last executing test programs:

5m13.230040603s ago: executing program 3 (id=357):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60000, 0x2000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x3c}}, 0x40800)

5m12.771546683s ago: executing program 3 (id=358):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x59455247, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4}})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x10002, 0x2, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000140)=0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000400000000000000bfa90db9929ef378b44c41fc066fedbc679599658ac557933b07784e04692b4c67f17257a4196f1c7edea8d6194255bd59cb58a4ecf44d581718af6d701edcea1b86", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x19f, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3, 0x0, 0x800000000}, 0x18)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
r8 = io_uring_setup(0x1de0, &(0x7f0000001040)={0x0, 0x0, 0x2, 0x1, 0x17})
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x1b, 0x20000048, r9)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r10 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r10, &(0x7f0000002700)=""/102392, 0x18ff8)
io_uring_enter(r5, 0x4c11, 0xe376, 0x4f, 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00'})
setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0)

5m12.179829127s ago: executing program 3 (id=360):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xa0040, 0x0)
ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmctl$IPC_RMID(r3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0xffe4}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8002, 0x3, 0x4c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, @void, @value, @void, @value}, 0x48)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x40140, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"})

5m11.634757611s ago: executing program 3 (id=363):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async)
mremap(&(0x7f0000fd8000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000fd9000/0x2000)=nil)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0) (async)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102357, 0xfffffffffffffcb9)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) (async)
setpgid(0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000003000000000000000000743900"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x20001000}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
chdir(&(0x7f00000001c0)='./bus\x00')
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

5m11.375447501s ago: executing program 3 (id=366):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}}, 0x24000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
semctl$IPC_SET(0x0, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
symlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000017c0)='./file0\x00')
rmdir(0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
getxattr(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)=@random={'os2.', '\x00'}, &(0x7f0000000200)=""/61, 0x3d)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xf)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r5=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}}}})
pread64(r2, 0x0, 0x0, 0xce2)
get_mempolicy(0x0, &(0x7f00000000c0), 0x970f, &(0x7f0000ffb000/0x3000)=nil, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000200)={0x7, @win={{0x8, 0x7, 0x6, 0x3}, 0x1, 0x5, 0x0, 0xffffffff, 0x0, 0xa9}})

5m9.609870165s ago: executing program 3 (id=372):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'})
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
bind$inet6(r3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$tty1(0xc, 0x4, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r8=>0x0})
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r2, &(0x7f00000001c0)={0x0, 0x3}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000140), 0x2)
socket$nl_route(0x10, 0x3, 0x0)

4m54.482193473s ago: executing program 32 (id=372):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'})
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
bind$inet6(r3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$tty1(0xc, 0x4, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r8=>0x0})
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r2, &(0x7f00000001c0)={0x0, 0x3}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000140), 0x2)
socket$nl_route(0x10, 0x3, 0x0)

3m41.887215224s ago: executing program 4 (id=741):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000))
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, &(0x7f00000002c0))
syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002)
syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00')
syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0xfffe, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x68, 0x1, 0x0, 0x73, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
read$FUSE(r3, &(0x7f00000066c0)={0x2020}, 0x2044)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f005, 0x2})

3m39.631499052s ago: executing program 0 (id=753):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TCSBRK(r1, 0x5409, 0x5)
sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x30}}, 0x4851)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r5 = io_uring_setup(0x1de0, &(0x7f0000001040)={0x0, 0xfffffffd, 0x400, 0x83, 0x357, 0x0, r2})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x1b, 0x20000048, r6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r7 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
io_uring_enter(r2, 0x4c11, 0xe376, 0x4f, 0x0, 0x0)

3m39.028090377s ago: executing program 5 (id=756):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}}, 0x24000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
semctl$IPC_SET(0x0, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
symlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000017c0)='./file0\x00')
rmdir(&(0x7f0000000000)='./file0/file0\x00')
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
getxattr(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)=@random={'os2.', '\x00'}, &(0x7f0000000200)=""/61, 0x3d)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xf)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}}}})
pread64(r2, 0x0, 0x0, 0xce2)
get_mempolicy(0x0, &(0x7f00000000c0), 0x970f, &(0x7f0000ffb000/0x3000)=nil, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000200)={0x7, @win={{0x8, 0x7, 0x6, 0x3}, 0x1, 0x5, 0x0, 0xffffffff, 0x0, 0xa9}})

3m38.249647209s ago: executing program 0 (id=758):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x4000, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

3m37.49244706s ago: executing program 2 (id=759):
remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r2, 0x0, 0x1ff60990c0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r1, 0x0, 0x1) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5, 0x25, 0x0, @val=@netfilter}, 0x40) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

3m37.399540284s ago: executing program 0 (id=760):
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x16c)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x1f, 0xfffffffd, 0x21b028b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x8001, 0x0, r3, r4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x2000)

3m37.289996232s ago: executing program 4 (id=762):
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="736563757269d5922e5e00"])
syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[], 0x0)

3m37.260771177s ago: executing program 2 (id=763):
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f00000000c0))
recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1, 0x0, 0x0, 0x407006}, 0x0)
syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x5c)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff6d12020002004788", 0xc, 0x0, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/48, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc780000000000000000000000005001900000000002800"], 0x120}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})

3m37.251235676s ago: executing program 0 (id=764):
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f00000000c0))
recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1, 0x0, 0x0, 0x407006}, 0x0)
syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x5c)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff6d12020002004788", 0xc, 0x0, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="20010000120013070000000000000000e000000100"/32, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc780000000000000000000000005001900000000002800"], 0x120}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})

3m36.942119509s ago: executing program 1 (id=766):
socket$inet6(0xa, 0x200000000003, 0x87)
r0 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x1e)
socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce)
syz_open_dev$sndctrl(&(0x7f0000000140), 0xfffffffffffff6cf, 0x177201)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000100001040400"/20, @ANYRES32=0x0, @ANYBLOB="00040000000000002400128009000100626f6e64000000001400028008001c0003000000080003000900000008000300", @ANYRES32=0x0], 0x4c}, 0x1, 0x8}, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f0000000440)=@ethtool_coalesce={0xe, 0x1, 0x7, 0xed1d, 0x9, 0xc9, 0x0, 0x9, 0x2, 0xebe, 0x3, 0xf252, 0x8, 0x1, 0x4, 0x8, 0xfffffff9, 0x9, 0x1, 0x9, 0x2, 0x5}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x400, 0x1, 0x4, 0x0, 0x20})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001200375f42bd7000f9ffffff07000000", @ANYRES32=0x0], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x880)
syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb81003d0086dd60000000000889009e010000000000000000000000400000fe80000000000000"], 0x0)
connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x59, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e20, 0xfff, @empty, 0x2}], 0x68)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
close(r3)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x400)
mount$9p_fd(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000440), 0x1000000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@dfltuid}, {@posixacl}, {@access_client}, {@access_client}, {@version_9p2000}], [{@subj_type={'subj_type', 0x3d, '\xbb\xbb\xbb\xbb\xbb\xbb'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_measure}, {@fsname}, {@dont_measure}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@permit_directio}, {@fsname}]}})

3m36.094632301s ago: executing program 1 (id=767):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0)
mkdir(&(0x7f0000000580)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000100), 0x4000000, &(0x7f0000000000)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f})

3m35.944290523s ago: executing program 5 (id=768):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x43)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000040)=0x1e)
ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r8, <r9=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000280)={0x20, r9, &(0x7f0000000340)=[{0x1000000, 0x1}], 0xdeadbeef, 0x8, 0x1})

3m35.818540975s ago: executing program 1 (id=769):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x37)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r4, @ANYRESDEC], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x8000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)

3m35.066591235s ago: executing program 2 (id=770):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082", 0x21}], 0x2}}], 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f000fff0004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

3m35.032626078s ago: executing program 1 (id=771):
fsopen(0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x37, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0)
setsockopt$inet_tcp_int(r5, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
shutdown(r0, 0x1)
r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0xfffffff7, 0x5, 0x2b7], [0x1, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]})
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)

3m34.955680807s ago: executing program 5 (id=772):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x0, 0x0, 0x0, 0xa18, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000001200002800000028000000020000000100000000000001e5ff0000100000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

3m34.683501787s ago: executing program 5 (id=773):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000))
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, &(0x7f00000002c0))
syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002)
syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00')
syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0xfffe, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x68, 0x1, 0x0, 0x73, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
read$FUSE(r3, &(0x7f00000066c0)={0x2020}, 0x2044)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f005, 0x2})

3m34.109028284s ago: executing program 4 (id=774):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x43)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000040)=0x1e)
ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r8, <r9=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000280)={0x20, r9, &(0x7f0000000340)=[{0x1000000, 0x1}], 0xdeadbeef, 0x8, 0x1})

