last executing test programs:

3m38.373826833s ago: executing program 1 (id=109):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x8112, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r1, 0x0, 0x1c000000007400}, 0x38)

3m38.00664212s ago: executing program 1 (id=112):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip_vti0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

3m36.294174514s ago: executing program 1 (id=117):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x1, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r0, r0, &(0x7f0000000080)=0x3f00, 0x7f03)

3m35.884569451s ago: executing program 1 (id=119):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x201, 0x3000000, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0)

3m35.281865202s ago: executing program 1 (id=123):
openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={<r0=>0x0}, &(0x7f0000000240)=0xc)
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
pipe2$watch_queue(0x0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x6)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0})
r5 = dup3(r3, r2, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
r7 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x835)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f00000002c0)=[@free_buffer={0x40086303, r7}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000200)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0})
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x22, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001900010025bd7000ffdbdf251dbc8cd309286fe1ab947d4775c4ac504bdd8781ddea0c2f51f994f73e471b6ea06e49fd47ef1c1bac07576818b57f4edb293156532b571058cca5d3a7c5ef431b0dd0eae4ea72e646e90503845093fcc0f9411b282d02974d1209f1dea7290a54957c1263e9534e2b6409e4a292446b2b2e18ca63a77640f79893d59edb3538db244cd22d844fe20b18b6ebe33d02d3978c0dcfe5551471f5a7beae41b8b2cd9caaeed8895c31bfc600b235362eb022267b5cb57cbe57a96b9ead"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="90000000", @ANYRES16=r10, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r12, @ANYBLOB="7400028038000100240001006e6f1211f06d2227746966795f70656572735f696e7465726022edaf8da9e4bd0000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005002400030000000800040006000000"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x2}}, 0x20)
close(r1)

3m30.894716809s ago: executing program 1 (id=128):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = getuid()
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x49, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)={0x5c, 0x7d, 0x2, {{0x0, 0x42, 0x2, 0x0, {0x1, 0x1}, 0x4c200000, 0x401, 0x3, 0xc, 0x0, '', 0x6, '-&-]^#', 0x1, '!', 0x8, '$\',@\\\'/%'}, 0x5, '/[}\\*', r1, r2, r3}}, 0x5c)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x30000001})
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

3m15.291247979s ago: executing program 32 (id=128):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = getuid()
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x49, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)={0x5c, 0x7d, 0x2, {{0x0, 0x42, 0x2, 0x0, {0x1, 0x1}, 0x4c200000, 0x401, 0x3, 0xc, 0x0, '', 0x6, '-&-]^#', 0x1, '!', 0x8, '$\',@\\\'/%'}, 0x5, '/[}\\*', r1, r2, r3}}, 0x5c)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x30000001})
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2m4.18057626s ago: executing program 4 (id=233):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
socket$rxrpc(0x21, 0x2, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20)
syz_emit_ethernet(0x5ee, &(0x7f0000000180)=ANY=[], 0x0)

2m3.846379037s ago: executing program 4 (id=234):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x800, 0x3, 0x17b}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x4d10, 0x2, 0x2, 0x0, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x2}, 0x20)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x28, 0x0, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
io_setup(0x9, &(0x7f0000000b80)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f0000000580)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}])
io_cancel(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000001, 0x0, 0x2}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000000), 0xce2a, 0x0)

1m55.558556319s ago: executing program 5 (id=239):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
bpf$PROG_LOAD(0x25, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808)
syz_open_dev$dri(0x0, 0x1, 0x2200)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SG_GET_COMMAND_Q(r3, 0x2270, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)=""/113, &(0x7f0000000240)=0x71)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000140))
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x30, r3, 0xc6000)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd4}, @TCA_U32_LINK={0x8, 0x3, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0xc05c5340, &(0x7f0000000080)={0x2, 0x0, 0xd28f, {0xfaa, 0x8}, 0x2, 0x1})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000012840d55004acbac1dd77cc2", @ANYRES32=0x0, @ANYBLOB="452000000021040008002e0003000000"], 0x28}}, 0x0)

1m54.034152975s ago: executing program 3 (id=240):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x5, 0xc9}}}, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
read$FUSE(0xffffffffffffffff, &(0x7f0000003ec0)={0x2020}, 0x2020)
sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0)

1m53.698543304s ago: executing program 3 (id=241):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/disk', 0x80900, 0x10a)
r1 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r0}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1})
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0)

1m52.531694395s ago: executing program 2 (id=242):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0104000000000000dfff020000060900010073797a30000000000900020073797a3200000000300004802c0001800a00010071756f7461"], 0x84}, 0x1, 0x0, 0x0, 0x40040000}, 0x44000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x40, 0x2}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, &(0x7f0000000d80)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00031c0000001c03"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x3, 0x7, 0x2, 0x5995}}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000480)={{0x4, 0xb3}, 'port1\x00', 0x10, 0x420, 0x7ee6, 0x1, 0x400, 0xbee, 0x1, 0x0, 0x4, 0x2})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003f40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x5, 0x2, 0x20000000, 0x2, 0x4}, 0x4, 0x10}, [{0x4, 0x6, 0x6, 0x52, 0xa1, 0x8}, {0x2, 0xffffff01, 0xffff, 0xfffffffc, 0x62, 0x4f1}, {0x7, 0x4, 0x7, 0x76, 0x6, 0x5}, {0xb11, 0x1, 0x7f, 0xe5f, 0x4, 0x6}, {0xa10, 0x9, 0x6, 0xff, 0x800, 0x10001}, {0xffff, 0x5, 0x1, 0x6, 0x5, 0x8}, {0x4, 0x8506, 0x7ff, 0x2, 0x5, 0x7fffffff}, {0x800, 0x1, 0x3, 0x2, 0x2}, {0x53, 0x40, 0xd, 0x4, 0x874, 0x189}, {0x4740, 0xfd, 0x1, 0xfd3, 0x5, 0x4}, {0x2, 0x6, 0x2, 0x1, 0x7d47, 0x8}, {0x8, 0x4, 0x3, 0xe, 0x40, 0x200}, {0x4, 0x6, 0x7, 0x72, 0x8000, 0x3dc}, {0x6, 0x37, 0x9, 0x5, 0x5, 0x80}, {0x9, 0xffff8001, 0x840f, 0x1, 0x6, 0x4}, {0x2, 0x2, 0x5, 0x5, 0x912, 0x3}, {0x0, 0x7, 0xfffff502, 0xff, 0x4, 0x4}, {0xfffffffe, 0x6, 0x3ff, 0x3, 0x6, 0x2}, {0x7, 0x4, 0x8001, 0x437, 0x7, 0x628}, {0x2, 0x3, 0x5, 0x6, 0x4, 0x8}, {0xfffff801, 0x7fff, 0x1000000, 0xfffffff5, 0x8, 0x9e}, {0x5, 0x1, 0x5, 0x200, 0xffff37db, 0x1}, {0x200, 0x2, 0x1, 0x3ff, 0x8, 0x3}, {0x4, 0x2, 0x3e03, 0x4, 0x8, 0xa08f}, {0xff, 0x3, 0x7, 0x4, 0x10, 0xdbaf}, {0x4, 0xfffffffb, 0x2, 0xc47, 0x8, 0x5bc}, {0x79, 0x1, 0x8, 0xffff, 0x1}, {0xe, 0x800, 0x2, 0xfffffff8, 0x5, 0x1}, {0x80, 0xc66, 0x9fa1, 0xfffffffc, 0x8, 0x41}, {0x7f, 0x9, 0xfffffff7, 0x4, 0x3, 0x800}, {0x9, 0x1, 0x4, 0x6, 0x7, 0x8000}, {0x1, 0x2, 0x987, 0x5, 0x0, 0xffff4377}, {0x2, 0x9, 0x206, 0x4, 0x0, 0x9}, {0xc, 0x1, 0x0, 0x2, 0x4, 0x2}, {0xc7f, 0x94b0, 0xfffffffc, 0x1, 0x400, 0xffffff00}, {0x3, 0x80000000, 0x3, 0x14e7dcd1, 0x6, 0x2}, {0x7, 0x10001, 0x10, 0x8, 0xa, 0x6}, {0x1, 0x100, 0x3, 0x1ff, 0x5}, {0xe, 0x1, 0x0, 0x3, 0x3, 0x7}, {0x7, 0x2, 0x2, 0x3, 0x0, 0xfffffff9}, {0x80000000, 0x1, 0x8, 0x4, 0x800, 0x8}, {0x2, 0x81, 0x401, 0x7, 0x4, 0x3}, {0x898, 0x919, 0x2, 0x16000, 0x7, 0x9}, {0x130dd208, 0x63f, 0x1, 0x8e, 0x2, 0x6}, {0xc08f, 0x4, 0x4, 0x3, 0x7, 0x3}, {0x2f, 0xffffffff, 0x281, 0x6, 0x7, 0x4}, {0x2, 0x4, 0x1, 0xffff1cb0, 0x8, 0x401}, {0xffffffff, 0x40, 0x8, 0x2, 0x1, 0xc}, {0x23e9d24a, 0x3b, 0xffffffff, 0x9, 0x8, 0x9}, {0x10001, 0x32, 0x10001, 0x3, 0x52, 0xfffffffc}, {0x4, 0x1, 0xfb, 0x4, 0x6, 0x6}, {0x4, 0x47, 0x7, 0x5, 0x0, 0x7fffffff}, {0x3, 0xbc3f, 0x7, 0x80000001, 0xf, 0x8000}, {0x0, 0x0, 0xa32, 0x8, 0xc, 0x8}, {0x1ff, 0x3, 0x5, 0x8, 0x0, 0x7}, {0x3, 0x3b, 0x8, 0x2, 0x7ff}, {0x5, 0x4909, 0x2, 0x40, 0x7fff, 0x1}, {0x8, 0x1ff, 0x3, 0xfffffffa, 0x1, 0x43}, {0x8, 0x4, 0x6, 0x6, 0x35e, 0x7}, {0x8, 0x7, 0x8, 0x8, 0x3}, {0x8, 0x8, 0xe, 0x9, 0x67, 0x1ff}, {0x3, 0x100000, 0x7, 0x7e2b, 0x5, 0x5}, {0x10001, 0x10000, 0x5, 0x3, 0xfffffff8, 0x4}, {0x6, 0x991e, 0x7, 0x7, 0xc97, 0x4}, {0x8, 0x0, 0x8, 0x5, 0x2, 0x6}, {0x8, 0x6, 0x8001, 0x5, 0x8, 0x9}, {0x2, 0x1, 0x400, 0xffff, 0xc, 0x7}, {0x9, 0xffffffff, 0x9, 0x3ff, 0xc, 0x15565571}, {0xa, 0x2, 0x7fffffff, 0x7, 0xfff, 0x7}, {0x3, 0x2, 0x9, 0x80, 0x7, 0x8}, {0x800, 0x7, 0x5, 0x8, 0xb351, 0x40}, {0xfffffffe, 0x400, 0x8001, 0x75ce, 0x4, 0x1}, {0xffff, 0x5, 0x80000000, 0x8, 0x3, 0x10001}, {0x6, 0x8, 0x4, 0x3, 0xffffffff, 0x1000}, {0x3, 0x83e, 0xa, 0x5, 0x7, 0x8}, {0x9, 0x4, 0x1, 0x6, 0x6, 0x5}, {0x5, 0x8000, 0x8, 0x0, 0x40000000, 0xff}, {0x6, 0xea, 0x2, 0xf7, 0xe, 0x10006}, {0x8, 0x1, 0x80000000, 0xff, 0x8, 0x8}, {0x3, 0x8, 0x10000, 0x81, 0x2, 0x9ca}, {0xfff, 0xaadb, 0xfb5, 0xe7b, 0x3, 0x401}, {0x5, 0x4, 0x1000, 0x8001, 0xe1, 0x2}, {0x8000, 0xc5, 0x8, 0x0, 0x2, 0x5}, {0x8, 0x2b, 0x6, 0x8, 0x6, 0xfffffff7}, {0x2, 0x7fffffff, 0x3, 0x5, 0x0, 0x5}, {0xf, 0x7fff, 0x0, 0x8000, 0x0, 0x8}, {0x4, 0x0, 0x7, 0xa9c, 0x1, 0x9}, {0x4, 0xffff, 0x79a, 0x5, 0x0, 0x2}, {0x1, 0x9, 0x4, 0xffffffff, 0x31, 0x401}, {0x4, 0x7, 0x8, 0x1, 0xfff, 0x1}, {0x4, 0xf, 0x6d0, 0xf, 0x6, 0x70}, {0xd0d, 0x7, 0x3, 0x10000, 0x2, 0x8}, {0x6044, 0x6, 0x8e, 0x81, 0xb, 0x8}, {0xfb56, 0xd1, 0x0, 0xfffffff4, 0x5, 0x2}, {0xfffffff9, 0x8, 0x1, 0x7fff, 0x8, 0xb4b}, {0x5, 0x4dc3, 0x855e, 0x8, 0x1, 0x7}, {0xd, 0xfffffff8, 0x6, 0x40, 0x5, 0xffffffff}, {0x9, 0x6, 0x8, 0x7ff, 0x7, 0x18a}, {0x2, 0x0, 0x1fcd, 0x200009, 0x0, 0x8}, {0x4, 0x4, 0x850, 0x51, 0x3ff, 0xb7}, {0x7, 0x7, 0x9, 0x9}, {0x477, 0x9, 0xf7, 0x7fffffff, 0x5, 0xf8d1}, {0x10, 0x80000000, 0x6dc, 0x3a98c5bc, 0x9, 0x7}, {0x8, 0x7, 0x753f390a, 0x5, 0xb}, {0xffffff08, 0x4, 0x8, 0xd, 0x101, 0x9f8}, {0x200, 0x1707589b, 0x6, 0x6, 0x80}, {0x4, 0x7, 0x8, 0x4, 0x3, 0x7}, {0x0, 0xffffff00, 0x5, 0x4, 0x7, 0xfffffffb}, {0x9, 0x100, 0xfa7, 0x1000, 0x2, 0x4}, {0x7f, 0x57, 0x0, 0x8, 0x68f3, 0x841}, {0x6, 0x1, 0x10, 0x1, 0x0, 0xfffffff8}, {0x3ff, 0x3ff, 0x8001, 0xfff, 0x0, 0x2}, {0x7, 0x4, 0x7, 0x5, 0x6e1b, 0x5}, {0xfffff2b6, 0xfb, 0x2, 0xfffffffd, 0xd, 0x45b0}, {0x80000001, 0xfffffffd, 0x82, 0xfffffffb, 0x6}, {0x401, 0x7, 0xe, 0x9, 0x7, 0x2}, {0xf69, 0x57, 0x0, 0x8, 0x5}, {0x4, 0xfff, 0xa1, 0x9, 0x800, 0xfff}, {0x4, 0x8, 0xa7c, 0x0, 0xcd, 0x2}, {0x9, 0x7f, 0x5, 0x7, 0x4, 0x9}, {0x3, 0x1, 0x101, 0x0, 0xc, 0x7}, {0xe5a, 0x8, 0x6, 0x2, 0xffffffc0, 0xc}, {0x5, 0xfffffffd, 0xffff, 0x9973, 0x8, 0xe4a}, {0x7ff, 0x9, 0x3, 0xf0, 0x81}, {0x100, 0x6, 0x9, 0x4, 0x80000000, 0x5}, {0x0, 0x80000000, 0x99, 0x2, 0xc, 0x7}, {0x378140be, 0x4, 0x7ff, 0x10, 0x7f77, 0xffffff81}, {0x401, 0x10001, 0x8, 0x4, 0x2, 0x8}], [{0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x32820417c2b438f9}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x2}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x3}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x21577a60a46d04d}, {0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5)

