last executing test programs:

13m20.194486537s ago: executing program 2 (id=1938):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x22, 0x2, 0x9000002)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000280)=@ax25={{0x3, @rose}, [@bcast, @default, @netrom, @null, @bcast, @null, @default, @netrom]}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)=""/182, 0xb6}, {&(0x7f0000001500)=""/236, 0xec}, {&(0x7f0000000340)=""/98, 0x62}, {&(0x7f00000016c0)=""/252, 0xfc}], 0x4, &(0x7f00000017c0)=""/250, 0xfa}, 0x40002060)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64293aae0a266a78a531000000", @ANYRES32=r6, @ANYBLOB="890c040000000000440012800b000100697036746e6c000034000280080008003200000014000200fc0100000000000000000000000000e306000f0001000000040013000800140034c30000"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680))
r7 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r7})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r7})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096})
connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x2710, @my=0x1}, 0x10)
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0)

13m19.091999813s ago: executing program 2 (id=1945):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000001400), 0x13f}}, 0x20)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc2a, 0x10100}, &(0x7f0000000180), 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0xfffff000, &(0x7f0000000640)=[{0x0}], 0x178)

13m17.209056585s ago: executing program 2 (id=1949):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
openat$tun(0xffffffffffffff9c, 0x0, 0x101401, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x2)
socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
socket$unix(0x1, 0x1, 0x0)
connect$rose(0xffffffffffffffff, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12}})
userfaultfd(0x801)

13m16.340297693s ago: executing program 2 (id=1954):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES8], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f00000005c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
setrlimit(0x3, &(0x7f0000000040)={0x2, 0x6})
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000001c0)={'veth1_virt_wifi\x00', {0x2, 0x0, @broadcast}})
r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0)
fcntl$setlease(r6, 0x400, 0x0)
mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080))
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0)

13m14.859476619s ago: executing program 2 (id=1958):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38)
sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r4, &(0x7f0000000740)=[{0x0}], 0x1)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x8, 0x7fe2, 0x1}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61)

13m13.292965174s ago: executing program 2 (id=1960):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f00000000c0)=0xc)
capget(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000140)={0x100000, 0x9, 0x2, 0xc, 0xc3a1, 0xa3})
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
syslog(0xa, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @private0, 0x20}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x0)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x5, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x64, r6, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c084}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x2000, 0x1)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6, 0x1000)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0)
ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000})

13m12.488741258s ago: executing program 32 (id=1960):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f00000000c0)=0xc)
capget(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000140)={0x100000, 0x9, 0x2, 0xc, 0xc3a1, 0xa3})
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
syslog(0xa, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @private0, 0x20}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x0)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x5, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x64, r6, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c084}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x2000, 0x1)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6, 0x1000)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0)
ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000})

11m18.832648799s ago: executing program 0 (id=2241):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000009500000000000001c1f0ce16d897249a9265c156fd1846a6fa42af87ea6b6fdca31567f4b2f713b6c9d7edad02393734713d9b3816a0f1879bdff95064649be63aef2237904a08c29efc1f0d07564e3d1bf476e5105aad58422d37527a7052707b0b52b3bb957e4f71c13b1ab6c8cf95365672548324fc4b4d4962b3b19909d371bcc9b275bfb4921f4ee27be5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x20000806)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r2, 0x4048aec9, &(0x7f0000000040)={0x6, 0x4, 0x9, 0x7f, 0x8000000000000000})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0)
r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0xfffffffffffffffe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xc, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1)
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

11m18.356411099s ago: executing program 0 (id=2244):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = open(&(0x7f00000001c0)='./file0\x00', 0x646e01, 0x120)
openat$cgroup_ro(r1, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000180)={0x1d, 0x30, 0xc, 0x14, 0xb, 0x2, 0x3, 0x148}) (async)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000180)={0x1d, 0x30, 0xc, 0x14, 0xb, 0x2, 0x3, 0x148})
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1000}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008800) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1000}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008800)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

11m18.109192317s ago: executing program 0 (id=2245):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='lp', 0x2)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8)
tkill(r2, 0xb)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000340000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe)
r6 = memfd_create(&(0x7f0000001b40)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\x05\x00\x00\x00\x00\x00\x00\x00\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x4)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)

