last executing test programs:

5m34.264125243s ago: executing program 3 (id=1396):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500200000002005007b1af8ff00000100bf5f4bfa23b980999166ee410421ea593a60daffd28b804f2db30e07836eed957d66872f79ea19e5e6896e2aa2f87c056c300b781c6c91cdba990841f4387a1f49ffd9c0bab03bc0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e4000000009e00000005000100060000000500040000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER(0x3f, 0x1, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
epoll_create1(0x0)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280))
io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0)

5m33.338311347s ago: executing program 3 (id=1398):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f00000000c0)={{@hyper, 0x2}, 0xffffffffffffa432, 0x0, 0xb661, 0x80000000})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xb4, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xb4}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="380000001a000100000000000000000080002000", @ANYRES32=0x0, @ANYBLOB="00000000080002000b000000140001"], 0x38}}, 0x0)

5m33.23342589s ago: executing program 3 (id=1400):
iopl(0x3)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

5m32.761781382s ago: executing program 3 (id=1402):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x10)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000140))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}, 0x6000)
getgroups(0x1, &(0x7f0000000ec0)=[<r6=>0xffffffffffffffff])
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
sendmmsg$unix(r2, &(0x7f0000001200)=[{{&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000100)}, {&(0x7f00000005c0)="66ef62511fdeef97f225b70a6141aba6c85ab27e75654bd94164580de11c90f12a19d129fa881249ac187cb27a0071da3e9c89cc337503d13ad1efef801b11464ba1c0a51b344049dc4125175b5bcf463658595b7297c217c3a26d7152e2302eb4b19b9be7c1eed429404f54bfbc774513a265f56eb84af85a4b7590f5d05a456a5d8bdd282d8a3a67283b59c7c987ff710200026d662c7c6c102a0db27681114b3f1c006f1c776933e7ac3deb2e", 0xae}, {&(0x7f0000000680)="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", 0xff}, {&(0x7f0000000780)="b45965818ea8d55c45c12e1cbe7c3f050707cf316024a9b3023ece3636d2346c004a020138c58106b567058354dcbd8ecec8f5f294d5038bd60976649207acf97604320c49c36431441c023036798e2040862c910757f88aceaeb3eef5badcec93e4599f57afe13a29f2f9803910a2d2f6896982d43b938dff269d3cf275bc3e615de3f1b48ad9b59e16cf271e637560d7f47fc1266a785dc0531eaef5e98ffbfe28329c49387ac0e7b2c04b1584c5faf39b355127888f74baeb992f4e42112062c6e03662db6c44bb02f6baf3bfaf25cdc1da634aad06a8b267c3d060c67454788493939d0762b50cb3362288b9f613438ac83e22e5914f", 0xf8}, {&(0x7f0000000880)="f986f1f650dba737bb703e1624d8e1fb407878f306e0764839aacff8291c0239743061e23574c052c88cac9939a9d39914a1945e12952dd43d686001dacd7eee04f456dcbffb34f5715ea5ff113d4d8b87afd123ad69927b9c403070a21c738c653076007c57bbd6fa73201f6405ad754a14e34ade94818073cad2546adf71f41aae7645d070847fe3fa43329f49e16e4c4fabf1fa513f688dfb844c21979b59", 0xa0}], 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="302000000099000001000500"/22, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r3], 0x30, 0xc000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="136c27dc252fde2ad01184794f7411afd694151aa42189728e4108027fdb371882c4d2fa07bb1c954da8afb3cafadf4749a962cc85318db35afebf2b168d3e3b3d6acd885827de58e639c8adcea618fd8aa0aaa11e744b2dcefa14ddc3a1065e7c1224635eb8a7f1c53622883b5238315f850fb04a0fbcb49a8a7378a9a0e6edac80ce87a2eac0ec349fe2911a112afedc4f1152df1acad807ce140a45158db6634b8f4be2707c078426ed371e1dd422a3d4e4ab1c49504b299782b8384cd909d1e4f549f66b051499657613b8fece09a9bf450053fba467fe844bb15160b6913e99cc90b68bfb8bf334c7c5a9", 0xed}, {&(0x7f0000000ac0)="a46790e4ab6e4cadd3e4f3c366643c83793ae1e037258fec57129710d0cb712914b0a91951e16e4087b3033804292ab0c6a6bc337e198260660d022e6cf838f76ba172c7e396b61abe7f44f8eb45bbc7f909f577504a2b804e9050e7b4a501f927d6991cca6a", 0x66}, {&(0x7f0000000280)="c66f2b883aebd4ff815a9e61ce9a18eea85e5f8aca49b8c53fe28429d20c20", 0x1f}, {&(0x7f0000000b40)="c08f9e0744e595a798694023ff3e63c9965d3bf0c7344c795479993a9c946b5a52d0313503dfd7908acad321aa4e4f07bfd93d3faab89cbfbfadc4a5f1c7d6ef79e4b8577ef53ce8853f7a5be678fdd4eb193a27a688c0e9e9a0d32b00488ed7d5b9b70f0c573446f5d277a90efa7a208be2c102d304cafffc07b7085247c92f3be5c941f11319b2a5c8f54de02e5458be96bbcf1bf56d558f567cf50071d7f59153036bba0b82fdf8c443dcbf7ff040ffbd514bc24b1fe3b90ec9868a96245fe89004edec9a5a9205", 0xc9}, {&(0x7f0000000c40)="426f2936c8fa45cbfc28a03077344718d495892587cadf9314664fb3be4ba9941852a340bea09aeac169149cfec0ea40285af6aade3ac2e2cc7c9739e94045685ac8240c93ba6fe550ed47622cc9f6f37efdfe8edf239c772e3101d5d27c58f120d55c1929f9e82ec0a38a79aeff1600f0a5632ccb60df9bbbbcdc001d7754b56a27ea5e2acb", 0x86}, {&(0x7f0000000d00)="0305ec3295fc2ef670ec767e8cff27d32756478bd360c060a02a20f1e6e3b6ec5c6987250f9c50b1dc0e8465a17078661e9316e16d83be8d7834014e58baebe5c6f7c5ceee19417678b10d900a6fc5a100eab74cfb5c918f66e8ebae90220c1479518351f469abdb43caa1925f73e2895b18af9a45095479bf5ee909c57c6a92542a3e3d7372ab5a2762ed9d2c36c844370980679dc33470e62d99f5533c08a7c5106805a0b9e91ccb56dc45e7cb4ab06725481a1842", 0xb6}], 0x6, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x40, 0x800}}, {{&(0x7f0000000f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000fc0)="bf1177970599e4d81e2267f7856a0a704de101708b677fe9a1ba299e3ecb86628f6ebb0e14ba8d85b9afbf3e8f5eb80fc4725dae8bee1c0e0d71f9f6e9347b0987c23695511371011cf7341a4edccad59d7ebe6b9ff8003525af1f30f4e9584027ad5bd6c7d636686fa6e58312428991ce8f82bd7c", 0x75}, {&(0x7f0000001040)="f981d311db77b4b7275713ac3b12cda538e8e76cfeebc109bb33876890b11f74c6eb2c894b5d5f9d498b317eb8ecaa7b5d808103f5dded7af27253644f800e823988ac89f907907132299200efb13c3925ff3b5c0039ffc252a2a1e2459858", 0x5f}, {&(0x7f00000010c0)="6cd05f8b83589adb0056f45b87d2c8402fa18747804190c673d3dd912803d2cec73735f24aeedaaa80e4942ee200c0291e73278e62303059e830e8f461e352f42592bffd6e77460fc7f60c780399edbcf1dcfb49cf8bf1b0592712d141d420bf535745752fd730479a02fceddb6bae43c0076e9b194f366cd054e14947abdb", 0x7f}, {&(0x7f0000001140)="049f5e094cfc5e9d25270b84ffab964ae0f3b9c301f5400d2b769bd03a16ef5d1525a30d192aa4853743a9a5750db33895562c50f7551b8227dd4f", 0x3b}], 0x4, &(0x7f00000011c0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r5}}}], 0x20, 0x40}}], 0x3, 0x84)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x2})
sched_setattr(0x0, 0x0, 0x0)
r8 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=<r9=>0x0, &(0x7f0000000040)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r11 = eventfd2(0xff, 0x80001)
io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000300)=r11, 0x1)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0xb, 0x4007, @fd_index=0x2, 0xcb4f, &(0x7f0000001380)="53221eed04974ff1ec6140853908eb96fffb187cbd8bf160c244dae993670310d861ad03d5edc62266ce422ba3a50e0faceb4e6de904a411ac3e2949d51567554831bc0355c8b8fb5480fa547fbbcd35688077d930745352b7166f039c6d1060b3132eea6d9599de6c27ed802d6205aae472ab6f7b356ab42b0a79e655849b2f36bdfd9fe18d70dd0945b75932d00f", 0x8f})
io_uring_enter(r8, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)
getdents64(r0, 0x0, 0x11)
r12 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r13, 0x0, 0x0, 0x0, &(0x7f0000000080))
getdents64(r12, &(0x7f0000000300)=""/154, 0x9a)

5m32.244113623s ago: executing program 3 (id=1406):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x52, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf000000}, 0x50)

5m28.94167039s ago: executing program 3 (id=1424):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x9}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
r2 = socket$l2tp(0x2, 0x2, 0x73)
recvmmsg(r2, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}, 0x2a}], 0x1, 0x10020, 0x0)
bind$l2tp(r2, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x15)
ioctl$TCSETS(r3, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0xffffffff, 0x5, 0x0, "3eccd8f9d20000000000001000000200000500"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000040, 0x0, 0x0, 0x200000000070, 0x2000000000a0], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108)
socket$kcm(0x29, 0x5, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r6, 0xffffffffffffffff, 0x0)

5m28.777890881s ago: executing program 32 (id=1424):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x9}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
r2 = socket$l2tp(0x2, 0x2, 0x73)
recvmmsg(r2, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}, 0x2a}], 0x1, 0x10020, 0x0)
bind$l2tp(r2, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x15)
ioctl$TCSETS(r3, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0xffffffff, 0x5, 0x0, "3eccd8f9d20000000000001000000200000500"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000040, 0x0, 0x0, 0x200000000070, 0x2000000000a0], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108)
socket$kcm(0x29, 0x5, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r6, 0xffffffffffffffff, 0x0)

2m33.026306883s ago: executing program 0 (id=2158):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0xff, @private=0xa010101, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x3d71, 0x2}}, 0x44)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000ac0)={r7}, &(0x7f0000000b00)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000040)={r7, 0xcc5}, 0x8)
readv(r3, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x7, 0xfffffffc, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"})
r8 = syz_open_pts(r3, 0x42)
r9 = dup3(r8, r3, 0x0)
write$UHID_INPUT(r9, &(0x7f00000001c0)={0xd, {"08c39ee52f329f1698b1c4865f8b0a0a5eee9f496a0809c3d21c25867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76013256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c)

2m31.778799312s ago: executing program 0 (id=2166):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000001240)={0x4, 0x1, 0x0, "d89afa0f00f54fbb18b08228e7afdb626c316aebe3ce9fec12f74acc2a3e3e58", 0x38414262})
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40002023, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

2m31.665537716s ago: executing program 0 (id=2170):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(r1)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
syz_emit_ethernet(0x1e, &(0x7f0000000000)={@local, @random="a538ae464632", @void, {@can={0xc, {{0x1fffffc0, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "6ae357c135df6ea3"}}}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x403, 0x7f, 0x6, 0x49, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfffffefd, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x4, 0x3c5b, 0x1, 0x24, 0x5, 0x1, 0x1f461e2c, 0x12, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x80000001, 0x71, 0x7, 0xb, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0xd4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2ff, 0x3, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x8, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x4, 0x8000, 0x2009, 0x0, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x3ff, 0x8000, 0x1, 0xfe000000, 0xffff, 0x5, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x101, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x6, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0xffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x100, 0x6, 0x1c, 0x120010, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x2, 0x5, 0xce7, 0x80000000, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x10000, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0xae1, 0xaf5, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x204, 0xffff3441, 0xfff]}, 0x45c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10)
r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
write$selinux_access(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000015c292000090509"], 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000000)=0x6)
r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x600040, 0x0)
ioctl$HIDIOCGRAWPHYS(r7, 0x80404805, &(0x7f0000000300))

2m30.214434507s ago: executing program 0 (id=2177):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r5=>0x0})
bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67)
tkill(0x0, 0x13)
tkill(0x0, 0x12)
ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=@dellinkprop={0x240, 0x6d, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x114, 0x1000}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_VFINFO_LIST={0x1e8, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x80000000}}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffff, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x7f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xffffffff, 0x5}}]}, {0x10c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x40, 0xffffabf7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2e2, 0xfffffff7}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3cb07c8b, 0x591, 0xfffffe00, 0x8100}}, {0x14, 0x1, {0x7, 0x3ce, 0xa, 0x8100}}, {0x14, 0x1, {0x1, 0xd41, 0x4, 0x8100}}, {0x14, 0x1, {0x7, 0x8d3, 0x4, 0x88a8}}, {0x14, 0x1, {0xfffffff7, 0xe75, 0x1, 0x8100}}, {0x14, 0x1, {0x8, 0xad8, 0xa6, 0x8100}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfff, 0xc63, 0x5, 0x88a8}}, {0x14, 0x1, {0x8, 0x44c, 0xc9, 0x8100}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0xdf}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @multicast}}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xa74, 0x8, 0xff6}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x1476, @random="c4f92a68e3cf"}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000001, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0xa, @local}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x8}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0xfff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0x3ff}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_macvtap\x00'}, @IFLA_XDP={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_1\x00'}]}, 0x240}, 0x1, 0x0, 0x0, 0xc2}, 0x1)

2m29.041851506s ago: executing program 0 (id=2185):
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
request_key(&(0x7f0000000240)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\\\x00', 0xfffffffffffffffd) (async)
r0 = request_key(&(0x7f0000000240)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\\\x00', 0xfffffffffffffffd)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x2000000, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}}, 0x0)
add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)="349cdbcbc608d123fcebfaeb25c110506dc49f41c9063e53e0411316b889e348c1c264e4246201420606210d090e274d5c2f0cecb57a48d9441fccec50429aa79bc694930fa3578d440721097a40a03b6edca491d931f897eeeb8790ee01bf4d1542ecfecc86e5398bf436560b48a13fa75cf47a575c365e2898403e918d377fa3cb68335cd4ec1485c539a557451af0f13aa4fa01913f6322a5f5ca04aa0ea39a9911c729e6be9dce5f1b404e5bd77afc354eb30c58871f11fdd4fedf20a0005e58de6888811563cbe216fd568c62359cf3a8d4a9f6c9b32deee50324e45d3c7704b86ba217", 0xe6, r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0x19, 0x10001, 0xd, 0x0, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x0, 0x1ff})
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$media(0x0, 0x0, 0x101d01) (async)
syz_open_dev$media(0x0, 0x0, 0x101d01)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES8, @ANYRES16, @ANYRES16=0x0], 0x118)
syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00')
lseek(r6, 0x1000000, 0x0) (async)
lseek(r6, 0x1000000, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r3, r3, 0x0, 0xb7e)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="041cba4562ddc20900000000000000ff0004000000008ed4433a1c1303fab2b611f25626f41fe2d8ee8661b1f83298af761462a8e30c4060cb11ff7cd4cd1fa97026cdbbfaf1c128087df228e1f10abedf614c38becd9238cc3fddf3270766ce79a7b439d68c65a4d8d4d8f3042c50c0179b942c2c5dd845ec5ca1014996f341a5ab222b9a2595396c1a2f24a97a8b094f29b9678ab3ca9278aa8da92a883fd3de91fc9d93e1321fbee5d466be7d26151f39887c25ca66950fb3a1ac44a1"], 0x3) (async)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="041cba4562ddc20900000000000000ff0004000000008ed4433a1c1303fab2b611f25626f41fe2d8ee8661b1f83298af761462a8e30c4060cb11ff7cd4cd1fa97026cdbbfaf1c128087df228e1f10abedf614c38becd9238cc3fddf3270766ce79a7b439d68c65a4d8d4d8f3042c50c0179b942c2c5dd845ec5ca1014996f341a5ab222b9a2595396c1a2f24a97a8b094f29b9678ab3ca9278aa8da92a883fd3de91fc9d93e1321fbee5d466be7d26151f39887c25ca66950fb3a1ac44a1"], 0x3)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 'batadv_slave_1\x00'}}, 0x1e) (async)
connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 'batadv_slave_1\x00'}}, 0x1e)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

2m28.834912797s ago: executing program 0 (id=2187):
syslog(0x2, &(0x7f00000006c0)=""/10, 0xa) (async)
r0 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r4, @ANYRESDEC], 0x52) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) (async)
setitimer(0x1, &(0x7f0000000100)={{}, {0x0, 0x2710}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async)
syslog(0x2, &(0x7f0000000700)=""/31, 0x1f) (async)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0)

2m13.852631218s ago: executing program 33 (id=2187):
syslog(0x2, &(0x7f00000006c0)=""/10, 0xa) (async)
r0 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r4, @ANYRESDEC], 0x52) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) (async)
setitimer(0x1, &(0x7f0000000100)={{}, {0x0, 0x2710}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async)
syslog(0x2, &(0x7f0000000700)=""/31, 0x1f) (async)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0)

8.549318405s ago: executing program 6 (id=2687):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r7], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}]})

7.6461381s ago: executing program 4 (id=2691):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000f40)={0x2020}, 0x2020)
close(r0)
unshare(0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

6.859268986s ago: executing program 4 (id=2693):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="4c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401002400128009000100626f6e6400000000440002800500010006000000080003000000000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x5000000}, 0x0)

6.426825359s ago: executing program 4 (id=2696):
socket(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x43)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x8000, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)={{0x12, 0x1, 0x250, 0x6, 0x9c, 0x4e, 0x8, 0x525, 0xa4a0, 0x3e5b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfd, 0x9, 0x40, 0xef, [{{0x9, 0x4, 0x8c, 0x0, 0x1, 0xe9, 0xd5, 0x1c, 0x3, [], [{{0x9, 0x5, 0x7, 0x17, 0x8, 0x1, 0x6, 0x59}}]}}]}}]}}, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14)

5.953626436s ago: executing program 5 (id=2697):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r1, 0x8b29, &(0x7f0000000040))
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::/', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd479373345b181f4db84c863857dd105d6d299b8b0878dc3edf6edff457dba1ae12a98f36de8f9abff66ceb4ee3ebc90a262d9efe3a53ef2cb53ada662564fba229ce9b829f179bee5ccd2f4e63a6b77c2acd379875a6b36c930c89d264000000000000", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x20004804)

5.208276728s ago: executing program 1 (id=2701):
mkdir(&(0x7f0000000000)='./file0\x00', 0x1c4)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
splice(r0, 0x0, r0, 0x0, 0x39000, 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x818098, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
rmdir(&(0x7f0000000080)='./file0\x00')

5.106940275s ago: executing program 1 (id=2702):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
linkat(r1, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400)