1m51.148794723s ago: executing program 4 (id=243):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
bpf$PROG_LOAD(0x25, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808)
syz_open_dev$dri(0x0, 0x1, 0x2200)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SG_GET_COMMAND_Q(r3, 0x2270, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)=""/113, &(0x7f0000000240)=0x71)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000140))
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x30, r3, 0xc6000)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd4}, @TCA_U32_LINK={0x8, 0x3, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0xc05c5340, &(0x7f0000000080)={0x2, 0x0, 0xd28f, {0xfaa, 0x8}, 0x2, 0x1})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000012840d55004acbac1dd77cc2", @ANYRES32=0x0, @ANYBLOB="452000000021040008002e0003000000"], 0x28}}, 0x0)

1m51.144427461s ago: executing program 3 (id=244):
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
socket$unix(0x1, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1004400c) (async)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r4, &(0x7f00000048c0)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)=""/230, 0xe6}, {&(0x7f0000000540)=""/129, 0x81}], 0x2, &(0x7f0000000680)=""/254, 0xfe}, 0xc}, {{&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)=""/147, 0x93}], 0x1, &(0x7f0000000880)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000001880)=@x25={0x9, @remote}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001900)=""/244, 0xf4}], 0x1, &(0x7f0000001a40)=""/4096, 0x1000}, 0x10000}, {{&(0x7f0000002a40)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000004040)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/177, 0xb1}, {&(0x7f0000003b80)=""/8, 0x8}, {&(0x7f0000003bc0)=""/18, 0x12}, {&(0x7f0000003c00)=""/242, 0xf2}, {&(0x7f0000003d00)=""/205, 0xcd}, {&(0x7f0000003e00)=""/38, 0x26}, {&(0x7f0000003e40)=""/232, 0xe8}, {&(0x7f0000003f40)=""/224, 0xe0}], 0x9}, 0x9}, {{&(0x7f0000004100)=@phonet, 0x80, &(0x7f0000004340)=[{&(0x7f0000004180)=""/14, 0xe}, {&(0x7f00000041c0)=""/4, 0x4}, {&(0x7f0000004200)=""/132, 0x84}, {&(0x7f00000042c0)=""/106, 0x6a}], 0x4}, 0x4f}, {{&(0x7f0000004380)=@qipcrtr, 0x80, &(0x7f0000004800)=[{&(0x7f0000004400)=""/7, 0x7}, {&(0x7f0000004440)=""/204, 0xcc}, {&(0x7f0000004540)=""/30, 0x1e}, {&(0x7f0000004580)=""/184, 0xb8}, {&(0x7f0000004640)=""/33, 0x21}, {&(0x7f0000004680)=""/251, 0xfb}, {&(0x7f0000004780)=""/86, 0x56}], 0x7, &(0x7f0000004880)}, 0x5}], 0x6, 0x2, 0x0)
r6 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0)
r7 = io_uring_setup(0x2dfd, 0x0) (async)
r8 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x43b6, 0x1, 0x0, 0x28e})
io_uring_register$IORING_REGISTER_FILES(r8, 0x1e, &(0x7f0000000000)=[r7], 0x1)
mq_getsetattr(r6, 0x0, 0x0) (async)
socket$unix(0x1, 0x2, 0x0) (async)
pread64(r2, &(0x7f0000000240)=""/152, 0x98, 0xe1) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
socket$netlink(0x10, 0x3, 0x0)

1m49.21570695s ago: executing program 5 (id=246):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000240)={0xc7})

1m48.721145379s ago: executing program 5 (id=247):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x0, 0x32, 0x0, 0x1}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x2c)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0)
r3 = openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.stat\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x2)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r6, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="1436c99f"}]}, 0x1c}}, 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r7, r6, 0x0, 0x0, 0xdead, 0x0, 0x0})
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
r10 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000080)={0x40000014})
close_range(r4, 0xffffffffffffffff, 0x0)
r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r11, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

1m48.627161153s ago: executing program 2 (id=248):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f0000000080)={0x18, 0x0, 0x1, 0x0, 0x0, 0x9})
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
gettid()
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, &(0x7f0000003b00))

1m48.138259479s ago: executing program 0 (id=249):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0xf500000000000000, 0x9, 0xffffffff, 0x40})

1m47.235927243s ago: executing program 2 (id=250):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001900)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x81, 0x5}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000a200000000000000000a20000000000a01010000000000001b00050000000900010085797a30000000005c000000030a01030000000000000000050005000900010073797a30000000000191a89925ebd109312fb98a0900030073797a300000000008000328e4038008000240000000120800014000000000140003006e657464657673696d3000000000000014000000110001000000000000660e19ccd487d35d554b59e5ace271693826acc90265ee356bd5ee826eff396c8b4b59e536ea4f5f25e59cc11cfe441c4275eead23"], 0xa4}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x880)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x91, 0x7}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x810)

1m46.814966118s ago: executing program 0 (id=251):
syz_emit_ethernet(0xb6, &(0x7f0000000200)={@local, @random="b0c942034375", @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x8864, @tcp={{0x23, 0x4, 0x0, 0x0, 0xa0, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @rand_addr=0x64010101, {[@rr={0x7, 0x7, 0x3c, [@multicast2]}, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x1, 0x10, "64aeb1afb80de0584c9c2e2ab320"}, {0x1, 0xb, "b05612b4b122d1692d"}, {0x0, 0x11, "8528a82be95e1ee71bc1c403b534f3"}]}, @timestamp_addr={0x44, 0x14, 0xac, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x1}, {@multicast1, 0x8}]}, @rr={0x7, 0xb, 0x1f, [@empty, @remote]}, @generic={0x89, 0xb, "311d39e1293001ebbc"}, @rr={0x7, 0xf, 0xec, [@empty, @remote, @broadcast]}, @ra={0x94, 0x4}, @noop]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

1m46.770611144s ago: executing program 5 (id=252):
timer_create(0x1, &(0x7f0000000440)={0x0, 0xf, 0x0, @thr={&(0x7f0000001ac0)="d76ba38b9bbcaa028e7d50e03d3b10de14189c432d9c19fc2a67659d40bb20407f587de6b8ed762615a5dd5418494ce1f41cd85a48eeb6adfd553aeb951dc03a4b4c73ad171f6a75b6a3c11eae419b87dcac29d7cd232e3296c6aab7980dc065c2aeca54e5058a76ab8c802b17b3bb6efa48ced620e17a1157e36bf87cc3c4a8316a9f", &(0x7f0000001b80)="be171fb5cf85bd035585a56e797b926b67cf21a1665a15257415504537184d0c34f13b44d5b189e4b5865fdb3e66ce3d9f4675686c6f6c1aa70d943df7f0fa8334d4831dc9c8b94c46d7f35087bbf0cd3502b93dba2812c170a12fe8c776c20c6542aa2d1abdbd650ee4b78568eeb32702"}}, &(0x7f0000000600))
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000000540)=""/4, 0x4}, {&(0x7f0000000580)=""/38, 0x26}, {&(0x7f0000001700)=""/243, 0xf3}, {&(0x7f0000001800)=""/135, 0x87}], 0x9, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}, 0x1)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r6 = dup3(r5, 0xffffffffffffffff, 0x80000)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x19040)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0)
lsm_set_self_attr(0x69, 0x0, 0x0, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x922, 0x12)
ioctl$SOUND_MIXER_READ_VOLUME(r0, 0xa0044d07, &(0x7f0000000040))

1m45.668793332s ago: executing program 3 (id=253):
shmctl$SHM_LOCK(0x0, 0xb) (async)
shmat(0x0, &(0x7f0000000000/0x3000)=nil, 0x4000) (async, rerun: 64)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64)
shmctl$SHM_UNLOCK(0x0, 0xc) (async, rerun: 64)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) (rerun: 64)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@u}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000712000020000400f200000000120200000000005f781543fa42dae9000000000000000020000000"], 0x0, 0x42}, 0x28)

1m45.581356749s ago: executing program 2 (id=254):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x65, 0x40)
syz_open_dev$MSR(0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000)
setsockopt(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r3, 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r5 = socket(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
getsockopt$MRT(r5, 0x0, 0xce, 0x0, 0x0)
flock(r4, 0x2)
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x942, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}})
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x7, 0x3, 0x9}, 0x14)

1m43.78474955s ago: executing program 5 (id=255):
r0 = gettid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='s'])
capget(&(0x7f0000000280)={0x19980330, r0}, &(0x7f00000003c0)={0xc2, 0x6, 0x9, 0x4, 0x6599, 0x89})
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
close(r2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000280)={0xe1, 0x0, 0xdf9})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x10004002}, 0xc0)

1m43.783072828s ago: executing program 0 (id=256):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf252d0000000c00990006000000320000005b00450049dc9b4f7431ad8b3e801517f670393569187836c707187bd7653372004e3224a2428b65842c80ee3e78a264e811125cc2afbcebab455955cf6ea45bea4f8c4023dfdaa0f228067b2e28711d34db21e29dc249931d336c00c8be67325dad072f9c589c1e1d2c96b5a413ad1ed92391726bf0e60c3a2a1690b3"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x8, 0x8000, 0x0, 0x0, [], [0xf, 0x4], [0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0xf]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffc0900020073797a30000000000500010006000000050005000a0000000500040000000000140007800800114000000000050015002800000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0)
r6 = dup(0xffffffffffffffff)
add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000080)="74fe", 0x2, 0xfffffffffffffffd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
setsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000000)=0x8000, 0x4)
read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1m43.493499332s ago: executing program 2 (id=257):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="52010000ead4a320d118af1e6309010203010902240001f60720400904a67602ab52634a"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000f40)={0x14, 0x0, &(0x7f0000000f00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000600)=0x2f, 0x4)
getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f00000022c0))
syz_usb_control_io$hid(r0, &(0x7f0000001240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001880)={0x2c, &(0x7f0000000000)={0x0, 0x13, 0x2, "17c0"}, 0x0, 0x0, 0x0, 0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
brk(0x9368)

1m43.290296611s ago: executing program 0 (id=258):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x400}, &(0x7f0000001100)=0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0xffffffffffffff8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)

1m43.087853498s ago: executing program 4 (id=259):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x0, 0x0)
preadv2(r2, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x2a00)
ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000880)={0x0, 0x0})
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1})
socket(0xf, 0x5, 0x8001)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={<r4=>0x0}, &(0x7f00000000c0)=0x8)
r5 = open(&(0x7f0000000140)='./file0\x00', 0x200001, 0x0)
flock(r5, 0x2)
r6 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2)
r7 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r7, 0x1)
flock(r6, 0x1)
flock(r5, 0x5)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r4, 0x842, 0x3, 0x7}, 0x10)

1m42.628636868s ago: executing program 0 (id=260):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f0000000080)={0x18, 0x0, 0x1, 0x0, 0x0, 0x9})
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
gettid()
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000003b00))