11m16.343477613s ago: executing program 0 (id=2246):
r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r1 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x17b}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0)
r4 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r5, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={<r6=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r6}}, 0x48) (fail_nth: 9)

11m14.649431949s ago: executing program 0 (id=2251):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0xb00, 0x24044084, 0x0, 0x0)

11m13.768687149s ago: executing program 0 (id=2255):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10)
socket(0x400000000010, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r2 = socket(0x28, 0x1, 0x0)
r3 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65a, 0x10, 0x40c, 0x40}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}})
io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0xbb8, 0x0, 0x5, 0x3, 0x0, 0x0, {0x8, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0x9246}, 0x1, 0x1, 0x1, 0x8000, 0x2, 'syz0\x00', "07da832ce3532fb157e054cea2c0874acec8a7d4d0c8ee35804a7c660a4b7a5d", "2032b109b0d6e4da14510574c1e660232512ed29a827653d6b0cc5f76af6a8b9", [{0x401, 0x8, {0x3, 0xc}}, {0x2, 0x8, {0x3, 0x1}}, {0x81, 0xffd7, {0x0, 0x4}}, {0x2, 0x0, {0x2, 0x2}}, {0xfff, 0x7a, {0x2, 0x9}}, {0xfffd, 0x9, {0x2, 0x8}}, {0x6, 0x6, {0x3, 0x2}}, {0x0, 0x2, {0x0, 0x9}}, {0x400, 0x8001, {0x0, 0x9}}, {0x2, 0x6, {0x20c3dda00d344176, 0x6}}, {0xfff, 0xc69, {0x2}}, {0x1, 0x6, {0x0, 0xfffffffb}}, {0x9, 0x9, {0x0, 0x3}}, {0xf, 0x5, {0x1}}, {0x8, 0x1ff, {0x0, 0x100}}, {0x6, 0x10, {0x0, 0x9}}, {0x5, 0x5, {0x1, 0x1}}, {0xfc01, 0x2095, {0x0, 0xff}}, {0x75ed, 0x7f, {0x2, 0x9}}, {0xfff8, 0xfff2, {0x0, 0x8}}, {0x1000, 0xd, {0x2, 0x4800000}}, {0x7f48, 0x6, {0x0, 0x8}}, {0x401, 0xffff, {0x1, 0x1fffe000}}, {0x2, 0xcb, {0x2, 0x9}}, {0x9, 0x1, {0x0, 0x4}}, {0x4, 0x4, {0x0, 0xa}}, {0x8, 0x7, {0x3, 0x2}}, {0x3, 0x6, {0x3, 0x7f}}, {0x7, 0x1, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x4}}, {0x8f, 0xfffe, {0x2, 0x9}}, {0x100, 0x4, {0x1, 0xe}}, {0x3, 0x200, {0x1, 0x7}}, {0x623, 0x7, {0x0, 0xe}}, {0x2, 0x7f, {0x3, 0x10000}}, {0xfffa, 0x0, {0x0, 0x5}}, {0x0, 0x5, {0x1, 0x1000}}, {0x6, 0x8000, {0x0, 0x4}}, {0x1, 0x9, {0x1, 0x97}}, {0x3, 0xe3b, {0x2, 0x8b}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x8, 0x8, 0x2, 0x4db0, 0x14, 'syz0\x00', "76e2e14faf02881970fff740e226d6936efc07c3ac3ff683cff8b2816dbedfa8", "ec04a78808eb2f66d81c044fb21810774b5886b24e23e60e943713c0840a22cf", [{0x800, 0x8, {0x2, 