3m33.774276202s ago: executing program 2 (id=775):
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008580)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="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", 0x1000}], 0x2, &(0x7f0000002a40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120, 0x24000800}}, {{&(0x7f0000002b80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000580), 0x0, &(0x7f0000004d00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000004dc0)="94a90668b94bea3bb8ebabc877ab28ccfe27f360133354779c9892621ba689be8a4ad387ce50e4342767ba4a8736cc6fdd85938b9fe9149c3486c689fc437bbdffc192a1aaf63fbb8b48b77cd771", 0x4e}, {&(0x7f0000004e40)="b85063b09845fcdae0a3204c0093832e0d5c16e4710645644cf7f1696e346f11dac32edcdcea39c9f2b27fac9b8cdec507b759f03e412bad7bfb4729c25c53bbc1a0f022852bac6f76846b", 0x4b}, {&(0x7f0000004ec0)="7c7adc4c14d55538d6d1caf64cd8b86e04b3e2593ae38b37c7be3db7bc1aeb1932869495d9827d73b0558d0aa41351fb806e93b31b0e46a6cbe9f0", 0x3b}, {&(0x7f0000004f00)="d66df0ad88af8041626dab45aa1073c09444e7f1473857a67b390b0d162fd42df077260ee6c476a96b1810432e9ab69f3c0caeea37e18b154990e86ed89cdbfa698c921f778f269ef5eefe097d7176bb6f9f3b503fc161a34c33c5a4b5bc3ef24cc7ac97b809ad4cba573e913916caec9dc0f96e42a8fb93278c5d73fd0023efd5dcf14100ea5834682c777081c00344d2dd9708f12bd166410818e09c23fabac4ba98cb1e324c1b6c505b197b8aee9392eedf45db933e4d5215d338395e3508bf74", 0xc2}, {&(0x7f0000005000)}, {&(0x7f0000005040)="67eeae2c17aa9d04385d69bdc91b0ca793d249d456c5098ac83b4139b56e05e6c55297a0670539a3f07a02fe8a3b15e316f9131466fe56b5099afa1bf950e4f806a98a0ad3f06ef2a56a708884696e270edec4c74f5d", 0x56}, {&(0x7f00000050c0)="e8dad169d6eea5cf7a414e3e0c34bc14f8", 0x11}], 0x7, 0x0, 0x0, 0x24040810}}, {{&(0x7f0000005180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000006200)=[{&(0x7f0000005200)="4578a78dfe71bd4ce2166dc30c1f567dd2449f775894f1f6e0fcf4363025faf21203e16bec54a375aa62477e6344481ec678ce17a2da183561fe8c88dfc80f03e3dca9ce9167e2dc78fa224b75307f9be6aa318733971e5ea9d1362f0884e2e00586310e4feda0d77c3e348d0ea01cefb535a734ffc0cbe4eb505b9c63c98fcf37f69d98bb8c761ae0ff7daed83696cc482f77be384c1bfde34ae1d1fe1b8a53e6b1d530ce3f09b5e32c542541a78e0fad2819115c55bbbce9726923b318018f3eaf472d22e44dd4993fc45fe4b08fbd9c35b16d169cbc2aa3b979dd96387e05fa2720d6477fe7d3115690f70e1999158187d5f84766949f036e53760db151accae3c69af033050bf4e5f674967db2739c050dec75efb8f5a48991a6cf19368652ff35169e677bb56d89680d47745495a9b23fee19d78c8500bfacd766d21ce4fac0e15baac252a85c00f37a86e846817a9e4b4909e1a7a43d1c4656101ae53cdad9f6f833cb4f270cf68c8d6e9abef9abf124f108be2f48d31066c0ea819e1d12a50b832541c0b63d20b88713d44b4fd37cc97a2fc37da1ec464185c6b9d2b9c602f33157036a4d4afeb6312c189715417943c30f141b9df3317f69f97ae0ec45b6e78d24f0dd5a7f40da58d2df30ab2c42e8a597e0ae68e040d296a9b80755c726fdecaf50512b308a7ecc74379f833f9e179ad8450923e9f56c8a0a237f986c369070f3625fe583fb74fc001884421abc89300a78b76e7a1bf3d4395dcd0f6c9b17f5c646598fe449580be81d5842ba0f132d6adb9f4fc8f1e72c195251c719a77937ef05bfeb91d0017338020d3dd426c067d70636f63b63eb2b82ea118bfa212c49bbc62e89baaae053756798b78179514f8c24c12f24002cbcb3688dd0fd8c5c1146ab34daaa1a8fca0432a06495e1bcae5d3e7722b4c9a8975023d72e2b7d4a5ae212a0f69c0e92b7b54655b963f78a27c87562131f802dbfb60ff89c9b738793b1b0ec98db28be8d0a15699621edeae74df0d4c9abdadc3d2261af67a1cadba3310dfa8e685defaacd40854f843fe53539ca4d3475125b7ce8fe8a853514cfe6dae2fbed4f3d1aae3198322dc18548edc6ae1e4857ec1f271501a8c3f262eaab15584c50ae3f7bd885c81b69441d092d918371fd485e26ef446623526adae55aac51afb1a558e8f545b368d34eefa0c09e84a4c359e4470f2589aed7219ac1b19bdd122bdb32d781a9345dad91070ea23974bcd2134b51af6dabeeeab7b790f0b608da2fb98c0e733007fd37823d7a76e9d230349956f1f59c21179a25763c6670afe6d322a8442f8097a551cd77c7533b89b7de13e364a3d19a832f935af0bdf2189d6f09ab0e9b5a7408a38dc0648f51e0f8bfa942e8a80fa8327c3b2d7010290ea711e96362f0126db182e46a450b66aeafe7d5a9e2b564a0fa4b5278703d39a31897332c4388947f13ccff78d8dffaf680ef1ecea71328128578e4a9126ddda4099d883145f10645add406da07818cc3c02c9180d525908c1de290420ab87de3afa187c62a9b26e4ea62f18175bea0b67598a612e2f218c54cd40adf5f9323fd6927bfcde14728aaccc993aacacc29534c8d46cf0710df7643c948a8fdd4e89203a01c6c5739cdc5eea8f9cae5facb5657a220a1b827c682cf17defc746a7ba9bdc2059bca2af8a95febc1e6de146da6a622360dd4c61991229f73fac1831a69137189f436da0b6a5205a9e5aa7ce1b448c2703668c104e7450530ead2ab3b86baa3d9380ceddbaf0dc85ef8dbce4fa0305cda92fbb314e99bdd002ec4271d07a54bf5676198fcb95a5e43dca039b39cb7381860ecfa978d1baf3f870b898fe68e5c17dd5cb12992a8a765ce915f5eb26db478656f6752b5ad4e9ee17d388e8751298a812aa36615dca22175784382cb1724b3e343129ab16a1f76c0674fa19ca4c4d5c1c1148b4bf30d5953cd25424246c114def5f649d06dbe2b7d56df2476a4faccc2a78cd9fbdf88e751d68e585a904bfe435b9ca0f0185883df25924c7b07fdfb0896feda2e561d067ebd12ee1f6c16a74dabf0b4a7808086829779f27fd182540d8f7dfb763fb4a6819cfaf7d63c26bddba3a386f95409bc3ad56084bce3014e7eaa99c9021ec842ab60bb7d6bbb54facb2da80ff249323e9b5e4b7e357353051fc17b4ab93b6954c78200b1d5e5b82e5a0b33337fe8edb8339a9252500bc1e326fc466fa031a970a3165d6a88a6379e00856b5a5c0fe3d4d6dfba6d06c35718db5581d4043891b8e3ece4e63e6e26d36c368f4360612f1b92b3b2e79b634a51f76cd892ae7d69974fa06246218bc3927dd4ea2611c4d7b66bc0abc94bdfcef359d0fb3cf6a5739832fee3a2e5a3357aa1e83819f7de70cbf209547107fc181228de82808a5309daf89dc648c113ae10defbafc4270260fd6511e01058462ce48894d49a8070142b504ec1cc3e0c18515c1d6ff33e40875ca356848dfb7758931514716874a24ed4a135a1b6db5e03a207a5701b9819fcc4b716db653b2ec0f0c5f526526ede0a191cb0ccf12458a961d9e5da0d6d58af63154b9d6ac5466eac6534179d858492d362b07c479a137cf74be7002db5a56193424f52e3252b8070aaed611a67246edbafa52e5a9e629eea138f696b70e138bf7d0b0aeb8c89648e340532489dbea50cbbcc664f9ed37bab3ef20365ad5ebcf0a3d82f49d47ea3a0ee2efd7cceb829a648cb1f5d3700583462c123b1e9444455156a8d6af40e2db7a5444e4ef69900e544368c20892caffb563b7933eaa9caca41483e62ed86e96fd1f287fbb7345bb3ca8b542256195b0bda7fdea5073e9b92823072377039d8dbf9e8f76bd3c728d93332afdf1d47759beeb1b56180cd252dfa33821cbed85a0c3906809e72b61f7b81ca04fad252d50e9cb5a9cdd3ef648db096a34cc3a6adb6f056e0514c21fe30ff104273a6ec04495008ba10f28e41cca8c334382a9b61faa2e4b1024c7ee80cf3feccbe9e7a264b9e53fd54649a630a3afa2364cdf167bdab8eda23a7d93500427dbddfd144b8be996738b2318b77d8a64e1eb75b60b7a2a78462a39656ce60070142b8ef0c1ca3265a895a8cb28d0085023925218f19348ae49527e97afd2841fa51cbd81ae199ed3488aeb025b59399f61d2883d47ea7682ecd27b05441196aa48e60eeb0196643bb1898bf8eebc7747654a002250cb5dbd6bbd44b7bd6ce9065d357daa6b47ac33202ee4943921ae387a3b7db35599e7a70323fb58aa71ecbc07c442f6ce93807e9caa7a0d2b3858d62da5d41fe365da2714f2a3ee71bb5db7262e259dcf809d460491f92d47ea287849e3debff7f1a5ec1712fb24062e302497a10972e3e69a01200491c49429f22cf6308ec5f6beb41c4a66c326fb380ba07ec48bc775240a3869c477b563c4b4bdfe8822640f11df3b104bd37c35eda882295b8cad758038aa8b21749f8ea11af59e468e46f7cc7918775f07efa8d3da5b45cd788c0792cc3f4500508223a7b334be5de553ca8169e207d256d55327160ff45bcfbff7fbc9a6b947b856c44e4f19aed63de915008954138e651e934339294d38ca15b596f76fe87a5198fd0ec391ecfc766075d5abf1281f8884a29d75070a82de38b31b0daf3a41ce97f55e966092369ca18dcba2a8fe481dcfc867e10e18431769d0911dc81175768d9799ee54ea9d31b32b7f2f1cccb1de7baadb2d43663bb85609a6dcb1423f2fcd86e5c16846639e9f13b786f20b172ff3bc4c46a27ca355ac16d07a1eb92795c97fd64165e53b0ef6a2e439684d7e8697a873b5b8e538f6e2b8a4226adc1f74b7890079ebd5bc0542cd1fae83babff953105de107c1883e20aba1a1b8edcda8be104c838c9182ac9ef7e24bb9d17f7df3d237cf9f02bb7220dfb427dd7d3aeb1e42ed9bf7eb6a11cb3a12741fc0f2bd254cd4ce63452dc70fb3577621e9bc499dee9ba36cbb9f51bba8fe4540c25712017b712e68be9a8e248a14b8f47c0321e3dddc2cd6e982b01623299dea71a54712a98c08df56a121ae37f1f764327a410c8c3fbf4648187568352e5e7985662d33fa80a03b9a6837ad0ac7b25f4ba15607ad5913a78ed3ef1dfff14defd54d97da3f63a1d93c895a5d22a43613ac85245b3c0522644840b34911f1079f115d060774cd8d67940ac8ce87303a4e0a46abce81c0ec0f9cc3e8eed45e90398dd7438ae5b925118cef2ef9395710ce984c748d8d128ad748404e34df6fcdfc1fa0e493e61bfcf2411d5a11c3021ab57e4924d1b896e5be17251f7142beef382940a7210bfb6fb5437817875b62bd0f3145923bc667ca6ca9c364becc2c6ffd70f1abe261b8f6f92a341b594e652d8a4112d945a93eb5ecc693ee58a5e406c0c6d2e8750ae3dc2132a942a801ecd057323a0c1b50f895b7a5848a36aec1461ae2a788d45fc568fc8f122e2b0f2c8e46e3d70f1a42ce128d3800c8bd82a6c8da7ec425f8a512601e2a5d1c9238fd908821a3d58d28c5d4441fd93ae828d55d246bca54ecc31d033ab76fba93ea2fb9290497eaada153226804c5cde44db65cf6ffe8c256a9af04423b5519f285a11fd278ad94da60b7216b751b8e42a0b0592be5b84020d9d3b5077aadfc6515597e8713a56a646a3781d23d5013fcf5fc7a683404e0cd457e4fcaf70e07c8156519bb579e08302175d7457158cad4a6f9e667bf2aa8b289a76f9be4e7f410607dd55dbb19afcc3ef535887bc6d3133b9a2efef9cf16bb7d78cdc89838c4ce0cddc173fbb1f13b5296ebc78b44747cca85fc9159ef5f58f02f5bead56c943d9e24e33fd72c35777ff322248be0cdc719447d509e05d88a9b7136d127b62552c23bab44ed90a7f3c4c1f94990da733fcbd6d8123d78b68f0921a52ae5317772da10398faebcc6e12c72635b533cd7efb238994e8f21cbd52e519ebcd03c62c8bbf005989855e06fafbd4693262a7309e3d390f5100077d43e12906df4cf78b0e6d6d405b10a137c35fc480d483de70e561ce89fd419bcef21f79f15ecf61e9b3d204a84bedfc3629e317dec9edffcec16a5ae9782ab18fdf9468764349041f43bc7c87eb423b835c5048eb7ec232cd3703e79e4feafbd95e83bf786a5d5e8a625564fad481ea0cf425336e4fdb7ba077cec15fac4a2d2fd26c25c3f4f92dbdfef77853de6fc1b15b0ba8c05be4a1b6059fe126421830ea72066ec5c68a73a1c3c46debe73774b81b9415dfd65160edb46d8fc6217c605b2e7a0e32be2d382851c9c2e1a4c39841787aee94abf6f782634203b1c27278126a6856ef26d8157e71c407f7d158e4c1e9340dec6cd98f9e57f74ca746cbe4e95820fcb60e032ccabf7845bb298f59da0aa0256a0372fb7918633fb3fc005e6d69949370f6d02c1c12e1f45fd27bec75e42546f93dbaaea5c418a173a6d71267d019283b931a8c2728d26882745277589a52ab1fc8fb2d2e2b484e3ae36f45492098a0bf955d888322cfeb58d9a690427cd6a0e24d6b9d2dea2afce83a228ebf64d922e2df3057fcf7c96a76d88ccd304730e17cd880a7772d9c5ef34689faea4cd205660fda26a8bee3f4bcd8dc14f4d9c65ff68234bca75a66b35c88d8a32b8fa8719f63629d40bb9084cf82418f16859d3687e7067505d0b193d87f99b928446d389bea7439d064b275012385caf0119d8b9fad33b58712b89911d82ee08e78fca12067cf2fbcc211ab9a81504b213577b496c3b63729872df96893b5f7496d24f3d3be1ae9281b1bfb399fc86e71358f", 0x1000}], 0x1, &(0x7f0000006240)=[@cred={{0x1c}}], 0x20, 0x10800}}, {{&(0x7f0000006280)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000006540)=[{&(0x7f0000006300)="f159e89a74758262f5c7ffb2ae545000eed247d53759b8a27bb8ebcfdefe196751b3e3a18a1badc5b0a624c6dca0ea33aa244936820c573b94bd832841a85eaba58244a6d4b67277993ec954e0be1ffdbf6088de72e49851c316c07ade03140f7cf03019b0716283aa602a8114c373fd49047247404b1534ec2e93808c2a3f7045d8b819546f3cf78063512921d4784b7fa480494ce7fb238edc7871c8bde32952d8cd17e1ac7a9b44aa73c4fcde88f34a0e9e2c2cf76fc35bb89ec9b69c4d6b1fcdbeac18dad9d98b7ff021b941c0ec4893463437b0237368ea7ded8da33e31b16cb8f6dd", 0xe5}, {&(0x7f0000006400)}, {&(0x7f0000006440)="5ecb050aa2ab1d0b48db56da5c5f2f5bfd673a9f9fdc4c85aaa9f20f9d3c550e466f90df4fd9512b6486ea59a8a8ef05b961541868a161791fe89e29d1cab74c065c0627eccfd3273518e3b6ff70d06e1ff30bcb3382e407b97ccb2defdc5353e0b1c4cb2d96fd5bea36173248187b8c34f10ea849f9a79baa6d31487173a5f6f0d2dbfade79f3c9bde7e0b892642739ab28", 0x92}, {&(0x7f0000006500)="5b3d4bfb422b97e839523d6ea634e823", 0x10}], 0x4, &(0x7f0000002940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0, 0x20000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8, 0x40}}], 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m32.461769106s ago: executing program 4 (id=776):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=ANY=[@ANYBLOB="1c0000001400010000000000fbdbdf258120"], 0x44}}, 0x0)

3m32.407673741s ago: executing program 1 (id=777):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x0, 0x1, 0xfffffffd}}]}}}]}, 0x60}, 0x1, 0x0, 0x1000000}, 0x0)

3m32.375185572s ago: executing program 5 (id=778):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}}, 0x24000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
semctl$IPC_SET(0x0, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
symlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000017c0)='./file0\x00')
rmdir(&(0x7f0000000000)='./file0/file0\x00')
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
getxattr(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)=@random={'os2.', '\x00'}, &(0x7f0000000200)=""/61, 0x3d)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xf)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}}}})
pread64(r2, 0x0, 0x0, 0xce2)
get_mempolicy(0x0, &(0x7f00000000c0), 0x970f, &(0x7f0000ffb000/0x3000)=nil, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000200)={0x7, @win={{0x8, 0x7, 0x6, 0x3}, 0x1, 0x5, 0x0, 0xffffffff, 0x0, 0xa9}})

3m32.285968339s ago: executing program 1 (id=779):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x1000000, 0x0, 0x0}, 0xc040855)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
write(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = socket$inet(0x2, 0x1, 0x0)
sendmmsg$inet(r1, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840)
pipe2(0x0, 0x0)
shutdown(r1, 0x1)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRESDEC=r2, @ANYBLOB="33d9947c79311f83"], 0x18}, 0x1, 0x0, 0x0, 0x24000040}, 0x8044)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000002100)=0x1)
ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x7fff, 0x98003)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000940)={0x2020}, 0x2020)

3m32.239543073s ago: executing program 4 (id=780):
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db0000000700"}, 0xd8)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a4ff0f040000247864b13fd20200"}]}}}}}}}, 0x0)
semget$private(0x0, 0x1, 0x5e4)
r4 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x2b, &(0x7f0000002640), 0x42)
socket$packet(0x11, 0x2, 0x300)
sendmsg$kcm(r4, &(0x7f0000000840)={&(0x7f0000000080)=@phonet={0x23, 0xd, 0x1, 0x4}, 0x80, 0x0}, 0xc4140)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x108}}, 0x0)
close(0xffffffffffffffff)
socket$tipc(0x1e, 0x4, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000005c0)=ANY=[])
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x2})

3m32.223321978s ago: executing program 2 (id=781):
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f00000000c0))
recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1, 0x0, 0x0, 0x407006}, 0x0)
syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x5c)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff6d12020002004788", 0xc, 0x0, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/48, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc780000000000000000000000005001900000000002800"], 0x120}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})

3m29.109588878s ago: executing program 0 (id=782):
r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x101, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89a2, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"})
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01001800fddf000200000c0000000c000000020000000000000000000005400000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r7, 0x0, 0xfffffffffffffffe}, 0x10)
pipe2(&(0x7f0000001cc0), 0x800)

3m28.899324636s ago: executing program 4 (id=783):
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120110012b95d908e204121410ca0102030109022e000102faa0bf09040008020806620009050a100800f80703072501800107000324df"], 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/llc/core\x00') (async, rerun: 32)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x7) (async)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000240), 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async, rerun: 32)
openat(0xffffffffffffffff, 0x0, 0x401c2, 0x102) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[@ANYBLOB='dyn']) (async, rerun: 64)
chdir(&(0x7f0000000200)='./file0\x00') (async, rerun: 64)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000140))

3m26.279270309s ago: executing program 0 (id=784):
socketpair(0x18, 0x20000000000001, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r2 = accept(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r2, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x1000000)

3m22.017868587s ago: executing program 2 (id=785):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

3m20.176563914s ago: executing program 5 (id=786):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x1f)

3m4.240614129s ago: executing program 33 (id=779):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x1000000, 0x0, 0x0}, 0xc040855)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
write(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = socket$inet(0x2, 0x1, 0x0)
sendmmsg$inet(r1, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840)
pipe2(0x0, 0x0)
shutdown(r1, 0x1)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRESDEC=r2, @ANYBLOB="33d9947c79311f83"], 0x18}, 0x1, 0x0, 0x0, 0x24000040}, 0x8044)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000002100)=0x1)
ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x7fff, 0x98003)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000940)={0x2020}, 0x2020)

1m35.873621476s ago: executing program 34 (id=784):
socketpair(0x18, 0x20000000000001, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r2 = accept(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r2, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x1000000)

0s ago: executing program 35 (id=785):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

kernel console output (not intermixed with test programs):

