last executing test programs:

18.853526834s ago: executing program 3 (id=2760):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
keyctl$chown(0x4, 0x0, 0xee01, 0xee00)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=@delchain={0x508, 0x65, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xa, 0x6}, {0xfff2, 0x1}, {0xf, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4d0, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x10}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x1}}, @TCA_BASIC_EMATCHES={0x26c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0xfff}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_META={0x78, 0x1, 0x0, 0x0, {{0x7f, 0x4, 0xb8a}, [@TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="c5b4137bb8", @TCF_META_TYPE_VAR='\x00', @TCF_META_TYPE_VAR="05b775cfbbc06380a4", @TCF_META_TYPE_VAR="dd", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="57d36a1b", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="22561c7c4b9158dd73e1"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="fa36bb51", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="94c784d967", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="c0452eaef5"]}]}}, @TCF_EM_IPT={0x84, 0x2, 0x0, 0x0, {{0x0, 0x9, 0x2d8}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x80}, @TCA_EM_IPT_MATCH_DATA={0x6d, 0x5, "7657c2c40d745675d05e257b89b512fe107aa61df4bf4d69f8b58367c56de2d59a032b7657fb7ab0b063dd5baeeb9804217b0ef6c9123827108c88e938fd8443ab867f035d4be52c0f8c1cb6b1a936e9844c1c7d635c745accc3a09e97cf53648e0803c177a2afc5b9"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xb, 0x7, 0x100}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x5}, {0x9, 0x7, 0x0, "6bac6345c5f0c2"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3, 0x8, 0x6}, {0xffffffffffffffff, 0x3, 0xc}}}, @TCF_EM_IPT={0x64, 0x2, 0x0, 0x0, {{0xf, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0xb80, 0x2, 0x3ff}, {0x0, 0xa, 0x1, "b63257fe8bc76e86e796"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xe23c, 0x7, 0xf6}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xffff, 0x7, 0x9e16}, {{0x2, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x4}, {0x4, 0x5, 0x6, 0x1}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x5c4, 0x4, 0x76}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x8e6}, {0x5, 0xce, 0xcb4, 0x1, 0xc, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x10}, {0x5f7, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_BASIC_EMATCHES={0x250, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1a8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x582, 0x2, 0x7f3}, {0x7}}}, @TCF_EM_META={0x90, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xc, 0x1}, {0x872, 0xff}}}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="1a42196b", @TCF_META_TYPE_VAR="30fd78e41d35"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x10}, {0xf81c, 0x2, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="8eecb72f0445c877", @TCF_META_TYPE_VAR="8149b9c502162e9c", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8391"]}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="1eda1b", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x7, 0x1}, {0x7ff, 0x10, 0x2}}}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="2ddec972", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="1e8029", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x764}, {0x762ec95, 0x101, 0xe, 0xfff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x95c, 0x7, 0x7}, {{0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x400, 0x2, 0x6000}, {0x58, 0x3, 0x2, "38428a"}}}, @TCF_EM_CONTAINER={0xc0, 0x1, 0x0, 0x0, {{0xd, 0x0, 0xc14}, "8a929e3e6fc94a7a112a1768aee3d495d623be8630489a8b9b88419f8c5fbfc74d6707d7e0ef6fd6c6813e1cb8d58305af72313776b08998a39ee132cae440ab6d8ed0b3ab23d02949ba1c113bc4476108b00e244c078634c315804a09b8322c4905a73502fc0b4a0d86f1d3c62feee013558201aa9dc4487753bc9194bc13e4dd22599582c05f894c1597653b56ff5e651fcbe5596028e863daea2688d245f6e22128dc9a641adce4d8a318c2280333e1"}}]}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x1}, {0xffffffffffffffff, 0x3, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x8}, {0x8, 0xbe, 0x2, 0x7, 0x7, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x5}, {0x2, 0x4, 0x6}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xdaf9, 0x1, 0x8001}, {0x3, 0x2, 0xff, 0x0, 0x7, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3ff, 0x7, 0x8000}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3e}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe0a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xaa92}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x7a}}]}, 0x508}}, 0x20040054)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, 0x0})
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x6, 0xbd, 0x0, 0x6, 0x0, 0xf, 0x5, 0x36, 0x0, 0x1, 0x4, 0x0, 0x8, 0x7, 0x2, 0xf9, 0x2, 0x7, '\x00', 0xfe, 0x5})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000001300)={{0x1, 0x0, 0x80, {0x100000, 0x7000, 0x2}}, "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", "22f1bf6656ebe93b168e401f0bb1e836c94b2443a48e6e7fc2aeb2ab3899d8ff0d0c2ba2c25420bb75d6c0aa200dbd4162bc9057778408f43cfe5a030e97000f542cde1748fd2b4478477a2c842fd3424c050d89ab782a71d7a733312776b4f9a852d416951a923960699796f865c94354859346ca6c64b38b2f9dbae332a9679d4fcfec79693b7e111c3a9f89de2d4efe4b28fb3642abbc13e6a9a53883c5a7f48b883883ac268b0b678c5aab8e8d8c8b9eb4dbe66c27ff50e21413ec02ec9250b1032894d2774d9b149109e26970040816eab324d70b160e36525160ef9a03c9dc4a53175582a37f54ce88f5d91657f7e6e8acc1bef5ac49f3c04d57839a96cffe2247b5afcc3815f94fff0e24e89478f81e8750772020eeda759adeba535b16d5d97f7806789dfe2aba3e07b1e269684d18c63b6fb5e29dddfd48c2bbcbb415ce22dfaae7a5ddb59645e344d4d10b517a24b8ccfccaa0f73b97835e64d772aad98ac66b09dbec74ec3d790ea1efa718e0908508089477fb26dd086271797b25f2b7bcb802f658e5a56032e9c241744fc18c29f55a088abb5cdda550c9a5f070cdf966ebe709ecd7fad8049d52a9630a53d935eb3ab14019bb86d95420c63dd00064db47517dc7abe8b735f0bc9baf8f16799925a1c8c964c82bf75bba292ac4e111a57692bd97287402c81989562c5419c0af4db551435cffad934e7dc3d10f2c9a422c652c1d8ddf53d8e70ee296bfe465c6e61f1770864e010cdc76e47e7f6447a98e33c638d51f5fea9d37bd1654aebb444edfdeffcb4ff4d54f6fdd74f336b717a4c075ed5d580e64de81e8196352173d742b6d0a85d0ba222bddc8f4fc10e17aa4b638e12e385ba335469ba1bdce1c2e55d9899d9b27987513e6a1fdb3438253da28c30a4ebcd1fe1620b2db37b64a2e41c1f633573fa86fcae9d296a12ed9d527209f80d1358962d4240cf2f57e57a4df1559e1930a2bff7a524c51b6de696f507e7412a9b0517f3f1d631ac264472f47ab0509f748a29b689a2439ff5f03f3036120d9e59f68b5d689082776ecdc47e8214ed17ed2193a4cde304ab7dd52445b74415dabe85a5922db0a4e70c30781af53657d00a1f23fdad3a03247c30df9985e6db3851858e4754d7bec956a186b81994ad46f2770bfd9373b87f29f01d39ad1825d5499d8eaaf65c6d55adce378d69a6dbfe01ea565e87917b718869acced41638304d4d0c846147140ec1a9831f2c4d627bba3d2395d88a1b177974d9435ce7688c85566a027f550094acc0abec38f0b61e84b0493bae2d4c7aa5a95f416e69eabc99c22ec449bf42310c5e7a5d2f1c197bc69b8e7c7ac97b6cb7f45c2aeba01cdced0843aa16afa643247647278e5f5703887b9b4f0b998880d7921ff313d04eaae587b8b5eaa0e74fb8c88f84e0bebdb35c344b87f7b7979f56f53c72ff20d26cb57d7b68cf6423b9e91133d7e0db45a1932c2ae79e819da4ed49e4ed22c1b1065b8d7e3fc76833049c15c329b6128d27cb00fb49e9e7740cea6108efd3f31734971f08a492f6490a1b34e4f89eb15df5d022c26677237d501f51e0fde02b8fa9e33f68d73ca0fd79c7d4c81eb05b1ead205e0ad3f2b92f0a533c42764b9fdac461b8e70701b9ff66033dc9b7413cd41d8bc2ab50f056a434001e3ae7f397c68baf6b0e315a2fc381ac2980a2084f1247c83be4eca0c8ff134f1408c5c0ad3f0cf170cee2d624e5584e8ae9b9b38589cf5664697204267ada8b59b3e9a3cef432c0a86cfd5a395d03f57a862c127705b2956c745753040afa2d461af19ed8cbd10bf2519dc8b6e6ef74c1432dd88d3a130f6575109d948f819080163bcf31f5e0a6bb202ccdd03dc3f9503e6fad735125907533f7d20af828f4db55f93bb3a0e71e465e63da7c6ee2caaeef8b04c10b04562ac3d697a7a1c6df3f7aac4ca49c0c8b85b4e0272c0a7990976cd63437fb89c9173d16014fd579aa977e5df58b836022ae956faba18275abe9f46c0ae8e6dd4b7db68a7aca292956206766cf77022dab0a6da1bd6dac5202479b949ecf85d875f5c985c2c5914beb48f854b8408f6f84c4c05633c4d7c0ccc22335132318e93a1506a77ce13c5ecd27de36912c020f25b076e8d714bb17ab2745ecea69dd78f319e40b2a96a402bd44cbf495fd33af84b430ce16a5350758a7a34a1da844826c9a6edc6734139ee3d0ec2eddf56a172b530f8bc033e7a3f7d7a7948b26358e6c31fa2bb6566105660953424ffc1e46ad493b1ea8c94aa0e1746036b7e9770d1b69ce462b620bb5e80721eeabd72db081c193833abb519ad803076b8782562f38a66d4371c4c0f7c385848f97e54e47073756f47e3454619f7db1246082a34e712df88f572fae6ce6b4c9c85f221d7dfc44124980b3c4445e4b28f6281d6ce2407d70e4c52acdcba3e3458bb02e697917eedd0626c04f5920b357a8afc6edafcd9f98b30f62df3b0d1f387ec4fdf77a92211c18516c574f8c96df1f7375498dd1d101773f7b58cb25d61f3974b0f57ce3f14b3e2aee18502c3de6c433a834fbeb79a0e19705c8742b616d63e75ca545f33b7d34f14c8c6229dd8aafb457c4b08b94c513b23b1e630dabb15b638f68f636c93f4455035a568ffc3565c955beb3a321a09e22a3b377e70c75ff1f73ca82ff7d07970d025180872b250a6be5fa2d2606e22127ba4ce21afe4ed69d8d72fcda58d33b13bf98ca5801f53202f90adecc4b3f290f766d494ce576ece81169c184df91c2fbb602791bd63fce996a367398b02aa9e1328a9373d8f765aac429e867f56da800dfa46e5300b979b3aba8329044f4de560c39f9f09f015d343337105e62ff446481e88b14f17b4367bbcb32f848ab96d28a85bd6ff40dae967592f4984f72cee4ebcd5b12c17abe090a896b72ad870e03cc2a03a91492af04b317c9c0abcfd4a66ed695465e9670970035ef6b09d2ea263dab5989f8042bdbb666ea60f27dac387d42b99a4398abb531085c101ac469eb0906079b5be0cb62fd053367e3efb74357bb1c1f9a4693a763f6371d6e497ecb20a145617359f2ffd60d15803592a2650f6e44c9b292d9fcc31bdf3ed484898174b4fec3ab44452e213fb827f769d7e24a175ecdad2c2ed65f1e753b5315bd35077bea704db4eba5b71ab8452c43556532cd52a68b347ef7f0f3529ed548ef7cd1c777f3e790515f01f2bf79e7397312aa7dd967a1c371dfe771a84e46e2466412eecf3fdec9ca758529b7870a923c5a96cee40888ea35cbf367d362092447f9a2a7713e585d3adc7273914a4fb3bdde43255ab700cd4275f262d569696edf377599d3a48ecd6b6e8e8ad810871234567d7d27f069077791154448bb7279ad278138789fa97d0d5cbabdec4d5b58ff480369324582101473a7f8e0ad18c576cd0bdbd67d7cfe3de05ca9f9629a934acb5782cb12ec230e5ab49688aa555944dd73626bf08b1df66955c942a87e28e99cdbcb44eaf9111d9adcd4e2d9d8958c8ba5c20e6b339c3ba290d21df242ea22cf86980315a54810c19fe440cf275d6b1fa224d850f551c20c6afdcdbb62005c9f059c2f79f919a35a69d0bf0aa90038e97fe3babeee9eab8349b90677d019ee0c768c0a956fad5324abf8c277a1b4736ed53a32bcffee94f9e5ebcfd8dfb135279e110a81f7d200e674a513d64f2e09ba083d15e9b86e0175ad12b13868add3511ff0bed51fc2252739b17310cc1de4ceec3add1bfe07adfd2409dc883e315e98f4dc4b4a0a578607d6262099d4695ccb72070246d82124d78b61c99c7ced7be59391222513fd953e164c04f34584c97866b11cb32707fec4c1aef78b17f181b2203d0caf8926d32761a1d95d6cd803e2a2e36690dbc4740aa0104cc6c98fd8e436b1e198a1d7439fa8c7ff7c4bc1b54360dbf9766fa837f6ceb5648651c9b26a7de6fe9ae3df4e95183a3ca23ffb81d153f46fcabe3e37c49a1208b66480f28300dea157eb1d750aa1cef4599d9d4ee588510c484a5b530a4f643deebaf729b62c37e0bde17ed685ed488a9511bf2e06ff1614e212493112d9341efb1fb230a427e1a4c7ad3a4de8f75551082abf11e64fef309daeea47ba40f1388db2f8788b9dc033560623c39155077be5ac862b0130660aa3974533f88b7760704d8237aff0ccbe03041a97273a50db230b4c14e18f7745a0f28f5c13b8fe5c8c0589db46e58ea175caaea914190a6a79f4c51902faa8cca62c86738dd55dff34a66c20175bd528f8b0e0381c0380bd559c304ce4b00d3f6e96efb7a049923a8a1f868d0cd63beee5997e02ec8d575fb9ef96a725dcd9e779a8da38a45e5ad2bacb19885dac98ef68ebdbd904a97cfbd14be10c98551f39e4f416b015dcbfb14733c05cc58d8b76b1806b1ce2fe9023653c2606cbeb0488e61fb37b3183baf3fc957e4e23a31e800dfbc5a39af3983ec80b48abb097e2a0835658bd87a1fddd311208bb88724a74a03af21ee3a31368da4226575dc5c07d33449b2db98d24d04ba6e1adc9123ae7f285a82bb89d9f4dbf9e573c4fed06b6767105904439eb9933d0dead34e23e5c557327a695d53c1f18a9fa48b771c2aaaf8d68abdd2de58298bb535e1def45f2d70da29e59a405e7d39e0337a21e5e1bf129e5c7b38dcd2d3a330825e085e232435c2c1dddec5e95800ed8fee3bde2ff15fd9842c49b84e277bb7148d752d98960907c019a5637b84f82df0c2b411339bb2d5fd67914e643c56124c5435a36b7ebbc47b668edcc3bfd08f903cd9176f1e659b861eba85316753efe9074b2d99f7cb56e48837bb05d33e8275f922802d94e4c239a3dbcfc4ea3590ddbac8f493a8ba0cb535f46a6577ace50fe33e98e82cefb9e0c5e57e0f213d16bec8385a68e6ea22b210af207b9f20ac4e89cdf371d0a4bb6bb04ecbc9a6d71cf0b642191ce53a0befe87998af3b3e2e2c4ed1412cbfb4fbad1f7871db9c2111285d677a518a0d3410a00d499db3f2ee6549e73e9e99a1c41ab29c114763555c5a3286edc61201bc10cf21458e0288657f9a557cb8324d2b83fd6cc48daab09ea1fe4726f58b9b496bc5bdef5fee74cd47433802f8fa5f71409e6e8556c6ebbb2e658006a0beaab557bda09d24beff5be09854089954ecb73e8000b18564b8395f5d9f9806c9b545ca4ef42f81d061bd6146d5e9a434846ee02a6ee5e6b284d7084fc2b176bc51a253833bab8dd9a84559620bbc92e3ea260d1201ef7ed9b3b2b167bcf5030133a1880fafe8b463e39e827c7981e9c9e122d5ca4c5f5f45f6048f89bab5f3508cfef41be9d2b74a5b61d8f9346c21524ac6e36a08576cc05ccae7b373788c306fd5eae850aefe7fbf868704ba6f4d86d3bf10a9725b4e57220ccaf66c96bec6f3247fa48b91ec4149c8215903f1552d225ac0536edbd8cc107238cebd3a420f65c794e1512db6184a5529191a71d0ed6225063da41618eba3aaae2538972f69d58956dbdecd028fa61f35504b61c6b35d073190997271c8ef82b9e8f6782dce16ae941d45e90a865148279b3bce8965a33a7213064257fc87764bd7746d80ae3c4588868ee96adfe0759abc61f64d28924e09e5d29fe7e4ebf5998f05763a4ea7658c9befc4af4f6843ee8b7f2b13699cb9bf4295e1500753cca6ceaa1279b41fc6ab0d8552329ec76bfdb209e84ad813c6a2d0eaaebcecda381ba0edc814dc5e00fbd7d46dce18a56bae254b5ca57be94f9bcf6660d03c957d4fbf5f235638a885d0c0caeefa6e04709698eade66"})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r8, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000200)='bridge0\x00')

15.486762196s ago: executing program 3 (id=2770):
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10)
sendto$inet(r2, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6)
recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4, 0x0, 0x0, 0x18020000}, 0x2}], 0x400000000000300, 0x22, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)

10.987468392s ago: executing program 0 (id=2785):
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000"], 0x0, 0x36}, 0x28)
r1 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00')
accept$alg(r0, 0x0, 0x0)

10.984465415s ago: executing program 2 (id=2786):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x11)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc1})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x4ddd, 0x4)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x62, 0xa8, @random="63e7e8e49f61354509809aaaba696ad17c93bb1e9ab8f355d86113fe8566c8a92501cea31f62cad5d3d15955f51b52aa0ed3f0ae19cdb4af525dce2b242e273a429a2b75f65f0848659cfc93c6acb9e4b38950a72650009c19d9ddd050d6"}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000090}, 0x20000002)

10.903749707s ago: executing program 3 (id=2787):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r6)
sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x24, r7, 0x1, 0x70bd27, 0x2ddfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r8, 0x1, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r9, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, <r10=>0x0, <r11=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r10, r11, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
setgid(r11)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x9c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x42, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0xfffffffffffffffe, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @val={0x5, 0x3, {0xe, 0x4c, 0xa}}, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x23, 0xf, [@random={0x1, 0x1d, "4e39eb2fa0ebfa37a9e75bb5031cccaaa606f18768168a17a99b757a24"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

10.839612881s ago: executing program 0 (id=2789):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000000000000000fea000000040000100000000007"], 0x200000)
write$sysctl(0xffffffffffffffff, &(0x7f00000002c0)='1\x00', 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
socket$nl_route(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
close_range(r1, r2, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, 0x0, &(0x7f0000000200))
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x2, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

10.627867537s ago: executing program 2 (id=2790):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040))

9.730279756s ago: executing program 1 (id=2792):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x75, 0x3a, 'G/@', 0x3a, '*+-', 0x3a, './file0'}, 0x2d)

9.5150453s ago: executing program 2 (id=2793):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000070000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x4, 0x8, 0x3, 0x0, 0x0, {0x27762807ea17ea17, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYRES32], 0xfdef)

9.436907321s ago: executing program 2 (id=2794):
socket$inet_mptcp(0x2, 0x1, 0x106)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
select(0x40, &(0x7f0000000280)={0x3, 0xdd, 0x9, 0x2, 0x0, 0xc, 0x3, 0x4}, &(0x7f0000000880)={0xa4f, 0x6, 0x7fffffff, 0x1f4, 0x10000, 0x2, 0x3}, &(0x7f00000008c0)={0x0, 0x4, 0x7fffffff, 0x200, 0x10, 0xe, 0x4, 0x3}, &(0x7f0000000900)={0x77359400})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0xffffffffffffffbd)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000280)}, {&(0x7f0000000500)="223c1e31756476b05679400690e3fd18d6731c3a3c77972c3e33ddb308563de0afa727b92f6f056fd09a8f5c0874ae15a4496e355f74cd1a97495e2f6e43db32223613ed", 0x44}, {&(0x7f0000000580)="5f7db1bc816bf9848451acdc9ed8076086fb5d897c63f2bb20833eb65d1dc18dde0904c0ca10c1e3cdb3b0fbb27a", 0x2e}, {&(0x7f00000005c0)="0a87de82b0acb3a6b0aa83408f79180bcdbe326c23c429adb49225c22a8e3507993d3ab8ac0bd1999f0893177058f78e8485f9ada286c8eaebe1549587b3e46e99d5d9d16cd286e944a7e2", 0x4b}, {&(0x7f0000000640)="0b61b08c61d1d1b52cf9cfc84d6e9fd0df66b51f27a24de131f954c093914d7640c291cacfdeb637715751db586b11c28435e9d1abdde34a033a3f11234ccb475cef3b88556d15a7cdab6cf655791906dd2b88efbcdf3c81762bf7adcc50a6f215a8c6320d1cf70c9bc4cce34f0f30d93f6fb9ad19fe397173d056cb115e0cfb6b7f572636ea6ec7c9c66b533594b3b505c80b731e4f1099535f2c721ce9f163006c803c50d4fc5dccb005906464f7e741435959b54acdf2ebdc6f3f1dfee96b1748ff69d031cc944f56aa1b86eff19fd4d94ebc1a074c7c711bab45575954d37fc4ca8f5500c44d74ff32d3927049bd4e617e2fcba70da5c16ff1", 0xfb}, {&(0x7f0000000780)="8694b4031617a21a692b1b7dd6abbdcd78a6b40548982938111479ccd2a384", 0x1f}], 0x6)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x1000000, 0x0, 0x20000800}, 0x800)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="01"]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20001091}, 0x40)

8.404277305s ago: executing program 1 (id=2795):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0xfffffffffffffe2c)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}})
io_uring_enter(r1, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f0000000500), 0x0, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a40)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x1000, &(0x7f0000000a40)=""/4096, 0x40f00, 0x4a, '\x00', r6, 0x25, r0, 0x8, &(0x7f0000000800)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xb, 0x1, 0xc533}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)}, 0x94)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x38, r7, 0x1, 0x3114, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0)

6.996383743s ago: executing program 2 (id=2796):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x40814, &(0x7f0000000100)=ANY=[])
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mq_unlink(&(0x7f0000000000)='eth0\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000000c0)={0xfe, 0x7d, 0x20f})
r2 = syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f187620ef170372362e01020301090224000102000202000009058202200000000300"/54], 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x0, 0x5, 0x2, "cda0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x40, 0x15, 0x2, "8d53"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000640)={0x24, &(0x7f0000000c40)=ANY=[@ANYBLOB="040000000001fc9873c7ab4f5f950e805647998f99393e37bb2f66a7eddbbcfdddb9380647946c1116dbd2e75c0609dbe8ec4084a17f16581bb2b786f59f633a99e3da222e0cc98f78b606b1e68dd46a2d4ac63dce327280f85e2464ad093390824eb4061edd0729fe8e24e947eb818650366acaa33bb7ebea690bb126c954de1ce7558df9c00df335d0e35b316eb0344f4cf73ce4391623a0ed524e28d579fa1020935762c3ef0e70f27ce7c658e59b89c106ff7ead41e26e9dc7c29175405b1997218ba2cd7d60546fa9114cf7b8d7e1786b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x0, 0x16, 0x8c, "7048fbfcd48e2f811b91ea40eb9c2921c879953738eaaf6f6d9847b92cb1416e266ddd7cc8bb1c9be6d8e2589caffb3563ca4c3852a825616223dce2ebd8bfd3ef8bea199ef0eeef06827f0c16eb665c8d24f27d8e72d052f567b7b7d8284ce8879874fe7666b658ace572cc8476976ef46beefc94f026cd4af54dd573c1aab5ff56c48d517b07cbb7e42e78"}, 0x0, 0x0, 0x0, 0x0})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f0000000080), 0x72a, 0x0, 0x0)
r4 = gettid()
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
ioperm(0x6, 0x88, 0x8)
pipe(&(0x7f00000001c0))

6.974685306s ago: executing program 3 (id=2797):
socket$inet_mptcp(0x2, 0x1, 0x106)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
select(0x40, &(0x7f0000000280)={0x3, 0xdd, 0x9, 0x2, 0x0, 0xc, 0x3, 0x4}, &(0x7f0000000880)={0xa4f, 0x6, 0x7fffffff, 0x1f4, 0x10000, 0x2, 0x3}, &(0x7f00000008c0)={0x0, 0x4, 0x7fffffff, 0x200, 0x10, 0xe, 0x4, 0x3}, &(0x7f0000000900)={0x77359400})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0xffffffffffffffbd)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x1000000, 0x0, 0x20000800}, 0x800)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="01"]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20001091}, 0x40)