5.096263124s ago: executing program 1 (id=2703):
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'veth0\x00', @multicast})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x32, 0x7, 0x9, 0x3}]})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="531f26bd7000df31f04f1f000000b478b7d585ffcd893507ba270dad5933ec32c4f5b64e87ad373f54aaa583782b7846d74959268795"], 0x14}, 0x1, 0x0, 0x0, 0xcd2ddc7cce1b9250}, 0x4000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r6)
chdir(&(0x7f0000000540)='./cgroup\x00')
setresuid(0x0, 0xee01, 0xffffffffffffffff)
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r8 = socket(0x2c, 0x3, 0x0)
sendto$inet6(r8, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f00000001c0)={0x80000, "340b7832ceefdad118cf501922d6974a270000c50f0000002ddc7d00"})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffd0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r9 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc))
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
setsockopt$sock_int(r10, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4)

5.060307215s ago: executing program 6 (id=2704):
setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff})
timer_create(0x3, 0x0, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x2b8, 0x0, 0xf8, 0x6000000, 0x200, 0x3a8, 0x3a8, 0x200, 0x3a8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'virt_wifi0\x00', 'syzkaller1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0xd2030000}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0xf000000}}, {0x28}}}}, 0x330)

4.797155353s ago: executing program 1 (id=2706):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300}})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x15)
creat(&(0x7f00000000c0)='./file0\x00', 0x24)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0)
r9 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r9, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r9, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)

4.130819842s ago: executing program 5 (id=2707):
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000340)={{0x8, @loopback, 0x4e2c, 0x1, 'ovf\x00', 0x14, 0x2, 0x5b}, {@empty, 0x4e22, 0x3, 0x10001, 0x7, 0x8}}, 0x44)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = gettid()
getpgid(r1)
shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
socket$inet_udplite(0x2, 0x2, 0x88)
mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x100, 0xfffffffc)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x2800)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000018c0)=0x13)

3.481185893s ago: executing program 6 (id=2708):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_kvm_add_vcpu$x86(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f00000004c0)=""/102392, 0x18ff8)
syz_open_procfs(0x0, 0x0)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, &(0x7f0000000a40)="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", 0x6ff)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000140)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100015006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0, 0x0)

3.480680418s ago: executing program 2 (id=2709):
syz_emit_ethernet(0xbe, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x4000, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff200000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x34, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xf, "f7d11634eea239467089c40ced"}, {0x0, 0x2}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0)

3.286987466s ago: executing program 1 (id=2710):
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b7000000e0ff2000bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000022604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141400000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)

3.022442999s ago: executing program 4 (id=2711):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x5, 0x3, [0x2], [0x810003, 0x0, 0x8, 0x1080000], [0x5, 0x0, 0xffffffff, 0x46], [0x2, 0xfffffffffffffffd, 0x0, 0x4000000000000000]})
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1a)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)

2.969782159s ago: executing program 2 (id=2712):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r1, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clock_gettime(0x2, &(0x7f0000000100))
ioctl$TCFLSH(r5, 0x80045430, 0x7ffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
ioctl$TIOCL_SETVESABLANK(r8, 0x560e, &(0x7f0000000140))
ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000))
r9 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r9, &(0x7f000001a240)=""/102400, 0x19000, 0x41e)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r2, 0x0, 0x60100000}, @flat=@binder={0x73622a85, 0xa, 0xffffffffffffffff}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c40)={0x54, 0x0, &(0x7f0000000780)=[@release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2.691840005s ago: executing program 5 (id=2713):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x24080, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', <r1=>0x0, 0x29, 0x4, 0x9, 0x4, 0x10, @dev={0xfe, 0x80, '\x00', 0x42}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x40, 0x1, 0x2, 0xd985}})
sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x12c, 0x10, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x11010, 0x221b9}, [@IFLA_BROADCAST={0xa}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}, @IFLA_AF_SPEC={0xf0, 0x1a, 0x0, 0x1, [@AF_INET6={0xa4, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}]}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x14, 0x0, 0x0, 0xd4}, {0x8, 0xa, 0x0, 0x0, 0x3}]}}, @AF_MPLS={0x4}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x19, 0x0, 0x0, 0x5}, {0x8, 0x1b, 0x0, 0x0, 0xfffffff9}, {0x8, 0x9, 0x0, 0x0, 0x2}, {0x8, 0x17, 0x0, 0x0, 0x80}]}}, @AF_BRIDGE={0x4}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x12c}, 0x1, 0x0, 0x0, 0x240008c1}, 0x400c004)
r2 = socket$netlink(0x10, 0x3, 0x14)
inotify_init()
r3 = syz_open_dev$video4linux(&(0x7f0000000300), 0xe, 0x80001)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x124, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x20000001)
munlockall()
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000580)=0xfffffffffffffffe, 0x8, 0x8)
socket$kcm(0x29, 0x5, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f00000005c0)=0x7ff, 0x2, 0x3)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000600)={<r5=>0x0, 0xa2da, 0x0, [0x100000001, 0x7, 0xa, 0x2, 0x2], [0x0, 0x5, 0x7, 0x78258c41, 0x0, 0x9, 0x1, 0x21, 0x6, 0x101, 0x9, 0x5, 0x80000001, 0x903, 0x3, 0x5, 0x9, 0x5, 0xf9c, 0x7ff, 0x7fff, 0xffffffff7fffffff, 0x3, 0xfffffffffffffffe, 0x8, 0xb, 0x2, 0x1, 0x9, 0x7, 0xcf, 0x8, 0x4c7, 0xc6, 0x8, 0xffffffff80bc1f51, 0x8, 0xe057, 0x81, 0x9, 0x7, 0x6, 0x5, 0x1000, 0x6, 0x1, 0xb, 0x0, 0xbded, 0x8000000000000001, 0x3, 0x7ff, 0x9, 0x1, 0x4, 0x3a18, 0xffffffffffffff80, 0xbda0, 0x7, 0xc99000000000000, 0x9, 0x32b4, 0x1ff, 0x400, 0x2, 0x2, 0x9, 0x5, 0x80, 0x155, 0xb5b, 0x0, 0xf5c0, 0x100, 0x800, 0x7, 0xfffffffffffffbff, 0x0, 0x2, 0x3, 0x4000, 0x1, 0x401, 0x1, 0x4, 0x3, 0x3, 0x81, 0x4, 0x1000, 0x7, 0x80000000, 0x8000000000000001, 0xffffffffffff8000, 0x4, 0x6, 0x3, 0x3, 0x330, 0x570f, 0x91, 0x12, 0x6, 0x2, 0x6, 0x10000, 0x200, 0x7f, 0x20a, 0x6, 0x1, 0xfb, 0x9c6, 0xfffffffffffffff4, 0x5, 0x3, 0x0, 0x0, 0xa, 0xffff, 0xb1f]})
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000a40)={r5, 0x10001, 0xac, 0x1})
r6 = getpid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e40))
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e80), 0x8800, 0x0)
ioctl$VIDIOC_S_PRIORITY(r7, 0x40045644, 0x1)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000012c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f0000000f00)={0x350, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x4, 0x5, 0x2, 0x8}, {0x2, 0x8, 0x7, 0x8}, {0x2, 0x0, 0x81, 0x3}, {0x49, 0x1, 0x5}, {0x3, 0xff, 0x4, 0xb}, {0x8, 0x8, 0x10, 0x6}, {0x5b, 0x3, 0x63, 0x6}, {0x400, 0x8d, 0xf, 0x4e}, {0x1, 0x7, 0xaf, 0x78}, {0x5, 0x72, 0x7}]}}}]}}, {{0x8, 0x1, r1}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3e03000}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r1}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x350}, 0x1, 0x0, 0x0, 0x40048140}, 0x40000)
getpeername$packet(r0, &(0x7f0000001340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001380)=0x14)
sendmsg$nl_route(r7, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@bridge_getneigh={0x40, 0x1e, 0x300, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r8, 0x20, 0x14412}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_WEIGHT={0x8, 0xf, 0xffffffff}, @IFLA_EVENT={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x37ad5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000001480)={0xa, 0x4e22, 0x6, @loopback, 0x7}, 0x1c, &(0x7f00000029c0)=[{&(0x7f00000014c0)="90acddbfbb53d125df986e00ef8049d31bcfb18a2c449f74b0ca091e126a83a66dc84aaadbe0ffc0b0cb0eac9c8c54d64667af9edf9df1ed65740f556f57f20643bcaf4a3be9fe48ae3ebe8aab6aaf0052042cce55428ac41207bf563846ef8ce2f21740b320007cc460ff92b7e5a3a367e0201e9c734bc6782fbaa524c694b82b422093bfa2669361d5aad3c51a5b635790152691163d9e0de5330060b51e215347a564c1a8a87591f256af73a6689198cf0990cf0151e47af2319ba024422800324fd347b95fcda3d2b593bd3013023775c680f35285c663a291436ed1b3c042b0e8d2026bb9", 0xe7}, {&(0x7f00000015c0)="64668c0746412a70272f127cce7a879edbe032f2ee31e11657532228516eb3cbe5c626f3a35cdea86952fa7e351feaae3091747e", 0x34}, {&(0x7f0000001600)="a882ff23fea6b83bf6d53021b8a96813ce9605ffb2cfdaeb", 0x18}, {&(0x7f0000001640)="2fe37cdf0bf4264864d4c1bfb462c86ccf23d1804dfff461bac9a49d62ed883f54a4447008a6dc25ed115f7e78cb", 0x2e}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="7f4989a4a5ef8f0a918bf96f6cc54e3de83521a65f045c4004133c71636b39a551982fa5db4d1dd50d4ea17884e7f789ecbd34ebe4f98a61c598e7d0c9146d95383c24af0382699523ef200848fcfa721b478813d4b6", 0x56}, {&(0x7f0000002700)="abfe84ddf2985140525b16a79cd181196390239defc7f866f866c0f7586233ec2374997f8ad09764a0f40cc523ea260a45cbc29a3449ee1a69366100872fefc59d5863c6e3c2022ce0bf176911c032a575b3697b3c99b1c8bf740965933eab1c47535358cdd42fa7cc33d9b9c9ddf24c8c7b2c8693194ce0111ed3a1db286f261105bccb307d625389660c249a67c1bbe43d445b208d9e855eb89ea570a3ea22ec8f1412f4b7d0e5c2048cc52935c84930895415ac2ecf6693ac9cd8bb12c3e4112cc70091fa44d78f4b4cb20dc6c17234789e699a3e9daebe8c416fc143", 0xde}, {&(0x7f0000002800)="9618fd7b6c3b0bcdc2299f6d01350250a7f5e59d131dd3ec08b8498737e2624e89ae224a49b8b3c50530140eff4c6ac385c6718a0460a9b4a914d1c941d7b5cfd3a6a4780266d6fcf08b1e35c3cb52cc003ba498f502a709de330dc44b40e832541b04a07181aa969284163a50ee5a33acf2b0b90af4e290d25fbfdf346908439b5a7d12c76b92b8b7927d40a65c5b7360e76271addf82e2a43cd7de22c8e6dfc8dba41c5ec8c8503cc834c66fd9c094", 0xb0}, {&(0x7f00000028c0)="50e3431f2bae0f9652dda91e7d8b4fbc3dafd276a277590a631ae3b2fdb6a81cdd12a3d0be3098f18e03d849fcac6169155f88541693a246a697a2415dc16a31b6f5e35a3edcad48be9e608b04d2b823fa8236dacfd28b4cf0588974086952ed4a59973707c17b3c4af4ce5ddf8b72e222f493665c90ada7d891c96e5bbef673718832eed56b6535714f045fa634e932ab3055f8d85a8462ee9f4e255747578d9b02ee240be8d484a8978863399dc950", 0xb0}, {&(0x7f0000002980)="3ecbb8e1b576596e2f083a9d17ff128cc833a9673b7c662f9a59b88ae5490a4a463ea679fc90604dcd9866384a44", 0x2e}], 0xa}}, {{&(0x7f0000002a80)={0xa, 0x4e24, 0xf7f8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000002c80)=[{&(0x7f0000002ac0)="4f64b5347719f7c78272530f23df4317205685821ed2e6078b56ef7792eaacdded490e372a06500f76f10cb96f0498e961ce805065c42833f583614099", 0x3d}, {&(0x7f0000002b00)="7d6f15bdb447198c9baf19496cc04a0147af805a45c9492ed8b0990895926d78fbefda7b75031d7c47a41a3e593b9486a472123dff", 0x35}, {&(0x7f0000002b40)="1f10f15b2613f96968ba9c76db9b22be876db560c23a211d73fb32c238d8449e837149de138419c946a5c5c5ffbc6f45d2fad70dbce735874286de99d80b2e8367632e011b47830268ed59bcbdb9b65de861b8c551ce64bd763ac8d0f220202914e9aab4ffef5278423d67161da03f0ab04cabe229538498e4afabc65f800cb1786735af1b5eaafd2fac01ed5f63cda603816eb50fc484c7779f531067240ca8", 0xa0}, {&(0x7f0000002c00)="359ff63e02f754c08dc5b92d631953c28130497d2a1d94a66aab8beeb38023d18f9c144070c8849767302ea0cc4f534b2a90d63b1ffbec49d652b5e6c9dd7ef339741bd0e05325589fd7d018066b88830fab0ceb78dc16d38d782cac3a595948ebfd8ad48514", 0x66}], 0x4}}], 0x2, 0x20004)
r10 = inotify_init1(0xc2221005e5fa3717)
r11 = inotify_add_watch(r0, &(0x7f0000002d40)='./file0\x00', 0x200)
inotify_rm_watch(r10, r11)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000002e40)={&(0x7f0000002d80), 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)=@ipv6_getrule={0x1c, 0x22, 0x0, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x10, 0xce, 0x0, 0x0, 0x0, 0x4, 0x7}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x50)
recvfrom$netrom(r7, &(0x7f0000002e80)=""/184, 0xb8, 0x10001, &(0x7f0000002f40)={{0x3, @null, 0x1}, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000002fc0)=0x6, 0x1, 0x0)

2.248371127s ago: executing program 6 (id=2714):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="40000000120005010000600000000000050019"], 0x40}}, 0x20040810)

2.203613398s ago: executing program 5 (id=2715):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x10, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000080)={0x1, 'veth1_to_batadv\x00', {}, 0x1})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15655595860608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
unshare(0x4000280)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}})
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x8000000)
r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0xb253600de4a8df8a, 0x80010, 0xffffffffffffffff, 0x10000000)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x12, 0x4004, @fd=r6, 0x8, &(0x7f0000000100)="34b5c710eed2b4e7f737c5481ec5aac8cf722adf17", 0x15, 0x0, 0x0, {0x0, r11}})
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0))

2.201500372s ago: executing program 2 (id=2716):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, &(0x7f00000004c0)=0x20) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x48a, 0x85e, 0x1ff, 0xfffffffa, 0xf]}, &(0x7f00000000c0)=0x54)
readv(r1, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000480)=""/122, 0x7a}], 0x3)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', <r3=>0x0, 0x4, 0x8, 0x6, 0x8, 0xd, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x81, 0x6}})
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="06001d000100000008000200e108000bf0b53f1752"], 0x44}}, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="b19fa39a600610000008110120010000000000000000000000000000ff0200000000000000000000000000014e230e22004c90783cc33ca294957795f6301783b2cc96b907a734603b759b6ef4f77866ebdf7416354fd0ce6aafe94ab714a7f107d0"], 0x0) (async)
shutdown(r1, 0x1)
r5 = epoll_create(0x8001)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x10})

1.946880829s ago: executing program 6 (id=2717):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000340)="4700000001003f", 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000019140)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x20000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioperm(0x0, 0x8, 0x8000000000004)
rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x73f90401a4ce04d2, 0x0}, 0x0, 0x8, &(0x7f0000000200))

1.946593667s ago: executing program 2 (id=2718):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={0x0, 0xb0}, 0x1, 0x7}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x225020, 0x0)

1.475673685s ago: executing program 4 (id=2719):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x11, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x9a, &(0x7f0000000540)=""/154, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000)
ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0)
unshare(0x22020600)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x138, 0x1a, 0x1, 0x3, 0x25dfdbfd, {{@in=@local, @in=@multicast1=0xac1414bb, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@broadcast, 0x4000000, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x1000000000000}, {0x7b, 0x0, 0x2000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6b}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc75c2b196d661e27}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)

1.415830422s ago: executing program 6 (id=2720):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
r6 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r6, 0x13)
tkill(r6, 0x12)
waitid(0x0, 0x0, 0x0, 0x100000e, 0x0)
timerfd_create(0x0, 0x0)
connect$packet(r3, &(0x7f0000000440)={0x11, 0x16, r5, 0x1, 0x8, 0x6, @broadcast}, 0x14)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) (fail_nth: 1)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

1.249965097s ago: executing program 5 (id=2721):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x87}}}}}}}, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x189200, 0x0)

537.202619ms ago: executing program 2 (id=2722):
r0 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2meta\x00', 0x20c400, 0x0)

398.910275ms ago: executing program 5 (id=2723):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58)
r1 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0xc2c7d5e577ca6d54, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
preadv(r1, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x0, "e89c5b0900f8ff0000000007000000000000005b00", <r6=>0xffffffffffffffff})
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x30000000})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=0x0, @ANYBLOB="29d599b5712591b29a1b81a7affc0eaa51ee9bf3d280c6188c5effc16ec8d32cd2ecffbd4ea7d81318719f42c4f3915c1f57c8464a1ec66a7b5084c790277170df26cf0e7b2c67299153ccaaeeb65c81e744589eb0225cbe2438e04169a610e4f42afc3762c1f9dedfe580d2372b049711ab2012d4a6c22cb24b57956ded7eefd63558b2b0bc2449efb19cf791f804c3e18967b7f0289e51d11d5a8d20946e7cae1418f98b357dbc52734ccaab9f9ecec960f77533183298f1ed4edac90ae60b929b4ac1b55b9fb93a9968170b3f2bd23ea7b91f8788ac", @ANYRES32=r0, @ANYBLOB="9ae26b9f7bdf35ef39c9d8e9e5b84bd113a213179ada869af40e128395adcb765353e9649cdc8591cd041739a5600c6465111e972193af398e532088fdd77065b88ea365ba9785b4e18ced94", @ANYBLOB="b7cba0694be782d4cd99ccdb55786539140fd682688770b3dd1a425430c2850cc16030a2cda226313ec2a8e1008b5ed6bd0b2e9ad7cfc17c5240a5fe30649faefc78f1b09873f744533953034f3b76928645d0853ab68aa01ddb88dabce8b2631a2c16f0d67c1ba5e067a00a0940d4c84a45a436fc9f9841ea84c868b8570d659d1409b2645f237f84706c64d1ed149f353216573e7bc74724ddb3c35636d668512a16449cb7cb6e989e51c05851a480cf0fcf71779935b02597713593959b5bbb8bc8cc19e0880efaa910456ac5ee215bf1d0b0a43390cd89a643a69eb6426c9e7e101434a1e156e4e3edab17baae2ed943e105403bebe28e09ac82de", @ANYBLOB="27b5beadb72a3bdf21287e6479e7cc13a799021610786e72d7978dc652201cf4e496731601de9fae9430c6193a7945c3dd6b385a7767589757d07543fd82330ed2ccb57f8973c394fc1959315d2f260e76cfa4c39c973146ec2c4d6c74ef7d3a8517a1f0dd02fdd4bee345042b41b0428a8c9cf617a68b96d14791325ed6ebc37ea7c78c7a553e49644742eca09898760badf8fedc619786417e4f4c4952c04ccb39c927035e8d9bede609660fadcc4455d019ec79f46a", @ANYRES64=r7, @ANYRESOCT], 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r8}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x97, @void, @value}, 0x94)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
write$P9_RWRITE(r9, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x6}, 0x6)
dup(r4)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x2a2581, 0x0)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000580))