ermissive=1
[  112.368309][   T29] audit: type=1400 audit(1740992578.887:334): avc:  denied  { unmount } for  pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  112.790207][ T5868] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  113.072706][ T5868] usb 5-1: Using ep0 maxpacket: 16
[  113.091838][ T5868] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  113.101428][ T5868] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.124272][ T5868] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.163396][ T5868] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  113.192853][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.212339][ T5868] usb 5-1: Product: syz
[  113.222961][ T5868] usb 5-1: Manufacturer: syz
[  113.227577][ T5868] usb 5-1: SerialNumber: syz
[  114.189739][ T6553] syz.0.167 (6553) used greatest stack depth: 21120 bytes left
[  114.408134][ T5868] usb 5-1: 0:2 : does not exist
[  115.898543][ T5868] usb 5-1: USB disconnect, device number 2
[  116.434730][   T29] audit: type=1400 audit(1740992582.707:335): avc:  denied  { setopt } for  pid=6576 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  117.678733][   T29] audit: type=1400 audit(1740992583.067:336): avc:  denied  { setopt } for  pid=6578 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  117.698047][    C1] vkms_vblank_simulate: vblank timer overrun
[  117.945797][ T6582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.176'.
[  118.378657][   T29] audit: type=1400 audit(1740992583.077:337): avc:  denied  { wake_alarm } for  pid=6578 comm="syz.1.175" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  118.399587][    C1] vkms_vblank_simulate: vblank timer overrun
[  118.411886][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  118.502749][ T5927] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  118.786993][ T6597] geneve2: entered promiscuous mode
[  118.802489][ T6597] geneve2: entered allmulticast mode
[  118.852792][ T5927] usb 2-1: Using ep0 maxpacket: 32
[  119.411785][ T5927] usb 2-1: device descriptor read/all, error -71
[  120.091068][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[  120.137963][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[  120.587273][ T6625] trusted_key: syz.4.189 sent an empty control message without MSG_MORE.
[  121.592271][ T6635] fuse: Bad value for 'fd'
[  122.049884][   T29] audit: type=1400 audit(1740992588.567:338): avc:  denied  { write } for  pid=6634 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  122.114989][   T29] audit: type=1400 audit(1740992588.597:339): avc:  denied  { create } for  pid=6634 comm="syz.3.192" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  122.141883][   T29] audit: type=1400 audit(1740992588.637:340): avc:  denied  { unlink } for  pid=5829 comm="syz-executor" name="file0" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  124.032990][ T6666] 9pnet_fd: p9_fd_create_tcp (6666): problem connecting socket to 127.0.0.1
[  124.493142][   T29] audit: type=1400 audit(1740992590.997:341): avc:  denied  { create } for  pid=6673 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  124.564903][   T29] audit: type=1400 audit(1740992590.997:342): avc:  denied  { connect } for  pid=6673 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  124.687239][   T29] audit: type=1400 audit(1740992590.997:343): avc:  denied  { setopt } for  pid=6673 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  124.711826][   T29] audit: type=1400 audit(1740992591.207:344): avc:  denied  { mount } for  pid=6672 comm="syz.1.203" name="/" dev="pstore" ino=3428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  124.799154][ T6682] tls_set_device_offload_rx: netdev not found
[  124.864182][ T6683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=6683 comm=syz.2.205
[  124.893012][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'.
[  125.142635][   T29] audit: type=1400 audit(1740992591.227:345): avc:  denied  { append } for  pid=6672 comm="syz.1.203" name="sg0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  125.964701][ T5927] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  126.094058][   T29] audit: type=1400 audit(1740992592.497:346): avc:  denied  { write } for  pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  126.117279][   T29] audit: type=1400 audit(1740992592.497:347): avc:  denied  { remove_name } for  pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  127.237460][ T5927] usb 2-1: Using ep0 maxpacket: 16
[  127.246307][ T5927] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  127.255574][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.264050][ T5927] usb 2-1: Product: syz
[  127.268284][ T5927] usb 2-1: Manufacturer: syz
[  127.273416][ T5927] usb 2-1: SerialNumber: syz
[  127.302873][ T5927] usb 2-1: config 0 descriptor??
[  127.319305][ T5927] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  127.347234][ T5927] usb 2-1: Detected FT-X
[  127.355494][ T6719] fuse: Unknown parameter 'groÿ'
[  127.532404][ T5927] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  127.577239][ T5927] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  127.603758][ T5927] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  127.637523][ T5927] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  127.803021][ T5927] usb 2-1: USB disconnect, device number 5
[  127.862902][ T5927] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  127.889617][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  127.889631][   T29] audit: type=1400 audit(1740992594.407:352): avc:  denied  { sys_module } for  pid=6722 comm="syz.2.215" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  127.927927][ T5927] ftdi_sio 2-1:0.0: device disconnected
[  128.481230][ T6735] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  129.372192][ T6747] 9pnet_fd: Insufficient options for proto=fd
[  129.500924][   T29] audit: type=1400 audit(1740992596.017:353): avc:  denied  { bind } for  pid=6749 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  129.524770][ T6750] fuse: Invalid rootmode
[  129.580835][   T29] audit: type=1400 audit(1740992596.017:354): avc:  denied  { name_bind } for  pid=6749 comm="syz.4.222" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  129.666693][   T29] audit: type=1400 audit(1740992596.017:355): avc:  denied  { node_bind } for  pid=6749 comm="syz.4.222" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  129.706358][ T6756] xt_hashlimit: max too large, truncated to 1048576
[  130.695012][   T29] audit: type=1400 audit(1740992596.077:356): avc:  denied  { write } for  pid=6749 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  131.752774][    T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  132.784296][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  132.790611][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  133.701694][    T8] usb 4-1: device descriptor read/all, error -71
[  134.897646][   T29] audit: type=1400 audit(1740992601.417:357): avc:  denied  { create } for  pid=6822 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  134.932402][   T29] audit: type=1400 audit(1740992601.447:358): avc:  denied  { setopt } for  pid=6822 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  134.955642][   T29] audit: type=1400 audit(1740992601.447:359): avc:  denied  { bind } for  pid=6822 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  135.048052][   T29] audit: type=1400 audit(1740992601.447:360): avc:  denied  { getopt } for  pid=6822 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  136.656765][   T29] audit: type=1400 audit(1740992603.177:361): avc:  denied  { getopt } for  pid=6843 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  136.867841][   T29] audit: type=1400 audit(1740992603.317:362): avc:  denied  { create } for  pid=6841 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  136.932313][   T29] audit: type=1326 audit(1740992603.447:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.0.244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb414d8d169 code=0x0
[  137.312769][ T5822] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  137.944664][ T5822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.967231][ T5822] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  137.985701][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.019495][ T5822] usb 3-1: config 0 descriptor??
[  138.322928][   T29] audit: type=1400 audit(1740992604.837:364): avc:  denied  { shutdown } for  pid=6865 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  138.354647][ T5822] usb 3-1: USB disconnect, device number 5
[  139.142582][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.632986][    T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  139.813596][    T8] usb 3-1: Using ep0 maxpacket: 8
[  139.829267][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.846232][    T8] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  139.857450][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.876509][    T8] usb 3-1: config 0 descriptor??
[  139.889739][    T8] gspca_main: vc032x-2.14.0 probing 046d:0892
[  139.902780][ T5822] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  139.933744][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'.
[  140.072846][ T5822] usb 1-1: device descriptor read/64, error -71
[  140.088136][   T29] audit: type=1800 audit(1740992606.607:365): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.250" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  140.352822][ T5822] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  140.402888][    T8] gspca_vc032x: reg_r err -110
[  140.415967][    T8] vc032x 3-1:0.0: probe with driver vc032x failed with error -110
[  140.522794][ T5822] usb 1-1: device descriptor read/64, error -71
[  140.637697][ T5822] usb usb1-port1: attempt power cycle
[  141.302741][ T5822] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  141.366414][   T29] audit: type=1400 audit(1740992607.877:366): avc:  denied  { create } for  pid=6899 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  141.437826][   T29] audit: type=1400 audit(1740992607.877:367): avc:  denied  { write } for  pid=6899 comm="syz.1.259" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  141.616861][   T29] audit: type=1400 audit(1740992607.997:368): avc:  denied  { create } for  pid=6905 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  141.644798][ T5822] usb 1-1: device descriptor read/8, error -71
[  141.728843][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'.
[  141.739857][ T6912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.262'.
[  141.753333][ T6912] tmpfs: Unknown parameter 'usrquotalo'
[  142.042100][ T5822] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  142.182271][ T5822] usb 1-1: device descriptor read/8, error -71
[  142.303508][ T5822] usb usb1-port1: unable to enumerate USB device
[  142.767207][   T29] audit: type=1400 audit(1740992609.287:369): avc:  denied  { create } for  pid=6928 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  143.403735][ T6940] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  144.020485][   T25] usb 3-1: USB disconnect, device number 6
[  144.186983][   T29] audit: type=1400 audit(1740992610.707:370): avc:  denied  { listen } for  pid=6943 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  144.522744][ T5927] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  144.583795][   T29] audit: type=1400 audit(1740992611.087:371): avc:  denied  { write } for  pid=6946 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  144.627464][   T29] audit: type=1400 audit(1740992611.127:372): avc:  denied  { watch watch_reads } for  pid=6951 comm="syz.2.273" path="/55" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  144.650054][    C0] vkms_vblank_simulate: vblank timer overrun
[  144.692897][ T5927] usb 1-1: Using ep0 maxpacket: 8
[  144.722823][ T5927] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  144.771053][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.837402][ T5927] usb 1-1: config 0 descriptor??
[  145.829241][ T6963] bond1: entered promiscuous mode
[  145.854327][ T6963] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.995076][ T5927] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  146.076937][ T5927] asix 1-1:0.0: probe with driver asix failed with error -71
[  146.139601][ T5927] usb 1-1: USB disconnect, device number 7
[  146.260417][ T6975] input: syz0 as /devices/virtual/input/input7
[  146.822097][   T29] audit: type=1400 audit(1740992613.337:373): avc:  denied  { read } for  pid=6987 comm="syz.1.285" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  146.845240][    C0] vkms_vblank_simulate: vblank timer overrun
[  146.862146][   T29] audit: type=1400 audit(1740992613.337:374): avc:  denied  { open } for  pid=6987 comm="syz.1.285" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  146.891157][   T29] audit: type=1400 audit(1740992613.367:375): avc:  denied  { map } for  pid=6987 comm="syz.1.285" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  146.914640][    C0] vkms_vblank_simulate: vblank timer overrun
[  146.922570][ T5868] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  146.936886][   T29] audit: type=1400 audit(1740992613.367:376): avc:  denied  { execute } for  pid=6987 comm="syz.1.285" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  147.108726][ T5927] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  147.152785][ T5868] usb 1-1: Using ep0 maxpacket: 8
[  147.163912][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.182831][ T5868] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  147.347200][ T7001] xt_CT: You must specify a L4 protocol and not use inversions on it
[  147.821539][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.197112][ T5868] usb 1-1: config 0 descriptor??
[  148.205353][ T5868] gspca_main: vc032x-2.14.0 probing 046d:0892
[  148.234860][ T5927] usb 5-1: Using ep0 maxpacket: 32
[  148.246840][ T5927] usb 5-1: unable to get BOS descriptor or descriptor too short
[  148.277707][ T5927] usb 5-1: config 5 has an invalid interface number: 76 but max is 0
[  148.290386][ T5927] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  148.314054][ T5927] usb 5-1: config 5 has no interface number 0
[  148.320166][ T5927] usb 5-1: config 5 interface 76 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  148.336532][   T29] audit: type=1400 audit(1740992614.857:377): avc:  denied  { ioctl } for  pid=7006 comm="syz.3.289" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  148.337220][ T5927] usb 5-1: config 5 interface 76 has no altsetting 0
[  148.529737][ T5927] usb 5-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=81.4d
[  148.538924][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.547152][ T5927] usb 5-1: Product: syz
[  148.552239][ T5927] usb 5-1: Manufacturer: Э
[  148.560584][ T5927] usb 5-1: SerialNumber: syz
[  149.145164][ T5868] gspca_vc032x: reg_w err -110
[  149.219650][ T5868] vc032x 1-1:0.0: probe with driver vc032x failed with error -110
[  149.573382][ T5927] usb 5-1: USB disconnect, device number 3
[  149.671837][ T7023] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  150.188056][ T5868] usb 1-1: USB disconnect, device number 8
[  151.456823][ T7039] input: syz0 as /devices/virtual/input/input8
[  152.683140][ T7052] random: crng reseeded on system resumption
[  153.137492][ T7053] netlink: 48 bytes leftover after parsing attributes in process `syz.1.300'.
[  153.648055][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'.
[  153.912754][ T5868] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  154.073343][ T5868] usb 1-1: Using ep0 maxpacket: 8
[  154.079472][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  154.089498][ T5868] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  154.104521][ T5868] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  154.126248][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.146075][ T5868] usb 1-1: Product: syz
[  154.150234][ T5868] usb 1-1: Manufacturer: syz
[  154.162366][ T5868] usb 1-1: SerialNumber: syz
[  154.171824][ T5868] usb 1-1: config 0 descriptor??
[  154.245962][   T29] audit: type=1400 audit(1740992620.767:378): avc:  denied  { mount } for  pid=7061 comm="syz.3.302" name="/" dev="rpc_pipefs" ino=12004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  154.271414][ T5820] Bluetooth: hci3: Malformed Event: 0x02
[  154.383085][   T29] audit: type=1400 audit(1740992620.787:379): avc:  denied  { unmount } for  pid=7061 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  154.421782][ T5868] usb 1-1: USB disconnect, device number 9
[  154.637521][ T7068] veth0_vlan: entered allmulticast mode
[  155.172714][   T29] audit: type=1400 audit(1740992621.687:380): avc:  denied  { ioctl } for  pid=7069 comm="syz.4.305" path="socket:[12360]" dev="sockfs" ino=12360 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  155.559095][ T7080] netlink: 'syz.2.308': attribute type 12 has an invalid length.
[  155.643067][ T7080] netlink: 'syz.2.308': attribute type 29 has an invalid length.
[  155.682869][ T7080] netlink: 148 bytes leftover after parsing attributes in process `syz.2.308'.
[  155.714748][ T7080] netlink: 'syz.2.308': attribute type 1 has an invalid length.
[  155.741039][ T7080] netlink: 'syz.2.308': attribute type 2 has an invalid length.
[  155.787060][ T7080] netlink: 39 bytes leftover after parsing attributes in process `syz.2.308'.
[  157.534357][ T5868] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  158.332716][ T5868] usb 3-1: Using ep0 maxpacket: 8
[  158.351945][ T5868] usb 3-1: config index 0 descriptor too short (expected 5924, got 36)
[  158.366200][ T5868] usb 3-1: config 250 has an invalid interface number: 228 but max is -1
[  158.377156][ T5868] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0
[  158.390726][ T5868] usb 3-1: config 250 has no interface number 0
[  158.407269][ T5868] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  158.425055][ T5868] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  158.489552][ T5868] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  158.585360][ T7115] netlink: 48 bytes leftover after parsing attributes in process `syz.3.319'.
[  158.725415][   T29] audit: type=1400 audit(1740992625.227:381): avc:  denied  { accept } for  pid=7118 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  158.747620][ T5868] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  158.895199][ T7124] xt_limit: Overflow, try lower: 0/0
[  159.314117][ T5868] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  159.328914][   T29] audit: type=1400 audit(1740992625.367:382): avc:  denied  { block_suspend } for  pid=7118 comm="syz.4.320" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  159.356738][ T5868] usb 3-1: config 250 interface 228 has no altsetting 0
[  159.456220][ T5868] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  159.489412][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  159.511370][ T5868] usb 3-1: Product: syz
[  159.516373][ T5868] usb 3-1: SerialNumber: syz
[  159.533538][ T5868] hub 3-1:250.228: bad descriptor, ignoring hub
[  159.540736][ T5868] hub 3-1:250.228: probe with driver hub failed with error -5