6.970557527s ago: executing program 0 (id=2798):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = getpid()
getpgid(r1)
r2 = syz_open_dev$radio(&(0x7f00000018c0), 0x1, 0x2)
ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000001900)={0x0, "0abb26c5a6d3317279aabd9759e79eb16f9a3c85bf2f482e49aacfc5dd28ddd0", 0x40, 0x6, 0x3, 0x4, 0x2})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)={{0x1, 0x1, 0x18, r0, {0x0, <r3=>0xee01}}, './file0\x00'})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000280)="4bb41798f122ff6928168c0be98ef5006b87244db1144f15a2a02ec15e8b466b80335f5de4c47b2937834a1ea156ca0365bd759446aa8d2e2c3eebb1cce94f667753f142963b36549ba7ad8d4483e1816ac76a4a7ae224ce76789ffe024ed9a9c4b7fb00ee2cc7266af14cdc62b9401cf72934a80b74a6903df56cdab6351b6ee10dd6cc9965873a84bb8d8e", 0x8c}, {&(0x7f0000000100)="cab2fd6ad023f85cb2fab7942be17dcc06904d5f0551eda3", 0x18}, {&(0x7f0000000340)="6e0732ea8acba199e6c7f2e362fcbaee8532f22db5060b3bc144aa69590440685b07df0f33f78f18175568e72934ad12a59fa67f58f116327f154f8f6752ea9a8914bbbadae839404e5d93e4b3e22a482a2066af7eb81acf08f359610764992f22effc5750f87fb1d4615ecef7b5791b5b747c4250a5067d8fdf9c599e063e88a10a4bd04a37d22604a09dd00e3ca7d5d544f403b11f3e2a03b0cb1416fe", 0x9e}, {&(0x7f0000000400)="9c753606674ad7769c8af701b26468e96bfdd857018e751eb881117abb0104000021a720afd23ad2e5deace49867c8eb5e316277a91ce9320d8a7e3805b9f806a537154b7a9fc5ca7f3ec8a0fc4259764c", 0x51}, {&(0x7f0000000480)="e4c1c7740abc653d2e284cf90303b4ec880506bd3cd6a70450e0e7f9e64c8ea74ab4464618d1ce0a0f4b6e20ff3ea0109e042a69e09de651c8ebea59dc195520bd3b7c47700077e196352f5864a8904a151307f6358f5533c1c71eb89e5722204aa5ddfd8abe2c910c4e3b96b31f1b504060207116d4edcab16c42dce8786cdf43eab01e24787efd1c67b32d43db6b13bc80e7b6fc8a85287aec9e1328ab6eb5564a0bbfdd8d4bf7d8d58610c0c4b8b7dbae4357c3521c617068bf89612ac8f174d3faf3d9c288b2c3d0ccd12768614abf2d554d57c47be9d89f773600bda4f13e512805d64b9b2179de11561a8b704d287505389985dd6f", 0xf8}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="f16930d4b1eb92e7d4a866615a92db1d9146e16642e169c549b3d3c35025bacc3bb086ca4fff94499f43edf78af0bae3d45881922c6ba0638201988b617418775fd70c24280f0f68c00983077e66f92f5c63717190fa7822c4929208b85e508148d99717524c47d0b1f990198e2046faf5b55a5249e022d901f5b93f2ba7ed5aa8", 0x81}], 0x7, &(0x7f00000017c0)=ANY=[@ANYBLOB="1000401400025f00010006f8c60ace23042eff0c020000001c0300000000000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x30}, 0x8005)
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={0x0, 0x0}}, &(0x7f00000001c0))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x44840)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5)
openat$cgroup_ro(r9, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0)
syz_clone3(&(0x7f0000001b40)={0x50084800, &(0x7f0000001740), &(0x7f0000001800), &(0x7f0000001840), {0x21}, &(0x7f0000001980)=""/215, 0xd7, &(0x7f0000001a80)=""/185, &(0x7f0000001880), 0x0, {r9}}, 0x58)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r10 = getpid()
sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
connect$unix(r11, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0)

5.677459871s ago: executing program 1 (id=2799):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0xfd2, 0x400, {{0x7, 0x4, 0x3, 0x6, 0x1c, 0x66, 0x0, 0x6, 0x4, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @generic={0x7, 0x3, 'Z'}, @end]}}}}})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000880))
r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x80800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xfffffe7f}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7"}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x40800)

5.27525585s ago: executing program 4 (id=2800):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf25010009000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000d78ca5be000005000500000000000a00000000000000fc0100"/114], 0x78}, 0x1, 0x7}, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r9 = socket$netlink(0x10, 0x3, 0x0)
socket$caif_stream(0x25, 0x1, 0x1)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x31]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000000000046c000000fc02000000000000000000000000000100000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000050000000000000004000000000000000d000000000000000a00000000000000000000000004000005000000fcffffff000000000a0001060000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d10001"], 0x2f8}}, 0x20000000)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x40, 0x60c, 0x8, 0x4, <r10=>0x0}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r10, 0x721e}, 0x8)

5.235665016s ago: executing program 3 (id=2801):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000580)=0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000001d00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000400)="4235bb67c8d04a64569a15cdee9d71d05ebd0fb046fe740d42edcf91ba71f236b35824a04b0b170927613890fe21ae8b6e8d7af67194b56c7f22993cb851f2bed36582f2827648083edc883bd8809c7dc3f95e08ca39ec21895333ba6fcb93cfb89a1f563eeda72b1e694bba86b61ca8d7b5334d221a584912b1baded07f9122da0adbf9d0d07fa146d7e391bba41f6c1f85ec55251844f3c0968729fac3f00bda4d9c9bba91e129bf7859641f71638499f49a687b93507605", 0xb9}, {&(0x7f00000004c0)="93432224dd859ec9b7dbd6e3aac445879d4e04c8597d3202736a105f536f9169073c64682f53656b88e7f79f40e24da9c7e3e615ed03e0bdbf2695808e6a4c964065d8eae13a2a635f9b7238feaba0e1d15f2b6814d82e56cda484676e2f6922dafe9a8a559f7c7e522a94abc3cdc10910ed3f4f50cf9e6ee6a2aea26606f7d562ad0f881859b35c19f534acb1887db0fb520d4487fff6c2b8ff806f4dc52e1ef509", 0xa2}, {&(0x7f00000002c0)="d238577f92411fbb7e1b375e170c6776baea17aa460c46faff7e7e19852bbb784647f77b5449421bf7043d6fd555de986c9c8b65b14b15277af57e5b3a31055d53432fcff254d9e9b8b3f33c09421efd88b0403d067083e759", 0x59}, {&(0x7f0000000380)="094c81a0c9a55b9edaf82d7e5636a7a4650567e7996ce4b30118ddab0910c16fb73ffae0eea0b412", 0x28}, {&(0x7f0000000900)="49bab2b4434ebf2836755acc47349d4509c1855932edbfc72eeb67d67da5ca72a87c7c353b8ce38e4068eb964bd105ed020ec85de524df2caf6d8714be9c1ba363cdb24ea8ec1deb2c1fd77d6fc4a6e89e8bb7bcdc33be03f451fdda0cf86c583fd3960d7688acea7ee6bd92b1914d196a0b50794267bf930364d70963931dbb67d95b2e6d837e56f49f840c8b10d5a8514ebfc09a5b3622c15034a8328f7c9fc8119a49f33cb88b31c0c964b433bc8e619429431b5f1e01adb989f2b0b6cdfef8b7f4febc5b0d69bb13dd2c1d7323becfd8fbb91cdfee2de4328eec3314550f1904902978762b67dae9db57167dab77bea13040829d35d6e689e043c745bdbcfc172896adc5dc573fd3ae363b3b05932c5494ff50de0850095f34d225ac540fa88d5a79f39b685317a5f0f7b21f390d95cc5902d40443bf652312b0dbd26e53f1cb674690e798493c0ec1f6a628a35708ccfd06b4137504e2cc5fbaca198b89cfb379ba9d9af2e49974e06727a339d23029b4d037d9e7485cb7e568339362ad44d31f29a8983463176bd30672866e1c56f12ffaabebd5a8eaa06251ce9420c3e8a19e8e5f0942d8d164b63aa008f229af5129f3fc4f56aebfdd7151e2642f0f9ba61b2839dd171e811c074f21ceabd7fb6915c63613db9faadbcf5c4754d13bca374eb5a43389353a2a2c8e6bb12eda3bd47dd6706ff17fb01c05d25b54ed81cc9d3a9ddc0d03e622fcb05b3945a1f7ee01757bd9dd94ceac18bd67ea2f780ed64b511db0911b0fc08c478ea17ea9b0c81cd183833f1d081cbd018fd2aa4cb864cb73fd67da6c2b59d107c6b1f4af195d018dd7fdd0e27837ddc3d3017665ed11ba804054733bac7a3c99a7ef675e944a550caca75c6121d0004b5d0df215e14eac5ff05d1b6827b0474d3039388065bc0d30054e87c5e4d19e7f91a38e2ad1e9093fd7e6c8d602c8c21dd215747dbe4f9f5e7bc11d0d362ace3fc3320c6031fc455f9f7ba83ad5957c7023e32f7e991aec205e8ff9701a8358266ae33e8a12b15698834ab56ad03e2ee75a6c1dfd23898af8e911da564b866ed35f1ee750f7ecd51e701329fb233f7980b90618e24f15f5e055fcfb0eb0a0abee611107439aafe20031d7e64650e28944dada0ded48e7d1056efc9fbf00414f797aa2f68ec2b459454af9aea7f7f2f714180c7d210b59950cf59a9cb152b53914cf0c6eb1ac3186983a9cda28224ce613ff0f07099242a6bad11f5dc4450bae0ebf5443760721a4ce004710b079c6c1f7fd7d4700aaaea7af33f4a1dbcd4bc3f72903a78c71302353c0ede6d001f3929526ba47e5329ee70ff3eb5ccdb9cf277ce7eba0fd4c71c85afb15b402a7ab0a3667666cdf905ab116977963f1968c7ae5a4b645ddc36c3a15c8f7c45c8885565f99f0515ae103e050436e1f5e5470a180b5ee8ce0e5c4271957f353b227af3da873671011004915c91ac069d7ba01b1ca621e35277ef5301e1a32141990cda7fb0f2fbdde3f04c5a93745b386f02bb2e68c2fac48b8803587a9a186d5f92b6edee42cd1d0c9973130b5baeb2e5713f7ca706cfafeeea89332e8039e83d34f66954e14ae669faea602711831a9d43a094efd2e8815dfdd94c36a623a6c85d1533daf3dfdf33e24f32752406519cc36c750c9a7caff647622a5160e61cd349e5389a91db2c0ea73bdfa5191cf5f07dfb666979c1f34f7ed1f286467270847f568ce6b4e4a3547a27e74025777d5d2a7f66844597b4e2e3dbaa174b3e28ba1ded9ab1fdd36ab9ad09d3f6350bca82e2605e803271b2344ea43b8370b452226178e73952a6c4a2f8422a3da750089dcf6ef00db80c8410e46a9b544c3fa3e6c3771d4ae929ccf426a168fad14a32f9de9f311de4eb9cf90959c48f3ecaf84c51f130c52a92cd0d242781f9883f8d15b68fecdfccc7dc8bc9fb5a243dfb50e6ed094b1d0894e4914e389e82fe4124e237f3ec7a65558481682aed8da585e828c5d7fe4290b1cd0fcb1e202bf0a223baed54acedfa6cbc0a898693d2101e75c0cc34be05d47c9d658fa821840b3bfb3826eb3229618cf5ff1700bf8972cb9f1aceef2b6769ea6b1769da7f047c12b6c14f6042722afc55256ec707ebc1308f09b939ff3e68b5a26fcd6ecee96158eafd665d603aec66aa8dcbd245e2c4a20be9bc0bc2ba34a0d4dc22cfa37a393d9fef14e93755f3627b9bcf8df1db88e77a734e72c5666485f599cbf5c402fa8b491cae71d158af470603b7c80df8671702bb5f3498d0230a89ad370e6dfb7124b04f4679fc9fbdf8a1194fa5cd012ec362081981071350ddd7d11d268d062acb6700f209bf7cf05b0cd3f4501a41b43fda21cca7a4ef66434974cdb2be61d8dde4fad3e440c13d553d55132398ca446df1b661cb32ffab0769558dac81ff70c2f3e70048dbb4c5746b77fec2c6b1bde369203e9040136447f6e0d98737c10c9d58d2cb53cf0e4feb4858f0a601253822eb13d6733b46520a204764914c3bf212cd42663e4699bb08abf9c1e7b03fcf7e3c34e2aef80216187541b9ab876effcaa289d522753c8c27e043ae1545e9fcb9c20f4591dffc4a96b6f5b3a6ce1752f644a4f2a5071afe2968e975661d1f311335670a4923cf2c19f0a30d9bce32f421a9e51badc4cb41e53ed8517291eebfd35711b83da35f3672aba96b79d3645137512167099ecf1fd4eebc3ba88ad935deb23a781f449896cd5f33855d4afb8bf739b8c10dc599cb034c42de9241ed2cd11a46ec04a96b63fa62618c952d10f9c173b8364eaaffb777933350d7c0bfead1a9e0f04b55e449ba15a9b08d55c4f2d2c591241b1ab578f8c96f0bc704dd56f4b62ebab9a65fc01cfb137720c201c75bddc868835135a31e04b9cdf8735c4a67d3898724342b06486e3b91f36bbb6bcab6532014c8598f0c179c5279350a2a8ed561690089ef26e74f5a2e2d29c20cb37b016f88140ae89fcc25ccbb929f57d20ffdeee1e36fc090993648344f7e681c109bc46a741025c6a7cc85537e92e5000b55f0ee67f97c16b1519804eccb1c4fb26bfaff83a6c1b20e6b275d456c5bdbbaafa43c600345056ebab20fbb85548eeb60ac4967f3efacc1170b8345a2129ea288fd59ddf89444b073513c9dc311ed1060b0e8a467640503a20749a65be45bd99d494d51fbdd9f48b069ddddfb8b41d2abeabfb8563f568e09f9dadf1a04dcf49248c8fa70f8c26d9721ca28edab3bef8a12fb7ad3b50d620e470feb066fc9124f839b830c4d1c7382564ff7f42f3e5ee3d262e909af71b05d0e68a5299ec4fae4f360383c9185fce1138a4a4197836190c5381ed9ca6f404ff03f4261f4e7c751749ade660508d720c708f784a21524763c257b9e687c8a6b2df8741efc9450f33abc7c8a38ab1861680cb27e5d8789e078761ae4215c6a6f76edeee974ee5ef80dcaebce4d88a7b211f574a8629070ad54ab476e2cbdfed410cf1efca889e5e5b9d008941dd04fdea2c9c649c3bc83ce36b2252fddd32d01f5e31b5d9668fed89e5447dada0fbe6f1bdabdf793358d4096d81c71c0bc5b8468f4b713ca4d7c4abb2f585f239e9a135734c66b013e85b5901e62b58435153c2963a755bec582db9ebc66dece176efea36420e4d7e371588e3e9b4a73d05fc46a270fd2c5d92f4f2f284722b3b51b60ea642d97fc64661f000e15b1256ae508a8285791364da21c5a6b87dee6c572b770c23119cdd2a02fe4d5c0718419c295294a6531fc85aeab9a705081d6d6b82c5e99b3dfd9a2f7711803060b9640376adaad16dcfd22e8f2e1025531db70b6889ca0afeb9cffefbe8011c5c46e09ae647db484cc8a629e6f9f480b180ec5e43718604d7718b925aa503df03e6ab5acd522216cab49df1284ac9ebb91469f34b506e2be379d58c4f9c8220b099cd86ad5cc613709d34de5217d06db51872f671d84248a0b92b5ae2894232337fbf4a59596ace6e909a3b7731f7e07070a34b86678c736b932df3633c44323cae3d1c9663849c00540b170baa5e02a68d9cc90c99248128b24987509fee78e868941bf153bc97e3264f106aee80a8f0e7392f206c2c10602dd25d7b517d53f4cdc58c3b9c76bd8a0d2e01233cb67e20d9df79c18e5113e94704b69711e7379fff39733c68503b35294c497fad1403fa78183315af514eeae606ec3be3b0fdc2f911bb0a6b7df02a4d3544164595e87dadd452a757d653936e1aed8da951ad673949921123f8c7f4a1b69ac6066dcb828d9831714d1e49fba32d3cf9afac782ecfda10ebb92f5cc3315ec40d2c4a3f04882348a8cdb4109a9aa53fb49dcc465080f760387dc9311229588ab57f89cb731084bc3486f6cf6baa59d71fe35349de4da2746ae599414cd1221a7d4980c2dfdca9240d530e641534acdf21782b251eb253540f9ce495becc8a0e330394746a2151355165a02347f60eab6a6bd4ac0034388cf2b7a6a16b4d85ff176717eb40d643b47672de840b0945438906256a255ededbc063fe4f4046d9f8a98a955a62db51f081e2ab29bbfb70ae3a7f8e7016502768bd9735cb624fc028b2e19c2dec2e513d33178f8f8c0777374264a29d00be49fda53bfd29735bc805a734ae59cbd4a5cb58fabe36c48ed12dac4636cd85e7910ede1b1e8b19ced2bd6b09d5ff95e5da4399b5c42e1592305aad0e49a785e4230a90831600d840c48b39a81d7ec73cdf3ad1be82a1a29ebcb32fb85e8db21e6b510f569cc183099c8122e8ce0c5d4741eec4d8107cba215e72b6ff69315bac635780d4677f014a13fff6f1e6e13d91a8c42c51e4854fe9276c977536c7f3296caa8fbb330fb3e23286dc614c441ca47fbff37f2a11349841e83c5b9954997ef2d917fb0fded8162150eee708ccf8c227ea74e4e426018ace2a9898027ec3f6f642443e798e500a0bda9cba277f574f8047d5eaa795f834ad3c792f3590fab1bb8dd9a9d41a9dbb089b73f9e2c376df380a8cf74ee670771260168f6b4e580448e133a836f35f11d850dac04a31469d1aa6bd306a09721fba0da01b0698f9a6a1e5af17a6ee7b4ad746a042f6c6545a37ca6166d6a96ff32e51348a5585b710cef05dca857643583982b99d84e11a4a50dc9f2da09764b1459531ce60fcdc38582ca7f435d4ae19e66c9e013f6dba7ef50b2535e50119a78ac79cc338366234f2e142f683f6afa873dcec2141a9d877e6a031858b9fb90cba516930ab2a92bf18eaa58cc076e357b3be31bc1e793143a2002d265f251385f542c91a0c277e4b163786597aa3f38c98012e2d0c6da0142c47a7e561c1855fb67546706628b390dc73ff7b8c13e37e33c4a4911b76663e663100b72edf23e2fe92a19963082154baf86e8a468f2d4a6fbceaace9ce29a9f5cac4dfd1f1efd0c012cf693161816d06d83df2fbcc5832476dee3c48f2c64be3d4fc3fa632f5f3821aaa42e0f7859e58dd055f8f490537f8d686e3e321595ddc26eb1c004a051485e5c9f06a09c9ab592ef7bdb9b965366eb09e07cdf6e2b67cf1e26c224a67de74937ae8a9c552dd89858e3b35be42de32c36fb9410072416ec49fc59725956b5ba3954baff4c843c9f6f7cd460ea8568edc3a383d0972d4adddc3b6097b9842ca6abe9bee7926949b23d495a561702684eb34affb49b8271043896bdfca8c1af9307664f400970cbfbb03dbf415a4b7e592d792b583cd3350d0f2298dc1ac246670203ee5b5f458177e2d0f9607f64532ed7aaa655cca493f2fdd53b14819fb750854ec2aadc51fec39083e", 0x1000}, {&(0x7f0000001b00)="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", 0xfb}], 0x6, &(0x7f0000000740)}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000001900)="cd33209c198d76b55750f96c7234ca1352b89a33810ab3d974acb17d26ec90308f779428ab91b6176e1be3734b31d482bb4fc05ae61b6c02efa012ff301cf134c9d775a31eaebc8f0a5a2e205e208e334a159766128057986aafbb50901759cf57b668349c7767ae4a7cafeadda948b64a31e79956ed671de88f6f41ef03b3b704aa23f67598461826de50cae22d9e89c6789117cfbebbe3c1f343f1970912295115c25b8781a12ffb8e77da9d3bbe5ddaf06d589fec6ea717d132f7f9cea38c3101acd6114173a5be889d2204af3b4487008c2f1cf0c2e1ab662e39b4e3caa0331bb8ddac94bb2dda49efa5d010d7bcab", 0xf1}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="01000000000000000100000001000000264a0bf4448bd08ae6a71fd0cee3eb7f7f111f6600000000000000bf1c33e2dff449bd3a123b9b8780b3cb37971cd0f01a6ee65cdf310ff24983a4e09e512b3c10edc801eef34521e6fcdfcc8d4bc66c0cb6bbdab23252d07a4ad19f7fe3e6fd379f59c75f7d4d642aa3b4e7f661c0b72ab7a4fc7ebfbf2586c61d6763566b7d266435960796c6e8ccb6a3939635dff55447a2afabd010489cf3180d444c7982760432994075", @ANYRES32=r6, @ANYRES32=r5, @ANYRESDEC=r4, @ANYRES32=r2], 0x20, 0x4048080}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00010000000200007100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x404}}], 0x3, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1})
io_uring_enter(r7, 0x627, 0x4c1, 0x63, 0x0, 0x0)
r10 = timerfd_create(0x0, 0x0)
r11 = syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=<r12=>0x0, &(0x7f0000000240)=<r13=>0x0)
syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a})
timerfd_settime(r10, 0x2, &(0x7f00000005c0), 0x0)
io_uring_enter(r11, 0x1f82, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x2004002c}, 0x20000000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x42, &(0x7f0000001ac0)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r0], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

3.929491608s ago: executing program 4 (id=2802):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
keyctl$chown(0x4, 0x0, 0xee01, 0xee00)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=@delchain={0x508, 0x65, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xa, 0x6}, {0xfff2, 0x1}, {0xf, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4d0, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x10}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x1}}, @TCA_BASIC_EMATCHES={0x26c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0xfff}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_META={0x78, 0x1, 0x0, 0x0, {{0x7f, 0x4, 0xb8a}, [@TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="c5b4137bb8", @TCF_META_TYPE_VAR='\x00', @TCF_META_TYPE_VAR="05b775cfbbc06380a4", @TCF_META_TYPE_VAR="dd", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="57d36a1b", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="22561c7c4b9158dd73e1"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="fa36bb51", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="94c784d967", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="c0452eaef5"]}]}}, @TCF_EM_IPT={0x84, 0x2, 0x0, 0x0, {{0x0, 0x9, 0x2d8}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x80}, @TCA_EM_IPT_MATCH_DATA={0x6d, 0x5, "7657c2c40d745675d05e257b89b512fe107aa61df4bf4d69f8b58367c56de2d59a032b7657fb7ab0b063dd5baeeb9804217b0ef6c9123827108c88e938fd8443ab867f035d4be52c0f8c1cb6b1a936e9844c1c7d635c745accc3a09e97cf53648e0803c177a2afc5b9"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xb, 0x7, 0x100}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x5}, {0x9, 0x7, 0x0, "6bac6345c5f0c2"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3, 0x8, 0x6}, {0xffffffffffffffff, 0x3, 0xc}}}, @TCF_EM_IPT={0x64, 0x2, 0x0, 0x0, {{0xf, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0xb80, 0x2, 0x3ff}, {0x0, 0xa, 0x1, "b63257fe8bc76e86e796"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xe23c, 0x7, 0xf6}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xffff, 0x7, 0x9e16}, {{0x2, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x4}, {0x4, 0x5, 0x6, 0x1}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x5c4, 0x4, 0x76}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x8e6}, {0x5, 0xce, 0xcb4, 0x1, 0xc, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x10}, {0x5f7, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_BASIC_EMATCHES={0x250, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1a8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x582, 0x2, 0x7f3}, {0x7}}}, @TCF_EM_META={0x90, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xc, 0x1}, {0x872, 0xff}}}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="1a42196b", @TCF_META_TYPE_VAR="30fd78e41d35"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x10}, {0xf81c, 0x2, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="8eecb72f0445c877", @TCF_META_TYPE_VAR="8149b9c502162e9c", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8391"]}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="1eda1b", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x7, 0x1}, {0x7ff, 0x10, 0x2}}}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="2ddec972", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="1e8029", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x764}, {0x762ec95, 0x101, 0xe, 0xfff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x95c, 0x7, 0x7}, {{0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x400, 0x2, 0x6000}, {0x58, 0x3, 0x2, "38428a"}}}, @TCF_EM_CONTAINER={0xc0, 0x1, 0x0, 0x0, {{0xd, 0x0, 0xc14}, "8a929e3e6fc94a7a112a1768aee3d495d623be8630489a8b9b88419f8c5fbfc74d6707d7e0ef6fd6c6813e1cb8d58305af72313776b08998a39ee132cae440ab6d8ed0b3ab23d02949ba1c113bc4476108b00e244c078634c315804a09b8322c4905a73502fc0b4a0d86f1d3c62feee013558201aa9dc4487753bc9194bc13e4dd22599582c05f894c1597653b56ff5e651fcbe5596028e863daea2688d245f6e22128dc9a641adce4d8a318c2280333e1"}}]}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x1}, {0xffffffffffffffff, 0x3, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x8}, {0x8, 0xbe, 0x2, 0x7, 0x7, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x5}, {0x2, 0x4, 0x6}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xdaf9, 0x1, 0x8001}, {0x3, 0x2, 0xff, 0x0, 0x7, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3ff, 0x7, 0x8000}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3e}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe0a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xaa92}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x7a}}]}, 0x508}}, 0x20040054)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, 0x0})
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x6, 0xbd, 0x0, 0x6, 0x0, 0xf, 0x5, 0x36, 0x0, 0x1, 0x4, 0x0, 0x8, 0x7, 0x2, 0xf9, 0x2, 0x7, '\x00', 0xfe, 0x5})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000001300)={{0x1, 0x0, 0x80, {0x100000, 0x7000, 0x2}}, "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", "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"})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r8, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000200)='bridge0\x00')