75.891878ms ago: executing program 2 (id=2724):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x0, 0xfffffffc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x5a, 0xb, 0xfffffffc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008045}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x64, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x54}, 0x40001)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0x4)
ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
userfaultfd(0x80001)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000})
r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201)
pwritev2(r5, &(0x7f0000001b00)=[{&(0x7f00000000c0)='h', 0x1}], 0x2, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf250400000004000d8008000c00", @ANYRES32=r0, @ANYBLOB="0c0016"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit'])

75.39994ms ago: executing program 4 (id=2725):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = creat(0x0, 0x0)
syz_emit_vhci(0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x3}}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
r6 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000300)=0xd0)
r7 = semget$private(0x0, 0x207, 0x53)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r4, 0x7}}, 0x10)
semctl$GETALL(r7, 0x0, 0xd, &(0x7f0000000040)=""/119)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r8, 0xc020aa08, 0x0)
ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3})
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='htcp\x00', 0x5)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

0s ago: executing program 1 (id=2726):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500200000002005007b1af8ff00000100bf5f4bfa23b980999166ee410421ea593a60daffd28b804f2db30e07836eed957d66872f79ea19e5e6896e2aa2f87c056c300b781c6c91cdba990841f4387a1f49ffd9c0bab03bc0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000e0ffff05000100060000000500040000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER(0x3f, 0x1, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
epoll_create1(0x0)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280))
io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 2-1: Using ep0 maxpacket: 16
[  615.186861][ T5904] usb 3-1: 0:2 : does not exist
[  615.197197][ T5904] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  615.232825][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  615.257809][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  615.276204][   T24] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  615.287345][ T5904] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  615.291907][ T5867] usb 6-1: Using ep0 maxpacket: 8
[  615.296308][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.311775][ T5904] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5)
[  615.331189][   T24] usb 2-1: config 0 descriptor??
[  615.344478][ T5867] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  615.346038][ T5904] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  615.364288][ T5867] usb 6-1: config 0 has no interface number 0
[  615.364770][ T5904] usb 3-1: USB disconnect, device number 53
[  615.375652][ T5867] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  615.393306][ T5867] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  615.405358][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.415461][ T5867] usb 6-1: config 0 descriptor??
[  615.426868][ T5867] iowarrior 6-1:0.1: no interrupt-in endpoint found
[  615.446670][T13449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2117'.
[  615.531079][ T5824] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  615.629630][ T5904] usb 6-1: USB disconnect, device number 14
[  615.694361][ T5824] usb 5-1: config 1 interface 0 has no altsetting 0
[  615.702795][ T5824] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  615.712036][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.720069][ T5824] usb 5-1: Product: syz
[  615.724731][ T5824] usb 5-1: Manufacturer: syz
[  615.729342][ T5824] usb 5-1: SerialNumber: syz
[  615.744507][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  615.751193][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  615.762365][   T24] usb 2-1: USB disconnect, device number 57
[  616.257955][ T5814] Bluetooth: hci2: command 0x0406 tx timeout
[  618.474477][ T5824] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  618.498005][ T5824] usb 5-1: USB disconnect, device number 48
[  618.643312][ T5824] usblp0: removed
[  618.776620][T13482] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  619.679603][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2127'.
[  620.179575][ T5824] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  620.331275][ T5824] usb 5-1: device descriptor read/64, error -71
[  620.594504][ T5824] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  620.811129][ T5824] usb 5-1: device descriptor read/64, error -71
[  620.868696][   T30] audit: type=1400 audit(1747658722.613:743): avc:  denied  { bind } for  pid=13512 comm="syz.5.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  620.938396][ T5824] usb usb5-port1: attempt power cycle
[  622.613234][   T30] audit: type=1400 audit(1747658723.303:744): avc:  denied  { cmd } for  pid=13512 comm="syz.5.2135" path="socket:[36246]" dev="sockfs" ino=36246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  622.702946][T13521] No control pipe specified
[  622.870964][ T5824] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  622.982892][ T5824] usb 5-1: device descriptor read/8, error -71
[  623.158294][T13526] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  623.213611][   T30] audit: type=1400 audit(1747658724.953:745): avc:  denied  { mount } for  pid=13522 comm="syz.1.2137" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  624.009523][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2143'.
[  624.524090][   T30] audit: type=1400 audit(1747658726.273:746): avc:  denied  { ioctl } for  pid=13554 comm="syz.1.2147" path="socket:[37234]" dev="sockfs" ino=37234 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  624.554999][   T30] audit: type=1400 audit(1747658726.303:747): avc:  denied  { read } for  pid=13554 comm="syz.1.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  625.001138][T11144] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  625.698559][T13573] random: crng reseeded on system resumption
[  625.802774][T13583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2153'.
[  625.811922][T11144] usb 2-1: Using ep0 maxpacket: 8
[  625.824909][T11144] usb 2-1: config index 0 descriptor too short (expected 260, got 27)
[  625.842240][T11144] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  625.873689][T13584] binder: 13575:13584 ioctl c0306201 0 returned -14
[  625.876104][T13582] fuse: Bad value for 'fd'
[  625.901011][T11144] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  626.490284][T11144] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  626.500022][T11144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.633278][T13592] No source specified
[  626.670296][T13594] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999
[  626.716570][T13596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2159'.
[  626.728371][T11144] usb 2-1: string descriptor 0 read error: -71
[  626.758965][T11144] usb 2-1: USB disconnect, device number 58
[  626.777421][T13596] veth9: entered promiscuous mode
[  626.782763][T13596] bridge3: port 1(veth9) entered blocking state
[  626.789197][T13596] bridge3: port 1(veth9) entered disabled state
[  626.804260][T13596] veth9: entered allmulticast mode
[  626.818736][T13601] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13601 comm=syz.5.2161
[  627.087325][T13611] 9pnet_virtio: no channels available for device syz
[  628.495821][T13637] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13637 comm=syz.0.2170
[  628.496457][T13637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2170'.
[  628.883888][   T30] audit: type=1326 audit(1747658730.633:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd4b8e969 code=0x7fc00000
[  628.967993][   T30] audit: type=1326 audit(1747658730.633:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fd4b8e969 code=0x7fc00000
[  628.999556][   T30] audit: type=1326 audit(1747658730.633:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd4b8e969 code=0x7fc00000
[  629.008897][T13646] netlink: 'syz.2.2174': attribute type 2 has an invalid length.
[  629.036854][   T30] audit: type=1326 audit(1747658730.633:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd4b8e969 code=0x7fc00000
[  629.190580][   T24] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  629.262198][   T30] audit: type=1326 audit(1747658730.633:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd4b8e969 code=0x7fc00000
[  629.375885][   T24] usb 2-1: config 0 has no interfaces?
[  629.385314][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  629.539490][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  629.600382][   T30] audit: type=1326 audit(1747658730.633:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd4b8e969 code=0x7fc00000
[  629.693290][T13657] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  629.717627][   T24] usb 2-1: SerialNumber: syz
[  629.754174][   T30] audit: type=1326 audit(1747658730.633:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd4b8e969 code=0x7fc00000
[  629.779798][   T24] usb 2-1: config 0 descriptor??
[  629.796448][   T30] audit: type=1326 audit(1747658730.633:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd4b8e969 code=0x7fc00000
[  629.825655][   T30] audit: type=1326 audit(1747658730.633:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd4b8e969 code=0x7fc00000
[  629.856026][   T30] audit: type=1326 audit(1747658730.633:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd4b8e969 code=0x7fc00000
[  630.003510][T13638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.042482][T13638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.090873][   T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  630.123521][ T5867] usb 2-1: USB disconnect, device number 59
[  630.250782][   T24] usb 5-1: Using ep0 maxpacket: 8
[  630.267994][   T24] usb 5-1: config index 0 descriptor too short (expected 260, got 27)
[  630.284851][   T24] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  630.364252][   T24] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  630.409335][   T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  630.435340][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.652912][   T24] usb 5-1: string descriptor 0 read error: -71
[  630.660742][   T24] usb 5-1: USB disconnect, device number 53
[  630.788752][ T5867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5867 comm=kworker/0:5
[  631.132893][T13696] binder: 13687:13696 ioctl 4018620d 0 returned -22
[  631.203713][T13698] Invalid ELF header magic: != ELF
[  631.944568][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2189'.
[  631.963913][T13709] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  631.997767][T13711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13711 comm=syz.1.2189
[  632.270533][ T5867] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  633.297510][T13715] syz.5.2191 (13715): drop_caches: 2
[  635.076468][T13754] FAULT_INJECTION: forcing a failure.
[  635.076468][T13754] name failslab, interval 1, probability 0, space 0, times 0
[  635.142007][T13754] CPU: 0 UID: 0 PID: 13754 Comm: syz.2.2201 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  635.142034][T13754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  635.142044][T13754] Call Trace:
[  635.142050][T13754]  <TASK>
[  635.142057][T13754]  dump_stack_lvl+0x16c/0x1f0
[  635.142093][T13754]  should_fail_ex+0x512/0x640
[  635.142116][T13754]  ? fs_reclaim_acquire+0xae/0x150
[  635.142142][T13754]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  635.142168][T13754]  should_failslab+0xc2/0x120
[  635.142187][T13754]  __kmalloc_noprof+0xd2/0x510
[  635.142211][T13754]  tomoyo_realpath_from_path+0xc2/0x6e0
[  635.142240][T13754]  ? tomoyo_profile+0x47/0x60
[  635.142260][T13754]  tomoyo_path_perm+0x274/0x460
[  635.142280][T13754]  ? tomoyo_path_perm+0x260/0x460
[  635.142305][T13754]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  635.142325][T13754]  ? inode_doinit_with_dentry+0x5e5/0x12e0
[  635.142382][T13754]  ? afs_dynroot_lookup+0x44c/0xa90
[  635.142403][T13754]  ? __pfx_lock_repin_lock+0x6/0x10
[  635.142426][T13754]  ? __pfx_afs_dynroot_lookup+0x10/0x10
[  635.142446][T13754]  ? d_alloc+0x176/0x1e0
[  635.142470][T13754]  tomoyo_path_rmdir+0x91/0xe0
[  635.142487][T13754]  ? __pfx_tomoyo_path_rmdir+0x10/0x10
[  635.142507][T13754]  ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160
[  635.142533][T13754]  security_path_rmdir+0x145/0x2b0
[  635.142557][T13754]  do_rmdir+0x27b/0x3c0
[  635.142575][T13754]  ? __pfx_do_rmdir+0x10/0x10
[  635.142601][T13754]  ? getname_flags.part.0+0x1c5/0x550
[  635.142626][T13754]  __x64_sys_rmdir+0xc5/0x110
[  635.142643][T13754]  do_syscall_64+0xcd/0x260
[  635.142670][T13754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.142687][T13754] RIP: 0033:0x7f8fd4b8e969
[  635.142701][T13754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  635.142718][T13754] RSP: 002b:00007f8fd5a1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  635.142734][T13754] RAX: ffffffffffffffda RBX: 00007f8fd4db5fa0 RCX: 00007f8fd4b8e969
[  635.142745][T13754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  635.142755][T13754] RBP: 00007f8fd5a1c090 R08: 0000000000000000 R09: 0000000000000000
[  635.142765][T13754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  635.142774][T13754] R13: 0000000000000000 R14: 00007f8fd4db5fa0 R15: 00007ffc6cf385d8
[  635.142800][T13754]  </TASK>
[  635.142807][T13754] ERROR: Out of memory at tomoyo_realpath_from_path.
[  635.471355][T13758] input: syz1 as /devices/virtual/input/input55
[  636.823863][T13768] bond0: (slave bond5): Releasing backup interface
[  637.010745][T13750] Invalid ELF header magic: != ELF
[  638.122080][T13786] Invalid ELF header magic: != ELF
[  638.143085][ T5904] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  638.191854][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  638.191893][   T30] audit: type=1400 audit(1747658739.933:767): avc:  denied  { getopt } for  pid=13790 comm="syz.1.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  638.356491][ T5904] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  638.395319][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0
[  638.410333][ T5904] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  638.420664][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.434880][ T5904] usb 3-1: config 0 descriptor??
[  639.305421][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2216'.
[  639.661375][   T24] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[  639.825399][   T24] usb 2-1: device descriptor read/64, error -71
[  640.071388][   T24] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[  640.210587][   T24] usb 2-1: device descriptor read/64, error -71
[  640.331144][   T24] usb usb2-port1: attempt power cycle
[  640.497950][T13819] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  641.083016][ T5904] usbhid 3-1:0.0: can't add hid device: -71
[  641.091790][ T5904] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  641.102471][ T5904] usb 3-1: USB disconnect, device number 54
[  641.290650][   T24] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[  641.332004][   T24] usb 2-1: device descriptor read/8, error -71
[  641.368486][T13827] FAULT_INJECTION: forcing a failure.
[  641.368486][T13827] name failslab, interval 1, probability 0, space 0, times 0
[  642.106102][T13827] CPU: 1 UID: 0 PID: 13827 Comm: syz.2.2221 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  642.106129][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  642.106138][T13827] Call Trace:
[  642.106143][T13827]  <TASK>
[  642.106150][T13827]  dump_stack_lvl+0x16c/0x1f0
[  642.106172][T13827]  should_fail_ex+0x512/0x640
[  642.106188][T13827]  ? __kmalloc_noprof+0xbf/0x510
[  642.106201][T13827]  ? _iommufd_object_alloc+0x23/0x1a0
[  642.106214][T13827]  should_failslab+0xc2/0x120
[  642.106226][T13827]  __kmalloc_noprof+0xd2/0x510
[  642.106238][T13827]  ? finish_task_switch.isra.0+0x221/0xc10
[  642.106254][T13827]  _iommufd_object_alloc+0x23/0x1a0
[  642.106274][T13827]  iommufd_test+0x1176/0x6100
[  642.106291][T13827]  ? __pfx_iommufd_test+0x10/0x10
[  642.106305][T13827]  ? find_held_lock+0x2b/0x80
[  642.106317][T13827]  ? __might_fault+0xe3/0x190
[  642.106328][T13827]  ? __might_fault+0xe3/0x190
[  642.106338][T13827]  ? __might_fault+0x13b/0x190
[  642.106354][T13827]  iommufd_fops_ioctl+0x33c/0x4e0
[  642.106370][T13827]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  642.106387][T13827]  ? lockdep_hardirqs_on+0x7c/0x110
[  642.106407][T13827]  ? __x64_sys_ioctl+0x12c/0x200
[  642.106421][T13827]  ? __x64_sys_ioctl+0x139/0x200
[  642.106435][T13827]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  642.106451][T13827]  __x64_sys_ioctl+0x190/0x200
[  642.106467][T13827]  do_syscall_64+0xcd/0x260
[  642.106484][T13827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.106495][T13827] RIP: 0033:0x7f8fd4b8e969
[  642.106504][T13827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  642.106514][T13827] RSP: 002b:00007f8fd5a1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  642.106525][T13827] RAX: ffffffffffffffda RBX: 00007f8fd4db5fa0 RCX: 00007f8fd4b8e969
[  642.106532][T13827] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003
[  642.106538][T13827] RBP: 00007f8fd5a1c090 R08: 0000000000000000 R09: 0000000000000000
[  642.106544][T13827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  642.106550][T13827] R13: 0000000000000000 R14: 00007f8fd4db5fa0 R15: 00007ffc6cf385d8
[  642.106564][T13827]  </TASK>
[  643.980672][   T24] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  644.189921][   T24] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  644.212037][ T5907] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[  644.235762][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.272233][   T24] usb 3-1: config 0 descriptor??
[  644.280064][   T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  644.415061][ T5907] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  644.442918][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.462312][ T5907] usb 5-1: config 0 descriptor??
[  644.633501][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'.
[  645.084543][ T5907] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  645.286912][   T24] gp8psk: usb in 128 operation failed.
[  645.293032][   T24] gp8psk: usb in 137 operation failed.
[  645.298525][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  645.314185][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2230'.
[  645.316327][T13878] Cannot find add_set index 0 as target
[  645.323319][   T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  645.339640][T13873] ceph: No mds server is up or the cluster is laggy
[  645.351150][   T24] usb 3-1: USB disconnect, device number 55
[  645.548909][ T5907] gp8psk: usb in 128 operation failed.
[  645.555729][ T5907] gp8psk: usb in 137 operation failed.
[  645.561968][ T5907] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  645.572823][ T5907] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  645.584146][ T5907] usb 5-1: USB disconnect, device number 54
[  645.640560][ T5904] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  645.805459][ T5904] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  645.831150][ T5904] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  645.852815][ T5904] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  645.882015][ T5904] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  645.911613][ T5904] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  645.926412][ T5904] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  645.937991][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  645.946594][ T5904] usb 6-1: Product: syz
[  645.951502][ T5904] usb 6-1: Manufacturer: syz
[  645.972994][ T5904] cdc_wdm 6-1:1.0: skipping garbage
[  645.980220][ T5904] cdc_wdm 6-1:1.0: skipping garbage
[  646.008642][ T5904] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  646.021664][ T5904] cdc_wdm 6-1:1.0: Unknown control protocol
[  646.205203][T13893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2242'.
[  646.288209][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  646.298800][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  646.306897][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  646.315334][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  646.324476][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  646.391752][ T5907] usb 6-1: USB disconnect, device number 16
[  648.150863][ T5867] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  648.361504][ T5814] Bluetooth: hci5: command tx timeout
[  648.500862][ T5867] usb 5-1: Using ep0 maxpacket: 32
[  649.384510][ T5867] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[  649.400464][ T5867] usb 5-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config
[  649.411039][ T5867] usb 5-1: config 0 has no interface number 0
[  649.423423][ T5867] usb 5-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  649.474096][ T5867] usb 5-1: config 0 interface 239 has no altsetting 0
[  649.511163][ T5867] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  649.520224][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.728713][T13930] 9pnet_virtio: no channels available for device syz
[  650.128070][ T5867] usb 5-1: Product: syz
[  650.132329][ T5867] usb 5-1: Manufacturer: syz