[  159.744860][   T29] audit: type=1400 audit(1740992626.267:383): avc:  denied  { read } for  pid=7096 comm="syz.2.314" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  159.826547][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'.
[  159.872137][   T29] audit: type=1400 audit(1740992626.267:384): avc:  denied  { open } for  pid=7096 comm="syz.2.314" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  159.988855][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'.
[  160.130353][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'.
[  161.321538][ T5868] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  161.357604][ T5868] usb 3-1: USB disconnect, device number 7
[  161.420967][ T5868] usblp0: removed
[  161.536597][ T7151] FAULT_INJECTION: forcing a failure.
[  161.536597][ T7151] name failslab, interval 1, probability 0, space 0, times 0
[  161.540429][   T29] audit: type=1400 audit(1740992628.057:385): avc:  denied  { bind } for  pid=7154 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  161.618697][ T7151] CPU: 1 UID: 0 PID: 7151 Comm: syz.4.325 Not tainted 6.14.0-rc5-syzkaller #0
[  161.618720][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  161.618729][ T7151] Call Trace:
[  161.618734][ T7151]  <TASK>
[  161.618740][ T7151]  dump_stack_lvl+0x16c/0x1f0
[  161.618765][ T7151]  should_fail_ex+0x50a/0x650
[  161.618788][ T7151]  ? fs_reclaim_acquire+0xae/0x150
[  161.618814][ T7151]  should_failslab+0xc2/0x120
[  161.618833][ T7151]  __kmalloc_node_noprof+0xd1/0x510
[  161.618856][ T7151]  ? __kvmalloc_node_noprof+0xad/0x1a0
[  161.618883][ T7151]  __kvmalloc_node_noprof+0xad/0x1a0
[  161.618907][ T7151]  page_pool_create_percpu+0x34e/0xb20
[  161.618935][ T7151]  bpf_test_run_xdp_live+0x193/0x500
[  161.618957][ T7151]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  161.618975][ T7151]  ? find_held_lock+0x2d/0x110
[  161.618995][ T7151]  ? bpf_dispatcher_change_prog+0x54d/0xa80
[  161.619017][ T7151]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  161.619035][ T7151]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  161.619067][ T7151]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  161.619091][ T7151]  ? 0xffffffffa0003b40
[  161.619106][ T7151]  ? 0xffffffffa0003b40
[  161.619119][ T7151]  ? 0xffffffffa0003b40
[  161.619130][ T7151]  ? bpf_dispatcher_change_prog+0x54d/0xa80
[  161.619154][ T7151]  bpf_prog_test_run_xdp+0x81f/0x1560
[  161.619179][ T7151]  ? lock_acquire+0x2f/0xb0
[  161.619200][ T7151]  ? __fget_files+0x40/0x3a0
[  161.619217][ T7151]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  161.619237][ T7151]  ? __fget_files+0x206/0x3a0
[  161.619255][ T7151]  ? fput+0x67/0x440
[  161.619272][ T7151]  ? __bpf_prog_get+0xa0/0x290
[  161.619294][ T7151]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  161.619313][ T7151]  __sys_bpf+0xfc6/0x49c0
[  161.619330][ T7151]  ? __pfx_lock_release+0x10/0x10
[  161.619352][ T7151]  ? __pfx___sys_bpf+0x10/0x10
[  161.619368][ T7151]  ? vfs_write+0x306/0x1150
[  161.619398][ T7151]  ? __mutex_unlock_slowpath+0x164/0x6a0
[  161.619432][ T7151]  ? fput+0x67/0x440
[  161.619451][ T7151]  ? ksys_write+0x1ba/0x250
[  161.619475][ T7151]  ? __pfx_ksys_write+0x10/0x10
[  161.619504][ T7151]  __x64_sys_bpf+0x78/0xc0
[  161.619522][ T7151]  ? lockdep_hardirqs_on+0x7c/0x110
[  161.619542][ T7151]  do_syscall_64+0xcd/0x250
[  161.619564][ T7151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.619586][ T7151] RIP: 0033:0x7f645078d169
[  161.619599][ T7151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.619613][ T7151] RSP: 002b:00007f6451534038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  161.619629][ T7151] RAX: ffffffffffffffda RBX: 00007f64509a5fa0 RCX: 00007f645078d169
[  161.619639][ T7151] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a
[  161.619649][ T7151] RBP: 00007f6451534090 R08: 0000000000000000 R09: 0000000000000000
[  161.619659][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  161.619668][ T7151] R13: 0000000000000000 R14: 00007f64509a5fa0 R15: 00007ffeed1da268
[  161.619690][ T7151]  </TASK>
[  161.619697][ T7151] page_pool_create_percpu() gave up with errno -12
[  161.807155][ T7159] netlink: 'syz.1.328': attribute type 10 has an invalid length.
[  161.987861][ T7159] syz_tun: entered promiscuous mode
[  162.253126][ T7165] Cannot find del_set index 4 as target
[  162.301481][   T29] audit: type=1400 audit(1740992628.797:386): avc:  denied  { bind } for  pid=7166 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  162.350005][ T7169] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  162.358950][   T29] audit: type=1400 audit(1740992628.807:387): avc:  denied  { name_bind } for  pid=7166 comm="syz.2.332" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  162.360187][ T7169] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  162.383454][   T29] audit: type=1400 audit(1740992628.807:388): avc:  denied  { node_bind } for  pid=7166 comm="syz.2.332" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  163.114639][   T29] audit: type=1400 audit(1740992629.627:389): avc:  denied  { read } for  pid=7182 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  163.383569][ T5868] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  163.553645][   T29] audit: type=1400 audit(1740992630.037:390): avc:  denied  { execute } for  pid=7193 comm="syz.4.340" path="/dev/audio1" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  164.025981][ T5868] usb 4-1: config 9 has an invalid interface number: 94 but max is 0
[  164.043271][ T5868] usb 4-1: config 9 has no interface number 0
[  164.062869][ T5868] usb 4-1: config 9 interface 94 has no altsetting 0
[  164.111463][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'.
[  164.495071][ T7200] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  164.595962][   T29] audit: type=1400 audit(1740992631.117:391): avc:  denied  { name_connect } for  pid=7190 comm="syz.1.339" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  165.618683][   T29] audit: type=1400 audit(1740992632.127:392): avc:  denied  { create } for  pid=7216 comm="syz.4.345" name="#8" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  165.665973][   T29] audit: type=1400 audit(1740992632.127:393): avc:  denied  { link } for  pid=7216 comm="syz.4.345" name="#8" dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  165.698204][   T29] audit: type=1400 audit(1740992632.127:394): avc:  denied  { rename } for  pid=7216 comm="syz.4.345" name="#9" dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  165.728713][   T29] audit: type=1400 audit(1740992632.167:395): avc:  denied  { unmount } for  pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  166.089994][ T7223] input: syz0 as /devices/virtual/input/input9
[  166.180820][ T5868] usb 4-1: New USB device found, idVendor=04dd, idProduct=9050, bcdDevice= 3.ab
[  166.189929][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.200102][ T5868] usb 4-1: can't set config #9, error -71
[  166.227307][ T5868] usb 4-1: USB disconnect, device number 4
[  166.303486][ T7219] netlink: 48 bytes leftover after parsing attributes in process `syz.0.346'.
[  166.323893][ T7210] IPv6: NLM_F_REPLACE set, but no existing node found!
[  166.520735][ T7221] netlink: 'syz.4.347': attribute type 21 has an invalid length.
[  166.528497][ T7221] netlink: 168 bytes leftover after parsing attributes in process `syz.4.347'.
[  166.972709][  T970] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  167.166987][  T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  167.544113][ T7198] syz.1.339 (7198) used greatest stack depth: 20240 bytes left
[  167.592000][  T970] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  167.636376][  T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  167.647155][  T970] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  167.691946][  T970] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  167.715149][  T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.731298][  T970] usb 1-1: config 0 descriptor??
[  167.914004][ T5830] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  168.062706][ T5830] usb 5-1: device descriptor read/64, error -71
[  168.121779][   T29] audit: type=1400 audit(1740992634.587:396): avc:  denied  { shutdown } for  pid=7247 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  168.148250][  T970] hdpvr 1-1:0.0: firmware version 0x6d dated ð¦Â´í÷ªŒ’e\@^ë1«yØÀpŸHoîAÝqÎyÜάۛXñH¢
[  168.164379][  T970] hdpvr 1-1:0.0: untested firmware, the driver might not work.
[  168.352790][ T5868] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  168.370397][  T970] hdpvr 1-1:0.0: device init failed
[  168.376170][  T970] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12
[  168.394969][  T970] usb 1-1: USB disconnect, device number 10
[  168.404272][ T5830] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  168.429033][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'.
[  168.523075][ T5868] usb 3-1: unable to get BOS descriptor or descriptor too short
[  168.533275][ T5868] usb 3-1: unable to read config index 0 descriptor/start: -71
[  168.540890][ T5868] usb 3-1: can't read configurations, error -71
[  168.552789][ T5830] usb 5-1: device descriptor read/64, error -71
[  168.673543][ T5830] usb usb5-port1: attempt power cycle
[  169.031990][ T7263] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  169.292796][ T5830] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  169.353042][ T5830] usb 5-1: device descriptor read/8, error -71
[  169.398326][   T29] audit: type=1400 audit(1740992635.917:397): avc:  denied  { getopt } for  pid=7267 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  169.434885][   T29] audit: type=1326 audit(1740992635.947:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.3.363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f029ef8d169 code=0x0
[  169.480279][ T7269] overlayfs: failed to resolve './file1': -2
[  169.702521][ T5830] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  169.730645][ T5868] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  169.731309][ T5830] usb 5-1: device descriptor read/8, error -71
[  169.841876][ T7280] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  170.354133][ T5830] usb usb5-port1: unable to enumerate USB device
[  170.377786][   T29] audit: type=1400 audit(1740992636.897:399): avc:  denied  { create } for  pid=7277 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  170.461235][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  170.742762][ T5868] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  170.785423][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  170.834941][ T5868] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  170.844984][ T5868] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  171.130877][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.130919][   T29] audit: type=1400 audit(1740992637.637:400): avc:  denied  { bind } for  pid=7283 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  171.168059][ T5868] usb 3-1: config 0 descriptor??
[  172.233920][   T29] audit: type=1400 audit(1740992638.597:401): avc:  denied  { listen } for  pid=7290 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  172.272798][ T5868] hdpvr 3-1:0.0: firmware version 0x0 dated 
[  172.290698][ T5868] hdpvr 3-1:0.0: untested firmware, the driver might not work.
[  172.378692][   T29] audit: type=1400 audit(1740992638.887:402): avc:  denied  { name_bind } for  pid=7292 comm="syz.4.370" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  172.399760][    C0] vkms_vblank_simulate: vblank timer overrun
[  172.733739][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'.
[  172.873397][ T7306] IPVS: length: 62 != 24
[  173.423342][ T5868] hdpvr 3-1:0.0: Could not setup controls
[  173.429875][ T5868] hdpvr 3-1:0.0: registering videodev failed
[  174.225419][ T5868] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71
[  174.262732][ T5868] usb 3-1: USB disconnect, device number 9
[  174.296547][ T7316] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=61467 sclass=netlink_xfrm_socket pid=7316 comm=syz.0.375
[  174.412708][ T5923] psmouse serio2: Failed to reset mouse on : -5
[  174.472128][   T29] audit: type=1400 audit(1740992640.987:403): avc:  denied  { ioctl } for  pid=7317 comm="syz.4.378" path="socket:[13598]" dev="sockfs" ino=13598 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  174.496564][    C0] vkms_vblank_simulate: vblank timer overrun
[  175.214868][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'.
[  175.230323][ T7328] input: syz0 as /devices/virtual/input/input12
[  175.688961][   T29] audit: type=1400 audit(1740992642.207:404): avc:  denied  { create } for  pid=7340 comm="syz.1.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  175.936591][ T7342] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  176.156987][   T29] audit: type=1326 audit(1740992642.337:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846698d169 code=0x7ffc0000
[  176.180180][    C0] vkms_vblank_simulate: vblank timer overrun
[  176.249928][   T29] audit: type=1326 audit(1740992642.337:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846698d169 code=0x7ffc0000
[  176.474921][   T29] audit: type=1326 audit(1740992642.357:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f846698d169 code=0x7ffc0000
[  176.505235][   T29] audit: type=1326 audit(1740992642.357:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846698d169 code=0x7ffc0000
[  176.528891][   T29] audit: type=1326 audit(1740992642.357:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846698d169 code=0x7ffc0000
[  176.553125][   T29] audit: type=1326 audit(1740992642.357:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f846698d169 code=0x7ffc0000
[  177.987949][   T29] audit: type=1326 audit(1740992642.357:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f846698d1a3 code=0x7ffc0000
[  178.126017][   T29] audit: type=1326 audit(1740992642.357:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f846698d1a3 code=0x7ffc0000
[  178.164991][   T29] audit: type=1326 audit(1740992642.357:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846698d169 code=0x7ffc0000
[  178.193464][ T7363] netlink: 'syz.4.388': attribute type 1 has an invalid length.
[  178.563531][ T5923] misc userio: Buffer overflowed, userio client isn't keeping up
[  178.928836][ T7370] netlink: 'syz.2.389': attribute type 2 has an invalid length.
[  178.943071][ T7370] netlink: 'syz.2.389': attribute type 1 has an invalid length.
[  178.970663][ T7370] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.389'.
[  179.476343][ T7386] input: syz0 as /devices/virtual/input/input13
[  180.872921][ T5824] Bluetooth: hci1: command 0x0406 tx timeout
[  180.881166][ T5824] Bluetooth: hci2: command 0x0406 tx timeout
[  180.887460][ T5824] Bluetooth: hci4: command 0x0405 tx timeout
[  180.893764][ T5824] Bluetooth: hci3: command 0x0406 tx timeout
[  181.159746][ T7398] Invalid source name
[  181.163934][ T7398] UBIFS error (pid: 7398): cannot open "./file0", error -22
[  181.744243][ T7417] netlink: 'syz.2.403': attribute type 26 has an invalid length.
[  182.003083][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'.
[  182.012186][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  182.012198][   T29] audit: type=1400 audit(1740992648.517:423): avc:  denied  { read append } for  pid=7422 comm="syz.1.405" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  182.071417][   T29] audit: type=1400 audit(1740992648.517:424): avc:  denied  { open } for  pid=7422 comm="syz.1.405" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  182.620854][ T5830] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  182.782775][ T5830] usb 1-1: device descriptor read/64, error -71
[  182.823828][ T5923] misc userio: Buffer overflowed, userio client isn't keeping up
[  182.885348][ T5927] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  183.132842][ T5830] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  184.096908][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  184.112988][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  184.125449][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  184.135395][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  184.902364][ T7461] FAULT_INJECTION: forcing a failure.
[  184.902364][ T7461] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  184.908032][ T7466] xt_nat: multiple ranges no longer supported
[  184.916022][ T7461] CPU: 0 UID: 0 PID: 7461 Comm: syz.1.414 Not tainted 6.14.0-rc5-syzkaller #0
[  184.916041][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  184.916050][ T7461] Call Trace:
[  184.916055][ T7461]  <TASK>
[  184.916061][ T7461]  dump_stack_lvl+0x16c/0x1f0
[  184.916083][ T7461]  should_fail_ex+0x50a/0x650
[  184.916108][ T7461]  _copy_to_user+0x32/0xd0
[  184.916125][ T7461]  simple_read_from_buffer+0xd0/0x160
[  184.916149][ T7461]  proc_fail_nth_read+0x198/0x270
[  184.916170][ T7461]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  184.916192][ T7461]  ? rw_verify_area+0xcf/0x680
[  184.916211][ T7461]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  184.916231][ T7461]  vfs_read+0x1df/0xbf0
[  184.916253][ T7461]  ? __fget_files+0x1fc/0x3a0
[  184.916268][ T7461]  ? __pfx___mutex_lock+0x10/0x10
[  184.916286][ T7461]  ? __pfx_vfs_read+0x10/0x10
[  184.916314][ T7461]  ? __fget_files+0x206/0x3a0
[  184.916333][ T7461]  ksys_read+0x12b/0x250
[  184.916355][ T7461]  ? __pfx_ksys_read+0x10/0x10
[  184.916382][ T7461]  do_syscall_64+0xcd/0x250
[  184.916408][ T7461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.916428][ T7461] RIP: 0033:0x7f846698bb7c
[  184.916439][ T7461] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  184.916453][ T7461] RSP: 002b:00007f846785b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  184.916468][ T7461] RAX: ffffffffffffffda RBX: 00007f8466ba6080 RCX: 00007f846698bb7c
[  184.916478][ T7461] RDX: 000000000000000f RSI: 00007f846785b0a0 RDI: 0000000000000007
[  184.916486][ T7461] RBP: 00007f846785b090 R08: 0000000000000000 R09: 0000000000000000
[  184.916495][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.916503][ T7461] R13: 0000000000000000 R14: 00007f8466ba6080 R15: 00007fff71ec0348
[  184.916523][ T7461]  </TASK>
[  185.109411][ T5927] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  185.119016][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.162702][ T5830] usb 1-1: device descriptor read/64, error -71
[  185.213630][ T5927] usb 3-1: config 0 descriptor??
[  185.282925][ T5830] usb usb1-port1: attempt power cycle
[  185.306826][ T7473] syzkaller1: entered promiscuous mode
[  185.312355][ T7473] syzkaller1: entered allmulticast mode
[  185.560639][ T5927] usbhid 3-1:0.0: can't add hid device: -71
[  185.567520][ T5927] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  185.583668][ T5927] usb 3-1: USB disconnect, device number 10
[  186.443065][ T5868] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  186.676091][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  186.692680][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  186.722815][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  186.745649][   T29] audit: type=1400 audit(1740992653.257:425): avc:  denied  { create } for  pid=7496 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  186.784651][ T5830] libceph: connect (1)[c::]:6789 error -101
