys/class/vtconsole/vtcon0/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000001200)='!', 0x1)
sendmsg$inet_sctp(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="200000000000000084000000020000000a000080"], 0x20, 0x2400e044}, 0x20001080)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./bus\x00', 0x42, 0x77)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, r3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280), 0x80000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000001300)={0x1, 0x0, [{0x4b564d00, 0x0, 0xffb}]})
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002800)={&(0x7f0000002840)=[{0x8, 0x1, 0x0, 0x0}], 0x1})

7m38.326155853s ago: executing program 7 (id=1123):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x1, 0x60, [0x200000000340, 0x0, 0x0, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x8, 0x22eb, 'bond0\x00', 'geneve0\x00', 'team_slave_0\x00', 'ip_vti0\x00', @local, [0xff, 0x0, 0xff, 0x0, 0xff], @random="06273e15ebf8", [0x0, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}]}, 0x1d8)

7m38.098009527s ago: executing program 7 (id=1124):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x9b2cd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000000340), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000000160001002bbd7000fedbdf25000000000000000000000000000000000a0101010000000000000000000000004e2300004e2400000a0080205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b5070000000000000000000000000000060000000000000009000000000044000000000000000000ffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000000002060100000000000000080000004f0700"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
sendmsg$key(r6, &(0x7f0000000540)={0x900, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2705001a000000000000000000"], 0x38}}, 0x40408c0)

7m36.848744326s ago: executing program 7 (id=1130):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsopen(&(0x7f0000000140)='ceph\x00', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000019300)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000019340)='./proc\x00', &(0x7f0000019380)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000193c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000019400)='100', 0x3)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000019440)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000019480)={0x0, 0x0, &(0x7f00000194c0)={&(0x7f0000019500)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x12017, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000000300)=""/102392, 0x18ff8)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r8 = socket(0xa, 0x3, 0xff)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4}]}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2b, 0x1, @empty, @local, {[@hopopts={0xff}]}}}}}, 0x0)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4)

7m31.405631642s ago: executing program 7 (id=1141):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8)
r3 = dup(r0)
write$UHID_INPUT(r3, &(0x7f0000001480)={0xb, {"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", 0x1000}}, 0x1006)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000024c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x100, 0x6}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
timer_create(0x0, &(0x7f0000002600)={0x0, 0x21}, &(0x7f0000002640)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000002680)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r5 = socket$kcm(0x23, 0x5, 0x0)
listen(r5, 0x800)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r7, &(0x7f0000002800)={0x23, 0x0, 0x58}, 0x10)
sendto$phonet(r7, 0x0, 0x0, 0x80, 0x0, 0x0)
accept4(r5, 0x0, 0x0, 0x80000)
read(r0, &(0x7f0000002840)=""/266, 0x10a)
ptrace$poke(0x13, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0fdb00000004000000080000000c00f4ff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

7m18.737915756s ago: executing program 1 (id=1175):
r0 = syz_io_uring_setup(0x2461, 0x0, &(0x7f0000000280)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000340)=@IORING_OP_PIPE={0x3e, 0x40, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xff, 0x8], 0x0, 0x1000, 0x0, {0x0, 0x0, 0x4}})
io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

7m18.702554925s ago: executing program 1 (id=1176):
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10040, 0x70)
sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000000780)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x2, &(0x7f0000019780)=0x80000000000003)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000197c0), 0x28100, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000019800)=0x2)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000019840)=0xe)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r7=>0x0})
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r7, 0x1}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x0, 0x4b, r7, 0x3}, 0xc)
sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e6"], 0x20}], 0x1}, 0x0)
syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xb0, 0x10, "", [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x100, 0xf, 0x1, {0x22, 0xa28}}, {{{0x9, 0x5, 0x81, 0x3, 0x610, 0x8, 0x1, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x0, 0x8}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x0, 0x3, 0x8, 0x40, 0x5}, 0x2e, &(0x7f0000000340)={0x5, 0xf, 0x2e, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x0, 0x3b, 0x9}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x6, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xb, 0x4, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x69, 0x6, 0x7ff}]}, 0x6, [{0x0, 0x0}, {0x85, &(0x7f0000000480)=@string={0x85, 0x3, "9d4678770871ccbd80fffb9b791b45429188272da3e0e7a93c6ec6e5d57be6ac8851cce99b60785d400bf389f5a92ef2576d70aebc410df764ba030440f7cb05c96d3b27e3964e959689a9dc27e72d9b8c1d33d7d58d8425ff04dec33603e7d76e9e113d4af16b8c6b49352693198e17b45e8d696182861bc34d2720658777aa5b76b6"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2c01}}, {0x82, &(0x7f0000000580)=@string={0x82, 0x3, "4f16ab4acb14f3de0c8f4bfec888dad7016bebf8eec435e1c9e016bfe62e42cd90e94b40442f052cf557498d54df82f21502b5f3e2d204f01d017445ec27d2d242ec0a1756cc6dfcfdb925531e09debbce6afcdcc9abf853371192fd503fa519ed5903cbebda8e2de92e43be57ac8dc2e26e596bbd4872a2f04dcf811c3a58ed"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc0c}}]})

7m16.819266332s ago: executing program 1 (id=1179):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)

7m16.314904948s ago: executing program 35 (id=1141):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8)
r3 = dup(r0)
write$UHID_INPUT(r3, &(0x7f0000001480)={0xb, {"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", 0x1000}}, 0x1006)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000024c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x100, 0x6}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
timer_create(0x0, &(0x7f0000002600)={0x0, 0x21}, &(0x7f0000002640)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000002680)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r5 = socket$kcm(0x23, 0x5, 0x0)
listen(r5, 0x800)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r7, &(0x7f0000002800)={0x23, 0x0, 0x58}, 0x10)
sendto$phonet(r7, 0x0, 0x0, 0x80, 0x0, 0x0)
accept4(r5, 0x0, 0x0, 0x80000)
read(r0, &(0x7f0000002840)=""/266, 0x10a)
ptrace$poke(0x13, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0fdb00000004000000080000000c00f4ff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

7m14.746469542s ago: executing program 1 (id=1184):
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa)
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff4001221800090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000100))
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000440), 0xa, 0x62080)
ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000580)={0x2, 0xe2c4b4808a3496b7, 0x7fff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2200000004"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4)
waitid$P_PIDFD(0x3, r1, &(0x7f00000002c0), 0x1, &(0x7f0000000480))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000280)={"b614419daff75fbdcb86ed7e224caa5fc6dc81f69b1a0006be1266fb112c40b5"})
ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f0000000000))

7m10.776612256s ago: executing program 1 (id=1190):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x40, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/safesetid/gid_allowlist_policy\x00', 0x2, 0x4)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40402, 0x0)
socket$packet(0x11, 0x3, 0x300)
recvmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x12100)
sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="02", 0x1, 0x14, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
timer_create(0x3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0)
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='bridge0\x00')
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'bridge0\x00', 0x1})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x5, &(0x7f00000008c0)}, 0x100)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'bridge0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x17f57, 0x20}, [@IFLA_PHYS_SWITCH_ID={0x1b, 0x24, "61c9e6b2c1baed953e4a8ba6846f279d6fa0bea4ccfb26"}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x9}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x4}]}}}, @IFLA_NET_NS_PID={0x8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x80}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_BROADCAST={0xa}, @IFLA_EVENT={0x8, 0x2c, 0x7f}, @IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}]}, 0xa4}}, 0x0)
pipe2(0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000b00)=0x3, 0xac3)
llistxattr(&(0x7f0000000b40)='./sec/safesetid/gid_allowlist_policy/file0\x00', &(0x7f0000000b80)=""/148, 0x94)
syz_clone3(&(0x7f0000000c40)={0x23800000, &(0x7f0000000cc0)=<r6=>0xffffffffffffffff, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000d00)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000d40)=[&(0x7f0000000d80)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}])
write$tun(r0, &(0x7f0000000dc0)={@val={0x0, 0x805}, @void, @x25={0x3, 0x2, 0x1b}}, 0x7)

7m10.119878272s ago: executing program 1 (id=1193):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0xff00, &(0x7f0000000480)=[{&(0x7f00000004c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004)

6m54.952909314s ago: executing program 36 (id=1193):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0xff00, &(0x7f0000000480)=[{&(0x7f00000004c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004)

2m8.729599561s ago: executing program 2 (id=1831):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESHEX=r0, @ANYRESDEC], 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x7)
sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x10000)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0xad)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000380), &(0x7f00000003c0)=@tcp6=r4}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000400), 0x3)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0), 0x4)
close_range(r2, r2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)='\x05\x00\x00\x00\x00\x00\x00\x00\x00\xf6 \xe2\xc3\x7f.,\xdc\xab\x83(\xc7\xd3\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77<r\xe9\x9cD\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3wA\xf6`>\x8b\x86\xe0\xe3#9b\x1f\x0e\xf8\xcd*qce\x96\xcfJw\x00'/134)

2m6.527631023s ago: executing program 2 (id=1839):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41}, 0x10)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r2, 0xc0106441, &(0x7f0000000040)={0x0, <r3=>0x0, 0x9})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000880)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0xfe, 0x7fff2006}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000140), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000180)={0x20004, <r6=>r4})
r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000200)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)={r8})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000280)={<r9=>0x0})
r10 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000340)={0xf30d, 0x0, 0xb4})
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xff, 0xfe, 0x7fff0006}]})
r12 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r12, 0xc0184800, &(0x7f0000000440)={0x20004, <r13=>r11})
r14 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r14, 0xc00c642e, &(0x7f00000004c0)={<r15=>0x0, 0x0, r13})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000000500)={r15})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000540)={<r16=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000580)={<r17=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000005c0)={<r18=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000600)={<r19=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={<r20=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000680)={<r21=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000006c0)={<r22=>0x0})
ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r2, 0xc0186443, &(0x7f0000000800)={r3, 0x0, {0x30, 0x2, &(0x7f0000000940)=[{0x10000000, r8, 0x0, 0x7, 0x1, {0x10, 0x3, &(0x7f00000002c0)=[{0x0, r9}, {0xff, 0x0, 0xe}, {0x1, 0x0, 0x9}]}}, {0x0, r15, 0x7, 0x1, 0xfffffffffffffff7, {0x10, 0x8, &(0x7f0000000700)=[{0xff, r16, 0x10}, {0x1, r17, 0x1}, {0x0, r18, 0xfd2}, {0xff, r19, 0x3}, {0x1, r20, 0xffffffff}, {0x0, r21, 0x7fff}, {0x0, r22, 0x1d}, {0x1, 0x0, 0x7}]}}]}})
sendmmsg$sock(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000dc0)="aca8819791a10e1dbb622e161e6c2a0a63cd47ac14a11262da759f0f57e537a88f1ccabf5e1f357b10c13f7ad890712c1804cd10bdc4dd8a7fe3a6bf18cfeaa38fc5512548a5136b0ed1911f4789463b3554c5d6f1548e1744a9845a6bd3c566aa05abf1336ae7", 0x67}, {&(0x7f0000000e40)="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", 0xce6}, {&(0x7f0000001e40)="9e7f69", 0x3}], 0x3}}], 0x1, 0x20000110)

2m6.210585127s ago: executing program 2 (id=1842):
clock_gettime(0x7, &(0x7f00000009c0))
io_setup(0x6, &(0x7f00000000c0))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0))
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r4)
getsockname$packet(r4, &(0x7f0000000580)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000100)=@newtfilter={0xe0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xefe58de28999decf}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x8c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x8}, {0x2, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xfc, 0x2, 0x101}, {0x6b, 0x2, 0x2, 'X~'}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xa, 0x2, 0x6}, {0x100, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfffa, 0x8, 0x9}, {0x0, 0x4, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0xb}}, @TCA_FLOW_XOR={0x8, 0x7, 0x28000}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xf}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x16bc}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x2}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000004a80)='./mnt\x00', 0x1ff)
mount(&(0x7f0000004ac0)=@filename='ubi0_0\x00', &(0x7f0000004b00)='./mnt\x00', &(0x7f0000004b40)='ubifs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004b80)='./file1\x00', 0x542, 0x0)
pwritev2(r6, &(0x7f0000004bc0)=[{&(0x7f0000004c00)=')', 0x1}], 0x1, 0x2, 0x0, 0xa1)
ioctl$KVM_CAP_X86_GUEST_MODE(r6, 0x4068aea3, &(0x7f0000004c40))
sendmsg$nl_route_sched(r1, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x20, {0x0, 0x0, 0x74, r5, {0x0, 0x3}, {0x4, 0xb}, {0x9, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x30000080)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000004d80)={r7, r1, 0x2, 0x5d, &(0x7f0000004e40)="b775b5434e25982c793d33b023a8f9a4884f568f7ffe678b464aae307aab16194f44d1e2205868a6d0a0a1e959dc2a76778a8a36e2088ed398eb3395ee8feb1a5e109f17762b56545eee22de2f35a8297836e7065c4fab9dd5d7ecf129", 0x1, 0x8, 0xd, 0x7, 0x1ff, 0x0, 0x1, 'syz1\x00'})
mount$9p_virtio(&(0x7f0000004ec0), &(0x7f0000004f00)='.\x00', &(0x7f0000004f40), 0x4, &(0x7f0000004f80)=ANY=[@ANYBLOB='trans=virtio,cache=0x00'])

2m4.267542712s ago: executing program 2 (id=1845):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x3, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e, 0x3}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8)
mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f0000000440)='debugfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
r1 = getpid()
syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x4)
r2 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f000004b680)=0x410000002)
r3 = syz_open_procfs$namespace(0x0, &(0x7f000004b6c0)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000)
utimes(0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f000004b740)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f000004b780)={0x2020}, 0x2020)
inotify_init1(0x0)
openat(0xffffffffffffff9c, &(0x7f000004d7c0)='./binfmt/status\x00', 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r6 = getpgrp(0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)

2m3.65759516s ago: executing program 2 (id=1846):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x20, r2, 0x25, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000080}, 0x840) (fail_nth: 4)

2m3.029518353s ago: executing program 2 (id=1847):
unshare(0x64000600)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b000000000056cc00"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)

1m47.257270109s ago: executing program 37 (id=1847):
unshare(0x64000600)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b000000000056cc00"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)

1m40.889961982s ago: executing program 5 (id=1880):
fsopen(&(0x7f00000009c0)='pvfs2\x00', 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a00)={0x1, &(0x7f0000000a40)=[{0x6, 0x0, 0x0, 0x7}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x100)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
pipe(&(0x7f0000000400)={<r1=>0xffffffffffffffff})
r2 = creat(&(0x7f0000000440)='./file0\x00', 0x20)
splice(r1, 0x0, r2, 0x0, 0x8000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m36.890933306s ago: executing program 5 (id=1884):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x20440, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000440))
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0)
syz_usb_connect$uac3(0x1, 0x10a, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x2, 0x24, 0x10, 0xff}, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "b5fa090a37be6b024800136a30797ea0"}]}, 0x2, [{0xf9, &(0x7f0000000280)=@string={0xf9, 0x3, "337f530301981035faf92577e3036dd9e2903f40cb4dbe619aac38522d201e2df27fc9f31403bfbcb967c96ace80b6fff7bfb8ee68a5b3c41553f2f2ed927a491103d9b31b62192b7bf438dc5760fb7925a8c7797cf7c806dc5a521774c3d3c3564f785723150e0ceb21d5ae0022ff09c2cc71475d80c68ca70de8e9a108be6f24d2e9118f5e48a5407df217ef9b419cba055a621776729acb29c92d9f379aa2d549c2353c63d901c15fe03aaaf463f835686615bcdc9345ef884532cb44eeb080d30a49e2ea0c87fa22cba200033d60f2b124245096a4fddce0a8bed8313bc9bd008ea3154bf5f60c6565add591f85c4a32addef9ce1d"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x812}}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='\x00\"\"'], 0x0}, 0x0)

1m31.67793964s ago: executing program 5 (id=1890):
fsopen(&(0x7f00000009c0)='pvfs2\x00', 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a00)={0x1, &(0x7f0000000a40)=[{0x6, 0x0, 0x0, 0x7}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
r1 = getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x100)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
pipe(&(0x7f0000000400)={<r2=>0xffffffffffffffff})
r3 = creat(&(0x7f0000000440)='./file0\x00', 0x20)
splice(r2, 0x0, r3, 0x0, 0x8000, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m29.546305745s ago: executing program 5 (id=1894):
clock_gettime(0x7, &(0x7f00000009c0))
io_setup(0x6, &(0x7f00000000c0))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0))
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r4)
getsockname$packet(r4, &(0x7f0000000580)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000100)=@newtfilter={0xe0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xefe58de28999decf}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x8c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x8}, {0x2, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xfc, 0x2, 0x101}, {0x6b, 0x2, 0x2, 'X~'}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xa, 0x2, 0x6}, {0x100, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfffa, 0x8, 0x9}, {0x0, 0x4, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0xb}}, @TCA_FLOW_XOR={0x8, 0x7, 0x28000}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xf}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x16bc}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x2}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000004a80)='./mnt\x00', 0x1ff)
mount(&(0x7f0000004ac0)=@filename='ubi0_0\x00', &(0x7f0000004b00)='./mnt\x00', &(0x7f0000004b40)='ubifs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004b80)='./file1\x00', 0x542, 0x0)
pwritev2(r6, &(0x7f0000004bc0)=[{&(0x7f0000004c00)=')', 0x1}], 0x1, 0x2, 0x0, 0xa1)
ioctl$KVM_CAP_X86_GUEST_MODE(r6, 0x4068aea3, &(0x7f0000004c40))
sendmsg$nl_route_sched(r1, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x20, {0x0, 0x0, 0x74, r5, {0x0, 0x3}, {0x4, 0xb}, {0x9, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x30000080)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000004d80)={r7, r1, 0x2, 0x6d, &(0x7f0000004e40)="b775b5434e25982c793d33b023a8f9a4884f568f7ffe678b464aae307aab16194f44d1e2205868a6d0a0a1e959dc2a76778a8a36e2088ed398eb3395ee8feb1a5e109f17762b56545eee22de2f35a8297836e7065c4fab9dd5d7ecf129b3e1ec7f202850a322c0c621a6728ccb", 0x1, 0x8, 0xd, 0x7, 0x1ff, 0x0, 0x1, 'syz1\x00'})
mount$9p_virtio(&(0x7f0000004ec0), &(0x7f0000004f00)='.\x00', &(0x7f0000004f40), 0x4, &(0x7f0000004f80)=ANY=[@ANYBLOB='trans=virtio,cache=0x00'])