3.78772779s ago: executing program 0 (id=2803):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

3.390608702s ago: executing program 4 (id=2804):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001900010000003f00000000000a00000000e6"], 0x24}}, 0x0)

3.203072246s ago: executing program 4 (id=2805):
socket$inet_mptcp(0x2, 0x1, 0x106)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
select(0x40, &(0x7f0000000280)={0x3, 0xdd, 0x9, 0x2, 0x0, 0xc, 0x3, 0x4}, &(0x7f0000000880)={0xa4f, 0x6, 0x7fffffff, 0x1f4, 0x10000, 0x2, 0x3}, &(0x7f00000008c0)={0x0, 0x4, 0x7fffffff, 0x200, 0x10, 0xe, 0x4, 0x3}, &(0x7f0000000900)={0x77359400})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0xffffffffffffffbd)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000280)}, {&(0x7f0000000500)="223c1e31756476b05679400690e3fd18d6731c3a3c77972c3e33ddb308563de0afa727b92f6f056fd09a8f5c0874ae15a4496e355f74cd1a97495e2f6e43db32223613ed", 0x44}, {&(0x7f0000000580)="5f7db1bc816bf9848451acdc9ed8076086fb5d897c63f2bb20833eb65d1dc18dde0904c0ca10c1e3cdb3b0fbb27a", 0x2e}, {&(0x7f00000005c0)="0a87de82b0acb3a6b0aa83408f79180bcdbe326c23c429adb49225c22a8e3507993d3ab8ac0bd1999f0893177058f78e8485f9ada286c8eaebe1549587b3e46e99d5d9d16cd286e944a7e2", 0x4b}, {&(0x7f0000000640)="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", 0xfb}, {&(0x7f0000000780)="8694b4031617a21a692b1b7dd6abbdcd78a6b40548982938111479ccd2a384", 0x1f}], 0x6)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x1000000, 0x0, 0x20000800}, 0x800)

3.042545194s ago: executing program 1 (id=2806):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000", @ANYRES32], 0x3c}}, 0x0)

2.87682614s ago: executing program 4 (id=2807):
socket$inet_mptcp(0x2, 0x1, 0x106)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
select(0x40, &(0x7f0000000280)={0x3, 0xdd, 0x9, 0x2, 0x0, 0xc, 0x3, 0x4}, &(0x7f0000000880)={0xa4f, 0x6, 0x7fffffff, 0x1f4, 0x10000, 0x2, 0x3}, &(0x7f00000008c0)={0x0, 0x4, 0x7fffffff, 0x200, 0x10, 0xe, 0x4, 0x3}, &(0x7f0000000900)={0x77359400})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0xffffffffffffffbd)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000280)}, {&(0x7f0000000500)="223c1e31756476b05679400690e3fd18d6731c3a3c77972c3e33ddb308563de0afa727b92f6f056fd09a8f5c0874ae15a4496e355f74cd1a97495e2f6e43db32223613ed", 0x44}, {&(0x7f0000000580)="5f7db1bc816bf9848451acdc9ed8076086fb5d897c63f2bb20833eb65d1dc18dde0904c0ca10c1e3cdb3b0fbb27a", 0x2e}, {&(0x7f00000005c0)="0a87de82b0acb3a6b0aa83408f79180bcdbe326c23c429adb49225c22a8e3507993d3ab8ac0bd1999f0893177058f78e8485f9ada286c8eaebe1549587b3e46e99d5d9d16cd286e944a7e2", 0x4b}, {&(0x7f0000000640)="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", 0xfb}, {&(0x7f0000000780)="8694b4031617a21a692b1b7dd6abbdcd78a6b40548982938111479ccd2a384", 0x1f}], 0x6)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x1000000, 0x0, 0x20000800}, 0x800)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="01"]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20001091}, 0x40)

2.530142395s ago: executing program 0 (id=2808):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000380)=""/211, 0xd3}, {&(0x7f0000000240)=""/34, 0x22}], 0x7, &(0x7f0000000480)=""/231, 0xe7}, 0x9}, {{&(0x7f0000000580)=@phonet, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/173, 0xad}, {&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f00000007c0)=""/218, 0xda}], 0x3, &(0x7f0000000900)=""/98, 0x62}, 0x9}, {{&(0x7f0000000980)=@tipc, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/2, 0x2}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/253, 0xfd}], 0x4}, 0x2}], 0x3, 0x61, &(0x7f0000000d00)={0x0, 0x989680}) (async, rerun: 64)
read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) (rerun: 64)

2.044885063s ago: executing program 1 (id=2809):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)=0x4)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000002240)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="203a0d4cbf296cff792d20da2c4a", 0xe}], 0x1, 0x0, 0x0, 0x28004802}], 0x1, 0x40800)

931.595457ms ago: executing program 3 (id=2810):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x30008085)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8044)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r4 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
r7 = fanotify_init(0xf00, 0x1)
fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0)
fallocate(r5, 0x0, 0x1000000, 0x3)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80009100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r9, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x22000000}, 0x10)
capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000, 0x0, 0xf})
syz_open_dev$tty1(0xc, 0x4, 0x1)

929.103624ms ago: executing program 1 (id=2811):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x80, 0x1, 0x28}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000700000095d58bad5e435b0bbc601000000e000000008799"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]})
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x50)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000060000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast})
close(0x4)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x70bd28, 0x24dfdbfe, {0x81, 0x10, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x884)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000003000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000006909000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x41}, 0x94)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2020600}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xf4, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040805)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r4, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x400)
ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000480)=0xffffffffffffffff)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="8285bd1f7b", 0x5}], 0x1}, 0x400c9c1)

911.959686ms ago: executing program 2 (id=2812):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0)
pipe(&(0x7f00000001c0)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
write$binfmt_misc(r13, &(0x7f0000000000)="a5ce", 0xfed0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r12, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r14=>r13, {0x399}}, './file0\x00'})
fcntl$setpipe(r14, 0x407, 0xff)
r15 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r12, 0x0, r15, 0x0, 0x1fff, 0x1)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}})

710.699901ms ago: executing program 4 (id=2813):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000580)=0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000001d00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000400)="4235bb67c8d04a64569a15cdee9d71d05ebd0fb046fe740d42edcf91ba71f236b35824a04b0b170927613890fe21ae8b6e8d7af67194b56c7f22993cb851f2bed36582f2827648083edc883bd8809c7dc3f95e08ca39ec21895333ba6fcb93cfb89a1f563eeda72b1e694bba86b61ca8d7b5334d221a584912b1baded07f9122da0adbf9d0d07fa146d7e391bba41f6c1f85ec55251844f3c0968729fac3f00bda4d9c9bba91e129bf7859641f71638499f49a687b93507605", 0xb9}, {&(0x7f00000004c0)="93432224dd859ec9b7dbd6e3aac445879d4e04c8597d3202736a105f536f9169073c64682f53656b88e7f79f40e24da9c7e3e615ed03e0bdbf2695808e6a4c964065d8eae13a2a635f9b7238feaba0e1d15f2b6814d82e56cda484676e2f6922dafe9a8a559f7c7e522a94abc3cdc10910ed3f4f50cf9e6ee6a2aea26606f7d562ad0f881859b35c19f534acb1887db0fb520d4487fff6c2b8ff806f4dc52e1ef509", 0xa2}, {&(0x7f00000002c0)="d238577f92411fbb7e1b375e170c6776baea17aa460c46faff7e7e19852bbb784647f77b5449421bf7043d6fd555de986c9c8b65b14b15277af57e5b3a31055d53432fcff254d9e9b8b3f33c09421efd88b0403d067083e759", 0x59}, {&(0x7f0000000380)="094c81a0c9a55b9edaf82d7e5636a7a4650567e7996ce4b30118ddab0910c16fb73ffae0eea0b412", 0x28}, {&(0x7f0000000900)="49bab2b4434ebf2836755acc47349d4509c1855932edbfc72eeb67d67da5ca72a87c7c353b8ce38e4068eb964bd105ed020ec85de524df2caf6d8714be9c1ba363cdb24ea8ec1deb2c1fd77d6fc4a6e89e8bb7bcdc33be03f451fdda0cf86c583fd3960d7688acea7ee6bd92b1914d196a0b50794267bf930364d70963931dbb67d95b2e6d837e56f49f840c8b10d5a8514ebfc09a5b3622c15034a8328f7c9fc8119a49f33cb88b31c0c964b433bc8e619429431b5f1e01adb989f2b0b6cdfef8b7f4febc5b0d69bb13dd2c1d7323becfd8fbb91cdfee2de4328eec3314550f1904902978762b67dae9db57167dab77bea13040829d35d6e689e043c745bdbcfc172896adc5dc573fd3ae363b3b05932c5494ff50de0850095f34d225ac540fa88d5a79f39b685317a5f0f7b21f390d95cc5902d40443bf652312b0dbd26e53f1cb674690e798493c0ec1f6a628a35708ccfd06b4137504e2cc5fbaca198b89cfb379ba9d9af2e49974e06727a339d23029b4d037d9e7485cb7e568339362ad44d31f29a8983463176bd30672866e1c56f12ffaabebd5a8eaa06251ce9420c3e8a19e8e5f0942d8d164b63aa008f229af5129f3fc4f56aebfdd7151e2642f0f9ba61b2839dd171e811c074f21ceabd7fb6915c63613db9faadbcf5c4754d13bca374eb5a43389353a2a2c8e6bb12eda3bd47dd6706ff17fb01c05d25b54ed81cc9d3a9ddc0d03e622fcb05b3945a1f7ee01757bd9dd94ceac18bd67ea2f780ed64b511db0911b0fc08c478ea17ea9b0c81cd183833f1d081cbd018fd2aa4cb864cb73fd67da6c2b59d107c6b1f4af195d018dd7fdd0e27837ddc3d3017665ed11ba804054733bac7a3c99a7ef675e944a550caca75c6121d0004b5d0df215e14eac5ff05d1b6827b0474d3039388065bc0d30054e87c5e4d19e7f91a38e2ad1e9093fd7e6c8d602c8c21dd215747dbe4f9f5e7bc11d0d362ace3fc3320c6031fc455f9f7ba83ad5957c7023e32f7e991aec205e8ff9701a8358266ae33e8a12b15698834ab56ad03e2ee75a6c1dfd23898af8e911da564b866ed35f1ee750f7ecd51e701329fb233f7980b90618e24f15f5e055fcfb0eb0a0abee611107439aafe20031d7e64650e28944dada0ded48e7d1056efc9fbf00414f797aa2f68ec2b459454af9aea7f7f2f714180c7d210b59950cf59a9cb152b53914cf0c6eb1ac3186983a9cda28224ce613ff0f07099242a6bad11f5dc4450bae0ebf5443760721a4ce004710b079c6c1f7fd7d4700aaaea7af33f4a1dbcd4bc3f72903a78c71302353c0ede6d001f3929526ba47e5329ee70ff3eb5ccdb9cf277ce7eba0fd4c71c85afb15b402a7ab0a3667666cdf905ab116977963f1968c7ae5a4b645ddc36c3a15c8f7c45c8885565f99f0515ae103e050436e1f5e5470a180b5ee8ce0e5c4271957f353b227af3da873671011004915c91ac069d7ba01b1ca621e35277ef5301e1a32141990cda7fb0f2fbdde3f04c5a93745b386f02bb2e68c2fac48b8803587a9a186d5f92b6edee42cd1d0c9973130b5baeb2e5713f7ca706cfafeeea89332e8039e83d34f66954e14ae669faea602711831a9d43a094efd2e8815dfdd94c36a623a6c85d1533daf3dfdf33e24f32752406519cc36c750c9a7caff647622a5160e61cd349e5389a91db2c0ea73bdfa5191cf5f07dfb666979c1f34f7ed1f286467270847f568ce6b4e4a3547a27e74025777d5d2a7f66844597b4e2e3dbaa174b3e28ba1ded9ab1fdd36ab9ad09d3f6350bca82e2605e803271b2344ea43b8370b452226178e73952a6c4a2f8422a3da750089dcf6ef00db80c8410e46a9b544c3fa3e6c3771d4ae929ccf426a168fad14a32f9de9f311de4eb9cf90959c48f3ecaf84c51f130c52a92cd0d242781f9883f8d15b68fecdfccc7dc8bc9fb5a243dfb50e6ed094b1d0894e4914e389e82fe4124e237f3ec7a65558481682aed8da585e828c5d7fe4290b1cd0fcb1e202bf0a223baed54acedfa6cbc0a898693d2101e75c0cc34be05d47c9d658fa821840b3bfb3826eb3229618cf5ff1700bf8972cb9f1aceef2b6769ea6b1769da7f047c12b6c14f6042722afc55256ec707ebc1308f09b939ff3e68b5a26fcd6ecee96158eafd665d603aec66aa8dcbd245e2c4a20be9bc0bc2ba34a0d4dc22cfa37a393d9fef14e93755f3627b9bcf8df1db88e77a734e72c5666485f599cbf5c402fa8b491cae71d158af470603b7c80df8671702bb5f3498d0230a89ad370e6dfb7124b04f4679fc9fbdf8a1194fa5cd012ec362081981071350ddd7d11d268d062acb6700f209bf7cf05b0cd3f4501a41b43fda21cca7a4ef66434974cdb2be61d8dde4fad3e440c13d553d55132398ca446df1b661cb32ffab0769558dac81ff70c2f3e70048dbb4c5746b77fec2c6b1bde369203e9040136447f6e0d98737c10c9d58d2cb53cf0e4feb4858f0a601253822eb13d6733b46520a204764914c3bf212cd42663e4699bb08abf9c1e7b03fcf7e3c34e2aef80216187541b9ab876effcaa289d522753c8c27e043ae1545e9fcb9c20f4591dffc4a96b6f5b3a6ce1752f644a4f2a5071afe2968e975661d1f311335670a4923cf2c19f0a30d9bce32f421a9e51badc4cb41e53ed8517291eebfd35711b83da35f3672aba96b79d3645137512167099ecf1fd4eebc3ba88ad935deb23a781f449896cd5f33855d4afb8bf739b8c10dc599cb034c42de9241ed2cd11a46ec04a96b63fa62618c952d10f9c173b8364eaaffb777933350d7c0bfead1a9e0f04b55e449ba15a9b08d55c4f2d2c591241b1ab578f8c96f0bc704dd56f4b62ebab9a65fc01cfb137720c201c75bddc868835135a31e04b9cdf8735c4a67d3898724342b06486e3b91f36bbb6bcab6532014c8598f0c179c5279350a2a8ed561690089ef26e74f5a2e2d29c20cb37b016f88140ae89fcc25ccbb929f57d20ffdeee1e36fc090993648344f7e681c109bc46a741025c6a7cc85537e92e5000b55f0ee67f97c16b1519804eccb1c4fb26bfaff83a6c1b20e6b275d456c5bdbbaafa43c600345056ebab20fbb85548eeb60ac4967f3efacc1170b8345a2129ea288fd59ddf89444b073513c9dc311ed1060b0e8a467640503a20749a65be45bd99d494d51fbdd9f48b069ddddfb8b41d2abeabfb8563f568e09f9dadf1a04dcf49248c8fa70f8c26d9721ca28edab3bef8a12fb7ad3b50d620e470feb066fc9124f839b830c4d1c7382564ff7f42f3e5ee3d262e909af71b05d0e68a5299ec4fae4f360383c9185fce1138a4a4197836190c5381ed9ca6f404ff03f4261f4e7c751749ade660508d720c708f784a21524763c257b9e687c8a6b2df8741efc9450f33abc7c8a38ab1861680cb27e5d8789e078761ae4215c6a6f76edeee974ee5ef80dcaebce4d88a7b211f574a8629070ad54ab476e2cbdfed410cf1efca889e5e5b9d008941dd04fdea2c9c649c3bc83ce36b2252fddd32d01f5e31b5d9668fed89e5447dada0fbe6f1bdabdf793358d4096d81c71c0bc5b8468f4b713ca4d7c4abb2f585f239e9a135734c66b013e85b5901e62b58435153c2963a755bec582db9ebc66dece176efea36420e4d7e371588e3e9b4a73d05fc46a270fd2c5d92f4f2f284722b3b51b60ea642d97fc64661f000e15b1256ae508a8285791364da21c5a6b87dee6c572b770c23119cdd2a02fe4d5c0718419c295294a6531fc85aeab9a705081d6d6b82c5e99b3dfd9a2f7711803060b9640376adaad16dcfd22e8f2e1025531db70b6889ca0afeb9cffefbe8011c5c46e09ae647db484cc8a629e6f9f480b180ec5e43718604d7718b925aa503df03e6ab5acd522216cab49df1284ac9ebb91469f34b506e2be379d58c4f9c8220b099cd86ad5cc613709d34de5217d06db51872f671d84248a0b92b5ae2894232337fbf4a59596ace6e909a3b7731f7e07070a34b86678c736b932df3633c44323cae3d1c9663849c00540b170baa5e02a68d9cc90c99248128b24987509fee78e868941bf153bc97e3264f106aee80a8f0e7392f206c2c10602dd25d7b517d53f4cdc58c3b9c76bd8a0d2e01233cb67e20d9df79c18e5113e94704b69711e7379fff39733c68503b35294c497fad1403fa78183315af514eeae606ec3be3b0fdc2f911bb0a6b7df02a4d3544164595e87dadd452a757d653936e1aed8da951ad673949921123f8c7f4a1b69ac6066dcb828d9831714d1e49fba32d3cf9afac782ecfda10ebb92f5cc3315ec40d2c4a3f04882348a8cdb4109a9aa53fb49dcc465080f760387dc9311229588ab57f89cb731084bc3486f6cf6baa59d71fe35349de4da2746ae599414cd1221a7d4980c2dfdca9240d530e641534acdf21782b251eb253540f9ce495becc8a0e330394746a2151355165a02347f60eab6a6bd4ac0034388cf2b7a6a16b4d85ff176717eb40d643b47672de840b0945438906256a255ededbc063fe4f4046d9f8a98a955a62db51f081e2ab29bbfb70ae3a7f8e7016502768bd9735cb624fc028b2e19c2dec2e513d33178f8f8c0777374264a29d00be49fda53bfd29735bc805a734ae59cbd4a5cb58fabe36c48ed12dac4636cd85e7910ede1b1e8b19ced2bd6b09d5ff95e5da4399b5c42e1592305aad0e49a785e4230a90831600d840c48b39a81d7ec73cdf3ad1be82a1a29ebcb32fb85e8db21e6b510f569cc183099c8122e8ce0c5d4741eec4d8107cba215e72b6ff69315bac635780d4677f014a13fff6f1e6e13d91a8c42c51e4854fe9276c977536c7f3296caa8fbb330fb3e23286dc614c441ca47fbff37f2a11349841e83c5b9954997ef2d917fb0fded8162150eee708ccf8c227ea74e4e426018ace2a9898027ec3f6f642443e798e500a0bda9cba277f574f8047d5eaa795f834ad3c792f3590fab1bb8dd9a9d41a9dbb089b73f9e2c376df380a8cf74ee670771260168f6b4e580448e133a836f35f11d850dac04a31469d1aa6bd306a09721fba0da01b0698f9a6a1e5af17a6ee7b4ad746a042f6c6545a37ca6166d6a96ff32e51348a5585b710cef05dca857643583982b99d84e11a4a50dc9f2da09764b1459531ce60fcdc38582ca7f435d4ae19e66c9e013f6dba7ef50b2535e50119a78ac79cc338366234f2e142f683f6afa873dcec2141a9d877e6a031858b9fb90cba516930ab2a92bf18eaa58cc076e357b3be31bc1e793143a2002d265f251385f542c91a0c277e4b163786597aa3f38c98012e2d0c6da0142c47a7e561c1855fb67546706628b390dc73ff7b8c13e37e33c4a4911b76663e663100b72edf23e2fe92a19963082154baf86e8a468f2d4a6fbceaace9ce29a9f5cac4dfd1f1efd0c012cf693161816d06d83df2fbcc5832476dee3c48f2c64be3d4fc3fa632f5f3821aaa42e0f7859e58dd055f8f490537f8d686e3e321595ddc26eb1c004a051485e5c9f06a09c9ab592ef7bdb9b965366eb09e07cdf6e2b67cf1e26c224a67de74937ae8a9c552dd89858e3b35be42de32c36fb9410072416ec49fc59725956b5ba3954baff4c843c9f6f7cd460ea8568edc3a383d0972d4adddc3b6097b9842ca6abe9bee7926949b23d495a561702684eb34affb49b8271043896bdfca8c1af9307664f400970cbfbb03dbf415a4b7e592d792b583cd3350d0f2298dc1ac246670203ee5b5f458177e2d0f9607f64532ed7aaa655cca493f2fdd53b14819fb750854ec2aadc51fec39083e", 0x1000}, {&(0x7f0000001b00)="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", 0xfb}], 0x6, &(0x7f0000000740)}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000001900)="cd33209c198d76b55750f96c7234ca1352b89a33810ab3d974acb17d26ec90308f779428ab91b6176e1be3734b31d482bb4fc05ae61b6c02efa012ff301cf134c9d775a31eaebc8f0a5a2e205e208e334a159766128057986aafbb50901759cf57b668349c7767ae4a7cafeadda948b64a31e79956ed671de88f6f41ef03b3b704aa23f67598461826de50cae22d9e89c6789117cfbebbe3c1f343f1970912295115c25b8781a12ffb8e77da9d3bbe5ddaf06d589fec6ea717d132f7f9cea38c3101acd6114173a5be889d2204af3b4487008c2f1cf0c2e1ab662e39b4e3caa0331bb8ddac94bb2dda49efa5d010d7bcab", 0xf1}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="01000000000000000100000001000000264a0bf4448bd08ae6a71fd0cee3eb7f7f111f6600000000000000bf1c33e2dff449bd3a123b9b8780b3cb37971cd0f01a6ee65cdf310ff24983a4e09e512b3c10edc801eef34521e6fcdfcc8d4bc66c0cb6bbdab23252d07a4ad19f7fe3e6fd379f59c75f7d4d642aa3b4e7f661c0b72ab7a4fc7ebfbf2586c61d6763566b7d266435960796c6e8ccb6a3939635dff55447a2afabd010489cf3180d444c7982760432994075", @ANYRES32=r6, @ANYRES32=r5, @ANYRESDEC=r4, @ANYRES32=r2], 0x20, 0x4048080}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00010000000200007100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x404}}], 0x3, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1})
io_uring_enter(r7, 0x627, 0x4c1, 0x63, 0x0, 0x0)
r10 = timerfd_create(0x0, 0x0)
r11 = syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=<r12=>0x0, &(0x7f0000000240)=<r13=>0x0)
syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a})
timerfd_settime(r10, 0x2, &(0x7f00000005c0), 0x0)
io_uring_enter(r11, 0x1f82, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x2004002c}, 0x20000000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x42, &(0x7f0000001ac0)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r0], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

0s ago: executing program 0 (id=2814):
pipe(0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000580)='io_uring_register\x00', r0, 0x0, 0x3}, 0x18)
r1 = io_uring_setup(0x775, &(0x7f0000000340)={0x0, 0xa8c3, 0x1000, 0x3, 0xba})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{0x0}], 0x1)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0})

kernel console output (not intermixed with test programs):