[  186.793020][ T5830] libceph: mon0 (1)[c::]:6789 connect error
[  186.796573][ T5868] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  186.816839][ T7497] ceph: No mds server is up or the cluster is laggy
[  186.865856][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.875302][ T5868] usb 2-1: Product: syz
[  186.879785][ T5868] usb 2-1: Manufacturer: syz
[  186.898871][ T5868] usb 2-1: SerialNumber: syz
[  186.930495][ T5868] usb 2-1: config 0 descriptor??
[  186.947068][ T7477] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  186.962980][ T7477] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  186.987448][ T5868] usb 2-1: ucan: probing device on interface #0
[  187.052492][ T7510] 9pnet_fd: Insufficient options for proto=fd
[  187.231417][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.240020][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.250109][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  187.261862][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  187.270172][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  187.280421][ T5868] usb 2-1: ucan: could not read protocol version, ret=0
[  187.280798][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  187.295781][ T5820] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  187.297456][ T5868] usb 2-1: ucan: probe failed; try to update the device firmware
[  187.400037][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  187.493545][ T5923] misc userio: Buffer overflowed, userio client isn't keeping up
[  187.628896][   T29] audit: type=1400 audit(1740992654.147:426): avc:  denied  { mounton } for  pid=7509 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  188.071599][ T7506] netlink: 'syz.4.429': attribute type 10 has an invalid length.
[  188.136748][ T7518] netlink: 'syz.4.429': attribute type 10 has an invalid length.
[  188.156417][ T7506] team0: Device netdevsim0 is up. Set it down before adding it as a team port
[  189.152849][   T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  189.177963][ T7518] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  189.346115][ T7509] chnl_net:caif_netlink_parms(): no params data found
[  189.424275][ T5868] usb 2-1: USB disconnect, device number 6
[  189.683649][ T5820] Bluetooth: hci5: command tx timeout
[  189.716998][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  189.726257][   T25] usb 5-1: unable to read config index 0 descriptor/start: -71
[  189.746351][   T25] usb 5-1: can't read configurations, error -71
[  189.754580][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.762210][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.771495][ T7509] bridge_slave_0: entered allmulticast mode
[  189.781073][ T7509] bridge_slave_0: entered promiscuous mode
[  189.789560][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.792269][   T29] audit: type=1400 audit(1740992656.307:427): avc:  denied  { connect } for  pid=7540 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  189.800376][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.825525][ T7509] bridge_slave_1: entered allmulticast mode
[  189.832448][ T7509] bridge_slave_1: entered promiscuous mode
[  189.854001][ T7509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.864796][ T7509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.885580][ T7509] team0: Port device team_slave_0 added
[  189.893975][ T7509] team0: Port device team_slave_1 added
[  189.909929][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.917031][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.943553][ T7509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.956222][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.964022][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.990387][ T7509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.021293][ T7509] hsr_slave_0: entered promiscuous mode
[  190.029029][ T7509] hsr_slave_1: entered promiscuous mode
[  190.035098][ T7509] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.043235][ T7509] Cannot create hsr debugfs directory
[  190.118493][ T7545] warning: `syz.0.438' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  190.160228][ T5868] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  190.446632][ T5868] usb 2-1: unable to get BOS descriptor or descriptor too short
[  190.535979][ T5868] usb 2-1: not running at top speed; connect to a high speed hub
[  190.549002][ T5868] usb 2-1: config 3 has an invalid interface number: 185 but max is 0
[  190.577231][ T5868] usb 2-1: config 3 has no interface number 0
[  190.592176][ T5868] usb 2-1: config 3 interface 185 has no altsetting 0
[  190.619751][ T5868] usb 2-1: New USB device found, idVendor=0cf3, idProduct=817b, bcdDevice=f7.53
[  190.629009][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.652098][ T5868] usb 2-1: Product: syz
[  190.664872][ T7509] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  190.671730][ T5868] usb 2-1: Manufacturer: syz
[  190.688741][ T5868] usb 2-1: SerialNumber: syz
[  190.706087][ T7509] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  190.783081][ T7553] netlink: 'syz.4.440': attribute type 1 has an invalid length.
[  191.121699][   T29] audit: type=1400 audit(1740992657.477:428): avc:  denied  { write } for  pid=7540 comm="syz.1.437" name="fd" dev="proc" ino=14445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  191.150994][ T5868] usb 2-1: USB disconnect, device number 7
[  191.151580][ T7509] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  191.169932][   T29] audit: type=1400 audit(1740992657.477:429): avc:  denied  { add_name } for  pid=7540 comm="syz.1.437" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  191.196634][ T7554] dvmrp0: entered allmulticast mode
[  191.203714][ T7509] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  191.399145][   T29] audit: type=1400 audit(1740992657.477:430): avc:  denied  { create } for  pid=7540 comm="syz.1.437" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1
[  191.418829][   T29] audit: type=1400 audit(1740992657.477:431): avc:  denied  { associate } for  pid=7540 comm="syz.1.437" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  191.464056][   T29] audit: type=1400 audit(1740992657.497:432): avc:  denied  { write } for  pid=7549 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  191.752764][ T5820] Bluetooth: hci5: command tx timeout
[  191.833007][ T7565] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  191.943749][ T5923] misc userio: Buffer overflowed, userio client isn't keeping up
[  191.978907][ T7509] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.054726][ T7570] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  192.601099][ T7509] 8021q: adding VLAN 0 to HW filter on device team0
[  192.627378][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.634506][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.644605][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.651668][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.707633][ T7509] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  192.718297][ T7509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  192.848480][   T29] audit: type=1400 audit(1740992659.337:433): avc:  denied  { mount } for  pid=7571 comm="syz.2.446" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  192.873783][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'.
[  192.968457][   T29] audit: type=1400 audit(1740992659.337:434): avc:  denied  { connect } for  pid=7571 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  193.156785][   T29] audit: type=1400 audit(1740992659.337:435): avc:  denied  { name_connect } for  pid=7571 comm="syz.2.446" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  193.271465][   T29] audit: type=1400 audit(1740992659.527:436): avc:  denied  { unmount } for  pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  193.359811][ T7509] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.389905][ T7598] netlink: 'syz.4.453': attribute type 12 has an invalid length.
[  193.400491][ T7598] netlink: 'syz.4.453': attribute type 29 has an invalid length.
[  193.414849][ T7598] netlink: 148 bytes leftover after parsing attributes in process `syz.4.453'.
[  193.427515][ T7598] netlink: 'syz.4.453': attribute type 1 has an invalid length.
[  193.437984][ T7598] netlink: 'syz.4.453': attribute type 2 has an invalid length.
[  193.449312][ T7598] netlink: 39 bytes leftover after parsing attributes in process `syz.4.453'.
[  193.466400][ T7601] sp0: Synchronizing with TNC
[  193.712372][ T7610] FAULT_INJECTION: forcing a failure.
[  193.712372][ T7610] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  193.730549][   T29] audit: type=1400 audit(1740992660.227:437): avc:  denied  { map } for  pid=7609 comm="syz.0.456" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  193.761613][ T7610] CPU: 0 UID: 0 PID: 7610 Comm: syz.0.456 Not tainted 6.14.0-rc5-syzkaller #0
[  193.761645][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  193.761656][ T7610] Call Trace:
[  193.761661][ T7610]  <TASK>
[  193.761667][ T7610]  dump_stack_lvl+0x16c/0x1f0
[  193.761693][ T7610]  should_fail_ex+0x50a/0x650
[  193.761721][ T7610]  _copy_to_user+0x32/0xd0
[  193.761739][ T7610]  pagemap_read+0x536/0x880
[  193.761768][ T7610]  ? __pfx_pagemap_read+0x10/0x10
[  193.761797][ T7610]  ? rw_verify_area+0xcf/0x680
[  193.761820][ T7610]  ? __pfx_pagemap_read+0x10/0x10
[  193.761844][ T7610]  vfs_read+0x1df/0xbf0
[  193.761870][ T7610]  ? __fget_files+0x1fc/0x3a0
[  193.761886][ T7610]  ? __pfx_lock_release+0x10/0x10
[  193.761910][ T7610]  ? __pfx_vfs_read+0x10/0x10
[  193.761935][ T7610]  ? lock_acquire+0x2f/0xb0
[  193.761956][ T7610]  ? __fget_files+0x40/0x3a0
[  193.761974][ T7610]  ? __fget_files+0x206/0x3a0
[  193.761995][ T7610]  __x64_sys_pread64+0x1f6/0x250
[  193.762012][ T7610]  ? __pfx___x64_sys_pread64+0x10/0x10
[  193.762035][ T7610]  do_syscall_64+0xcd/0x250
[  193.762058][ T7610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.762081][ T7610] RIP: 0033:0x7fb414d8d169
[  193.762093][ T7610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.762109][ T7610] RSP: 002b:00007fb415cc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  193.762125][ T7610] RAX: ffffffffffffffda RBX: 00007fb414fa5fa0 RCX: 00007fb414d8d169
[  193.762136][ T7610] RDX: 0000000000019000 RSI: 0000400000001240 RDI: 0000000000000004
[  193.762146][ T7610] RBP: 00007fb415cc4090 R08: 0000000000000000 R09: 0000000000000000
[  193.762155][ T7610] R10: 0000002000000000 R11: 0000000000000246 R12: 0000000000000002
[  193.762165][ T7610] R13: 0000000000000000 R14: 00007fb414fa5fa0 R15: 00007fffe5867788
[  193.762187][ T7610]  </TASK>
[  193.965800][ T5820] Bluetooth: hci5: command tx timeout
[  193.972725][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  193.979021][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  194.021515][ T7509] veth0_vlan: entered promiscuous mode
[  194.042273][ T7509] veth1_vlan: entered promiscuous mode
[  194.094804][ T7617] tipc: Started in network mode
[  194.099709][ T7617] tipc: Node identity b6ada4556b11, cluster identity 4711
[  194.107155][ T7617] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.148168][ T7509] veth0_macvtap: entered promiscuous mode
[  194.166578][ T7509] veth1_macvtap: entered promiscuous mode
[  194.214997][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.230271][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.241215][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.253378][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.263872][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.272836][   T29] audit: type=1400 audit(1740992660.787:438): avc:  denied  { setopt } for  pid=7627 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  194.274543][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.303919][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.314649][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.325898][ T7509] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.354566][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.376615][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.387210][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.407689][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.420813][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.432177][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.446169][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.456757][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.468999][ T7633] input: syz0 as /devices/virtual/input/input14
[  194.483601][ T7509] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.504322][ T7509] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.520265][ T7509] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.529950][ T7509] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.557309][ T7509] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.118752][ T5976] tipc: Resetting bearer <eth:syzkaller0>
[  195.127627][ T7612] tipc: Resetting bearer <eth:syzkaller0>
[  195.274051][ T5927] tipc: Node number set to 3720127573
[  195.405435][ T5153] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  195.556034][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'.
[  195.582760][ T5153] usb 2-1: Using ep0 maxpacket: 32
[  195.610736][ T5153] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  195.633374][ T5153] usb 2-1: config 0 has no interface number 0
[  195.738397][ T5153] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  195.756867][ T5153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.767800][ T5153] usb 2-1: Product: syz
[  195.772012][ T5153] usb 2-1: Manufacturer: syz
[  195.777428][ T5153] usb 2-1: SerialNumber: syz
[  195.801448][ T5153] usb 2-1: config 0 descriptor??
[  195.823438][ T5153] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  195.995694][ T5820] Bluetooth: hci5: command tx timeout
[  196.052100][ T5153] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  196.068143][ T5153] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  196.330265][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'.
[  196.339371][ T7655] netlink: 'syz.4.472': attribute type 30 has an invalid length.
[  196.754790][ T5923] misc userio: Buffer overflowed, userio client isn't keeping up
[  196.852071][ T7612] tipc: Disabling bearer <eth:syzkaller0>
[  196.870403][ T7647] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 53423 - 0
[  196.880365][ T7647] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 53423 - 0
[  196.890491][ T7647] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 53423 - 0
[  196.899567][ T7647] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 53423 - 0
[  196.920622][ T7655] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  196.929580][ T7655] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  196.938775][ T7655] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  196.947500][ T7655] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  197.028779][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  197.029625][ T5822] usb 2-1: USB disconnect, device number 8
[  197.052232][ T5822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  197.071489][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.072770][ T5822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  197.089850][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.095588][ T5822] quatech2 2-1:0.51: device disconnected
[  197.141640][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.151828][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.175836][   T29] audit: type=1400 audit(1740992663.697:439): avc:  denied  { mounton } for  pid=7509 comm="syz-executor" path="/root/syzkaller.wpFhly/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  198.444549][ T7669] Invalid source name
[  198.463136][ T7669] UBIFS error (pid: 7669): cannot open "./file0", error -22
[  198.494861][ T7680] openvswitch: netlink: Actions may not be safe on all matching packets
[  198.945769][ T7684] netlink: 96 bytes leftover after parsing attributes in process `syz.2.482'.
[  199.369913][ T7698] netlink: 204 bytes leftover after parsing attributes in process `syz.2.486'.
[  199.471982][   T29] audit: type=1400 audit(1740992665.987:440): avc:  denied  { ioctl } for  pid=7696 comm="syz.4.488" path="socket:[14968]" dev="sockfs" ino=14968 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  199.521021][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'.
[  199.553525][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'.
[  199.601055][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'.
[  199.745334][ T7704] loop8: detected capacity change from 0 to 7
[  199.753561][ T7704] Dev loop8: unable to read RDB block 7
[  199.759135][ T7704]  loop8: unable to read partition table
[  199.764911][ T7704] loop8: partition table beyond EOD, truncated
[  199.771042][ T7704] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  199.771042][ T7704] 
) failed (rc=-5)
[  199.837043][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'.
[  199.866433][  T970] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  200.066592][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'.
[  200.172818][  T970] usb 1-1: Using ep0 maxpacket: 8
[  200.187618][  T970] usb 1-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config
[  200.346920][ T5923] input: PS/2 Generic Mouse as /devices/serio2/input/input11
[  200.381002][  T970] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  200.581788][  T970] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab
[  200.687722][  T970] usb 1-1: New USB device strings: Mfr=11, Product=2, SerialNumber=3
[  200.716707][  T970] usb 1-1: Product: syz
[  200.733344][ T5923] psmouse serio2: Failed to enable mouse on 
[  200.733518][ T7760] Invalid source name
[  200.742356][  T970] usb 1-1: Manufacturer: syz
[  200.743390][ T7760] UBIFS error (pid: 7760): cannot open "./file0", error -22
[  200.748091][  T970] usb 1-1: SerialNumber: syz
[  200.847655][  T970] usb 1-1: config 0 descriptor??
[  201.109447][  T970] usb 1-1: USB disconnect, device number 14
[  201.422753][ T5868] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  201.639358][ T5868] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  201.670826][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.693940][ T5868] usb 5-1: Product: syz
[  201.698128][ T5868] usb 5-1: Manufacturer: syz
[  201.726249][ T5868] usb 5-1: SerialNumber: syz
[  201.763571][ T5868] usb 5-1: config 0 descriptor??
[  201.965155][ T7740] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.200506][ T5868] airspy 5-1:0.0: Board ID: 00
[  202.227185][ T5868] airspy 5-1:0.0: Firmware version: 
[  202.371043][ T7740] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.635450][ T7740] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.731226][ T5868] airspy 5-1:0.0: usb_control_msg() failed -71 request 12
[  203.769542][ T5868] airspy 5-1:0.0: Registered as swradio24