1m29.276105681s ago: executing program 9 (id=1895):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0007005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000580)}}], 0x1, 0xa6, 0x0)

1m25.837578524s ago: executing program 9 (id=1897):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000040)={0x0, <r1=>0x0, 0x9})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000880)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0xfe, 0x7fff2006}]})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000140), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000180)={0x20004, <r4=>r2})
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000200)={<r6=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)={r6})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000280)={<r7=>0x0})
r8 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000340)={0xf30d, 0x0, 0xb4})
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xff, 0xfe, 0x7fff0006}]})
r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000440)={0x20004, <r11=>r9})
r12 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r12, 0xc00c642e, &(0x7f00000004c0)={<r13=>0x0, 0x0, r11})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000500)={r13})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000540)={<r14=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000580)={<r15=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000005c0)={<r16=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000600)={<r17=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={<r18=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000680)={<r19=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000006c0)={<r20=>0x0})
ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r0, 0xc0186443, &(0x7f0000000800)={r1, 0x0, {0x30, 0x2, &(0x7f0000000940)=[{0x10000000, r6, 0x0, 0x7, 0x1, {0x10, 0x3, &(0x7f00000002c0)=[{0x0, r7}, {0xff, 0x0, 0xe}, {0x1, 0x0, 0x9}]}}, {0x0, r13, 0x7, 0x1, 0xfffffffffffffff7, {0x10, 0x8, &(0x7f0000000700)=[{0xff, r14, 0x10}, {0x1, r15, 0x1}, {0x0, r16, 0xfd2}, {0xff, r17, 0x3}, {0x1, r18, 0xffffffff}, {0x0, r19, 0x7fff}, {0x0, r20, 0x1d}, {0x1, 0x0, 0x7}]}}]}})

1m23.773871519s ago: executing program 5 (id=1899):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xea}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x0, 0xf}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f00000001c0)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r1 = getpgrp(0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e04003100002200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000008000000080486"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0)
read$msr(r4, &(0x7f00000005c0)=""/102392, 0x18ff8)
syz_open_dev$MSR(&(0x7f00000000c0), 0x5, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000019740)=[{&(0x7f0000019780)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1)

1m23.689506972s ago: executing program 9 (id=1900):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1f, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00704642db121fbe06f11492"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r3, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1f90, @empty}}, 0x24)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r4, &(0x7f0000000400)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1f90, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/net/rxrpc/conns\x00', 0x0, 0x0)
read(r5, &(0x7f0000000680), 0x1000)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x20, 0xe}, 0x0, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xfd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001ac0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="40000800000095439bf7ee5f5d4b17ef75feb9faf9c4cef8354691ce3df208e9d4ec071aefe0ae92bd4de683ec6e137ad868ff25884c8cbbfc68dc3ebd913932bc5339f79a5e50ff451d299641505ded38e2c4aabfd882d5e1dfd6104ba38c64cdfe2fe8821dc5b91381b43343f38b3355668fb6abe9840664c69ba9930cc937028ec754b2935d93529de99c2f36a8c8a138a223cb840bbeca43b3eeccb16e7cc1c1ff87ed386c5f3e964305842a38f702ac23c561b6e6bb97d0361899fcc9d7b06af1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x82, 0x2)
ioctl$HIDIOCGRDESC(r6, 0x4004480d, 0x0)

1m18.990982006s ago: executing program 9 (id=1906):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000280)="310000000700aaaaaaaaaa1000", 0xd)

1m18.505097171s ago: executing program 9 (id=1908):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090)

1m18.049987561s ago: executing program 9 (id=1912):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
shutdown(r0, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1ff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000400))
clock_adjtime(0x0, &(0x7f0000000440)={0x8003ff, 0x7, 0x23e654d4, 0xa, 0x1000, 0xffc99a3b, 0x0, 0x0, 0x200, 0x100, 0x0, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3, 0x0, 0xffffffff})
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r2, &(0x7f0000000280)='8', 0x1)
unshare(0x40040400)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1)
readlink(&(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)=""/252, 0xfc)
ioctl$TCGETA(r1, 0x89f0, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x1)
r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000780)={0x0})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/asound/seq/clients\x00', 0x0, 0x0)
bind$inet(r4, &(0x7f0000000540)={0x2, 0x4e24, @empty}, 0x10)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r6, &(0x7f0000000580)={0xa, 0x4e24, 0x103, @empty}, 0x1c)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/icmp\x00')
preadv(r7, &(0x7f0000000600)=[{&(0x7f0000000640)=""/156, 0x9c}], 0x1, 0x14, 0x9)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x20000000)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280000001114090a25bd7000fdff0100080001000000000008004b001300000008004a0000000000760891b7c637152b9c1add2468abe2bbd60474abfeb4ab850c3f1d52e5a7bf0826aca9a7"], 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x0)

1m16.073482351s ago: executing program 5 (id=1913):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0)
r4 = syz_io_uring_setup(0xefd, &(0x7f00000003c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, &(0x7f0000000480)=<r5=>0x0, &(0x7f00000004c0)=<r6=>0x0)
syz_io_uring_submit(0x0, r5, r6, &(0x7f0000000500)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x35, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r7, &(0x7f0000000680)='mydomain / 64\n', 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80)
write(r8, &(0x7f00000007c0)='mydomain / 64\n', 0xe)
io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x402, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x10})
r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000880)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r10, &(0x7f00000008c0)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265"], 0xaf)
r11 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x8c2)

1m2.183955919s ago: executing program 38 (id=1912):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
shutdown(r0, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1ff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000400))
clock_adjtime(0x0, &(0x7f0000000440)={0x8003ff, 0x7, 0x23e654d4, 0xa, 0x1000, 0xffc99a3b, 0x0, 0x0, 0x200, 0x100, 0x0, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3, 0x0, 0xffffffff})
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r2, &(0x7f0000000280)='8', 0x1)
unshare(0x40040400)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1)
readlink(&(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)=""/252, 0xfc)
ioctl$TCGETA(r1, 0x89f0, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x1)
r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000780)={0x0})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/asound/seq/clients\x00', 0x0, 0x0)
bind$inet(r4, &(0x7f0000000540)={0x2, 0x4e24, @empty}, 0x10)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r6, &(0x7f0000000580)={0xa, 0x4e24, 0x103, @empty}, 0x1c)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/icmp\x00')
preadv(r7, &(0x7f0000000600)=[{&(0x7f0000000640)=""/156, 0x9c}], 0x1, 0x14, 0x9)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x20000000)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280000001114090a25bd7000fdff0100080001000000000008004b001300000008004a0000000000760891b7c637152b9c1add2468abe2bbd60474abfeb4ab850c3f1d52e5a7bf0826aca9a7"], 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x0)

1m0.701678607s ago: executing program 39 (id=1913):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0)
r4 = syz_io_uring_setup(0xefd, &(0x7f00000003c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, &(0x7f0000000480)=<r5=>0x0, &(0x7f00000004c0)=<r6=>0x0)
syz_io_uring_submit(0x0, r5, r6, &(0x7f0000000500)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x35, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r7, &(0x7f0000000680)='mydomain / 64\n', 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80)
write(r8, &(0x7f00000007c0)='mydomain / 64\n', 0xe)
io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x402, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x10})
r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000880)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r10, &(0x7f00000008c0)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265"], 0xaf)
r11 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x8c2)

5.429873495s ago: executing program 8 (id=2245):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000005b80), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000005c40)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0x1b}}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000005c80)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, 0xffffffffffffffff, 0x1}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000005d00)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xc}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000005d40)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10)

5.1778904s ago: executing program 8 (id=2249):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0)

4.987953088s ago: executing program 8 (id=2253):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010097"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20)

4.761530226s ago: executing program 8 (id=2257):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003002000000014000000110001"], 0xec}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001880)={'syzkaller1\x00', 0x5001})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000018c0)={'syzkaller1\x00', 0x1})
write$tun(r1, &(0x7f0000001900)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76)

4.477523046s ago: executing program 8 (id=2260):
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000009a40)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000009a80)='./debug\x00', &(0x7f0000009ac0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000009b00)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000009b40)='1', 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000009b80), 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000009d80), r2)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000009d00)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000009d40)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

4.211685451s ago: executing program 0 (id=2262):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x5, 0x4e, &(0x7f000000b280)=ANY=[], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f000000b2c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f000000b300)='./dev\x00', &(0x7f000000b340)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000b380)='./dev/ttyUSB0\x00', 0x0, 0x60)
ioctl$TIOCMGET(r0, 0x5415, 0x0)

3.420510028s ago: executing program 3 (id=2269):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200), 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)='0', 0x1)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x10000, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x1, 0x4000001, 0x206, 0x6}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x94}, 0x24040084)

3.2326106s ago: executing program 3 (id=2271):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socket(0x11, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000180)={0x1000000})
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0xfffffffe}}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000200)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2})
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000002c0)={0x10000, 0x1000000, 0x8})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000000})
syz_open_dev$ndb(0x0, 0x0, 0x20800)
close(r2)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, 0x0, 0x4048004)
socket$packet(0x11, 0x2, 0x300)
syz_open_procfs(0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2.711344729s ago: executing program 4 (id=2274):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x24}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a", 0x23}], 0x1}, 0x0)

2.564511909s ago: executing program 6 (id=2275):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0)

2.221060164s ago: executing program 6 (id=2276):
socket$kcm(0x21, 0x2, 0xa)
socket$kcm(0x21, 0x2, 0xa)
socket$kcm(0x21, 0x2, 0xa)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000001600010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800038014000100766501000000746f5f626f6e640000000800074000000001"], 0xd8}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)

2.138984469s ago: executing program 4 (id=2277):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)

1.985836269s ago: executing program 6 (id=2278):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)='D', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x8d7, 0x9, 0x7ff, 0xf5e, 0x4, 0x7, 0x24a3, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0xfffffff8, 0x401, 0x4, 0x6, 0x37e4dcea}}, &(0x7f0000000400)=0xb0)

1.776795179s ago: executing program 3 (id=2279):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000)

1.589602355s ago: executing program 4 (id=2280):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0)
write(r0, &(0x7f0000000e40)='naa.', 0x4)
write(r0, &(0x7f0000000e80)='NULL', 0x4)

1.417266757s ago: executing program 6 (id=2281):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200), 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)='0', 0x1)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x10000, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x1, 0x4000001, 0x206, 0x6}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x94}, 0x24040084)

1.337756549s ago: executing program 4 (id=2282):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd47, &(0x7f0000000400)={&(0x7f0000005a00)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f0000005ac0)=@newtfilter={0x40, 0x2c, 0x601, 0x4000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x8, 0xffff}, {0x300, 0x9702fd4b6861288c}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x40}}, 0x8000)
mkdirat(0xffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffff9c, &(0x7f0000000380)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(r3, &(0x7f0000005f00)='zstd', 0x4)
io_setup(0x8, &(0x7f0000000000)=<r4=>0x0)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x101002)
io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000180)="01", 0x400000}])
r6 = openat(0xffffffffffffff9c, &(0x7f0000005f40)='./cgroup.cpu/memory.force_empty\x00', 0x40082, 0x1)
write(r6, &(0x7f0000005f80)='0', 0x1)

1.260385589s ago: executing program 3 (id=2283):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

1.180735552s ago: executing program 6 (id=2284):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000100)=[{0x0}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0)

1.048478427s ago: executing program 0 (id=2285):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000240)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x84)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, 0x0)

1.000076983s ago: executing program 3 (id=2286):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003002000000014000000110001"], 0xec}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000018c0)={'syzkaller1\x00', 0x1})
write$tun(r1, &(0x7f0000001900)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76)

748.985594ms ago: executing program 0 (id=2287):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x10c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8040)

557.193127ms ago: executing program 8 (id=2288):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/arp\x00')
preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000340)=""/233, 0xe9}], 0x1, 0xa6, 0x0)
setresuid(0x0, 0xee00, 0x0)

414.583603ms ago: executing program 0 (id=2289):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000005c0)={0xc})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, 0x0)

345.822284ms ago: executing program 3 (id=2290):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc0000000000aaff02000000000000000000000000000185baaa20dd0fb1fa00907800000000b847"], 0x3e)
write$tun(r0, &(0x7f0000000580)=ANY=[], 0xfdef)

287.461548ms ago: executing program 4 (id=2291):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)='D', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x8d7, 0x9, 0x7ff, 0xf5e, 0x4, 0x7, 0x24a3, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0xfffffff8, 0x401, 0x4, 0x6, 0x37e4dcea}}, &(0x7f0000000400)=0xb0)

221.17783ms ago: executing program 6 (id=2292):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='+p', 0x2)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000c40)='./config\x00', &(0x7f0000000c80)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff)

213.135871ms ago: executing program 0 (id=2293):
openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0)

15.103194ms ago: executing program 4 (id=2294):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200), 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)='0', 0x1)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x10000, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x1, 0x4000001, 0x206, 0x6}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x94}, 0x24040084)

0s ago: executing program 0 (id=2295):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
ioctl(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000fc0)="0100")

kernel console output (not intermixed with test programs):