2079'.
[  578.719439][T13336] netlink: 'syz.3.2079': attribute type 5 has an invalid length.
[  578.750117][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'.
[  579.482541][ T5874] usb 1-1: USB disconnect, device number 22
[  580.159744][ T5874] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  580.894049][ T5874] usb 1-1: Using ep0 maxpacket: 8
[  580.906078][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11
[  580.917636][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  580.949350][ T5874] usb 1-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00
[  580.970297][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.166346][ T5874] usb 1-1: config 0 descriptor??
[  581.390704][   T30] audit: type=1400 audit(1764674349.658:694): avc:  denied  { create } for  pid=13363 comm="syz.1.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  581.940003][ T5874] usbhid 1-1:0.0: can't add hid device: -71
[  581.995902][ T5874] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  582.033606][ T5874] usb 1-1: USB disconnect, device number 23
[  582.092868][T13382] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20004
[  582.108117][T13382] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  582.123970][T13382] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  582.166290][T13378] syzkaller0: entered promiscuous mode
[  582.194394][T13378] syzkaller0: entered allmulticast mode
[  582.209592][ T5820] Bluetooth: hci5: sending frame failed (-49)
[  582.238357][ T5814] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  582.908721][ T5824] libceph: connect (1)[c::]:6789 error -101
[  582.914782][ T5824] libceph: mon0 (1)[c::]:6789 connect error
[  582.967792][T13388] ceph: No mds server is up or the cluster is laggy
[  583.197073][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2094'.
[  583.940940][   T30] audit: type=1400 audit(1764674351.790:695): avc:  denied  { read } for  pid=13401 comm="syz.0.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  584.692621][T13415] netlink: 'syz.4.2099': attribute type 10 has an invalid length.
[  584.700557][T13415] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2099'.
[  585.647583][T13424] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c)
[  586.111845][    T9] kernel write not supported for file bpf-map (pid: 9 comm: kworker/0:0)
[  587.110594][ T5950] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  587.121385][T13445] 8021q: adding VLAN 0 to HW filter on device bond1
[  587.463736][T13448] lo speed is unknown, defaulting to 1000
[  587.500999][ T5950] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  587.545121][T13449] bond1: (slave macvlan2): Opening slave failed
[  588.060127][ T5824] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  588.242282][T13476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  588.525771][ T2937] wlan0: Trigger new scan to find an IBSS to join
[  588.549489][ T5824] usb 3-1: config 0 has an invalid interface number: 249 but max is 0
[  588.656760][ T5824] usb 3-1: config 0 has no interface number 0
[  588.671017][ T5824] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87
[  588.694885][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.714990][ T5824] usb 3-1: config 0 descriptor??
[  588.756438][ T5824] port100 3-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint
[  589.033533][ T5874] usb 3-1: USB disconnect, device number 23
[  589.998250][T13499] syzkaller0: entered promiscuous mode
[  590.004013][T13499] syzkaller0: entered allmulticast mode
[  591.045115][   T30] audit: type=1326 audit(1764674358.675:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13500 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe306b8f749 code=0x7fc00000
[  592.590691][ T5950] libceph: connect (1)[c::]:6789 error -101
[  592.612407][ T5950] libceph: mon0 (1)[c::]:6789 connect error
[  592.799949][ T7846] wlan0: Trigger new scan to find an IBSS to join
[  592.813963][T13521] ceph: No mds server is up or the cluster is laggy
[  593.004211][T13536] loop5: detected capacity change from 0 to 7079
[  593.080460][T13536]  loop5: [CUMANA/ADFS] p1 [ADFS] p1
[  593.232884][T12222] Buffer I/O error on dev loop5, logical block 884, async page read
[  593.532192][   T30] audit: type=1326 audit(1764674361.004:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13538 comm="syz.3.2133" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5dc6d8f749 code=0x0
[  593.555049][    C0] vkms_vblank_simulate: vblank timer overrun
[  593.876557][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.386475][T13558] binder_alloc: binder_alloc_mmap_handler: 13557 200000ffd000-200001000000 already mapped failed -16
[  595.455289][T13558] binder_alloc: 13557: binder_alloc_buf, no vma
[  595.480316][T13561] binder: 13557:13561 ioctl 4018620d 2000000002c0 returned -22
[  596.796616][T13576] FAULT_INJECTION: forcing a failure.
[  596.796616][T13576] name failslab, interval 1, probability 0, space 0, times 0
[  596.813642][T13576] CPU: 0 UID: 0 PID: 13576 Comm: syz.3.2142 Not tainted syzkaller #0 PREEMPT(full) 
[  596.813670][T13576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  596.813680][T13576] Call Trace:
[  596.813687][T13576]  <TASK>
[  596.813695][T13576]  dump_stack_lvl+0x16c/0x1f0
[  596.813726][T13576]  should_fail_ex+0x512/0x640
[  596.813752][T13576]  ? fs_reclaim_acquire+0xae/0x150
[  596.813777][T13576]  should_failslab+0xc2/0x120
[  596.813801][T13576]  __kmalloc_noprof+0xdd/0x880
[  596.813828][T13576]  ? tomoyo_profile+0x47/0x60
[  596.813844][T13576]  ? tomoyo_supervisor+0x45b/0x13b0
[  596.813867][T13576]  ? tomoyo_supervisor+0x45b/0x13b0
[  596.813883][T13576]  tomoyo_supervisor+0x45b/0x13b0
[  596.813907][T13576]  ? __pfx_tomoyo_supervisor+0x10/0x10
[  596.813927][T13576]  ? __pfx_vsnprintf+0x10/0x10
[  596.813951][T13576]  ? find_held_lock+0x2b/0x80
[  596.813980][T13576]  ? snprintf+0xc7/0x100
[  596.814001][T13576]  ? __pfx_snprintf+0x10/0x10
[  596.814027][T13576]  ? process_measurement+0x1e6/0x23e0
[  596.814067][T13576]  tomoyo_audit_inet_log+0x285/0x3a0
[  596.814093][T13576]  ? __pfx_tomoyo_audit_inet_log+0x10/0x10
[  596.814130][T13576]  ? tomoyo_check_acl+0x1f7/0x410
[  596.814148][T13576]  ? __pfx_tomoyo_check_inet_acl+0x10/0x10
[  596.814178][T13576]  tomoyo_check_inet_address+0x5a3/0x6c0
[  596.814207][T13576]  ? __pfx_tomoyo_check_inet_address+0x10/0x10
[  596.814253][T13576]  tomoyo_socket_sendmsg_permission+0x2bd/0x3c0
[  596.814282][T13576]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[  596.814310][T13576]  ? iovec_from_user+0xbb/0x140
[  596.814331][T13576]  ? __import_iovec+0x1dd/0x650
[  596.814355][T13576]  security_socket_sendmsg+0x211/0x240
[  596.814380][T13576]  ____sys_sendmsg+0x865/0xc70
[  596.814405][T13576]  ? copy_msghdr_from_user+0x10a/0x160
[  596.814423][T13576]  ? __pfx_____sys_sendmsg+0x10/0x10
[  596.814462][T13576]  ___sys_sendmsg+0x134/0x1d0
[  596.814483][T13576]  ? __pfx____sys_sendmsg+0x10/0x10
[  596.814498][T13576]  ? __lock_acquire+0x622/0x1c90
[  596.814558][T13576]  __sys_sendmsg+0x16d/0x220
[  596.814577][T13576]  ? __pfx___sys_sendmsg+0x10/0x10
[  596.814617][T13576]  do_syscall_64+0xcd/0xfa0
[  596.814644][T13576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.814663][T13576] RIP: 0033:0x7f5dc6d8f749
[  596.814680][T13576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  596.814696][T13576] RSP: 002b:00007f5dc7bdd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  596.814714][T13576] RAX: ffffffffffffffda RBX: 00007f5dc6fe5fa0 RCX: 00007f5dc6d8f749
[  596.814726][T13576] RDX: 000000000000afe6 RSI: 0000200000000380 RDI: 0000000000000003
[  596.814737][T13576] RBP: 00007f5dc7bdd090 R08: 0000000000000000 R09: 0000000000000000
[  596.814748][T13576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  596.814758][T13576] R13: 00007f5dc6fe6038 R14: 00007f5dc6fe5fa0 R15: 00007fffb4d289a8
[  596.814785][T13576]  </TASK>
[  597.770050][T13588] overlayfs: missing 'lowerdir'
[  597.814006][T13590] overlayfs: missing 'lowerdir'
[  599.876066][ T5874] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  600.768373][T13622] Invalid logical block size (1536)
[  600.825726][ T5874] usb 3-1: Using ep0 maxpacket: 32
[  600.836838][ T5874] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  600.855843][ T5874] usb 3-1: config 0 has no interface number 0
[  600.862498][ T5874] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 65533, setting to 1024
[  600.874879][ T5874] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1024
[  600.886186][ T5874] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  600.896344][ T5874] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  600.910343][ T5874] usb 3-1: config 0 interface 12 has no altsetting 0
[  600.920925][ T5874] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  600.930270][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.938293][ T5874] usb 3-1: Product: syz
[  600.947804][ T5874] usb 3-1: Manufacturer: syz
[  600.952843][ T5874] usb 3-1: SerialNumber: syz
[  600.960599][ T5874] usb 3-1: config 0 descriptor??
[  600.969978][T13607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  600.980801][ T5874] f81534 3-1:0.12: unsupported endpoint max packet size
[  601.099327][ T5870] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  601.271824][    T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  601.316702][ T5870] usb 5-1: Using ep0 maxpacket: 32
[  601.333325][ T5870] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  601.370742][ T5870] usb 5-1: config 0 has no interface number 0
[  601.376887][ T5870] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  601.401483][ T5874] usb 3-1: USB disconnect, device number 24
[  601.417204][ T5870] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  601.428487][ T5870] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  601.442992][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.456623][ T5870] usb 5-1: config 0 descriptor??
[  601.489035][    T9] usb 4-1: config 0 has an invalid interface number: 3 but max is 2
[  601.497058][    T9] usb 4-1: config 0 has an invalid interface number: 176 but max is 2
[  601.505855][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  601.516426][    T9] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  601.525734][    T9] usb 4-1: config 0 has no interface number 0
[  601.531895][    T9] usb 4-1: config 0 has no interface number 1
[  601.538002][    T9] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  601.547781][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.559301][    T9] usb 4-1: config 0 descriptor??
[  601.572255][    T9] usb 4-1: unknown number of interfaces: 2
[  602.209969][ T5874] usb 4-1: USB disconnect, device number 25
[  602.397280][ T5870] uclogic 0003:28BD:0094.0010: pen parameters not found
[  602.404259][ T5870] uclogic 0003:28BD:0094.0010: interface is invalid, ignoring
[  603.403626][T13624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.530944][T13624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.639046][ T5870] usb 5-1: USB disconnect, device number 30
[  605.121832][T13665] binder: 13664:13665 ioctl 400c620e 200000000340 returned -22
[  605.193283][T13670] fuse: Bad value for 'fd'
[  605.266627][T13671] fuse: Bad value for 'fd'
[  605.645150][T13679] Device name cannot be null; rc = [-22]
[  605.655012][T13679] ALSA: mixer_oss: invalid OSS volume ''
[  605.721689][    T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  605.883953][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  605.900310][    T9] usb 3-1: Dual-Role OTG device on HNP port
[  605.907596][    T9] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1
[  605.935612][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.000084][    T9] usb 3-1: Product: syz
[  606.013984][    T9] usb 3-1: Manufacturer: syz
[  606.099442][    T9] usb 3-1: SerialNumber: syz
[  606.129464][    T9] usb 3-1: config 0 descriptor??
[  606.165894][    T9] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32
[  607.877580][T13707] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  607.894713][T13691] sp0: Synchronizing with TNC
[  608.047616][T13712] binder: 13711:13712 unknown command 0
[  608.083531][T13712] binder: 13711:13712 ioctl c0306201 200000000080 returned -22
[  608.092679][T13714] binder: BINDER_SET_CONTEXT_MGR already set
[  608.112014][T13714] binder: 13711:13714 ioctl 4018620d 200000000040 returned -16
[  608.239561][   T30] audit: type=1400 audit(1764674374.764:698): avc:  denied  { write } for  pid=13718 comm="syz.4.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  608.577224][    T9] usb 3-1: USB disconnect, device number 25
[  609.239207][T13733] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  609.666157][ T5874] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  609.965242][ T5874] usb 2-1: Using ep0 maxpacket: 32
[  609.972850][ T5874] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  609.982501][ T5874] usb 2-1: config 0 has no interface number 0
[  609.991354][ T5874] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  612.419416][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.506100][ T5874] usb 2-1: Product: syz
[  612.575418][ T5874] usb 2-1: Manufacturer: syz
[  612.623391][ T5874] usb 2-1: SerialNumber: syz
[  612.764220][ T5874] usb 2-1: config 0 descriptor??
[  612.833714][ T5874] usb 2-1: can't set config #0, error -71
[  612.968188][ T5874] usb 2-1: USB disconnect, device number 34
[  613.653779][  T975] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  613.739198][T13776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2194'.
[  613.761741][ T5874] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  613.834187][  T975] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83
[  613.862136][  T975] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 64602, setting to 64
[  613.897732][  T975] usb 3-1: config 0 interface 0 has no altsetting 0
[  613.917078][  T975] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  613.932169][ T5874] usb 2-1: Using ep0 maxpacket: 16
[  613.952362][  T975] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  613.972857][  T975] usb 3-1: Product: syz
[  613.977660][ T5874] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  613.993818][  T975] usb 3-1: Manufacturer: syz
[  613.998889][ T5874] usb 2-1: config 0 has no interface number 0
[  614.017082][  T975] usb 3-1: SerialNumber: syz
[  614.024537][ T5874] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  614.047962][  T975] usb 3-1: config 0 descriptor??
[  614.057322][ T5874] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  614.068386][T13760] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  614.083469][  T975] usb 3-1: selecting invalid altsetting 0
[  614.091836][ T5874] usb 2-1: config 0 interface 41 has no altsetting 0
[  614.115890][ T5874] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  614.136053][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.163613][ T5874] usb 2-1: Product: syz
[  614.177454][ T5874] usb 2-1: Manufacturer: syz
[  614.208689][ T5874] usb 2-1: SerialNumber: syz
[  614.242119][ T5874] usb 2-1: config 0 descriptor??
[  614.252427][T13771] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  614.259679][T13771] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  614.284247][ T5870] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  614.361452][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.395889][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.419130][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.434215][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.442267][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.454115][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.464353][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.473899][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.482430][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.491236][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.499409][ T5870] usb 5-1: config 0 has an invalid interface number: 249 but max is 0
[  614.507917][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.517599][ T5870] usb 5-1: config 0 has no interface number 0
[  614.529111][ T5870] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  614.543866][T13771] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  614.543881][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.551171][T13771] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  614.558694][ T5870] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  614.576929][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.584824][ T5870] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87
[  614.585826][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.602253][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.603008][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.611390][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.620792][ T5870] usb 5-1: config 0 descriptor??
[  614.633162][ T5870] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint
[  614.638045][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.653787][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.662059][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.670070][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.678076][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.687068][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.695142][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.732188][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.765584][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.781956][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.790691][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.799207][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.918610][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.951407][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.973511][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  614.988714][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  615.003964][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  615.016955][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  615.030898][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  615.039459][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  615.060303][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  615.073071][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  615.086315][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  615.098524][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  615.112791][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  615.125219][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  615.160887][ T5874] Error reading MAC address
[  615.166761][T13771] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  615.174296][T13771] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  615.201525][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  615.209680][T13762] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  616.444950][T13765] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  616.453965][ T5945] usb 3-1: USB disconnect, device number 26
[  618.370108][ T5874] sr9700 2-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, f2:c5:03:2f:33:b0
[  618.384247][ T5874] usb 2-1: USB disconnect, device number 35
[  618.394262][ T5874] sr9700 2-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet
[  618.423993][    T9] usb 5-1: USB disconnect, device number 31
[  620.463066][T13835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  620.516587][T13835] syzkaller0: entered promiscuous mode
[  620.525110][T13835] syzkaller0: entered allmulticast mode
[  620.549164][T13835] tipc: Resetting bearer <eth:syzkaller0>
[  620.683994][T13831] tipc: Resetting bearer <eth:syzkaller0>
[  620.718389][T13831] tipc: Disabling bearer <eth:syzkaller0>
[  621.371217][ T5874] libceph: connect (1)[c::]:6789 error -101
[  621.385166][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  621.435622][T13846] ceph: No mds server is up or the cluster is laggy
[  622.302262][  T975] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  622.784056][  T975] usb 2-1: device descriptor read/64, error -71
[  623.156338][  T975] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  623.309030][  T975] usb 2-1: device descriptor read/64, error -71
[  623.460140][  T975] usb usb2-port1: attempt power cycle
[  624.045194][  T975] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  624.101361][  T975] usb 2-1: device descriptor read/8, error -71
[  624.363579][ T5814] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  624.419228][  T975] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  624.451755][  T975] usb 2-1: device descriptor read/8, error -71
[  624.561572][    T9] libceph: connect (1)[c::]:6789 error -101
[  624.569700][  T975] usb usb2-port1: unable to enumerate USB device
[  624.579121][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  624.982115][    T9] libceph: connect (1)[c::]:6789 error -101
[  624.988248][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  625.155857][T13887] ceph: No mds server is up or the cluster is laggy
[  625.993836][T13908] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  626.665910][T13907] ceph: No mds server is up or the cluster is laggy
[  626.711268][  T975] libceph: connect (1)[c::]:6789 error -101
[  626.728591][  T975] libceph: mon0 (1)[c::]:6789 connect error
[  626.867620][T13915] overlayfs: missing 'workdir'
[  627.889112][T13942] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2232'.
[  628.088736][   T30] audit: type=1400 audit(1764674393.332:699): avc:  denied  { write } for  pid=13948 comm="syz.4.2233" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  628.133844][T13952] fuse: Bad value for 'rootmode'
[  628.782232][    T9] libceph: connect (1)[c::]:6789 error -101
[  628.809223][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  628.894201][T13956] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2235'.
[  628.993765][T13959] ceph: No mds server is up or the cluster is laggy
[  629.134288][ T7895] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  629.449337][    T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  629.603233][T13980] FAULT_INJECTION: forcing a failure.
[  629.603233][T13980] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  629.672431][T13980] CPU: 1 UID: 0 PID: 13980 Comm: syz.4.2241 Not tainted syzkaller #0 PREEMPT(full) 
[  629.672457][T13980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  629.672467][T13980] Call Trace:
[  629.672473][T13980]  <TASK>
[  629.672480][T13980]  dump_stack_lvl+0x16c/0x1f0
[  629.672509][T13980]  should_fail_ex+0x512/0x640
[  629.672539][T13980]  _copy_from_user+0x2e/0xd0
[  629.672568][T13980]  copy_msghdr_from_user+0x98/0x160
[  629.672587][T13980]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  629.672609][T13980]  ? __pfx__kstrtoull+0x10/0x10
[  629.672635][T13980]  ___sys_sendmsg+0xfe/0x1d0
[  629.672655][T13980]  ? __pfx____sys_sendmsg+0x10/0x10
[  629.672685][T13980]  ? find_held_lock+0x2b/0x80
[  629.672725][T13980]  __sys_sendmmsg+0x200/0x420
[  629.672746][T13980]  ? __pfx___sys_sendmmsg+0x10/0x10
[  629.672772][T13980]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  629.672808][T13980]  ? fput+0x9b/0xd0
[  629.672832][T13980]  ? ksys_write+0x1ac/0x250
[  629.672851][T13980]  ? __pfx_ksys_write+0x10/0x10
[  629.672874][T13980]  __x64_sys_sendmmsg+0x9c/0x100
[  629.672892][T13980]  ? lockdep_hardirqs_on+0x7c/0x110
[  629.672916][T13980]  do_syscall_64+0xcd/0xfa0
[  629.672942][T13980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.672961][T13980] RIP: 0033:0x7fe306b8f749
[  629.672975][T13980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  629.672991][T13980] RSP: 002b:00007fe307a3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  629.673008][T13980] RAX: ffffffffffffffda RBX: 00007fe306de5fa0 RCX: 00007fe306b8f749
[  629.673019][T13980] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005
[  629.673030][T13980] RBP: 00007fe307a3c090 R08: 0000000000000000 R09: 0000000000000000
[  629.673040][T13980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  629.673050][T13980] R13: 00007fe306de6038 R14: 00007fe306de5fa0 R15: 00007ffd99a4da48
[  629.673076][T13980]  </TASK>
[  629.675145][    T9] usb 1-1: Using ep0 maxpacket: 8
[  629.947857][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  629.960086][    T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  629.969300][    T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  629.980247][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.994213][    T9] usb 1-1: config 0 descriptor??
[  630.149293][  T975] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  630.332493][  T975] usb 3-1: config 5 has an invalid interface number: 98 but max is 1
[  630.362630][  T975] usb 3-1: config 5 has an invalid interface number: 40 but max is 1
[  630.395095][  T975] usb 3-1: config 5 has no interface number 0
[  630.401396][  T975] usb 3-1: config 5 has no interface number 1
[  630.454855][  T975] usb 3-1: config 5 interface 98 altsetting 7 bulk endpoint 0x8 has invalid maxpacket 64
[  630.465047][  T975] usb 3-1: config 5 interface 98 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  630.477507][  T975] usb 3-1: config 5 interface 98 altsetting 7 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  630.532829][  T975] usb 3-1: config 5 interface 98 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  630.601738][  T975] usb 3-1: config 5 interface 98 altsetting 7 endpoint 0x5 has invalid maxpacket 991, setting to 64
[  630.669387][  T975] usb 3-1: config 5 interface 98 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  630.702827][  T975] usb 3-1: config 5 interface 40 altsetting 143 has an invalid descriptor for endpoint zero, skipping
[  630.726380][  T975] usb 3-1: config 5 interface 40 altsetting 143 has a duplicate endpoint with address 0x5, skipping
[  630.738390][  T975] usb 3-1: config 5 interface 40 altsetting 143 has a duplicate endpoint with address 0xD, skipping
[  630.782043][  T975] usb 3-1: config 5 interface 40 altsetting 143 has a duplicate endpoint with address 0xD, skipping
[  630.793857][  T975] usb 3-1: config 5 interface 40 altsetting 143 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  630.805197][  T975] usb 3-1: config 5 interface 40 altsetting 143 has a duplicate endpoint with address 0x7, skipping
[  630.824894][ T5874] usb 1-1: USB disconnect, device number 24
[  630.848053][  T975] usb 3-1: config 5 interface 40 altsetting 143 has an invalid descriptor for endpoint zero, skipping