1m42.62775756s ago: executing program 5 (id=261):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf252d0000000c00990006000000320000005b00450049dc9b4f7431ad8b3e801517f670393569187836c707187bd7653372004e3224a2428b65842c80ee3e78a264e811125cc2afbcebab455955cf6ea45bea4f8c4023dfdaa0f228067b2e28711d34db21e29dc249931d336c00c8be67325dad072f9c589c1e1d2c96b5a413ad1ed92391726bf0e60c3a2a1690b3"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={0x0, 0x8, 0x8000, 0x0, 0x0, [], [0xf, 0x4], [0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0xf]})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffc0900020073797a30000000000500010006000000050005000a0000000500040000000000140007800800114000000000050015002800000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0)
r3 = dup(0xffffffffffffffff)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000080)="74fe", 0x2, 0xfffffffffffffffd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000000000)=0x8000, 0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1m42.627472252s ago: executing program 3 (id=262):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x40002, 0xa69c0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x0, 0x4a}, 0x28)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x4, 0x0, 0xe2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev, 0x80, 0x0, 0xffffffff, 0x1}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

1m42.62247544s ago: executing program 4 (id=263):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x7f6e}, 0x18, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x210a, r1}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0x5, 0x10}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7f1, 0x1, 0x0, 0x1e2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xa}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x8}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

1m41.1769199s ago: executing program 4 (id=264):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x3c)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500000000000000", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0)

1m39.71411335s ago: executing program 2 (id=265):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/disk', 0x80900, 0x10a)
r1 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r0}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1})
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0)

1m39.179323976s ago: executing program 0 (id=266):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00')
lseek(r0, 0x3, 0x1)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0xa1804, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRES8=r1, @ANYBLOB="56d2348442eb34f04cc1414d3ec93c2fd962d68df7b76969406741a40cf1260fdbe62ea20787c5c22db652849bbe50d38f9a75fe1a0ad3e1e1b91b70f7bf7497a2ed55baee34a1e4af6de8691d36c3f276f9c006f01fae8e56cd52da565425e4bc2cf343a6913c729ea209d6600b9d408c50a9447073e47d126fa256ff170158583c76e67ade70f28a12c22452a9bf287e7a5baa450aa92811a3a65b69a79817cf2b51a2ee493b5cb98f92f75afec086de", @ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES64=r1])
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r3, 0x1}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f00000005c0), r3, 0x1}}, 0x18)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x14, 0x18, 0x200, 0x70bd2a, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r8, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'xfrm0\x00'})
chdir(&(0x7f0000000140)='./bus\x00')
r9 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x7, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r9, r9, &(0x7f0000000080), 0x7f03)

1m39.152916443s ago: executing program 3 (id=267):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000001c0)='*', 0x1}], 0x1, 0x0, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000080000000000000008"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r2, 0x1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff)