[  650.136927][ T5867] usb 5-1: SerialNumber: syz
[  650.196468][ T5867] usb 5-1: config 0 descriptor??
[  650.199926][T13895] chnl_net:caif_netlink_parms(): no params data found
[  650.288294][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2251'.
[  650.432988][ T5867] usb 5-1: USB disconnect, device number 55
[  650.440843][ T5814] Bluetooth: hci5: command tx timeout
[  650.586192][T13944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2254'.
[  650.647135][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'.
[  650.715898][T13895] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.730819][T13895] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.751879][T13895] bridge_slave_0: entered allmulticast mode
[  650.801378][T13895] bridge_slave_0: entered promiscuous mode
[  650.845627][T13895] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.861358][T13895] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.889539][T13895] bridge_slave_1: entered allmulticast mode
[  650.897509][T13895] bridge_slave_1: entered promiscuous mode
[  651.087881][T13895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  651.099776][T13895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  651.630118][T13953] loop8: detected capacity change from 0 to 7
[  651.638286][T13953] Dev loop8: unable to read RDB block 7
[  651.643971][T13953]  loop8: AHDI p1 p3 p4
[  651.648141][T13953] loop8: partition table partially beyond EOD, truncated
[  651.655601][T13953] loop8: p1 start 975770946 is beyond EOD, truncated
[  651.662278][T13953] loop8: p3 start 6514546 is beyond EOD, truncated
[  652.711065][ T5814] Bluetooth: hci5: command tx timeout
[  653.020132][T13895] team0: Port device team_slave_0 added
[  653.337366][T13895] team0: Port device team_slave_1 added
[  653.727513][T13980] netlink: 'syz.2.2263': attribute type 10 has an invalid length.
[  654.034080][T13895] batman_adv: batadv0: Adding interface: batadv_slave_0
[  654.041723][T13895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  654.067907][T13895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  654.079857][T13895] batman_adv: batadv0: Adding interface: batadv_slave_1
[  654.087103][T13895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  654.140486][T13895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  654.761000][ T5814] Bluetooth: hci5: command tx timeout
[  654.781474][ T5904] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  655.014428][ T5867] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  655.042907][T13895] hsr_slave_0: entered promiscuous mode
[  655.063813][T13895] hsr_slave_1: entered promiscuous mode
[  655.083372][T13895] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  655.085159][   T30] audit: type=1400 audit(1747658756.833:768): avc:  denied  { write } for  pid=13991 comm="syz.4.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  655.111692][T13895] Cannot create hsr debugfs directory
[  655.170534][ T5867] usb 2-1: Using ep0 maxpacket: 8
[  655.311086][ T5904] usb 6-1: Using ep0 maxpacket: 32
[  655.335066][ T5904] usb 6-1: config 0 has an invalid interface number: 74 but max is 1
[  655.343844][ T5904] usb 6-1: config 0 has no interface number 1
[  655.349945][ T5904] usb 6-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30
[  656.331705][ T5904] usb 6-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  656.692833][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0
[  656.850373][ T5904] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[  656.873467][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.886126][ T5904] usb 6-1: Product: syz
[  656.890464][ T5904] usb 6-1: Manufacturer: syz
[  656.895200][ T5904] usb 6-1: SerialNumber: syz
[  656.915413][ T5904] usb 6-1: config 0 descriptor??
[  656.940484][ T5830] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  656.983438][ T5904] snd-usb-audio 6-1:0.74: probe with driver snd-usb-audio failed with error -22
[  657.088888][T14006] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2270'.
[  657.161293][ T5904] usb 6-1: USB disconnect, device number 17
[  657.183022][ T5830] usb 5-1: Using ep0 maxpacket: 32
[  657.193102][ T5830] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[  657.210021][ T5830] usb 5-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config
[  657.252665][ T5830] usb 5-1: config 0 has no interface number 0
[  657.285364][ T5830] usb 5-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  657.305199][ T5830] usb 5-1: config 0 interface 239 has no altsetting 0
[  657.313821][T13895] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  657.328170][T13895] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  657.338862][ T5830] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  657.349654][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.362272][T13895] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  657.369001][ T5830] usb 5-1: Product: syz
[  657.389039][ T5830] usb 5-1: Manufacturer: syz
[  657.400617][T13895] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  657.407360][ T5830] usb 5-1: SerialNumber: syz
[  657.440262][ T5830] usb 5-1: config 0 descriptor??
[  657.588289][ T5867] usb 2-1: device descriptor read/all, error -71
[  657.772855][T13895] 8021q: adding VLAN 0 to HW filter on device bond0
[  657.804611][ T5830] usb 5-1: USB disconnect, device number 56
[  657.819845][T13895] 8021q: adding VLAN 0 to HW filter on device team0
[  657.838328][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state
[  657.845489][ T4174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  658.409243][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.416339][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  658.658233][T13895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  659.077631][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2275'.
[  659.108527][T14026] FAULT_INJECTION: forcing a failure.
[  659.108527][T14026] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  659.111691][T14023] bridge2: port 1(ip6gretap1) entered blocking state
[  659.129386][T14026] CPU: 0 UID: 0 PID: 14026 Comm: syz.2.2276 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  659.129409][T14026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  659.129419][T14026] Call Trace:
[  659.129425][T14026]  <TASK>
[  659.129432][T14026]  dump_stack_lvl+0x16c/0x1f0
[  659.129462][T14026]  should_fail_ex+0x512/0x640
[  659.129490][T14026]  _copy_to_user+0x32/0xd0
[  659.129518][T14026]  simple_read_from_buffer+0xcb/0x170
[  659.129546][T14026]  proc_fail_nth_read+0x197/0x270
[  659.129574][T14026]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  659.129601][T14026]  ? rw_verify_area+0xcf/0x680
[  659.129623][T14026]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  659.129649][T14026]  vfs_read+0x1de/0xc70
[  659.129678][T14026]  ? __pfx___mutex_lock+0x10/0x10
[  659.129704][T14026]  ? __pfx_vfs_read+0x10/0x10
[  659.129737][T14026]  ? __fget_files+0x20e/0x3c0
[  659.129762][T14026]  ksys_read+0x12a/0x240
[  659.129787][T14026]  ? __pfx_ksys_read+0x10/0x10
[  659.129821][T14026]  do_syscall_64+0xcd/0x260
[  659.129848][T14026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.129865][T14026] RIP: 0033:0x7f8fd4b8d37c
[  659.129879][T14026] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  659.129894][T14026] RSP: 002b:00007f8fd5a1c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  659.129910][T14026] RAX: ffffffffffffffda RBX: 00007f8fd4db5fa0 RCX: 00007f8fd4b8d37c
[  659.129921][T14026] RDX: 000000000000000f RSI: 00007f8fd5a1c0a0 RDI: 0000000000000003
[  659.129932][T14026] RBP: 00007f8fd5a1c090 R08: 0000000000000000 R09: 0000000000000000
[  659.129941][T14026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  659.129951][T14026] R13: 0000000000000000 R14: 00007f8fd4db5fa0 R15: 00007ffc6cf385d8
[  659.129977][T14026]  </TASK>
[  659.133661][T14023] bridge2: port 1(ip6gretap1) entered disabled state
[  659.211054][ T5867] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  659.214830][T14023] ip6gretap1: entered allmulticast mode
[  659.337999][T14023] ip6gretap1: entered promiscuous mode
[  659.365067][T13895] 8021q: adding VLAN 0 to HW filter on device batadv0
[  659.380587][ T5867] usb 2-1: Using ep0 maxpacket: 8
[  659.387121][ T5867] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13
[  659.401063][ T5904] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  659.415851][ T5867] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  659.448907][ T5867] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  659.469147][ T5867] usb 2-1: Product: syz
[  659.479241][ T5867] usb 2-1: Manufacturer: syz
[  659.487657][ T5867] usb 2-1: SerialNumber: syz
[  659.502979][ T5867] usb 2-1: config 0 descriptor??
[  659.529392][ T5867] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  659.581368][ T5904] usb 5-1: Using ep0 maxpacket: 32
[  659.589045][ T5904] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  659.608349][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.745107][ T5907] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  659.754152][ T5904] usb 5-1: config 0 descriptor??
[  659.801399][ T5904] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  659.961706][ T5907] usb 3-1: device descriptor read/64, error -71
[  660.001006][ T5904] gspca_vc032x: reg_r err -32
[  660.024453][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.084742][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.103726][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.120931][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.126367][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.136602][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.155326][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.172245][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.177599][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.195790][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.201303][ T5907] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  660.219454][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.219741][T13895] veth0_vlan: entered promiscuous mode
[  660.229230][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.239321][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.244457][T13895] veth1_vlan: entered promiscuous mode
[  660.249412][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.263142][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.268438][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.287976][T13895] veth0_macvtap: entered promiscuous mode
[  660.290410][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.301471][ T5904] gspca_vc032x: I2c Bus Busy Wait 00
[  660.306763][ T5904] gspca_vc032x: Unknown sensor...
[  660.320089][T13895] veth1_macvtap: entered promiscuous mode
[  660.321726][ T5904] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[  660.341481][T13895] batman_adv: batadv0: Interface activated: batadv_slave_0
[  660.358088][T14017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  660.358157][T13895] batman_adv: batadv0: Interface activated: batadv_slave_1
[  660.371056][T14017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  660.374456][ T5907] usb 3-1: device descriptor read/64, error -71
[  660.408705][T13895] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  660.419116][ T5924] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  660.435777][T13895] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  660.446693][T13895] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  660.455819][T13895] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  660.462938][T14048] overlayfs: overlapping lowerdir path
[  660.505300][T14048] overlayfs: failed to resolve './file0/file0': -2
[  660.582125][ T5924] usb 6-1: config 0 has no interfaces?
[  660.588570][ T5867] gspca_zc3xx: reg_w_i err -71
[  660.598914][ T5924] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  660.609868][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.622017][ T6159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.629844][ T6159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.650079][ T5924] usb 6-1: config 0 descriptor??
[  660.658538][ T6159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.677480][ T6159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.759251][ T5907] usb usb3-port1: attempt power cycle
[  660.850309][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2282'.
[  660.865594][T14054] netlink: 'syz.6.2282': attribute type 1 has an invalid length.
[  660.873486][T14054] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2282'.
[  660.891527][T14046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  660.902035][T14046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  660.911138][ T5904] usb 6-1: USB disconnect, device number 18
[  661.112583][ T5907] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  661.140552][ T5924] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  661.153362][ T5907] usb 3-1: device descriptor read/8, error -71
[  661.200585][ T5867] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  661.209519][ T5867] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  661.219943][ T5867] usb 2-1: USB disconnect, device number 66
[  661.295984][ T5924] usb 7-1: config 0 has an invalid interface number: 69 but max is 0
[  661.304752][ T5924] usb 7-1: config 0 has no interface number 0
[  661.312010][ T5924] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  661.323663][ T5924] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  661.337015][ T5924] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  661.348926][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.358147][T11144] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  661.366075][ T5924] usb 7-1: Product: syz
[  661.371140][ T5924] usb 7-1: Manufacturer: syz
[  661.376305][ T5924] usb 7-1: SerialNumber: syz
[  661.384534][ T5924] usb 7-1: config 0 descriptor??
[  661.390289][T14054] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22
[  661.400029][ T5924] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  661.419172][ T5924] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  661.509000][ T5907] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  661.530899][ T5907] usb 3-1: device descriptor read/8, error -71
[  661.543170][T11144] usb 6-1: Using ep0 maxpacket: 16
[  661.552124][T11144] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  661.562853][T11144] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  661.573713][T11144] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  661.583396][T11144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.591415][T11144] usb 6-1: Product: syz
[  661.595635][T11144] usb 6-1: Manufacturer: syz
[  661.600358][T11144] usb 6-1: SerialNumber: syz
[  661.980679][ T5907] usb usb3-port1: unable to enumerate USB device
[  662.069940][ T5907] usb 5-1: USB disconnect, device number 57
[  662.288126][T11144] usb 6-1: 0:2 : does not exist
[  662.689941][T11144] usb 7-1: USB disconnect, device number 2
[  662.815831][T11144] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  662.827392][T11144] cyberjack 7-1:0.69: device disconnected
[  662.934062][T14073] loop8: detected capacity change from 0 to 7
[  663.316687][T14073] Dev loop8: unable to read RDB block 7
[  663.322679][T14073]  loop8: AHDI p1 p3 p4
[  663.326821][T14073] loop8: partition table partially beyond EOD, truncated
[  663.333903][T14073] loop8: p1 start 975770946 is beyond EOD, truncated
[  663.340599][T14073] loop8: p3 start 6514546 is beyond EOD, truncated
[  663.374512][ T5907] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  663.582980][ T5907] usb 5-1: Using ep0 maxpacket: 32
[  663.598072][ T5907] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[  663.614527][ T5867] usb 6-1: USB disconnect, device number 19
[  663.616898][ T5907] usb 5-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config
[  663.667347][ T5907] usb 5-1: config 0 has no interface number 0
[  663.943960][ T5907] usb 5-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  664.015087][ T5907] usb 5-1: config 0 interface 239 has no altsetting 0
[  664.077521][ T5907] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  664.085022][T14084] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2290'.
[  664.323305][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.349213][ T5907] usb 5-1: Product: syz
[  664.356759][ T5907] usb 5-1: Manufacturer: syz
[  664.439112][ T5907] usb 5-1: SerialNumber: syz
[  664.737004][ T5907] usb 5-1: config 0 descriptor??
[  665.185545][ T5907] usb 5-1: USB disconnect, device number 58
[  665.356762][T14108] 9pnet_fd: Insufficient options for proto=fd
[  665.544258][   T30] audit: type=1400 audit(1747658767.123:769): avc:  denied  { append } for  pid=14105 comm="syz.1.2295" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  665.920564][ T5907] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  666.148564][T14115] random: crng reseeded on system resumption
[  666.217169][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1022, setting to 64
[  666.230922][ T5907] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  666.246673][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.256280][   T30] audit: type=1400 audit(1747658767.993:770): avc:  denied  { ioctl } for  pid=14111 comm="syz.2.2297" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  666.258128][ T5907] usb 6-1: config 0 descriptor??
[  666.291880][T14113] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  666.381097][   T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  666.390070][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2301'.
[  666.571076][T14126] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2298'.
[  666.580172][T14126] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2298'.
[  666.590574][T14126] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2298'.
[  666.840590][   T24] usb 2-1: Using ep0 maxpacket: 16
[  666.918816][   T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  666.968654][   T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  666.998880][   T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  667.010930][T14113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.019410][T14113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.034349][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  667.045109][T14126] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2298'.
[  667.063949][ T5907] uclogic 0003:5543:0003.001D: No inputs registered, leaving
[  667.081440][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.133381][ T5907] uclogic 0003:5543:0003.001D: hidraw0: USB HID v4.01 Device [HID 5543:0003] on usb-dummy_hcd.5-1/input0
[  667.149925][T14126] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2298'.
[  667.159280][   T24] usb 2-1: Product: syz
[  667.227719][T14126] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2298'.
[  667.237425][   T24] usb 2-1: Manufacturer: syz
[  667.395719][   T24] usb 2-1: SerialNumber: syz
[  667.824478][   T24] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  667.872744][T14126] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2298'.
[  667.884156][T14126] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2298'.
[  668.238358][   T24] usb 2-1: 2:1: cannot get freq at ep 0x82
[  668.388256][ T5907] usb 6-1: USB disconnect, device number 20
[  668.458443][   T24] usb 2-1: USB disconnect, device number 67
[  669.160881][   T30] audit: type=1400 audit(1747658770.703:771): avc:  denied  { bind } for  pid=14148 comm="syz.6.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  669.757285][T14169] __nla_validate_parse: 3 callbacks suppressed
[  669.757301][T14169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2312'.
[  669.832490][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2314'.
[  669.854848][T14169] 8021q: adding VLAN 0 to HW filter on device bond5
[  669.899617][T14169] bond0: (slave bond5): Enslaving as an active interface with an up link
[  670.964185][T14198] loop8: detected capacity change from 0 to 7
[  671.401586][T14198] Dev loop8: unable to read RDB block 7
[  671.407168][T14198]  loop8: AHDI p1 p3 p4
[  671.411699][T14198] loop8: partition table partially beyond EOD, truncated
[  671.418747][T14198] loop8: p1 start 975770946 is beyond EOD, truncated
[  671.425422][T14198] loop8: p3 start 6514546 is beyond EOD, truncated
[  671.445490][ T5867] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  671.477432][   T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  671.740501][ T5867] usb 7-1: device descriptor read/64, error -71
[  671.824944][   T24] usb 3-1: Using ep0 maxpacket: 32
[  671.836463][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  671.859612][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.891184][   T24] usb 3-1: Product: syz
[  671.895370][   T24] usb 3-1: Manufacturer: syz
[  671.926735][   T24] usb 3-1: SerialNumber: syz
[  672.268779][ T5867] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  672.521503][ T5867] usb 7-1: device descriptor read/64, error -71
[  672.898839][T14215] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  672.936840][T14215] input: syz1 as /devices/virtual/input/input57
[  672.976133][ T5867] usb usb7-port1: attempt power cycle
[  673.061959][T14216] block device autoloading is deprecated and will be removed.
[  673.073789][T14216] syz.2.2319: attempt to access beyond end of device
[  673.073789][T14216] ram201: rw=2048, sector=521328, nr_sectors = 8 limit=8192
[  673.362829][   T92] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  673.401410][ T5867] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  673.493705][ T5867] usb 7-1: device descriptor read/8, error -71