[  630.861007][   T30] audit: type=1400 audit(1764674395.923:700): avc:  denied  { write } for  pid=14003 comm="syz.4.2249" name="file0" dev="tmpfs" ino=2356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  630.884010][  T975] usb 3-1: config 5 interface 40 altsetting 143 has a duplicate endpoint with address 0xD, skipping
[  630.893057][   T30] audit: type=1400 audit(1764674395.923:701): avc:  denied  { open } for  pid=14003 comm="syz.4.2249" path="/453/file0" dev="tmpfs" ino=2356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  630.899314][  T975] usb 3-1: config 5 interface 40 altsetting 143 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  630.932730][  T975] usb 3-1: config 5 interface 98 has no altsetting 0
[  630.939475][  T975] usb 3-1: config 5 interface 40 has no altsetting 0
[  630.949514][  T975] usb 3-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=ef.33
[  630.951665][   T30] audit: type=1400 audit(1764674395.923:702): avc:  denied  { ioctl } for  pid=14003 comm="syz.4.2249" path="/453/file0" dev="tmpfs" ino=2356 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  630.958856][  T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.994241][  T975] usb 3-1: Product: ]냧髇ㅐ쵕쯠ꑺ詥㌙㖋쾈凁臿꒜예ꂤ靤퇃楆놇勤鹒஝苵砡닢C뻊◪迵垈䬟펄꯱绲方鵘つ痠❰㐋띙퇓䪥소빣⒫퀳긌ֲ懠馈纶醍≛辢㻁᳥슿羡퉡鵍老槭拀㎆瞗鐱䟯떷祘ᘒὭ稄橭擺肋ꬺ⌺
[  631.128018][  T975] usb 3-1: Manufacturer: Ь
[  631.146253][  T975] usb 3-1: SerialNumber: ⠁
[  632.028783][T13984] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  632.325995][  T975] smsusb:smsusb_probe: board id=2, interface number 98
[  632.356962][  T975] smsusb:smsusb_probe: board id=2, interface number 40
[  632.446511][  T975] usb 3-1: USB disconnect, device number 27
[  632.706014][T14029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14029 comm=syz.1.2253
[  632.721053][   T30] audit: type=1400 audit(1764674397.653:703): avc:  denied  { name_bind } for  pid=14033 comm="syz.3.2257" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  632.745159][T14029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=14029 comm=syz.1.2253
[  632.762502][T14029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53974 sclass=netlink_route_socket pid=14029 comm=syz.1.2253
[  633.615682][T14049] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c)
[  633.860144][  T975] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  633.995092][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  634.004461][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  634.072655][  T975] usb 2-1: device descriptor read/64, error -71
[  634.127556][T14056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2262'.
[  634.139286][T14056] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  634.436786][  T975] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  634.672213][  T975] usb 2-1: device descriptor read/64, error -71
[  634.678560][ T5870] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  634.899007][  T975] usb usb2-port1: attempt power cycle
[  634.925334][ T5870] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da
[  634.934973][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.961643][ T5870] usb 3-1: config 0 descriptor??
[  634.974323][ T5870] pwc: Philips SPC 900NC USB webcam detected.
[  635.291492][  T975] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  635.324004][  T975] usb 2-1: device descriptor read/8, error -71
[  635.818239][ T5870] pwc: recv_control_msg error -32 req 02 val 2b00
[  635.864010][  T975] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  635.938503][ T5870] pwc: recv_control_msg error -71 req 02 val 2700
[  635.945158][  T975] usb 2-1: device descriptor read/8, error -71
[  635.964776][ T5870] pwc: recv_control_msg error -71 req 04 val 1600
[  635.971585][ T5870] pwc: recv_control_msg error -71 req 02 val 2c00
[  635.997117][ T5870] pwc: recv_control_msg error -71 req 04 val 1000
[  636.017484][ T5870] pwc: recv_control_msg error -71 req 04 val 1300
[  636.041453][ T5870] pwc: recv_control_msg error -71 req 04 val 1400
[  636.058928][ T5870] pwc: recv_control_msg error -71 req 02 val 2000
[  636.071945][ T5870] pwc: recv_control_msg error -71 req 02 val 2100
[  636.083636][  T975] usb usb2-port1: unable to enumerate USB device
[  636.134900][ T5870] pwc: recv_control_msg error -71 req 06 val 0600
[  636.144488][ T5870] pwc: recv_control_msg error -71 req 04 val 1500
[  636.151576][ T5870] pwc: recv_control_msg error -71 req 02 val 2500
[  636.160250][ T5870] pwc: recv_control_msg error -71 req 02 val 2400
[  636.174275][ T5870] pwc: recv_control_msg error -71 req 02 val 2600
[  636.184807][ T5870] pwc: recv_control_msg error -71 req 02 val 2900
[  636.192511][ T5870] pwc: recv_control_msg error -71 req 02 val 2800
[  636.221213][ T5870] pwc: recv_control_msg error -71 req 04 val 1100
[  636.341675][ T5870] pwc: recv_control_msg error -71 req 04 val 1200
[  636.476537][ T5870] pwc: Registered as video103.
[  636.592540][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19
[  636.670754][T14089] overlayfs: missing 'lowerdir'
[  636.693952][ T5870] usb 3-1: USB disconnect, device number 28
[  637.807308][    T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  637.997204][    T9] usb 1-1: device descriptor read/64, error -71
[  638.049851][ T5870] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  639.207489][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  639.399443][    T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  639.579367][    T9] usb 1-1: device descriptor read/64, error -71
[  639.585949][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  639.608022][ T5870] usb 3-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  639.963349][    T9] usb usb1-port1: attempt power cycle
[  640.080728][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.111517][ T5870] usb 3-1: config 0 descriptor??
[  640.140801][ T5870] usb 3-1: can't set config #0, error -71
[  640.155708][ T5870] usb 3-1: USB disconnect, device number 29
[  640.992775][   T30] audit: type=1400 audit(1764674405.408:704): avc:  denied  { read } for  pid=14130 comm="syz.0.2283" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  641.105327][   T30] audit: type=1400 audit(1764674405.426:705): avc:  denied  { ioctl } for  pid=14130 comm="syz.0.2283" path="/441/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  641.448193][T14152] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  641.811004][    T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  641.994492][ T5870] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  642.005001][    T9] usb 5-1: Using ep0 maxpacket: 32
[  642.011559][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  642.021504][    T9] usb 5-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00
[  642.031619][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.042050][    T9] usb 5-1: config 0 descriptor??
[  642.052091][    T9] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -12
[  642.177601][ T5870] usb 3-1: config 0 has no interfaces?
[  642.184175][ T5870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  642.196060][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  642.204577][ T5870] usb 3-1: SerialNumber: syz
[  642.216444][ T5870] usb 3-1: config 0 descriptor??
[  642.221791][ T5950] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  642.272025][    T9] usb 5-1: USB disconnect, device number 32
[  642.368555][ T5950] usb 4-1: device descriptor read/64, error -71
[  642.632648][T14174] overlayfs: missing 'workdir'
[  643.090522][T14155] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2290'.
[  643.198229][ T5950] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  643.566407][ T5950] usb 4-1: device descriptor read/64, error -71
[  643.804717][ T5950] usb usb4-port1: attempt power cycle
[  644.388056][T14186] overlayfs: overlapping lowerdir path
[  644.463772][ T5950] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  644.497768][ T5950] usb 4-1: device descriptor read/8, error -71
[  644.545924][    T9] libceph: connect (1)[c::]:6789 error -101
[  644.635588][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  644.698531][T14190] ceph: No mds server is up or the cluster is laggy
[  644.741719][    T9] usb 3-1: USB disconnect, device number 30
[  644.752779][ T5950] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  644.831260][ T5950] usb 4-1: device descriptor read/8, error -71
[  644.988710][ T5950] usb usb4-port1: unable to enumerate USB device
[  645.427078][ T5824] IPVS: starting estimator thread 0...
[  645.436648][ T5950] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  645.682703][T14206] IPVS: using max 42 ests per chain, 100800 per kthread
[  646.860485][ T5950] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83
[  647.066600][ T5950] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 64602, setting to 64
[  647.079236][ T5950] usb 3-1: config 0 interface 0 has no altsetting 0
[  647.611899][T14221] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  647.623216][T14221] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  648.057446][ T5950] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  648.325823][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  648.483072][ T5950] usb 3-1: Product: syz
[  649.081296][ T5950] usb 3-1: Manufacturer: syz
[  649.091994][ T5950] usb 3-1: SerialNumber: syz
[  649.124201][ T5950] usb 3-1: config 0 descriptor??
[  649.134320][ T5950] usb 3-1: can't set config #0, error -71
[  649.165252][ T5950] usb 3-1: USB disconnect, device number 31
[  649.355676][T14239] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c)
[  649.370801][    T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  649.390674][T14241] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c)
[  649.706243][    T9] usb 2-1: Using ep0 maxpacket: 32
[  649.719153][    T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  650.375819][    T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  650.384467][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  650.394580][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  650.404615][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  650.432171][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024
[  650.497355][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  650.533036][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  650.547160][    T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  650.556205][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.575006][    T9] usb 2-1: config 0 descriptor??
[  650.593033][T14236] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  650.986779][T14236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  650.999133][    T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  651.003793][T14236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  651.356542][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2310'.
[  651.408336][T14270] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2317'.
[  651.487755][    C1] usblp0: nonzero read bulk status received: -71
[  651.498473][   T30] audit: type=1400 audit(1764674415.220:706): avc:  denied  { read write } for  pid=14234 comm="syz.1.2310" name="lp0" dev="devtmpfs" ino=3371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  651.522124][    C1] vkms_vblank_simulate: vblank timer overrun
[  651.538580][T14236] usblp0: error -71 reading from printer
[  651.560616][    C1] usblp0: nonzero read bulk status received: -71
[  651.886893][   T30] audit: type=1400 audit(1764674415.220:707): avc:  denied  { open } for  pid=14234 comm="syz.1.2310" path="/dev/usb/lp0" dev="devtmpfs" ino=3371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  651.910816][    C1] vkms_vblank_simulate: vblank timer overrun
[  652.048691][T14281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2319'.
[  652.564703][T14286] 9pnet: Found fid 0 not clunked
[  652.936772][T14291] nftables ruleset with unbound set
[  653.230218][    T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  653.405966][    T9] usb 3-1: config 2 interface 0 has no altsetting 0
[  653.436008][    T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  653.457632][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.483803][    T9] usb 3-1: Product: syz
[  653.500954][    T9] usb 3-1: Manufacturer: syz
[  653.516677][    T9] usb 3-1: SerialNumber: syz
[  654.088008][T14305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  654.254212][  T975] usb 2-1: USB disconnect, device number 44
[  654.315080][  T975] usblp0: removed
[  654.566619][ T5870] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  654.572604][T14322] lo speed is unknown, defaulting to 1000
[  654.592371][   T30] audit: type=1400 audit(1764674418.129:708): avc:  denied  { read } for  pid=14325 comm="syz.0.2329" path="socket:[47726]" dev="sockfs" ino=47726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  654.662718][   T30] audit: type=1400 audit(1764674418.148:709): avc:  denied  { connect } for  pid=14290 comm="syz.2.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  654.684150][   T30] audit: type=1400 audit(1764674418.148:710): avc:  denied  { write } for  pid=14290 comm="syz.2.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  654.737436][ T5870] usb 4-1: Using ep0 maxpacket: 16
[  654.753142][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0
[  654.762218][ T5870] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  654.777072][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.815609][ T5870] usb 4-1: config 0 descriptor??
[  655.096917][ T5870] hid (null): unknown global tag 0xd
[  655.108381][ T5870] hid (null): unknown global tag 0xc
[  655.125775][ T5870] hid (null): unknown global tag 0xc
[  655.365091][ T5824] usb 4-1: USB disconnect, device number 30
[  655.436769][ T5945] libceph: connect (1)[c::]:6789 error -101
[  655.459310][ T5945] libceph: mon0 (1)[c::]:6789 connect error
[  656.070882][   T30] audit: type=1400 audit(1764674419.504:711): avc:  denied  { mounton } for  pid=14346 comm="syz.1.2333" path="mnt:[4026533358]" dev="nsfs" ino=4026533358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  656.130688][T14338] ceph: No mds server is up or the cluster is laggy
[  656.138700][ T5824] libceph: connect (1)[c::]:6789 error -101
[  656.226580][    T9] ims_pcu 3-1:2.0: Zero length descriptor
[  656.246534][ T5824] libceph: mon0 (1)[c::]:6789 connect error
[  656.253555][    T9] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22
[  656.334700][    T9] usb 3-1: USB disconnect, device number 32
[  656.509762][   T30] audit: type=1326 audit(1764674419.916:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.2.2334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9565d8f749 code=0x0
[  658.195968][T14364] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  658.535279][T14371] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  658.544626][T14371] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  659.821047][T14388] ceph: No mds server is up or the cluster is laggy
[  659.972738][   T30] audit: type=1400 audit(1764674423.143:713): avc:  denied  { watch } for  pid=14408 comm="syz.1.2352" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  662.989659][   T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  664.011407][T14446] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  664.067727][T14450] geneve2: entered promiscuous mode
[  664.830291][T14467] FAULT_INJECTION: forcing a failure.
[  664.830291][T14467] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  664.932541][T14467] CPU: 0 UID: 0 PID: 14467 Comm: syz.4.2370 Not tainted syzkaller #0 PREEMPT(full) 
[  664.932560][T14467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  664.932566][T14467] Call Trace:
[  664.932570][T14467]  <TASK>
[  664.932575][T14467]  dump_stack_lvl+0x16c/0x1f0
[  664.932604][T14467]  should_fail_ex+0x512/0x640
[  664.932636][T14467]  _copy_to_user+0x32/0xd0
[  664.932656][T14467]  simple_read_from_buffer+0xcb/0x170
[  664.932679][T14467]  proc_fail_nth_read+0x197/0x240
[  664.932706][T14467]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  664.932733][T14467]  ? rw_verify_area+0xcf/0x6c0
[  664.932750][T14467]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  664.932775][T14467]  vfs_read+0x1e4/0xcf0
[  664.932796][T14467]  ? __pfx___mutex_lock+0x10/0x10
[  664.932822][T14467]  ? __pfx_vfs_read+0x10/0x10
[  664.932849][T14467]  ? __fget_files+0x20e/0x3c0
[  664.932878][T14467]  ksys_read+0x12a/0x250
[  664.932897][T14467]  ? __pfx_ksys_read+0x10/0x10
[  664.932924][T14467]  do_syscall_64+0xcd/0xfa0
[  664.932950][T14467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.932969][T14467] RIP: 0033:0x7fe306b8e15c
[  664.932983][T14467] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  664.933000][T14467] RSP: 002b:00007fe307a3c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  664.933018][T14467] RAX: ffffffffffffffda RBX: 00007fe306de5fa0 RCX: 00007fe306b8e15c
[  664.933029][T14467] RDX: 000000000000000f RSI: 00007fe307a3c0a0 RDI: 0000000000000003
[  664.933040][T14467] RBP: 00007fe307a3c090 R08: 0000000000000000 R09: 0000000000000000
[  664.933051][T14467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  664.933067][T14467] R13: 00007fe306de6038 R14: 00007fe306de5fa0 R15: 00007ffd99a4da48
[  664.933094][T14467]  </TASK>
[  665.449179][T14472] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.2373'.
[  665.459045][T14472] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  666.822294][T14491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2378'.
[  666.860995][T14486] fuse: Bad value for 'fd'
[  666.914610][T14491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2378'.
[  666.923975][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2378'.
[  667.274163][T14500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  667.329171][T14503] 9pnet_fd: Insufficient options for proto=fd
[  667.877784][   T30] audit: type=1400 audit(1764674430.542:714): avc:  denied  { mounton } for  pid=14511 comm="syz.0.2384" path="/463/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  668.770519][T14523] input: syz0 as /devices/virtual/input/input21
[  668.870499][T14525] FAULT_INJECTION: forcing a failure.
[  668.870499][T14525] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  668.913749][T14525] CPU: 0 UID: 0 PID: 14525 Comm: syz.4.2385 Not tainted syzkaller #0 PREEMPT(full) 
[  668.913776][T14525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  668.913786][T14525] Call Trace:
[  668.913792][T14525]  <TASK>
[  668.913808][T14525]  dump_stack_lvl+0x16c/0x1f0
[  668.913837][T14525]  should_fail_ex+0x512/0x640
[  668.913868][T14525]  _copy_from_iter+0x29f/0x1720
[  668.913902][T14525]  ? __pfx__copy_from_iter+0x10/0x10
[  668.913927][T14525]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  668.913961][T14525]  copy_page_from_iter+0xde/0x180
[  668.913992][T14525]  tun_build_skb.constprop.0+0x2e8/0x1510
[  668.914021][T14525]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  668.914039][T14525]  ? unwind_get_return_address+0x59/0xa0
[  668.914059][T14525]  ? arch_stack_walk+0xa6/0x100
[  668.914095][T14525]  ? _kstrtoull+0x145/0x200
[  668.914120][T14525]  tun_get_user+0x149c/0x3cc0
[  668.914152][T14525]  ? __pfx_tun_get_user+0x10/0x10
[  668.914172][T14525]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  668.914199][T14525]  ? find_held_lock+0x2b/0x80
[  668.914224][T14525]  ? tun_get+0x191/0x370
[  668.914246][T14525]  tun_chr_write_iter+0xdc/0x210
[  668.914267][T14525]  vfs_write+0x7d3/0x11d0
[  668.914289][T14525]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  668.914311][T14525]  ? __pfx_vfs_write+0x10/0x10
[  668.914328][T14525]  ? find_held_lock+0x2b/0x80
[  668.914367][T14525]  ksys_write+0x12a/0x250
[  668.914386][T14525]  ? __pfx_ksys_write+0x10/0x10
[  668.914412][T14525]  do_syscall_64+0xcd/0xfa0
[  668.914440][T14525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.914458][T14525] RIP: 0033:0x7fe306b8e1ff
[  668.914472][T14525] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  668.914488][T14525] RSP: 002b:00007fe307a3c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  668.914506][T14525] RAX: ffffffffffffffda RBX: 00007fe306de5fa0 RCX: 00007fe306b8e1ff
[  668.914517][T14525] RDX: 0000000000000036 RSI: 0000200000000000 RDI: 00000000000000c8
[  668.914528][T14525] RBP: 00007fe307a3c090 R08: 0000000000000000 R09: 0000000000000000
[  668.914539][T14525] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001
[  668.914550][T14525] R13: 00007fe306de6038 R14: 00007fe306de5fa0 R15: 00007ffd99a4da48
[  668.914576][T14525]  </TASK>
[  669.156163][   T30] audit: type=1400 audit(1764674431.748:715): avc:  denied  { unmount } for  pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  670.655010][T14549] openvswitch: netlink: Missing key (keys=40, expected=80)
[  670.665659][   T30] audit: type=1400 audit(1764674432.908:716): avc:  denied  { shutdown } for  pid=14539 comm="syz.4.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  670.714189][T14551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2394'.
[  670.723359][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2394'.
[  670.736237][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2394'.
[  671.037694][T14565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2399'.
[  671.480232][T14579] FAULT_INJECTION: forcing a failure.
[  671.480232][T14579] name failslab, interval 1, probability 0, space 0, times 0
[  671.493373][T14579] CPU: 1 UID: 0 PID: 14579 Comm: syz.2.2401 Not tainted syzkaller #0 PREEMPT(full) 
[  671.493396][T14579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  671.493405][T14579] Call Trace:
[  671.493411][T14579]  <TASK>
[  671.493417][T14579]  dump_stack_lvl+0x16c/0x1f0
[  671.493445][T14579]  should_fail_ex+0x512/0x640
[  671.493471][T14579]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[  671.493493][T14579]  should_failslab+0xc2/0x120
[  671.493514][T14579]  kmem_cache_alloc_node_noprof+0x78/0x770
[  671.493531][T14579]  ? __alloc_skb+0x2b2/0x380
[  671.493550][T14579]  ? __alloc_skb+0x2b2/0x380
[  671.493562][T14579]  ? __pfx_netlink_insert+0x10/0x10
[  671.493579][T14579]  __alloc_skb+0x2b2/0x380
[  671.493594][T14579]  ? __pfx___alloc_skb+0x10/0x10
[  671.493610][T14579]  ? netlink_autobind.isra.0+0x158/0x370
[  671.493636][T14579]  netlink_alloc_large_skb+0x69/0x140
[  671.493659][T14579]  netlink_sendmsg+0x698/0xdd0
[  671.493683][T14579]  ? __pfx_netlink_sendmsg+0x10/0x10
[  671.493713][T14579]  ____sys_sendmsg+0xa98/0xc70
[  671.493738][T14579]  ? copy_msghdr_from_user+0x10a/0x160
[  671.493756][T14579]  ? __pfx_____sys_sendmsg+0x10/0x10
[  671.493788][T14579]  ___sys_sendmsg+0x134/0x1d0
[  671.493808][T14579]  ? __pfx____sys_sendmsg+0x10/0x10
[  671.493823][T14579]  ? __lock_acquire+0x622/0x1c90
[  671.493871][T14579]  __sys_sendmsg+0x16d/0x220
[  671.493888][T14579]  ? __pfx___sys_sendmsg+0x10/0x10
[  671.493909][T14579]  do_syscall_64+0xcd/0xfa0
[  671.493926][T14579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.493938][T14579] RIP: 0033:0x7f9565d8f749
[  671.493947][T14579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  671.493958][T14579] RSP: 002b:00007f9566c5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  671.493969][T14579] RAX: ffffffffffffffda RBX: 00007f9565fe5fa0 RCX: 00007f9565d8f749
[  671.493975][T14579] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000003
[  671.493985][T14579] RBP: 00007f9566c5b090 R08: 0000000000000000 R09: 0000000000000000
[  671.493994][T14579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  671.494003][T14579] R13: 00007f9565fe6038 R14: 00007f9565fe5fa0 R15: 00007ffd85e636c8
[  671.494027][T14579]  </TASK>
[  671.912051][T14583] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  671.919250][T14583] overlayfs: failed to set xattr on upper
[  671.924960][T14583] overlayfs: ...falling back to redirect_dir=nofollow.
[  671.931944][T14583] overlayfs: ...falling back to index=off.
[  671.938148][T14583] overlayfs: ...falling back to uuid=null.
[  672.167610][T14598] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2407'.
[  672.255985][T14600] ip6gre1: entered promiscuous mode
[  672.261722][T14600] ip6gre1: entered allmulticast mode
[  672.349115][T14604] FAULT_INJECTION: forcing a failure.
[  672.349115][T14604] name failslab, interval 1, probability 0, space 0, times 0
[  672.391741][T14604] CPU: 0 UID: 0 PID: 14604 Comm: syz.4.2408 Not tainted syzkaller #0 PREEMPT(full) 
[  672.391768][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  672.391779][T14604] Call Trace:
[  672.391786][T14604]  <TASK>
[  672.391793][T14604]  dump_stack_lvl+0x16c/0x1f0
[  672.391830][T14604]  should_fail_ex+0x512/0x640
[  672.391857][T14604]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[  672.391880][T14604]  should_failslab+0xc2/0x120
[  672.391903][T14604]  kmem_cache_alloc_node_noprof+0x78/0x770
[  672.391922][T14604]  ? __alloc_skb+0x2b2/0x380
[  672.391944][T14604]  ? __alloc_skb+0x2b2/0x380
[  672.391958][T14604]  ? __pfx_netlink_insert+0x10/0x10
[  672.391977][T14604]  __alloc_skb+0x2b2/0x380
[  672.391994][T14604]  ? __pfx___alloc_skb+0x10/0x10
[  672.392010][T14604]  ? netlink_autobind.isra.0+0x158/0x370
[  672.392039][T14604]  netlink_alloc_large_skb+0x69/0x140
[  672.392062][T14604]  netlink_sendmsg+0x698/0xdd0
[  672.392088][T14604]  ? __pfx_netlink_sendmsg+0x10/0x10
[  672.392120][T14604]  ____sys_sendmsg+0xa98/0xc70
[  672.392144][T14604]  ? copy_msghdr_from_user+0x10a/0x160
[  672.392163][T14604]  ? __pfx_____sys_sendmsg+0x10/0x10
[  672.392197][T14604]  ___sys_sendmsg+0x134/0x1d0
[  672.392217][T14604]  ? __pfx____sys_sendmsg+0x10/0x10
[  672.392233][T14604]  ? __lock_acquire+0x622/0x1c90
[  672.392282][T14604]  __sys_sendmsg+0x16d/0x220
[  672.392301][T14604]  ? __pfx___sys_sendmsg+0x10/0x10
[  672.392336][T14604]  do_syscall_64+0xcd/0xfa0
[  672.392363][T14604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.392381][T14604] RIP: 0033:0x7fe306b8f749
[  672.392397][T14604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  672.392414][T14604] RSP: 002b:00007fe307a3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  672.392432][T14604] RAX: ffffffffffffffda RBX: 00007fe306de5fa0 RCX: 00007fe306b8f749
[  672.392443][T14604] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003
[  672.392453][T14604] RBP: 00007fe307a3c090 R08: 0000000000000000 R09: 0000000000000000
[  672.392464][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  672.392474][T14604] R13: 00007fe306de6038 R14: 00007fe306de5fa0 R15: 00007ffd99a4da48
[  672.392499][T14604]  </TASK>
[  672.569435][ T5950] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  673.093562][ T5950] usb 3-1: device descriptor read/64, error -71