0s ago: executing program 33 (id=266):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00')
lseek(r0, 0x3, 0x1)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0xa1804, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRES8=r1, @ANYBLOB="56d2348442eb34f04cc1414d3ec93c2fd962d68df7b76969406741a40cf1260fdbe62ea20787c5c22db652849bbe50d38f9a75fe1a0ad3e1e1b91b70f7bf7497a2ed55baee34a1e4af6de8691d36c3f276f9c006f01fae8e56cd52da565425e4bc2cf343a6913c729ea209d6600b9d408c50a9447073e47d126fa256ff170158583c76e67ade70f28a12c22452a9bf287e7a5baa450aa92811a3a65b69a79817cf2b51a2ee493b5cb98f92f75afec086de", @ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES64=r1])
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r3, 0x1}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f00000005c0), r3, 0x1}}, 0x18)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x14, 0x18, 0x200, 0x70bd2a, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r8, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'xfrm0\x00'})
chdir(&(0x7f0000000140)='./bus\x00')
r9 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x7, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r9, r9, &(0x7f0000000080), 0x7f03)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts.
[   54.032938][   T30] audit: type=1400 audit(1773629228.808:62): avc:  denied  { mounton } for  pid=5795 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   54.056737][   T30] audit: type=1400 audit(1773629228.838:63): avc:  denied  { mount } for  pid=5795 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   54.059300][ T5795] cgroup: Unknown subsys name 'net'
[   54.085484][   T30] audit: type=1400 audit(1773629228.868:64): avc:  denied  { unmount } for  pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   54.225755][ T5795] cgroup: Unknown subsys name 'cpuset'
[   54.233515][ T5795] cgroup: Unknown subsys name 'rlimit'
[   54.334172][   T30] audit: type=1400 audit(1773629229.118:65): avc:  denied  { setattr } for  pid=5795 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   54.357925][   T30] audit: type=1400 audit(1773629229.118:66): avc:  denied  { create } for  pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   54.390446][   T30] audit: type=1400 audit(1773629229.118:67): avc:  denied  { write } for  pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   54.411843][   T30] audit: type=1400 audit(1773629229.118:68): avc:  denied  { read } for  pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   54.432553][   T30] audit: type=1400 audit(1773629229.138:69): avc:  denied  { mounton } for  pid=5795 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   54.457678][   T30] audit: type=1400 audit(1773629229.138:70): avc:  denied  { mount } for  pid=5795 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   54.458236][ T5797] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   54.490857][   T30] audit: type=1400 audit(1773629229.268:71): avc:  denied  { relabelto } for  pid=5797 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   55.457273][ T5795] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.039474][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.054122][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.062014][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.068928][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.069452][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.084123][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.091600][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.106241][ T5133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.118734][   T30] kauditd_printk_skb: 8 callbacks suppressed
[   59.118748][   T30] audit: type=1400 audit(1773629233.898:80): avc:  denied  { read } for  pid=5806 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   59.125488][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.146460][ T5133] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   59.163053][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.171037][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.175704][   T30] audit: type=1400 audit(1773629233.898:81): avc:  denied  { open } for  pid=5806 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   59.179069][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.201949][   T30] audit: type=1400 audit(1773629233.898:82): avc:  denied  { mounton } for  pid=5806 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   59.208658][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   59.240929][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   59.248338][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.248562][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   59.257029][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.262692][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   59.270472][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   59.277357][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   59.283747][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   59.291006][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   59.298325][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.304641][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   59.623815][   T30] audit: type=1400 audit(1773629234.408:83): avc:  denied  { module_request } for  pid=5806 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   59.687728][ T5806] chnl_net:caif_netlink_parms(): no params data found
[   59.773578][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   59.854205][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   59.864896][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   59.903900][ T5807] chnl_net:caif_netlink_parms(): no params data found
[   59.966128][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.973704][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.980807][ T5806] bridge_slave_0: entered allmulticast mode
[   59.987796][ T5806] bridge_slave_0: entered promiscuous mode
[   60.002885][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.010032][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.017178][ T5806] bridge_slave_1: entered allmulticast mode
[   60.024207][ T5806] bridge_slave_1: entered promiscuous mode
[   60.031499][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.038645][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.045800][ T5817] bridge_slave_0: entered allmulticast mode
[   60.052432][ T5817] bridge_slave_0: entered promiscuous mode
[   60.082803][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.089950][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.097085][ T5817] bridge_slave_1: entered allmulticast mode
[   60.103870][ T5817] bridge_slave_1: entered promiscuous mode
[   60.161256][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.177031][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.185022][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.192154][ T5821] bridge_slave_0: entered allmulticast mode
[   60.198993][ T5821] bridge_slave_0: entered promiscuous mode
[   60.217212][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.236467][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.247423][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.256604][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.263749][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.270823][ T5821] bridge_slave_1: entered allmulticast mode
[   60.277650][ T5821] bridge_slave_1: entered promiscuous mode
[   60.284210][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.291269][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.298434][ T5816] bridge_slave_0: entered allmulticast mode
[   60.305236][ T5816] bridge_slave_0: entered promiscuous mode
[   60.336969][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.344335][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.351405][ T5816] bridge_slave_1: entered allmulticast mode
[   60.358367][ T5816] bridge_slave_1: entered promiscuous mode
[   60.372329][ T5806] team0: Port device team_slave_0 added
[   60.400432][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.409656][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.417105][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.424336][ T5807] bridge_slave_0: entered allmulticast mode
[   60.430954][ T5807] bridge_slave_0: entered promiscuous mode
[   60.439154][ T5806] team0: Port device team_slave_1 added
[   60.445805][ T5817] team0: Port device team_slave_0 added
[   60.459005][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.468492][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.475786][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.482948][ T5807] bridge_slave_1: entered allmulticast mode
[   60.489879][ T5807] bridge_slave_1: entered promiscuous mode
[   60.503937][ T5817] team0: Port device team_slave_1 added
[   60.511036][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.554884][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.571245][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.578952][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.605080][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.618089][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.641275][ T5821] team0: Port device team_slave_0 added
[   60.647394][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.654566][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.680695][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.696818][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.706544][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.714425][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.740532][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.752729][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.760434][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.786454][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.804961][ T5821] team0: Port device team_slave_1 added
[   60.836523][ T5816] team0: Port device team_slave_0 added
[   60.871696][ T5816] team0: Port device team_slave_1 added
[   60.884997][ T5807] team0: Port device team_slave_0 added
[   60.901204][ T5806] hsr_slave_0: entered promiscuous mode
[   60.907731][ T5806] hsr_slave_1: entered promiscuous mode
[   60.920677][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.927684][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.953619][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.965325][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.972255][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.998241][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.010377][ T5807] team0: Port device team_slave_1 added
[   61.030972][ T5817] hsr_slave_0: entered promiscuous mode
[   61.037003][ T5817] hsr_slave_1: entered promiscuous mode
[   61.042916][ T5817] debugfs: 'hsr0' already exists in 'hsr'
[   61.048736][ T5817] Cannot create hsr debugfs directory
[   61.075093][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.082042][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.108133][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.130784][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.138033][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.164106][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.176057][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.182985][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.209660][ T5812] Bluetooth: hci0: command tx timeout
[   61.209699][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.226964][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.234054][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.260111][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.273134][ T5812] Bluetooth: hci1: command tx timeout
[   61.343317][ T5812] Bluetooth: hci3: command tx timeout
[   61.343460][ T5813] Bluetooth: hci2: command tx timeout
[   61.354927][ T5813] Bluetooth: hci4: command tx timeout
[   61.374917][ T5821] hsr_slave_0: entered promiscuous mode
[   61.380884][ T5821] hsr_slave_1: entered promiscuous mode
[   61.386866][ T5821] debugfs: 'hsr0' already exists in 'hsr'
[   61.392571][ T5821] Cannot create hsr debugfs directory
[   61.412575][ T5816] hsr_slave_0: entered promiscuous mode
[   61.418760][ T5816] hsr_slave_1: entered promiscuous mode
[   61.424821][ T5816] debugfs: 'hsr0' already exists in 'hsr'
[   61.430522][ T5816] Cannot create hsr debugfs directory
[   61.448713][ T5807] hsr_slave_0: entered promiscuous mode
[   61.454698][ T5807] hsr_slave_1: entered promiscuous mode
[   61.460497][ T5807] debugfs: 'hsr0' already exists in 'hsr'
[   61.466502][ T5807] Cannot create hsr debugfs directory
[   61.758624][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.774218][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.797066][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.806879][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.846221][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   61.856006][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   61.876992][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   61.886108][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   61.940740][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.965769][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.985948][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.995622][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.040607][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.056846][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.066696][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.076967][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.158978][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.177002][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.187191][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   62.197345][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   62.206765][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   62.217330][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   62.241888][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   62.279275][ T5806] 8021q: adding VLAN 0 to HW filter on device team0
[   62.289218][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.296438][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.307438][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.314527][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.341470][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.348590][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.377956][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.385129][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.397374][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.426868][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.446246][   T30] audit: type=1400 audit(1773629237.228:84): avc:  denied  { sys_module } for  pid=5817 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   62.492460][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.515965][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   62.542767][  T109] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.549907][  T109] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.579324][  T109] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.586433][  T109] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.612777][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   62.647458][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.658308][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.665401][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.685164][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.692265][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.714787][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.808789][ T5807] 8021q: adding VLAN 0 to HW filter on device team0
[   62.855065][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.862218][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.920591][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.927719][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.037267][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.071260][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.182202][ T5806] veth0_vlan: entered promiscuous mode
[   63.215508][ T5817] veth0_vlan: entered promiscuous mode
[   63.226886][ T5816] veth0_vlan: entered promiscuous mode
[   63.237335][ T5806] veth1_vlan: entered promiscuous mode
[   63.256721][ T5817] veth1_vlan: entered promiscuous mode
[   63.265521][ T5813] Bluetooth: hci0: command tx timeout
[   63.279637][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.294383][ T5816] veth1_vlan: entered promiscuous mode
[   63.345345][ T5813] Bluetooth: hci1: command tx timeout
[   63.355398][ T5817] veth0_macvtap: entered promiscuous mode
[   63.364423][ T5806] veth0_macvtap: entered promiscuous mode
[   63.376761][ T5817] veth1_macvtap: entered promiscuous mode
[   63.394335][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.402469][ T5816] veth0_macvtap: entered promiscuous mode
[   63.411291][ T5806] veth1_macvtap: entered promiscuous mode
[   63.423628][ T5813] Bluetooth: hci2: command tx timeout
[   63.425315][   T51] Bluetooth: hci4: command tx timeout
[   63.435067][ T5812] Bluetooth: hci3: command tx timeout
[   63.442923][ T5816] veth1_macvtap: entered promiscuous mode
[   63.455818][ T5821] veth0_vlan: entered promiscuous mode
[   63.468646][ T5821] veth1_vlan: entered promiscuous mode
[   63.484803][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.496109][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.509365][  T109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.534262][  T109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.544403][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.555017][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.568812][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.577951][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.589037][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.602716][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.624347][  T109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.643978][ T5821] veth0_macvtap: entered promiscuous mode
[   63.656487][  T109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.665865][  T109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.679074][ T5807] veth0_vlan: entered promiscuous mode
[   63.685120][  T109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.694117][  T109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.702805][  T109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.721025][ T5821] veth1_macvtap: entered promiscuous mode
[   63.734845][  T109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.745206][  T109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.767906][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.802220][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.810948][ T5807] veth1_vlan: entered promiscuous mode