-speed USB device number 22 using dummy_hcd
[ 1013.924876][T13437] rxe_eth0 speed is unknown, defaulting to 1000
[ 1013.938743][ T2259] usb 10-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[ 1013.964586][ T2259] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1013.964604][ T2259] usb 10-1: Product: syz
[ 1013.964623][ T2259] usb 10-1: Manufacturer: syz
[ 1013.964632][ T2259] usb 10-1: SerialNumber: syz
[ 1014.280662][ T2259] usb 10-1: config 0 descriptor??
[ 1014.658946][ T2259] gspca_main: sq905c-2.14.0 probing 2770:9052
[ 1015.721594][ T2259] gspca_sq905c: sq905c_read: usb_control_msg failed (-110)
[ 1015.721610][ T2259] sq905c 10-1:0.0: Reading version command failed
[ 1015.721670][ T2259] sq905c 10-1:0.0: probe with driver sq905c failed with error -110
[ 1015.794638][ T5729] usb 10-1: USB disconnect, device number 22
[ 1016.035692][T13466] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1855'.
[ 1016.074436][T13466] UBIFS error (pid: 13466): cannot open "ubi0_0", error -19
[ 1016.107331][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1855'.
[ 1016.126456][   T29] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1020 jiffies old.
[ 1016.188060][T13467] 9pnet_virtio: no channels available for device syz
[ 1016.913587][T13437] lo speed is unknown, defaulting to 1000
[ 1016.930059][T13437] lo speed is unknown, defaulting to 1000
[ 1020.610958][   T31] audit: type=1400 audit(1792247785.082:1150): avc:  denied  { write } for  pid=13471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1022.635662][T13501] netlink: 'syz.9.1862': attribute type 2 has an invalid length.
[ 1022.685632][   T31] audit: type=1400 audit(1792247787.152:1151): avc:  denied  { map } for  pid=13510 comm="syz.5.1863" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1022.724920][T13511] VFS: Can't find a romfs filesystem on dev mtdblock0.
[ 1022.724920][T13511] 
[ 1022.725263][   T31] audit: type=1400 audit(1792247787.192:1152): avc:  denied  { mounton } for  pid=13510 comm="syz.5.1863" path="/322/dev/mtdblock0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1022.916178][ T9349] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1022.938692][   T31] audit: type=1400 audit(1792247787.412:1153): avc:  denied  { write } for  pid=13519 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1023.093029][ T9349] usb 9-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[ 1023.221051][ T9349] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[ 1023.221084][ T9349] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1023.221119][ T9349] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.656813][ T9349] usb 9-1: config 0 descriptor??
[ 1026.818398][T13516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1026.818735][T13516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1026.852140][T13532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1867'.
[ 1026.909622][ T9349] input: HID 0b05:19b6 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0B05:19B6.003A/input/input64
[ 1026.942780][T13532] UBIFS error (pid: 13532): cannot open "ubi0_0", error -19
[ 1026.948491][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1026.949089][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1867'.
[ 1027.055320][T13534] 9pnet_virtio: no channels available for device syz
[ 1027.223591][ T5729] asus 0003:0B05:19B6.003A: Asus failed to set fn lock: -71
[ 1027.474960][ T9349] asus 0003:0B05:19B6.003A: input,hidraw0: USB HID v0.00 Joystick [HID 0b05:19b6] on usb-dummy_hcd.8-1/input0
[ 1027.683948][ T9349] usb 9-1: USB disconnect, device number 30
[ 1028.160484][T13545] fido_id[13545]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[ 1030.234821][T13035] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1030.251706][T13035] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1030.252477][T13035] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1030.280267][T13035] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1030.281063][T13035] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1030.536310][T13556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1873'.
[ 1030.600457][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1874'.
[ 1030.630256][T13556] UBIFS error (pid: 13556): cannot open "ubi0_0", error -19
[ 1030.645024][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1873'.
[ 1030.672379][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1874'.
[ 1030.792452][T13556] 9pnet_virtio: no channels available for device syz
[ 1030.964589][   T31] audit: type=1804 audit(1792247795.432:1154): pid=13575 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1876" name="/newroot/223/file0" dev="tmpfs" ino=1268 res=1 errno=0
[ 1031.088229][   T31] audit: type=1400 audit(1792247795.562:1155): avc:  denied  { write } for  pid=13580 comm="syz.8.1877" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1031.148305][T13581] device-mapper: ioctl: name not supplied when creating device
[ 1031.148364][   T31] audit: type=1400 audit(1792247795.622:1156): avc:  denied  { ioctl } for  pid=13580 comm="syz.8.1877" path="/136/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1032.556403][ T8277] Bluetooth: hci4: command tx timeout
[ 1034.723821][ T8277] Bluetooth: hci4: command tx timeout
[ 1035.033061][   T31] audit: type=1400 audit(1792247799.502:1157): avc:  denied  { write } for  pid=13557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1035.088178][   T31] audit: type=1326 audit(1792247799.562:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.5.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f111119e559 code=0x0
[ 1035.210908][   T31] audit: type=1400 audit(1792247799.682:1159): avc:  denied  { execute } for  pid=13602 comm="syz.6.1881" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1036.726096][ T8277] Bluetooth: hci4: command tx timeout
[ 1037.359695][T13613] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1882'.
[ 1037.411208][T13610] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1037.415208][   T31] audit: type=1400 audit(1792247801.882:1160): avc:  denied  { read } for  pid=13602 comm="syz.6.1881" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1037.472382][T13606] UBIFS error (pid: 13606): cannot open "ubi0_0", error -19
[ 1037.474214][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1882'.
[ 1037.499966][T13606] 9pnet_virtio: no channels available for device syz
[ 1037.591357][   T10] usb 3-1: USB disconnect, device number 92
[ 1037.681581][T13562] rxe_eth0 speed is unknown, defaulting to 1000
[ 1037.697855][   T31] audit: type=1400 audit(1792247802.152:1161): avc:  denied  { write } for  pid=13614 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1038.045351][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1038.089292][   T10] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1038.236333][ T9349] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1038.816268][ T8277] Bluetooth: hci4: command tx timeout
[ 1038.966324][   T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1039.021959][ T9349] usb 9-1: Using ep0 maxpacket: 32
[ 1039.059293][ T9349] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1039.241045][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1039.241082][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1039.241115][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1039.513460][ T9349] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1039.513501][ T9349] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1039.513529][ T9349] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1039.513552][ T9349] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1039.513568][ T9349] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1039.513596][ T9349] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1039.868249][ T9349] usb 9-1: config 0 descriptor??
[ 1039.871401][   T10] usb 6-1: config 0 descriptor??
[ 1040.022263][T13627] pimreg: entered allmulticast mode
[ 1040.084291][T13621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1040.084705][T13621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1040.377103][T13638] jffs2: notice: (13638) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (1 unchecked, 7 orphan) and 14 of xref (0 dead, 13 orphan) found.
[ 1040.381322][   T31] audit: type=1400 audit(1792247804.852:1162): avc:  denied  { write } for  pid=13637 comm="syz.9.1888" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1040.381375][   T31] audit: type=1400 audit(1792247804.852:1163): avc:  denied  { write } for  pid=13637 comm="syz.9.1888" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1040.381567][ T2259] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1040.483239][   T10] savu 0003:1E7D:2D5A.003B: unknown main item tag 0x0
[ 1040.483274][   T10] savu 0003:1E7D:2D5A.003B: unknown main item tag 0x0
[ 1040.483298][   T10] savu 0003:1E7D:2D5A.003B: unknown main item tag 0x0
[ 1040.483324][   T10] savu 0003:1E7D:2D5A.003B: unknown main item tag 0x0
[ 1040.483349][   T10] savu 0003:1E7D:2D5A.003B: unknown main item tag 0x0
[ 1040.483364][   T10] savu 0003:1E7D:2D5A.003B: unknown main item tag 0x0
[ 1040.483389][   T10] savu 0003:1E7D:2D5A.003B: unknown main item tag 0x0
[ 1040.483405][   T10] savu 0003:1E7D:2D5A.003B: unknown main item tag 0x0
[ 1040.483428][   T10] savu 0003:1E7D:2D5A.003B: unknown main item tag 0x0
[ 1040.483453][   T10] savu 0003:1E7D:2D5A.003B: unknown main item tag 0x0
[ 1040.595343][   T10] savu 0003:1E7D:2D5A.003B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[ 1040.617547][ T9349] hid-thrustmaster 0003:044F:B65D.003C: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.8-1/input0
[ 1040.617802][ T9349] hid-thrustmaster 0003:044F:B65D.003C: Wrong number of endpoints?
[ 1040.656585][ T2259] usb 7-1: Using ep0 maxpacket: 8
[ 1040.657768][ T2259] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1040.658997][ T2259] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1040.659045][ T2259] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1040.659069][ T2259] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1040.659093][ T2259] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1040.659108][ T2259] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1040.659140][ T2259] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1040.844217][T13562] lo speed is unknown, defaulting to 1000
[ 1040.866759][T13562] lo speed is unknown, defaulting to 1000
[ 1041.048823][ T2259] usb 7-1: GET_CAPABILITIES returned 0
[ 1041.048879][ T2259] usbtmc 7-1:16.0: can't read capabilities
[ 1041.184847][   T10] usb 6-1: USB disconnect, device number 66
[ 1041.305573][T13645] fido_id[13645]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1041.394072][   T31] audit: type=1400 audit(1792247805.862:1164): avc:  denied  { setopt } for  pid=13625 comm="syz.6.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1042.515285][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.515552][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.515582][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.515608][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.515634][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.515850][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.515877][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.515903][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.516204][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.516233][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.521012][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.521232][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.521257][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.521279][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.521305][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1042.521327][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1043.673743][    C0] hid-thrustmaster 0003:044F:B65D.003C: URB to get model id failed with error -71
[ 1043.674080][   T10] usb 9-1: USB disconnect, device number 31
[ 1043.805950][ T2259] usb 7-1: USB disconnect, device number 44
[ 1043.840801][   T31] audit: type=1326 audit(1792247808.312:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.5.1890" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f111119e559 code=0x0
[ 1044.427567][   T31] audit: type=1326 audit(1792247808.902:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13666 comm="syz.6.1893" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f119a39e559 code=0x0
[ 1044.466268][ T5729] usb 9-1: new full-speed USB device number 32 using dummy_hcd
[ 1044.517556][   T31] audit: type=1804 audit(1792247808.992:1167): pid=13665 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.1891" name="/newroot/124/file0" dev="tmpfs" ino=722 res=1 errno=0
[ 1044.621138][   T31] audit: type=1400 audit(1792247809.092:1168): avc:  denied  { write } for  pid=13636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1044.665406][ T5729] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[ 1044.680631][ T5729] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1044.680675][ T5729] usb 9-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[ 1044.685121][ T5729] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.685136][ T5729] usb 9-1: Product: syz
[ 1044.685189][ T5729] usb 9-1: Manufacturer: syz
[ 1044.685199][ T5729] usb 9-1: SerialNumber: syz
[ 1047.245560][   T31] audit: type=1400 audit(1792247811.712:1169): avc:  denied  { write } for  pid=13682 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1048.346893][T13681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1894'.
[ 1048.389963][T13690] netdevsim netdevsim6: Firmware load for './cgroup/../file0' refused, path contains '..' component
[ 1048.391916][ T5729] snd-usb-caiaq 9-1:1.0: can't set alt interface.
[ 1048.391928][ T5729] usb 9-1: unable to init card! (ret=-5)
[ 1048.392253][ T5729] snd-usb-caiaq 9-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[ 1048.473263][ T5729] usb 9-1: USB disconnect, device number 32
[ 1048.517425][T13681] UBIFS error (pid: 13681): cannot open "ubi0_0", error -19
[ 1048.518491][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1894'.
[ 1048.613945][T13683] 9pnet_virtio: no channels available for device syz
[ 1048.789184][ T2259] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1049.577406][ T2259] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[ 1049.861821][ T2259] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1049.861850][ T2259] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1049.861901][ T2259] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1050.079982][ T2259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1050.080010][ T2259] usb 7-1: Product: syz
[ 1050.080019][ T2259] usb 7-1: Manufacturer: syz
[ 1050.080028][ T2259] usb 7-1: SerialNumber: syz
[ 1050.399126][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1050.442436][T13562] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1050.442600][T13562] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1050.442771][T13562] bridge_slave_0: entered allmulticast mode
[ 1050.492978][T13562] bridge_slave_0: entered promiscuous mode
[ 1050.505832][T13562] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1050.505919][T13562] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1050.521484][T13562] bridge_slave_1: entered allmulticast mode
[ 1050.538957][T13562] bridge_slave_1: entered promiscuous mode
[ 1050.560646][ T2259] usb 7-1: can't set config #1, error -71
[ 1050.579780][ T2259] usb 7-1: USB disconnect, device number 45
[ 1050.744288][T13562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1050.763910][T13562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1050.901045][T13709] jffs2: notice: (13709) jffs2_build_xattr_subsystem: complete building xattr subsystem, 9 of xdatum (1 unchecked, 7 orphan) and 16 of xref (0 dead, 13 orphan) found.
[ 1050.909138][   T31] audit: type=1400 audit(1792247815.382:1170): avc:  denied  { write } for  pid=13708 comm="syz.6.1901" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1050.986587][ T5729] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1050.986733][ T8255] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1050.990367][T13562] team0: Port device team_slave_0 added
[ 1051.025151][T13562] team0: Port device team_slave_1 added
[ 1051.156932][ T8255] usb 6-1: Using ep0 maxpacket: 32
[ 1051.160674][ T8255] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[ 1051.161880][T13562] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1051.161889][T13562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1051.166534][T13562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1051.166772][ T5729] usb 10-1: Using ep0 maxpacket: 16
[ 1051.172744][ T8255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1051.172774][ T8255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1051.172808][ T8255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1051.174110][ T5729] usb 10-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[ 1051.297922][ T8255] usb 6-1: config 0 descriptor??
[ 1051.298670][T13706] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1051.298903][ T5729] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1051.298926][ T5729] usb 10-1: config 0 has no interface number 0
[ 1051.298959][ T5729] usb 10-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1051.298984][ T5729] usb 10-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1051.298997][ T5729] usb 10-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1051.299022][ T5729] usb 10-1: config 0 interface 1 has no altsetting 0
[ 1051.299050][ T5729] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1051.338980][T13562] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1051.339000][T13562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1051.339015][T13562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1051.408282][ T5729] usb 10-1: config 0 descriptor??
[ 1051.491515][ T5729] usbhid 10-1:0.1: fixing wrong optional hid class descriptors count
[ 1051.707700][T13562] hsr_slave_0: entered promiscuous mode
[ 1051.710699][T13562] hsr_slave_1: entered promiscuous mode
[ 1051.731026][T13562] debugfs: 'hsr0' already exists in 'hsr'
[ 1051.731063][T13562] Cannot create hsr debugfs directory
[ 1051.774112][ T8255] hid_parser_main: 29 callbacks suppressed
[ 1051.774136][ T8255] logitech 0003:046D:CA03.003D: unknown main item tag 0x0
[ 1051.774155][ T8255] logitech 0003:046D:CA03.003D: unknown main item tag 0x0
[ 1051.774180][ T8255] logitech 0003:046D:CA03.003D: unknown main item tag 0x0
[ 1051.774216][ T8255] logitech 0003:046D:CA03.003D: unknown main item tag 0x0
[ 1051.774241][ T8255] logitech 0003:046D:CA03.003D: unknown main item tag 0x0
[ 1051.774265][ T8255] logitech 0003:046D:CA03.003D: unknown main item tag 0x0
[ 1051.774281][ T8255] logitech 0003:046D:CA03.003D: unknown main item tag 0x0
[ 1051.774305][ T8255] logitech 0003:046D:CA03.003D: unknown main item tag 0x0
[ 1051.774329][ T8255] logitech 0003:046D:CA03.003D: unknown main item tag 0x0
[ 1051.774363][ T8255] logitech 0003:046D:CA03.003D: unknown main item tag 0x0
[ 1051.900662][ T8255] logitech 0003:046D:CA03.003D: hidraw0: USB HID v7f.fd Device [HID 046d:ca03] on usb-dummy_hcd.5-1/input0
[ 1051.900720][ T8255] logitech 0003:046D:CA03.003D: no inputs found
[ 1051.983545][ T5729] elan 0003:04F3:074D.003E: failed to start in urb: -90
[ 1052.010331][T13706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1052.010701][T13706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1052.185844][   T31] audit: type=1326 audit(1792247816.652:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.8.1905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5c639e559 code=0x0
[ 1054.489187][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.489251][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.115504][ T8255] usb 6-1: USB disconnect, device number 67
[ 1055.185090][ T5729] elan 0003:04F3:074D.003E: Get report error for parm 6: -71
[ 1055.218570][ T5729] elan 0003:04F3:074D.003E: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.9-1/input1
[ 1055.218612][ T5729] elan 0003:04F3:074D.003E: Input device is not registered
[ 1055.256528][T13723] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1904'.
[ 1055.298674][ T5729] elan 0003:04F3:074D.003E: probe with driver elan failed with error -119
[ 1055.321382][ T5729] usb 10-1: USB disconnect, device number 23
[ 1055.335352][T13727] fido_id[13727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1055.393633][T13723] UBIFS error (pid: 13723): cannot open "ubi0_0", error -19