[  674.311957][ T5950] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  674.618909][T14616] FAULT_INJECTION: forcing a failure.
[  674.618909][T14616] name failslab, interval 1, probability 0, space 0, times 0
[  674.643400][T14616] CPU: 1 UID: 0 PID: 14616 Comm: syz.3.2413 Not tainted syzkaller #0 PREEMPT(full) 
[  674.643427][T14616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  674.643437][T14616] Call Trace:
[  674.643443][T14616]  <TASK>
[  674.643450][T14616]  dump_stack_lvl+0x16c/0x1f0
[  674.643480][T14616]  should_fail_ex+0x512/0x640
[  674.643505][T14616]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[  674.643528][T14616]  should_failslab+0xc2/0x120
[  674.643551][T14616]  kmem_cache_alloc_node_noprof+0x78/0x770
[  674.643569][T14616]  ? __alloc_skb+0x2b2/0x380
[  674.643591][T14616]  ? __alloc_skb+0x2b2/0x380
[  674.643606][T14616]  __alloc_skb+0x2b2/0x380
[  674.643623][T14616]  ? __pfx___alloc_skb+0x10/0x10
[  674.643637][T14616]  ? __lock_acquire+0xb8a/0x1c90
[  674.643654][T14616]  ? selinux_socket_getpeersec_dgram+0x1a4/0x370
[  674.643678][T14616]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  674.643709][T14616]  netlink_alloc_large_skb+0x69/0x140
[  674.643734][T14616]  netlink_sendmsg+0x698/0xdd0
[  674.643766][T14616]  ? __pfx_netlink_sendmsg+0x10/0x10
[  674.643798][T14616]  __sys_sendto+0x4a3/0x520
[  674.643826][T14616]  ? __pfx___sys_sendto+0x10/0x10
[  674.643873][T14616]  ? ksys_write+0x1ac/0x250
[  674.643891][T14616]  ? __pfx_ksys_write+0x10/0x10
[  674.643912][T14616]  __x64_sys_sendto+0xe0/0x1c0
[  674.643936][T14616]  ? do_syscall_64+0x91/0xfa0
[  674.643959][T14616]  ? lockdep_hardirqs_on+0x7c/0x110
[  674.643982][T14616]  do_syscall_64+0xcd/0xfa0
[  674.644006][T14616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.644024][T14616] RIP: 0033:0x7f5dc6d915dc
[  674.644038][T14616] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  674.644053][T14616] RSP: 002b:00007f5dc7bdbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  674.644070][T14616] RAX: ffffffffffffffda RBX: 00007f5dc7bdbfc0 RCX: 00007f5dc6d915dc
[  674.644080][T14616] RDX: 0000000000000020 RSI: 00007f5dc7bdc010 RDI: 0000000000000003
[  674.644089][T14616] RBP: 0000000000000000 R08: 00007f5dc7bdbf14 R09: 000000000000000c
[  674.644099][T14616] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  674.644108][T14616] R13: 00007f5dc7bdbf68 R14: 00007f5dc7bdc010 R15: 0000000000000000
[  674.644132][T14616]  </TASK>
[  674.887107][ T5950] usb 3-1: device descriptor read/64, error -71
[  675.008126][ T5950] usb usb3-port1: attempt power cycle
[  675.063777][T14624] netlink: 'syz.3.2416': attribute type 8 has an invalid length.
[  675.088757][T14625] FAULT_INJECTION: forcing a failure.
[  675.088757][T14625] name failslab, interval 1, probability 0, space 0, times 0
[  675.101955][T14625] CPU: 0 UID: 0 PID: 14625 Comm: syz.4.2417 Not tainted syzkaller #0 PREEMPT(full) 
[  675.101986][T14625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  675.101997][T14625] Call Trace:
[  675.102003][T14625]  <TASK>
[  675.102010][T14625]  dump_stack_lvl+0x16c/0x1f0
[  675.102040][T14625]  should_fail_ex+0x512/0x640
[  675.102066][T14625]  ? kmem_cache_alloc_lru_noprof+0x66/0x6e0
[  675.102089][T14625]  should_failslab+0xc2/0x120
[  675.102113][T14625]  kmem_cache_alloc_lru_noprof+0x79/0x6e0
[  675.102130][T14625]  ? selinux_socket_create+0xf1/0x540
[  675.102156][T14625]  ? sock_alloc_inode+0x25/0x1c0
[  675.102183][T14625]  ? __pfx_sock_alloc_inode+0x10/0x10
[  675.102203][T14625]  ? sock_alloc_inode+0x25/0x1c0
[  675.102221][T14625]  sock_alloc_inode+0x25/0x1c0
[  675.102241][T14625]  alloc_inode+0x64/0x240
[  675.102269][T14625]  sock_alloc+0x40/0x280
[  675.102289][T14625]  __sock_create+0xc1/0x8d0
[  675.102317][T14625]  __sys_socketpair+0x25c/0x5a0
[  675.102344][T14625]  ? __pfx___sys_socketpair+0x10/0x10
[  675.102367][T14625]  ? fput+0x9b/0xd0
[  675.102393][T14625]  ? __pfx_ksys_write+0x10/0x10
[  675.102416][T14625]  __x64_sys_socketpair+0x96/0x100
[  675.102441][T14625]  ? lockdep_hardirqs_on+0x7c/0x110
[  675.102465][T14625]  do_syscall_64+0xcd/0xfa0
[  675.102490][T14625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  675.102508][T14625] RIP: 0033:0x7fe306b9169a
[  675.102523][T14625] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  675.102540][T14625] RSP: 002b:00007fe307a3bf78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  675.102557][T14625] RAX: ffffffffffffffda RBX: 00007fe306de5f00 RCX: 00007fe306b9169a
[  675.102569][T14625] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  675.102579][T14625] RBP: 00007fe307a3c090 R08: 0000000000000000 R09: 0000000000000000
[  675.102589][T14625] R10: 00007fe307a3bf98 R11: 0000000000000246 R12: 0000000000000004
[  675.102599][T14625] R13: 00007fe306de6038 R14: 00007fe306de5fa0 R15: 00007ffd99a4da48
[  675.102624][T14625]  </TASK>
[  675.102633][T14625] socket: no more sockets
[  675.383326][ T5950] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  675.455897][ T5824] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  675.523341][ T5950] usb 3-1: device descriptor read/8, error -71
[  675.554123][T14629] lo speed is unknown, defaulting to 1000
[  675.656317][T14633] Cannot find set identified by id 65534 to match
[  676.065229][ T5824] usb 4-1: Using ep0 maxpacket: 8
[  676.094318][ T5824] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  676.134531][ T5824] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  676.145153][ T5824] usb 4-1: config 179 has no interface number 0
[  676.151601][ T5824] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  676.165261][ T5824] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  676.233437][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.519578][T14645] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c)
[  676.667972][T14645] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c)
[  676.677110][T14645] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2420'.
[  676.721848][ T5824] usb 4-1: USB disconnect, device number 31
[  677.661056][T14659] FAULT_INJECTION: forcing a failure.
[  677.661056][T14659] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  677.795537][T14659] CPU: 1 UID: 0 PID: 14659 Comm: syz.3.2427 Not tainted syzkaller #0 PREEMPT(full) 
[  677.795567][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  677.795577][T14659] Call Trace:
[  677.795583][T14659]  <TASK>
[  677.795590][T14659]  dump_stack_lvl+0x16c/0x1f0
[  677.795622][T14659]  should_fail_ex+0x512/0x640
[  677.795652][T14659]  _copy_from_user+0x2e/0xd0
[  677.795681][T14659]  move_addr_to_kernel+0x65/0x170
[  677.795707][T14659]  __copy_msghdr+0x386/0x470
[  677.795727][T14659]  copy_msghdr_from_user+0xc1/0x160
[  677.795743][T14659]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  677.795774][T14659]  ___sys_sendmsg+0xfe/0x1d0
[  677.795794][T14659]  ? __pfx____sys_sendmsg+0x10/0x10
[  677.795810][T14659]  ? __lock_acquire+0x622/0x1c90
[  677.795861][T14659]  __sys_sendmsg+0x16d/0x220
[  677.795881][T14659]  ? __pfx___sys_sendmsg+0x10/0x10
[  677.795917][T14659]  do_syscall_64+0xcd/0xfa0
[  677.795944][T14659]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.795962][T14659] RIP: 0033:0x7f5dc6d8f749
[  677.795977][T14659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  677.795999][T14659] RSP: 002b:00007f5dc7bdd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  677.796017][T14659] RAX: ffffffffffffffda RBX: 00007f5dc6fe5fa0 RCX: 00007f5dc6d8f749
[  677.796028][T14659] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  677.796039][T14659] RBP: 00007f5dc7bdd090 R08: 0000000000000000 R09: 0000000000000000
[  677.796050][T14659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  677.796060][T14659] R13: 00007f5dc6fe6038 R14: 00007f5dc6fe5fa0 R15: 00007fffb4d289a8
[  677.796086][T14659]  </TASK>
[  678.223520][T14666] netlink: 'syz.1.2428': attribute type 16 has an invalid length.
[  678.279843][T14666] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2428'.
[  678.427925][ T5824] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  678.696125][ T5824] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  678.704509][ T5824] usb 4-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config
[  678.715160][ T5824] usb 4-1: config 220 has no interface number 2
[  678.722367][ T5824] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  678.741331][ T5824] usb 4-1: config 220 interface 0 has no altsetting 0
[  678.751019][ T5824] usb 4-1: config 220 interface 76 has no altsetting 0
[  678.759118][ T5824] usb 4-1: config 220 interface 1 has no altsetting 0
[  678.769970][ T5824] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  678.780211][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.789717][ T5824] usb 4-1: Product: syz
[  678.795255][ T5824] usb 4-1: Manufacturer: syz
[  678.800489][ T5824] usb 4-1: SerialNumber: syz
[  678.991649][T14679] 9pnet_fd: Insufficient options for proto=fd
[  682.594000][ T5824] usb 4-1: selecting invalid altsetting 0
[  682.882151][ T5824] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  682.988986][ T5824] uvcvideo 4-1:220.0: No valid video chain found.
[  683.095767][ T5824] usb 4-1: selecting invalid altsetting 0
[  683.140087][ T5824] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  683.233485][ T5824] usb 4-1: USB disconnect, device number 32
[  684.454133][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2445'.
[  685.936548][T14734] ubi0: attaching mtd0
[  685.942912][T14734] ubi0: scanning is finished
[  685.969705][T14734] ubi0: empty MTD device detected
[  686.177172][ T5945] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  686.349718][   T30] audit: type=1400 audit(1764674447.819:717): avc:  denied  { lock } for  pid=14735 comm="syz.1.2449" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  686.383965][ T5945] usb 3-1: device descriptor read/64, error -71
[  686.510683][T14734] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  686.518457][T14734] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  686.526271][T14734] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  686.533910][T14734] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  686.541583][T14734] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  686.548836][T14734] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  686.557214][T14734] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 291984473
[  686.567504][T14734] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  686.659256][ T5945] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  686.667083][T14737] ubi0: detaching mtd0
[  686.670306][T14743] ubi0: background thread "ubi_bgt0d" started, PID 14743
[  686.774240][T14737] ubi0: mtd0 is detached
[  686.966887][ T5945] usb 3-1: device descriptor read/64, error -71
[  687.063736][T14753] syzkaller0: entered promiscuous mode
[  687.085375][T14753] syzkaller0: entered allmulticast mode
[  687.107091][ T5945] usb usb3-port1: attempt power cycle
[  687.352195][ T5824] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  687.504944][ T5945] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  687.530020][ T5945] usb 3-1: device descriptor read/8, error -71
[  687.564410][ T5824] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  687.576476][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.593671][ T5824] usb 2-1: Product: syz
[  687.604366][ T5824] usb 2-1: Manufacturer: syz
[  687.615329][ T5824] usb 2-1: SerialNumber: syz
[  687.793526][ T5945] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  688.252574][ T5945] usb 3-1: device not accepting address 40, error -71
[  688.268172][ T5945] usb usb3-port1: unable to enumerate USB device
[  688.329300][ T5824] rtl8150 2-1:1.0: couldn't reset the device
[  688.339406][ T5824] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  688.396612][ T5824] usb 2-1: USB disconnect, device number 45
[  689.821759][T14786] syz_tun: entered allmulticast mode
[  689.855366][T14785] ip6erspan0: entered promiscuous mode
[  689.894474][T14786] syz_tun: left allmulticast mode
[  689.902110][T14793] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2464'.
[  689.990508][T14798] overlayfs: missing 'lowerdir'
[  690.000554][T14798] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2466'.
[  690.315946][ T5824] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  690.488238][ T5824] usb 3-1: device descriptor read/64, error -71
[  691.284528][   T30] audit: type=1400 audit(1764674459.449:718): avc:  denied  { getopt } for  pid=14805 comm="syz.1.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  691.978295][ T5824] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  692.679096][ T5814] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  694.106225][ T5824] usb 3-1: device descriptor read/64, error -71
[  694.272895][ T5824] usb usb3-port1: attempt power cycle
[  694.417233][T14831] syzkaller0: entered promiscuous mode
[  694.442619][T14831] syzkaller0: entered allmulticast mode
[  695.098804][  T975] libceph: connect (1)[c::]:6789 error -101
[  695.105523][  T975] libceph: mon0 (1)[c::]:6789 connect error
[  695.324028][T14843] ceph: No mds server is up or the cluster is laggy
[  695.387297][  T975] libceph: connect (1)[c::]:6789 error -101
[  695.447557][  T975] libceph: mon0 (1)[c::]:6789 connect error
[  696.267112][   T30] audit: type=1400 audit(1764674464.107:719): avc:  denied  { setcheckreqprot } for  pid=14851 comm="syz.1.2479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  697.565880][ T7836] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  697.974318][T14855] lo speed is unknown, defaulting to 1000
[  698.068489][T14862] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  699.610323][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  699.659493][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  700.296233][   T30] audit: type=1400 audit(1764674467.877:720): avc:  denied  { setopt } for  pid=14900 comm="syz.4.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  700.945587][ T5945] libceph: connect (1)[c::]:6789 error -101
[  700.995947][ T5945] libceph: mon0 (1)[c::]:6789 connect error
[  701.275397][ T5945] libceph: connect (1)[c::]:6789 error -101
[  701.281557][ T5945] libceph: mon0 (1)[c::]:6789 connect error
[  701.289290][T14912] syzkaller0: entered promiscuous mode
[  701.294797][T14912] syzkaller0: entered allmulticast mode
[  701.431642][T14906] ceph: No mds server is up or the cluster is laggy
[  701.937207][ T5824] libceph: connect (1)[c::]:6789 error -101
[  701.946915][ T5824] libceph: mon0 (1)[c::]:6789 connect error
[  703.580170][T14930] syz.1.2496: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  703.597852][T14930] CPU: 1 UID: 0 PID: 14930 Comm: syz.1.2496 Not tainted syzkaller #0 PREEMPT(full) 
[  703.597880][T14930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  703.597891][T14930] Call Trace:
[  703.597898][T14930]  <TASK>
[  703.597905][T14930]  dump_stack_lvl+0x16c/0x1f0
[  703.597936][T14930]  warn_alloc+0x248/0x3a0
[  703.597957][T14930]  ? __pfx_warn_alloc+0x10/0x10
[  703.597986][T14930]  ? packet_set_ring+0xb4c/0x17e0
[  703.598005][T14930]  ? __vmalloc_node_noprof+0xad/0xf0
[  703.598037][T14930]  __vmalloc_node_range_noprof+0xfe2/0x1480
[  703.598071][T14930]  ? packet_set_ring+0xb4c/0x17e0
[  703.598097][T14930]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  703.598123][T14930]  ? alloc_pages_mpol+0x25a/0x550
[  703.598150][T14930]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  703.598177][T14930]  ? packet_set_ring+0xb4c/0x17e0
[  703.598195][T14930]  __vmalloc_node_noprof+0xad/0xf0
[  703.598220][T14930]  ? packet_set_ring+0xb4c/0x17e0
[  703.598241][T14930]  packet_set_ring+0xb4c/0x17e0
[  703.598270][T14930]  packet_setsockopt+0x121b/0x33c0
[  703.598293][T14930]  ? sock_has_perm+0x259/0x2f0
[  703.598317][T14930]  ? __pfx_packet_setsockopt+0x10/0x10
[  703.598337][T14930]  ? selinux_netlbl_socket_setsockopt+0x183/0x470
[  703.598367][T14930]  ? rcu_is_watching+0x12/0xc0
[  703.598405][T14930]  ? do_sock_setsockopt+0x6b/0x1d0
[  703.598427][T14930]  ? __pfx_packet_setsockopt+0x10/0x10
[  703.598450][T14930]  do_sock_setsockopt+0xf3/0x1d0
[  703.598476][T14930]  __sys_setsockopt+0x1a0/0x230
[  703.598498][T14930]  __x64_sys_setsockopt+0xbd/0x160
[  703.598514][T14930]  ? do_syscall_64+0x91/0xfa0
[  703.598538][T14930]  ? lockdep_hardirqs_on+0x7c/0x110
[  703.598563][T14930]  do_syscall_64+0xcd/0xfa0
[  703.598590][T14930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.598609][T14930] RIP: 0033:0x7f2a41b8f749
[  703.598624][T14930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  703.598641][T14930] RSP: 002b:00007f2a3fdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  703.598658][T14930] RAX: ffffffffffffffda RBX: 00007f2a41de6180 RCX: 00007f2a41b8f749
[  703.598670][T14930] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005
[  703.598681][T14930] RBP: 00007f2a41c13f91 R08: 000000000000001c R09: 0000000000000000
[  703.598692][T14930] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  703.598703][T14930] R13: 00007f2a41de6218 R14: 00007f2a41de6180 R15: 00007ffd1a028f08
[  703.598730][T14930]  </TASK>
[  703.598736][T14930] Mem-Info:
[  703.853387][T14930] active_anon:21339 inactive_anon:0 isolated_anon:0
[  703.853387][T14930]  active_file:22863 inactive_file:40862 isolated_file:0
[  703.853387][T14930]  unevictable:768 dirty:324 writeback:0
[  703.853387][T14930]  slab_reclaimable:13469 slab_unreclaimable:116379
[  703.853387][T14930]  mapped:37910 shmem:12771 pagetables:1394
[  703.853387][T14930]  sec_pagetables:0 bounce:0
[  703.853387][T14930]  kernel_misc_reclaimable:0
[  703.853387][T14930]  free:1250699 free_pcp:16327 free_cma:0
[  703.898956][    C1] vkms_vblank_simulate: vblank timer overrun
[  703.960067][T14930] Node 0 active_anon:86456kB inactive_anon:0kB active_file:91412kB inactive_file:163244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151628kB dirty:1292kB writeback:0kB shmem:49348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13040kB pagetables:5320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  703.992366][T14930] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  704.022351][    C1] vkms_vblank_simulate: vblank timer overrun
[  704.029198][T14930] Node 0 DMA free:15296kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  704.059001][    C1] vkms_vblank_simulate: vblank timer overrun
[  704.065050][T14930] lowmem_reserve[]: 0 2485 2486 2486 2486
[  704.070815][T14930] Node 0 DMA32 free:1125504kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:86456kB inactive_anon:0kB active_file:91412kB inactive_file:163244kB unevictable:1536kB writepending:1292kB zspages:0kB present:3129332kB managed:2544696kB mlocked:0kB bounce:0kB free_pcp:33884kB local_pcp:17636kB free_cma:0kB
[  704.104185][    C1] vkms_vblank_simulate: vblank timer overrun
[  704.110369][T14930] lowmem_reserve[]: 0 0 1 1 1
[  704.115100][T14930] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  704.144682][    C1] vkms_vblank_simulate: vblank timer overrun
[  704.151982][T14930] lowmem_reserve[]: 0 0 0 0 0
[  704.156729][T14930] Node 1 Normal free:3861996kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:30948kB local_pcp:12388kB free_cma:0kB
[  704.189288][T14930] lowmem_reserve[]: 0 0 0 0 0
[  704.194054][T14930] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB
[  704.207799][T14930] Node 0 DMA32: 860*4kB (UME) 130*8kB (ME) 6*16kB (M) 187*32kB (UM) 341*64kB (UME) 220*128kB (UME) 106*256kB (UME) 51*512kB (UME) 22*1024kB (UME) 11*2048kB (UM) 236*4096kB (UM) = 1125504kB
[  704.226544][T14930] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  704.238679][T14930] Node 1 Normal: 6*4kB (U) 15*8kB (UME) 21*16kB (UE) 54*32kB (UE) 52*64kB (UE) 17*128kB (UE) 14*256kB (UE) 11*512kB (UME) 5*1024kB (UM) 3*2048kB (UE) 936*4096kB (UM) = 3862048kB
[  704.256649][T14930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  704.266236][T14930] Node 0 hugepages_total=5 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB
[  704.275562][T14930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  704.285136][T14930] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  704.294424][T14930] 76442 total pagecache pages
[  704.299279][T14930] 0 pages in swap cache
[  704.303524][T14930] Free swap  = 124996kB
[  704.307943][T14930] Total swap = 124996kB
[  704.312252][T14930] 2097051 pages RAM
[  704.316086][T14930] 0 pages HighMem/MovableOnly
[  704.320775][T14930] 428787 pages reserved
[  704.324925][T14930] 0 pages cma reserved
[  704.902078][   T30] audit: type=1400 audit(1764674472.170:721): avc:  denied  { execute } for  pid=14926 comm="syz.3.2497" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  705.468880][T14942] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c)
[  711.181449][T15003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2514'.
[  711.253730][T14990] bridge0: port 3(gretap0) entered disabled state
[  712.413531][ T5824] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  712.635011][ T5824] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  712.647308][ T5824] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[  712.669878][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.677967][ T5824] usb 5-1: Product: syz
[  712.678192][T15017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  712.682723][ T5824] usb 5-1: Manufacturer: syz
[  713.147856][ T5824] usb 5-1: SerialNumber: syz
[  713.383279][ T5824] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  713.400971][ T5824] command write [95] error -22
[  714.156380][ T5824] usb 5-1: USB disconnect, device number 33
[  715.814841][T15041] fuse: Bad value for 'rootmode'
[  716.190686][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2527'.
[  716.353917][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2525'.
[  716.369573][   T30] audit: type=1400 audit(1764674482.890:722): avc:  denied  { ioctl } for  pid=15040 comm="syz.4.2525" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  717.821887][   T30] audit: type=1400 audit(1764674484.265:723): avc:  denied  { ioctl } for  pid=15063 comm="syz.3.2531" path="socket:[52489]" dev="sockfs" ino=52489 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  718.895386][ T5824] libceph: connect (1)[c::]:6789 error -101
[  718.901954][ T5824] libceph: mon0 (1)[c::]:6789 connect error
[  719.011061][T15073] ceph: No mds server is up or the cluster is laggy
[  719.900202][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2534'.
[  722.028374][T15103] FAULT_INJECTION: forcing a failure.
[  722.028374][T15103] name failslab, interval 1, probability 0, space 0, times 0
[  722.041389][T15103] CPU: 0 UID: 0 PID: 15103 Comm: syz.1.2540 Not tainted syzkaller #0 PREEMPT(full) 
[  722.041406][T15103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  722.041412][T15103] Call Trace:
[  722.041416][T15103]  <TASK>
[  722.041421][T15103]  dump_stack_lvl+0x16c/0x1f0
[  722.041446][T15103]  should_fail_ex+0x512/0x640
[  722.041475][T15103]  should_failslab+0xc2/0x120
[  722.041499][T15103]  __kmalloc_cache_noprof+0x72/0x780
[  722.041519][T15103]  ? nsim_fib_event_nb+0x1c4/0x10d0
[  722.041536][T15103]  ? nsim_fib_event_nb+0x1c4/0x10d0
[  722.041552][T15103]  nsim_fib_event_nb+0x1c4/0x10d0
[  722.041567][T15103]  ? lock_acquire+0x179/0x350
[  722.041580][T15103]  notifier_call_chain+0xbc/0x410
[  722.041590][T15103]  ? __pfx_nsim_fib_event_nb+0x10/0x10
[  722.041605][T15103]  atomic_notifier_call_chain+0x71/0x1c0
[  722.041618][T15103]  call_fib_notifiers+0x33/0x70
[  722.041631][T15103]  fib6_del+0xebe/0x1770
[  722.041656][T15103]  ? __pfx_fib6_del+0x10/0x10
[  722.041673][T15103]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  722.041690][T15103]  ip6_del_rt+0xf5/0x230
[  722.041702][T15103]  ? __pfx_ip6_del_rt+0x10/0x10
[  722.041715][T15103]  ? find_held_lock+0x2b/0x80
[  722.041732][T15103]  cleanup_prefix_route+0x228/0x610
[  722.041748][T15103]  ipv6_del_addr+0x825/0xb70
[  722.041765][T15103]  ? __pfx_ipv6_del_addr+0x10/0x10
[  722.041783][T15103]  ? __local_bh_enable_ip+0xa4/0x120
[  722.041799][T15103]  inet6_addr_del.constprop.0+0x282/0x6b0
[  722.041820][T15103]  addrconf_del_ifaddr+0x11e/0x190
[  722.041830][T15103]  ? __pfx_addrconf_del_ifaddr+0x10/0x10
[  722.041842][T15103]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  722.041856][T15103]  ? kasan_quarantine_put+0x10a/0x240
[  722.041870][T15103]  inet6_ioctl+0x1e5/0x2b0
[  722.041886][T15103]  ? __pfx_inet6_ioctl+0x10/0x10
[  722.041903][T15103]  ? tomoyo_path_number_perm+0x18d/0x580
[  722.041931][T15103]  sock_do_ioctl+0x118/0x280
[  722.041953][T15103]  ? __pfx_sock_do_ioctl+0x10/0x10
[  722.041981][T15103]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  722.042004][T15103]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  722.042024][T15103]  sock_ioctl+0x227/0x6b0
[  722.042039][T15103]  ? __pfx_sock_ioctl+0x10/0x10
[  722.042053][T15103]  ? hook_file_ioctl_common+0x145/0x410
[  722.042068][T15103]  ? selinux_file_ioctl+0x180/0x270
[  722.042083][T15103]  ? selinux_file_ioctl+0xb4/0x270
[  722.042099][T15103]  ? __pfx_sock_ioctl+0x10/0x10
[  722.042115][T15103]  __x64_sys_ioctl+0x18e/0x210
[  722.042126][T15103]  do_syscall_64+0xcd/0xfa0
[  722.042142][T15103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.042153][T15103] RIP: 0033:0x7f2a41b8f749
[  722.042163][T15103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  722.042173][T15103] RSP: 002b:00007f2a42972038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  722.042184][T15103] RAX: ffffffffffffffda RBX: 00007f2a41de5fa0 RCX: 00007f2a41b8f749
[  722.042191][T15103] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000006
[  722.042197][T15103] RBP: 00007f2a42972090 R08: 0000000000000000 R09: 0000000000000000
[  722.042203][T15103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  722.042209][T15103] R13: 00007f2a41de6038 R14: 00007f2a41de5fa0 R15: 00007ffd1a028f08
[  722.042224][T15103]  </TASK>
[  723.357903][    T9] libceph: connect (1)[c::]:6789 error -101
[  723.374715][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  724.059109][    T9] libceph: connect (1)[c::]:6789 error -101
[  724.065262][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  724.353470][T15122] ceph: No mds server is up or the cluster is laggy
[  724.547582][    T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  724.686176][    T9] usb 3-1: device descriptor read/64, error -71
[  724.966098][    T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  725.671873][    T9] usb 3-1: device descriptor read/64, error -71
[  725.792025][T15150] ieee802154 phy0 wpan0: encryption failed: -22
[  725.925967][    T9] usb usb3-port1: attempt power cycle