[   63.832679][ T1090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.842323][ T1090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.873904][ T1090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.894098][ T1090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.913774][  T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.921696][  T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.946671][ T5807] veth0_macvtap: entered promiscuous mode
[   63.961325][ T5807] veth1_macvtap: entered promiscuous mode
[   64.019382][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.031052][  T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.050517][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.057920][  T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.078824][  T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.088102][   T30] audit: type=1400 audit(1773629238.858:85): avc:  denied  { mounton } for  pid=5806 comm="syz-executor" path="/root/syzkaller.cYlKvw/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   64.113961][  T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.122044][   T30] audit: type=1400 audit(1773629238.858:86): avc:  denied  { mount } for  pid=5806 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   64.132503][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.154491][   T30] audit: type=1400 audit(1773629238.858:87): avc:  denied  { mounton } for  pid=5806 comm="syz-executor" path="/root/syzkaller.cYlKvw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   64.182023][   T30] audit: type=1400 audit(1773629238.878:88): avc:  denied  { mount } for  pid=5806 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   64.206221][   T30] audit: type=1400 audit(1773629238.878:89): avc:  denied  { mounton } for  pid=5806 comm="syz-executor" path="/root/syzkaller.cYlKvw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   64.217713][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.245106][   T30] audit: type=1400 audit(1773629238.878:90): avc:  denied  { mounton } for  pid=5806 comm="syz-executor" path="/root/syzkaller.cYlKvw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   64.298016][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.308399][  T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.312293][ T5806] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.316331][  T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.318358][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.332916][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.346899][   T30] audit: type=1400 audit(1773629238.898:91): avc:  denied  { unmount } for  pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   64.375423][   T30] audit: type=1400 audit(1773629238.938:92): avc:  denied  { mounton } for  pid=5806 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   64.398974][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.410056][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.418911][   T30] audit: type=1400 audit(1773629238.938:93): avc:  denied  { mount } for  pid=5806 comm="syz-executor" name="/" dev="gadgetfs" ino=7721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   64.463523][   T30] audit: type=1400 audit(1773629238.938:94): avc:  denied  { mount } for  pid=5806 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   64.526365][   T30] audit: type=1400 audit(1773629238.938:95): avc:  denied  { mounton } for  pid=5806 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   64.533304][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.552158][   T30] audit: type=1400 audit(1773629238.938:96): avc:  denied  { mount } for  pid=5806 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   64.586363][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.594004][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.609746][  T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.628354][  T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.673454][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   64.682014][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   64.690588][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   64.850678][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.867465][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.896030][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.916540][ T5876] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   64.949482][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.033362][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.044107][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.114576][ T5876] usb 1-1: Using ep0 maxpacket: 8
[   65.148669][ T5876] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[   65.178362][ T5876] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   65.239231][ T5930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5930 comm=syz.4.5
[   65.242611][ T5876] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   65.311855][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'.
[   65.374507][   T51] Bluetooth: hci0: command tx timeout
[   65.424519][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   65.433220][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   65.441385][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   65.476310][   T51] Bluetooth: hci1: command tx timeout
[   65.513038][ T5812] Bluetooth: hci4: command tx timeout
[   65.513153][   T51] Bluetooth: hci3: command tx timeout
[   65.518466][ T5812] Bluetooth: hci2: command tx timeout
[   65.565488][ T5876] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   65.589957][ T5876] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   65.605814][ T5876] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   65.691924][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.848475][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[   65.862360][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[   65.994726][   T29] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   66.053837][ T5876] usb 1-1: GET_CAPABILITIES returned 0
[   66.084127][ T5876] usbtmc 1-1:16.0: can't read capabilities
[   66.246834][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   66.468025][   T29] usb 4-1: config 246 has an invalid interface number: 166 but max is 0
[   66.493341][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   66.534999][   T29] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[   66.570583][ T5920] Zero length message leads to an empty skb
[   66.584168][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   66.605059][ T5876] usb 1-1: USB disconnect, device number 2
[   66.634439][   T29] usb 4-1: config 246 has no interface number 0
[   66.646928][   T29] usb 4-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   66.683266][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   66.756696][   T29] usb 4-1: config 246 interface 166 has no altsetting 0
[   66.782598][   T29] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[   66.800543][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.817194][   T29] usb 4-1: Product: syz
[   66.861263][   T29] usb 4-1: Manufacturer: syz
[   66.884586][   T29] usb 4-1: SerialNumber: syz
[   67.517889][   T51] Bluetooth: hci1: command tx timeout
[   67.517895][ T5813] Bluetooth: hci0: command tx timeout
[   67.546507][   T29] usb 4-1: Cannot retrieve CPort count: -71
[   67.575417][   T29] usb 4-1: Cannot retrieve CPort count: -71
[   67.581351][   T29] es2_ap_driver 4-1:246.166: probe with driver es2_ap_driver failed with error -71
[   67.594697][ T5813] Bluetooth: hci3: command tx timeout
[   67.594733][   T51] Bluetooth: hci2: command tx timeout
[   67.600090][ T5813] Bluetooth: hci4: command tx timeout
[   67.603505][   T29] usb 4-1: USB disconnect, device number 2
[   68.934479][ T5876] libceph: connect (1)[c::]:6789 error -101
[   68.960720][ T5876] libceph: mon0 (1)[c::]:6789 connect error
[   69.109029][ T5980] ceph: No mds server is up or the cluster is laggy
[   69.301755][   T30] kauditd_printk_skb: 40 callbacks suppressed
[   69.301765][   T30] audit: type=1400 audit(1773629244.078:137): avc:  denied  { create } for  pid=5989 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   69.958272][   T30] audit: type=1400 audit(1773629244.348:138): avc:  denied  { write } for  pid=5989 comm="syz.3.12" name="mcfilter6" dev="proc" ino=4026533107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   70.512710][   T30] audit: type=1400 audit(1773629244.788:139): avc:  denied  { map_create } for  pid=5992 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   70.531721][   T30] audit: type=1400 audit(1773629244.788:140): avc:  denied  { perfmon } for  pid=5992 comm="syz.0.13" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   70.555205][   T30] audit: type=1400 audit(1773629245.078:141): avc:  denied  { map_read map_write } for  pid=5992 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   70.944505][ T6006] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   71.018772][   T30] audit: type=1400 audit(1773629245.778:142): avc:  denied  { read } for  pid=6004 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   71.437817][   T30] audit: type=1400 audit(1773629246.218:143): avc:  denied  { write } for  pid=6001 comm="syz.3.14" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   71.476875][ T6002] usb usb8: usbfs: process 6002 (syz.3.14) did not claim interface 0 before use
[   71.714717][ T6009] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   71.725507][   T30] audit: type=1400 audit(1773629246.488:144): avc:  denied  { name_bind } for  pid=6019 comm="syz.3.17" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   71.767374][ T6009] block device autoloading is deprecated and will be removed.
[   71.781756][   T30] audit: type=1400 audit(1773629246.488:145): avc:  denied  { create } for  pid=6019 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   71.826721][   T30] audit: type=1400 audit(1773629246.488:146): avc:  denied  { read } for  pid=6019 comm="syz.3.17" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   72.663743][ T5876] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   73.212976][ T5889] libceph: connect (1)[c::]:6789 error -101
[   73.219418][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[   73.282393][ T6038] ceph: No mds server is up or the cluster is laggy
[   73.303976][ T5876] usb 5-1: Using ep0 maxpacket: 8
[   73.396625][ T5876] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   73.447882][ T5876] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   73.506542][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   73.529376][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   73.566309][ T5876] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   73.651650][ T5876] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   73.660928][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.029261][ T5876] usb 5-1: GET_CAPABILITIES returned 0
[   74.301071][ T6063] comedi comedi0: Minor 3 could not be opened
[   74.912030][ T5876] usbtmc 5-1:16.0: can't read capabilities
[   74.979724][   T30] kauditd_printk_skb: 12 callbacks suppressed
[   74.979739][   T30] audit: type=1400 audit(1773629249.758:159): avc:  denied  { write } for  pid=6029 comm="syz.4.19" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   75.360286][ T5890] usb 5-1: USB disconnect, device number 2
[   76.212639][  T791] cfg80211: failed to load regulatory.db
[   76.706745][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[   76.764881][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[   76.865850][   T30] audit: type=1400 audit(1773629251.648:160): avc:  denied  { read write } for  pid=6086 comm="syz.2.30" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   76.893225][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[   76.932521][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[   76.942497][   T30] audit: type=1400 audit(1773629251.648:161): avc:  denied  { open } for  pid=6086 comm="syz.2.30" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   76.954576][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[   77.031596][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[   77.099377][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'.
[   77.160845][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[   77.273280][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[   77.370645][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[   77.896790][   T30] audit: type=1400 audit(1773629251.978:162): avc:  denied  { unmount } for  pid=6086 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   78.013224][   T30] audit: type=1400 audit(1773629252.758:163): avc:  denied  { read } for  pid=6092 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   78.094716][   T30] audit: type=1400 audit(1773629252.768:164): avc:  denied  { open } for  pid=6092 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   78.122648][   T30] audit: type=1400 audit(1773629252.768:165): avc:  denied  { getattr } for  pid=6092 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   78.703268][   T30] audit: type=1400 audit(1773629253.468:166): avc:  denied  { create } for  pid=6107 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   78.844058][   T30] audit: type=1400 audit(1773629253.528:167): avc:  denied  { read } for  pid=6107 comm="syz.2.34" name="event3" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   79.052011][   T30] audit: type=1400 audit(1773629253.548:168): avc:  denied  { open } for  pid=6107 comm="syz.2.34" path="/dev/input/event3" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   79.134469][ T6115] comedi comedi0: Minor 3 could not be opened
[   79.543148][ T5890] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   79.814699][ T5890] usb 3-1: config 4 has an invalid interface number: 42 but max is 0
[   79.822775][ T5890] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   80.411267][ T5890] usb 3-1: config 4 has no interface number 0
[   80.433865][ T5890] usb 3-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=81.51
[   80.453010][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.572968][ T5890] s2255 3-1:4.42: Could not find bulk-in endpoint
[   80.593476][ T5890] Sensoray 2255 driver load failed: 0xfffffff4
[   80.599635][ T5890] s2255 3-1:4.42: probe with driver s2255 failed with error -12
[   80.803103][   T30] kauditd_printk_skb: 6 callbacks suppressed
[   80.803119][   T30] audit: type=1400 audit(1773629255.578:175): avc:  denied  { create } for  pid=6128 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   81.090942][   T30] audit: type=1400 audit(1773629255.578:176): avc:  denied  { bind } for  pid=6128 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   81.174207][   T30] audit: type=1400 audit(1773629255.578:177): avc:  denied  { listen } for  pid=6128 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   81.198740][   T30] audit: type=1400 audit(1773629255.578:178): avc:  denied  { connect } for  pid=6128 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   81.220388][   T30] audit: type=1400 audit(1773629255.578:179): avc:  denied  { write } for  pid=6128 comm="syz.0.38" path="socket:[8956]" dev="sockfs" ino=8956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   81.526120][   T30] audit: type=1400 audit(1773629255.688:180): avc:  denied  { unlink } for  pid=6121 comm="rm" name="resolv.conf.lapb5.link" dev="tmpfs" ino=2097 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   81.614723][ T6132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33810 sclass=netlink_route_socket pid=6132 comm=syz.3.33
[   81.657346][   T30] audit: type=1400 audit(1773629255.688:181): avc:  denied  { mounton } for  pid=6116 comm="syz.4.36" path="/6" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   82.356577][   T30] audit: type=1400 audit(1773629257.138:182): avc:  denied  { create } for  pid=6123 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   82.693182][   T30] audit: type=1400 audit(1773629257.218:183): avc:  denied  { getopt } for  pid=6123 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   82.928417][ T5918] usb 3-1: USB disconnect, device number 2
[   82.941515][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.948851][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.308144][   T30] audit: type=1400 audit(1773629258.038:184): avc:  denied  { bind } for  pid=6159 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   83.363150][ T5918] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   83.513177][ T5918] usb 4-1: Using ep0 maxpacket: 8
[   83.540776][ T5918] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[   83.567863][ T5918] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   83.609721][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   83.620112][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   83.630469][ T5918] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   83.648029][ T5918] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   83.772174][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.830491][ T5918] usb 4-1: GET_CAPABILITIES returned 0
[   84.859548][ T5918] usbtmc 4-1:16.0: can't read capabilities
[   85.372293][ T6156] usbtmc 4-1:16.0: usb_control_msg returned -71
[   85.379078][ T5942] usb 4-1: USB disconnect, device number 3
[   85.859111][ T6217] __nla_validate_parse: 45 callbacks suppressed
[   85.859307][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'.
[   86.881272][   T30] kauditd_printk_skb: 6 callbacks suppressed
[   86.881288][   T30] audit: type=1400 audit(1773629261.658:189): avc:  denied  { name_bind } for  pid=6221 comm="syz.2.56" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   87.005842][   T30] audit: type=1400 audit(1773629261.718:190): avc:  denied  { name_connect } for  pid=6221 comm="syz.2.56" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   87.405992][ T6240] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.417758][   T30] audit: type=1400 audit(1773629262.188:191): avc:  denied  { create } for  pid=6238 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   87.437757][   T30] audit: type=1400 audit(1773629262.208:192): avc:  denied  { ioctl } for  pid=6238 comm="syz.1.60" path="socket:[9677]" dev="sockfs" ino=9677 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   87.993536][   T30] audit: type=1400 audit(1773629262.208:193): avc:  denied  { name_bind } for  pid=6238 comm="syz.1.60" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   88.069708][   T30] audit: type=1400 audit(1773629262.208:194): avc:  denied  { node_bind } for  pid=6238 comm="syz.1.60" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   88.156962][   T30] audit: type=1400 audit(1773629262.208:195): avc:  denied  { watch watch_reads } for  pid=6238 comm="syz.1.60" path="/14" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   88.342542][   T30] audit: type=1400 audit(1773629263.118:196): avc:  denied  { execute } for  pid=6241 comm="syz.2.61" path="/dev/snd/controlC#" dev="devtmpfs" ino=2806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1
[   88.432054][   T30] audit: type=1800 audit(1773629263.118:197): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.61" name="controlC#" dev="devtmpfs" ino=2806 res=0 errno=0