[  673.572650][   T92] usb 2-1: Using ep0 maxpacket: 32
[  673.584966][   T92] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  673.634448][   T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.745568][   T92] usb 2-1: config 0 descriptor??
[  673.750949][ T5867] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  673.772775][ T5867] usb 7-1: device descriptor read/8, error -71
[  673.904065][ T5867] usb usb7-port1: unable to enumerate USB device
[  674.044961][   T92] usb 2-1: selecting invalid altsetting 3
[  674.128581][   T92] comedi comedi0: could not set alternate setting 3 in high speed
[  674.774394][   T92] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device.
[  675.145724][   T92] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22
[  675.147987][   T24] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc
[  675.179263][   T92] usb 2-1: USB disconnect, device number 68
[  675.207598][   T24] usb 3-1: USB disconnect, device number 60
[  675.658976][T14244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2332'.
[  677.507305][T14267] No control pipe specified
[  677.555301][ T5907] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  677.748312][ T5907] usb 6-1: config 1 has an invalid descriptor of length 96, skipping remainder of the config
[  677.792332][ T5907] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  678.772251][ T5907] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  678.806717][ T5907] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  678.817992][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.830690][ T5907] usb 6-1: Product: syz
[  678.835681][ T5907] usb 6-1: Manufacturer: syz
[  678.841003][ T5907] usb 6-1: SerialNumber: syz
[  678.854326][ T5907] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  678.861310][ T5907] cdc_ncm 6-1:1.0: bind() failure
[  679.176903][ T5907] usb 6-1: USB disconnect, device number 21
[  680.486182][T14308] wireguard: wg1: Could not create IPv4 socket
[  680.543836][T14315] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  680.584229][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2350'.
[  680.616771][T14321] FAULT_INJECTION: forcing a failure.
[  680.616771][T14321] name failslab, interval 1, probability 0, space 0, times 0
[  680.629509][T14321] CPU: 1 UID: 0 PID: 14321 Comm: syz.6.2353 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  680.629532][T14321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  680.629542][T14321] Call Trace:
[  680.629548][T14321]  <TASK>
[  680.629554][T14321]  dump_stack_lvl+0x16c/0x1f0
[  680.629582][T14321]  should_fail_ex+0x512/0x640
[  680.629605][T14321]  ? __kmalloc_node_track_caller_noprof+0xc3/0x510
[  680.629627][T14321]  should_failslab+0xc2/0x120
[  680.629647][T14321]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[  680.629665][T14321]  ? rcu_is_watching+0x12/0xc0
[  680.629684][T14321]  ? property_entries_dup.part.0+0x3d9/0xa00
[  680.629716][T14321]  kstrdup+0x53/0x100
[  680.629735][T14321]  property_entries_dup.part.0+0x3d9/0xa00
[  680.629769][T14321]  fwnode_create_software_node+0xad/0x3f0
[  680.629798][T14321]  device_create_managed_software_node+0x103/0x270
[  680.629819][T14321]  iommufd_test+0x1566/0x6100
[  680.629847][T14321]  ? __pfx_iommufd_test+0x10/0x10
[  680.629869][T14321]  ? find_held_lock+0x2b/0x80
[  680.629888][T14321]  ? __might_fault+0xe3/0x190
[  680.629918][T14321]  iommufd_fops_ioctl+0x33c/0x4e0
[  680.629942][T14321]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  680.629967][T14321]  ? hook_file_ioctl_common+0x145/0x410
[  680.629999][T14321]  ? selinux_file_ioctl+0x180/0x270
[  680.630025][T14321]  ? selinux_file_ioctl+0xb4/0x270
[  680.630053][T14321]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  680.630078][T14321]  __x64_sys_ioctl+0x190/0x200
[  680.630103][T14321]  do_syscall_64+0xcd/0x260
[  680.630129][T14321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.630147][T14321] RIP: 0033:0x7f366258e969
[  680.630162][T14321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  680.630177][T14321] RSP: 002b:00007f36633b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  680.630194][T14321] RAX: ffffffffffffffda RBX: 00007f36627b5fa0 RCX: 00007f366258e969
[  680.630205][T14321] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003
[  680.630214][T14321] RBP: 00007f36633b7090 R08: 0000000000000000 R09: 0000000000000000
[  680.630224][T14321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  680.630234][T14321] R13: 0000000000000000 R14: 00007f36627b5fa0 R15: 00007fff3aaa4cf8
[  680.630258][T14321]  </TASK>
[  680.630280][T14321] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12
[  682.038773][T14339] tipc: Started in network mode
[  682.044115][T14339] tipc: Node identity 4, cluster identity 4711
[  682.050285][T14339] tipc: Node number set to 4
[  683.200800][ T5924] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  683.217491][T14351] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  683.351067][ T5924] usb 6-1: Using ep0 maxpacket: 8
[  683.476881][T14351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2363'.
[  683.501634][ T5924] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  683.520481][ T5924] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  683.666021][T14357] netlink: 'syz.6.2364': attribute type 10 has an invalid length.
[  683.690206][T14357] 8021q: adding VLAN 0 to HW filter on device batadv0
[  683.711362][T14357] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  684.882636][ T5924] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  685.037362][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.046836][ T5924] usb 6-1: Product: syz
[  685.054819][ T5924] usb 6-1: Manufacturer: syz
[  685.059424][ T5924] usb 6-1: SerialNumber: syz
[  685.413608][   T30] audit: type=1400 audit(1747658787.093:772): avc:  denied  { mount } for  pid=14359 comm="syz.4.2365" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  686.556531][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'.
[  688.358419][T14398] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2375'.
[  688.368705][ T5867] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  688.531722][ T5867] usb 7-1: Using ep0 maxpacket: 32
[  688.561456][ T5867] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  688.597990][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.235956][ T5867] usb 7-1: config 0 descriptor??
[  689.246040][ T5867] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  689.686177][ T5867] gspca_vc032x: reg_r err -32
[  689.724756][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  689.730097][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  689.735656][ T5924] usb 6-1: can't set config #1, error -71
[  689.767367][ T5924] usb 6-1: USB disconnect, device number 22
[  689.780996][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  689.816801][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  689.829017][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  689.849856][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  689.861164][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  689.878155][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  689.987601][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  689.999911][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  690.015971][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  690.034896][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  690.045907][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  690.051630][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  690.058444][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  690.066343][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  690.072684][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  690.078546][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  690.084945][ T5867] gspca_vc032x: Unknown sensor...
[  690.090715][ T5867] vc032x 7-1:0.0: probe with driver vc032x failed with error -22
[  690.372106][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2384'.
[  690.544416][T14424] Invalid ELF header magic: != ELF
[  690.570278][T14433] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2385'.
[  691.534000][T14449] overlayfs: overlapping lowerdir path
[  691.599006][T14451] overlayfs: failed to resolve './file0/file0': -2
[  691.872534][T14446] FAULT_INJECTION: forcing a failure.
[  691.872534][T14446] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  691.885977][T14446] CPU: 1 UID: 0 PID: 14446 Comm: syz.5.2389 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  691.885991][T14446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  691.885998][T14446] Call Trace:
[  691.886002][T14446]  <TASK>
[  691.886006][T14446]  dump_stack_lvl+0x16c/0x1f0
[  691.886026][T14446]  should_fail_ex+0x512/0x640
[  691.886044][T14446]  _copy_to_user+0x32/0xd0
[  691.886062][T14446]  simple_read_from_buffer+0xcb/0x170
[  691.886080][T14446]  proc_fail_nth_read+0x197/0x270
[  691.886098][T14446]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  691.886115][T14446]  ? rw_verify_area+0xcf/0x680
[  691.886129][T14446]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  691.886146][T14446]  vfs_read+0x1de/0xc70
[  691.886164][T14446]  ? __pfx___mutex_lock+0x10/0x10
[  691.886180][T14446]  ? __pfx_vfs_read+0x10/0x10
[  691.886200][T14446]  ? __fget_files+0x20e/0x3c0
[  691.886215][T14446]  ksys_read+0x12a/0x240
[  691.886231][T14446]  ? __pfx_ksys_read+0x10/0x10
[  691.886251][T14446]  do_syscall_64+0xcd/0x260
[  691.886269][T14446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.886279][T14446] RIP: 0033:0x7fa025b8d37c
[  691.886288][T14446] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  691.886299][T14446] RSP: 002b:00007fa026954030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  691.886310][T14446] RAX: ffffffffffffffda RBX: 00007fa025db5fa0 RCX: 00007fa025b8d37c
[  691.886317][T14446] RDX: 000000000000000f RSI: 00007fa0269540a0 RDI: 0000000000000007
[  691.886323][T14446] RBP: 00007fa026954090 R08: 0000000000000000 R09: 0000000000000000
[  691.886329][T14446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  691.886335][T14446] R13: 0000000000000000 R14: 00007fa025db5fa0 R15: 00007ffc46e48358
[  691.886350][T14446]  </TASK>
[  692.231581][ T5867] usb 3-1: new full-speed USB device number 61 using dummy_hcd
[  692.396706][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  692.534297][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  692.706177][ T5867] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  692.795108][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.823841][ T5867] usb 3-1: config 0 descriptor??
[  694.194353][ T5867] elan 0003:04F3:0755.001E: unknown main item tag 0x0
[  694.230426][ T5867] elan 0003:04F3:0755.001E: item fetching failed at offset 3/5
[  694.262694][ T5867] elan 0003:04F3:0755.001E: Hid Parse failed
[  694.290304][ T5867] elan 0003:04F3:0755.001E: probe with driver elan failed with error -22
[  694.537753][ T5867] usb 7-1: USB disconnect, device number 7
[  694.550582][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2400'.
[  694.700989][T14482] 9pnet_virtio: no channels available for device syz
[  695.667336][   T30] audit: type=1400 audit(1747658796.783:773): avc:  denied  { read } for  pid=14474 comm="syz.4.2399" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  695.710140][   T24] usb 3-1: USB disconnect, device number 61
[  695.739372][T14475] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 80084503, magic 45 != 6b]
[  695.759054][   T30] audit: type=1400 audit(1747658796.783:774): avc:  denied  { open } for  pid=14474 comm="syz.4.2399" path="/468/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  695.811148][   T30] audit: type=1400 audit(1747658797.483:775): avc:  denied  { ioctl } for  pid=14474 comm="syz.4.2399" path="/468/file0/file0" dev="fuse" ino=0 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  695.933979][T14496] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2402'.
[  696.024977][T14496] 8021q: adding VLAN 0 to HW filter on device bond1
[  696.034121][T14496] bond0: (slave bond1): Enslaving as an active interface with an up link
[  697.285249][   T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  697.319531][T14511] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  697.412725][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2411'.
[  697.424666][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2411'.
[  697.434784][T14515] netlink: 'syz.5.2411': attribute type 14 has an invalid length.
[  697.451147][   T24] usb 3-1: Using ep0 maxpacket: 32
[  697.458353][   T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  697.464121][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2411'.
[  697.470396][   T24] usb 3-1: config 1 has no interface number 1
[  697.478165][T14515] bridge_slave_1: left allmulticast mode
[  697.493185][T14515] bridge_slave_1: left promiscuous mode
[  697.512036][T14515] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.530633][ T5867] usb 2-1: new full-speed USB device number 69 using dummy_hcd
[  697.538675][   T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  697.557494][T14515] bridge_slave_0: left allmulticast mode
[  697.590415][   T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 144, changing to 7
[  697.593642][T14515] bridge_slave_0: left promiscuous mode
[  697.630008][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  697.639947][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.643552][ T5814] block nbd5: Receive control failed (result -107)
[  697.659860][T14515] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.674808][   T24] usb 3-1: Product: syz
[  697.689158][   T24] usb 3-1: Manufacturer: syz
[  697.697897][   T24] usb 3-1: SerialNumber: syz
[  697.702206][ T5867] usb 2-1: not running at top speed; connect to a high speed hub
[  697.711760][ T5867] usb 2-1: config 1 interface 0 has no altsetting 0
[  697.722500][T14516] nbd5: detected capacity change from 0 to 12
[  697.735172][T14516] block nbd5: Dead connection, failed to find a fallback
[  697.743274][T14516] block nbd5: shutting down sockets
[  697.748769][T14516] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  697.759158][T14516] buffer_io_error: 7 callbacks suppressed
[  697.759174][T14516] Buffer I/O error on dev nbd5, logical block 0, async page read
[  697.773744][T14516] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  697.785338][T14516] Buffer I/O error on dev nbd5, logical block 0, async page read
[  697.794235][ T5867] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  697.803573][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.815059][T14516] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  697.824269][ T5867] usb 2-1: Product: syz
[  697.828441][ T5867] usb 2-1: Manufacturer: ⨇™锘Ꝥ⻍듿瓉羗啊༨䁀௸点븩᳓輕혺즇ꮏ떊女纵撚㷩ⓝ盁磝〳ᆛ㐾溌┷늦㋟渹拽튴ͷ摶쏆ࣹ쀤䕚攃쯳镦ょ혧븻䱗ί償Ⱎ쇯ꧽ䦎ⵓ旀
[  697.850163][T14516] Buffer I/O error on dev nbd5, logical block 0, async page read
[  697.858223][T14516] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  697.868078][ T5867] usb 2-1: SerialNumber: syz
[  697.874743][T14516] Buffer I/O error on dev nbd5, logical block 0, async page read
[  697.894048][T14516] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  697.910516][T14516] Buffer I/O error on dev nbd5, logical block 0, async page read
[  697.918429][T14516] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  697.997603][T14523] loop8: detected capacity change from 0 to 7
[  698.016851][T14523] Dev loop8: unable to read RDB block 7
[  698.023708][T14523]  loop8: AHDI p1 p3 p4
[  698.027928][T14523] loop8: partition table partially beyond EOD, truncated
[  698.035436][T14523] loop8: p1 start 975770946 is beyond EOD, truncated
[  698.042238][T14523] loop8: p3 start 6514546 is beyond EOD, truncated
[  698.064219][T14516] Buffer I/O error on dev nbd5, logical block 0, async page read
[  698.113019][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2408'.
[  698.303578][T14516] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  698.312757][T14516] Buffer I/O error on dev nbd5, logical block 0, async page read
[  698.339896][ T5867] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 69 if 0 alt 6 proto 1 vid 0x0525 pid 0xA4A8
[  698.350358][T14516] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  698.356461][ T5867] usb 2-1: USB disconnect, device number 69
[  698.367946][ T5867] usblp0: removed
[  698.393209][T14516] Buffer I/O error on dev nbd5, logical block 0, async page read
[  698.419210][T14516] ldm_validate_partition_table(): Disk read failed.
[  698.426548][T14516] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  698.444412][T14516] Buffer I/O error on dev nbd5, logical block 0, async page read
[  698.453028][T14516] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  698.462945][T14516] Buffer I/O error on dev nbd5, logical block 0, async page read
[  698.470027][T14528] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  698.472167][T14516] Dev nbd5: unable to read RDB block 0
[  698.486876][T14516]  nbd5: unable to read partition table
[  698.493003][T14516] nbd5: partition table beyond EOD, truncated
[  698.500036][T14516] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  698.511909][T14516] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=5, location=5
[  698.523929][T14516] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=4, location=4
[  698.533659][T14516] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=3, location=3
[  698.539520][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2414'.
[  698.543336][T14516] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  698.597681][T14516] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  698.613829][T14516] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=2, location=2
[  698.626723][T14516] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=1, location=1
[  698.639894][T14516] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0
[  698.653009][T14516] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  698.663604][T14516] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  698.676086][T14516] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0
[  698.692237][T14516] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  698.702042][T14516] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[  698.812762][T14539] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2417'.
[  698.949013][T14544] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2419'.
[  699.397858][T14546] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  699.668245][   T24] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  699.744540][   T24] usb 3-1: USB disconnect, device number 62
[  700.412773][T14568] bond0: (slave macsec1): Error -34 calling dev_set_mtu
[  700.497551][T14565] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2422'.
[  700.518060][T14576] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2430'.
[  700.715355][T14586] batman_adv: batadv0: Removing interface: dummy0
[  700.746290][T14586] bond0: (slave batadv0): Releasing backup interface
[  700.753514][T14586] bond0: (slave batadv0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:2a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  700.789956][T14586] bond0: (slave bond2): Releasing backup interface
[  700.844359][T14586] batadv1: left allmulticast mode
[  700.858499][T14586] batadv1: left promiscuous mode
[  700.875705][T14586] bridge0: port 1(batadv1) entered disabled state
[  701.245256][T14595] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  701.254145][T14595] overlayfs: missing 'lowerdir'
[  701.685734][T14603] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  701.695517][T14586] ip6gretap1: left allmulticast mode
[  701.720860][T14586] ip6gretap1: left promiscuous mode
[  702.258875][T14586] bridge1: port 1(ip6gretap1) entered disabled state
[  703.340057][T14586] veth5: left allmulticast mode
[  703.345726][T14586] bridge1: port 2(veth5) entered disabled state
[  703.356412][T14586] veth7: left allmulticast mode
[  703.367431][T14586] bridge2: port 1(veth7) entered disabled state
[  703.384309][T14586] bond0: (slave bond5): Releasing backup interface
[  704.089020][T14620] syz.1.2443 (14620): drop_caches: 2
[  704.671568][T14631] __nla_validate_parse: 2 callbacks suppressed
[  704.671585][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2446'.
[  704.965809][T14639] 9pnet_virtio: no channels available for device syz
[  706.282717][T14654] input: syz1 as /devices/virtual/input/input62
[  706.284201][   T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  706.752454][   T24] usb 3-1: Using ep0 maxpacket: 32
[  706.776191][   T24] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[  706.818881][   T24] usb 3-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config
[  707.148133][   T24] usb 3-1: config 0 has no interface number 0
[  707.157042][   T24] usb 3-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  707.177293][   T24] usb 3-1: config 0 interface 239 has no altsetting 0
[  707.192520][   T24] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  707.261641][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.352892][   T24] usb 3-1: Product: syz
[  707.384754][   T24] usb 3-1: Manufacturer: syz
[  707.429437][   T24] usb 3-1: SerialNumber: syz
[  707.505341][   T24] usb 3-1: config 0 descriptor??
[  707.720880][   T52] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  707.951870][   T24] usb 3-1: USB disconnect, device number 63
[  707.962238][   T52] usb 5-1: Using ep0 maxpacket: 8
[  708.007160][   T52] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  708.017023][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.025704][   T52] usb 5-1: Product: syz