[  726.257863][ T5824] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  726.289788][    T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  726.463322][ T5824] usb 4-1: config 5 has an invalid interface number: 123 but max is 0
[  726.480214][ T5824] usb 4-1: config 5 has no interface number 0
[  726.508798][ T5824] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  726.625728][ T5824] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  726.650923][ T5824] usb 4-1: config 5 interface 123 has no altsetting 0
[  726.699416][ T5824] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  726.715037][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.726743][ T5824] usb 4-1: Product: syz
[  726.731229][ T5824] usb 4-1: Manufacturer: syz
[  726.782150][ T5824] usb 4-1: SerialNumber: syz
[  726.907783][T15169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  726.922582][T15169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  726.937444][    T9] usb 3-1: device descriptor read/8, error -71
[  727.034874][ T5824] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device.
[  727.071567][ T5824] usb 4-1: USB disconnect, device number 33
[  727.085971][   T30] audit: type=1400 audit(1764674492.917:724): avc:  denied  { append } for  pid=15167 comm="syz.4.2557" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  727.134748][ T5945] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  727.333722][ T5945] usb 5-1: config 0 has too many interfaces: 33, using maximum allowed: 32
[  727.346694][ T5945] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 33
[  727.387493][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  727.468239][ T5945] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  727.490232][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.523463][ T5945] usb 5-1: config 0 descriptor??
[  727.770317][ T5945] usbhid 5-1:0.0: can't add hid device: -71
[  728.331422][ T5945] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  728.359090][T15183] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2562'.
[  728.374389][  T975] usb 2-1: new full-speed USB device number 46 using dummy_hcd
[  728.374756][ T5945] usb 5-1: USB disconnect, device number 34
[  728.536634][  T975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  728.553712][  T975] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  728.566785][  T975] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  728.586012][  T975] usb 2-1: Product: syz
[  728.596188][  T975] usb 2-1: Manufacturer: syz
[  728.683768][  T975] usb 2-1: SerialNumber: syz
[  729.258851][  T975] usb 2-1: config 0 descriptor??
[  729.309022][  T975] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[  729.955478][T13609] udevd[13609]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  730.726705][   T30] audit: type=1400 audit(1764674496.332:725): avc:  denied  { firmware_load } for  pid=15174 comm="syz.1.2560" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  730.751563][    C1] vkms_vblank_simulate: vblank timer overrun
[  731.641604][   T30] audit: type=1400 audit(1764674497.192:726): avc:  denied  { getopt } for  pid=15211 comm="syz.4.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  731.764170][   T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  732.016939][   T30] audit: type=1400 audit(1764674497.548:727): avc:  denied  { connect } for  pid=15218 comm="syz.4.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  732.447167][  T975] usb 2-1: USB disconnect, device number 46
[  734.564924][  T975] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  734.867462][  T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  735.056159][  T975] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  735.120601][  T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.174571][  T975] usb 2-1: config 0 descriptor??
[  736.467924][ T5884] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  736.469813][  T975] usbhid 2-1:0.0: can't add hid device: -71
[  736.486760][  T975] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  736.616820][ T5884] usb 1-1: device descriptor read/64, error -71
[  736.790034][  T975] usb 2-1: USB disconnect, device number 47
[  737.172806][ T5884] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  737.798984][ T5884] usb 1-1: device descriptor read/64, error -71
[  737.954197][ T5884] usb usb1-port1: attempt power cycle
[  738.411146][ T5884] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  739.106993][ T5884] usb 1-1: device descriptor read/8, error -71
[  739.120435][T15284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2589'.
[  739.417850][ T5945] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  739.666166][ T5945] usb 5-1: config 7 has an invalid interface number: 42 but max is 3
[  739.759742][ T5945] usb 5-1: config 7 has an invalid interface number: 34 but max is 3
[  739.772098][T15292] lo speed is unknown, defaulting to 1000
[  739.845392][ T5945] usb 5-1: config 7 has an invalid interface number: 10 but max is 3
[  739.873048][ T5945] usb 5-1: config 7 has an invalid interface number: 31 but max is 3
[  739.899645][ T5945] usb 5-1: config 7 has an invalid descriptor of length 36, skipping remainder of the config
[  739.921362][ T5945] usb 5-1: config 7 has no interface number 0
[  739.935685][ T5945] usb 5-1: config 7 has no interface number 1
[  739.945509][ T5945] usb 5-1: config 7 has no interface number 2
[  739.955094][ T5945] usb 5-1: config 7 has no interface number 3
[  739.964701][ T5945] usb 5-1: config 7 interface 34 altsetting 240 bulk endpoint 0xD has invalid maxpacket 16
[  739.984406][ T5945] usb 5-1: config 7 interface 34 altsetting 240 bulk endpoint 0xF has invalid maxpacket 1023
[  739.996565][ T5945] usb 5-1: config 7 interface 34 altsetting 240 has a duplicate endpoint with address 0x6, skipping
[  740.015045][ T5945] usb 5-1: config 7 interface 34 altsetting 240 has a duplicate endpoint with address 0x7, skipping
[  740.031003][ T5945] usb 5-1: config 7 interface 34 altsetting 240 has an invalid descriptor for endpoint zero, skipping
[  740.047806][ T5945] usb 5-1: config 7 interface 34 altsetting 240 has a duplicate endpoint with address 0x4, skipping
[  740.081039][ T5945] usb 5-1: config 7 interface 34 altsetting 240 endpoint 0x9 has invalid wMaxPacketSize 0
[  740.125631][ T5945] usb 5-1: config 7 interface 34 altsetting 240 has an invalid descriptor for endpoint zero, skipping
[  740.147762][    T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  740.190824][ T5945] usb 5-1: config 7 interface 34 altsetting 240 has a duplicate endpoint with address 0x7, skipping
[  740.283977][ T5945] usb 5-1: config 7 interface 34 altsetting 240 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  740.633258][    T9] usb 4-1: Using ep0 maxpacket: 8
[  740.642374][ T5945] usb 5-1: config 7 interface 10 altsetting 152 has a duplicate endpoint with address 0xA, skipping
[  740.655306][ T5945] usb 5-1: config 7 interface 10 altsetting 152 has a duplicate endpoint with address 0xC, skipping
[  740.722867][ T5945] usb 5-1: config 7 interface 10 altsetting 152 has a duplicate endpoint with address 0xB, skipping
[  740.735208][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  740.774628][    T9] usb 4-1: config 9 has an invalid interface number: 5 but max is 0
[  740.782975][    T9] usb 4-1: config 9 has no interface number 0
[  740.813115][ T5945] usb 5-1: config 7 interface 31 altsetting 168 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  740.832231][    T9] usb 4-1: config 9 interface 5 altsetting 9 endpoint 0x9 has an invalid bInterval 181, changing to 7
[  740.879762][    T9] usb 4-1: config 9 interface 5 has no altsetting 0
[  740.888865][ T5945] usb 5-1: config 7 interface 42 has no altsetting 0
[  740.889192][T15308] Invalid logical block size (50331648)
[  740.910214][    T9] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8
[  740.921176][ T5945] usb 5-1: config 7 interface 34 has no altsetting 0
[  740.935673][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.944726][ T5945] usb 5-1: config 7 interface 10 has no altsetting 0
[  740.957531][ T5945] usb 5-1: config 7 interface 31 has no altsetting 0
[  740.964383][    T9] usb 4-1: Product: syz
[  740.977090][    T9] usb 4-1: Manufacturer: syz
[  740.982235][    T9] usb 4-1: SerialNumber: syz
[  740.989588][ T5945] usb 5-1: New USB device found, idVendor=12d1, idProduct=a011, bcdDevice=33.15
[  740.998964][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.036620][ T5945] usb 5-1: Product: 뾝萴ﱯ媉궮嶗硓䛀⎚肳ﲹ▄傋뤛栞밐䋹缞ሊ䦛즷糞Ⓥ໏뀋ﾮ䞛橖嵻᧫痹쫴殉퀊錋쩜ᛓ䡙鈐퓚룾ꢋ폜毾逥Ƕ᾿ᓗ뼞滖랼䳑彎ꩋ暩⹄䙩탎戍퇏龼्详᜛姾⽴鋩棔⃝춒鵠擫緐䗁苙樒偧渾併줇ጇ囷邨⍵䁙湮巌朹葭믳㯒煓淗Ě㬬㇮᭎纗訟압ᩡ뮒⑏﷥ু⪨슌溹儁
[  741.088295][ T5945] usb 5-1: Manufacturer: 뗈贮콢媰놏馨
[  741.094415][ T5945] usb 5-1: SerialNumber: Ѝ
[  741.310667][T15312] PKCS7: Unknown OID: [4] 0.0.0(bad)
[  741.316031][T15312] PKCS7: Only support pkcs7_signedData type
[  741.343361][ T5945] option 5-1:7.42: GSM modem (1-port) converter detected
[  741.363270][    T9] usb 4-1: USB disconnect, device number 34
[  742.124502][ T5945] option 5-1:7.10: GSM modem (1-port) converter detected
[  742.153200][ T5945] usb 5-1: USB disconnect, device number 35
[  742.306857][ T5945] option 5-1:7.42: device disconnected
[  742.823024][ T5945] option 5-1:7.10: device disconnected
[  743.547221][ T5945] usb 5-1: new low-speed USB device number 36 using dummy_hcd
[  744.954039][T15354] program syz.2.2610 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  745.468125][  T975] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  745.522772][ T5874] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  745.694410][ T5884] libceph: connect (1)[c::]:6789 error -101
[  745.700578][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  745.981043][T15360] ceph: No mds server is up or the cluster is laggy
[  745.988820][ T5874] usb 1-1: device descriptor read/64, error -71
[  746.325157][ T5884] libceph: connect (1)[c::]:6789 error -101
[  746.331302][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  746.337638][   T30] audit: type=1800 audit(1764674510.475:728): pid=15364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2606" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  747.165451][  T975] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  747.228191][  T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.271305][  T975] usb 3-1: config 0 descriptor??
[  747.307679][ T5874] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  748.032237][  T975] ath6kl: Failed to read usb control message: -32
[  748.046663][  T975] ath6kl: Unable to read the bmi data from the device: -32
[  748.066153][  T975] ath6kl: Unable to recv target info: -32
[  748.088303][  T975] ath6kl: Failed to init ath6kl core: -32
[  748.116946][  T975] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -32
[  748.380374][  T975] usb 3-1: USB disconnect, device number 48
[  748.464967][T15384] FAULT_INJECTION: forcing a failure.
[  748.464967][T15384] name failslab, interval 1, probability 0, space 0, times 0
[  748.484921][T15384] CPU: 0 UID: 0 PID: 15384 Comm: syz.0.2618 Not tainted syzkaller #0 PREEMPT(full) 
[  748.484948][T15384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  748.484958][T15384] Call Trace:
[  748.484965][T15384]  <TASK>
[  748.484971][T15384]  dump_stack_lvl+0x16c/0x1f0
[  748.485001][T15384]  should_fail_ex+0x512/0x640
[  748.485028][T15384]  ? __kmalloc_noprof+0xca/0x880
[  748.485057][T15384]  should_failslab+0xc2/0x120
[  748.485081][T15384]  __kmalloc_noprof+0xdd/0x880
[  748.485108][T15384]  ? do_insnlist_ioctl+0x59d/0x700
[  748.485135][T15384]  ? do_insnlist_ioctl+0x59d/0x700
[  748.485158][T15384]  do_insnlist_ioctl+0x59d/0x700
[  748.485187][T15384]  comedi_unlocked_ioctl+0x645/0x2f00
[  748.485219][T15384]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  748.485249][T15384]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  748.485276][T15384]  ? do_vfs_ioctl+0x128/0x14f0
[  748.485304][T15384]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  748.485332][T15384]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  748.485367][T15384]  ? hook_file_ioctl_common+0x145/0x410
[  748.485393][T15384]  ? selinux_file_ioctl+0x180/0x270
[  748.485416][T15384]  ? selinux_file_ioctl+0xb4/0x270
[  748.485442][T15384]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  748.485476][T15384]  __x64_sys_ioctl+0x18e/0x210
[  748.485494][T15384]  do_syscall_64+0xcd/0xfa0
[  748.485521][T15384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.485540][T15384] RIP: 0033:0x7f8af0f8f749
[  748.485553][T15384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  748.485570][T15384] RSP: 002b:00007f8af1eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  748.485586][T15384] RAX: ffffffffffffffda RBX: 00007f8af11e5fa0 RCX: 00007f8af0f8f749
[  748.485597][T15384] RDX: 0000200000000040 RSI: 000000008010640b RDI: 0000000000000003
[  748.485607][T15384] RBP: 00007f8af1eef090 R08: 0000000000000000 R09: 0000000000000000
[  748.485617][T15384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  748.485627][T15384] R13: 00007f8af11e6038 R14: 00007f8af11e5fa0 R15: 00007ffdc807bfb8
[  748.485653][T15384]  </TASK>
[  748.837094][ T5950] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  748.975295][   T30] audit: type=1400 audit(1764674513.384:729): avc:  denied  { map } for  pid=15387 comm="syz.3.2620" path="socket:[54358]" dev="sockfs" ino=54358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  749.019184][ T5950] usb 5-1: Using ep0 maxpacket: 8
[  749.064427][  T975] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  749.086949][ T5950] usb 5-1: config 36 has an invalid interface number: 44 but max is 0
[  749.095851][ T5950] usb 5-1: config 36 has no interface number 0
[  749.151858][ T5950] usb 5-1: config 36 interface 44 has no altsetting 0
[  749.164706][ T5950] usb 5-1: New USB device found, idVendor=0711, idProduct=0902, bcdDevice=ad.ea
[  749.174166][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.189013][ T5950] usb 5-1: Product: syz
[  749.193203][ T5950] usb 5-1: Manufacturer: syz
[  749.197954][ T5950] usb 5-1: SerialNumber: syz
[  749.339034][  T975] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  749.383766][  T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.203463][ T5950] sisusb 5-1:36.44: Invalid USB2VGA device
[  750.220247][  T975] usb 1-1: config 0 descriptor??
[  750.260617][ T5950] sisusb 5-1:36.44: probe with driver sisusb failed with error -22
[  750.273178][  T975] gspca_main: sunplus-2.14.0 probing 055f:c420
[  750.294303][ T5950] usb 5-1: USB disconnect, device number 37
[  750.489373][  T975] gspca_sunplus: reg_w_riv err -71
[  750.498000][  T975] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  750.551608][  T975] usb 1-1: USB disconnect, device number 34
[  750.673804][T15407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2624'.
[  750.813404][   T30] audit: type=1400 audit(1764674515.124:730): avc:  denied  { write } for  pid=15408 comm="syz.4.2625" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  751.378375][T15417] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2628'.
[  751.936611][ T5874] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  753.183447][T15429] gretap0: left allmulticast mode
[  753.195122][T15429] gretap0: left promiscuous mode
[  753.200378][T15429] bridge0: port 1(gretap0) entered disabled state
[  753.226786][T15429] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  753.315608][ T5874] usb 1-1: device descriptor read/64, error -71
[  753.935777][ T5884] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  754.406049][ T5884] usb 3-1: Using ep0 maxpacket: 32
[  754.413275][ T5884] usb 3-1: config 0 has too many interfaces: 226, using maximum allowed: 32
[  754.423538][ T5884] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 226
[  754.484616][ T5874] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  755.266108][T15449] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  755.296819][ T5884] usb 3-1: New USB device found, idVendor=177f, idProduct=0323, bcdDevice=83.80
[  755.316342][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.324342][ T5884] usb 3-1: Product: syz
[  755.328689][ T5884] usb 3-1: Manufacturer: syz
[  755.333276][ T5884] usb 3-1: SerialNumber: syz
[  755.355133][ T5884] usb 3-1: config 0 descriptor??
[  755.432209][T15447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2636'.
[  755.740132][T15461] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2640'.
[  755.765124][T15461] team0: Device xfrm1 is of different type
[  756.278251][T15468] lo speed is unknown, defaulting to 1000
[  756.788824][ T5884] usb 3-1: USB disconnect, device number 49
[  756.983793][   T30] audit: type=1400 audit(1764674520.905:731): avc:  denied  { setattr } for  pid=15475 comm="syz.0.2645" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  757.993607][T15478] lo speed is unknown, defaulting to 1000
[  759.162925][ T5884] libceph: connect (1)[c::]:6789 error -101
[  759.480330][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  759.715419][T15507] binder: BINDER_SET_CONTEXT_MGR already set
[  759.749675][T15501] ceph: No mds server is up or the cluster is laggy
[  759.756717][T15507] binder: 15504:15507 ioctl 4018620d 200000004a80 returned -16
[  759.879370][ T5884] libceph: connect (1)[c::]:6789 error -101
[  759.886937][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  762.478722][ T5945] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  763.118891][ T5945] usb 1-1: device descriptor read/64, error -71
[  764.933108][T15557] binder: BINDER_SET_CONTEXT_MGR already set
[  764.939416][T15557] binder: 15554:15557 ioctl 4018620d 200000004a80 returned -16
[  765.293520][   T77] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  765.307637][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  765.314902][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  766.409276][T15569] ceph: No mds server is up or the cluster is laggy
[  766.651423][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2672'.
[  766.860847][  T975] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  767.029943][T15586] netlink: 'syz.4.2672': attribute type 9 has an invalid length.
[  767.049167][  T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  767.136304][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2672'.
[  767.154661][  T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  767.267024][  T975] usb 2-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00
[  767.375581][  T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.542240][  T975] usb 2-1: config 0 descriptor??
[  767.623766][T15576] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  768.572597][  T975] usbhid 2-1:0.0: can't add hid device: -71
[  768.579203][  T975] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  768.589649][  T975] usb 2-1: USB disconnect, device number 48
[  768.846353][T15621] bridge4: entered promiscuous mode
[  770.603266][T15646] netlink: 5024 bytes leftover after parsing attributes in process `syz.3.2686'.
[  771.742074][T15654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2689'.
[  772.283257][    T9] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  772.400412][T15677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2695'.
[  772.453466][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  772.464782][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  772.488019][    T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00
[  772.580555][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.624247][    T9] usb 4-1: config 0 descriptor??
[  772.641832][T15666] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  773.916414][ T5945] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  774.893671][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  774.899671][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  774.912089][    T9] usb 4-1: USB disconnect, device number 35
[  774.972681][T15692] FAULT_INJECTION: forcing a failure.
[  774.972681][T15692] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  774.990892][T15692] CPU: 0 UID: 0 PID: 15692 Comm: syz.0.2701 Not tainted syzkaller #0 PREEMPT(full) 
[  774.990919][T15692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  774.990929][T15692] Call Trace:
[  774.990935][T15692]  <TASK>
[  774.990942][T15692]  dump_stack_lvl+0x16c/0x1f0
[  774.990971][T15692]  should_fail_ex+0x512/0x640
[  774.991002][T15692]  _copy_from_iter+0x29f/0x1720
[  774.991035][T15692]  ? __pfx__copy_from_iter+0x10/0x10
[  774.991061][T15692]  ? _parse_integer_limit+0x17f/0x1d0
[  774.991086][T15692]  ? _kstrtoull+0x145/0x200
[  774.991111][T15692]  tun_get_user+0x3c7/0x3cc0
[  774.991142][T15692]  ? __pfx_tun_get_user+0x10/0x10
[  774.991162][T15692]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  774.991188][T15692]  ? find_held_lock+0x2b/0x80
[  774.991212][T15692]  ? tun_get+0x191/0x370
[  774.991235][T15692]  tun_chr_write_iter+0xdc/0x210
[  774.991256][T15692]  vfs_write+0x7d3/0x11d0
[  774.991277][T15692]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  774.991298][T15692]  ? __pfx_vfs_write+0x10/0x10
[  774.991316][T15692]  ? find_held_lock+0x2b/0x80
[  774.991355][T15692]  ksys_write+0x12a/0x250
[  774.991374][T15692]  ? __pfx_ksys_write+0x10/0x10
[  774.991400][T15692]  do_syscall_64+0xcd/0xfa0
[  774.991427][T15692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.991450][T15692] RIP: 0033:0x7f8af0f8f749
[  774.991465][T15692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  774.991482][T15692] RSP: 002b:00007f8af1eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  774.991498][T15692] RAX: ffffffffffffffda RBX: 00007f8af11e5fa0 RCX: 00007f8af0f8f749
[  774.991510][T15692] RDX: 0000000000000fce RSI: 0000200000001840 RDI: 0000000000000003
[  774.991522][T15692] RBP: 00007f8af1eef090 R08: 0000000000000000 R09: 0000000000000000
[  774.991532][T15692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  774.991543][T15692] R13: 00007f8af11e6038 R14: 00007f8af11e5fa0 R15: 00007ffdc807bfb8
[  774.991567][T15692]  </TASK>
[  775.254640][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  775.267694][ T5945] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  775.277671][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.300266][ T5945] usb 5-1: config 0 descriptor??
[  776.487516][   T30] audit: type=1400 audit(1764674539.145:732): avc:  denied  { ioctl } for  pid=15704 comm="syz.3.2704" path="socket:[55535]" dev="sockfs" ino=55535 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  776.802137][ T5945] letsketch 0003:6161:4D15.0012: Device info: 繋
[  777.086810][ T5945] usb 5-1: Max retries (5) exceeded reading string descriptor 201
[  777.260643][ T5945] letsketch 0003:6161:4D15.0012: probe with driver letsketch failed with error -71
[  777.549275][ T5945] usb 5-1: USB disconnect, device number 38
[  778.770957][ T5884] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  779.422196][ T5884] usb 1-1: Using ep0 maxpacket: 32
[  779.440186][ T5884] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  779.712012][ T5884] usb 1-1: config 0 has no interface number 0
[  780.209650][ T5884] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  780.236082][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  780.245364][ T5884] usb 1-1: Product: syz
[  780.249618][ T5884] usb 1-1: Manufacturer: syz
[  780.255051][ T5884] usb 1-1: SerialNumber: syz
[  780.264161][ T5884] usb 1-1: config 0 descriptor??
[  780.272525][ T5884] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  780.281623][ T5884] usb 1-1: selecting invalid altsetting 1
[  780.287362][ T5884] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  780.299034][ T5884] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  780.309879][ T5884] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  780.318177][ T5884] usb 1-1: media controller created
[  780.333671][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  780.865313][ T5945] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  781.138586][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  781.149830][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  781.169039][ T5945] usb 5-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00
[  781.180439][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.539158][ T5884] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  781.549730][ T5884] zl10353_read_register: readreg error (reg=127, ret==-110)
[  781.561525][T15730] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  781.719559][ T5945] usb 5-1: config 0 descriptor??
[  781.757702][T15750] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  782.339848][T15766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2717'.
[  782.416304][ T5945] usbhid 5-1:0.0: can't add hid device: -71
[  782.423591][ T5945] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  782.439570][ T5945] usb 5-1: USB disconnect, device number 39
[  783.186450][ T5884] usb 1-1: USB disconnect, device number 39
[  784.387637][T15785] netlink: 'syz.2.2725': attribute type 5 has an invalid length.
[  784.931974][T15802] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2728'.
[  785.124752][T15810] lo speed is unknown, defaulting to 1000
[  785.736523][T15814] binder_alloc: 15813: binder_alloc_buf size 16777312 failed, no address space
[  785.746349][T15814] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  786.005861][T15822] binder: 15821:15822 ioctl c00c620f 2000000004c0 returned -22
[  787.483272][T15842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2738'.
[  788.135782][T15845] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  788.169884][T15845] nbd: must specify a size in bytes for the device
[  789.202551][ T5950] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  789.449875][ T5950] usb 2-1: Using ep0 maxpacket: 16
[  789.456908][ T5950] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  789.465296][ T5950] usb 2-1: config 1 has no interface number 0
[  789.473623][ T5950] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  789.547682][ T5950] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 1224, setting to 1024
[  789.567682][ T5950] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024
[  789.579602][ T5950] usb 2-1: config 1 interface 105 has no altsetting 0
[  789.630872][ T5950] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  789.640499][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.651487][ T5950] usb 2-1: Product: syz
[  789.658993][ T5950] usb 2-1: Manufacturer: syz
[  789.664011][ T5950] usb 2-1: SerialNumber: syz
[  789.679925][T15854] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  789.694200][T15854] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  790.320198][T15877] syzkaller0: entered promiscuous mode