[ 1055.396945][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1904'.
[ 1055.484248][T13728] 9pnet_virtio: no channels available for device syz
[ 1055.838090][T13738] fido_id[13738]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1056.038804][T13749] binder: 13747:13749 ioctl c0046209 0 returned -22
[ 1058.000276][   T31] audit: type=1400 audit(1792247822.472:1172): avc:  denied  { write } for  pid=13717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1058.138137][   T31] audit: type=1400 audit(1792247822.602:1173): avc:  denied  { shutdown } for  pid=13757 comm="syz.9.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 1069.510727][   T31] audit: type=1400 audit(1792248089.934:1174): avc:  denied  { write } for  pid=13761 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1069.989921][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1070.186453][T13562] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1070.215924][T13562] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1070.216630][T13562] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1070.221466][T13562] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1070.222122][T13562] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1070.225673][T13562] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1070.227610][T13562] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1070.231830][T13562] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1070.588192][T13562] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1070.611139][T13562] 8021q: adding VLAN 0 to HW filter on device team0
[ 1070.641714][T13562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1070.641743][T13562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1070.656309][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1070.657073][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1070.658577][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1070.658642][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1071.230500][ T8255] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1071.348872][T13562] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1071.376477][T13562] veth0_vlan: entered promiscuous mode
[ 1071.382121][T13562] veth1_vlan: entered promiscuous mode
[ 1071.398023][T13562] veth0_macvtap: entered promiscuous mode
[ 1071.400976][T13562] veth1_macvtap: entered promiscuous mode
[ 1071.411187][T13562] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1071.414281][T13562] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1071.479623][   T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.479746][   T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.479852][   T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.479965][   T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.532512][ T8255] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1071.623100][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1071.623139][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1071.624667][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1071.624680][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1071.675700][ T8255] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1071.675731][ T8255] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[ 1071.675743][ T8255] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1071.675779][ T8255] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12408, setting to 64
[ 1071.693545][ T8255] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1071.693564][ T8255] usb 7-1: Product: syz
[ 1071.693583][ T8255] usb 7-1: Manufacturer: syz
[ 1071.978987][ T8255] cdc_wdm 7-1:1.0: skipping garbage
[ 1071.979001][ T8255] cdc_wdm 7-1:1.0: skipping garbage
[ 1071.979062][ T8255] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1072.176990][T13035] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1072.197843][ T8255] usb 7-1: USB disconnect, device number 46
[ 1072.246245][T13035] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1072.247126][T13035] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1072.248548][T13035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1072.282959][T13035] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1072.452473][   T31] audit: type=1400 audit(1792248092.935:1175): avc:  denied  { write } for  pid=13779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1072.790855][   T31] audit: type=1400 audit(1792248093.275:1176): avc:  denied  { write } for  pid=13821 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1073.117504][T13809] rxe_eth0 speed is unknown, defaulting to 1000
[ 1073.240167][T13809] lo speed is unknown, defaulting to 1000
[ 1073.241257][T13809] lo speed is unknown, defaulting to 1000
[ 1073.502434][ T6669] process 7746 (syz.5.401) no longer affine to cpu1
[ 1073.502477][ T6669] process 7832 (syz.5.427) no longer affine to cpu1
[ 1073.851844][T13809] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1073.851939][T13809] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1073.852037][T13809] bridge_slave_0: entered allmulticast mode
[ 1073.853347][T13809] bridge_slave_0: entered promiscuous mode
[ 1073.883464][T13809] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1073.883534][T13809] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1073.883647][T13809] bridge_slave_1: entered allmulticast mode
[ 1073.884867][T13809] bridge_slave_1: entered promiscuous mode
[ 1073.940159][T13809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1073.942540][T13809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1073.988061][T13809] team0: Port device team_slave_0 added
[ 1074.000754][T13809] team0: Port device team_slave_1 added
[ 1074.025177][T13809] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1074.025188][T13809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1074.025212][T13809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1074.026878][T13809] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1074.026887][T13809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1074.026911][T13809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1074.161488][T13809] hsr_slave_0: entered promiscuous mode
[ 1074.162187][T13809] hsr_slave_1: entered promiscuous mode
[ 1074.162713][T13809] debugfs: 'hsr0' already exists in 'hsr'
[ 1074.162736][T13809] Cannot create hsr debugfs directory
[ 1074.433833][T13809] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.503857][T13809] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.509420][T13035] Bluetooth: hci2: command tx timeout
[ 1074.551648][T13809] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.620387][T13809] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.641931][    C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[ 1074.780722][T13809] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1074.838134][T13809] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1074.838781][T13809] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1074.843379][T13809] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1074.845118][T13809] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1074.847887][T13809] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1074.849061][T13809] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1074.851245][T13809] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1074.996990][ T8277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1075.010551][ T8277] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1075.011302][ T8277] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1075.012015][ T8277] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1075.012430][ T8277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1075.347011][T13847] rxe_eth0 speed is unknown, defaulting to 1000
[ 1075.470081][T13847] lo speed is unknown, defaulting to 1000
[ 1075.473228][T13847] lo speed is unknown, defaulting to 1000
[ 1075.747812][T13847] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1075.747942][T13847] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1075.748249][T13847] bridge_slave_0: entered allmulticast mode
[ 1075.749534][T13847] bridge_slave_0: entered promiscuous mode
[ 1075.779615][T13847] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1075.779692][T13847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1075.779943][T13847] bridge_slave_1: entered allmulticast mode
[ 1075.781216][T13847] bridge_slave_1: entered promiscuous mode
[ 1075.853668][T13847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1075.855882][T13847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1075.897969][T13847] team0: Port device team_slave_0 added
[ 1075.900329][T13847] team0: Port device team_slave_1 added
[ 1075.933356][T13847] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1075.933375][T13847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1075.933400][T13847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1075.991152][T13847] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1075.991163][T13847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1075.991187][T13847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1076.087029][T13847] hsr_slave_0: entered promiscuous mode
[ 1076.088065][T13847] hsr_slave_1: entered promiscuous mode
[ 1076.088602][T13847] debugfs: 'hsr0' already exists in 'hsr'
[ 1076.088624][T13847] Cannot create hsr debugfs directory
[ 1076.319431][T13847] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.394564][T13847] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.455707][T13847] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.510878][T13847] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.630020][T13847] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1076.634079][T13847] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1076.634679][T13847] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1076.640341][T13847] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1076.640962][T13847] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1076.660227][T13847] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1076.660857][T13847] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1076.663105][T13847] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1076.735415][T13035] Bluetooth: hci2: command tx timeout
[ 1076.893849][T13847] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1076.913501][T13847] 8021q: adding VLAN 0 to HW filter on device team0
[ 1076.947503][T13847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1076.947528][T13847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1077.029993][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1077.030065][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1077.031396][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1077.031461][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1077.103760][T13809] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1077.121906][ T8277] Bluetooth: hci6: command tx timeout
[ 1077.137945][T13809] 8021q: adding VLAN 0 to HW filter on device team0
[ 1077.159003][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1077.159072][ T7431] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1077.160408][ T7431] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1077.160472][ T7431] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1077.233760][T13809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1077.233786][T13809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1077.637798][   T10] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1077.804046][   T10] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1077.804086][   T10] usb 9-1: too many configurations: 9, using maximum allowed: 8
[ 1077.828448][   T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1077.828487][   T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1077.828514][   T10] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1077.888047][   T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1077.888088][   T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1077.888114][   T10] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1077.893329][   T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1077.893366][   T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1077.893392][   T10] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1077.915199][   T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1077.915237][   T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1077.915262][   T10] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1077.928120][   T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1077.928166][   T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1077.928182][   T10] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1077.944296][   T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1077.944333][   T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1077.944359][   T10] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1077.965930][   T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1077.965967][   T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1077.965983][   T10] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1077.986340][   T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1077.986376][   T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1077.986402][   T10] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1078.011148][   T10] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1078.011174][   T10] usb 9-1: Product: syz
[ 1078.011192][   T10] usb 9-1: Manufacturer: syz
[ 1078.011202][   T10] usb 9-1: SerialNumber: syz
[ 1078.013279][   T10] usb 9-1: config 0 descriptor??
[ 1078.023804][   T10] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0
[ 1078.449234][T13809] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1078.504906][T13809] veth0_vlan: entered promiscuous mode
[ 1078.644823][T13847] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1078.694133][T13809] veth1_vlan: entered promiscuous mode
[ 1078.747413][T13809] veth0_macvtap: entered promiscuous mode
[ 1078.751109][T13809] veth1_macvtap: entered promiscuous mode
[ 1078.762719][T13809] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1078.766021][T13809] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1078.806928][ T8277] Bluetooth: hci2: command tx timeout
[ 1078.898673][ T1011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1078.898860][ T1011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1078.898897][ T1011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1078.898929][ T1011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1079.018579][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1079.018603][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1079.081583][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1079.081618][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1079.197429][ T8277] Bluetooth: hci6: command tx timeout
[ 1079.325232][   T31] audit: type=1400 audit(1792248099.808:1177): avc:  denied  { write } for  pid=13849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1079.428762][   T31] audit: type=1400 audit(1792248099.919:1178): avc:  denied  { write } for  pid=13921 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1079.877281][T13847] veth0_vlan: entered promiscuous mode
[ 1079.901299][T13847] veth1_vlan: entered promiscuous mode
[ 1079.940660][T13847] veth0_macvtap: entered promiscuous mode
[ 1079.944450][T13847] veth1_macvtap: entered promiscuous mode
[ 1079.971548][T13847] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1079.988973][T13847] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1080.129372][   T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.155607][   T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.156720][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1080.156732][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1080.156903][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1080.156922][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1080.157636][   T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.160926][   T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.544181][    C0] usb 9-1: yurex_control_callback - control failed: -71
[ 1080.549483][    C0] usb 9-1: yurex_control_callback - control failed: -71
[ 1080.549856][ T1234] usb 9-1: USB disconnect, device number 33
[ 1080.551948][ T1234] yurex 9-1:0.0: USB YUREX #0 now disconnected
[ 1080.802217][   T31] audit: type=1400 audit(1792248101.279:1179): avc:  denied  { write } for  pid=13928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1080.878133][ T8277] Bluetooth: hci2: command tx timeout
[ 1080.923602][   T31] audit: type=1400 audit(1792248101.399:1180): avc:  denied  { write } for  pid=13953 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1081.275498][ T8277] Bluetooth: hci6: command tx timeout
[ 1081.443060][   T31] audit: type=1400 audit(1792248101.920:1181): avc:  denied  { write } for  pid=13962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1081.552817][   T31] audit: type=1400 audit(1792248102.030:1182): avc:  denied  { write } for  pid=13973 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1081.899354][   T31] audit: type=1400 audit(1792248102.380:1183): avc:  denied  { write } for  pid=13975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1082.013301][   T31] audit: type=1400 audit(1792248102.490:1184): avc:  denied  { write } for  pid=13986 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1082.120696][T13943] netlink: 'syz.0.1924': attribute type 1 has an invalid length.
[ 1082.120714][T13943] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1924'.
[ 1083.241773][   T31] audit: type=1400 audit(1792248103.720:1185): avc:  denied  { mount } for  pid=13990 comm="syz.6.1925" name="/" dev="autofs" ino=43608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 1083.353522][ T8277] Bluetooth: hci6: command tx timeout
[ 1084.699547][   T31] audit: type=1400 audit(1792248105.181:1186): avc:  denied  { write } for  pid=13989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1084.898367][T14038] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1085.052752][ T9349] usb 7-1: new full-speed USB device number 47 using dummy_hcd
[ 1085.269210][   T31] audit: type=1400 audit(1792248105.751:1187): avc:  denied  { write } for  pid=14039 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1085.587823][ T7431] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1085.724247][   T31] audit: type=1400 audit(1792248106.212:1188): avc:  denied  { write } for  pid=14050 comm="syz.0.1944" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1085.796804][T14051] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[ 1085.822042][T14051] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem
[ 1086.057723][T13758] syz_tun (unregistering): left allmulticast mode
[ 1086.197582][   T31] audit: type=1400 audit(1792248106.682:1189): avc:  denied  { getopt } for  pid=14059 comm="syz.0.1947" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1086.380312][ T7431] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1086.891520][ T7431] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1087.304686][ T7431] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1087.538438][T14080] bridge_slave_0: left allmulticast mode
[ 1087.538451][T14080] bridge_slave_0: left promiscuous mode
[ 1087.538623][T14080] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1087.628083][T14080] bridge_slave_1: left allmulticast mode
[ 1087.628097][T14080] bridge_slave_1: left promiscuous mode
[ 1087.628383][T14080] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1087.730373][   T31] audit: type=1400 audit(1792248108.213:1190): avc:  denied  { write } for  pid=14061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1087.782322][T14080] bond0: (slave bond_slave_0): Releasing backup interface
[ 1088.082717][T14080] bond0: (slave bond_slave_1): Releasing backup interface
[ 1088.184417][T14080] team0: Port device team_slave_0 removed
[ 1088.190950][   T31] audit: type=1400 audit(1792248108.673:1191): avc:  denied  { getopt } for  pid=14098 comm="syz.3.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1088.246683][T14080] team0: Port device team_slave_1 removed