0x80000001}}, {0x7e28, 0x6, {0x3, 0x4}}, {0xfff8, 0x0, {0x3, 0xfffffffd}}, {0x1, 0xb, {0x1, 0x9}}, {0x1000, 0xfc70, {0x3, 0x4}}, {0x1, 0x7, {0x2, 0x1}}, {0x9, 0x28, {0x3, 0x4}}, {0x6, 0x9, {0x0, 0x7}}, {0x7fff, 0x8, {0x1, 0x1}}, {0x3, 0x9, {0x0, 0xffff}}, {0xd, 0x671b, {0x3, 0xfff}}, {0x101, 0x6, {0x1, 0x8}}, {0x1000, 0x4, {0x0, 0x1}}, {0x1, 0x3, {0x3, 0x800}}, {0xd4d, 0xffff, {0x1, 0x6}}, {0x0, 0x9, {0x0, 0xffffff00}}, {0x6, 0xa9, {0x2, 0xdec}}, {0x8, 0x747a, {0x2, 0x7798}}, {0xfff, 0x9, {0x2, 0x6}}, {0x3, 0x7, {0x1, 0x7}}, {0x3, 0x2, {0x3, 0x7}}, {0x10, 0x3, {0x3, 0x9}}, {0x7ebf, 0x7, {0x1, 0x1}}, {0x1, 0x2, {0x3, 0x5}}, {0x4, 0x9, {0x2, 0x2}}, {0xa96, 0xb000, {0x0, 0x5}}, {0x8074, 0x7, {0x3, 0x5}}, {0x0, 0x800, {0x3, 0x4}}, {0x7fff, 0x4, {0x2, 0x6}}, {0x82b, 0x8, {0x0, 0x20000}}, {0x7, 0x1c6, {0x3, 0x80000000}}, {0x0, 0x101, {0x0, 0x4}}, {0xc473, 0x4, {0x0, 0xb1b2}}, {0x3, 0x5, {0x1, 0x7}}, {0x7, 0xf, {0x3, 0x4}}, {0x7, 0x1000, {0x0, 0x1e}}, {0xd82, 0x3, {0x0, 0x3}}, {0x8, 0x2}, {0x8, 0x2, {0x3, 0x4}}, {0x7, 0x9d1b, {0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x7, 0x7, 0x2, 0x2, 0x9, 'syz0\x00', "e8fa7838d17658aaae88d85a4774f258ce4fbdcf7da51e91e5a2ef4cb780baa9", "ab59f7f766fe1fa52b3e90ca96919b69fe3d6387ea975a76cfeed5d7fbdd03ce", [{0x3, 0x100, {0x1, 0x6}}, {0x8, 0xb2, {0x1, 0x6}}, {0x58, 0x8, {0x2, 0x2}}, {0x9, 0x1ff, {0x0, 0x8001}}, {0x2, 0x83, {0x2, 0x8001}}, {0x6, 0x5, {0x3, 0xffff}}, {0x3, 0x7f, {0x1, 0x7fffffff}}, {0x5, 0x9, {0x0, 0x10000}}, {0x8, 0x4, {0x2, 0x9}}, {0xffff, 0x2e0, {0x2, 0x3d}}, {0x1, 0x2, {0x1, 0x5}}, {0x3, 0x40, {0x0, 0xffff}}, {0xd, 0x3f4a, {0x1, 0xcc7}}, {0x7, 0x0, {0x3, 0x3ff}}, {0x1, 0x9, {0x1, 0xfffffffb}}, {0x2, 0x0, {0x2, 0x1}}, {0x6, 0x5, {0x3}}, {0x4, 0x846d, {0x3, 0x6}}, {0x9, 0x12e, {0x2, 0x401}}, {0x2, 0x2, {0x1, 0x8}}, {0xf000, 0x4, {0x2, 0x400}}, {0x7f, 0x4, {0x0, 0x3}}, {0x101, 0x7, {0x1, 0x6}}, {0xfff, 0x1e, {0x1, 0x39}}, {0x1ff, 0x3, {0x0, 0x5}}, {0xfe00, 0x15, {0x0, 0xfff}}, {0x6, 0x1, {0x0, 0xfc000000}}, {0x8, 0x5, {0x1}}, {0x3a00, 0x6, {0x0, 0x8e0}}, {0x5, 0x7f, {0x1, 0x101}}, {0xa4ec, 0x6, {0x2, 0x8}}, {0x8, 0x9f, {0x2, 0x88}}, {0xb, 0x4, {0x0, 0x3ff}}, {0x2298, 0x4, {0x3}}, {0x8001, 0x8, {0x2, 0xfffffff7}}, {0x7, 0x4, {0x0, 0x91d}}, {0x5, 0x5, {0x2, 0x1}}, {0x9, 0x4a, {0x1, 0x6}}, {0x1, 0x80, {0x1, 0x1}}, {0x1, 0xa817, {0x2, 0xffffffff}}]}}}, {{0x254, 0x1, {{0x0, 0x400}, 0x3e, 0x1, 0x2, 0x2, 0x1c, 'syz1\x00', "ccd85daa428b62f5f925a5551336485fd25681a9faffae3ccc83508ff95f2662", "c1fb38c2fdb5779f4a04bc63c748c533ae3d2f60c3f629fce1123c46a9764140", [{0x4, 0xffc0, {0x0, 0xc}}, {0x9, 