[  790.325753][T15877] syzkaller0: entered allmulticast mode
[  790.432895][T15854] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  790.455237][T15854] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  790.490404][T15886] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  790.764145][ T5950] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  790.776074][ T5950] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71
[  790.794753][ T5950] usb 2-1: USB disconnect, device number 49
[  791.169181][T15893] overlayfs: upper fs does not support file handles, falling back to index=off.
[  792.832528][T15915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2756'.
[  792.843609][T15915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2756'.
[  793.930757][T15915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2756'.
[  793.939928][T15915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2756'.
[  794.195738][T15915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2756'.
[  794.205366][T15915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2756'.
[  794.663263][T15927] No control pipe specified
[  797.153850][T15962] netlink: 'syz.4.2766': attribute type 21 has an invalid length.
[  797.205490][T15962] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2766'.
[  798.057803][  T975] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  798.239225][  T975] usb 3-1: config 2 interface 0 has no altsetting 0
[  798.253452][  T975] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  798.265939][  T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.386712][  T975] usb 3-1: Product: syz
[  798.391789][  T975] usb 3-1: Manufacturer: syz
[  798.426693][  T975] usb 3-1: SerialNumber: syz
[  798.544392][T15985] openvswitch: netlink: Message has 20 unknown bytes.
[  798.558369][T15985] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  798.606607][T15987] FAULT_INJECTION: forcing a failure.
[  798.606607][T15987] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  798.623931][T15987] CPU: 1 UID: 0 PID: 15987 Comm: syz.0.2775 Not tainted syzkaller #0 PREEMPT(full) 
[  798.623961][T15987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  798.623972][T15987] Call Trace:
[  798.623977][T15987]  <TASK>
[  798.623985][T15987]  dump_stack_lvl+0x16c/0x1f0
[  798.624015][T15987]  should_fail_ex+0x512/0x640
[  798.624045][T15987]  _copy_from_user+0x2e/0xd0
[  798.624074][T15987]  copy_msghdr_from_user+0x98/0x160
[  798.624094][T15987]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  798.624125][T15987]  ___sys_sendmsg+0xfe/0x1d0
[  798.624144][T15987]  ? __pfx____sys_sendmsg+0x10/0x10
[  798.624160][T15987]  ? __lock_acquire+0x622/0x1c90
[  798.624210][T15987]  __sys_sendmsg+0x16d/0x220
[  798.624228][T15987]  ? __pfx___sys_sendmsg+0x10/0x10
[  798.624261][T15987]  do_syscall_64+0xcd/0xfa0
[  798.624287][T15987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  798.624304][T15987] RIP: 0033:0x7f8af0f8f749
[  798.624320][T15987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  798.624336][T15987] RSP: 002b:00007f8af1eef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  798.624354][T15987] RAX: ffffffffffffffda RBX: 00007f8af11e5fa0 RCX: 00007f8af0f8f749
[  798.624365][T15987] RDX: 000000000800c000 RSI: 0000200000000000 RDI: 0000000000000003
[  798.624376][T15987] RBP: 00007f8af1eef090 R08: 0000000000000000 R09: 0000000000000000
[  798.624386][T15987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  798.624396][T15987] R13: 00007f8af11e6038 R14: 00007f8af11e5fa0 R15: 00007ffdc807bfb8
[  798.624421][T15987]  </TASK>
[  798.793035][    C1] vkms_vblank_simulate: vblank timer overrun
[  799.175220][T15993] 8021q: adding VLAN 0 to HW filter on device bond1
[  799.192156][  T975] ims_pcu 3-1:2.0: Zero length descriptor
[  799.203185][  T975] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22
[  799.212361][T15994] bond1: (slave macvlan3): Opening slave failed
[  799.220588][  T975] usb 3-1: USB disconnect, device number 50
[  799.776013][ T7840] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  800.083482][T16005] fuse: Unknown parameter 'group_i�zm�d'
[  802.659742][T16027] bridge0: port 4(veth0_to_bridge) entered blocking state
[  802.679979][T16027] bridge0: port 4(veth0_to_bridge) entered disabled state
[  802.689613][T16027] veth0_to_bridge: entered allmulticast mode
[  802.733534][T16027] veth0_to_bridge: entered promiscuous mode
[  802.740009][T16027] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  802.753703][T16027] bridge0: port 4(veth0_to_bridge) entered blocking state
[  802.760996][T16027] bridge0: port 4(veth0_to_bridge) entered forwarding state
[  809.558265][T16094] ceph: No mds server is up or the cluster is laggy
[  810.255876][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2804'.
[  810.864478][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'.
[  812.870615][   T30] audit: type=1326 audit(1764674573.173:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a41b8f749 code=0x7ffc0000
[  812.916344][   T30] audit: type=1326 audit(1764674573.173:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a41b8f749 code=0x7ffc0000
[  812.945732][   T30] audit: type=1326 audit(1764674573.220:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2a41b8f749 code=0x7ffc0000
[  813.577457][T16129] netlink: 'syz.2.2812': attribute type 10 has an invalid length.
[  813.589511][   T30] audit: type=1326 audit(1764674573.220:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a41b8f749 code=0x7ffc0000
[  813.606788][T16129] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  813.623697][   T30] audit: type=1326 audit(1764674573.229:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a41b8f749 code=0x7ffc0000
[  813.634595][T16132] 
[  813.647596][   T30] audit: type=1326 audit(1764674573.248:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a41b8f749 code=0x7ffc0000
[  813.649401][T16132] =====================================================
[  813.649409][T16132] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  813.649419][T16132] syzkaller #0 Not tainted
[  813.691390][T16132] -----------------------------------------------------
[  813.691400][T16132] syz.1.2811/16132 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  813.691414][T16132] ffffffff8e00c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0xb8/0x3e0
[  813.691457][T16132] 
[  813.691457][T16132] and this task is already holding:
[  813.691461][T16132] ffff8880284835a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x31/0x3e0
[  813.691497][T16132] which would create a new lock dependency:
[  813.691501][T16132]  (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3}
[  813.691532][T16132] 
[  813.691532][T16132] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  813.691538][T16132]  (&client->buffer_lock){..-.}-{3:3}
[  813.691551][T16132] 
[  813.691551][T16132] ... which became SOFTIRQ-irq-safe at:
[  813.691556][T16132]   lock_acquire+0x179/0x350
[  813.691571][T16132]   _raw_spin_lock+0x2e/0x40
[  813.691588][T16132]   evdev_pass_values+0x10e/0x9b0
[  813.691604][T16132]   evdev_events+0x1bb/0x390
[  813.691617][T16132]   input_pass_values+0x74e/0x880
[  813.691632][T16132]   input_handle_event+0xb29/0x14d0
[  813.691647][T16132]   input_inject_event+0x1e8/0x3b0
[  813.691661][T16132]   led_set_brightness+0x217/0x290
[  813.691673][T16132]   led_trigger_event+0xda/0x270
[  813.691689][T16132]   kbd_bh+0x21b/0x300
[  813.691704][T16132]   tasklet_action_common+0x284/0x400
[  813.691721][T16132]   handle_softirqs+0x219/0x8e0
[  813.691736][T16132]   __irq_exit_rcu+0x109/0x170
[  813.691751][T16132]   irq_exit_rcu+0x9/0x30
[  813.691766][T16132]   sysvec_apic_timer_interrupt+0xa4/0xc0
[  813.691784][T16132]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  813.691799][T16132]   _raw_spin_unlock_irqrestore+0x31/0x80
[  813.691816][T16132]   vt_do_kdskled+0x89/0x320
[  813.691831][T16132]   vt_ioctl+0xb5d/0x30a0
[  813.691849][T16132]   tty_ioctl+0x661/0x1680
[  813.691863][T16132]   __x64_sys_ioctl+0x18e/0x210
[  813.691874][T16132]   do_syscall_64+0xcd/0xfa0
[  813.691893][T16132]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.691906][T16132] 
[  813.691906][T16132] to a SOFTIRQ-irq-unsafe lock:
[  813.691911][T16132]  (tasklist_lock){.+.+}-{3:3}
[  813.691923][T16132] 
[  813.691923][T16132] ... which became SOFTIRQ-irq-unsafe at:
[  813.691930][T16132] ...
[  813.691932][T16132]   lock_acquire+0x179/0x350
[  813.691945][T16132]   _raw_read_lock+0x5f/0x70
[  813.691961][T16132]   __do_wait+0x105/0x890
[  813.691980][T16132]   do_wait+0x21d/0x590
[  813.691998][T16132]   kernel_wait+0x9f/0x160
[  813.692009][T16132]   call_usermodehelper_exec_work+0xf1/0x170
[  813.692025][T16132]   process_one_work+0x9cf/0x1b70
[  813.692038][T16132]   worker_thread+0x6c8/0xf10
[  813.692051][T16132]   kthread+0x3c5/0x780
[  813.692062][T16132]   ret_from_fork+0x675/0x7d0
[  813.692083][T16132]   ret_from_fork_asm+0x1a/0x30
[  813.692102][T16132] 
[  813.692102][T16132] other info that might help us debug this:
[  813.692102][T16132] 
[  813.692106][T16132] Chain exists of:
[  813.692106][T16132]   &client->buffer_lock --> &f_owner->lock --> tasklist_lock
[  813.692106][T16132] 
[  813.692128][T16132]  Possible interrupt unsafe locking scenario:
[  813.692128][T16132] 
[  813.692132][T16132]        CPU0                    CPU1
[  813.692136][T16132]        ----                    ----
[  813.692140][T16132]   lock(tasklist_lock);
[  813.692149][T16132]                                local_irq_disable();
[  813.692153][T16132]                                lock(&client->buffer_lock);
[  813.692164][T16132]                                lock(&f_owner->lock);
[  813.692173][T16132]   <Interrupt>
[  813.692176][T16132]     lock(&client->buffer_lock);
[  813.692186][T16132] 
[  813.692186][T16132]  *** DEADLOCK ***
[  813.692186][T16132] 
[  813.692189][T16132] 4 locks held by syz.1.2811/16132:
[  813.692198][T16132]  #0: ffffffff8e3c4020 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0x97/0x600
[  813.692239][T16132]  #1: ffffffff8e3c4020 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510
[  813.692282][T16132]  #2: ffff8880636f7210 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510
[  813.692320][T16132]  #3: ffff8880284835a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x31/0x3e0
[  813.692359][T16132] 
[  813.692359][T16132] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  813.692366][T16132]   -> (&client->buffer_lock){..-.}-{3:3} {
[  813.692384][T16132]      IN-SOFTIRQ-W at:
[  813.692392][T16132]                         lock_acquire+0x179/0x350
[  813.692405][T16132]                         _raw_spin_lock+0x2e/0x40
[  813.692420][T16132]                         evdev_pass_values+0x10e/0x9b0
[  813.692434][T16132]                         evdev_events+0x1bb/0x390
[  813.692448][T16132]                         input_pass_values+0x74e/0x880
[  813.692462][T16132]                         input_handle_event+0xb29/0x14d0
[  813.692476][T16132]                         input_inject_event+0x1e8/0x3b0
[  813.692491][T16132]                         led_set_brightness+0x217/0x290
[  813.692503][T16132]                         led_trigger_event+0xda/0x270
[  813.692520][T16132]                         kbd_bh+0x21b/0x300
[  813.692534][T16132]                         tasklet_action_common+0x284/0x400
[  813.692551][T16132]                         handle_softirqs+0x219/0x8e0
[  813.692566][T16132]                         __irq_exit_rcu+0x109/0x170
[  813.692582][T16132]                         irq_exit_rcu+0x9/0x30
[  813.692597][T16132]                         sysvec_apic_timer_interrupt+0xa4/0xc0
[  813.692615][T16132]                         asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  813.692630][T16132]                         _raw_spin_unlock_irqrestore+0x31/0x80
[  813.692648][T16132]                         vt_do_kdskled+0x89/0x320
[  813.692665][T16132]                         vt_ioctl+0xb5d/0x30a0
[  813.692683][T16132]                         tty_ioctl+0x661/0x1680
[  813.692696][T16132]                         __x64_sys_ioctl+0x18e/0x210
[  813.692707][T16132]                         do_syscall_64+0xcd/0xfa0
[  813.692726][T16132]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.692739][T16132]      INITIAL USE at:
[  813.692747][T16132]                        lock_acquire+0x179/0x350
[  813.692760][T16132]                        _raw_spin_lock_irq+0x36/0x50
[  813.692776][T16132]                        evdev_read+0x436/0xee0
[  813.692791][T16132]                        vfs_readv+0x5c1/0x8b0
[  813.692803][T16132]                        do_readv+0x28c/0x340
[  813.692815][T16132]                        do_syscall_64+0xcd/0xfa0
[  813.692834][T16132]                        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.692847][T16132]    }
[  813.692851][T16132]    ... key      at: [<ffffffff9ae38060>] __key.83+0x0/0x40
[  813.692872][T16132]  -> (&new->fa_lock){....}-{3:3} {
[  813.692890][T16132]     INITIAL USE at:
[  813.692897][T16132]                      lock_acquire+0x179/0x350
[  813.692910][T16132]                      _raw_write_lock_irq+0x36/0x50
[  813.692928][T16132]                      fasync_remove_entry+0xb2/0x1e0
[  813.692947][T16132]                      fasync_helper+0xaf/0xd0
[  813.692966][T16132]                      lease_modify+0x232/0x500
[  813.692981][T16132]                      locks_remove_file+0x29e/0x5c0
[  813.692998][T16132]                      __fput+0x351/0xb70
[  813.693015][T16132]                      task_work_run+0x150/0x240
[  813.693029][T16132]                      exit_to_user_mode_loop+0xec/0x130
[  813.693045][T16132]                      do_syscall_64+0x426/0xfa0
[  813.693064][T16132]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.693077][T16132]     INITIAL READ USE at:
[  813.693084][T16132]                           lock_acquire+0x179/0x350
[  813.693097][T16132]                           _raw_read_lock_irqsave+0x74/0x90
[  813.693115][T16132]                           kill_fasync+0x138/0x510
[  813.693134][T16132]                           lease_break_callback+0x23/0x30
[  813.693146][T16132]                           __break_lease+0x674/0x1810
[  813.693162][T16132]                           do_dentry_open+0x69d/0x1560
[  813.693177][T16132]                           vfs_open+0x82/0x3f0
[  813.693194][T16132]                           path_openat+0x2016/0x2f90
[  813.693209][T16132]                           do_filp_open+0x20b/0x470
[  813.693224][T16132]                           do_open_execat+0xf9/0x3a0
[  813.693238][T16132]                           open_exec+0x45/0x80
[  813.693252][T16132]                           load_script+0x51d/0x790
[  813.693273][T16132]                           bprm_execve+0x8be/0x1640
[  813.693286][T16132]                           do_execveat_common.isra.0+0x4a5/0x610
[  813.693301][T16132]                           __x64_sys_execveat+0xda/0x120
[  813.693316][T16132]                           do_syscall_64+0xcd/0xfa0
[  813.693334][T16132]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.693347][T16132]   }
[  813.693351][T16132]   ... key      at: [<ffffffff9ab52da0>] __key.0+0x0/0x40
[  813.693370][T16132]   ... acquired at:
[  813.693375][T16132]    _raw_read_lock_irqsave+0x74/0x90
[  813.693391][T16132]    kill_fasync+0x138/0x510
[  813.693410][T16132]    evdev_pass_values+0x619/0x9b0
[  813.693423][T16132]    evdev_events+0x1bb/0x390
[  813.693436][T16132]    input_pass_values+0x74e/0x880
[  813.693449][T16132]    input_handle_event+0xf00/0x14d0
[  813.693463][T16132]    input_inject_event+0x1e8/0x3b0
[  813.693477][T16132]    evdev_write+0x457/0x750
[  813.693491][T16132]    vfs_write+0x2a0/0x11d0
[  813.693504][T16132]    ksys_write+0x1f8/0x250
[  813.693517][T16132]    do_syscall_64+0xcd/0xfa0
[  813.693535][T16132]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.693547][T16132] 
[  813.693550][T16132] -> (&f_owner->lock){....}-{3:3} {
[  813.693568][T16132]    INITIAL USE at:
[  813.693575][T16132]                    lock_acquire+0x179/0x350
[  813.693588][T16132]                    _raw_write_lock_irq+0x36/0x50
[  813.693606][T16132]                    __f_setown+0x61/0x3c0
[  813.693623][T16132]                    generic_setlease+0xef2/0x1300
[  813.693639][T16132]                    kernel_setlease+0x106/0x140
[  813.693654][T16132]                    vfs_setlease+0x258/0x2d0
[  813.693669][T16132]                    fcntl_setlease+0x3ed/0x5a0
[  813.693685][T16132]                    do_fcntl+0x751/0x15a0
[  813.693703][T16132]                    __x64_sys_fcntl+0x163/0x200
[  813.693721][T16132]                    do_syscall_64+0xcd/0xfa0
[  813.693739][T16132]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.693752][T16132]    INITIAL READ USE at:
[  813.693760][T16132]                         lock_acquire+0x179/0x350
[  813.693773][T16132]                         _raw_read_lock_irqsave+0x74/0x90
[  813.693790][T16132]                         send_sigio+0x31/0x3e0
[  813.693808][T16132]                         kill_fasync+0x214/0x510
[  813.693827][T16132]                         lease_break_callback+0x23/0x30
[  813.693840][T16132]                         __break_lease+0x674/0x1810
[  813.693855][T16132]                         do_dentry_open+0x69d/0x1560
[  813.693869][T16132]                         vfs_open+0x82/0x3f0
[  813.693886][T16132]                         path_openat+0x2016/0x2f90
[  813.693901][T16132]                         do_filp_open+0x20b/0x470
[  813.693917][T16132]                         do_open_execat+0xf9/0x3a0
[  813.693930][T16132]                         open_exec+0x45/0x80
[  813.693943][T16132]                         load_script+0x51d/0x790
[  813.693961][T16132]                         bprm_execve+0x8be/0x1640
[  813.693974][T16132]                         do_execveat_common.isra.0+0x4a5/0x610
[  813.693989][T16132]                         __x64_sys_execveat+0xda/0x120
[  813.694003][T16132]                         do_syscall_64+0xcd/0xfa0
[  813.694022][T16132]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.694035][T16132]  }
[  813.694039][T16132]  ... key      at: [<ffffffff9ab52de0>] __key.1+0x0/0x40
[  813.694057][T16132]  ... acquired at:
[  813.694061][T16132]    _raw_read_lock_irqsave+0x74/0x90
[  813.694078][T16132]    send_sigio+0x31/0x3e0
[  813.694096][T16132]    kill_fasync+0x214/0x510
[  813.694115][T16132]    lease_break_callback+0x23/0x30
[  813.694127][T16132]    __break_lease+0x674/0x1810
[  813.694142][T16132]    do_dentry_open+0x69d/0x1560
[  813.694156][T16132]    vfs_open+0x82/0x3f0
[  813.694173][T16132]    path_openat+0x2016/0x2f90
[  813.694187][T16132]    do_filp_open+0x20b/0x470
[  813.694202][T16132]    do_open_execat+0xf9/0x3a0
[  813.694214][T16132]    open_exec+0x45/0x80
[  813.694226][T16132]    load_script+0x51d/0x790
[  813.694242][T16132]    bprm_execve+0x8be/0x1640
[  813.694259][T16132]    do_execveat_common.isra.0+0x4a5/0x610
[  813.694273][T16132]    __x64_sys_execveat+0xda/0x120
[  813.694287][T16132]    do_syscall_64+0xcd/0xfa0
[  813.694305][T16132]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.694318][T16132] 
[  813.694320][T16132] 
[  813.694320][T16132] the dependencies between the lock to be acquired
[  813.694324][T16132]  and SOFTIRQ-irq-unsafe lock:
[  813.694339][T16132] -> (tasklist_lock){.+.+}-{3:3} {
[  813.694358][T16132]    HARDIRQ-ON-R at:
[  813.694365][T16132]                     lock_acquire+0x179/0x350
[  813.694378][T16132]                     _raw_read_lock+0x5f/0x70
[  813.694394][T16132]                     __do_wait+0x105/0x890
[  813.694412][T16132]                     do_wait+0x21d/0x590
[  813.694431][T16132]                     kernel_wait+0x9f/0x160
[  813.694442][T16132]                     call_usermodehelper_exec_work+0xf1/0x170
[  813.694458][T16132]                     process_one_work+0x9cf/0x1b70
[  813.694471][T16132]                     worker_thread+0x6c8/0xf10
[  813.694485][T16132]                     kthread+0x3c5/0x780
[  813.694496][T16132]                     ret_from_fork+0x675/0x7d0
[  813.694516][T16132]                     ret_from_fork_asm+0x1a/0x30
[  813.694534][T16132]    SOFTIRQ-ON-R at:
[  813.694541][T16132]                     lock_acquire+0x179/0x350
[  813.694554][T16132]                     _raw_read_lock+0x5f/0x70
[  813.694570][T16132]                     __do_wait+0x105/0x890
[  813.694589][T16132]                     do_wait+0x21d/0x590
[  813.694609][T16132]                     kernel_wait+0x9f/0x160
[  813.694620][T16132]                     call_usermodehelper_exec_work+0xf1/0x170
[  813.694636][T16132]                     process_one_work+0x9cf/0x1b70
[  813.694649][T16132]                     worker_thread+0x6c8/0xf10
[  813.694662][T16132]                     kthread+0x3c5/0x780
[  813.694674][T16132]                     ret_from_fork+0x675/0x7d0
[  813.694693][T16132]                     ret_from_fork_asm+0x1a/0x30
[  813.694711][T16132]    INITIAL USE at:
[  813.694719][T16132]                    lock_acquire+0x179/0x350
[  813.694731][T16132]                    _raw_write_lock_irq+0x36/0x50
[  813.694749][T16132]                    copy_process+0x4feb/0x76b0
[  813.694766][T16132]                    kernel_clone+0xfc/0x930
[  813.694782][T16132]                    user_mode_thread+0xc8/0x110
[  813.694799][T16132]                    rest_init+0x23/0x2b0
[  813.694812][T16132]                    start_kernel+0x3f6/0x4e0
[  813.694828][T16132]                    x86_64_start_reservations+0x18/0x30
[  813.694846][T16132]                    x86_64_start_kernel+0x130/0x190
[  813.694862][T16132]                    common_startup_64+0x13e/0x148
[  813.694876][T16132]    INITIAL READ USE at:
[  813.694884][T16132]                         lock_acquire+0x179/0x350
[  813.694897][T16132]                         _raw_read_lock+0x5f/0x70
[  813.694913][T16132]                         __do_wait+0x105/0x890
[  813.694933][T16132]                         do_wait+0x21d/0x590
[  813.694951][T16132]                         kernel_wait+0x9f/0x160
[  813.694962][T16132]                         call_usermodehelper_exec_work+0xf1/0x170
[  813.694978][T16132]                         process_one_work+0x9cf/0x1b70
[  813.694991][T16132]                         worker_thread+0x6c8/0xf10
[  813.695004][T16132]                         kthread+0x3c5/0x780
[  813.695015][T16132]                         ret_from_fork+0x675/0x7d0
[  813.695035][T16132]                         ret_from_fork_asm+0x1a/0x30
[  813.695053][T16132]  }
[  813.695057][T16132]  ... key      at: [<ffffffff8e00c098>] tasklist_lock+0x18/0x40
[  813.695080][T16132]  ... acquired at:
[  813.695084][T16132]    lock_acquire+0x179/0x350
[  813.695096][T16132]    _raw_read_lock+0x5f/0x70
[  813.695112][T16132]    send_sigio+0xb8/0x3e0
[  813.695130][T16132]    kill_fasync+0x214/0x510
[  813.695148][T16132]    sock_wake_async+0x132/0x160
[  813.695163][T16132]    sock_def_readable+0x522/0x600
[  813.695183][T16132]    unix_stream_sendmsg+0x764/0x1340
[  813.695197][T16132]    ____sys_sendmsg+0xa98/0xc70
[  813.695213][T16132]    ___sys_sendmsg+0x134/0x1d0
[  813.695225][T16132]    __sys_sendmsg+0x16d/0x220
[  813.695237][T16132]    do_syscall_64+0xcd/0xfa0
[  813.695261][T16132]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.695273][T16132] 
[  813.695276][T16132] 
[  813.695276][T16132] stack backtrace:
[  813.695284][T16132] CPU: 1 UID: 0 PID: 16132 Comm: syz.1.2811 Not tainted syzkaller #0 PREEMPT(full) 
[  813.695301][T16132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  813.695309][T16132] Call Trace:
[  813.695313][T16132]  <TASK>
[  813.695318][T16132]  dump_stack_lvl+0x116/0x1f0
[  813.695339][T16132]  check_irq_usage+0x7dc/0x920
[  813.695354][T16132]  ? check_path.constprop.0+0x24/0x50
[  813.695378][T16132]  ? __lock_acquire+0x1285/0x1c90
[  813.695391][T16132]  __lock_acquire+0x1285/0x1c90
[  813.695405][T16132]  ? __lock_acquire+0x1053/0x1c90
[  813.695420][T16132]  lock_acquire+0x179/0x350
[  813.695433][T16132]  ? send_sigio+0xb8/0x3e0
[  813.695452][T16132]  ? lock_acquire+0x179/0x350
[  813.695467][T16132]  _raw_read_lock+0x5f/0x70
[  813.695483][T16132]  ? send_sigio+0xb8/0x3e0
[  813.695502][T16132]  send_sigio+0xb8/0x3e0
[  813.695522][T16132]  kill_fasync+0x214/0x510
[  813.695544][T16132]  sock_wake_async+0x132/0x160
[  813.695559][T16132]  sock_def_readable+0x522/0x600
[  813.695580][T16132]  unix_stream_sendmsg+0x764/0x1340
[  813.695595][T16132]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  813.695612][T16132]  ____sys_sendmsg+0xa98/0xc70
[  813.695629][T16132]  ? copy_msghdr_from_user+0x10a/0x160
[  813.695643][T16132]  ? __pfx_____sys_sendmsg+0x10/0x10
[  813.695663][T16132]  ___sys_sendmsg+0x134/0x1d0
[  813.695677][T16132]  ? __pfx____sys_sendmsg+0x10/0x10
[  813.695689][T16132]  ? __lock_acquire+0x622/0x1c90
[  813.695712][T16132]  __sys_sendmsg+0x16d/0x220
[  813.695725][T16132]  ? __pfx___sys_sendmsg+0x10/0x10
[  813.695741][T16132]  ? __secure_computing+0x28e/0x3b0
[  813.695758][T16132]  do_syscall_64+0xcd/0xfa0
[  813.695777][T16132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.695790][T16132] RIP: 0033:0x7f2a41b8f749
[  813.695802][T16132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  813.695814][T16132] RSP: 002b:00007f2a42951038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  813.695828][T16132] RAX: ffffffffffffffda RBX: 00007f2a41de6090 RCX: 00007f2a41b8f749
[  813.695837][T16132] RDX: 000000000400c9c1 RSI: 0000200000000100 RDI: 0000000000000009
[  813.695846][T16132] RBP: 00007f2a41c13f91 R08: 0000000000000000 R09: 0000000000000000
[  813.695854][T16132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  813.695862][T16132] R13: 00007f2a41de6128 R14: 00007f2a41de6090 R15: 00007ffd1a028f08
[  813.695875][T16132]  </TASK>
[  813.695893][    C1] vkms_vblank_simulate: vblank timer overrun
[  814.694586][   T30] audit: type=1326 audit(1764674573.248:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a41b8f749 code=0x7ffc0000
[  814.694620][   T30] audit: type=1326 audit(1764674573.248:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a41b8f749 code=0x7ffc0000
[  814.694651][   T30] audit: type=1326 audit(1764674573.818:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a41b8f749 code=0x7ffc0000
[  814.694680][   T30] audit: type=1326 audit(1764674573.818:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a41b8f749 code=0x7ffc0000
[  815.732790][T16129] fuse: Bad value for 'fd'
[  815.831194][T16144] ieee80211 phy65: Selected rate control algorithm 'minstrel_ht'