[  708.029994][   T52] usb 5-1: Manufacturer: syz
[  708.034889][   T52] usb 5-1: SerialNumber: syz
[  708.042597][   T52] usb 5-1: config 0 descriptor??
[  708.316244][   T52] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  708.901351][ T5824] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  709.100469][ T5824] usb 7-1: Using ep0 maxpacket: 8
[  709.115851][ T5824] usb 7-1: config index 0 descriptor too short (expected 260, got 27)
[  709.117751][T14681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2461'.
[  709.147872][ T5824] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  709.158829][ T5824] usb 7-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  709.177471][T14686] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2462'.
[  709.178677][ T5824] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  709.200976][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.268683][T14690] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  709.277901][T14690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2464'.
[  709.314735][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2463'.
[  709.425402][ T5824] usb 7-1: string descriptor 0 read error: -71
[  709.434357][ T5824] usb 7-1: USB disconnect, device number 8
[  710.547129][T14708] netlink: 'syz.2.2467': attribute type 10 has an invalid length.
[  710.565030][T14708] 8021q: adding VLAN 0 to HW filter on device batadv0
[  710.585278][T14708] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  711.404498][   T52] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  711.408625][T14715] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  711.430172][   T52] usb 5-1: USB disconnect, device number 59
[  712.410606][T14727] netlink: 'syz.6.2474': attribute type 10 has an invalid length.
[  712.492993][   T24] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  712.893136][T14733] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  712.902220][T14733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2477'.
[  713.582893][   T24] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  713.592020][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.602845][T14737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2476'.
[  713.626188][   T24] usb 6-1: config 0 descriptor??
[  713.659165][   T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  713.914918][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2473'.
[  714.518036][   T24] gp8psk: usb in 128 operation failed.
[  714.537453][   T24] gp8psk: usb in 137 operation failed.
[  714.544615][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  714.558534][   T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  714.586254][   T24] usb 6-1: USB disconnect, device number 23
[  714.673971][T14755] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2482'.
[  714.988061][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'.
[  715.547971][T14778] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  715.556921][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2489'.
[  715.740458][ T5867] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  715.749985][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2491'.
[  716.210037][ T5924] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  716.293349][T14789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2492'.
[  716.320449][ T5867] usb 7-1: Using ep0 maxpacket: 16
[  716.334237][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  716.341204][T14789] 8021q: adding VLAN 0 to HW filter on device bond4
[  716.352545][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  716.358082][T14789] bond0: (slave bond4): Enslaving as an active interface with an up link
[  716.363126][ T5867] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  716.392164][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.411283][ T5924] usb 6-1: Using ep0 maxpacket: 8
[  716.433679][ T5924] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  716.475292][ T5867] usb 7-1: config 0 descriptor??
[  716.490838][ T5924] usb 6-1: config 0 has no interface number 0
[  716.504936][ T5924] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  716.528489][ T5924] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  716.539225][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.705703][ T5924] usb 6-1: config 0 descriptor??
[  716.718178][   T30] audit: type=1400 audit(1747658818.463:776): avc:  denied  { map } for  pid=14792 comm="syz.2.2493" path="socket:[42417]" dev="sockfs" ino=42417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  716.721832][ T5924] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  717.006269][T14803] input: syz1 as /devices/virtual/input/input64
[  717.089980][ T5867] usbhid 7-1:0.0: can't add hid device: -71
[  717.096319][ T5867] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  717.102257][ T5907] usb 6-1: USB disconnect, device number 24
[  717.132888][T14805] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2494'.
[  717.174232][ T5867] usb 7-1: USB disconnect, device number 9
[  717.878630][T14829] Invalid ELF header magic: != ELF
[  717.895824][T14828] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  718.006589][T14828] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2503'.
[  719.107946][T14842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2505'.
[  720.385226][T14855] bond0: (slave batadv0): Releasing backup interface
[  720.415364][T14855] bond0: (slave bond_slave_0): Releasing backup interface
[  720.446946][T14855] bond0: (slave bond_slave_1): Releasing backup interface
[  720.563655][T14855] team0: Port device team_slave_0 removed
[  720.575503][T14855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  720.583583][T14855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  720.610888][ T5867] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  720.611676][T14855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  720.635763][T14855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  720.675731][T14855] ip6gretap1: left allmulticast mode
[  720.688358][T14855] ip6gretap1: left promiscuous mode
[  720.697390][T14855] bridge2: port 1(ip6gretap1) entered disabled state
[  720.740812][ T5830] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  720.771114][ T5867] usb 2-1: Using ep0 maxpacket: 16
[  720.777782][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  720.801955][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  720.818802][ T5867] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  720.829990][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.008645][ T5830] usb 7-1: Using ep0 maxpacket: 8
[  721.158551][ T5830] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  721.174485][ T5830] usb 7-1: config 0 has no interface number 0
[  721.187687][ T5867] usb 2-1: config 0 descriptor??
[  721.196113][ T5830] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  721.208796][ T5830] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  721.220056][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.311568][ T5830] usb 7-1: config 0 descriptor??
[  721.354069][ T5830] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  721.534655][ T5830] usb 7-1: USB disconnect, device number 10
[  721.551837][ T5907] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  721.723079][ T5907] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  721.732944][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.746098][ T5907] usb 3-1: config 0 descriptor??
[  721.798724][ T5867] usbhid 2-1:0.0: can't add hid device: -71
[  721.805460][ T5867] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  721.815129][ T5867] usb 2-1: USB disconnect, device number 70
[  721.821161][   T92] usb 5-1: new full-speed USB device number 60 using dummy_hcd
[  721.955542][   T30] audit: type=1804 audit(1747658823.703:777): pid=14868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2515" name="/newroot/520/file0" dev="tmpfs" ino=2752 res=1 errno=0
[  721.981089][   T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  721.992858][   T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  722.002905][   T92] usb 5-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00
[  722.012565][   T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.014207][T14868] ref_ctr going negative. vaddr: 0x200000ffc018, curr val: -17644, delta: 1
[  722.022832][   T92] usb 5-1: config 0 descriptor??
[  722.038060][T14868] ref_ctr increment failed for inode: 0xac0 offset: 0x2 ref_ctr_offset: 0x18 of mm: 0xffff88807a0c5a00
[  722.073995][T14868] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1
[  722.076440][ T5907] kaweth 3-1:0.0: Firmware present in device.
[  722.087278][T14868] ref_ctr decrement failed for inode: 0xac0 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807a0c5a00
[  722.103565][T14868] uprobe: syz.2.2515:14868 failed to unregister, leaking uprobe
[  722.233350][T14880] Invalid ELF header magic: != ELF
[  722.274529][ T5907] kaweth 3-1:0.0: Error reading configuration (-32), no net device created
[  722.289095][ T5907] kaweth 3-1:0.0: probe with driver kaweth failed with error -5
[  722.301766][ T5907] usb 3-1: USB disconnect, device number 64
[  722.310981][T14882] FAULT_INJECTION: forcing a failure.
[  722.310981][T14882] name failslab, interval 1, probability 0, space 0, times 0
[  722.315212][   T92] usbhid 5-1:0.0: can't add hid device: -71
[  722.329678][   T92] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  722.343250][T14882] CPU: 1 UID: 0 PID: 14882 Comm: syz.5.2519 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  722.343276][T14882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  722.343286][T14882] Call Trace:
[  722.343293][T14882]  <TASK>
[  722.343300][T14882]  dump_stack_lvl+0x16c/0x1f0
[  722.343331][T14882]  should_fail_ex+0x512/0x640
[  722.343355][T14882]  ? __kmalloc_node_track_caller_noprof+0xc3/0x510
[  722.343378][T14882]  should_failslab+0xc2/0x120
[  722.343397][T14882]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[  722.343415][T14882]  ? kobject_init_and_add+0xe7/0x190
[  722.343438][T14882]  ? swnode_register+0x558/0x6c0
[  722.343463][T14882]  ? fwnode_create_software_node+0x1c8/0x3f0
[  722.343489][T14882]  ? kstrdup_const+0x63/0x80
[  722.343507][T14882]  ? __x64_sys_ioctl+0x190/0x200
[  722.343529][T14882]  kstrdup+0x53/0x100
[  722.343547][T14882]  kstrdup_const+0x63/0x80
[  722.343563][T14882]  __kernfs_new_node+0x9b/0x8a0
[  722.343579][T14882]  ? __pfx_number+0x10/0x10
[  722.343594][T14882]  ? __pfx___kernfs_new_node+0x10/0x10
[  722.343614][T14882]  ? find_held_lock+0x2b/0x80
[  722.343633][T14882]  ? kernfs_root+0xee/0x2a0
[  722.343652][T14882]  kernfs_new_node+0x13c/0x1e0
[  722.343674][T14882]  kernfs_create_dir_ns+0x4c/0x1a0
[  722.343695][T14882]  sysfs_create_dir_ns+0x13a/0x2b0
[  722.343709][T14882]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  722.343722][T14882]  ? find_held_lock+0x2b/0x80
[  722.343743][T14882]  ? do_raw_spin_unlock+0x172/0x230
[  722.343760][T14882]  kobject_add_internal+0x2c4/0x9b0
[  722.343778][T14882]  kobject_init_and_add+0x11b/0x190
[  722.343793][T14882]  ? __pfx_kobject_init_and_add+0x10/0x10
[  722.343815][T14882]  ? lockdep_init_map_type+0x5c/0x280
[  722.343831][T14882]  swnode_register+0x558/0x6c0
[  722.343852][T14882]  ? kasan_save_track+0x14/0x30
[  722.343868][T14882]  fwnode_create_software_node+0x1c8/0x3f0
[  722.343896][T14882]  device_create_managed_software_node+0x103/0x270
[  722.343915][T14882]  iommufd_test+0x1566/0x6100
[  722.343939][T14882]  ? __pfx_iommufd_test+0x10/0x10
[  722.343964][T14882]  ? find_held_lock+0x2b/0x80
[  722.343980][T14882]  ? __might_fault+0xe3/0x190
[  722.344005][T14882]  iommufd_fops_ioctl+0x33c/0x4e0
[  722.344031][T14882]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  722.344052][T14882]  ? hook_file_ioctl_common+0x145/0x410
[  722.344075][T14882]  ? selinux_file_ioctl+0x180/0x270
[  722.344097][T14882]  ? selinux_file_ioctl+0xb4/0x270
[  722.344120][T14882]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  722.344141][T14882]  __x64_sys_ioctl+0x190/0x200
[  722.344162][T14882]  do_syscall_64+0xcd/0x260
[  722.344185][T14882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.344201][T14882] RIP: 0033:0x7fa025b8e969
[  722.344214][T14882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  722.344228][T14882] RSP: 002b:00007fa026954038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  722.344243][T14882] RAX: ffffffffffffffda RBX: 00007fa025db5fa0 RCX: 00007fa025b8e969
[  722.344252][T14882] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003
[  722.344260][T14882] RBP: 00007fa026954090 R08: 0000000000000000 R09: 0000000000000000
[  722.344268][T14882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  722.344276][T14882] R13: 0000000000000000 R14: 00007fa025db5fa0 R15: 00007ffc46e48358
[  722.344296][T14882]  </TASK>
[  722.347763][T14882] kobject: kobject_add_internal failed for node0 (error: -12 parent: software_nodes)
[  722.363374][   T92] usb 5-1: USB disconnect, device number 60
[  722.393798][T14884] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  722.396655][T14882] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12
[  722.781924][T14884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2520'.
[  724.740587][   T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  724.771511][   T92] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  724.858332][   T30] audit: type=1400 audit(1747658826.603:778): avc:  denied  { bind } for  pid=14899 comm="syz.6.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  724.912325][   T24] usb 5-1: Using ep0 maxpacket: 8
[  724.933355][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  724.935524][   T92] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  724.961513][   T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  724.971180][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  724.978187][   T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  724.993340][   T92] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  725.023342][   T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  725.033662][   T92] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  725.052844][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.053451][   T92] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  725.069536][   T24] usb 5-1: Product: syz
[  725.073849][   T24] usb 5-1: Manufacturer: syz
[  725.078512][   T24] usb 5-1: SerialNumber: syz
[  725.103418][   T92] usb 6-1: Manufacturer: syz
[  725.117616][   T92] usb 6-1: config 0 descriptor??
[  725.712637][T14917] bond0: entered promiscuous mode
[  725.821772][T14917] batadv0: entered promiscuous mode
[  726.639292][   T24] usb 5-1: USB disconnect, device number 61
[  726.652001][T14945] Invalid ELF header magic: != ELF
[  726.685219][T14917] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  726.720287][T14917] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  726.733883][T14917] 8021q: adding VLAN 0 to HW filter on device hsr1
[  726.741750][   T92] rc_core: IR keymap rc-hauppauge not found
[  726.747806][   T92] Registered IR keymap rc-empty
[  726.777481][   T92] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  726.827414][T14917] bond0: left promiscuous mode
[  726.833285][T14917] batadv0: left promiscuous mode
[  726.842193][   T92] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  726.873384][   T92] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  726.922565][   T92] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input66
[  727.581239][   T92] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  727.610632][   T92] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  727.839040][   T92] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  727.992858][   T92] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  728.020934][   T92] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  728.054932][   T92] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  728.375917][   T92] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  728.442825][   T92] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  728.471729][   T92] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  728.491879][T14971] bond0: (slave batadv0): Releasing backup interface
[  728.501921][   T92] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  728.544203][   T92] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  728.549718][T14973] Cannot find add_set index 0 as target
[  728.599058][   T92] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  728.617110][T14977] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2542'.
[  728.631196][   T92] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  728.644252][T14978] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  728.667607][   T30] audit: type=1400 audit(1747658830.413:779): avc:  denied  { search } for  pid=14975 comm="syz.4.2542" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  728.667930][   T30] audit: type=1400 audit(1747658830.413:780): avc:  denied  { mounton } for  pid=14975 comm="syz.4.2542" path="/487/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  728.739347][   T92] usb 6-1: USB disconnect, device number 25
[  729.542805][   T30] audit: type=1400 audit(1747658831.293:781): avc:  denied  { unmount } for  pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  729.848078][T14997] loop8: detected capacity change from 0 to 7
[  729.954097][T14997] Dev loop8: unable to read RDB block 7
[  729.959851][T14997]  loop8: AHDI p1 p3 p4
[  729.965126][T14997] loop8: partition table partially beyond EOD, truncated
[  729.972635][T14997] loop8: p1 start 975770946 is beyond EOD, truncated
[  729.979431][T14997] loop8: p3 start 6514546 is beyond EOD, truncated
[  730.051083][   T92] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  730.211252][   T30] audit: type=1400 audit(1747658831.953:782): avc:  denied  { bind } for  pid=14980 comm="syz.2.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  730.232017][T14981] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  730.265785][   T30] audit: type=1400 audit(1747658832.013:783): avc:  denied  { write } for  pid=14980 comm="syz.2.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  730.290768][   T92] usb 6-1: Using ep0 maxpacket: 32
[  730.298051][   T30] audit: type=1400 audit(1747658832.013:784): avc:  denied  { shutdown } for  pid=14980 comm="syz.2.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  730.324406][T14996] Invalid ELF header magic: != ELF
[  730.332291][   T92] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  730.346045][   T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.346310][T15001] 9pnet_fd: Insufficient options for proto=fd
[  730.369077][   T92] usb 6-1: config 0 descriptor??
[  730.377647][   T92] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  730.581629][   T92] gspca_vc032x: reg_r err -32
[  730.586350][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.599642][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.605261][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.611508][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.616801][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.622471][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.627782][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.634724][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.640030][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.647766][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.660871][T15003] random: crng reseeded on system resumption
[  730.699220][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.718649][T15009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2548'.
[  730.738508][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.768233][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.776499][T14995] overlayfs: overlapping lowerdir path
[  730.811891][T14995] overlayfs: failed to resolve './file0/file0': -2
[  730.850247][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.859462][T15014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2551'.
[  730.883339][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.916242][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.930975][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  730.957869][   T92] gspca_vc032x: I2c Bus Busy Wait 00
[  731.022761][   T92] gspca_vc032x: Unknown sensor...
[  731.035699][   T92] vc032x 6-1:0.0: probe with driver vc032x failed with error -22
[  731.062270][   T92] usb 6-1: USB disconnect, device number 26
[  731.317592][   T30] audit: type=1400 audit(1747658833.063:785): avc:  denied  { write } for  pid=15021 comm="syz.6.2554" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  731.828520][   T30] audit: type=1400 audit(1747658833.063:786): avc:  denied  { open } for  pid=15021 comm="syz.6.2554" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  731.982087][T15030] vlan3: entered allmulticast mode
[  731.991678][T15030] bridge_slave_0: entered allmulticast mode
[  732.372781][T15043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2559'.
[  733.279986][T15052] FAULT_INJECTION: forcing a failure.
[  733.279986][T15052] name failslab, interval 1, probability 0, space 0, times 0
[  733.328712][T15052] CPU: 1 UID: 0 PID: 15052 Comm: syz.2.2562 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  733.328741][T15052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  733.328752][T15052] Call Trace:
[  733.328759][T15052]  <TASK>
[  733.328766][T15052]  dump_stack_lvl+0x16c/0x1f0
[  733.328796][T15052]  should_fail_ex+0x512/0x640
[  733.328822][T15052]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  733.328843][T15052]  should_failslab+0xc2/0x120