[  203.776310][ T5868] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  204.491591][ T7740] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.540871][   T29] audit: type=1400 audit(1740992671.047:441): avc:  denied  { read write } for  pid=7822 comm="syz.1.513" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  204.573727][ T5868] usb 5-1: USB disconnect, device number 10
[  204.606271][   T29] audit: type=1400 audit(1740992671.047:442): avc:  denied  { open } for  pid=7822 comm="syz.1.513" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  204.642712][   T29] audit: type=1400 audit(1740992671.047:443): avc:  denied  { ioctl } for  pid=7822 comm="syz.1.513" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  204.733086][   T29] audit: type=1400 audit(1740992671.057:444): avc:  denied  { read } for  pid=7822 comm="syz.1.513" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  204.832719][   T29] audit: type=1400 audit(1740992671.057:445): avc:  denied  { open } for  pid=7822 comm="syz.1.513" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  205.102917][    T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  205.393133][    T8] usb 6-1: Using ep0 maxpacket: 8
[  205.399483][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  205.413707][    T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  205.424506][ T7740] bridge_slave_1: left allmulticast mode
[  205.442511][ T7740] bridge_slave_1: left promiscuous mode
[  205.460878][    T8] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  205.470637][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.482711][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.498061][    T8] usb 6-1: Product: syz
[  205.508984][    T8] usb 6-1: Manufacturer: syz
[  205.529984][    T8] usb 6-1: SerialNumber: syz
[  205.537710][ T7740] bridge_slave_0: left allmulticast mode
[  205.566190][ T7740] bridge_slave_0: left promiscuous mode
[  205.579370][    T8] usb 6-1: config 0 descriptor??
[  205.586880][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.886437][    T8] usb 6-1: USB disconnect, device number 2
[  206.023756][ T7871] netlink: 104 bytes leftover after parsing attributes in process `syz.2.525'.
[  206.537512][ T7868] Invalid source name
[  206.541528][ T7868] UBIFS error (pid: 7868): cannot open "./file0", error -22
[  206.842738][    T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  207.015232][ T7906] input: syz0 as /devices/virtual/input/input15
[  207.132462][   T29] audit: type=1400 audit(1740992673.647:446): avc:  denied  { bind } for  pid=7907 comm="syz.1.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  207.142034][ T7908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.533'.
[  207.228567][    T8] usb 6-1: Using ep0 maxpacket: 16
[  207.424192][    T8] usb 6-1: too many configurations: 17, using maximum allowed: 8
[  207.636008][   T29] audit: type=1400 audit(1740992673.647:447): avc:  denied  { listen } for  pid=7907 comm="syz.1.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  207.680713][    T8] usb 6-1: unable to read config index 0 descriptor/start: -61
[  207.699732][    T8] usb 6-1: can't read configurations, error -61
[  207.796302][   T29] audit: type=1400 audit(1740992673.647:448): avc:  denied  { accept } for  pid=7907 comm="syz.1.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  207.852796][    T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  208.032778][    T8] usb 6-1: Using ep0 maxpacket: 16
[  208.059938][    T8] usb 6-1: too many configurations: 17, using maximum allowed: 8
[  208.097561][    T8] usb 6-1: unable to read config index 0 descriptor/start: -61
[  208.107254][    T8] usb 6-1: can't read configurations, error -61
[  208.116327][ T7740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.152986][ T7740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.154243][    T8] usb usb6-port1: attempt power cycle
[  208.236620][ T7740] bond0 (unregistering): Released all slaves
[  208.580468][ T7928] random: crng reseeded on system resumption
[  208.583724][    T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  208.652980][    T8] usb 6-1: Using ep0 maxpacket: 16
[  208.680810][    T8] usb 6-1: too many configurations: 17, using maximum allowed: 8
[  208.701076][    T8] usb 6-1: unable to read config index 0 descriptor/start: -61
[  208.732782][    T8] usb 6-1: can't read configurations, error -61
[  208.895785][    T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  208.957490][    T8] usb 6-1: Using ep0 maxpacket: 16
[  209.003027][    T8] usb 6-1: too many configurations: 17, using maximum allowed: 8
[  209.052954][    T8] usb 6-1: unable to read config index 0 descriptor/start: -61
[  209.095258][    T8] usb 6-1: can't read configurations, error -61
[  209.133244][    T8] usb usb6-port1: unable to enumerate USB device
[  209.270107][ T7740] hsr_slave_0: left promiscuous mode
[  209.304367][ T7740] hsr_slave_1: left promiscuous mode
[  209.310220][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.353331][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.366126][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.379903][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.423561][ T7740] veth1_macvtap: left promiscuous mode
[  209.456519][ T7740] veth0_macvtap: left promiscuous mode
[  209.472405][ T7740] veth1_vlan: left promiscuous mode
[  209.479485][ T7932] FAULT_INJECTION: forcing a failure.
[  209.479485][ T7932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  209.516669][ T7932] CPU: 0 UID: 0 PID: 7932 Comm: syz.1.538 Not tainted 6.14.0-rc5-syzkaller #0
[  209.516691][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  209.516702][ T7932] Call Trace:
[  209.516707][ T7932]  <TASK>
[  209.516713][ T7932]  dump_stack_lvl+0x16c/0x1f0
[  209.516739][ T7932]  should_fail_ex+0x50a/0x650
[  209.516769][ T7932]  _copy_to_user+0x32/0xd0
[  209.516789][ T7932]  simple_read_from_buffer+0xd0/0x160
[  209.516816][ T7932]  proc_fail_nth_read+0x198/0x270
[  209.516840][ T7932]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  209.516865][ T7932]  ? rw_verify_area+0xcf/0x680
[  209.516888][ T7932]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  209.516911][ T7932]  vfs_read+0x1df/0xbf0
[  209.516936][ T7932]  ? __fget_files+0x1fc/0x3a0
[  209.516953][ T7932]  ? __pfx___mutex_lock+0x10/0x10
[  209.516974][ T7932]  ? __pfx_vfs_read+0x10/0x10
[  209.517007][ T7932]  ? __fget_files+0x206/0x3a0
[  209.517031][ T7932]  ksys_read+0x12b/0x250
[  209.517056][ T7932]  ? __pfx_ksys_read+0x10/0x10
[  209.517089][ T7932]  do_syscall_64+0xcd/0x250
[  209.517112][ T7932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.517135][ T7932] RIP: 0033:0x7f846698bb7c
[  209.517149][ T7932] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  209.517164][ T7932] RSP: 002b:00007f846785b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  209.517181][ T7932] RAX: ffffffffffffffda RBX: 00007f8466ba6080 RCX: 00007f846698bb7c
[  209.517192][ T7932] RDX: 000000000000000f RSI: 00007f846785b0a0 RDI: 0000000000000008
[  209.517202][ T7932] RBP: 00007f846785b090 R08: 0000000000000000 R09: 0000000000000000
[  209.517212][ T7932] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000001
[  209.517221][ T7932] R13: 0000000000000000 R14: 00007f8466ba6080 R15: 00007fff71ec0348
[  209.517244][ T7932]  </TASK>
[  209.523290][ T7740] veth0_vlan: left promiscuous mode
[  209.837292][ T7960] SET target dimension over the limit!
[  210.129538][   T29] audit: type=1400 audit(1740992676.397:449): avc:  denied  { ioctl } for  pid=7952 comm="syz.4.540" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  210.192250][   T29] audit: type=1804 audit(1740992676.407:450): pid=7960 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.540" name="/newroot/115/file0" dev="tmpfs" ino=633 res=1 errno=0
[  210.235558][   T29] audit: type=1400 audit(1740992676.417:451): avc:  denied  { map } for  pid=7952 comm="syz.4.540" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  210.259467][    C0] vkms_vblank_simulate: vblank timer overrun
[  210.499153][   T29] audit: type=1326 audit(1740992676.987:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645078d169 code=0x7fc00000
[  211.405064][ T7965] ALSA: mixer_oss: invalid OSS volume ''
[  211.614226][ T7740] team0 (unregistering): Port device team_slave_1 removed
[  211.685838][ T7740] team0 (unregistering): Port device team_slave_0 removed
[  212.226295][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.541'.
[  212.241482][ T7973] veth0_to_team: entered promiscuous mode
[  212.248168][ T7973] veth0_to_team: entered allmulticast mode
[  214.584175][   T29] audit: type=1400 audit(1740992680.417:453): avc:  denied  { setopt } for  pid=8008 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  214.679508][ T8017] bond0: entered promiscuous mode
[  214.684836][ T8017] bond_slave_0: entered promiscuous mode
[  214.691136][ T8017] bond_slave_1: entered promiscuous mode
[  214.822270][ T8015] capability: warning: `syz.0.552' uses 32-bit capabilities (legacy support in use)
[  215.183624][ T8032] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  215.907797][   T29] audit: type=1400 audit(1740992682.427:454): avc:  denied  { sys_chroot } for  pid=8038 comm="dhcpcd" capability=18  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  215.987324][   T29] audit: type=1400 audit(1740992682.427:455): avc:  denied  { setgid } for  pid=8038 comm="dhcpcd" capability=6  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  216.001836][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'.
[  216.032899][   T29] audit: type=1400 audit(1740992682.427:456): avc:  denied  { setrlimit } for  pid=8038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1
[  216.108648][   T29] audit: type=1400 audit(1740992682.627:457): avc:  denied  { create } for  pid=8033 comm="syz.1.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  216.190502][   T29] audit: type=1400 audit(1740992682.627:458): avc:  denied  { setopt } for  pid=8033 comm="syz.1.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  217.099873][ T8064] FAULT_INJECTION: forcing a failure.
[  217.099873][ T8064] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  217.113297][ T8064] CPU: 0 UID: 0 PID: 8064 Comm: syz.4.558 Not tainted 6.14.0-rc5-syzkaller #0
[  217.113320][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  217.113331][ T8064] Call Trace:
[  217.113336][ T8064]  <TASK>
[  217.113342][ T8064]  dump_stack_lvl+0x16c/0x1f0
[  217.113368][ T8064]  should_fail_ex+0x50a/0x650
[  217.113396][ T8064]  _copy_from_iter+0x2a1/0x1560
[  217.113414][ T8064]  ? trace_lock_acquire+0x14e/0x1f0
[  217.113435][ T8064]  ? __alloc_skb+0x1fe/0x380
[  217.113457][ T8064]  ? __pfx__copy_from_iter+0x10/0x10
[  217.113472][ T8064]  ? __virt_addr_valid+0x1a4/0x590
[  217.113494][ T8064]  ? __virt_addr_valid+0x5e/0x590
[  217.113511][ T8064]  ? __phys_addr_symbol+0x30/0x80
[  217.113528][ T8064]  ? __check_object_size+0x488/0x710
[  217.113550][ T8064]  netlink_sendmsg+0x813/0xd70
[  217.113577][ T8064]  ? __pfx_netlink_sendmsg+0x10/0x10
[  217.113607][ T8064]  ____sys_sendmsg+0xaaf/0xc90
[  217.113624][ T8064]  ? copy_msghdr_from_user+0x10b/0x160
[  217.113647][ T8064]  ? __pfx_____sys_sendmsg+0x10/0x10
[  217.113675][ T8064]  ___sys_sendmsg+0x135/0x1e0
[  217.113699][ T8064]  ? __pfx____sys_sendmsg+0x10/0x10
[  217.113731][ T8064]  ? __pfx_lock_release+0x10/0x10
[  217.113753][ T8064]  ? trace_lock_acquire+0x14e/0x1f0
[  217.113780][ T8064]  ? __fget_files+0x206/0x3a0
[  217.113801][ T8064]  __sys_sendmsg+0x16e/0x220
[  217.113824][ T8064]  ? __pfx___sys_sendmsg+0x10/0x10
[  217.113861][ T8064]  do_syscall_64+0xcd/0x250
[  217.113884][ T8064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.113907][ T8064] RIP: 0033:0x7f645078d169
[  217.113920][ T8064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.113937][ T8064] RSP: 002b:00007f6451534038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  217.113954][ T8064] RAX: ffffffffffffffda RBX: 00007f64509a5fa0 RCX: 00007f645078d169
[  217.113965][ T8064] RDX: 0000000000008804 RSI: 0000400000000300 RDI: 0000000000000003
[  217.113976][ T8064] RBP: 00007f6451534090 R08: 0000000000000000 R09: 0000000000000000
[  217.113987][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.113997][ T8064] R13: 0000000000000000 R14: 00007f64509a5fa0 R15: 00007ffeed1da268
[  217.114020][ T8064]  </TASK>
[  219.878481][ T8097] fuse: Bad value for 'fd'
[  221.900425][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'.
[  221.968657][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'.
[  222.085094][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.572'.
[  222.101890][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.572'.
[  222.543616][ T8144] FAULT_INJECTION: forcing a failure.
[  222.543616][ T8144] name failslab, interval 1, probability 0, space 0, times 0
[  222.617906][ T8144] CPU: 0 UID: 0 PID: 8144 Comm: syz.5.575 Not tainted 6.14.0-rc5-syzkaller #0
[  222.617933][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  222.617943][ T8144] Call Trace:
[  222.617949][ T8144]  <TASK>
[  222.617956][ T8144]  dump_stack_lvl+0x16c/0x1f0
[  222.617983][ T8144]  should_fail_ex+0x50a/0x650
[  222.618008][ T8144]  ? fs_reclaim_acquire+0xae/0x150
[  222.618036][ T8144]  should_failslab+0xc2/0x120
[  222.618057][ T8144]  kmem_cache_alloc_node_noprof+0x72/0x3c0
[  222.618076][ T8144]  ? __alloc_skb+0x2b1/0x380
[  222.618101][ T8144]  __alloc_skb+0x2b1/0x380
[  222.618124][ T8144]  ? __pfx___alloc_skb+0x10/0x10
[  222.618146][ T8144]  ? genl_rcv_msg+0x4bd/0x800
[  222.618177][ T8144]  netlink_ack+0x15f/0xb80
[  222.618199][ T8144]  ? __pfx___lock_acquire+0x10/0x10
[  222.618229][ T8144]  netlink_rcv_skb+0x348/0x440
[  222.618250][ T8144]  ? __pfx_genl_rcv_msg+0x10/0x10
[  222.618277][ T8144]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  222.618309][ T8144]  ? down_read+0xc9/0x330
[  222.618331][ T8144]  ? __pfx_down_read+0x10/0x10
[  222.618353][ T8144]  ? netlink_deliver_tap+0x1ae/0xd30
[  222.618378][ T8144]  genl_rcv+0x28/0x40
[  222.618400][ T8144]  netlink_unicast+0x53c/0x7f0
[  222.618424][ T8144]  ? __pfx_netlink_unicast+0x10/0x10
[  222.618459][ T8144]  netlink_sendmsg+0x8b8/0xd70
[  222.618485][ T8144]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.618517][ T8144]  ____sys_sendmsg+0xaaf/0xc90
[  222.618536][ T8144]  ? copy_msghdr_from_user+0x10b/0x160
[  222.618559][ T8144]  ? __pfx_____sys_sendmsg+0x10/0x10
[  222.618589][ T8144]  ___sys_sendmsg+0x135/0x1e0
[  222.618614][ T8144]  ? __pfx____sys_sendmsg+0x10/0x10
[  222.618649][ T8144]  ? __pfx_lock_release+0x10/0x10
[  222.618672][ T8144]  ? trace_lock_acquire+0x14e/0x1f0
[  222.618702][ T8144]  ? __fget_files+0x206/0x3a0
[  222.618725][ T8144]  __sys_sendmsg+0x16e/0x220
[  222.618749][ T8144]  ? __pfx___sys_sendmsg+0x10/0x10
[  222.618789][ T8144]  do_syscall_64+0xcd/0x250
[  222.618813][ T8144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.618837][ T8144] RIP: 0033:0x7f109bf8d169
[  222.618852][ T8144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.618869][ T8144] RSP: 002b:00007f109ce7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.618886][ T8144] RAX: ffffffffffffffda RBX: 00007f109c1a5fa0 RCX: 00007f109bf8d169
[  222.618897][ T8144] RDX: 0000000000000044 RSI: 0000400000000040 RDI: 0000000000000004
[  222.618907][ T8144] RBP: 00007f109ce7e090 R08: 0000000000000000 R09: 0000000000000000
[  222.618917][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.618927][ T8144] R13: 0000000000000000 R14: 00007f109c1a5fa0 R15: 00007ffdf60b52c8
[  222.618951][ T8144]  </TASK>
[  223.019878][ T8154] netlink: 'syz.2.574': attribute type 39 has an invalid length.
[  223.034706][   T29] audit: type=1400 audit(1740992689.477:459): avc:  denied  { ioctl } for  pid=8146 comm="syz.4.576" path="socket:[16958]" dev="sockfs" ino=16958 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  223.628236][ T8164] fuse: Bad value for 'fd'
[  223.713192][   T29] audit: type=1400 audit(1740992690.157:460): avc:  denied  { sqpoll } for  pid=8160 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  223.845638][   T29] audit: type=1400 audit(1740992690.167:461): avc:  denied  { create } for  pid=8160 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  223.940945][   T29] audit: type=1400 audit(1740992690.167:462): avc:  denied  { listen } for  pid=8160 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  224.215215][ T8182] netlink: 10 bytes leftover after parsing attributes in process `syz.4.584'.
[  224.804206][   T29] audit: type=1400 audit(1740992691.327:463): avc:  denied  { accept } for  pid=8181 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  225.114659][   T29] audit: type=1326 audit(1740992691.637:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  225.247603][   T29] audit: type=1326 audit(1740992691.657:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  225.282713][  T970] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  225.321998][   T29] audit: type=1326 audit(1740992691.657:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  225.346732][   T29] audit: type=1326 audit(1740992691.657:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  225.395185][   T29] audit: type=1326 audit(1740992691.657:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  225.473058][  T970] usb 5-1: Using ep0 maxpacket: 8
[  225.488324][  T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  225.502321][ T8212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.513630][  T970] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  225.524089][ T8212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.545552][  T970] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  225.565545][  T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.576745][  T970] usb 5-1: Product: syz
[  225.581442][  T970] usb 5-1: Manufacturer: syz
[  225.586428][  T970] usb 5-1: SerialNumber: syz
[  225.599209][  T970] usb 5-1: config 0 descriptor??
[  225.762754][ T5868] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  225.828159][  T970] usb 5-1: USB disconnect, device number 11
[  225.922738][ T5923] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  225.931466][ T5868] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  225.942801][ T8221] fuse: Bad value for 'fd'
[  225.948009][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.976466][ T5868] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  225.996193][ T5868] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  226.023090][ T5868] usb 1-1: Manufacturer: syz
[  226.041895][ T5868] usb 1-1: config 0 descriptor??
[  226.072825][ T5923] usb 6-1: device descriptor read/64, error -71
[  226.132727][ T5868] rc_core: IR keymap rc-hauppauge not found
[  226.141168][ T5868] Registered IR keymap rc-empty
[  226.157571][ T5868] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  226.183522][ T5868] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16
[  226.270282][   T45] usb 1-1: USB disconnect, device number 15
[  226.332764][ T5923] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  226.493207][ T5923] usb 6-1: device descriptor read/64, error -71
[  226.612991][ T5923] usb usb6-port1: attempt power cycle