[ 1088.247448][T14080] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1088.247479][T14080] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1088.287542][T14080] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1088.287563][T14080] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1088.576747][   T31] audit: type=1400 audit(1792248109.063:1192): avc:  denied  { write } for  pid=14102 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1089.049825][ T9349] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1089.049870][ T9349] usb 7-1: too many configurations: 181, using maximum allowed: 8
[ 1089.072174][ T9349] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1089.072194][ T9349] usb 7-1: can't read configurations, error -71
[ 1089.700936][T14123] lo: entered promiscuous mode
[ 1089.711524][ T8255] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1089.786847][T14123] tunl0: entered promiscuous mode
[ 1089.829616][T14123] gre0: entered promiscuous mode
[ 1089.871934][ T8255] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[ 1089.873466][ T8255] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1089.874602][ T8255] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1089.879008][ T8255] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.879020][ T8255] usb 9-1: Product: syz
[ 1089.879039][ T8255] usb 9-1: Manufacturer: syz
[ 1089.879048][ T8255] usb 9-1: SerialNumber: syz
[ 1089.950936][ T8621] net_ratelimit: 45 callbacks suppressed
[ 1089.999452][ T8255] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected
[ 1090.029091][ T8255] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[ 1090.068427][ T8255] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[ 1090.229095][T14123] gretap0: entered promiscuous mode
[ 1090.519337][T14123] erspan0: entered promiscuous mode
[ 1090.524933][T14123] ip_vti0: entered promiscuous mode
[ 1090.593945][T14144] binder: 14142:14144 ioctl c0306201 200000000080 returned -14
[ 1090.686849][T14144] binder: BINDER_SET_CONTEXT_MGR already set
[ 1090.686860][T14144] binder: 14142:14144 ioctl 4018620d 200000004a80 returned -16
[ 1090.723968][T14123] ip6_vti0: entered promiscuous mode
[ 1090.794784][T14123] sit0: entered promiscuous mode
[ 1090.825687][T14123] ip6tnl0: entered promiscuous mode
[ 1090.866989][T14123] ip6gre0: entered promiscuous mode
[ 1090.937777][T14123] bridge0: port 2(syz_tun) entered disabled state
[ 1090.938328][T14123] bridge0: port 2(syz_tun) entered disabled state
[ 1090.995672][   T31] audit: type=1400 audit(1792248111.484:1193): avc:  denied  { write } for  pid=14114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1091.057262][T14123] ip6gretap0: entered promiscuous mode
[ 1091.198866][T14123] bridge0: port 1(batadv0) entered disabled state
[ 1091.251471][T14123] bridge0: entered promiscuous mode
[ 1091.361276][T14123] bond0: entered promiscuous mode
[ 1091.396667][   T31] audit: type=1400 audit(1792248111.885:1194): avc:  denied  { write } for  pid=14151 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1091.458315][T14123] team0: entered promiscuous mode
[ 1091.482026][T14123] batman_adv: batadv0: Interface deactivated: dummy0
[ 1091.482066][T14123] dummy0: entered promiscuous mode
[ 1091.482545][T14123] batman_adv: batadv0: Removing interface: dummy0
[ 1091.483666][T14123] nlmon0: entered promiscuous mode
[ 1091.553173][T14123] batadv0: left allmulticast mode
[ 1091.553386][T14123] bridge0: port 1(batadv0) entered disabled state
[ 1091.602391][T14123] vxcan0: entered promiscuous mode
[ 1091.608609][T14123] vxcan1: entered promiscuous mode
[ 1091.631496][T14123] veth0: entered promiscuous mode
[ 1091.657247][T14123] veth1: entered promiscuous mode
[ 1091.793786][T14123] wg0: entered promiscuous mode
[ 1091.833430][T14123] wg1: entered promiscuous mode
[ 1091.865436][T14123] wg2: entered promiscuous mode
[ 1091.876819][T14123] veth0_to_bridge: entered promiscuous mode
[ 1091.924278][T14123] bridge_slave_0: entered promiscuous mode
[ 1091.945975][T14123] veth1_to_bridge: entered promiscuous mode
[ 1091.975960][T14123] bridge_slave_1: entered promiscuous mode
[ 1091.995580][T14123] veth0_to_bond: entered promiscuous mode
[ 1092.033928][T14123] bond_slave_0: entered promiscuous mode
[ 1092.035575][T14123] veth1_to_bond: entered promiscuous mode
[ 1092.067826][T14123] bond_slave_1: entered promiscuous mode
[ 1092.068187][T14123] veth0_to_team: entered promiscuous mode
[ 1092.099633][T14123] team_slave_0: entered promiscuous mode
[ 1092.112741][T14123] veth1_to_team: entered promiscuous mode
[ 1092.141824][T14123] team_slave_1: entered promiscuous mode
[ 1092.142164][T14123] veth1_to_batadv: entered promiscuous mode
[ 1092.176278][T14123] batadv_slave_1: entered promiscuous mode
[ 1092.197411][T14123] xfrm0: entered promiscuous mode
[ 1092.226225][T14123] veth0_to_hsr: entered promiscuous mode
[ 1092.274269][ T7431] bridge_slave_1: left allmulticast mode
[ 1092.274282][ T7431] bridge_slave_1: left promiscuous mode
[ 1092.274448][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1092.339908][ T7431] bridge_slave_0: left allmulticast mode
[ 1092.339922][ T7431] bridge_slave_0: left promiscuous mode
[ 1092.340136][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1093.374186][   T31] audit: type=1400 audit(1792248113.865:1195): avc:  denied  { write } for  pid=14160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1093.782886][T14184] binder: 14182:14184 ioctl c0306201 200000000080 returned -14
[ 1093.820125][T14184] binder: BINDER_SET_CONTEXT_MGR already set
[ 1093.820133][T14184] binder: 14182:14184 ioctl 4018620d 200000004a80 returned -16
[ 1094.041896][   T31] audit: type=1400 audit(1792248114.536:1196): avc:  denied  { write } for  pid=14186 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1094.224013][ T7431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1094.253148][ T7431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1094.285162][ T7431] bond0 (unregistering): Released all slaves
[ 1094.546990][ T7431] tipc: Left network mode
[ 1094.966944][T14118] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -110
[ 1095.007668][ T9349] usb 9-1: USB disconnect, device number 34
[ 1095.027652][    C0] net_ratelimit: 282 callbacks suppressed
[ 1095.100434][ T9349] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[ 1095.156600][ T9349] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[ 1095.187324][ T9349] ti_usb_3410_5052 9-1:2.0: device disconnected
[ 1095.785018][T14227] binder: 14225:14227 ioctl c0306201 200000000080 returned -14
[ 1095.821119][T14227] binder: BINDER_SET_CONTEXT_MGR already set
[ 1095.821130][T14227] binder: 14225:14227 ioctl 4018620d 200000004a80 returned -16
[ 1096.483961][   T31] audit: type=1400 audit(1792248116.977:1197): avc:  denied  { read } for  pid=14246 comm="syz.0.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1096.630670][   T31] audit: type=1400 audit(1792248117.127:1198): avc:  denied  { write } for  pid=14205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1096.764017][T14254] tipc: Started in network mode
[ 1096.764043][T14254] tipc: Node identity 7f000001, cluster identity 4711
[ 1096.951783][T14254] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1097.192441][   T31] audit: type=1400 audit(1792248117.687:1199): avc:  denied  { write } for  pid=14262 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1097.269176][T14264] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1097.355048][T14264] md: md0 stopped.
[ 1098.009722][T14281] FAULT_INJECTION: forcing a failure.
[ 1098.009722][T14281] name failslab, interval 1, probability 0, space 0, times 0
[ 1098.009753][T14281] CPU: 0 UID: 0 PID: 14281 Comm: syz.3.2014 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1098.009772][T14281] Tainted: [L]=SOFTLOCKUP
[ 1098.009777][T14281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1098.009786][T14281] Call Trace:
[ 1098.009791][T14281]  <TASK>
[ 1098.009797][T14281]  dump_stack_lvl+0x100/0x190
[ 1098.009821][T14281]  should_fail_ex.cold+0x5/0xa
[ 1098.009841][T14281]  should_failslab+0xc2/0x120
[ 1098.009860][T14281]  __kmalloc_noprof+0xfc/0x840
[ 1098.009877][T14281]  ? vhost_dev_set_owner+0x190/0xa30
[ 1098.009897][T14281]  vhost_dev_set_owner+0x190/0xa30
[ 1098.009918][T14281]  vhost_dev_ioctl+0x521/0xe70
[ 1098.009936][T14281]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1098.009961][T14281]  ? do_vfs_ioctl+0x226/0x13e0
[ 1098.009976][T14281]  ? __pfx_vhost_dev_ioctl+0x10/0x10
[ 1098.009996][T14281]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[ 1098.010018][T14281]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1098.010041][T14281]  vhost_vsock_dev_ioctl+0x320/0xb70
[ 1098.010061][T14281]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[ 1098.010081][T14281]  ? selinux_file_ioctl+0x13b/0x290
[ 1098.010099][T14281]  ? selinux_file_ioctl+0xb6/0x290
[ 1098.010117][T14281]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[ 1098.010136][T14281]  __x64_sys_ioctl+0x18e/0x210
[ 1098.010153][T14281]  do_syscall_64+0x123/0x790
[ 1098.010173][T14281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1098.010186][T14281] RIP: 0033:0x7fa905d9e559
[ 1098.010197][T14281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1098.010210][T14281] RSP: 002b:00007fa903ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1098.010222][T14281] RAX: ffffffffffffffda RBX: 00007fa906025fa0 RCX: 00007fa905d9e559
[ 1098.010231][T14281] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000008
[ 1098.010238][T14281] RBP: 00007fa905e35ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1098.010246][T14281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1098.010253][T14281] R13: 00007fa906026038 R14: 00007fa906025fa0 R15: 00007ffec930df08
[ 1098.010270][T14281]  </TASK>
[ 1098.412073][T14285] Bluetooth: ISO socket layer initialized
[ 1098.577945][ T7431] hsr_slave_0: left promiscuous mode
[ 1098.605368][ T7431] hsr_slave_1: left promiscuous mode
[ 1098.868794][ T7431] veth1_macvtap: left promiscuous mode
[ 1098.868828][ T7431] veth0_macvtap: left promiscuous mode
[ 1098.868958][ T7431] veth1_vlan: left promiscuous mode
[ 1098.869015][ T7431] veth0_vlan: left promiscuous mode
[ 1098.986207][T14297] FAULT_INJECTION: forcing a failure.
[ 1098.986207][T14297] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1098.986240][T14297] CPU: 0 UID: 0 PID: 14297 Comm: syz.4.2022 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1098.986261][T14297] Tainted: [L]=SOFTLOCKUP
[ 1098.986266][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1098.986274][T14297] Call Trace:
[ 1098.986279][T14297]  <TASK>
[ 1098.986285][T14297]  dump_stack_lvl+0x100/0x190
[ 1098.986309][T14297]  should_fail_ex.cold+0x5/0xa
[ 1098.986329][T14297]  get_futex_key+0x1d0/0x14f0
[ 1098.986349][T14297]  ? __pfx_get_futex_key+0x10/0x10
[ 1098.986367][T14297]  ? rcu_is_watching+0x13/0xc0
[ 1098.986389][T14297]  ? sock_write_iter+0x31d/0x5b0
[ 1098.986412][T14297]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1098.986434][T14297]  futex_wake+0xf4/0x5e0
[ 1098.986449][T14297]  ? __pfx_futex_wake+0x10/0x10
[ 1098.986463][T14297]  ? rw_verify_area+0xce/0x6d0
[ 1098.986479][T14297]  ? vfs_write+0x15d/0x1050
[ 1098.986497][T14297]  do_futex+0x2b2/0x440
[ 1098.986515][T14297]  ? __pfx_do_futex+0x10/0x10
[ 1098.986538][T14297]  __x64_sys_futex+0x34f/0x4d0
[ 1098.986558][T14297]  ? fput+0x7c/0x100
[ 1098.986575][T14297]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1098.986592][T14297]  ? ksys_write+0x1ac/0x250
[ 1098.986607][T14297]  ? __pfx_ksys_write+0x10/0x10
[ 1098.986627][T14297]  do_syscall_64+0x123/0x790
[ 1098.986647][T14297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1098.986661][T14297] RIP: 0033:0x7ff8c559e559
[ 1098.986672][T14297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1098.986684][T14297] RSP: 002b:00007ff8c646f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1098.986696][T14297] RAX: ffffffffffffffda RBX: 00007ff8c5825fa8 RCX: 00007ff8c559e559
[ 1098.986705][T14297] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff8c5825fac
[ 1098.986712][T14297] RBP: 00007ff8c5825fa0 R08: 0000000000000001 R09: 0000000000000000
[ 1098.986720][T14297] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1098.986728][T14297] R13: 00007ff8c5826038 R14: 00007ffc5e83e8c0 R15: 00007ffc5e83e9a8
[ 1098.986744][T14297]  </TASK>
[ 1100.065121][    C0] net_ratelimit: 116 callbacks suppressed
[ 1100.468748][T14328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1100.892729][   T31] audit: type=1400 audit(1792248121.379:1200): avc:  denied  { shutdown } for  pid=14334 comm="syz.4.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1101.072676][ T7431] team0 (unregistering): Port device team_slave_1 removed
[ 1101.150599][T14338] FAULT_INJECTION: forcing a failure.
[ 1101.150599][T14338] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1101.150632][T14338] CPU: 0 UID: 0 PID: 14338 Comm: syz.6.2036 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1101.150653][T14338] Tainted: [L]=SOFTLOCKUP
[ 1101.150658][T14338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1101.150666][T14338] Call Trace:
[ 1101.150671][T14338]  <TASK>
[ 1101.150676][T14338]  dump_stack_lvl+0x100/0x190
[ 1101.150700][T14338]  should_fail_ex.cold+0x5/0xa
[ 1101.150720][T14338]  get_futex_key+0x1d0/0x14f0
[ 1101.150740][T14338]  ? __pfx_get_futex_key+0x10/0x10
[ 1101.150758][T14338]  ? rcu_is_watching+0x13/0xc0
[ 1101.150778][T14338]  ? sock_write_iter+0x31d/0x5b0
[ 1101.150794][T14338]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1101.150815][T14338]  futex_wake+0xf4/0x5e0
[ 1101.150829][T14338]  ? __pfx_futex_wake+0x10/0x10
[ 1101.150842][T14338]  ? __pfx_sock_write_iter+0x10/0x10
[ 1101.150861][T14338]  ? vfs_write+0x15d/0x1050
[ 1101.150880][T14338]  do_futex+0x2b2/0x440
[ 1101.150899][T14338]  ? __pfx_do_futex+0x10/0x10
[ 1101.150921][T14338]  __x64_sys_futex+0x34f/0x4d0
[ 1101.150940][T14338]  ? fput+0x7c/0x100
[ 1101.150958][T14338]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1101.150975][T14338]  ? ksys_write+0x1ac/0x250
[ 1101.150989][T14338]  ? __pfx_ksys_write+0x10/0x10
[ 1101.151009][T14338]  do_syscall_64+0x123/0x790
[ 1101.151029][T14338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1101.151042][T14338] RIP: 0033:0x7f119a39e559
[ 1101.151053][T14338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1101.151065][T14338] RSP: 002b:00007f119b33d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1101.151077][T14338] RAX: ffffffffffffffda RBX: 00007f119a625fa8 RCX: 00007f119a39e559
[ 1101.151086][T14338] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f119a625fac
[ 1101.151094][T14338] RBP: 00007f119a625fa0 R08: 0000000000000001 R09: 0000000000000000
[ 1101.151101][T14338] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1101.151109][T14338] R13: 00007f119a626038 R14: 00007fffb90ab9a0 R15: 00007fffb90aba88
[ 1101.151126][T14338]  </TASK>
[ 1101.220478][ T7431] team0 (unregistering): Port device team_slave_0 removed
[ 1101.556561][T14343] binder: BINDER_SET_CONTEXT_MGR already set
[ 1101.556569][T14343] binder: 14342:14343 ioctl 4018620d 200000004a80 returned -16
[ 1102.009848][T12385] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[ 1102.159054][T12385] usb 5-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[ 1102.160267][T12385] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1102.160293][T12385] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1102.160334][T12385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.225333][T12385] usb 5-1: config 0 descriptor??
[ 1102.226518][T14347] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1102.338141][ T9349] tipc: Node number set to 2130706433
[ 1102.518174][ T8255] infiniband syz0: ib_query_port failed (-19)
[ 1102.641978][  T146] smbdirect: ib_dev[syz0] removed
[ 1102.833546][T12385] hid_parser_main: 209 callbacks suppressed
[ 1102.833559][T12385] hid-steam 0003:28DE:1205.003F: unknown main item tag 0x3
[ 1102.833587][T12385] hid-steam 0003:28DE:1205.003F: unknown main item tag 0x0
[ 1102.833613][T12385] hid-steam 0003:28DE:1205.003F: unknown main item tag 0x0
[ 1102.833629][T12385] hid-steam 0003:28DE:1205.003F: unknown main item tag 0x0
[ 1102.833655][T12385] hid-steam 0003:28DE:1205.003F: unknown main item tag 0x0
[ 1102.833761][T12385] hid-steam 0003:28DE:1205.003F: unknown main item tag 0x0
[ 1102.833788][T12385] hid-steam 0003:28DE:1205.003F: unknown main item tag 0x0
[ 1102.833813][T12385] hid-steam 0003:28DE:1205.003F: unknown main item tag 0x0
[ 1102.834668][T12385] hid-steam 0003:28DE:1205.003F: : USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0
[ 1102.939486][T12385] hid-steam 0003:28DE:1205.003F: steam_register:steam_get_attributes failed with error -22
[ 1102.939513][T12385] hid-steam 0003:28DE:1205.003F: Steam Deck 'XXXXXXXXXX' connected
[ 1103.215647][T12385] input: Steam Deck as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1205.003F/input/input66
[ 1103.549071][T14370] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2048'.
[ 1103.607634][T12385] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1205.003F/input/input67
[ 1103.852096][T14372] FAULT_INJECTION: forcing a failure.
[ 1103.852096][T14372] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1103.852131][T14372] CPU: 0 UID: 0 PID: 14372 Comm: syz.3.2049 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1103.852152][T14372] Tainted: [L]=SOFTLOCKUP
[ 1103.852158][T14372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1103.852167][T14372] Call Trace:
[ 1103.852172][T14372]  <TASK>
[ 1103.852178][T14372]  dump_stack_lvl+0x100/0x190
[ 1103.852202][T14372]  should_fail_ex.cold+0x5/0xa
[ 1103.852222][T14372]  get_futex_key+0x1d0/0x14f0
[ 1103.852242][T14372]  ? __pfx_get_futex_key+0x10/0x10
[ 1103.852260][T14372]  ? rcu_is_watching+0x13/0xc0
[ 1103.852277][T14372]  ? sock_write_iter+0x31d/0x5b0
[ 1103.852293][T14372]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1103.852313][T14372]  futex_wake+0xf4/0x5e0
[ 1103.852329][T14372]  ? __pfx_futex_wake+0x10/0x10
[ 1103.852341][T14372]  ? rw_verify_area+0xce/0x6d0
[ 1103.852357][T14372]  ? vfs_write+0x15d/0x1050
[ 1103.852376][T14372]  do_futex+0x2b2/0x440
[ 1103.852395][T14372]  ? __pfx_do_futex+0x10/0x10
[ 1103.852418][T14372]  __x64_sys_futex+0x34f/0x4d0
[ 1103.852437][T14372]  ? fput+0x7c/0x100
[ 1103.852454][T14372]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1103.852471][T14372]  ? ksys_write+0x1ac/0x250
[ 1103.852485][T14372]  ? __pfx_ksys_write+0x10/0x10
[ 1103.852505][T14372]  do_syscall_64+0x123/0x790
[ 1103.852525][T14372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1103.852538][T14372] RIP: 0033:0x7fa905d9e559
[ 1103.852549][T14372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1103.852562][T14372] RSP: 002b:00007fa903ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1103.852575][T14372] RAX: ffffffffffffffda RBX: 00007fa906025fa8 RCX: 00007fa905d9e559
[ 1103.852584][T14372] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa906025fac
[ 1103.852592][T14372] RBP: 00007fa906025fa0 R08: 0000000000000001 R09: 0000000000000000
[ 1103.852600][T14372] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1103.852609][T14372] R13: 00007fa906026038 R14: 00007ffec930de20 R15: 00007ffec930df08
[ 1103.852627][T14372]  </TASK>
[ 1104.127117][T12385] hid-steam 0003:28DE:1205.0040: unknown main item tag 0x3
[ 1104.127136][T12385] hid-steam 0003:28DE:1205.0040: unknown main item tag 0x0
[ 1104.282535][T14376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1104.282554][T14376] binder: 14373:14376 ioctl 4018620d 200000004a80 returned -16
[ 1104.491494][T14382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1104.554582][T12385] hid-steam 0003:28DE:1205.0040: hidraw0: USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0
[ 1104.925179][T14386] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1105.098142][T14393] net_ratelimit: 456 callbacks suppressed
[ 1105.112836][T14386] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[ 1105.162630][T14386] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1105.395720][   T31] audit: type=1400 audit(1792248125.892:1201): avc:  denied  { write } for  pid=14357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1105.649331][T12385] usb 5-1: USB disconnect, device number 40
[ 1105.903233][T12385] hid-steam 0003:28DE:1205.003F: Steam Deck 'XXXXXXXXXX' disconnected
[ 1106.042818][   T31] audit: type=1400 audit(1792248126.542:1202): avc:  denied  { write } for  pid=14410 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1106.289078][T14418] FAULT_INJECTION: forcing a failure.
[ 1106.289078][T14418] name failslab, interval 1, probability 0, space 0, times 0
[ 1106.289113][T14418] CPU: 0 UID: 0 PID: 14418 Comm: syz.8.2066 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1106.289138][T14418] Tainted: [L]=SOFTLOCKUP