[  733.328864][T15052]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  733.328882][T15052]  ? __kernfs_new_node+0xd2/0x8a0
[  733.328905][T15052]  __kernfs_new_node+0xd2/0x8a0
[  733.328925][T15052]  ? __pfx_number+0x10/0x10
[  733.328943][T15052]  ? __pfx___kernfs_new_node+0x10/0x10
[  733.328968][T15052]  ? find_held_lock+0x2b/0x80
[  733.328991][T15052]  ? kernfs_root+0xee/0x2a0
[  733.329015][T15052]  kernfs_new_node+0x13c/0x1e0
[  733.329041][T15052]  kernfs_create_dir_ns+0x4c/0x1a0
[  733.329066][T15052]  sysfs_create_dir_ns+0x13a/0x2b0
[  733.329085][T15052]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  733.329101][T15052]  ? find_held_lock+0x2b/0x80
[  733.329127][T15052]  ? do_raw_spin_unlock+0x172/0x230
[  733.329149][T15052]  kobject_add_internal+0x2c4/0x9b0
[  733.329170][T15052]  kobject_init_and_add+0x11b/0x190
[  733.329189][T15052]  ? __pfx_kobject_init_and_add+0x10/0x10
[  733.329216][T15052]  ? lockdep_init_map_type+0x5c/0x280
[  733.329237][T15052]  swnode_register+0x558/0x6c0
[  733.329265][T15052]  ? kasan_save_track+0x14/0x30
[  733.329284][T15052]  fwnode_create_software_node+0x1c8/0x3f0
[  733.329315][T15052]  device_create_managed_software_node+0x103/0x270
[  733.329337][T15052]  iommufd_test+0x1566/0x6100
[  733.329368][T15052]  ? __pfx_iommufd_test+0x10/0x10
[  733.329396][T15052]  ? find_held_lock+0x2b/0x80
[  733.329417][T15052]  ? __might_fault+0xe3/0x190
[  733.329450][T15052]  iommufd_fops_ioctl+0x33c/0x4e0
[  733.329476][T15052]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  733.329502][T15052]  ? hook_file_ioctl_common+0x145/0x410
[  733.329529][T15052]  ? selinux_file_ioctl+0x180/0x270
[  733.329556][T15052]  ? selinux_file_ioctl+0xb4/0x270
[  733.329585][T15052]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  733.329610][T15052]  __x64_sys_ioctl+0x190/0x200
[  733.329636][T15052]  do_syscall_64+0xcd/0x260
[  733.329663][T15052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.329681][T15052] RIP: 0033:0x7f8fd4b8e969
[  733.329695][T15052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  733.329714][T15052] RSP: 002b:00007f8fd5a1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  733.329732][T15052] RAX: ffffffffffffffda RBX: 00007f8fd4db5fa0 RCX: 00007f8fd4b8e969
[  733.329744][T15052] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003
[  733.329755][T15052] RBP: 00007f8fd5a1c090 R08: 0000000000000000 R09: 0000000000000000
[  733.329766][T15052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  733.329777][T15052] R13: 0000000000000000 R14: 00007f8fd4db5fa0 R15: 00007ffc6cf385d8
[  733.329802][T15052]  </TASK>
[  733.626263][T15052] kobject: kobject_add_internal failed for node0 (error: -12 parent: software_nodes)
[  733.635847][T15052] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12
[  735.100531][ T5867] usb 2-1: new full-speed USB device number 71 using dummy_hcd
[  735.933770][ T5867] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  736.020027][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  736.043298][ T5867] usb 2-1: config 0 descriptor??
[  736.055955][ T5867] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  736.510111][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2567'.
[  736.982092][ T5867] gp8psk: usb in 128 operation failed.
[  737.019642][ T5867] gp8psk: usb in 137 operation failed.
[  737.902653][ T5867] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  737.954604][ T5867] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  738.016224][ T5867] usb 2-1: USB disconnect, device number 71
[  738.798663][T15105] input: syz1 as /devices/virtual/input/input68
[  739.420995][ T5907] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  739.652685][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  739.686019][T15121] netlink: 'syz.5.2581': attribute type 32 has an invalid length.
[  739.725157][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  739.789120][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2581'.
[  739.798670][T15121] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  739.834941][ T5907] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  739.844150][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.862969][ T5907] usb 2-1: config 0 descriptor??
[  739.960608][T15125] netlink: 'syz.2.2580': attribute type 10 has an invalid length.
[  739.978492][T15125] 8021q: adding VLAN 0 to HW filter on device batadv0
[  739.999898][T15125] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  740.734491][ T5907] greenasia 0003:0E8F:0012.001F: unknown main item tag 0x0
[  740.746910][ T5907] greenasia 0003:0E8F:0012.001F: item fetching failed at offset 2/5
[  741.215703][T15140] xt_hashlimit: size too large, truncated to 1048576
[  741.822578][ T5907] greenasia 0003:0E8F:0012.001F: parse failed
[  743.775884][ T5907] greenasia 0003:0E8F:0012.001F: probe with driver greenasia failed with error -22
[  744.526446][ T5924] usb 2-1: USB disconnect, device number 72
[  744.918242][T15171] netlink: 'syz.6.2590': attribute type 25 has an invalid length.
[  745.312903][   T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  745.647477][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  746.170496][T15188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2595'.
[  746.605132][   T24] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  746.616991][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.901323][T15183] netlink: 'syz.4.2594': attribute type 10 has an invalid length.
[  746.910239][T15183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  746.919135][T15183] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  747.159127][   T24] usb 6-1: config 0 descriptor??
[  747.166819][T15194] set match dimension is over the limit!
[  747.545088][   T24] usbhid 6-1:0.0: can't add hid device: -71
[  747.575850][   T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  747.595839][   T24] usb 6-1: USB disconnect, device number 27
[  748.159362][T15222] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2602'.
[  748.174053][   T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  748.370584][   T24] usb 6-1: Using ep0 maxpacket: 32
[  748.382644][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  748.442928][   T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  748.453148][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.522499][   T24] usb 6-1: config 0 descriptor??
[  748.530186][   T24] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  748.557587][   T24] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  749.886257][   T24] usb 6-1: USB disconnect, device number 28
[  749.907576][   T24] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  750.858278][T15243] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2607'.
[  751.337492][T15253] bond0: (slave batadv0): Releasing backup interface
[  751.754380][T15269] program syz.1.2615 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  751.767273][ T5867] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  751.990599][ T5867] usb 6-1: Using ep0 maxpacket: 8
[  752.096536][ T5867] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  752.214497][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.468959][ T5867] usb 6-1: Product: syz
[  752.477425][ T5867] usb 6-1: Manufacturer: syz
[  752.488572][ T5867] usb 6-1: SerialNumber: syz
[  752.508256][ T5867] usb 6-1: config 0 descriptor??
[  752.756648][ T5867] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  753.155058][T15296] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2622'.
[  754.225729][   T52] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  754.825101][   T52] usb 5-1: Using ep0 maxpacket: 16
[  754.864934][ T5867] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  754.882440][ T5867] usb 6-1: USB disconnect, device number 29
[  754.908029][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  755.089876][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  755.105808][   T52] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  755.450453][ T5867] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  755.535325][   T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.559917][   T52] usb 5-1: config 0 descriptor??
[  755.614457][ T5867] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  755.647231][T15319] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  755.661657][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.681563][T15319] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  755.694854][ T5867] usb 7-1: Product: syz
[  755.706697][ T5867] usb 7-1: Manufacturer: syz
[  755.715985][T15319] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  755.728734][ T5867] usb 7-1: SerialNumber: syz
[  755.742650][ T5867] usb 7-1: config 0 descriptor??
[  755.749469][T15319] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  756.136892][   T52] appleir 0003:05AC:8241.0020: unknown main item tag 0x0
[  756.254247][   T52] appleir 0003:05AC:8241.0020: unknown main item tag 0x0
[  756.520975][   T52] appleir 0003:05AC:8241.0020: unknown main item tag 0x0
[  756.524572][T15306] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  756.544238][ T5867] usb 7-1: USB disconnect, device number 11
[  756.637417][   T52] appleir 0003:05AC:8241.0020: No inputs registered, leaving
[  756.731062][   T52] appleir 0003:05AC:8241.0020: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0
[  756.791168][   T52] usb 5-1: USB disconnect, device number 62
[  757.090610][ T5830] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  757.222683][ T5814] Bluetooth: hci5: link tx timeout
[  757.229231][ T5814] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  757.271920][ T5830] usb 2-1: Using ep0 maxpacket: 16
[  757.281267][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  757.297207][T15341] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  757.304914][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  757.342297][ T5830] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  757.383897][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.418549][ T5830] usb 2-1: config 0 descriptor??
[  757.433798][   T30] audit: type=1400 audit(1747658859.183:787): avc:  denied  { create } for  pid=15342 comm="syz.2.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  757.670973][   T52] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  757.672565][T15354] input: syz1 as /devices/virtual/input/input70
[  757.772906][ T5867] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  757.864135][ T5830] playstation 0003:054C:05C4.0021: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0
[  757.884582][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  757.911456][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  757.947130][   T52] usb 5-1: New USB device found, idVendor=7cfa, idProduct=0815, bcdDevice=7e.66
[  757.964840][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  757.974754][   T52] usb 5-1: Product: syz
[  757.979102][   T52] usb 5-1: Manufacturer: syz
[  757.980949][ T5867] usb 7-1: Using ep0 maxpacket: 8
[  757.985840][   T52] usb 5-1: config 0 descriptor??
[  757.997274][ T5867] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  758.009387][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.238063][T15364] 9pnet_virtio: no channels available for device syz
[  758.709425][ T5830] playstation 0003:054C:05C4.0021: Failed to retrieve feature with reportID 163: -32
[  758.790913][ T5867] usb 7-1: Product: syz
[  759.039737][ T5830] playstation 0003:054C:05C4.0021: Failed to retrieve DualShock4 firmware info: -32
[  759.049232][ T5867] usb 7-1: Manufacturer: syz
[  759.057179][ T5867] usb 7-1: SerialNumber: syz
[  759.062267][ T5830] playstation 0003:054C:05C4.0021: Failed to get firmware info from DualShock4
[  759.062654][ T5824] usb 5-1: USB disconnect, device number 63
[  759.078376][ T5867] usb 7-1: config 0 descriptor??
[  759.088117][ T5830] playstation 0003:054C:05C4.0021: HW/FW version data in sysfs will be invalid.
[  759.106374][ T5830] playstation 0003:054C:05C4.0021: Invalid byte count transferred, expected 37 got 35
[  759.116758][ T5830] playstation 0003:054C:05C4.0021: Retrying DualShock 4 get calibration report (0x02) request
[  759.143828][T15367] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  759.156720][T15367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2644'.
[  759.325826][T15339] Bluetooth: hci5: command 0x0406 tx timeout
[  759.340828][ T5867] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  759.353473][ T5830] playstation 0003:054C:05C4.0021: Failed to retrieve feature with reportID 2: -71
[  759.363043][ T5830] playstation 0003:054C:05C4.0021: Retrying DualShock 4 get calibration report (0x02) request
[  759.373831][ T5830] playstation 0003:054C:05C4.0021: Failed to retrieve feature with reportID 2: -71
[  759.383841][ T5830] playstation 0003:054C:05C4.0021: Failed to retrieve DualShock4 calibration info: -71
[  759.398124][ T5830] playstation 0003:054C:05C4.0021: Invalid gyro calibration data for axis (3), disabling calibration.
[  759.401467][   T30] audit: type=1400 audit(1747658861.143:788): avc:  denied  { read write } for  pid=15368 comm="syz.5.2645" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  759.412763][ T5830] playstation 0003:054C:05C4.0021: Invalid gyro calibration data for axis (4), disabling calibration.
[  759.471168][ T5830] playstation 0003:054C:05C4.0021: Invalid gyro calibration data for axis (5), disabling calibration.
[  759.488131][ T5830] playstation 0003:054C:05C4.0021: Invalid accelerometer calibration data for axis (0), disabling calibration.
[  759.505945][ T5830] playstation 0003:054C:05C4.0021: Invalid accelerometer calibration data for axis (1), disabling calibration.
[  759.519209][ T5830] playstation 0003:054C:05C4.0021: Invalid accelerometer calibration data for axis (2), disabling calibration.
[  759.537024][ T5830] playstation 0003:054C:05C4.0021: Failed to get calibration data from DualShock4
[  759.546501][ T5830] playstation 0003:054C:05C4.0021: Gyroscope and accelerometer will be inaccurate.
[  759.568746][ T5830] input: HID 054c:05c4 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:05C4.0021/input/input71
[  759.581225][   T30] audit: type=1400 audit(1747658861.143:789): avc:  denied  { open } for  pid=15368 comm="syz.5.2645" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  759.627207][ T5830] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:05C4.0021/input/input72
[  759.646373][ T5830] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:05C4.0021/input/input73
[  759.675179][ T5830] playstation 0003:054C:05C4.0021: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000
[  759.689919][ T5830] usb 2-1: USB disconnect, device number 73
[  760.580613][   T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  761.075662][ T5830] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  761.242509][ T5830] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  761.266972][ T5830] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  761.286180][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  761.476955][   T24] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  761.643680][ T5830] usb 6-1: config 0 descriptor??
[  761.643840][   T24] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  761.700485][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  761.726206][   T24] gspca_main: stv0680-2.14.0 probing 041e:4007
[  761.879910][T15380] mmap: syz.5.2648 (15380): VmData 37728256 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[  762.071487][ T5867] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  762.087917][ T5830] ath6kl: Failed to read usb control message: -71
[  762.118329][ T5830] ath6kl: Unable to read the bmi data from the device: -71
[  762.126122][ T5867] usb 7-1: USB disconnect, device number 12
[  762.147386][ T5830] ath6kl: Unable to recv target info: -71
[  762.174401][ T5830] ath6kl: Failed to init ath6kl core: -71
[  762.188410][ T5830] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71
[  762.235173][ T5830] usb 6-1: USB disconnect, device number 30
[  762.644967][T15413] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2658'.
[  762.805535][   T24] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  762.835819][   T24] stv0680 2-1:4.0: STV(e): camera ping failed!!
[  762.847024][   T24] stv0680 2-1:4.0: last error: 0,  command = 0x0
[  762.912102][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'.
[  762.929647][T15420] xt_connbytes: Forcing CT accounting to be enabled
[  762.937286][T15420] Cannot find add_set index 0 as target
[  763.150561][ T5824] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  763.249783][T15424] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  763.287758][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2659'.
[  763.439154][ T5907] usb 2-1: USB disconnect, device number 74
[  763.970209][ T5824] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  763.984100][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.994850][ T5824] usb 7-1: Product: syz
[  764.005299][ T5824] usb 7-1: Manufacturer: syz
[  764.015018][ T5824] usb 7-1: SerialNumber: syz
[  764.030222][ T5824] usb 7-1: config 0 descriptor??
[  764.262383][T15439] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  764.353752][T15444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2664'.
[  764.598479][   T30] audit: type=1400 audit(1747658866.343:790): avc:  denied  { getopt } for  pid=15409 comm="syz.6.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  764.773685][ T5824] usb 7-1: Firmware: major: 38, minor: 240, hardware type: UNKNOWN (195)
[  764.905217][T15444] 8021q: adding VLAN 0 to HW filter on device bond6
[  764.917450][T15444] bond0: (slave bond6): Enslaving as an active interface with an up link
[  765.220999][ T5824] usb 7-1: Read permanent extended address 00:00:00:00:00:00:00:88 from device
[  765.258132][ T5824] usb 7-1: atusb_probe: initialization failed, error = -524
[  765.588608][ T5824] atusb 7-1:0.0: probe with driver atusb failed with error -524
[  765.863589][T15457] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2666'.
[  766.068189][ T5830] usb 7-1: USB disconnect, device number 13
[  766.846532][T15473] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  766.858875][T15473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2673'.
[  766.866426][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2674'.
[  767.018309][T15478] random: crng reseeded on system resumption
[  767.593997][T15480] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2675'.
[  767.779218][T15483] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2676'.
[  769.504440][   T30] audit: type=1400 audit(1747658871.243:791): avc:  denied  { ioctl } for  pid=15498 comm="syz.5.2681" path="socket:[45452]" dev="sockfs" ino=45452 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  769.529145][    C0] vkms_vblank_simulate: vblank timer overrun
[  769.682640][   T30] audit: type=1400 audit(1747658871.433:792): avc:  denied  { remount } for  pid=15499 comm="syz.2.2685" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  770.760428][ T5867] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  770.868200][T15516] netlink: 'syz.5.2686': attribute type 5 has an invalid length.
[  770.889804][T15517] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  770.889804][T15517] The task syz.4.2683 (15517) triggered the difference, watch for misbehavior.
[  771.321282][T15519] overlayfs: failed to resolve './file0': -2
[  771.853625][   T30] audit: type=1400 audit(1747658873.383:793): avc:  denied  { mount } for  pid=15523 comm="syz.4.2689" name="/" dev="configfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  771.913164][ T5824] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  771.934759][T15528] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  771.935514][   T30] audit: type=1400 audit(1747658873.383:794): avc:  denied  { search } for  pid=15523 comm="syz.4.2689" name="/" dev="configfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  771.951872][T15528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2688'.
[  771.963693][    C0] vkms_vblank_simulate: vblank timer overrun
[  772.046075][   T30] audit: type=1400 audit(1747658873.383:795): avc:  denied  { read } for  pid=15523 comm="syz.4.2689" name="/" dev="configfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  772.190550][ T5824] usb 7-1: Using ep0 maxpacket: 32
[  772.201423][   T30] audit: type=1400 audit(1747658873.383:796): avc:  denied  { open } for  pid=15523 comm="syz.4.2689" path="/" dev="configfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  772.252205][ T5824] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  772.261898][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.780467][ T5824] usb 7-1: config 0 descriptor??
[  772.789427][ T5824] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  772.882027][T15542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2693'.
[  772.963647][T15542] 8021q: adding VLAN 0 to HW filter on device bond5
[  772.989910][T15542] bond0: (slave bond5): Enslaving as an active interface with an up link
[  773.138979][ T5824] gspca_vc032x: reg_r err -32
[  773.144485][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.149830][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.156145][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.162208][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.167543][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.172932][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.178306][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.183971][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.189318][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.195259][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.200641][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.205979][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.212822][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.223231][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.257348][T15546] overlayfs: overlapping lowerdir path