[   88.622359][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.629867][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.116528][  T791] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   89.210768][   T30] audit: type=1400 audit(1773629263.988:198): avc:  denied  { setopt } for  pid=6260 comm="syz.0.69" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   89.273249][ T5889] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   89.284635][  T791] usb 3-1: config 246 has an invalid interface number: 166 but max is 0
[   89.294213][  T791] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[   89.398494][  T791] usb 3-1: config 246 has no interface number 0
[   89.408512][  T791] usb 3-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   89.421979][  T791] usb 3-1: config 246 interface 166 has no altsetting 0
[   89.430663][  T791] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[   89.440301][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.448398][  T791] usb 3-1: Product: syz
[   89.463282][ T5889] usb 5-1: Using ep0 maxpacket: 8
[   89.478229][ T5889] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   89.487284][ T5889] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   89.500962][ T5889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   89.815599][  T791] usb 3-1: Manufacturer: syz
[   89.820941][  T791] usb 3-1: SerialNumber: syz
[   89.835772][ T5889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   89.857236][ T5889] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   89.871982][ T5889] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   89.873173][ T5890] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   89.882068][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.115894][ T5890] usb 2-1: config 4 has an invalid interface number: 42 but max is 0
[   90.132433][ T5890] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   90.195906][ T5889] usb 5-1: GET_CAPABILITIES returned 0
[   90.218676][ T5889] usbtmc 5-1:16.0: can't read capabilities
[   90.257813][ T5890] usb 2-1: config 4 has no interface number 0
[   90.278067][ T5890] usb 2-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=81.51
[   90.324890][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.352952][ T5890] s2255 2-1:4.42: Could not find bulk-in endpoint
[   90.629454][  T791] usb 3-1: Limiting number of CPorts to U8_MAX
[   90.643309][ T5890] Sensoray 2255 driver load failed: 0xfffffff4
[   90.652607][  T791] usb 3-1: Not enough endpoints found in device, aborting!
[   90.665374][ T5890] s2255 2-1:4.42: probe with driver s2255 failed with error -12
[   91.584108][ T5890] usb 5-1: USB disconnect, device number 3
[   92.337321][ T5889] usb 3-1: USB disconnect, device number 3
[   92.433899][   T30] kauditd_printk_skb: 5 callbacks suppressed
[   92.433910][   T30] audit: type=1400 audit(1773629267.218:204): avc:  denied  { ioctl } for  pid=6291 comm="syz.2.77" path="socket:[9969]" dev="sockfs" ino=9969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   92.491785][   T24] usb 2-1: USB disconnect, device number 2
[   92.557768][ T6292] warning: `syz.2.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   93.036937][ T6304] FAULT_INJECTION: forcing a failure.
[   93.036937][ T6304] name failslab, interval 1, probability 0, space 0, times 0
[   93.057667][ T6304] CPU: 1 UID: 0 PID: 6304 Comm: syz.2.81 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   93.057694][ T6304] Tainted: [L]=SOFTLOCKUP
[   93.057700][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   93.057708][ T6304] Call Trace:
[   93.057714][ T6304]  <TASK>
[   93.057720][ T6304]  dump_stack_lvl+0x100/0x190
[   93.057751][ T6304]  should_fail_ex.cold+0x5/0xa
[   93.057773][ T6304]  should_failslab+0xc2/0x120
[   93.057790][ T6304]  __kmalloc_cache_noprof+0x7a/0x6f0
[   93.057809][ T6304]  ? genl_start+0x1e8/0x970
[   93.057832][ T6304]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[   93.057857][ T6304]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[   93.057885][ T6304]  genl_start+0x1e8/0x970
[   93.057913][ T6304]  __netlink_dump_start+0x60e/0x990
[   93.057937][ T6304]  genl_family_rcv_msg_dumpit+0x1e2/0x2e0
[   93.057965][ T6304]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[   93.057994][ T6304]  ? rcu_is_watching+0x12/0xc0
[   93.058014][ T6304]  ? __pfx_genl_start+0x10/0x10
[   93.058036][ T6304]  ? __pfx_genl_dumpit+0x10/0x10
[   93.058057][ T6304]  ? __pfx_genl_done+0x10/0x10
[   93.058081][ T6304]  ? bpf_lsm_capable+0x9/0x10
[   93.058096][ T6304]  ? security_capable+0x80/0x260
[   93.058120][ T6304]  genl_rcv_msg+0x471/0x800
[   93.058152][ T6304]  ? __pfx_genl_rcv_msg+0x10/0x10
[   93.058177][ T6304]  ? __pfx_nl802154_dump_llsec_dev+0x10/0x10
[   93.058198][ T6304]  ? __lock_acquire+0x4a5/0x2630
[   93.058217][ T6304]  netlink_rcv_skb+0x159/0x420
[   93.058238][ T6304]  ? __pfx_genl_rcv_msg+0x10/0x10
[   93.058264][ T6304]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   93.058294][ T6304]  ? netlink_deliver_tap+0x1ae/0xcc0
[   93.058319][ T6304]  genl_rcv+0x28/0x40
[   93.058340][ T6304]  netlink_unicast+0x5aa/0x870
[   93.058365][ T6304]  ? __pfx_netlink_unicast+0x10/0x10
[   93.058394][ T6304]  netlink_sendmsg+0x8b0/0xda0
[   93.058420][ T6304]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.058441][ T6304]  ? PageHuge+0x170/0x180
[   93.058469][ T6304]  ____sys_sendmsg+0x9e1/0xb70
[   93.058491][ T6304]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.058514][ T6304]  ? __pfx_____sys_sendmsg+0x10/0x10
[   93.058548][ T6304]  ___sys_sendmsg+0x190/0x1e0
[   93.058573][ T6304]  ? __pfx____sys_sendmsg+0x10/0x10
[   93.058625][ T6304]  __sys_sendmsg+0x170/0x220
[   93.058645][ T6304]  ? __pfx___sys_sendmsg+0x10/0x10
[   93.058679][ T6304]  do_syscall_64+0x106/0xf80
[   93.058699][ T6304]  ? clear_bhb_loop+0x40/0x90
[   93.058719][ T6304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.058735][ T6304] RIP: 0033:0x7f53f679c799
[   93.058749][ T6304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.058763][ T6304] RSP: 002b:00007f53f7733028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.058778][ T6304] RAX: ffffffffffffffda RBX: 00007f53f6a15fa0 RCX: 00007f53f679c799
[   93.058788][ T6304] RDX: 00000000000000a0 RSI: 0000200000000280 RDI: 0000000000000004
[   93.058797][ T6304] RBP: 00007f53f7733090 R08: 0000000000000000 R09: 0000000000000000
[   93.058805][ T6304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.058815][ T6304] R13: 00007f53f6a16038 R14: 00007f53f6a15fa0 R15: 00007fffe2e456c8
[   93.058836][ T6304]  </TASK>
[   93.866740][ T6308] ./cgroup: Can't lookup blockdev
[   93.885108][ T6310] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[   93.903185][ T6310] audit: out of memory in audit_log_start
[   93.910482][   T30] audit: type=1400 audit(1773629268.648:205): avc:  denied  { mounton } for  pid=6307 comm="syz.3.84" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   94.273232][   T30] audit: type=1400 audit(1773629268.668:206): avc:  denied  { connect } for  pid=6309 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   94.320216][   T30] audit: type=1400 audit(1773629268.668:207): avc:  denied  { ioctl } for  pid=6309 comm="syz.0.85" path="socket:[10007]" dev="sockfs" ino=10007 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   94.462100][   T30] audit: type=1400 audit(1773629269.158:208): avc:  denied  { write } for  pid=6317 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   94.657570][   T30] audit: type=1400 audit(1773629269.168:209): avc:  denied  { mount } for  pid=6317 comm="syz.0.87" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   95.073926][   T30] audit: type=1400 audit(1773629269.188:210): avc:  denied  { mounton } for  pid=6317 comm="syz.0.87" path="/19/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[   95.096470][   T30] audit: type=1400 audit(1773629269.208:211): avc:  denied  { mount } for  pid=6317 comm="syz.0.87" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   95.101393][ T6328] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6328 comm=syz.1.89
[   95.198364][ T6328] netlink: 52 bytes leftover after parsing attributes in process `syz.1.89'.
[   95.912947][ T6340] netlink: 72 bytes leftover after parsing attributes in process `syz.1.94'.
[   97.733725][   T30] kauditd_printk_skb: 4 callbacks suppressed
[   97.733742][   T30] audit: type=1400 audit(1773629271.758:216): avc:  denied  { read write } for  pid=6329 comm="syz.4.90" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   98.704775][ T6362] FAULT_INJECTION: forcing a failure.
[   98.704775][ T6362] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   98.725422][   T30] audit: type=1400 audit(1773629271.758:217): avc:  denied  { open } for  pid=6329 comm="syz.4.90" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   98.748574][   T30] audit: type=1400 audit(1773629271.998:218): avc:  denied  { map } for  pid=6329 comm="syz.4.90" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   98.801803][   T30] audit: type=1400 audit(1773629273.058:219): avc:  denied  { setopt } for  pid=6329 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   98.831744][ T6362] CPU: 0 UID: 0 PID: 6362 Comm: syz.2.98 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   98.831771][ T6362] Tainted: [L]=SOFTLOCKUP
[   98.831776][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   98.831786][ T6362] Call Trace:
[   98.831791][ T6362]  <TASK>
[   98.831798][ T6362]  dump_stack_lvl+0x100/0x190
[   98.831830][ T6362]  should_fail_ex.cold+0x5/0xa
[   98.831853][ T6362]  _copy_to_user+0x32/0xd0
[   98.831873][ T6362]  simple_read_from_buffer+0xcb/0x170
[   98.831903][ T6362]  proc_fail_nth_read+0x1af/0x230
[   98.831928][ T6362]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   98.831953][ T6362]  ? rw_verify_area+0xce/0x6d0
[   98.831976][ T6362]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   98.831999][ T6362]  vfs_read+0x1e4/0xb30
[   98.832028][ T6362]  ? __pfx_vfs_read+0x10/0x10
[   98.832051][ T6362]  ? __fget_files+0x215/0x3d0
[   98.832075][ T6362]  ? __fget_files+0x21f/0x3d0
[   98.832099][ T6362]  ksys_read+0x12a/0x250
[   98.832124][ T6362]  ? __pfx_ksys_read+0x10/0x10
[   98.832156][ T6362]  do_syscall_64+0x106/0xf80
[   98.832177][ T6362]  ? clear_bhb_loop+0x40/0x90
[   98.832198][ T6362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.832216][ T6362] RIP: 0033:0x7f53f675cfce
[   98.832230][ T6362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   98.832245][ T6362] RSP: 002b:00007f53f7732fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   98.832262][ T6362] RAX: ffffffffffffffda RBX: 00007f53f77336c0 RCX: 00007f53f675cfce
[   98.832273][ T6362] RDX: 000000000000000f RSI: 00007f53f77330a0 RDI: 0000000000000005
[   98.832282][ T6362] RBP: 00007f53f7733090 R08: 0000000000000000 R09: 0000000000000000
[   98.832292][ T6362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.832302][ T6362] R13: 00007f53f6a16038 R14: 00007f53f6a15fa0 R15: 00007fffe2e456c8
[   98.832325][ T6362]  </TASK>
[   99.134437][   T30] audit: type=1400 audit(1773629273.058:220): avc:  denied  { unmount } for  pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   99.721982][   T29] hid (null): invalid report_size 9136
[   99.755486][   T29] hid-generic 0002:000D:0009.0001: invalid report_size 9136
[  100.165610][   T29] hid-generic 0002:000D:0009.0001: item 0 2 1 7 parsing failed
[  100.744496][   T29] hid-generic 0002:000D:0009.0001: probe with driver hid-generic failed with error -22
[  101.220746][   T30] audit: type=1400 audit(1773629275.978:221): avc:  denied  { getopt } for  pid=6379 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  104.583133][   T30] audit: type=1400 audit(1773629277.608:222): avc:  denied  { write } for  pid=6385 comm="syz.2.107" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  105.083955][   T30] audit: type=1400 audit(1773629277.608:223): avc:  denied  { open } for  pid=6385 comm="syz.2.107" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  105.323900][   T30] audit: type=1400 audit(1773629277.748:224): avc:  denied  { ioctl } for  pid=6385 comm="syz.2.107" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  105.923157][   T30] audit: type=1400 audit(1773629279.988:225): avc:  denied  { map } for  pid=6395 comm="syz.2.108" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  107.075390][   T30] audit: type=1400 audit(1773629281.608:226): avc:  denied  { create } for  pid=6410 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  107.166846][   T30] audit: type=1400 audit(1773629281.628:227): avc:  denied  { ioctl } for  pid=6410 comm="syz.4.113" path="socket:[10216]" dev="sockfs" ino=10216 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  107.194265][ T6409] netlink: 'syz.2.115': attribute type 1 has an invalid length.
[  107.271170][   T30] audit: type=1400 audit(1773629281.968:228): avc:  denied  { create } for  pid=6415 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  107.332173][   T30] audit: type=1400 audit(1773629281.988:229): avc:  denied  { ioctl } for  pid=6415 comm="syz.0.116" path="socket:[10230]" dev="sockfs" ino=10230 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  107.419368][   T30] audit: type=1400 audit(1773629282.078:230): avc:  denied  { unlink } for  pid=6417 comm="syz.1.117" name="#1" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  107.481090][   T30] audit: type=1400 audit(1773629282.158:231): avc:  denied  { bind } for  pid=6415 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  107.817171][ T6421] fuse: Bad value for 'fd'
[  110.123545][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  110.123563][   T30] audit: type=1400 audit(1773629284.898:236): avc:  denied  { unmount } for  pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  111.344127][   T30] audit: type=1400 audit(1773629285.238:237): avc:  denied  { read write } for  pid=6436 comm="syz.1.123" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  111.755545][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.123'.
[  111.793217][ T6442] netlink: 52 bytes leftover after parsing attributes in process `syz.1.123'.
[  111.802309][   T30] audit: type=1400 audit(1773629285.248:238): avc:  denied  { open } for  pid=6436 comm="syz.1.123" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  112.306553][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.123'.
[  112.553429][   T30] audit: type=1400 audit(1773629285.268:239): avc:  denied  { read } for  pid=6436 comm="syz.1.123" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  112.991053][   T30] audit: type=1400 audit(1773629285.278:240): avc:  denied  { open } for  pid=6436 comm="syz.1.123" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  113.989675][   T30] audit: type=1400 audit(1773629285.288:241): avc:  denied  { ioctl } for  pid=6436 comm="syz.1.123" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  114.045266][ T6448] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  114.045266][ T6448]    program syz.0.126 not setting count and/or reply_len properly
[  114.078354][ T6448] syzkaller0: entered promiscuous mode
[  114.083884][ T6448] syzkaller0: entered allmulticast mode
[  114.206209][ T6460] fuse: Unknown parameter 'u00000000000000000000'
[  114.677780][   T30] audit: type=1400 audit(1773629285.298:242): avc:  denied  { set_context_mgr } for  pid=6436 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  115.840203][   T30] audit: type=1400 audit(1773629285.308:243): avc:  denied  { bind } for  pid=6436 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  120.139611][   T30] audit: type=1400 audit(1773629288.608:244): avc:  denied  { create } for  pid=6450 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  120.197173][   T30] audit: type=1400 audit(1773629288.878:245): avc:  denied  { write } for  pid=6445 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  120.450574][   T30] audit: type=1400 audit(1773629288.988:246): avc:  denied  { mounton } for  pid=6458 comm="syz.4.130" path="/25/file0" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  121.763462][   T30] audit: type=1400 audit(1773629289.508:247): avc:  denied  { setopt } for  pid=6458 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  122.105305][ T6476] fuse: Bad value for 'fd'
[  122.155228][ T6472] FAULT_INJECTION: forcing a failure.
[  122.155228][ T6472] name failslab, interval 1, probability 0, space 0, times 0
[  122.598111][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz.3.134 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  122.598140][ T6472] Tainted: [L]=SOFTLOCKUP
[  122.598145][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  122.598155][ T6472] Call Trace:
[  122.598161][ T6472]  <TASK>
[  122.598167][ T6472]  dump_stack_lvl+0x100/0x190
[  122.598207][ T6472]  should_fail_ex.cold+0x5/0xa
[  122.598229][ T6472]  should_failslab+0xc2/0x120
[  122.598247][ T6472]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  122.598278][ T6472]  ? __alloc_skb+0x140/0x710
[  122.598304][ T6472]  __alloc_skb+0x140/0x710
[  122.598322][ T6472]  ? __alloc_skb+0x5b7/0x710
[  122.598340][ T6472]  ? __pfx___alloc_skb+0x10/0x10
[  122.598358][ T6472]  ? genl_rcv_msg+0x4be/0x800
[  122.598390][ T6472]  netlink_ack+0x117/0xb80
[  122.598421][ T6472]  netlink_rcv_skb+0x333/0x420
[  122.598445][ T6472]  ? __pfx_genl_rcv_msg+0x10/0x10
[  122.598473][ T6472]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  122.598507][ T6472]  ? netlink_deliver_tap+0x1ae/0xcc0
[  122.598534][ T6472]  genl_rcv+0x28/0x40
[  122.598558][ T6472]  netlink_unicast+0x5aa/0x870
[  122.598585][ T6472]  ? __pfx_netlink_unicast+0x10/0x10
[  122.598617][ T6472]  netlink_sendmsg+0x8b0/0xda0
[  122.598645][ T6472]  ? __pfx_netlink_sendmsg+0x10/0x10
[  122.598667][ T6472]  ? PageHuge+0x170/0x180
[  122.598698][ T6472]  ____sys_sendmsg+0x9e1/0xb70
[  122.598723][ T6472]  ? __pfx_netlink_sendmsg+0x10/0x10
[  122.598748][ T6472]  ? __pfx_____sys_sendmsg+0x10/0x10
[  122.598783][ T6472]  ___sys_sendmsg+0x190/0x1e0
[  122.598812][ T6472]  ? __pfx____sys_sendmsg+0x10/0x10
[  122.598864][ T6472]  __sys_sendmsg+0x170/0x220
[  122.598886][ T6472]  ? __pfx___sys_sendmsg+0x10/0x10
[  122.598922][ T6472]  do_syscall_64+0x106/0xf80
[  122.598950][ T6472]  ? clear_bhb_loop+0x40/0x90
[  122.598971][ T6472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.598988][ T6472] RIP: 0033:0x7fea1019c799
[  122.599003][ T6472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.599019][ T6472] RSP: 002b:00007fea10fac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  122.599036][ T6472] RAX: ffffffffffffffda RBX: 00007fea10415fa0 RCX: 00007fea1019c799
[  122.599047][ T6472] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  122.599057][ T6472] RBP: 00007fea10fac090 R08: 0000000000000000 R09: 0000000000000000
[  122.599067][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.599076][ T6472] R13: 00007fea10416038 R14: 00007fea10415fa0 R15: 00007ffd0ea1e028
[  122.599099][ T6472]  </TASK>
[  123.696860][   T30] audit: type=1400 audit(1773629298.278:248): avc:  denied  { setopt } for  pid=6481 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  125.831199][   T30] audit: type=1400 audit(1773629299.898:249): avc:  denied  { getopt } for  pid=6483 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  126.990766][ T6486] syz.0.138 (6486): drop_caches: 2