0xcb40, {0x3, 0x1}}, {0x12, 0x4, {0x0, 0x3}}, {0x7, 0x7fff, {0x0, 0x3}}, {0x3, 0x1, {0x0, 0x9}}, {0x80, 0x21f, {0x2, 0x7fffffff}}, {0x7, 0x7, {0x1, 0x8}}, {0x69, 0x6, {0x2}}, {0x8, 0x8, {0x1, 0xa43e}}, {0xd2f, 0xfc, {0x2, 0x2}}, {0x1000, 0x6, {0x1, 0x408000}}, {0x7, 0x2, {0x3, 0xfffffe01}}, {0x6, 0x7, {0x1, 0x5}}, {0x5, 0x3, {0x0, 0x3}}, {0x84, 0x1000, {0x3, 0x7fff}}, {0x4, 0x8, {0x3, 0xa}}, {0x800, 0x5, {0x2, 0x7f}}, {0x3ff, 0xffff, {0x1, 0x1f}}, {0x2, 0x3, {0x1}}, {0x44, 0xd, {0x2, 0x6}}, {0x3, 0x8000, {0x3, 0x1}}, {0x8, 0xc, {0x2, 0x3}}, {0x4, 0x3, {0x0, 0x5}}, {0x0, 0x1, {0x2, 0x7}}, {0x40, 0xfffb, {0x2, 0x8}}, {0x8, 0x9, {0x2, 0x7}}, {0x2, 0xf, {0x2, 0x4d1}}, {0x6, 0x4, {0x2, 0x81}}, {0xfff, 0x7, {0x3, 0x3}}, {0x53d, 0x1ff, {0x1, 0x8}}, {0xfff9, 0x99b9, {0x2, 0x5ca7}}, {0x100, 0x400, {0x3, 0x8}}, {0x7ff, 0x1, {0x2, 0x5}}, {0x7fff, 0x0, {0x1, 0x5}}, {0x7ff, 0x800, {0x2, 0x39}}, {0x8, 0x800, {0x0, 0x4}}, {0x8, 0x7ff, {0x3}}, {0x0, 0x44, {0x3, 0x3}}, {0x9, 0x30, {0x1, 0x7ff}}, {0x8001, 0x81, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x95}, 0x6, 0x2, 0x6, 0x5, 0x28, 'syz0\x00', "5cf7b26333eb99d7299b243e6b1913322916a1d6189a39fe5519a8479785f974", "5311b5ffbdb96e059b4d840227123b8afe0b4c6a856a65a0ddb82b3ad6e8ff3a", [{0x5, 0x8, {0x1, 0xfffffffb}}, {0xffff, 0x6, {0x3, 0x1}}, {0x5, 0x2f31, {0x1, 0xcd}}, {0x0, 0xe00, {0x1, 0x5}}, {0xa, 0x3, {0x1, 0x51b}}, {0x3, 0xf, {0x3, 0x4}}, {0xd2, 0x1bd, {0x0, 0x8001}}, {0x4, 0x3, {0x1, 0x3}}, {0x9, 0xfff9, {0x2}}, {0xb227, 0x0, {0x3, 0x5}}, {0xff, 0xef, {0x0, 0x10001}}, {0x6, 0x7, {0x3, 0x1000}}, {0x0, 0xfff8, {0x3, 0x9044}}, {0x5ad, 0xf, {0x2}}, {0xfff7, 0x9e8, {0x3, 0x8}}, {0x7, 0xb, {0x3, 0x2}}, {0x6, 0x5, {0x3, 0x4}}, {0x100, 0x3, {0x6e73d3a92796dbe7, 0x7f}}, {0x6, 0x0, {0x1, 0x6}}, {0x2, 0x4, {0x0, 0x7}}, {0x8, 0xfffe, {0x0, 0x9}}, {0x7c3e, 0x9d79, {0x3, 0x7}}, {0x101, 0x4, {0x3, 0x8}}, {0xb52d, 0x6, {0x3, 0x8}}, {0xe, 0x5, {0x0, 0xd9}}, {0x7c76, 0x2, {0x0, 0x3ff}}, {0xffff, 0x7, {0x0, 0x7}}, {0x3, 0x8001, {0x1, 0xf194}}, {0x1, 0x0, {0x0, 0x7}}, {0x27, 0x1ff, {0x0, 0x6}}, {0x5, 0x6, {0x1, 0x3}}, {0x0, 0x400, {0x1, 0x9}}, {0xbf, 0x7c6, {0x1, 0x6}}, {0xd, 0xdcb, {0x1, 0x2}}, {0x7, 0x0, {0x2, 0x81}}, {0x4, 0x5, {0x2, 0x2}}, {0x7f, 0x7}, {0x6, 0x0, {0x3, 0x4}}, {0xd60, 0x0, {0x0, 0x1}}, {0xfff, 0x1000}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x2040}, 0x8c4)
r6 = syz_clone(0x82001000, 0x0, 0x0, &(0x7f0000001840), 0x0, 0x0)
wait4(r6, 0x0, 0x40000000, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0, 0x0, 0x100000000000000}], 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)