[ 1106.289143][T14418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1106.289153][T14418] Call Trace:
[ 1106.289157][T14418]  <TASK>
[ 1106.289164][T14418]  dump_stack_lvl+0x100/0x190
[ 1106.289188][T14418]  should_fail_ex.cold+0x5/0xa
[ 1106.289211][T14418]  should_failslab+0xc2/0x120
[ 1106.289231][T14418]  __kmalloc_noprof+0xfc/0x840
[ 1106.289248][T14418]  ? vhost_dev_set_owner+0x190/0xa30
[ 1106.289268][T14418]  vhost_dev_set_owner+0x190/0xa30
[ 1106.289290][T14418]  vhost_dev_ioctl+0x521/0xe70
[ 1106.289307][T14418]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1106.289326][T14418]  ? do_vfs_ioctl+0x226/0x13e0
[ 1106.289341][T14418]  ? __pfx_vhost_dev_ioctl+0x10/0x10
[ 1106.289359][T14418]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[ 1106.289379][T14418]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1106.289402][T14418]  vhost_vsock_dev_ioctl+0x320/0xb70
[ 1106.289422][T14418]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[ 1106.289443][T14418]  ? selinux_file_ioctl+0x13b/0x290
[ 1106.289461][T14418]  ? selinux_file_ioctl+0xb6/0x290
[ 1106.289481][T14418]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[ 1106.289500][T14418]  __x64_sys_ioctl+0x18e/0x210
[ 1106.289516][T14418]  do_syscall_64+0x123/0x790
[ 1106.289537][T14418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1106.289550][T14418] RIP: 0033:0x7fc5c639e559
[ 1106.289562][T14418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1106.289574][T14418] RSP: 002b:00007fc5c72cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1106.289587][T14418] RAX: ffffffffffffffda RBX: 00007fc5c6625fa0 RCX: 00007fc5c639e559
[ 1106.289595][T14418] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 000000000000000a
[ 1106.289603][T14418] RBP: 00007fc5c6435ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1106.289610][T14418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1106.289618][T14418] R13: 00007fc5c6626038 R14: 00007fc5c6625fa0 R15: 00007ffc2a6a77e8
[ 1106.289636][T14418]  </TASK>
[ 1106.685717][ T7431] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1107.354623][ T7431] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1107.922144][ T7431] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1107.974821][T14453] syz.8.2079 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1107.974844][T14453] CPU: 0 UID: 0 PID: 14453 Comm: syz.8.2079 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1107.974861][T14453] Tainted: [L]=SOFTLOCKUP
[ 1107.974866][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1107.974873][T14453] Call Trace:
[ 1107.974878][T14453]  <TASK>
[ 1107.974883][T14453]  dump_stack_lvl+0x100/0x190
[ 1107.974906][T14453]  dump_header+0xfb/0x606
[ 1107.974920][T14453]  oom_kill_process.cold+0xd/0x380
[ 1107.974936][T14453]  out_of_memory+0x340/0x14f0
[ 1107.974957][T14453]  ? __pfx_out_of_memory+0x10/0x10
[ 1107.974985][T14453]  mem_cgroup_out_of_memory+0xc6/0x130
[ 1107.975001][T14453]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1107.975015][T14453]  ? find_held_lock+0x2b/0x80
[ 1107.975036][T14453]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1107.975053][T14453]  ? _raw_spin_unlock+0x28/0x50
[ 1107.975070][T14453]  try_charge_memcg+0x783/0xf60
[ 1107.975087][T14453]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1107.975099][T14453]  ? find_held_lock+0x2b/0x80
[ 1107.975115][T14453]  ? rcu_read_unlock+0x17/0x60
[ 1107.975127][T14453]  ? rcu_read_unlock+0x17/0x60
[ 1107.975140][T14453]  ? find_held_lock+0x2b/0x80
[ 1107.975157][T14453]  ? rcu_read_unlock+0x17/0x60
[ 1107.975173][T14453]  charge_memcg+0x1ae/0x210
[ 1107.975186][T14453]  __mem_cgroup_charge+0x2b/0x1c0
[ 1107.975201][T14453]  do_anonymous_page+0xaf1/0x2050
[ 1107.975219][T14453]  ? __pfx_do_anonymous_page+0x10/0x10
[ 1107.975230][T14453]  ? rcu_read_unlock+0x2d/0xb0
[ 1107.975241][T14453]  ? rcu_read_unlock+0x2d/0xb0
[ 1107.975253][T14453]  ? __pte_offset_map+0x179/0x310
[ 1107.975271][T14453]  __handle_mm_fault+0x1ff3/0x2f60
[ 1107.975286][T14453]  ? lock_vma_under_rcu+0x11d/0x590
[ 1107.975304][T14453]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1107.975319][T14453]  ? lock_vma_under_rcu+0x17c/0x590
[ 1107.975348][T14453]  handle_mm_fault+0x363/0xa20
[ 1107.975363][T14453]  do_user_addr_fault+0x59c/0x12f0
[ 1107.975385][T14453]  exc_page_fault+0x6f/0xd0
[ 1107.975402][T14453]  asm_exc_page_fault+0x26/0x30
[ 1107.975413][T14453] RIP: 0033:0x7fc5c635b704
[ 1107.975425][T14453] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c
[ 1107.975436][T14453] RSP: 002b:00007ffc2a6a7790 EFLAGS: 00010246
[ 1107.975446][T14453] RAX: 00007fc5c728e000 RBX: 00007fc5c72ae6c0 RCX: 00007fc5c639e357
[ 1107.975454][T14453] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fc5c72ae6c0
[ 1107.975461][T14453] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[ 1107.975468][T14453] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffc2a6a78e0
[ 1107.975476][T14453] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[ 1107.975493][T14453]  </TASK>
[ 1108.096507][T14453] memory: usage 8kB, limit 8kB, failcnt 155
[ 1108.096529][T14453] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0
[ 1108.096537][T14453] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0
[ 1108.096544][T14453] Memory cgroup stats for /syz8/test:
[ 1108.096671][T14453] cache 0
[ 1108.096676][T14453] rss 0
[ 1108.096680][T14453] rss_huge 0
[ 1108.096694][T14453] shmem 0
[ 1108.096698][T14453] mapped_file 0
[ 1108.096702][T14453] dirty 0
[ 1108.096706][T14453] writeback 0
[ 1108.096710][T14453] workingset_refault_anon 0
[ 1108.096724][T14453] workingset_refault_file 0
[ 1108.096729][T14453] swap 0
[ 1108.096733][T14453] swapcached 0
[ 1108.096737][T14453] pgpgin 0
[ 1108.096741][T14453] pgpgout 0
[ 1108.096745][T14453] pgfault 5
[ 1108.096758][T14453] pgmajfault 0
[ 1108.096763][T14453] inactive_anon 0
[ 1108.096767][T14453] active_anon 0
[ 1108.096771][T14453] inactive_file 0
[ 1108.096776][T14453] active_file 0
[ 1108.096781][T14453] unevictable 0
[ 1108.096793][T14453] hierarchical_memory_limit 8192
[ 1108.096798][T14453] hierarchical_memsw_limit 9223372036854771712
[ 1108.096804][T14453] total_cache 0
[ 1108.096808][T14453] total_rss 0
[ 1108.096812][T14453] total_rss_huge 0
[ 1108.096826][T14453] total_shmem 0
[ 1108.096830][T14453] total_mapped_file 0
[ 1108.096835][T14453] total_dirty 0
[ 1108.096839][T14453] total_writeback 0
[ 1108.096843][T14453] total_workingset_refault_anon 0
[ 1108.096858][T14453] total_workingset_refault_file 0
[ 1108.096863][T14453] total_swap 0
[ 1108.096867][T14453] total_swapcached 0
[ 1108.096872][T14453] total_pgpgin 0
[ 1108.096876][T14453] total_pgpgout 0
[ 1108.096889][T14453] total_pgfault 5
[ 1108.096894][T14453] total_pgmajfault 0
[ 1108.096898][T14453] total_inactive_anon 0
[ 1108.096903][T14453] total_active_anon 0
[ 1108.096907][T14453] total_inactive_file 0
[ 1108.096920][T14453] total_active_file 0
[ 1108.096925][T14453] total_unevictable 0
[ 1108.096930][T14453] anon_cost 0
[ 1108.096934][T14453] file_cost 0
[ 1108.096938][T14453] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=
[ 1108.627560][T14453] /,mems_allowed=0-1
[ 1108.682514][T14453] ,oom_memcg=/syz8/test,task_memcg=/syz8/test,task=syz.8.2079,pid=14453,uid=0
[ 1108.683918][T14453] Memory cgroup out of memory: Killed process 14453 (syz.8.2079) total-vm:102400kB, anon-rss:1448kB, file-rss:22800kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[ 1108.770383][   T31] audit: type=1400 audit(1792248129.263:1203): avc:  denied  { write } for  pid=14424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1108.974208][T14465] netlink: 'syz.4.2082': attribute type 10 has an invalid length.
[ 1109.167060][ T7431] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1109.263421][T14465] syz_tun: entered promiscuous mode
[ 1109.269956][T14465] bond0: (slave syz_tun): Enslaving as a backup interface with an up link
[ 1109.426208][   T31] audit: type=1400 audit(1792248129.924:1204): avc:  denied  { write } for  pid=14486 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1109.834993][T12385] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1110.125443][T12385] usb 9-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00
[ 1110.128768][T12385] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1110.128796][T12385] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1110.128839][T12385] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.151376][    C0] net_ratelimit: 358 callbacks suppressed
[ 1110.326669][ T7431] bridge_slave_1: left allmulticast mode
[ 1110.326692][ T7431] bridge_slave_1: left promiscuous mode
[ 1110.326868][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1110.358205][ T7431] bridge_slave_0: left allmulticast mode
[ 1110.358227][ T7431] bridge_slave_0: left promiscuous mode
[ 1110.377867][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1110.536255][ T8277] Bluetooth: hci3: urb ffff88802d251200 submission failed (90)
[ 1110.598044][T12385] usb 9-1: USB disconnect, device number 35
[ 1111.437659][T14537] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2105'.
[ 1111.496362][   T31] audit: type=1400 audit(1792248131.995:1205): avc:  denied  { write } for  pid=14499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1112.012333][   T31] audit: type=1400 audit(1792248132.515:1206): avc:  denied  { write } for  pid=14549 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1112.277116][ T7431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1112.305874][ T7431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1112.331740][ T7431] bond0 (unregistering): Released all slaves
[ 1112.360442][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1112.520633][    T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[ 1112.534999][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1112.535048][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1112.582836][    T9] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[ 1112.583027][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81
[ 1112.668737][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1
[ 1112.676078][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84
[ 1112.676148][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[ 1112.740533][    T9] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1112.742438][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[ 1112.742536][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[ 1112.807644][    T9] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1113.091518][    T9] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1113.239683][    T9] usb 9-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00
[ 1113.240693][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1113.240720][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1113.240763][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.510643][ T8277] Bluetooth: hci3: urb ffff88802a0cbb00 submission failed (90)
[ 1113.593103][    T9] usb 9-1: USB disconnect, device number 36
[ 1113.773771][ T9349] usb 4-1: USB disconnect, device number 18
[ 1113.794227][ T9349] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1113.853880][ T9349] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1113.854580][ T9349] keyspan 4-1:1.0: device disconnected
[ 1114.175002][   T31] audit: type=1400 audit(1792248134.676:1207): avc:  denied  { read append } for  pid=14585 comm="syz.4.2122" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1114.376789][ T8277] Bluetooth: hci6: connection err: -111
[ 1114.764194][   T31] audit: type=1400 audit(1792248135.266:1208): avc:  denied  { write } for  pid=14570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1114.879888][T14589] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1114.880088][T14589] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1114.885691][T14600] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1114.952060][T14600] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1115.177579][    C0] net_ratelimit: 262 callbacks suppressed
[ 1115.454249][ T7431] hsr_slave_0: left promiscuous mode
[ 1115.472327][ T7431] hsr_slave_1: left promiscuous mode
[ 1115.503407][T14589] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1115.503582][T14589] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1115.535352][   T31] audit: type=1400 audit(1792248136.037:1209): avc:  denied  { write } for  pid=14608 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1115.583988][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.653479][ T7431] veth1_macvtap: left promiscuous mode
[ 1115.653508][ T7431] veth0_macvtap: left promiscuous mode
[ 1115.709841][T14589] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1115.841493][T14589] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1115.879413][T14589] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1115.914460][T14589] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1116.033875][T14589] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1116.033964][T14589] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1116.106895][T14589] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1116.419188][    T9] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 1116.558750][ T7431] team0 (unregistering): Port device team_slave_1 removed
[ 1116.578324][    T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1116.588527][    T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1116.588546][    T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1116.588587][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1116.596603][T14615] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1116.643711][    T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1116.705544][ T7431] team0 (unregistering): Port device team_slave_0 removed
[ 1116.857866][ T8277] Bluetooth: hci1: command 0x0406 tx timeout
[ 1117.089392][T14640] binder: 14639:14640 ioctl c0306201 2000000005c0 returned -14
[ 1117.203751][   T10] usb 9-1: USB disconnect, device number 37
[ 1117.360276][   T31] audit: type=1400 audit(1792248137.867:1210): avc:  denied  { getopt } for  pid=14645 comm="syz.3.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1117.462285][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1117.496887][ T8277] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1117.896443][ T8277] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1118.056431][ T8277] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1118.251954][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1118.346633][ T5729] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1118.372891][   T10] usb 9-1: new full-speed USB device number 38 using dummy_hcd
[ 1118.417743][    T9] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[ 1118.421545][    T9] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1118.422356][    T9] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1118.424166][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1118.424179][    T9] usb 1-1: Product: syz
[ 1118.424188][    T9] usb 1-1: Manufacturer: syz
[ 1118.424197][    T9] usb 1-1: SerialNumber: syz
[ 1118.490183][    T9] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected
[ 1118.506376][ T5729] usb 5-1: Using ep0 maxpacket: 16
[ 1118.507119][ T5729] usb 5-1: New USB device found, idVendor=0e41, idProduct=4151, bcdDevice=62.00
[ 1118.507142][ T5729] usb 5-1: too many configurations: 116, using maximum allowed: 8
[ 1118.509701][ T5729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1118.509715][ T5729] usb 5-1: config 0 has no interfaces?
[ 1118.510603][ T5729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1118.510616][ T5729] usb 5-1: config 0 has no interfaces?
[ 1118.513384][ T5729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1118.513398][ T5729] usb 5-1: config 0 has no interfaces?
[ 1118.556191][   T10] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1118.588405][   T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1118.588422][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1118.588438][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 1118.610495][ T5729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1118.610509][ T5729] usb 5-1: config 0 has no interfaces?
[ 1118.612738][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1118.612750][   T10] usb 9-1: Product: syz
[ 1118.612759][   T10] usb 9-1: Manufacturer: syz
[ 1118.612769][   T10] usb 9-1: SerialNumber: syz
[ 1118.651296][ T5729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1118.651310][ T5729] usb 5-1: config 0 has no interfaces?
[ 1118.653141][   T10] usb 9-1: config 0 descriptor??
[ 1118.653605][T14672] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[ 1118.662264][ T5729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1118.662279][ T5729] usb 5-1: config 0 has no interfaces?
[ 1118.770111][ T5729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1118.770124][ T5729] usb 5-1: config 0 has no interfaces?
[ 1118.772458][ T5729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1118.772471][ T5729] usb 5-1: config 0 has no interfaces?
[ 1118.774414][    T9] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[ 1118.820670][ T5729] usb 5-1: New USB device strings: Mfr=240, Product=33, SerialNumber=3
[ 1118.820682][ T5729] usb 5-1: Product: syz
[ 1118.820691][ T5729] usb 5-1: Manufacturer: syz
[ 1118.820701][ T5729] usb 5-1: SerialNumber: syz
[ 1118.824335][ T5729] usb 5-1: config 0 descriptor??
[ 1118.880562][    T9] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[ 1118.936712][ T8277] Bluetooth: hci1: command 0x0406 tx timeout
[ 1119.028994][   T10] rc_core: IR keymap rc-streamzap not found
[ 1119.029009][   T10] Registered IR keymap rc-empty
[ 1119.030273][   T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1119.062250][   T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input68
[ 1119.086339][   T31] audit: type=1400 audit(1792248139.598:1211): avc:  denied  { write } for  pid=14656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1119.170310][   T10] usb 9-1: USB disconnect, device number 38
[ 1119.224970][T14671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1119.225323][T14671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1119.286315][   T31] audit: type=1400 audit(1792248139.798:1212): avc:  denied  { read write } for  pid=14667 comm="syz.4.2152" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[ 1119.286528][   T31] audit: type=1400 audit(1792248139.798:1213): avc:  denied  { open } for  pid=14667 comm="syz.4.2152" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[ 1119.359647][   T31] audit: type=1400 audit(1792248139.868:1214): avc:  denied  { ioctl } for  pid=14667 comm="syz.4.2152" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[ 1119.463830][T14671] 0x000000000000-0x000000010000 : ""
[ 1119.575859][ T8277] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1119.601916][   T31] audit: type=1400 audit(1792248140.109:1215): avc:  denied  { write } for  pid=14697 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1119.671370][T14700] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2160'.
[ 1119.799976][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1119.954656][T14671] ftl_cs: FTL header not found.
[ 1119.975715][ T8277] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1120.083819][T14671] FAULT_INJECTION: forcing a failure.
[ 1120.083819][T14671] name failslab, interval 1, probability 0, space 0, times 0
[ 1120.083844][T14671] CPU: 0 UID: 0 PID: 14671 Comm: syz.4.2152 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1120.083863][T14671] Tainted: [L]=SOFTLOCKUP
[ 1120.083868][T14671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1120.083877][T14671] Call Trace:
[ 1120.083882][T14671]  <TASK>
[ 1120.083887][T14671]  dump_stack_lvl+0x100/0x190
[ 1120.083911][T14671]  should_fail_ex.cold+0x5/0xa
[ 1120.083931][T14671]  should_failslab+0xc2/0x120
[ 1120.083951][T14671]  __kmalloc_cache_node_noprof+0x94/0x720
[ 1120.083969][T14671]  ? __kmalloc_cache_node_noprof+0x30c/0x720
[ 1120.083986][T14671]  ? bdi_alloc+0x44/0x140
[ 1120.084005][T14671]  bdi_alloc+0x44/0x140
[ 1120.084020][T14671]  __alloc_disk_node+0xac/0x6b0
[ 1120.084038][T14671]  __blk_mq_alloc_disk+0x89/0x120
[ 1120.084052][T14671]  add_mtd_blktrans_dev+0x7ad/0x1520
[ 1120.084074][T14671]  ? __pfx_add_mtd_blktrans_dev+0x10/0x10
[ 1120.084103][T14671]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[ 1120.084118][T14671]  ? mtdblock_add_mtd+0x4a/0x270