[  773.289966][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.322472][T15549] overlayfs: failed to resolve './file0/file0': -2
[  773.342680][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.364634][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.395954][ T5824] gspca_vc032x: I2c Bus Busy Wait 00
[  773.432366][ T5824] gspca_vc032x: Unknown sensor...
[  773.462377][ T5824] vc032x 7-1:0.0: probe with driver vc032x failed with error -22
[  773.805550][ T5824] libceph: connect (1)[c::]:6789 error -101
[  773.813815][ T5824] libceph: mon0 (1)[c::]:6789 connect error
[  773.894974][ T5824] libceph: connect (1)[c::]:6789 error -101
[  773.906869][ T5824] libceph: mon0 (1)[c::]:6789 connect error
[  774.386936][T14041] libceph: connect (1)[c::]:6789 error -101
[  774.396541][T14041] libceph: mon0 (1)[c::]:6789 connect error
[  774.405205][ T5824] libceph: connect (1)[c::]:6789 error -101
[  774.411372][ T5824] libceph: mon0 (1)[c::]:6789 connect error
[  774.440618][ T5830] usb 5-1: new full-speed USB device number 64 using dummy_hcd
[  774.479183][ T5824] usb 7-1: USB disconnect, device number 14
[  774.582625][T15561] ceph: No mds server is up or the cluster is laggy
[  774.582935][T15555] ceph: No mds server is up or the cluster is laggy
[  774.680645][ T5830] usb 5-1: unable to get BOS descriptor or descriptor too short
[  774.726094][ T5830] usb 5-1: unable to read config index 0 descriptor/start: -71
[  774.739957][ T5830] usb 5-1: can't read configurations, error -71
[  774.766165][T15581] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  774.827933][T15581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2705'.
[  777.521499][T15615] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  777.754340][T15624] netlink: 'syz.5.2715': attribute type 10 has an invalid length.
[  777.771974][T15624] 8021q: adding VLAN 0 to HW filter on device batadv0
[  777.791426][T15624] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  778.987661][   T30] audit: type=1400 audit(1747658880.333:797): avc:  denied  { remount } for  pid=15628 comm="syz.2.2718" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  779.161438][   T30] audit: type=1400 audit(1747658880.913:798): avc:  denied  { mounton } for  pid=15646 comm="syz.2.2722" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:var_auth_t tclass=dir permissive=1
[  779.167816][T15647] gfs2: gfs2 mount does not exist
[  779.205041][T15645] FAULT_INJECTION: forcing a failure.
[  779.205041][T15645] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  779.232624][T15645] CPU: 1 UID: 0 PID: 15645 Comm: syz.6.2720 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  779.232649][T15645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  779.232659][T15645] Call Trace:
[  779.232666][T15645]  <TASK>
[  779.232672][T15645]  dump_stack_lvl+0x16c/0x1f0
[  779.232701][T15645]  should_fail_ex+0x512/0x640
[  779.232730][T15645]  _copy_to_iter+0x2a4/0x15a0
[  779.232761][T15645]  ? __pfx__copy_to_iter+0x10/0x10
[  779.232786][T15645]  ? __lock_acquire+0xaa4/0x1ba0
[  779.232817][T15645]  ? __lock_acquire+0x5ca/0x1ba0
[  779.232847][T15645]  simple_copy_to_iter+0x46/0x90
[  779.232875][T15645]  __skb_datagram_iter+0x5a9/0x8c0
[  779.232899][T15645]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  779.232934][T15645]  skb_copy_datagram_iter+0x40/0x50
[  779.232962][T15645]  mptcp_recvmsg+0x5ac/0x2230
[  779.233000][T15645]  ? __pfx_mptcp_recvmsg+0x10/0x10
[  779.233021][T15645]  ? __lock_acquire+0x5ca/0x1ba0
[  779.233050][T15645]  ? sock_has_perm+0x259/0x2f0
[  779.233080][T15645]  ? __pfx_mptcp_recvmsg+0x10/0x10
[  779.233102][T15645]  inet_recvmsg+0x46a/0x6a0
[  779.233126][T15645]  ? __fget_files+0x204/0x3c0
[  779.233142][T15645]  ? __pfx_inet_recvmsg+0x10/0x10
[  779.233174][T15645]  sock_recvmsg+0x1b2/0x250
[  779.233200][T15645]  __sys_recvfrom+0x203/0x310
[  779.233218][T15645]  ? __pfx___sys_recvfrom+0x10/0x10
[  779.233258][T15645]  ? ksys_write+0x1b9/0x240
[  779.233288][T15645]  ? __pfx_ksys_write+0x10/0x10
[  779.233312][T15645]  ? rcu_is_watching+0x12/0xc0
[  779.233335][T15645]  __x64_sys_recvfrom+0xe0/0x1c0
[  779.233352][T15645]  ? do_syscall_64+0x91/0x260
[  779.233375][T15645]  ? lockdep_hardirqs_on+0x7c/0x110
[  779.233399][T15645]  do_syscall_64+0xcd/0x260
[  779.233425][T15645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  779.233442][T15645] RIP: 0033:0x7f366258e969
[  779.233457][T15645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  779.233473][T15645] RSP: 002b:00007f3663375038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  779.233490][T15645] RAX: ffffffffffffffda RBX: 00007f36627b6160 RCX: 00007f366258e969
[  779.233501][T15645] RDX: fffffffffffffecb RSI: 0000200000000180 RDI: 0000000000000004
[  779.233511][T15645] RBP: 00007f3663375090 R08: 0000000000000000 R09: 0000000000000000
[  779.233521][T15645] R10: 0000000000004100 R11: 0000000000000246 R12: 0000000000000001
[  779.233531][T15645] R13: 0000000000000000 R14: 00007f36627b6160 R15: 00007fff3aaa4cf8
[  779.233555][T15645]  </TASK>
[  779.476662][    C1] vkms_vblank_simulate: vblank timer overrun
[  779.578714][T15650] vivid-000: =================  START STATUS  =================
[  779.597117][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2724'.
[  779.606774][T15650] vivid-000: Radio HW Seek Mode: Bounded
[  779.614730][T15650] vivid-000: Radio Programmable HW Seek: false
[  779.633824][T15650] vivid-000: RDS Rx I/O Mode: Block I/O
[  779.649446][T15650] vivid-000: Generate RBDS Instead of RDS: false
[  779.729391][T15657] netlink: 'syz.2.2724': attribute type 11 has an invalid length.
[  779.739227][T15650] vivid-000: RDS Reception: true
[  884.720312][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  884.727289][    C1] rcu: 	0-...!: (2 ticks this GP) idle=27ac/1/0x4000000000000000 softirq=75132/75138 fqs=2
[  884.738294][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5830/1:b..l
[  884.746207][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=60589, q=62 ncpus=2)
[  884.753835][    C1] Sending NMI from CPU 1 to CPUs 0:
[  884.753862][    C0] NMI backtrace for cpu 0
[  884.753874][    C0] CPU: 0 UID: 0 PID: 15656 Comm: syz.4.2725 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  884.753892][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  884.753901][    C0] RIP: 0010:lock_release+0x10b/0x2f0
[  884.753927][    C0] Code: 8e ff ff 48 85 c0 0f 84 47 01 00 00 8b 50 24 85 d2 0f 85 ae 01 00 00 66 83 78 22 1f 76 0c 66 83 68 22 20 66 83 78 22 1f 77 3c <8b> 54 24 0c 41 89 96 e8 0a 00 00 48 8b 00 49 89 86 e0 0a 00 00 41
[  884.753942][    C0] RSP: 0018:ffffc90000007cc0 EFLAGS: 00000097
[  884.753954][    C0] RAX: ffff888029ea53e8 RBX: ffffffff9add53e0 RCX: ffffc90000007ccc
[  884.753964][    C0] RDX: 0000000000000000 RSI: ffffffff9add53e0 RDI: ffff888029ea53e8
[  884.753973][    C0] RBP: 0000000000000006 R08: 0000000000000001 R09: fffff52000000f92
[  884.753982][    C0] R10: 0000000000000006 R11: ffffffff9add53c8 R12: ffffffff84d6af7c
[  884.753991][    C0] R13: 0000000000000006 R14: ffff888029ea4880 R15: 0000000000000004
[  884.754000][    C0] FS:  00007fdb0f9896c0(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000
[  884.754014][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  884.754024][    C0] CR2: 0000000000000000 CR3: 00000000350cc000 CR4: 00000000003526f0
[  884.754033][    C0] Call Trace:
[  884.754039][    C0]  <IRQ>
[  884.754048][    C0]  _raw_spin_unlock_irqrestore+0x1a/0x80
[  884.754068][    C0]  debug_object_activate+0x2ec/0x4c0
[  884.754085][    C0]  ? __pfx_debug_object_activate+0x10/0x10
[  884.754100][    C0]  ? do_raw_spin_lock+0x12c/0x2b0
[  884.754115][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  884.754131][    C0]  enqueue_hrtimer+0x23/0x3b0
[  884.754145][    C0]  __hrtimer_run_queues+0x8ff/0xad0
[  884.754162][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  884.754177][    C0]  ? read_tsc+0x9/0x20
[  884.754200][    C0]  hrtimer_interrupt+0x397/0x8e0
[  884.754219][    C0]  __sysvec_apic_timer_interrupt+0x108/0x3f0
[  884.754237][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  884.754256][    C0]  </IRQ>
[  884.754261][    C0]  <TASK>
[  884.754266][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  884.754281][    C0] RIP: 0010:__schedule+0x1177/0x5de0
[  884.754304][    C0] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 17 49 00 00 49 89 5f 10 48 8b bd 10 ff ff ff 48 89 de e8 51 a7 bd f5 48 89 c7 e8 c9 87 1b f6 <48> 8b 75 08 8b bd 08 ff ff ff e8 7a fb 1a f6 48 8b b5 88 fe ff ff
[  884.754317][    C0] RSP: 0018:ffffc9000df77648 EFLAGS: 00000202
[  884.754329][    C0] RAX: 0000000000000d1f RBX: ffff888029ea4880 RCX: 0000000000000006
[  884.754339][    C0] RDX: 0000000000000000 RSI: ffffffff8dbe41e5 RDI: ffffffff8bf4a220
[  884.754348][    C0] RBP: ffffc9000df777f8 R08: 0000000000000001 R09: 0000000000000001
[  884.754357][    C0] R10: ffffffff90852e17 R11: 0000000000000001 R12: 0000000000000000
[  884.754366][    C0] R13: 0000000000000000 R14: ffff888029ea4880 R15: ffff8880b8439dc0
[  884.754382][    C0]  ? __schedule+0x4002/0x5de0
[  884.754405][    C0]  ? __pfx___schedule+0x10/0x10
[  884.754421][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  884.754445][    C0]  preempt_schedule_irq+0x51/0x90
[  884.754462][    C0]  irqentry_exit+0x36/0x90
[  884.754479][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  884.754493][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  884.754508][    C0] Code: b6 5f 55 00 48 89 df 5b e9 0d bc 5a 00 be 03 00 00 00 5b e9 32 e1 15 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 34 24 65 48 8b 15 18 1a e9 11 65 8b 05 29 1a e9
[  884.754521][    C0] RSP: 0018:ffffc9000df778d0 EFLAGS: 00000296
[  884.754531][    C0] RAX: 000000000000443c RBX: ffff888034990e10 RCX: ffffc9000cffd000
[  884.754541][    C0] RDX: 0000000000080000 RSI: 0000000000000000 RDI: ffffffff8cc268a0
[  884.754550][    C0] RBP: ffffc9000df77960 R08: 0000000000000005 R09: 0000000000000000
[  884.754559][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8cc268a0
[  884.754568][    C0] R13: ffff88802073ff00 R14: ffffffff8cc268a0 R15: 0000000000000000
[  884.754583][    C0]  kernfs_name_hash+0x19/0x120
[  884.754599][    C0]  kernfs_add_one+0x1d9/0x840
[  884.754615][    C0]  ? irqentry_exit_to_user_mode+0x200/0x280
[  884.754635][    C0]  __kernfs_create_file+0x295/0x350
[  884.754655][    C0]  sysfs_add_file_mode_ns+0x207/0x3c0
[  884.754678][    C0]  internal_create_group+0x578/0xf30
[  884.754696][    C0]  ? __pfx_internal_create_group+0x10/0x10
[  884.754712][    C0]  ? kernfs_create_link+0x1bd/0x240
[  884.754731][    C0]  internal_create_groups+0x9d/0x150
[  884.754747][    C0]  device_add+0x6d1/0x1a70
[  884.754765][    C0]  ? __pfx_device_add+0x10/0x10
[  884.754782][    C0]  ? lockdep_init_map_type+0x5c/0x280
[  884.754794][    C0]  ? __init_waitqueue_head+0xca/0x150
[  884.754813][    C0]  netdev_register_kobject+0x182/0x3a0
[  884.754832][    C0]  register_netdevice+0x13dc/0x2270
[  884.754852][    C0]  ? __pfx_register_netdevice+0x10/0x10
[  884.754870][    C0]  ? __tun_chr_ioctl+0x1e6f/0x4740
[  884.754893][    C0]  __tun_chr_ioctl+0x1ee4/0x4740
[  884.754912][    C0]  ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450
[  884.754937][    C0]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  884.754958][    C0]  ? hook_file_ioctl_common+0x145/0x410
[  884.754975][    C0]  ? selinux_file_ioctl+0x180/0x270
[  884.754995][    C0]  ? selinux_file_ioctl+0xb4/0x270
[  884.755015][    C0]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  884.755035][    C0]  __x64_sys_ioctl+0x190/0x200
[  884.755054][    C0]  do_syscall_64+0xcd/0x260
[  884.755074][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  884.755087][    C0] RIP: 0033:0x7fdb0eb8e969
[  884.755100][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  884.755113][    C0] RSP: 002b:00007fdb0f989038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  884.755126][    C0] RAX: ffffffffffffffda RBX: 00007fdb0edb6080 RCX: 00007fdb0eb8e969
[  884.755135][    C0] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000005
[  884.755144][    C0] RBP: 00007fdb0ec10ab1 R08: 0000000000000000 R09: 0000000000000000
[  884.755153][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  884.755161][    C0] R13: 0000000000000000 R14: 00007fdb0edb6080 R15: 00007ffe4a9c5488
[  884.755176][    C0]  </TASK>
[  884.755855][    C1] task:kworker/0:3     state:R  running task     stack:22040 pid:5830  tgid:5830  ppid:2      task_flags:0x4208060 flags:0x00004000
[  885.362428][    C1] Workqueue: events delayed_vfree_work
[  885.367898][    C1] Call Trace:
[  885.371172][    C1]  <TASK>
[  885.374103][    C1]  __schedule+0x116f/0x5de0
[  885.378624][    C1]  ? __lock_acquire+0xaa4/0x1ba0
[  885.383576][    C1]  ? __pfx___schedule+0x10/0x10
[  885.388437][    C1]  ? mark_held_locks+0x49/0x80
[  885.393209][    C1]  preempt_schedule_irq+0x51/0x90
[  885.398237][    C1]  irqentry_exit+0x36/0x90
[  885.402657][    C1]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  885.408116][    C1] RIP: 0010:unwind_next_frame+0x3ae/0x20a0
[  885.413923][    C1] Code: 00 00 00 00 00 fc ff df 4c 89 fa 48 c1 ea 03 0f b6 04 02 4c 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 69 16 00 00 41 c6 45 34 01 <48> b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 0f b6 04 02 84
[  885.433529][    C1] RSP: 0018:ffffc9000449f870 EFLAGS: 00000246
[  885.439599][    C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff911367cc
[  885.447567][    C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffff909233dc
[  885.455630][    C1] RBP: ffffc9000449f928 R08: ffffffff911367f6 R09: 0000000000000000
[  885.463597][    C1] R10: 0000000000000002 R11: 0000000000002bb0 R12: ffffc9000449f930
[  885.471580][    C1] R13: ffffc9000449f8e0 R14: ffffc9000449f915 R15: ffffffff911367d1
[  885.479589][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  885.484544][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  885.490704][    C1]  arch_stack_walk+0x94/0x100
[  885.495391][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  885.500336][    C1]  stack_trace_save+0x8e/0xc0
[  885.505016][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  885.510387][    C1]  ? __lock_acquire+0x5ca/0x1ba0
[  885.515332][    C1]  save_stack+0x160/0x1f0
[  885.519667][    C1]  ? __pfx_save_stack+0x10/0x10
[  885.524526][    C1]  ? __free_frozen_pages+0x69d/0xff0
[  885.529830][    C1]  ? vfree+0x176/0x960
[  885.533925][    C1]  ? delayed_vfree_work+0x56/0x70
[  885.538982][    C1]  ? process_one_work+0x9cf/0x1b70
[  885.544116][    C1]  ? worker_thread+0x6c8/0xf10
[  885.548883][    C1]  ? kthread+0x3c2/0x780
[  885.553119][    C1]  ? ret_from_fork+0x45/0x80
[  885.557703][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  885.562651][    C1]  ? page_ext_put+0x3e/0xd0
[  885.567153][    C1]  __reset_page_owner+0x84/0x1a0
[  885.572093][    C1]  __free_frozen_pages+0x69d/0xff0
[  885.577219][    C1]  vfree+0x176/0x960
[  885.581125][    C1]  delayed_vfree_work+0x56/0x70
[  885.585978][    C1]  process_one_work+0x9cf/0x1b70
[  885.590925][    C1]  ? __pfx_process_one_work+0x10/0x10
[  885.596304][    C1]  ? assign_work+0x1a0/0x250
[  885.600896][    C1]  worker_thread+0x6c8/0xf10
[  885.605501][    C1]  ? __pfx_worker_thread+0x10/0x10
[  885.610635][    C1]  kthread+0x3c2/0x780
[  885.614720][    C1]  ? __pfx_kthread+0x10/0x10
[  885.619306][    C1]  ? __pfx_kthread+0x10/0x10
[  885.623892][    C1]  ? __pfx_kthread+0x10/0x10
[  885.628481][    C1]  ? __pfx_kthread+0x10/0x10
[  885.633074][    C1]  ? rcu_is_watching+0x12/0xc0
[  885.637837][    C1]  ? __pfx_kthread+0x10/0x10
[  885.642448][    C1]  ret_from_fork+0x45/0x80
[  885.646865][    C1]  ? __pfx_kthread+0x10/0x10
[  885.651452][    C1]  ret_from_fork_asm+0x1a/0x30
[  885.656234][    C1]  </TASK>
[  885.659251][    C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g60589 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  885.670438][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  885.680397][    C1] rcu: RCU grace-period kthread stack dump:
[  885.686275][    C1] task:rcu_preempt     state:R  running task     stack:27304 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  885.699762][    C1] Call Trace:
[  885.703034][    C1]  <TASK>
[  885.705962][    C1]  __schedule+0x116f/0x5de0
[  885.710474][    C1]  ? __lock_acquire+0x5ca/0x1ba0
[  885.715425][    C1]  ? __pfx___schedule+0x10/0x10
[  885.720282][    C1]  ? find_held_lock+0x2b/0x80
[  885.724961][    C1]  ? schedule+0x2d7/0x3a0
[  885.729293][    C1]  schedule+0xe7/0x3a0
[  885.733365][    C1]  schedule_timeout+0x123/0x290
[  885.738216][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  885.743587][    C1]  ? __pfx_process_timeout+0x10/0x10
[  885.748878][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  885.754683][    C1]  ? prepare_to_swait_event+0xf5/0x480
[  885.760148][    C1]  rcu_gp_fqs_loop+0x1ea/0xb00
[  885.764925][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  885.770223][    C1]  ? rcu_is_watching+0x12/0xc0
[  885.774982][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  885.780793][    C1]  rcu_gp_kthread+0x270/0x380
[  885.785477][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  885.790693][    C1]  ? rcu_is_watching+0x12/0xc0
[  885.795457][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  885.800664][    C1]  ? __kthread_parkme+0x19e/0x250
[  885.805693][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  885.810892][    C1]  kthread+0x3c2/0x780
[  885.814959][    C1]  ? __pfx_kthread+0x10/0x10
[  885.819544][    C1]  ? __pfx_kthread+0x10/0x10
[  885.824136][    C1]  ? __pfx_kthread+0x10/0x10
[  885.828719][    C1]  ? __pfx_kthread+0x10/0x10
[  885.833324][    C1]  ? rcu_is_watching+0x12/0xc0
[  885.838125][    C1]  ? __pfx_kthread+0x10/0x10
[  885.842724][    C1]  ret_from_fork+0x45/0x80
[  885.847138][    C1]  ? __pfx_kthread+0x10/0x10
[  885.851737][    C1]  ret_from_fork_asm+0x1a/0x30
[  885.856521][    C1]  </TASK>
[  885.859534][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  885.865851][    C1] CPU: 1 UID: 0 PID: 15634 Comm: syz.6.2720 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  885.876172][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  885.886219][    C1] RIP: 0010:smp_call_function_many_cond+0x4aa/0x1290
[  885.892898][    C1] Code: 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 7d 17 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 ff 83 e0 01 41
[  885.912502][    C1] RSP: 0018:ffffc9000b40f7c8 EFLAGS: 00000293
[  885.918565][    C1] RAX: 0000000000000000 RBX: ffff8880b8441720 RCX: ffffffff81af2e99
[  885.926530][    C1] RDX: ffff888037118000 RSI: ffffffff81af2e73 RDI: 0000000000000005
[  885.934495][    C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
[  885.942459][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170882e5
[  885.950422][    C1] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b853b040
[  885.958388][    C1] FS:  0000000000000000(0000) GS:ffff888124ada000(0000) knlGS:0000000000000000
[  885.967314][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  885.973892][    C1] CR2: 00002000000033c0 CR3: 0000000048996000 CR4: 00000000003526f0
[  885.981863][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  885.989853][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  885.997831][    C1] Call Trace:
[  886.001106][    C1]  <TASK>
[  886.004050][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  886.009270][    C1]  on_each_cpu_cond_mask+0x40/0x90
[  886.014385][    C1]  flush_tlb_mm_range+0x322/0x1780
[  886.019591][    C1]  ? __pfx_free_pgtables+0x10/0x10
[  886.024703][    C1]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[  886.030267][    C1]  tlb_finish_mmu+0x3c9/0x7b0
[  886.034952][    C1]  exit_mmap+0x403/0xb90
[  886.039203][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  886.043984][    C1]  ? __lock_acquire+0xaa4/0x1ba0
[  886.048947][    C1]  __mmput+0x12a/0x410
[  886.053046][    C1]  mmput+0x62/0x70
[  886.056779][    C1]  do_exit+0x9d1/0x2c30
[  886.060939][    C1]  ? __pfx___might_resched+0x10/0x10
[  886.066233][    C1]  ? __pfx_do_exit+0x10/0x10
[  886.070825][    C1]  ? do_raw_spin_lock+0x12c/0x2b0
[  886.075846][    C1]  ? find_held_lock+0x2b/0x80
[  886.080530][    C1]  do_group_exit+0xd3/0x2a0
[  886.085038][    C1]  get_signal+0x2673/0x26d0
[  886.089555][    C1]  ? __pfx_get_signal+0x10/0x10
[  886.094430][    C1]  ? __fput_deferred+0x118/0x370
[  886.099372][    C1]  arch_do_signal_or_restart+0x8f/0x7d0
[  886.104922][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  886.111076][    C1]  ? __pfx___schedule+0x10/0x10
[  886.115946][    C1]  syscall_exit_to_user_mode+0x150/0x2a0
[  886.121585][    C1]  do_syscall_64+0xda/0x260
[  886.126100][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.131990][    C1] RIP: 0033:0x7f366258e969
[  886.136416][    C1] Code: Unable to access opcode bytes at 0x7f366258e93f.
[  886.143449][    C1] RSP: 002b:00007f36633b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  886.151872][    C1] RAX: 0000000000297308 RBX: 00007f36627b5fa0 RCX: 00007f366258e969
[  886.159867][    C1] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000005
[  886.167841][    C1] RBP: 00007f3662610ab1 R08: 0000000000000000 R09: 0000000000000000
[  886.175810][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  886.183774][    C1] R13: 0000000000000000 R14: 00007f36627b5fa0 R15: 00007fff3aaa4cf8
[  886.191757][    C1]  </TASK>