10m58.562009164s ago: executing program 33 (id=2255):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10)
socket(0x400000000010, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r2 = socket(0x28, 0x1, 0x0)
r3 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65a, 0x10, 0x40c, 0x40}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}})
io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0xbb8, 0x0, 0x5, 0x3, 0x0, 0x0, {0x8, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0x9246}, 0x1, 0x1, 0x1, 0x8000, 0x2, 'syz0\x00', "07da832ce3532fb157e054cea2c0874acec8a7d4d0c8ee35804a7c660a4b7a5d", "2032b109b0d6e4da14510574c1e660232512ed29a827653d6b0cc5f76af6a8b9", [{0x401, 0x8, {0x3, 0xc}}, {0x2, 0x8, {0x3, 0x1}}, {0x81, 0xffd7, {0x0, 0x4}}, {0x2, 0x0, {0x2, 0x2}}, {0xfff, 0x7a, {0x2, 0x9}}, {0xfffd, 0x9, {0x2, 0x8}}, {0x6, 0x6, {0x3, 0x2}}, {0x0, 0x2, {0x0, 0x9}}, {0x400, 0x8001, {0x0, 0x9}}, {0x2, 0x6, {0x20c3dda00d344176, 0x6}}, {0xfff, 0xc69, {0x2}}, {0x1, 0x6, {0x0, 0xfffffffb}}, {0x9, 0x9, {0x0, 0x3}}, {0xf, 0x5, {0x1}}, {0x8, 0x1ff, {0x0, 0x100}}, {0x6, 0x10, {0x0, 0x9}}, {0x5, 0x5, {0x1, 0x1}}, {0xfc01, 0x2095, {0x0, 0xff}}, {0x75ed, 0x7f, {0x2, 0x9}}, {0xfff8, 0xfff2, {0x0, 0x8}}, {0x1000, 0xd, {0x2, 0x4800000}}, {0x7f48, 0x6, {0x0, 0x8}}, {0x401, 0xffff, {0x1, 0x1fffe000}}, {0x2, 0xcb, {0x2, 0x9}}, {0x9, 0x1, {0x0, 0x4}}, {0x4, 0x4, {0x0, 0xa}}, {0x8, 0x7, {0x3, 0x2}}, {0x3, 0x6, {0x3, 0x7f}}, {0x7, 0x1, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x4}}, {0x8f, 0xfffe, {0x2, 0x9}}, {0x100, 0x4, {0x1, 0xe}}, {0x3, 0x200, {0x1, 0x7}}, {0x623, 0x7, {0x0, 0xe}}, {0x2, 0x7f, {0x3, 0x10000}}, {0xfffa, 0x0, {0x0, 0x5}}, {0x0, 0x5, {0x1, 0x1000}}, {0x6, 0x8000, {0x0, 0x4}}, {0x1, 0x9, {0x1, 0x97}}, {0x3, 0xe3b, {0x2, 0x8b}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x8, 0x8, 0x2, 0x4db0, 0x14, 'syz0\x00', "76e2e14faf02881970fff740e226d6936efc07c3ac3ff683cff8b2816dbedfa8", "ec04a78808eb2f66d81c044fb21810774b5886b24e23e60e943713c0840a22cf", [{0x800, 