[ 1120.084138][T14671]  mtdblock_add_mtd+0x1cc/0x270
[ 1120.084156][T14671]  blktrans_notify_add+0xa2/0xf0
[ 1120.084173][T14671]  add_mtd_device+0xb6d/0x1820
[ 1120.084189][T14671]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1120.084209][T14671]  ? __pfx_add_mtd_device+0x10/0x10
[ 1120.084228][T14671]  mtd_add_partition+0x376/0x6a0
[ 1120.084244][T14671]  ? __pfx_mtd_add_partition+0x10/0x10
[ 1120.084259][T14671]  ? __might_fault+0xc5/0x140
[ 1120.084271][T14671]  ? __might_fault+0xc5/0x140
[ 1120.084292][T14671]  mtdchar_blkpg_ioctl+0x207/0x250
[ 1120.084309][T14671]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 1120.084340][T14671]  mtdchar_ioctl+0x1670/0x1fd0
[ 1120.084359][T14671]  ? __pfx_mtdchar_ioctl+0x10/0x10
[ 1120.084377][T14671]  ? lock_acquire+0x1d1/0x380
[ 1120.084391][T14671]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[ 1120.084412][T14671]  ? rcu_is_watching+0x13/0xc0
[ 1120.084430][T14671]  ? trace_contention_end+0x126/0x160
[ 1120.084447][T14671]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[ 1120.084464][T14671]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1120.084478][T14671]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[ 1120.084502][T14671]  ? __pfx___mutex_lock+0x10/0x10
[ 1120.084521][T14671]  ? __fget_files+0x34/0x3d0
[ 1120.084550][T14671]  mtdchar_unlocked_ioctl+0xb0/0xf0
[ 1120.084566][T14671]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 1120.084585][T14671]  __x64_sys_ioctl+0x18e/0x210
[ 1120.084601][T14671]  do_syscall_64+0x123/0x790
[ 1120.084621][T14671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1120.084634][T14671] RIP: 0033:0x7ff8c559e559
[ 1120.084645][T14671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1120.084657][T14671] RSP: 002b:00007ff8c646f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1120.084671][T14671] RAX: ffffffffffffffda RBX: 00007ff8c5825fa0 RCX: 00007ff8c559e559
[ 1120.084680][T14671] RDX: 0000200000001500 RSI: 0000000000001269 RDI: 0000000000000007
[ 1120.084688][T14671] RBP: 00007ff8c5635ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1120.084696][T14671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1120.084704][T14671] R13: 00007ff8c5826038 R14: 00007ff8c5825fa0 R15: 00007ffc5e83e9a8
[ 1120.084723][T14671]  </TASK>
[ 1120.135634][ T8277] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1120.216581][    C0] net_ratelimit: 197 callbacks suppressed
[ 1121.031823][    T9] usb 5-1: USB disconnect, device number 41
[ 1121.068424][ T5729] usb 1-1: USB disconnect, device number 2
[ 1121.082480][   T31] audit: type=1400 audit(1792248141.589:1216): avc:  denied  { write } for  pid=14707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1121.163364][T14738] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[ 1121.272562][ T5729] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[ 1121.299571][ T5729] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[ 1121.300190][ T5729] ti_usb_3410_5052 1-1:2.0: device disconnected
[ 1121.359652][   T31] audit: type=1400 audit(1792248141.859:1217): avc:  denied  { connect } for  pid=14741 comm="syz.3.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1121.589635][   T31] audit: type=1400 audit(1792248142.090:1218): avc:  denied  { write } for  pid=14745 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1121.654640][ T8277] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1121.675706][   T31] audit: type=1400 audit(1792248142.180:1219): avc:  denied  { cmd } for  pid=14747 comm="syz.0.2173" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[ 1121.713765][T14748] FAULT_INJECTION: forcing a failure.
[ 1121.713765][T14748] name failslab, interval 1, probability 0, space 0, times 0
[ 1121.713787][T14748] CPU: 0 UID: 0 PID: 14748 Comm: syz.3.2172 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1121.713806][T14748] Tainted: [L]=SOFTLOCKUP
[ 1121.713811][T14748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1121.713820][T14748] Call Trace:
[ 1121.713825][T14748]  <TASK>
[ 1121.713831][T14748]  dump_stack_lvl+0x100/0x190
[ 1121.713856][T14748]  should_fail_ex.cold+0x5/0xa
[ 1121.713875][T14748]  should_failslab+0xc2/0x120
[ 1121.713894][T14748]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[ 1121.713913][T14748]  ? key_alloc+0xc6d/0x1310
[ 1121.713935][T14748]  kmemdup_noprof+0x29/0x60
[ 1121.713949][T14748]  key_alloc+0xc6d/0x1310
[ 1121.713970][T14748]  ? sprintf+0xcc/0x100
[ 1121.713988][T14748]  ? __pfx_sprintf+0x10/0x10
[ 1121.714006][T14748]  ? __pfx_key_alloc+0x10/0x10
[ 1121.714024][T14748]  ? request_key_auth_new+0x172/0xb50
[ 1121.714046][T14748]  request_key_auth_new+0x6e0/0xb50
[ 1121.714067][T14748]  ? __pfx_request_key_auth_new+0x10/0x10
[ 1121.714093][T14748]  request_key_and_link+0x1089/0x1330
[ 1121.714114][T14748]  ? __pfx_request_key_and_link+0x10/0x10
[ 1121.714130][T14748]  ? __pfx___might_resched+0x10/0x10
[ 1121.714147][T14748]  ? __pfx_key_default_cmp+0x10/0x10
[ 1121.714160][T14748]  ? __pfx_keyring_search_iterator+0x10/0x10
[ 1121.714175][T14748]  ? _copy_from_user+0x59/0xd0
[ 1121.714199][T14748]  __do_sys_request_key+0x2a2/0x3c0
[ 1121.714215][T14748]  ? __pfx___do_sys_request_key+0x10/0x10
[ 1121.714237][T14748]  do_syscall_64+0x123/0x790
[ 1121.714256][T14748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1121.714269][T14748] RIP: 0033:0x7fa905d9e559
[ 1121.714281][T14748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1121.714293][T14748] RSP: 002b:00007fa903ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[ 1121.714305][T14748] RAX: ffffffffffffffda RBX: 00007fa906025fa0 RCX: 00007fa905d9e559
[ 1121.714313][T14748] RDX: 0000200000001fee RSI: 00002000000000c0 RDI: 0000200000000040
[ 1121.714321][T14748] RBP: 00007fa905e35ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1121.714329][T14748] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000
[ 1121.714338][T14748] R13: 00007fa906026038 R14: 00007fa906025fa0 R15: 00007ffec930df08
[ 1121.714356][T14748]  </TASK>
[ 1122.054283][ T8277] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1122.214240][ T8277] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1122.797756][T14779] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2181'.
[ 1123.156750][T14789] netlink: 'syz.0.2185': attribute type 4 has an invalid length.
[ 1123.216983][   T31] audit: type=1400 audit(1792248143.720:1220): avc:  denied  { write } for  pid=14760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1123.433673][   T10] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 1123.510562][   T31] audit: type=1400 audit(1792248144.021:1221): avc:  denied  { write } for  pid=14800 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1123.584592][   T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1123.584616][   T10] usb 7-1: too many configurations: 9, using maximum allowed: 8
[ 1123.586700][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1123.586734][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1123.586752][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1123.590184][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1123.590212][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1123.590228][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1123.591983][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1123.592007][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1123.592024][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1123.592837][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1123.592862][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1123.592878][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1123.614252][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1123.614285][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1123.614315][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1123.768484][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1123.768512][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1123.768528][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1123.799474][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1123.799500][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1123.799516][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1123.801872][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1123.801899][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1123.801915][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1123.878656][   T10] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1123.878669][   T10] usb 7-1: Product: syz
[ 1123.878678][   T10] usb 7-1: Manufacturer: syz
[ 1123.878687][   T10] usb 7-1: SerialNumber: syz
[ 1123.910203][   T10] usb 7-1: config 0 descriptor??
[ 1123.930732][   T10] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[ 1124.036490][   T31] audit: type=1400 audit(1792248144.541:1222): avc:  denied  { mount } for  pid=14804 comm="syz.3.2191" name="/" dev="rpc_pipefs" ino=46937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[ 1124.191149][T14811] binder: BINDER_SET_CONTEXT_MGR already set
[ 1124.191158][T14811] binder: 14810:14811 ioctl 4018620d 200000004a80 returned -16
[ 1124.208188][   T10] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 1124.228356][ T9349] usb 7-1: USB disconnect, device number 49
[ 1124.252008][ T9349] yurex 7-1:0.0: USB YUREX #0 now disconnected
[ 1124.278786][   T31] audit: type=1400 audit(1792248144.781:1223): avc:  denied  { unmount } for  pid=13809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[ 1124.343730][   T31] audit: type=1400 audit(1792248144.851:1224): avc:  denied  { read } for  pid=14813 comm="syz.0.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1124.395347][   T10] usb 9-1: Using ep0 maxpacket: 32
[ 1124.402118][   T10] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1124.412773][   T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1124.430811][   T10] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1124.430823][   T10] usb 9-1: Product: syz
[ 1124.430833][   T10] usb 9-1: Manufacturer: syz
[ 1124.430842][   T10] usb 9-1: SerialNumber: syz
[ 1124.460044][   T10] usb 9-1: config 0 descriptor??
[ 1124.460516][T14807] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1124.479143][   T10] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1124.479155][   T10] hub 9-1:0.0: probe with driver hub failed with error -5
[ 1124.800713][   T31] audit: type=1400 audit(1792248145.301:1225): avc:  denied  { write } for  pid=14825 comm="syz.3.2197" name="usb_gadget" dev="configfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1124.865966][   T10] usb 9-1: USB disconnect, device number 39
[ 1124.890340][   T31] audit: type=1400 audit(1792248145.391:1226): avc:  denied  { write } for  pid=14825 comm="syz.3.2197" name="target" dev="configfs" ino=3535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1124.974285][   T31] audit: type=1400 audit(1792248145.471:1227): avc:  denied  { write } for  pid=14825 comm="syz.3.2197" name="usb_gadget" dev="configfs" ino=47078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1125.196180][   T31] audit: type=1400 audit(1792248145.691:1228): avc:  denied  { write } for  pid=14812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1125.254453][    C0] net_ratelimit: 102 callbacks suppressed
[ 1125.275770][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'.
[ 1125.275792][T14843] bridge: RTM_NEWNEIGH with invalid state 0x0
[ 1125.318561][   T31] audit: type=1400 audit(1792248145.821:1229): avc:  denied  { write } for  pid=14825 comm="syz.3.2197" name="naa.5001405000000001" dev="configfs" ino=47108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1125.394396][T14846] ip6_vti0: left promiscuous mode
[ 1125.566367][T14854] binder: BINDER_SET_CONTEXT_MGR already set
[ 1125.566376][T14854] binder: 14853:14854 ioctl 4018620d 200000004a80 returned -16
[ 1125.959989][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2212'.
[ 1125.975612][    T9] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 1126.126703][    T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1126.126725][    T9] usb 7-1: too many configurations: 9, using maximum allowed: 8
[ 1126.128606][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1126.128631][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1126.128648][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1126.129859][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1126.129892][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1126.129908][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1126.131072][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1126.131097][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1126.131113][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1126.194682][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1126.194709][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1126.194726][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1126.213425][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1126.213451][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1126.213467][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1126.316267][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1126.316294][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1126.316310][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1126.319435][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1126.319460][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1126.319477][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1126.321097][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1126.321128][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1126.321145][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1126.418785][    T9] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1126.418798][    T9] usb 7-1: Product: syz
[ 1126.418808][    T9] usb 7-1: Manufacturer: syz
[ 1126.418817][    T9] usb 7-1: SerialNumber: syz
[ 1126.490010][    T9] usb 7-1: config 0 descriptor??
[ 1126.549653][    T9] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[ 1126.749083][T14889] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2219'.
[ 1126.787362][   T10] usb 7-1: USB disconnect, device number 50
[ 1126.800241][   T10] yurex 7-1:0.0: USB YUREX #0 now disconnected
[ 1127.499583][T14919] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1127.725605][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1127.758778][T14927] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2233'.
[ 1128.029367][T14940] FAULT_INJECTION: forcing a failure.
[ 1128.029367][T14940] name failslab, interval 1, probability 0, space 0, times 0
[ 1128.029390][T14940] CPU: 0 UID: 0 PID: 14940 Comm: syz.3.2238 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1128.029407][T14940] Tainted: [L]=SOFTLOCKUP
[ 1128.029412][T14940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1128.029421][T14940] Call Trace:
[ 1128.029426][T14940]  <TASK>
[ 1128.029433][T14940]  dump_stack_lvl+0x100/0x190
[ 1128.029459][T14940]  should_fail_ex.cold+0x5/0xa
[ 1128.029478][T14940]  should_failslab+0xc2/0x120
[ 1128.029498][T14940]  __kmalloc_noprof+0xfc/0x840
[ 1128.029514][T14940]  ? vhost_dev_set_owner+0x190/0xa30
[ 1128.029534][T14940]  vhost_dev_set_owner+0x190/0xa30
[ 1128.029555][T14940]  vhost_dev_ioctl+0x521/0xe70
[ 1128.029573][T14940]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1128.029591][T14940]  ? do_vfs_ioctl+0x226/0x13e0
[ 1128.029605][T14940]  ? __pfx_vhost_dev_ioctl+0x10/0x10
[ 1128.029623][T14940]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[ 1128.029644][T14940]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1128.029667][T14940]  vhost_vsock_dev_ioctl+0x320/0xb70
[ 1128.029687][T14940]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[ 1128.029708][T14940]  ? selinux_file_ioctl+0x13b/0x290
[ 1128.029725][T14940]  ? selinux_file_ioctl+0xb6/0x290
[ 1128.029743][T14940]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[ 1128.029762][T14940]  __x64_sys_ioctl+0x18e/0x210
[ 1128.029779][T14940]  do_syscall_64+0x123/0x790
[ 1128.029800][T14940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1128.029813][T14940] RIP: 0033:0x7fa905d9e559
[ 1128.029824][T14940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1128.029842][T14940] RSP: 002b:00007fa903ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1128.029856][T14940] RAX: ffffffffffffffda RBX: 00007fa906025fa0 RCX: 00007fa905d9e559
[ 1128.029866][T14940] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000007
[ 1128.029873][T14940] RBP: 00007fa905e35ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1128.029881][T14940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1128.029889][T14940] R13: 00007fa906026038 R14: 00007fa906025fa0 R15: 00007ffec930df08
[ 1128.029908][T14940]  </TASK>
[ 1128.456520][T14944] binder: 14942:14944 ioctl c0306201 200000000080 returned -14
[ 1128.563562][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'.
[ 1128.569332][T14947] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2242'.
[ 1128.656058][T14947] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2242'.
[ 1128.856089][T14956] overlayfs: overlapping lowerdir path
[ 1129.268547][T14972] binder: 14971:14972 ioctl c0306201 200000000080 returned -14
[ 1129.373427][T14980] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2254'.
[ 1129.549830][   T31] kauditd_printk_skb: 5 callbacks suppressed
[ 1129.549840][   T31] audit: type=1400 audit(1792248150.054:1235): avc:  denied  { write } for  pid=14935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1129.818228][T14998] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2258'.
[ 1129.844534][T15000] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1129.884160][   T31] audit: type=1400 audit(1792248150.394:1236): avc:  denied  { write } for  pid=14994 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1130.017286][T15004] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1130.094230][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4
** 1291 printk messages dropped **
[ 1130.290058][    C0] net_ratelimit: 109 callbacks suppressed
[ 1130.322063][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1130.454586][   T10] usb 1-1: device descriptor read/64, error -71
[ 1130.505941][T15019] comedi comedi1: 8255: I/O base address not correctly aligned
[ 1130.692191][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1130.713205][T15024] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2267'.
[ 1130.821250][   T10] usb 1-1: device descriptor read/64, error -71
[ 1130.932826][   T10] usb usb1-port1: attempt power cycle
[ 1131.024537][   T31] audit: type=1400 audit(1792248151.534:1237): avc:  denied  { write } for  pid=15012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1131.269621][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1131.298352][   T10] usb 1-1: device descriptor read/8, error -71
[ 1131.374983][T15041] FAULT_INJECTION: forcing a failure.
[ 1131.374983][T15041] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1131.375006][T15041] CPU: 0 UID: 0 PID: 15041 Comm: syz.4.2272 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1131.375025][T15041] Tainted: [L]=SOFTLOCKUP
[ 1131.375030][T15041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1131.375039][T15041] Call Trace:
[ 1131.375044][T15041]  <TASK>
[ 1131.375050][T15041]  dump_stack_lvl+0x100/0x190
[ 1131.375075][T15041]  should_fail_ex.cold+0x5/0xa
[ 1131.375094][T15041]  get_futex_key+0x1d0/0x14f0
[ 1131.375114][T15041]  ? __pfx_get_futex_key+0x10/0x10
[ 1131.375132][T15041]  ? wakeup_preempt_fair+0x5c3/0xdc0
[ 1131.375151][T15041]  ? tracing_record_taskinfo_sched_switch+0xac/0x560
[ 1131.375172][T15041]  futex_wait_setup+0x91/0x540
[ 1131.375190][T15041]  __futex_wait+0x19f/0x300
[ 1131.375205][T15041]  ? __pfx___futex_wait+0x10/0x10
[ 1131.375217][T15041]  ? __pfx_try_to_wake_up+0x10/0x10
[ 1131.375231][T15041]  ? futex_hash+0x311/0x400
[ 1131.375249][T15041]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1131.375264][T15041]  ? find_held_lock+0x2b/0x80
[ 1131.375283][T15041]  ? futex_wake+0x4ea/0x5e0
[ 1131.375300][T15041]  futex_wait+0xe6/0x370
[ 1131.375313][T15041]  ? __pfx_futex_wait+0x10/0x10
[ 1131.375335][T15041]  do_futex+0x265/0x440
[ 1131.375354][T15041]  ? __pfx_do_futex+0x10/0x10
[ 1131.375371][T15041]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1131.375390][T15041]  ? __do_sys_request_key+0x330/0x3c0
[ 1131.375404][T15041]  ? __do_sys_request_key+0x35c/0x3c0
[ 1131.375420][T15041]  __x64_sys_futex+0x34f/0x4d0
[ 1131.375439][T15041]  ? __do_sys_request_key+0x203/0x3c0