[  226.771781][ T5820] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[  227.072712][ T5923] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  227.109099][ T5923] usb 6-1: device descriptor read/8, error -71
[  227.190867][ T8266] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  227.212585][ T8269] netlink: 40 bytes leftover after parsing attributes in process `syz.4.600'.
[  227.311595][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'.
[  227.394976][ T5923] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  227.437678][ T5923] usb 6-1: device descriptor read/8, error -71
[  227.594226][ T5923] usb usb6-port1: unable to enumerate USB device
[  229.083488][   T29] kauditd_printk_skb: 73 callbacks suppressed
[  229.083528][   T29] audit: type=1400 audit(1740992695.587:542): avc:  denied  { nlmsg_write } for  pid=8300 comm="syz.5.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  230.209184][   T29] audit: type=1107 audit(1740992695.587:543): pid=8300 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  230.209602][   T29] audit: type=1400 audit(1740992696.217:544): avc:  denied  { ioctl } for  pid=8309 comm="syz.5.611" path="socket:[18166]" dev="sockfs" ino=18166 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  230.638544][   T29] audit: type=1400 audit(1740992697.147:545): avc:  denied  { bind } for  pid=8320 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  230.828784][ T8325] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  231.676571][   T29] audit: type=1400 audit(1740992698.195:546): avc:  denied  { connect } for  pid=8337 comm="syz.5.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  231.700339][ T8338] netlink: 24 bytes leftover after parsing attributes in process `syz.5.618'.
[  231.859931][ T8347] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  231.910286][ T8347] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.918365][ T8347] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.033336][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'.
[  232.326837][   T25] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  232.428556][ T5822] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  232.449585][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'.
[  232.623933][ T5822] usb 6-1: Using ep0 maxpacket: 32
[  232.653244][   T25] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  232.884626][ T5822] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  232.894539][ T5822] usb 6-1: config 0 has no interface number 0
[  232.908814][ T5822] usb 6-1: config 0 interface 12 has no altsetting 0
[  232.939960][   T25] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  232.959087][ T5822] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  232.960059][   T25] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  232.989299][   T25] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  232.998606][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.114946][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.115374][ T8354] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  233.130345][ T5822] usb 6-1: Product: syz
[  233.142499][ T5822] usb 6-1: Manufacturer: syz
[  233.153533][ T5822] usb 6-1: SerialNumber: syz
[  233.173098][ T5822] usb 6-1: config 0 descriptor??
[  233.235875][ T8368] team0 (unregistering): Port device team_slave_0 removed
[  233.247149][ T8368] team0 (unregistering): Port device team_slave_1 removed
[  233.526923][ T8379] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=49434 sclass=netlink_xfrm_socket pid=8379 comm=syz.2.629
[  233.883645][ T8384] Cannot find add_set index 0 as target
[  233.890409][ T8383] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  233.932978][ T8383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  233.988843][ T5822] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  234.000208][ T5822] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  234.016533][ T5822] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  234.036238][ T5822] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  234.050824][   T25] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  234.083768][ T5822] usb 6-1: USB disconnect, device number 11
[  234.092969][   T25] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input17
[  234.180218][   T25] usb 5-1: USB disconnect, device number 12
[  234.186224][    C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  235.730713][ T8426] xt_CT: You must specify a L4 protocol and not use inversions on it
[  236.569096][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'.
[  236.924621][ T8449] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  237.751835][   T29] audit: type=1400 audit(1740992704.434:547): avc:  denied  { getopt } for  pid=8459 comm="syz.5.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  239.574361][ T8483] netlink: 'syz.4.652': attribute type 1 has an invalid length.
[  239.656139][ T8483] 8021q: adding VLAN 0 to HW filter on device bond1
[  239.775998][ T8491] bond1: (slave gretap1): making interface the new active one
[  239.871776][   T29] audit: type=1400 audit(1740992706.596:548): avc:  denied  { module_request } for  pid=8492 comm="syz.2.654" kmod="net-pf-10-proto-0-type-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  239.894457][    C0] vkms_vblank_simulate: vblank timer overrun
[  239.903002][ T8491] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  240.010669][ T8483] bond1: (slave bridge1): Enslaving as an active interface with a down link
[  240.026263][   T29] audit: type=1400 audit(1740992706.749:549): avc:  denied  { write } for  pid=8500 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  240.061426][ T8501] FAULT_INJECTION: forcing a failure.
[  240.061426][ T8501] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  240.080340][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'.
[  240.089365][ T8501] CPU: 0 UID: 0 PID: 8501 Comm: syz.2.655 Not tainted 6.14.0-rc5-syzkaller #0
[  240.089386][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  240.089396][ T8501] Call Trace:
[  240.089401][ T8501]  <TASK>
[  240.089407][ T8501]  dump_stack_lvl+0x16c/0x1f0
[  240.089432][ T8501]  should_fail_ex+0x50a/0x650
[  240.089457][ T8501]  _copy_to_user+0x32/0xd0
[  240.089474][ T8501]  simple_read_from_buffer+0xd0/0x160
[  240.089500][ T8501]  proc_fail_nth_read+0x198/0x270
[  240.089524][ T8501]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  240.089548][ T8501]  ? rw_verify_area+0xcf/0x680
[  240.089569][ T8501]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  240.089592][ T8501]  vfs_read+0x1df/0xbf0
[  240.089617][ T8501]  ? __fget_files+0x1fc/0x3a0
[  240.089633][ T8501]  ? __pfx___mutex_lock+0x10/0x10
[  240.089654][ T8501]  ? __pfx_vfs_read+0x10/0x10
[  240.089684][ T8501]  ? __fget_files+0x206/0x3a0
[  240.089706][ T8501]  ksys_read+0x12b/0x250
[  240.089730][ T8501]  ? __pfx_ksys_read+0x10/0x10
[  240.089761][ T8501]  do_syscall_64+0xcd/0x250
[  240.089784][ T8501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.089805][ T8501] RIP: 0033:0x7f832758bb7c
[  240.089819][ T8501] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  240.089834][ T8501] RSP: 002b:00007f8328377030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  240.089851][ T8501] RAX: ffffffffffffffda RBX: 00007f83277a5fa0 RCX: 00007f832758bb7c
[  240.089861][ T8501] RDX: 000000000000000f RSI: 00007f83283770a0 RDI: 0000000000000006
[  240.089870][ T8501] RBP: 00007f8328377090 R08: 0000000000000000 R09: 0000000000000000
[  240.089879][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  240.089888][ T8501] R13: 0000000000000000 R14: 00007f83277a5fa0 R15: 00007ffc74cc4f08
[  240.089908][ T8501]  </TASK>
[  240.273440][    C0] vkms_vblank_simulate: vblank timer overrun
[  240.286631][ T8503] macvlan0: entered promiscuous mode
[  240.292184][ T8503] macvlan0: entered allmulticast mode
[  240.448669][ T5923] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  241.126188][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short
[  241.137710][ T5923] usb 5-1: not running at top speed; connect to a high speed hub
[  241.147133][ T5923] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[  241.158456][ T5923] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  241.189296][ T5923] usb 5-1: config 4 has no interface number 0
[  241.224663][ T5923] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  241.265792][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.334089][ T5923] usb 5-1: Product: syz
[  241.363960][ T5923] usb 5-1: Manufacturer: syz
[  241.368592][ T5923] usb 5-1: SerialNumber: syz
[  242.513627][ T5923] usb 5-1: Found UVC 0.02 device syz (04f2:b746)
[  242.520038][ T5923] usb 5-1: No streaming interface found for terminal 6.
[  242.594231][ T5923] usb 5-1: USB disconnect, device number 13
[  243.070682][ T8549] bpf: Bad value for 'gid'
[  243.462220][   T29] audit: type=1400 audit(1740992709.850:550): avc:  denied  { append } for  pid=8538 comm="syz.0.666" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  243.836425][   T29] audit: type=1400 audit(1740992710.479:551): avc:  denied  { read write } for  pid=8543 comm="syz.2.668" dev="sockfs" ino=19543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  243.869275][ T8554] netlink: 44 bytes leftover after parsing attributes in process `syz.5.669'.
[  243.922673][   T29] audit: type=1400 audit(1740992710.570:552): avc:  denied  { map } for  pid=8543 comm="syz.2.668" path="socket:[18786]" dev="sockfs" ino=18786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  244.009118][ T8554] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  244.025105][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.669'.
[  244.191519][ T8554] netlink: 20 bytes leftover after parsing attributes in process `syz.5.669'.
[  245.219524][   T29] audit: type=1400 audit(1740992711.534:553): avc:  denied  { mounton } for  pid=8580 comm="syz.0.676" path="/131/file0" dev="tmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  245.291752][ T8587] FAULT_INJECTION: forcing a failure.
[  245.291752][ T8587] name failslab, interval 1, probability 0, space 0, times 0
[  245.304671][ T8587] CPU: 0 UID: 0 PID: 8587 Comm: syz.1.675 Not tainted 6.14.0-rc5-syzkaller #0
[  245.304693][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  245.304702][ T8587] Call Trace:
[  245.304709][ T8587]  <TASK>
[  245.304715][ T8587]  dump_stack_lvl+0x16c/0x1f0
[  245.304733][ T8587]  should_fail_ex+0x50a/0x650
[  245.304750][ T8587]  ? fs_reclaim_acquire+0xae/0x150
[  245.304767][ T8587]  ? sctp_auth_init+0x2e1/0x540
[  245.304781][ T8587]  should_failslab+0xc2/0x120
[  245.304794][ T8587]  __kmalloc_cache_noprof+0x68/0x410
[  245.304810][ T8587]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  245.304824][ T8587]  sctp_auth_init+0x2e1/0x540
[  245.304839][ T8587]  sctp_setsockopt+0xa344/0xb810
[  245.304855][ T8587]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[  245.304873][ T8587]  ? __pfx_sctp_setsockopt+0x10/0x10
[  245.304892][ T8587]  ? selinux_socket_setsockopt+0x6a/0x80
[  245.304905][ T8587]  ? sock_common_setsockopt+0x2e/0xf0
[  245.304924][ T8587]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  245.304942][ T8587]  do_sock_setsockopt+0x222/0x480
[  245.304960][ T8587]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  245.304983][ T8587]  ? lock_acquire+0x2f/0xb0
[  245.305004][ T8587]  __sys_setsockopt+0x1a0/0x230
[  245.305020][ T8587]  __x64_sys_setsockopt+0xbd/0x160
[  245.305034][ T8587]  ? do_syscall_64+0x91/0x250
[  245.305053][ T8587]  ? lockdep_hardirqs_on+0x7c/0x110
[  245.305072][ T8587]  do_syscall_64+0xcd/0x250
[  245.305093][ T8587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.305111][ T8587] RIP: 0033:0x7f846698d169
[  245.305121][ T8587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.305131][ T8587] RSP: 002b:00007f846785b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  245.305142][ T8587] RAX: ffffffffffffffda RBX: 00007f8466ba6080 RCX: 00007f846698d169
[  245.305148][ T8587] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 000000000000000a
[  245.305154][ T8587] RBP: 00007f846785b090 R08: 0000000000000008 R09: 0000000000000000
[  245.305160][ T8587] R10: 0000400000000280 R11: 0000000000000246 R12: 0000000000000001
[  245.305166][ T8587] R13: 0000000000000000 R14: 00007f8466ba6080 R15: 00007fff71ec0348
[  245.305179][ T8587]  </TASK>
[  245.869349][ T8594] netlink: 9 bytes leftover after parsing attributes in process `syz.2.677'.
[  247.204065][ T8615] input: syz0 as /devices/virtual/input/input18
[  247.999781][   T29] audit: type=1400 audit(1740992714.833:554): avc:  denied  { connect } for  pid=8638 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  248.047465][ T8639] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20000
[  248.729710][ T8632] Invalid source name
[  248.734665][ T8632] UBIFS error (pid: 8632): cannot open "./file0", error -22
[  248.780782][ T8657] ptrace attach of "./syz-executor exec"[5814] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  248.803576][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'.
[  249.120512][ T8672] loop9: detected capacity change from 0 to 8
[  249.132397][ T8672] Dev loop9: unable to read RDB block 8
[  249.447235][ T8672]  loop9: unable to read partition table
[  249.555392][ T8672] loop9: partition table beyond EOD, truncated
[  249.572587][ T8672] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5)
[  249.724669][ T8690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.753525][ T8690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.788684][ T8690] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0
[  249.988398][ T5868] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  250.023284][ T8701] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  250.621991][   T29] audit: type=1400 audit(1740992717.459:555): avc:  denied  { setopt } for  pid=8704 comm="syz.5.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  250.758295][   T29] audit: type=1400 audit(1740992717.621:556): avc:  denied  { write } for  pid=8704 comm="syz.5.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  251.011781][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.709'.
[  251.040181][ T5822] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  251.209057][ T5822] usb 5-1: Using ep0 maxpacket: 32
[  251.235773][ T5822] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  251.285235][ T5822] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  251.310558][ T5822] usb 5-1: New USB device strings: Mfr=10, Product=131, SerialNumber=0
[  251.325940][   T29] audit: type=1400 audit(1740992718.186:557): avc:  denied  { name_connect } for  pid=8738 comm="syz.1.711" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  251.326430][ T5822] usb 5-1: Product: syz
[  251.373382][ T5822] usb 5-1: Manufacturer: syz
[  251.411746][ T5822] hub 5-1:4.0: bad descriptor, ignoring hub
[  251.424300][ T5822] hub 5-1:4.0: probe with driver hub failed with error -5
[  251.505430][ T8711] Invalid source name
[  251.509817][ T8711] UBIFS error (pid: 8711): cannot open "./file0", error -22
[  251.635709][   T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  251.650473][ T8713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.193722][ T8713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.248895][ T8713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.391025][ T8713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.447904][   T25] usb 6-1: device descriptor read/64, error -71
[  252.617703][ T5927] usb 5-1: USB disconnect, device number 14
[  252.754132][   T25] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  252.772371][ T8780] 9pnet_fd: Insufficient options for proto=fd
[  252.813445][   T29] audit: type=1400 audit(1740992719.668:558): avc:  denied  { bind } for  pid=8771 comm=5A92936C2586CE36DB0CCF197C894F scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  252.847140][ T8784] SELinux: syz.0.716 (8784) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  253.170924][   T25] usb 6-1: device descriptor read/64, error -71
[  253.294039][   T25] usb usb6-port1: attempt power cycle
[  254.084115][   T25] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  254.138854][   T25] usb 6-1: device descriptor read/8, error -71
[  254.970608][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  254.977661][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  255.119739][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'.
[  255.141437][ T8821] netlink: 'syz.2.726': attribute type 30 has an invalid length.
[  255.205605][ T8821] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  255.214693][ T8821] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  255.223619][ T8821] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  255.232534][ T8821] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  255.524311][   T25] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  255.893549][   T25] usb 6-1: Using ep0 maxpacket: 8
[  255.959696][   T25] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  256.197029][   T29] audit: type=1400 audit(1740992723.092:559): avc:  denied  { write } for  pid=8830 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  256.216810][   T25] usb 6-1: config 179 has no interface number 0
[  256.230625][ T8839] netlink: 'syz.0.729': attribute type 9 has an invalid length.
[  256.245325][   T25] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  256.262341][   T25] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  256.265804][   T29] audit: type=1400 audit(1740992723.092:560): avc:  denied  { ioctl } for  pid=8830 comm="syz.1.728" path="socket:[20500]" dev="sockfs" ino=20500 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  256.294034][   T25] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  256.298313][    C0] vkms_vblank_simulate: vblank timer overrun
[  256.417474][   T25] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  256.586478][   T25] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  256.762789][ T8858] netlink: 'syz.4.730': attribute type 10 has an invalid length.
[  256.770579][ T8858] netlink: 2 bytes leftover after parsing attributes in process `syz.4.730'.
[  256.779422][ T8858] team0: entered promiscuous mode
[  256.784449][ T8858] team_slave_0: entered promiscuous mode
[  256.790333][ T8858] team_slave_1: entered promiscuous mode
[  256.796338][ T8858] bridge0: port 3(team0) entered blocking state
[  256.802620][ T8858] bridge0: port 3(team0) entered disabled state
[  256.809025][ T8858] team0: entered allmulticast mode
[  256.825974][ T8858] team_slave_0: entered allmulticast mode
[  256.860305][ T8858] team_slave_1: entered allmulticast mode
[  257.601580][   T25] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  257.601611][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.975500][ T8858] bridge0: port 3(team0) entered blocking state
[  257.982090][ T8858] bridge0: port 3(team0) entered forwarding state
[  258.032967][ T8829] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  258.335852][ T8863] FAULT_INJECTION: forcing a failure.
[  258.335852][ T8863] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  258.355755][ T5153] usb 6-1: USB disconnect, device number 15