[  127.563479][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  127.569781][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  129.754944][ T6503] ceph: No mds server is up or the cluster is laggy
[  130.070303][   T24] libceph: connect (1)[c::]:6789 error -101
[  130.227915][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  130.241566][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  130.258090][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  130.305561][   T30] audit: type=1400 audit(1773629305.088:250): avc:  denied  { ioctl } for  pid=6508 comm="syz-executor" path="socket:[11543]" dev="sockfs" ino=11543 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  130.344629][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  130.704777][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  130.712373][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  130.815612][ T5889] libceph: connect (1)[c::]:6789 error -101
[  130.815789][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  131.028274][ T6511] ceph: No mds server is up or the cluster is laggy
[  131.349925][ T5889] libceph: connect (1)[c::]:6789 error -101
[  131.404672][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  132.015773][ T5889] libceph: connect (1)[c::]:6789 error -101
[  132.023348][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  132.513589][ T6522] ceph: No mds server is up or the cluster is laggy
[  132.806526][ T5812] Bluetooth: hci5: command tx timeout
[  134.091475][ T6508] chnl_net:caif_netlink_parms(): no params data found
[  134.863169][ T5812] Bluetooth: hci5: command tx timeout
[  135.230028][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.254212][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.303283][ T6508] bridge_slave_0: entered allmulticast mode
[  135.328876][ T6508] bridge_slave_0: entered promiscuous mode
[  135.375976][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.425041][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.460276][ T6508] bridge_slave_1: entered allmulticast mode
[  135.670914][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'.
[  135.683269][ T6508] bridge_slave_1: entered promiscuous mode
[  136.585345][ T6508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.685897][ T6508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.943276][ T5812] Bluetooth: hci5: command tx timeout
[  138.569539][   T30] audit: type=1400 audit(1773629313.008:251): avc:  denied  { create } for  pid=6559 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  138.837126][ T6508] team0: Port device team_slave_0 added
[  139.158393][ T5812] Bluetooth: hci5: command tx timeout
[  143.496106][ T6576] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  143.502799][ T6576] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  144.283666][   T24] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  144.285484][ T6508] team0: Port device team_slave_1 added
[  144.333103][ T5918] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  144.494851][ T6576] vhci_hcd vhci_hcd.0: Device attached
[  144.510887][ T6577] vhci_hcd: connection closed
[  144.542080][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.560973][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  144.587050][   T49] vhci_hcd vhci_hcd.2: stop threads
[  144.592920][   T49] vhci_hcd vhci_hcd.2: release socket
[  144.607030][   T49] vhci_hcd vhci_hcd.2: disconnect device
[  144.619449][   T29] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  144.646006][   T24] usb 4-1: config 246 has an invalid interface number: 166 but max is 0
[  144.654605][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.673113][ T5918] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  144.682291][   T24] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[  144.714125][ T6508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.724997][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.736694][   T24] usb 4-1: config 246 has no interface number 0
[  144.742970][   T24] usb 4-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  144.777244][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.792166][ T5918] usb 5-1: config 0 descriptor??
[  144.803092][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  144.852695][ T5918] pwc: Askey VC010 type 2 USB webcam detected.
[  144.860125][   T24] usb 4-1: config 246 interface 166 has no altsetting 0
[  144.887606][ T6508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.901103][   T24] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[  144.915396][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.932405][   T24] usb 4-1: Product: syz
[  144.938553][   T24] usb 4-1: Manufacturer: syz
[  144.949881][   T24] usb 4-1: SerialNumber: syz
[  145.102385][ T6508] hsr_slave_0: entered promiscuous mode
[  145.139159][ T6508] hsr_slave_1: entered promiscuous mode
[  145.169999][ T6508] debugfs: 'hsr0' already exists in 'hsr'
[  145.211368][ T6508] Cannot create hsr debugfs directory
[  145.296737][ T5918] pwc: recv_control_msg error -32 req 02 val 2b00
[  145.823707][   T24] usb 4-1: Limiting number of CPorts to U8_MAX
[  145.863607][   T24] usb 4-1: Not enough endpoints found in device, aborting!
[  145.934090][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'.
[  147.323420][ T5918] pwc: recv_control_msg error -71 req 02 val 2700
[  147.468270][ T5918] pwc: recv_control_msg error -71 req 02 val 2c00
[  147.486962][ T5889] usb 4-1: USB disconnect, device number 4
[  147.514762][ T6596] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  147.541093][ T6596] usb usb8: usbfs: process 6596 (syz.0.164) did not claim interface 0 before use
[  147.620918][ T5918] pwc: recv_control_msg error -71 req 04 val 1000
[  147.693187][ T5918] pwc: recv_control_msg error -71 req 04 val 1300
[  148.543990][ T5918] pwc: recv_control_msg error -71 req 04 val 1400
[  148.597533][ T5918] pwc: recv_control_msg error -71 req 02 val 2000
[  148.655609][ T5918] pwc: recv_control_msg error -71 req 02 val 2100
[  148.791238][ T5918] pwc: recv_control_msg error -71 req 04 val 1500
[  148.885254][ T6599] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  148.921776][ T5918] pwc: recv_control_msg error -71 req 02 val 2500
[  148.979010][ T6599] usb usb8: usbfs: process 6599 (syz.4.165) did not claim interface 0 before use
[  149.014999][ T5918] pwc: recv_control_msg error -71 req 02 val 2400
[  149.083546][   T30] audit: type=1400 audit(1773629323.858:252): avc:  denied  { mount } for  pid=6606 comm="syz.2.168" name="/" dev="ramfs" ino=12248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  149.115116][ T5918] pwc: recv_control_msg error -71 req 02 val 2600
[  149.169734][ T5918] pwc: recv_control_msg error -71 req 02 val 2900
[  149.282914][ T5918] pwc: recv_control_msg error -71 req 02 val 2800
[  149.303746][ T6508] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  149.313363][ T5918] pwc: recv_control_msg error -71 req 04 val 1100
[  149.343787][   T30] audit: type=1400 audit(1773629324.128:253): avc:  denied  { create } for  pid=6611 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  149.377716][ T5918] pwc: recv_control_msg error -71 req 04 val 1200
[  149.405564][ T6508] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  149.432539][ T5918] pwc: Registered as video103.
[  149.450799][ T5918] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5
[  149.491187][   T30] audit: type=1400 audit(1773629324.178:254): avc:  denied  { create } for  pid=6611 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  149.523102][ T6508] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  149.571774][ T6508] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  149.600041][ T5918] usb 5-1: USB disconnect, device number 4
[  149.929123][ T6620] xt_TCPMSS: Only works on TCP SYN packets
[  150.444231][ T5918] libceph: connect (1)[c::]:6789 error -101
[  150.483523][ T5918] libceph: mon0 (1)[c::]:6789 connect error
[  150.953020][ T6633] ceph: No mds server is up or the cluster is laggy
[  151.023148][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  151.256384][ T5918] libceph: connect (1)[c::]:6789 error -101
[  151.267741][ T6508] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.275714][ T5918] libceph: mon0 (1)[c::]:6789 connect error
[  151.691079][ T6508] 8021q: adding VLAN 0 to HW filter on device team0
[  151.706945][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.714086][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.766194][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.773350][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.122383][ T6508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.317745][ T6646] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  153.418055][ T6646] usb usb8: usbfs: process 6646 (syz.0.176) did not claim interface 0 before use
[  154.669763][ T6508] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.932358][ T5889] libceph: connect (1)[c::]:6789 error -101
[  155.940170][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  156.289984][ T6672] ceph: No mds server is up or the cluster is laggy
[  156.597118][ T5889] libceph: connect (1)[c::]:6789 error -101
[  156.623514][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  158.933317][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  159.068313][ T6508] veth0_vlan: entered promiscuous mode
[  159.121046][ T6508] veth1_vlan: entered promiscuous mode
[  159.133368][   T24] usb 1-1: Using ep0 maxpacket: 32
[  159.183629][   T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  159.230728][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  159.252077][ T6508] veth0_macvtap: entered promiscuous mode
[  159.425220][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  159.481983][ T6508] veth1_macvtap: entered promiscuous mode
[  159.520365][   T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  159.604919][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  159.627184][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.651058][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  159.688230][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.718408][   T24] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  159.771936][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.894889][   T24] usb 1-1: Product: syz
[  159.925122][   T24] usb 1-1: Manufacturer: syz
[  159.929759][   T24] usb 1-1: SerialNumber: syz
[  159.949078][ T1090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.103332][ T1090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.181798][   T24] usb 1-1: config 0 descriptor??
[  160.230131][   T24] usb 1-1: can't set config #0, error -71
[  160.245495][ T1090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.306404][   T24] usb 1-1: USB disconnect, device number 3
[  160.312374][ T1090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.298075][ T6696] process 'syz.0.188' launched './file0' with NULL argv: empty string added
[  161.299172][   T30] audit: type=1400 audit(1773629336.078:255): avc:  denied  { execute } for  pid=6692 comm="syz.0.188" name="file0" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  162.436711][   T30] audit: type=1400 audit(1773629336.078:256): avc:  denied  { remount } for  pid=6692 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  162.456500][   T30] audit: type=1400 audit(1773629336.228:257): avc:  denied  { execute_no_trans } for  pid=6692 comm="syz.0.188" path="/42/file0" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  165.050764][   T30] audit: type=1400 audit(1773629336.388:258): avc:  denied  { wake_alarm } for  pid=6692 comm="syz.0.188" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  165.121358][ T6708] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  165.531304][   T30] audit: type=1400 audit(1773629339.868:259): avc:  denied  { append } for  pid=6707 comm="syz.0.191" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  165.585395][ T5889] libceph: connect (1)[c::]:6789 error -101
[  165.585577][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  165.854383][ T5889] libceph: connect (1)[c::]:6789 error -101
[  165.863010][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  166.002014][ T6714] ceph: No mds server is up or the cluster is laggy
[  167.655589][ T6722] ceph: No mds server is up or the cluster is laggy
[  167.911046][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.935502][ T5889] libceph: connect (1)[c::]:6789 error -101
[  167.978166][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.998062][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  168.022471][ T6721] usb usb1: usbfs: process 6721 (syz.0.191) did not claim interface 0 before use
[  168.484495][ T6708] wireguard0: entered promiscuous mode
[  169.055220][ T6732] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  169.109244][ T6708] wireguard0: entered allmulticast mode
[  170.021927][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.076372][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.323389][ T6745] FAULT_INJECTION: forcing a failure.
[  170.323389][ T6745] name failslab, interval 1, probability 0, space 0, times 0
[  170.357643][   T30] audit: type=1400 audit(1773629345.098:260): avc:  denied  { create } for  pid=6744 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  170.423376][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: syz.0.196 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  170.423407][ T6745] Tainted: [L]=SOFTLOCKUP
[  170.423412][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  170.423422][ T6745] Call Trace:
[  170.423428][ T6745]  <TASK>
[  170.423434][ T6745]  dump_stack_lvl+0x100/0x190
[  170.423467][ T6745]  should_fail_ex.cold+0x5/0xa
[  170.423489][ T6745]  ? tomoyo_realpath_from_path+0xb6/0x690
[  170.423514][ T6745]  should_failslab+0xc2/0x120
[  170.423531][ T6745]  __kmalloc_noprof+0xe0/0x850
[  170.423561][ T6745]  tomoyo_realpath_from_path+0xb6/0x690
[  170.423590][ T6745]  tomoyo_path_number_perm+0x23c/0x580
[  170.423610][ T6745]  ? tomoyo_path_number_perm+0x22e/0x580
[  170.423631][ T6745]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  170.423677][ T6745]  ? find_held_lock+0x2b/0x80
[  170.423704][ T6745]  ? __fget_files+0x215/0x3d0
[  170.423721][ T6745]  ? hook_file_ioctl_common+0x146/0x410
[  170.423753][ T6745]  ? __fget_files+0x21f/0x3d0
[  170.423774][ T6745]  security_file_ioctl+0xd3/0x230
[  170.423799][ T6745]  __x64_sys_ioctl+0xb7/0x210
[  170.423826][ T6745]  do_syscall_64+0x106/0xf80
[  170.423848][ T6745]  ? clear_bhb_loop+0x40/0x90
[  170.423869][ T6745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.423886][ T6745] RIP: 0033:0x7fd4f4b9c799
[  170.423900][ T6745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.423915][ T6745] RSP: 002b:00007fd4f59d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  170.423932][ T6745] RAX: ffffffffffffffda RBX: 00007fd4f4e15fa0 RCX: 00007fd4f4b9c799
[  170.423943][ T6745] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000004
[  170.423953][ T6745] RBP: 00007fd4f59d9090 R08: 0000000000000000 R09: 0000000000000000
[  170.423963][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.423973][ T6745] R13: 00007fd4f4e16038 R14: 00007fd4f4e15fa0 R15: 00007ffd0e98ac68
[  170.423996][ T6745]  </TASK>
[  170.424003][ T6745] ERROR: Out of memory at tomoyo_realpath_from_path.
[  170.660699][   T30] audit: type=1400 audit(1773629345.438:261): avc:  denied  { create } for  pid=6746 comm="syz.5.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  170.861846][   T30] audit: type=1400 audit(1773629345.438:262): avc:  denied  { ioctl } for  pid=6746 comm="syz.5.142" path="socket:[13027]" dev="sockfs" ino=13027 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  170.863506][ T6736] binder: 6730:6736 ioctl c0306201 0 returned -14
[  171.803130][   T30] audit: type=1400 audit(1773629345.758:263): avc:  denied  { bind } for  pid=6746 comm="syz.5.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  172.013333][   T30] audit: type=1400 audit(1773629345.758:264): avc:  denied  { ioctl } for  pid=6746 comm="syz.5.142" path="socket:[13031]" dev="sockfs" ino=13031 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  172.973100][   T30] audit: type=1400 audit(1773629345.788:265): avc:  denied  { shutdown } for  pid=6746 comm="syz.5.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  173.163537][   T30] audit: type=1400 audit(1773629347.888:266): avc:  denied  { bind } for  pid=6753 comm="syz.5.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  173.274716][ T6759] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  173.343100][   T30] audit: type=1400 audit(1773629347.888:267): avc:  denied  { listen } for  pid=6753 comm="syz.5.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  173.384489][ T6759] exFAT-fs (nullb0): invalid boot record signature
[  173.391033][ T6759] exFAT-fs (nullb0): failed to read boot sector
[  173.494016][ T6759] exFAT-fs (nullb0): failed to recognize exfat type
[  173.498188][   T30] audit: type=1400 audit(1773629347.938:268): avc:  denied  { accept } for  pid=6753 comm="syz.5.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  173.708877][   T30] audit: type=1400 audit(1773629348.038:269): avc:  denied  { append } for  pid=6753 comm="syz.5.198" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  175.643122][   T30] audit: type=1400 audit(1773629349.338:270): avc:  denied  { write } for  pid=6773 comm="syz.0.203" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  175.957902][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'.
[  176.952978][   T30] audit: type=1400 audit(1773629351.728:271): avc:  denied  { ioctl } for  pid=6783 comm="syz.0.206" path="socket:[13162]" dev="sockfs" ino=13162 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  179.103160][  T109] wlan0: Trigger new scan to find an IBSS to join
[  179.157282][   T30] audit: type=1400 audit(1773629351.758:272): avc:  denied  { connect } for  pid=6782 comm="syz.5.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  179.212925][   T30] audit: type=1400 audit(1773629351.758:273): avc:  denied  { write } for  pid=6782 comm="syz.5.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  179.518704][   T30] audit: type=1400 audit(1773629351.758:274): avc:  denied  { getopt } for  pid=6783 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  179.663552][   T30] audit: type=1400 audit(1773629353.268:275): avc:  denied  { ioctl } for  pid=6787 comm="syz.3.207" path="socket:[10798]" dev="sockfs" ino=10798 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  179.688508][   T29] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  179.942268][   T29] usb 3-1: config 246 has an invalid interface number: 166 but max is 0
[  180.059059][   T29] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[  182.353064][   T29] usb 3-1: config 246 has no interface number 0