[ 1131.375453][T15041]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1131.375478][T15041]  do_syscall_64+0x123/0x790
[ 1131.375497][T15041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1131.375510][T15041] RIP: 0033:0x7ff8c559e559
[ 1131.375522][T15041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1131.375543][T15041] RSP: 002b:00007ff8c646f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1131.375557][T15041] RAX: ffffffffffffffda RBX: 00007ff8c5825fa8 RCX: 00007ff8c559e559
[ 1131.375566][T15041] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff8c5825fa8
[ 1131.375574][T15041] RBP: 00007ff8c5825fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1131.375581][T15041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1131.375589][T15041] R13: 00007ff8c5826038 R14: 00007ffc5e83e8c0 R15: 00007ffc5e83e9a8
[ 1131.375606][T15041]  </TASK>
[ 1131.417619][   T31] audit: type=1400 audit(1792248151.925:1238): avc:  denied  { write } for  pid=15043 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1131.533626][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1131.552309][   T10] usb 1-1: device descriptor read/8, error -71
[ 1131.660612][   T10] usb usb1-port1: unable to enumerate USB device
[ 1131.943892][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1132.210359][T15056] FAULT_INJECTION: forcing a failure.
[ 1132.210359][T15056] name failslab, interval 1, probability 0, space 0, times 0
[ 1132.210383][T15056] CPU: 0 UID: 0 PID: 15056 Comm: syz.4.2277 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1132.210402][T15056] Tainted: [L]=SOFTLOCKUP
[ 1132.210407][T15056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1132.210422][T15056] Call Trace:
[ 1132.210427][T15056]  <TASK>
[ 1132.210433][T15056]  dump_stack_lvl+0x100/0x190
[ 1132.210460][T15056]  should_fail_ex.cold+0x5/0xa
[ 1132.210479][T15056]  should_failslab+0xc2/0x120
[ 1132.210498][T15056]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1132.210512][T15056]  ? snd_midi_event_new+0x6f/0x210
[ 1132.210530][T15056]  snd_midi_event_new+0x6f/0x210
[ 1132.210544][T15056]  snd_virmidi_output_open+0x106/0x670
[ 1132.210560][T15056]  open_substream+0x480/0x970
[ 1132.210578][T15056]  rawmidi_open_priv+0x595/0x6f0
[ 1132.210599][T15056]  snd_rawmidi_open+0x4b4/0xb90
[ 1132.210620][T15056]  ? __pfx_snd_rawmidi_open+0x10/0x10
[ 1132.210639][T15056]  ? __pfx_default_wake_function+0x10/0x10
[ 1132.210656][T15056]  ? lock_acquire+0x1d1/0x380
[ 1132.210671][T15056]  ? kobject_get_unless_zero+0x156/0x200
[ 1132.210688][T15056]  ? __pfx_snd_rawmidi_open+0x10/0x10
[ 1132.210705][T15056]  snd_open+0x201/0x450
[ 1132.210719][T15056]  ? __pfx_snd_open+0x10/0x10
[ 1132.210733][T15056]  chrdev_open+0x234/0x6a0
[ 1132.210752][T15056]  ? __pfx_chrdev_open+0x10/0x10
[ 1132.210771][T15056]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 1132.210789][T15056]  do_dentry_open+0x6ab/0x14d0
[ 1132.210804][T15056]  ? __pfx_chrdev_open+0x10/0x10
[ 1132.210825][T15056]  vfs_open+0x82/0x3f0
[ 1132.210846][T15056]  path_openat+0x1a23/0x2450
[ 1132.210867][T15056]  ? __pfx_path_openat+0x10/0x10
[ 1132.210889][T15056]  do_file_open+0x20e/0x430
[ 1132.210909][T15056]  ? __pfx_do_file_open+0x10/0x10
[ 1132.210939][T15056]  ? _raw_spin_unlock+0x28/0x50
[ 1132.210954][T15056]  ? alloc_fd+0x471/0x7a0
[ 1132.210977][T15056]  do_sys_openat2+0x10f/0x1e0
[ 1132.210989][T15056]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1132.211001][T15056]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 1132.211024][T15056]  __x64_sys_openat+0x12d/0x210
[ 1132.211036][T15056]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1132.211055][T15056]  do_syscall_64+0x123/0x790
[ 1132.211075][T15056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1132.211089][T15056] RIP: 0033:0x7ff8c555ed8e
[ 1132.211100][T15056] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1132.211112][T15056] RSP: 002b:00007ff8c646eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1132.211124][T15056] RAX: ffffffffffffffda RBX: 00007ff8c646f6c0 RCX: 00007ff8c555ed8e
[ 1132.211133][T15056] RDX: 0000000000141102 RSI: 00007ff8c646ec00 RDI: ffffffffffffff9c
[ 1132.211141][T15056] RBP: 00007ff8c646ec00 R08: 0000000000000000 R09: 0000000000000000
[ 1132.211148][T15056] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1132.211156][T15056] R13: 00007ff8c5826038 R14: 00007ff8c5825fa0 R15: 00007ffc5e83e9a8
[ 1132.211174][T15056]  </TASK>
** 153 printk messages dropped **
[ 1133.292499][   T31] audit: type=1400 audit(1792248153.805:1239): avc:  denied  { write } for  pid=15055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1133.363112][   T31] audit: type=1400 audit(1792248153.875:1240): avc:  denied  { write } for  pid=15081 comm="syz.0.2285" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1133.456559][   T31] audit: type=1400 audit(1792248153.966:1241): avc:  denied  { unmount } for  pid=13562 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 1133.706228][   T31] audit: type=1400 audit(1792248154.216:1242): avc:  denied  { write } for  pid=15090 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1134.019293][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1134.129465][   T31] audit: type=1400 audit(1792248154.636:1243): avc:  denied  { write } for  pid=15104 comm="syz.6.2292" name="functions" dev="configfs" ino=47071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1134.215170][T15110] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI
[ 1134.227249][T15110] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]
[ 1134.235637][T15110] CPU: 0 UID: 0 PID: 15110 Comm: syz.6.2292 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1134.246548][T15110] Tainted: [L]=SOFTLOCKUP
[ 1134.250843][T15110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1134.260894][T15110] RIP: 0010:configfs_depend_item_unlocked+0x24a/0x6a0
[ 1134.267645][T15110] Code: 12 0f 09 c7 44 24 1c fe ff ff ff e9 a6 02 00 00 e8 5b ff 43 ff 48 8d 7d 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1d 04 00 00 48 bb 00 00 00 00 00 fc ff df 4c 8b
[ 1134.287232][T15110] RSP: 0018:ffffc900033e7b30 EFLAGS: 00010206
[ 1134.293280][T15110] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90012266000
[ 1134.301226][T15110] RDX: 000000000000000c RSI: ffffffff82c85815 RDI: 0000000000000060
[ 1134.309172][T15110] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 1134.317116][T15110] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1134.325057][T15110] R13: ffff8880580b8800 R14: ffff8880580b8800 R15: ffff8880580b8942
[ 1134.333001][T15110] FS:  00007f119b31c6c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000
[ 1134.341908][T15110] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1134.348468][T15110] CR2: 00007f0fc3df1158 CR3: 0000000080f91000 CR4: 00000000003526f0
[ 1134.356420][T15110] Call Trace:
[ 1134.359676][T15110]  <TASK>
[ 1134.362584][T15110]  usbg_make_tpg+0x251/0x610
[ 1134.367153][T15110]  ? __pfx_usbg_make_tpg+0x10/0x10
[ 1134.372253][T15110]  ? find_held_lock+0x2b/0x80
[ 1134.376910][T15110]  ? __pfx_usbg_make_tpg+0x10/0x10
[ 1134.381995][T15110]  ? __pfx_target_fabric_make_tpg+0x10/0x10
[ 1134.387861][T15110]  target_fabric_make_tpg+0xab/0x8c0
[ 1134.393121][T15110]  ? __pfx_target_fabric_make_tpg+0x10/0x10
[ 1134.398985][T15110]  configfs_mkdir+0x525/0xd40
[ 1134.403640][T15110]  ? may_create+0x285/0x440
[ 1134.408122][T15110]  ? __pfx_configfs_mkdir+0x10/0x10
[ 1134.413299][T15110]  vfs_mkdir+0x364/0x850
[ 1134.417516][T15110]  filename_mkdirat+0x48b/0x5e0
[ 1134.422357][T15110]  ? __pfx_filename_mkdirat+0x10/0x10
[ 1134.427707][T15110]  ? strncpy_from_user+0x19d/0x2d0
[ 1134.432796][T15110]  ? do_getname+0x191/0x390
[ 1134.437271][T15110]  __x64_sys_mkdirat+0x89/0xc0
[ 1134.442012][T15110]  do_syscall_64+0x123/0x790
[ 1134.446583][T15110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1134.452459][T15110] RIP: 0033:0x7f119a39e559
[ 1134.456856][T15110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1134.476439][T15110] RSP: 002b:00007f119b31c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1134.484833][T15110] RAX: ffffffffffffffda RBX: 00007f119a626090 RCX: 00007f119a39e559
[ 1134.492780][T15110] RDX: 00000000000001ff RSI: 0000200000000dc0 RDI: ffffffffffffff9c
[ 1134.500812][T15110] RBP: 00007f119a435ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1134.508763][T15110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1134.516707][T15110] R13: 00007f119a626128 R14: 00007f119a626090 R15: 00007fffb90aba88
[ 1134.524668][T15110]  </TASK>
[ 1134.527687][T15110] Modules linked in:
[ 1134.531670][    C0] virtqueue callback for ffff888028c48000 (ffffffff86ed9d30)
[ 1134.539231][    C0] eth0: xmit ffff888056ee43c0 42:01:0a:80:00:01
[ 1134.545473][    C0] Added buffer head 48 to ffff888028c47e00
[ 1134.551297][    C0] virtqueue callback for ffff888028c47e00 (ffffffff86ee2c50)
[ 1134.559779][T15110] ---[ end trace 0000000000000000 ]---
[ 1134.565252][   T31] audit: type=1400 audit(1792248154.726:1244): avc:  denied  { write } for  pid=15104 comm="syz.6.2292" name="naa.5001405000000001" dev="configfs" ino=47108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1134.565346][    C0] Sent skb ffff888056ee43c0
[ 1134.565383][    C0] No more buffers in queue
[ 1134.565409][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 1134.565552][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 1134.565572][    C0] Receiving skb proto 0x0800 len 932 type 0
[ 1134.565583][    C0] No more buffers in queue
[ 1134.565765][    C0] eth0: xmit ffff8880755218c0 42:01:0a:80:00:01
[ 1134.565783][    C0] Added buffer head 48 to ffff888028c47e00
[ 1134.565807][    C0] virtqueue callback for ffff888028c47e00 (ffffffff86ee2c50)
[ 1134.565892][    C0] eth0: xmit ffff88807de9fdc0 42:01:0a:80:00:01
[ 1134.565905][    C0] Added buffer head 53 to ffff888028c47e00
[ 1134.566031][    C0] Sent skb ffff8880755218c0
[ 1134.566050][    C0] Sent skb ffff88807de9fdc0
[ 1134.566065][    C0] No more buffers in queue
[ 1134.566074][    C0] No more buffers in queue
[ 1134.566333][    C0] virtqueue interrupt with no work for ffff888028c47e00
[ 1134.689562][    C0] wireguard: wg1: Handshake for peer 4 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 13)
[ 1134.709416][T15099] kobject: 'syzkaller1' (ffff8880672907c0): kobject_cleanup, parent 0000000000000000
[ 1134.709433][T15099] kobject: 'syzkaller1' (ffff8880672907c0): calling ktype release
[ 1134.709462][T15099] kobject: 'syzkaller1': free name
[ 1134.758083][T15113] kcov: kcov_start: t = ffff88805edb0000, size = 524288, area = ffffc90016675000
[ 1134.759066][T15114] kcov: kcov_start: t = ffff88805edb4b00, size = 524288, area = ffffc90020e07000
[ 1134.761435][T15101] kcov: kcov_task_exit: t = ffff888034348000, kcov->t = ffff888034348000
[ 1134.764529][T15102] kcov: kcov_task_exit: t = ffff888029cba580, kcov->t = ffff888029cba580
[ 1134.767194][T15113] kcov: kcov_task_exit: t = ffff88805edb0000, kcov->t = ffff88805edb0000
[ 1134.767709][    C0] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 17)
[ 1134.852281][T15116] kcov: kcov_start: t = ffff88802a350000, size = 524288, area = ffffc90021208000
[ 1134.857632][T15112] syz.4.2294 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000
[ 1134.881160][   T10] vmpressure_calc_level:  99  (s: 79873  r: 1)
[ 1134.884598][T15112] CPU: 0 UID: 0 PID: 15112 Comm: syz.4.2294 Tainted: G      D      L      syzkaller #0 PREEMPT(full) 
[ 1134.884618][T15112] Tainted: [D]=DIE, [L]=SOFTLOCKUP
[ 1134.884623][T15112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1134.884631][T15112] Call Trace:
[ 1134.884635][T15112]  <TASK>
[ 1134.884640][T15112]  dump_stack_lvl+0x100/0x190
[ 1134.884660][T15112]  dump_header+0xfb/0x606
[ 1134.884674][T15112]  oom_kill_process.cold+0xd/0x380
[ 1134.884687][T15112]  out_of_memory+0x340/0x14f0
[ 1134.884706][T15112]  ? __pfx_out_of_memory+0x10/0x10
[ 1134.884722][T15112]  ? rcu_is_watching+0x13/0xc0
[ 1134.884739][T15112]  mem_cgroup_out_of_memory+0xc6/0x130
[ 1134.884755][T15112]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1134.884771][T15112]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1134.884789][T15112]  ? _raw_spin_unlock+0x28/0x50
[ 1134.884805][T15112]  try_charge_memcg+0x783/0xf60
[ 1134.884818][T15112]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1134.884830][T15112]  ? __pfx_rcu_read_unlock+0x1/0x10
[ 1134.884841][T15112]  ? rcu_read_unlock+0x17/0x60
[ 1134.884853][T15112]  ? lock_release+0x24d/0x310
[ 1134.884867][T15112]  obj_cgroup_charge_pages+0x2b/0x1f0
[ 1134.884880][T15112]  __memcg_kmem_charge_page+0x1c4/0x4d0
[ 1134.884893][T15112]  __alloc_frozen_pages_noprof+0x534/0x3300
[ 1134.884908][T15112]  ? page_table_check_set+0x31e/0x580
[ 1134.884926][T15112]  ? __page_table_check_ptes_set+0x1d5/0x530
[ 1134.884944][T15112]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[ 1134.884961][T15112]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1134.884975][T15112]  ? do_raw_spin_lock+0x128/0x260
[ 1134.884990][T15112]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1134.885005][T15112]  ? percpu_counter_add_batch+0x174/0x230
[ 1134.885023][T15112]  ? rcu_is_watching+0x13/0xc0
[ 1134.885039][T15112]  ? rcu_is_watching+0x13/0xc0
[ 1134.885054][T15112]  ? trace_irq_enable.constprop.0+0x122/0x160
[ 1134.885071][T15112]  ? filemap_map_pages+0x17a6/0x2060
[ 1134.885088][T15112]  ? filemap_map_pages+0x114b/0x2060
[ 1134.885103][T15112]  ? rcu_is_watching+0x13/0xc0
[ 1134.885119][T15112]  ? filemap_map_pages+0x114b/0x2060
[ 1134.885135][T15112]  ? lock_release+0x24d/0x310
[ 1134.885148][T15112]  ? filemap_map_pages+0x1155/0x2060
[ 1134.885165][T15112]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1134.885182][T15112]  ? policy_nodemask+0xed/0x4f0
[ 1134.885199][T15112]  alloc_pages_mpol+0x201/0x550
[ 1134.885216][T15112]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1134.885232][T15112]  ? trace_irq_enable.constprop.0+0x122/0x160
[ 1134.885254][T15112]  alloc_pages_noprof+0x1a/0x160
[ 1134.885266][T15112]  pte_alloc_one+0x1c/0x3d0
[ 1134.885284][T15112]  do_fault+0x960/0x1830
[ 1134.885300][T15112]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[ 1134.885312][T15112]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1134.885327][T15112]  ? __pfx_do_fault+0x10/0x10
[ 1134.885341][T15112]  ? pgd_none+0x9f/0xe0
[ 1134.885351][T15112]  ? __pfx_pgd_none+0x10/0x10
[ 1134.885361][T15112]  ? lock_release+0x24d/0x310
[ 1134.885375][T15112]  __handle_mm_fault+0x150b/0x2f60
[ 1134.885387][T15112]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1134.885399][T15112]  ? __pfx_vma_start_read+0x10/0x10
[ 1134.885416][T15112]  ? lock_vma_under_rcu+0x17c/0x590
[ 1134.885432][T15112]  ? rcu_is_watching+0x13/0xc0
[ 1134.885450][T15112]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 1134.885467][T15112]  handle_mm_fault+0x363/0xa20
[ 1134.885479][T15112]  do_user_addr_fault+0x59c/0x12f0
[ 1134.885496][T15112]  exc_page_fault+0x6f/0xd0
[ 1134.885512][T15112]  asm_exc_page_fault+0x26/0x30
[ 1134.885523][T15112] RIP: 0033:0x7ff8c5472d80
[ 1134.885533][T15112] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44
[ 1134.885544][T15112] RSP: 002b:00007ffc5e83e9f0 EFLAGS: 00010202
[ 1134.885554][T15112] RAX: 000000110c408000 RBX: ffffffff8540a789 RCX: 0000000000000001
[ 1134.885561][T15112] RDX: 0000000000000789 RSI: 000000000000029e RDI: 0000000000000002
[ 1134.885569][T15112] RBP: 0000000000000044 R08: 00007ff8c5810000 R09: 00007ff8c5812000
[ 1134.885576][T15112] R10: 000000008540a78d R11: 0000000000000006 R12: 00007ff8c5826038
[ 1134.885584][T15112] R13: 0000000000015949 R14: ffffffff8540a1e1 R15: 00007ff8c6355720
[ 1134.885591][T15112]  ? ZSTD_initStaticCStream+0x11/0x20
[ 1134.885607][T15112]  ? ZSTD_initCStream_usingCDict+0xb9/0xc0
[ 1134.885625][T15112]  </TASK>
[ 1135.207225][T15112] memory: usage 8kB, limit 8kB, failcnt 26
[ 1135.207237][T15112] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0
[ 1135.207244][T15112] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0
[ 1135.207251][T15112] Memory cgroup stats for /syz4/test:
[ 1135.207318][T15112] cache 0
[ 1135.207323][T15112] rss 0
[ 1135.207327][T15112] rss_huge 0
[ 1135.207331][T15112] shmem 0
[ 1135.207334][T15112] mapped_file 0
[ 1135.207338][T15112] dirty 0
[ 1135.207342][T15112] writeback 0
[ 1135.207346][T15112] workingset_refault_anon 0
[ 1135.207350][T15112] workingset_refault_file 0
[ 1135.207354][T15112] swap 0
[ 1135.207358][T15112] swapcached 0
[ 1135.207362][T15112] pgpgin 0
[ 1135.207366][T15112] pgpgout 0
[ 1135.207369][T15112] pgfault 4
[ 1135.207373][T15112] pgmajfault 0
[ 1135.207377][T15112] inactive_anon 0
[ 1135.207381][T15112] active_anon 0
[ 1135.207385][T15112] inactive_file 0
[ 1135.207389][T15112] active_file 0
[ 1135.207393][T15112] unevictable 0
[ 1135.207396][T15112] hierarchical_memory_limit 8192
[ 1135.207401][T15112] hierarchical_memsw_limit 9223372036854771712
[ 1135.207406][T15112] total_cache 0
[ 1135.207410][T15112] total_rss 0
[ 1135.207413][T15112] total_rss_huge 0
[ 1135.207417][T15112] total_shmem 0
[ 1135.207421][T15112] total_mapped_file 0
[ 1135.207425][T15112] total_dirty 0
[ 1135.207429][T15112] total_writeback 0
[ 1135.207433][T15112] total_workingset_refault_anon 0
[ 1135.207438][T15112] total_workingset_refault_file 0
[ 1135.207442][T15112] total_swap 0
[ 1135.207446][T15112] total_swapcached 0
[ 1135.207519][T15112] total_pgpgin 0
[ 1135.207524][T15112] total_pgpgout 0
[ 1135.207528][T15112] total_pgfault 4
[ 1135.207532][T15112] total_pgmajfault 0
[ 1135.207536][T15112] total_inactive_anon 0
[ 1135.207540][T15112] total_active_anon 0
[ 1135.207544][T15112] total_inactive_file 0
[ 1135.207548][T15112] total_active_file 0
[ 1135.207552][T15112] total_unevictable 0
[ 1135.207556][T15112] anon_cost 0
[ 1135.207560][T15112] file_cost 0
[ 1135.207564][T15112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.2294,pid=15112,uid=0
[ 1135.207617][T15112] Memory cgroup out of memory: Killed process 15112 (syz.4.2294) total-vm:102400kB, anon-rss:1444kB, file-rss:23056kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[ 1135.208661][   T10] vmpressure_calc_level: 100  (s: 36864  r: 0)
[ 1135.208694][T15116] kcov: kcov_task_exit: t = ffff88802a350000, kcov->t = ffff88802a350000
[ 1135.290336][T15114] kcov: kcov_task_exit: t = ffff88805edb4b00, kcov->t = ffff88805edb4b00
[ 1135.411445][    C0] wireguard: wg0: Handshake for peer 26 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)
[ 1135.411496][    C0] wireguard: wg0: Handshake for peer 19 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2)
[ 1135.417983][ T7431] net_ratelimit: 491 callbacks suppressed
[ 1135.417994][ T7431] wireguard: wg0: Sending handshake initiation to peer 26 ([::1]:20003/0%0)
[ 1135.418148][ T7431] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000
[ 1135.418206][ T7431] wireguard: wg0: Sending handshake initiation to peer 19 ([::1]:20002/0%0)
[ 1135.418329][ T7431] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000
[ 1135.450595][   T10] vmpressure_calc_level: 100  (s: 32768  r: 0)
[ 1135.553026][T15096] kcov: kcov_task_exit: t = ffff888032564b00, kcov->t = ffff888032564b00
[ 1135.646402][T15098] kcov: kcov_task_exit: t = ffff88802bef0000, kcov->t = ffff88802bef0000
[ 1135.647278][    C0] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0)
[ 1135.647958][ T5719] wireguard: wg1: Receiving keepalive packet from peer 15 ([::1]:20001/0%0)
[ 1135.801217][T15110] RIP: 0010:configfs_depend_item_unlocked+0x24a/0x6a0
[ 1135.801244][T15110] Code: 12 0f 09 c7 44 24 1c fe ff ff ff e9 a6 02 00 00 e8 5b ff 43 ff 48 8d 7d 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1d 04 00 00 48 bb 00 00 00 00 00 fc ff df 4c 8b
[ 1135.801256][T15110] RSP: 0018:ffffc900033e7b30 EFLAGS: 00010206
[ 1135.801268][T15110] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90012266000
[ 1135.801276][T15110] RDX: 000000000000000c RSI: ffffffff82c85815 RDI: 0000000000000060
[ 1135.801283][T15110] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 1135.801291][T15110] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1135.801298][T15110] R13: ffff8880580b8800 R14: ffff8880580b8800 R15: ffff8880580b8942
[ 1135.801306][T15110] FS:  00007f119b31c6c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000
[ 1135.801319][T15110] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1135.801327][T15110] CR2: 00007f52a6034368 CR3: 0000000080f91000 CR4: 00000000003526f0
[ 1135.801337][T15110] Kernel panic - not syncing: Fatal exception
[ 1135.902826][T15110] Kernel Offset: disabled
[ 1135.907136][T15110] Rebooting in 86400 seconds..