[  258.361755][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  258.361797][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  258.403377][ T8863] CPU: 1 UID: 0 PID: 8863 Comm: syz.0.736 Not tainted 6.14.0-rc5-syzkaller #0
[  258.403400][ T8863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  258.403409][ T8863] Call Trace:
[  258.403414][ T8863]  <TASK>
[  258.403421][ T8863]  dump_stack_lvl+0x16c/0x1f0
[  258.403449][ T8863]  should_fail_ex+0x50a/0x650
[  258.403477][ T8863]  _copy_from_user+0x2e/0xd0
[  258.403493][ T8863]  ? __pfx_do_get_feature_msr+0x10/0x10
[  258.403516][ T8863]  memdup_user+0x71/0xd0
[  258.403540][ T8863]  msr_io+0xeb/0x290
[  258.403559][ T8863]  ? __pfx_msr_io+0x10/0x10
[  258.403577][ T8863]  ? tomoyo_path_number_perm+0x190/0x590
[  258.403602][ T8863]  kvm_arch_dev_ioctl+0x3b1/0x730
[  258.403619][ T8863]  ? __pfx_kvm_arch_dev_ioctl+0x10/0x10
[  258.403636][ T8863]  ? do_vfs_ioctl+0x513/0x1990
[  258.403660][ T8863]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  258.403689][ T8863]  ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450
[  258.403717][ T8863]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  258.403745][ T8863]  kvm_dev_ioctl+0x781/0x1a90
[  258.403764][ T8863]  ? __pfx_lock_release+0x10/0x10
[  258.403793][ T8863]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  258.403813][ T8863]  ? selinux_file_ioctl+0x180/0x270
[  258.403837][ T8863]  ? selinux_file_ioctl+0xb4/0x270
[  258.403863][ T8863]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  258.403880][ T8863]  __x64_sys_ioctl+0x190/0x200
[  258.403904][ T8863]  do_syscall_64+0xcd/0x250
[  258.403926][ T8863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.403949][ T8863] RIP: 0033:0x7fb414d8d169
[  258.403963][ T8863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.403979][ T8863] RSP: 002b:00007fb415cc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  258.403997][ T8863] RAX: ffffffffffffffda RBX: 00007fb414fa5fa0 RCX: 00007fb414d8d169
[  258.404008][ T8863] RDX: 00004000000000c0 RSI: 00000000c008ae88 RDI: 0000000000000004
[  258.404018][ T8863] RBP: 00007fb415cc4090 R08: 0000000000000000 R09: 0000000000000000
[  258.404028][ T8863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  258.404038][ T8863] R13: 0000000000000000 R14: 00007fb414fa5fa0 R15: 00007fffe5867788
[  258.404061][ T8863]  </TASK>
[  259.103661][   T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  259.282247][   T25] usb 3-1: Using ep0 maxpacket: 16
[  259.288749][   T25] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  259.335023][   T25] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.371290][   T25] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  259.458316][   T25] usb 3-1: config 0 interface 0 has no altsetting 0
[  259.538644][   T25] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  259.604539][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.665720][   T25] usb 3-1: config 0 descriptor??
[  260.150003][   T25] playstation 0003:054C:0CE6.0001: unknown main item tag 0x0
[  260.209552][   T25] playstation 0003:054C:0CE6.0001: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.2-1/input0
[  260.422145][   T25] playstation 0003:054C:0CE6.0001: Invalid byte count transferred, expected 20 got 0
[  260.438845][   T25] playstation 0003:054C:0CE6.0001: Failed to retrieve DualSense pairing info: -22
[  260.471186][   T25] playstation 0003:054C:0CE6.0001: Failed to get MAC address from DualSense
[  260.704077][   T29] audit: type=1326 audit(1740992727.467:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  260.830904][   T25] playstation 0003:054C:0CE6.0001: Failed to create dualsense.
[  260.958089][   T25] playstation 0003:054C:0CE6.0001: probe with driver playstation failed with error -22
[  260.973490][   T29] audit: type=1326 audit(1740992727.467:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  261.008315][   T25] usb 3-1: USB disconnect, device number 11
[  261.071322][   T29] audit: type=1326 audit(1740992727.467:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  261.187289][   T29] audit: type=1326 audit(1740992727.467:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  261.430364][   T29] audit: type=1326 audit(1740992727.467:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  261.453616][    C0] vkms_vblank_simulate: vblank timer overrun
[  261.624343][   T29] audit: type=1326 audit(1740992727.477:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  261.839976][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'.
[  261.848916][ T8942] bridge_slave_1: left allmulticast mode
[  261.854606][ T8942] bridge_slave_1: left promiscuous mode
[  261.861732][ T8942] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.243497][   T29] audit: type=1326 audit(1740992727.477:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  262.266761][    C0] vkms_vblank_simulate: vblank timer overrun
[  262.339668][ T8942] bridge_slave_0: left allmulticast mode
[  262.406842][ T8942] bridge_slave_0: left promiscuous mode
[  262.416921][ T8942] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.471312][   T29] audit: type=1326 audit(1740992727.477:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  262.675733][   T29] audit: type=1326 audit(1740992727.477:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  262.698885][    C0] vkms_vblank_simulate: vblank timer overrun
[  263.293267][   T29] audit: type=1326 audit(1740992727.477:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  263.316471][    C0] vkms_vblank_simulate: vblank timer overrun
[  263.470884][   T29] audit: type=1326 audit(1740992727.477:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  263.532314][   T29] audit: type=1326 audit(1740992727.477:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  263.648513][ T8960] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  263.661686][   T29] audit: type=1326 audit(1740992727.477:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8913 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109bf8d169 code=0x7ffc0000
[  263.692421][ T8965] fuse: Bad value for 'fd'
[  263.882764][ T8977] netlink: 48 bytes leftover after parsing attributes in process `syz.2.763'.
[  263.953822][ T8980] netlink: 48 bytes leftover after parsing attributes in process `syz.0.764'.
[  264.060166][ T5822] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  264.312323][ T5822] usb 5-1: device descriptor read/64, error -71
[  264.376833][ T8988] (unnamed net_device) (uninitialized): peer notification delay (3) is not a multiple of miimon (9), value rounded to 0 ms
[  264.443433][ T8988] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  264.908522][ T5822] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  264.964436][ T8999] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  265.056519][ T5822] usb 5-1: device descriptor read/64, error -71
[  265.173617][ T5822] usb usb5-port1: attempt power cycle
[  265.409907][ T9010] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  265.854631][ T9007] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  265.893621][ T5822] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  265.913864][ T5822] usb 5-1: device descriptor read/8, error -71
[  266.229664][ T5822] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  266.604420][ T5822] usb 5-1: device descriptor read/8, error -71
[  266.724192][ T5822] usb usb5-port1: unable to enumerate USB device
[  267.330050][ T9033] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  271.315989][ T9048] netlink: 48 bytes leftover after parsing attributes in process `syz.2.781'.
[  274.668630][ T5822] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  275.299107][ T5822] usb 5-1: Using ep0 maxpacket: 8
[  279.312880][    C1] sched: DL replenish lagged too much
[  285.478815][ T5822] usb 5-1: device descriptor read/all, error -71
[  313.417707][ T5820] Bluetooth: hci5: command 0x0406 tx timeout
[  316.965644][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  317.493335][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  377.840970][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  377.851289][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  440.375525][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  440.392753][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  500.842897][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  500.854577][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  563.876520][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  564.141551][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  570.627226][   T30] INFO: task kworker/u8:15:7730 blocked for more than 148 seconds.
[  570.640868][   T30]       Not tainted 6.14.0-rc5-syzkaller #0
[  570.646768][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  572.020708][   T30] task:kworker/u8:15   state:D stack:27832 pid:7730  tgid:7730  ppid:2      task_flags:0x4208060 flags:0x00004000
[  572.032813][   T30] Workqueue: events_unbound linkwatch_event
[  572.038738][   T30] Call Trace:
[  572.270710][   T30]  <TASK>
[  572.273685][   T30]  __schedule+0xf43/0x5890
[  572.278104][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  572.466899][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  572.581719][   T30]  ? __pfx___schedule+0x10/0x10
[  572.586614][   T30]  ? schedule+0x298/0x350
[  572.690647][   T30]  ? __pfx_lock_release+0x10/0x10
[  572.695724][   T30]  ? __mutex_trylock_common+0x78/0x250
[  572.820653][   T30]  ? lock_acquire+0x2f/0xb0
[  572.825199][   T30]  ? schedule+0x1fd/0x350
[  572.829535][   T30]  schedule+0xe7/0x350
[  572.890645][   T30]  schedule_preempt_disabled+0x13/0x30
[  572.896150][   T30]  __mutex_lock+0x6bd/0xb10
[  572.975891][   T30]  ? linkwatch_event+0x51/0xc0
[  573.000647][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  573.005714][   T30]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  573.094131][   T30]  ? rcu_is_watching+0x12/0xc0
[  573.098953][   T30]  ? linkwatch_event+0x51/0xc0
[  573.156325][   T30]  linkwatch_event+0x51/0xc0
[  573.183585][   T30]  ? __pfx_linkwatch_event+0x10/0x10
[  573.188917][   T30]  ? rcu_is_watching+0x12/0xc0
[  573.253709][   T30]  process_one_work+0x9c5/0x1ba0
[  573.258719][   T30]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  573.330704][   T30]  ? __pfx_process_one_work+0x10/0x10
[  573.336137][   T30]  ? assign_work+0x1a0/0x250
[  573.396594][   T30]  worker_thread+0x6c8/0xf00
[  573.430647][   T30]  ? __pfx_worker_thread+0x10/0x10
[  573.435802][   T30]  kthread+0x3af/0x750
[  573.439882][   T30]  ? __pfx_kthread+0x10/0x10
[  573.523321][   T30]  ? lock_acquire+0x2f/0xb0
[  573.527875][   T30]  ? __pfx_kthread+0x10/0x10
[  573.570673][   T30]  ret_from_fork+0x45/0x80
[  573.575127][   T30]  ? __pfx_kthread+0x10/0x10
[  573.579723][   T30]  ret_from_fork_asm+0x1a/0x30
[  573.653792][   T30]  </TASK>
[  573.684214][   T30] 
[  573.684214][   T30] Showing all locks held in the system:
[  574.020692][   T30] 1 lock held by khungtaskd/30:
[  574.040684][   T30]  #0: ffffffff8e1bccc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390
[  574.050589][   T30] 4 locks held by kworker/0:2/970:
[  574.145894][   T30] 2 locks held by jbd2/sda1-8/5154:
[  574.250700][   T30] 1 lock held by klogd/5181:
[  574.255311][   T30] 3 locks held by udevd/5192:
[  574.259957][   T30] 4 locks held by dhcpcd/5485:
[  574.373567][   T30] 5 locks held by dhcpcd/5486:
[  574.378361][   T30] 2 locks held by getty/5571:
[  574.446744][   T30]  #0: ffff8880376090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  574.530688][   T30]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480
[  574.600687][   T30] 2 locks held by syz-executor/5815:
[  574.606004][   T30]  #0: ffffffff8fef7528 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  574.680672][   T30]  #1: ffffffff8e1c8138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0
[  574.750676][   T30] 2 locks held by syz-executor/5816:
[  574.755991][   T30] 2 locks held by kworker/0:3/5822:
[  574.820668][   T30] 1 lock held by syz-executor/5833:
[  574.825899][   T30]  #0: ffffffff8fef7528 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  574.952545][   T30] 4 locks held by syz-executor/7509:
[  574.957863][   T30] 4 locks held by kworker/u8:22/7737:
[  575.020720][   T30]  #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  575.090676][   T30]  #1: ffffc900042f7d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  575.170689][   T30]  #2: ffffffff8fee1810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30
[  575.180055][   T30]  #3: ffffffff8fef7528 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x230
[  575.329211][   T30] 1 lock held by syz-executor/9062:
[  575.347236][   T30] 3 locks held by syz-executor/9065:
[  575.400683][   T30] 3 locks held by syz-executor/9067:
[  575.410821][   T30] 
[  575.413163][   T30] =============================================
[  575.413163][   T30] 
[  575.470668][   T30] NMI backtrace for cpu 1
[  575.470683][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller #0
[  575.470701][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  575.470709][   T30] Call Trace:
[  575.470714][   T30]  <TASK>
[  575.470720][   T30]  dump_stack_lvl+0x116/0x1f0
[  575.470744][   T30]  nmi_cpu_backtrace+0x27b/0x390
[  575.470767][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  575.470790][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  575.470823][   T30]  watchdog+0xf62/0x12b0
[  575.470851][   T30]  ? __pfx_watchdog+0x10/0x10
[  575.470875][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  575.470895][   T30]  ? __kthread_parkme+0x148/0x220
[  575.470913][   T30]  ? __pfx_watchdog+0x10/0x10
[  575.470938][   T30]  kthread+0x3af/0x750
[  575.470958][   T30]  ? __pfx_kthread+0x10/0x10
[  575.470982][   T30]  ? __pfx_kthread+0x10/0x10
[  575.471003][   T30]  ret_from_fork+0x45/0x80
[  575.471024][   T30]  ? __pfx_kthread+0x10/0x10
[  575.471045][   T30]  ret_from_fork_asm+0x1a/0x30
[  575.471075][   T30]  </TASK>
[  575.471085][   T30] Sending NMI from CPU 1 to CPUs 0:
[  575.581250][    C0] NMI backtrace for cpu 0
[  575.581262][    C0] CPU: 0 UID: 0 PID: 7740 Comm: kworker/u8:25 Not tainted 6.14.0-rc5-syzkaller #0
[  575.581278][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  575.581286][    C0] Workqueue: bat_events batadv_nc_worker
[  575.581307][    C0] RIP: 0010:lock_release+0x27/0x6f0
[  575.581326][    C0] Code: 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 57 41 56 41 55 41 54 49 89 fc 55 53 48 81 ec 90 00 00 00 48 8d 5c 24 10 <48> 89 74 24 08 48 c7 44 24 10 b3 8a b5 41 48 c1 eb 03 48 c7 44 24
[  575.581337][    C0] RSP: 0018:ffffc900042979d8 EFLAGS: 00000286
[  575.581347][    C0] RAX: dffffc0000000000 RBX: ffffc900042979e8 RCX: ffffffff81971e3d
[  575.581355][    C0] RDX: ffff888012b88000 RSI: ffffffff8b25b306 RDI: ffff88805e70d098
[  575.581363][    C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: fffff52000852f48
[  575.581371][    C0] R10: 0000000000000003 R11: 0000000000000002 R12: ffff88805e70d098
[  575.581379][    C0] R13: ffff88805e70d080 R14: 0000000000000000 R15: ffff88805e5932c0
[  575.581387][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  575.581400][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  575.581408][    C0] CR2: 00007f4dd952abd0 CR3: 00000000315c2000 CR4: 00000000003526f0
[  575.581416][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  575.581423][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  575.581430][    C0] Call Trace:
[  575.581435][    C0]  <NMI>
[  575.581440][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[  575.581460][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  575.581476][    C0]  ? nmi_handle+0x1ac/0x5d0
[  575.581493][    C0]  ? lock_release+0x27/0x6f0
[  575.581509][    C0]  ? default_do_nmi+0x6a/0x160
[  575.581528][    C0]  ? exc_nmi+0x170/0x1e0
[  575.581545][    C0]  ? end_repeat_nmi+0xf/0x53
[  575.581570][    C0]  ? do_raw_spin_lock+0x12d/0x2c0
[  575.581582][    C0]  ? batadv_nc_purge_paths+0x1c6/0x390
[  575.581598][    C0]  ? lock_release+0x27/0x6f0
[  575.581614][    C0]  ? lock_release+0x27/0x6f0
[  575.581630][    C0]  ? lock_release+0x27/0x6f0
[  575.581646][    C0]  </NMI>
[  575.581650][    C0]  <TASK>
[  575.581655][    C0]  ? rcu_is_watching+0x12/0xc0
[  575.581668][    C0]  ? do_raw_spin_lock+0x12d/0x2c0
[  575.581679][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  575.581691][    C0]  ? lock_acquire+0x2f/0xb0
[  575.581705][    C0]  ? batadv_nc_purge_paths+0xca/0x390
[  575.581721][    C0]  ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10
[  575.581738][    C0]  _raw_spin_unlock_bh+0x16/0x30
[  575.581751][    C0]  batadv_nc_purge_paths+0x1c6/0x390
[  575.581770][    C0]  batadv_nc_worker+0x94a/0x1060
[  575.581788][    C0]  ? __pfx_batadv_nc_worker+0x10/0x10
[  575.581804][    C0]  ? rcu_is_watching+0x12/0xc0
[  575.581816][    C0]  ? trace_lock_acquire+0x14e/0x1f0
[  575.581830][    C0]  ? process_one_work+0x921/0x1ba0
[  575.581847][    C0]  ? lock_acquire+0x2f/0xb0
[  575.581862][    C0]  ? process_one_work+0x921/0x1ba0
[  575.581878][    C0]  process_one_work+0x9c5/0x1ba0
[  575.581895][    C0]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  575.581912][    C0]  ? __pfx_process_one_work+0x10/0x10
[  575.581929][    C0]  ? assign_work+0x1a0/0x250
[  575.581944][    C0]  worker_thread+0x6c8/0xf00
[  575.581962][    C0]  ? __pfx_worker_thread+0x10/0x10
[  575.581978][    C0]  kthread+0x3af/0x750
[  575.581993][    C0]  ? __pfx_kthread+0x10/0x10
[  575.582007][    C0]  ? lock_acquire+0x2f/0xb0
[  575.582024][    C0]  ? __pfx_kthread+0x10/0x10
[  575.582038][    C0]  ret_from_fork+0x45/0x80
[  575.582053][    C0]  ? __pfx_kthread+0x10/0x10
[  575.582067][    C0]  ret_from_fork_asm+0x1a/0x30
[  575.582085][    C0]  </TASK>
[  576.303496][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  576.310371][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller #0
[  576.319112][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  576.329146][   T30] Call Trace:
[  576.332405][   T30]  <TASK>
[  576.335320][   T30]  dump_stack_lvl+0x3d/0x1f0
[  576.339903][   T30]  panic+0x71d/0x800
[  576.343789][   T30]  ? __pfx_panic+0x10/0x10
[  576.348186][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  576.353546][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  576.359515][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  576.364877][   T30]  ? watchdog+0xdcc/0x12b0
[  576.369283][   T30]  ? watchdog+0xdbf/0x12b0
[  576.373690][   T30]  watchdog+0xddd/0x12b0
[  576.377929][   T30]  ? __pfx_watchdog+0x10/0x10
[  576.382594][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  576.387779][   T30]  ? __kthread_parkme+0x148/0x220
[  576.392785][   T30]  ? __pfx_watchdog+0x10/0x10
[  576.397467][   T30]  kthread+0x3af/0x750
[  576.401531][   T30]  ? __pfx_kthread+0x10/0x10
[  576.406118][   T30]  ? __pfx_kthread+0x10/0x10
[  576.410701][   T30]  ret_from_fork+0x45/0x80
[  576.415118][   T30]  ? __pfx_kthread+0x10/0x10
[  576.419697][   T30]  ret_from_fork_asm+0x1a/0x30
[  576.424458][   T30]  </TASK>
[  576.427648][   T30] Kernel Offset: disabled
[  576.431951][   T30] Rebooting in 86400 seconds..