[  182.371902][   T30] audit: type=1400 audit(1773629353.298:276): avc:  denied  { ioctl } for  pid=6787 comm="syz.3.207" path="socket:[10795]" dev="sockfs" ino=10795 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  182.428791][   T29] usb 3-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  182.683231][   T29] usb 3-1: config 246 interface 166 has no altsetting 0
[  183.100824][   T29] usb 3-1: string descriptor 0 read error: -71
[  183.163193][   T29] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[  183.209440][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.264781][ T6808] netlink: 188 bytes leftover after parsing attributes in process `syz.2.212'.
[  183.372335][   T29] usb 3-1: can't set config #246, error -71
[  183.440373][   T29] usb 3-1: USB disconnect, device number 4
[  183.446405][   T49] wlan0: Trigger new scan to find an IBSS to join
[  184.038371][   T30] audit: type=1400 audit(1773629358.818:277): avc:  denied  { write } for  pid=6815 comm="syz.5.215" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  184.705925][   T30] audit: type=1400 audit(1773629358.908:278): avc:  denied  { write } for  pid=6815 comm="syz.5.215" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  185.243323][   T29] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  185.779296][ T5820] Bluetooth: hci1: command 0x0406 tx timeout
[  185.792377][ T5133] Bluetooth: hci2: command 0x0406 tx timeout
[  185.796047][ T5820] Bluetooth: hci4: command 0x0406 tx timeout
[  185.805320][ T5133] Bluetooth: hci0: command 0x0406 tx timeout
[  186.198648][ T5876] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  186.290618][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.363379][   T29] usb 5-1: unable to get BOS descriptor or descriptor too short
[  186.381876][   T30] audit: type=1400 audit(1773629361.158:279): avc:  denied  { getopt } for  pid=6828 comm="syz.5.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  186.442403][   T29] usb 5-1: not running at top speed; connect to a high speed hub
[  186.481716][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  186.500999][   T30] audit: type=1400 audit(1773629361.258:280): avc:  denied  { create } for  pid=6828 comm="syz.5.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  186.579481][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64
[  186.676121][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64
[  186.717670][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  187.051030][   T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A
[  187.147906][   T29] usb 5-1: string descriptor 0 read error: -71
[  187.198162][   T29] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  187.288198][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.323130][ T5889] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  187.422627][   T29] usb 5-1: config 0 descriptor??
[  187.444666][ T6835] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  187.465025][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'.
[  187.496089][ T5889] usb 6-1: config 4 has an invalid interface number: 42 but max is 0
[  187.508423][   T29] usb 5-1: can't set config #0, error -71
[  187.542254][ T5889] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  187.574284][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'.
[  187.741954][   T30] audit: type=1400 audit(1773629362.518:281): avc:  denied  { create } for  pid=6841 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  187.809975][   T29] usb 5-1: USB disconnect, device number 5
[  188.148429][ T5889] usb 6-1: config 4 has no interface number 0
[  188.189537][ T5889] usb 6-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=81.51
[  188.202179][   T30] audit: type=1400 audit(1773629362.688:282): avc:  denied  { setopt } for  pid=6841 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  188.222154][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.235919][ T5889] s2255 6-1:4.42: Could not find bulk-in endpoint
[  188.242600][ T5889] Sensoray 2255 driver load failed: 0xfffffff4
[  188.251326][ T5889] s2255 6-1:4.42: probe with driver s2255 failed with error -12
[  188.403125][ T5889] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  188.794173][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  188.800556][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  194.324299][ T5876] usb 6-1: USB disconnect, device number 2
[  194.496573][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short
[  194.560166][ T5889] usb 4-1: unable to read config index 0 descriptor/start: -71
[  194.587648][ T5889] usb 4-1: can't read configurations, error -71
[  196.714333][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  198.633300][ T5918] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  198.962879][ T5918] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  198.985517][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.007600][ T5918] usb 3-1: Product: syz
[  199.011782][ T5918] usb 3-1: Manufacturer: syz
[  199.035305][ T5918] usb 3-1: SerialNumber: syz
[  199.324311][ T6884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.232'.
[  199.374151][ T6884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.232'.
[  199.496473][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  199.528596][   T30] audit: type=1400 audit(1773629374.288:283): avc:  denied  { ioctl } for  pid=6883 comm="syz.0.232" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  199.577396][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  199.699989][   T30] audit: type=1400 audit(1773629374.478:284): avc:  denied  { append } for  pid=6880 comm="syz.3.231" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  200.003498][   T30] audit: type=1400 audit(1773629374.518:285): avc:  denied  { bind } for  pid=6880 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  200.175934][   T30] audit: type=1400 audit(1773629374.718:286): avc:  denied  { ioctl } for  pid=6880 comm="syz.3.231" path="ipc:[4026532807]" dev="nsfs" ino=4026532807 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  200.295601][   T30] audit: type=1400 audit(1773629375.048:287): avc:  denied  { create } for  pid=6887 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  200.563090][   T30] audit: type=1400 audit(1773629375.048:288): avc:  denied  { setopt } for  pid=6887 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  200.757170][ T6894] syz.4.234 uses obsolete (PF_INET,SOCK_PACKET)
[  200.786915][   T30] audit: type=1400 audit(1773629375.568:289): avc:  denied  { ioctl } for  pid=6887 comm="syz.4.234" path="socket:[13563]" dev="sockfs" ino=13563 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  201.069924][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.166575][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.043047][    C0] sched: DL replenish lagged too much
[  204.721986][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO
[  205.051760][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  206.413807][ T5918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  207.903404][ T5918] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  209.417030][ T5918] usb 3-1: USB disconnect, device number 6
[  211.330199][ T6921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'.
[  211.663188][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  211.967567][ T6921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'.
[  212.478474][ T5876] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  212.790595][ T5876] usb 3-1: unable to get BOS descriptor or descriptor too short
[  212.811209][ T5876] usb 3-1: not running at top speed; connect to a high speed hub
[  213.958483][ T5876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  213.968950][ T5876] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  213.978004][ T5876] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  214.000598][ T5876] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  214.013392][ T5876] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  214.022550][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.030690][ T5876] usb 3-1: Product: syz
[  214.034973][ T5876] usb 3-1: Manufacturer: syz
[  214.039559][ T5876] usb 3-1: SerialNumber: syz
[  214.276967][ T5876] usb 3-1: 0:2 : does not exist
[  214.650002][ T5876] usb 3-1: USB disconnect, device number 7
[  215.184000][ T6954] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  215.654215][   T30] audit: type=1400 audit(1773629390.438:290): avc:  denied  { getopt } for  pid=6951 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  216.476033][ T6949] usb usb8: usbfs: process 6949 (syz.5.247) did not claim interface 0 before use
[  216.714802][ T6963] netlink: 60 bytes leftover after parsing attributes in process `syz.2.250'.
[  217.549605][   T30] audit: type=1400 audit(1773629392.328:291): avc:  denied  { ioctl } for  pid=6959 comm="syz.2.250" path="socket:[13783]" dev="sockfs" ino=13783 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  219.468158][ T1103] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  219.898459][ T6977] netlink: 'syz.5.255': attribute type 10 has an invalid length.
[  220.076470][ T6980] capability: warning: `syz.5.255' uses 32-bit capabilities (legacy support in use)
[  220.143881][ T6977] veth0_macvtap: left promiscuous mode
[  220.224342][ T6982] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[  220.232027][ T6982] netlink: 732 bytes leftover after parsing attributes in process `syz.0.258'.
[  220.277932][ T6982] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[  220.303102][ T5876] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  220.319619][ T6983] Illegal XDP return value 4294967274 on prog  (id 7) dev N/A, expect packet loss!
[  220.419496][   T30] audit: type=1400 audit(1773629395.198:292): avc:  denied  { read } for  pid=6986 comm="syz.4.259" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  220.511039][   T30] audit: type=1400 audit(1773629395.228:293): avc:  denied  { open } for  pid=6986 comm="syz.4.259" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  220.553872][ T5876] usb 3-1: config 246 has an invalid interface number: 166 but max is 0
[  220.609486][ T5876] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[  220.673106][ T5876] usb 3-1: config 246 has no interface number 0
[  220.682062][   T30] audit: type=1400 audit(1773629395.258:294): avc:  denied  { read write } for  pid=6986 comm="syz.4.259" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  220.723225][ T5876] usb 3-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  220.781615][ T5876] usb 3-1: config 246 interface 166 has no altsetting 0
[  220.809912][   T30] audit: type=1400 audit(1773629395.258:295): avc:  denied  { open } for  pid=6986 comm="syz.4.259" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  220.851333][ T5876] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[  220.864002][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.896645][ T5876] usb 3-1: Product: syz
[  220.913131][ T5876] usb 3-1: Manufacturer: syz
[  220.922724][   T30] audit: type=1400 audit(1773629395.268:296): avc:  denied  { ioctl } for  pid=6986 comm="syz.4.259" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  220.964644][ T5876] usb 3-1: SerialNumber: syz
[  221.129185][   T30] audit: type=1400 audit(1773629395.268:297): avc:  denied  { ioctl } for  pid=6986 comm="syz.4.259" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  223.713121][ T5876] usb 3-1: Cannot retrieve CPort count: -71
[  223.796855][ T5876] usb 3-1: Cannot retrieve CPort count: -71
[  223.859567][ T6996] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.262'.
[  224.269491][ T5876] es2_ap_driver 3-1:246.166: probe with driver es2_ap_driver failed with error -71
[  224.764665][ T7005] netlink: 36 bytes leftover after parsing attributes in process `syz.4.264'.
[  224.851520][   T30] audit: type=1400 audit(1773629399.498:298): avc:  denied  { append } for  pid=6997 comm="syz.4.264" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  224.897814][ T5876] usb 3-1: USB disconnect, device number 8
[  226.089924][   T30] audit: type=1400 audit(1773629400.808:299): avc:  denied  { append } for  pid=7011 comm="syz.0.266" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  252.546811][ T1103] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  254.147260][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  254.164327][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  259.722204][ T5812] Bluetooth: hci5: command 0x0406 tx timeout
[  321.735781][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  321.747826][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  331.782984][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  331.789949][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P7012/1:b..l
[  331.798189][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=13697, q=679772 ncpus=2)
[  331.806162][    C1] task:syz.3.267       state:R  running task     stack:25416 pid:7012  tgid:7008  ppid:5807   task_flags:0x400140 flags:0x00080002
[  331.820435][    C1] Call Trace:
[  331.823717][    C1]  <TASK>
[  331.826643][    C1]  __schedule+0xfee/0x6120
[  331.831068][    C1]  ? find_held_lock+0x2b/0x80
[  331.835745][    C1]  ? __pfx___schedule+0x10/0x10
[  331.840597][    C1]  ? mark_held_locks+0x40/0x70
[  331.845390][    C1]  preempt_schedule_irq+0x50/0x90
[  331.850413][    C1]  irqentry_exit+0x17b/0x670
[  331.855005][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  331.860979][    C1] RIP: 0010:lock_acquire+0x5e/0x380
[  331.866172][    C1] Code: 05 7b eb 28 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 46 9c f4 0e 0f 82 c2 02 00 00 8b 35 2e d0 f4 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d eb 28 12 0f 85 02 03 00 00 48 83 c4
[  331.885780][    C1] RSP: 0018:ffffc90002ef6bd0 EFLAGS: 00000206
[  331.891848][    C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001
[  331.899813][    C1] RDX: 0000000000000000 RSI: ffffffff8de50b8b RDI: ffffffff8c1b06a0
[  331.907779][    C1] RBP: ffffffff8e7e76a0 R08: 00000000dacd92cc R09: 0000000000000007
[  331.915744][    C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002
[  331.923702][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  331.931674][    C1]  ? unwind_next_frame+0x3be/0x1ea0
[  331.936870][    C1]  ? unwind_next_frame+0x3be/0x1ea0
[  331.942082][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  331.948254][    C1]  unwind_next_frame+0xd1/0x1ea0
[  331.953191][    C1]  ? unwind_next_frame+0xbd/0x1ea0
[  331.958301][    C1]  ? get_page_from_freelist+0x111d/0x3140
[  331.964031][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  331.970196][    C1]  arch_stack_walk+0x94/0xf0
[  331.974808][    C1]  ? get_page_from_freelist+0x111d/0x3140
[  331.980535][    C1]  stack_trace_save+0x8e/0xc0
[  331.985209][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  331.990586][    C1]  save_stack+0x162/0x1e0
[  331.994915][    C1]  ? __pfx_save_stack+0x10/0x10
[  331.999763][    C1]  ? post_alloc_hook+0x153/0x170
[  332.004698][    C1]  ? get_page_from_freelist+0x111d/0x3140
[  332.010427][    C1]  ? __lock_acquire+0x4a5/0x2630
[  332.015366][    C1]  __set_page_owner+0x8c/0x540
[  332.020132][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  332.025502][    C1]  ? bad_range+0x261/0x400
[  332.029909][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  332.035115][    C1]  post_alloc_hook+0x153/0x170
[  332.039876][    C1]  get_page_from_freelist+0x111d/0x3140
[  332.045426][    C1]  ? __pfx___might_resched+0x10/0x10
[  332.050709][    C1]  ? prepare_alloc_pages+0x16d/0x5f0
[  332.056002][    C1]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[  332.061894][    C1]  ? rcu_is_watching+0x12/0xc0
[  332.066657][    C1]  ? __lock_acquire+0x4a5/0x2630
[  332.071600][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  332.077931][    C1]  ? do_raw_spin_lock+0x128/0x260
[  332.082950][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  332.088313][    C1]  ? find_held_lock+0x2b/0x80
[  332.092995][    C1]  ? __lock_acquire+0x4a5/0x2630
[  332.097921][    C1]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  332.103811][    C1]  ? policy_nodemask+0xed/0x4f0
[  332.108654][    C1]  alloc_pages_mpol+0x1fb/0x550
[  332.113498][    C1]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  332.118865][    C1]  ? __folio_batch_add_and_move+0x5e5/0xc60
[  332.124761][    C1]  folio_alloc_mpol_noprof+0x36/0x340
[  332.130129][    C1]  shmem_alloc_folio+0x135/0x160
[  332.135061][    C1]  shmem_alloc_and_add_folio+0x371/0xd40
[  332.140701][    C1]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  332.146856][    C1]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  332.152841][    C1]  shmem_get_folio_gfp+0x6ab/0x1900
[  332.158045][    C1]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  332.163678][    C1]  ? filemap_map_pages+0xe69/0x2020
[  332.168878][    C1]  shmem_fault+0x1f9/0xa20
[  332.173295][    C1]  ? __lock_acquire+0x4a5/0x2630
[  332.178222][    C1]  ? __pfx_shmem_fault+0x10/0x10
[  332.183164][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[  332.188628][    C1]  __do_fault+0x10d/0x550
[  332.192960][    C1]  do_fault+0xabb/0x1990
[  332.197196][    C1]  __handle_mm_fault+0x180f/0x2b60
[  332.202312][    C1]  ? __pfx___handle_mm_fault+0x10/0x10
[  332.207767][    C1]  ? pte_offset_map_lock+0x174/0x320
[  332.213055][    C1]  ? find_held_lock+0x2b/0x80
[  332.217737][    C1]  ? follow_page_pte+0x5b3/0x1400
[  332.222757][    C1]  handle_mm_fault+0x36d/0xa20
[  332.227529][    C1]  __get_user_pages+0xf9c/0x34d0
[  332.232468][    C1]  ? __pfx___get_user_pages+0x10/0x10
[  332.237837][    C1]  populate_vma_page_range+0x267/0x3f0
[  332.243293][    C1]  ? __pfx_populate_vma_page_range+0x10/0x10
[  332.249267][    C1]  ? __pfx_find_vma_intersection+0x10/0x10
[  332.255066][    C1]  ? do_mmap+0x93f/0x12f0
[  332.259396][    C1]  __mm_populate+0x107/0x3a0
[  332.263980][    C1]  ? __pfx___mm_populate+0x10/0x10
[  332.269085][    C1]  ? up_write+0x290/0x4f0
[  332.273419][    C1]  vm_mmap_pgoff+0x37f/0x470
[  332.278003][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  332.283117][    C1]  ? do_futex+0x192/0x350
[  332.287439][    C1]  ? __pfx_do_futex+0x10/0x10
[  332.292116][    C1]  ksys_mmap_pgoff+0xe1/0x650
[  332.296782][    C1]  ? __x64_sys_futex+0x34f/0x4d0
[  332.301706][    C1]  ? __x64_sys_futex+0x358/0x4d0
[  332.306634][    C1]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  332.311910][    C1]  ? xfd_validate_state+0x129/0x190
[  332.317119][    C1]  __x64_sys_mmap+0x125/0x190
[  332.321790][    C1]  do_syscall_64+0x106/0xf80
[  332.326376][    C1]  ? clear_bhb_loop+0x40/0x90
[  332.331049][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.336934][    C1] RIP: 0033:0x7fea1019c799
[  332.341340][    C1] RSP: 002b:00007fea10fac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  332.349746][    C1] RAX: ffffffffffffffda RBX: 00007fea10415fa0 RCX: 00007fea1019c799
[  332.357708][    C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[  332.365672][    C1] RBP: 00007fea10232c99 R08: ffffffffffffffff R09: 0000000000000000
[  332.373640][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  332.381606][    C1] R13: 00007fea10416038 R14: 00007fea10415fa0 R15: 00007ffd0ea1e028
[  332.389589][    C1]  </TASK>