0x8, {0x2, 0x80000001}}, {0x7e28, 0x6, {0x3, 0x4}}, {0xfff8, 0x0, {0x3, 0xfffffffd}}, {0x1, 0xb, {0x1, 0x9}}, {0x1000, 0xfc70, {0x3, 0x4}}, {0x1, 0x7, {0x2, 0x1}}, {0x9, 0x28, {0x3, 0x4}}, {0x6, 0x9, {0x0, 0x7}}, {0x7fff, 0x8, {0x1, 0x1}}, {0x3, 0x9, {0x0, 0xffff}}, {0xd, 0x671b, {0x3, 0xfff}}, {0x101, 0x6, {0x1, 0x8}}, {0x1000, 0x4, {0x0, 0x1}}, {0x1, 0x3, {0x3, 0x800}}, {0xd4d, 0xffff, {0x1, 0x6}}, {0x0, 0x9, {0x0, 0xffffff00}}, {0x6, 0xa9, {0x2, 0xdec}}, {0x8, 0x747a, {0x2, 0x7798}}, {0xfff, 0x9, {0x2, 0x6}}, {0x3, 0x7, {0x1, 0x7}}, {0x3, 0x2, {0x3, 0x7}}, {0x10, 0x3, {0x3, 0x9}}, {0x7ebf, 0x7, {0x1, 0x1}}, {0x1, 0x2, {0x3, 0x5}}, {0x4, 0x9, {0x2, 0x2}}, {0xa96, 0xb000, {0x0, 0x5}}, {0x8074, 0x7, {0x3, 0x5}}, {0x0, 0x800, {0x3, 0x4}}, {0x7fff, 0x4, {0x2, 0x6}}, {0x82b, 0x8, {0x0, 0x20000}}, {0x7, 0x1c6, {0x3, 0x80000000}}, {0x0, 0x101, {0x0, 0x4}}, {0xc473, 0x4, {0x0, 0xb1b2}}, {0x3, 0x5, {0x1, 0x7}}, {0x7, 0xf, {0x3, 0x4}}, {0x7, 0x1000, {0x0, 0x1e}}, {0xd82, 0x3, {0x0, 0x3}}, {0x8, 0x2}, {0x8, 0x2, {0x3, 0x4}}, {0x7, 0x9d1b, {0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x7, 0x7, 0x2, 0x2, 0x9, 'syz0\x00', "e8fa7838d17658aaae88d85a4774f258ce4fbdcf7da51e91e5a2ef4cb780baa9", "ab59f7f766fe1fa52b3e90ca96919b69fe3d6387ea975a76cfeed5d7fbdd03ce", [{0x3, 0x100, {0x1, 0x6}}, {0x8, 0xb2, {0x1, 0x6}}, {0x58, 0x8, {0x2, 0x2}}, {0x9, 0x1ff, {0x0, 0x8001}}, {0x2, 0x83, {0x2, 0x8001}}, {0x6, 0x5, {0x3, 0xffff}}, {0x3, 0x7f, {0x1, 0x7fffffff}}, {0x5, 0x9, {0x0, 0x10000}}, {0x8, 0x4, {0x2, 0x9}}, {0xffff, 0x2e0, {0x2, 0x3d}}, {0x1, 0x2, {0x1, 0x5}}, {0x3, 0x40, {0x0, 0xffff}}, {0xd, 0x3f4a, {0x1, 0xcc7}}, {0x7, 0x0, {0x3, 0x3ff}}, {0x1, 0x9, {0x1, 0xfffffffb}}, {0x2, 0x0, {0x2, 0x1}}, {0x6, 0x5, {0x3}}, {0x4, 0x846d, {0x3, 0x6}}, {0x9, 0x12e, {0x2, 0x401}}, {0x2, 0x2, {0x1, 0x8}}, {0xf000, 0x4, {0x2, 0x400}}, {0x7f, 0x4, {0x0, 0x3}}, {0x101, 0x7, {0x1, 0x6}}, {0xfff, 0x1e, {0x1, 0x39}}, {0x1ff, 0x3, {0x0, 0x5}}, {0xfe00, 0x15, {0x0, 0xfff}}, {0x6, 0x1, {0x0, 0xfc000000}}, {0x8, 0x5, {0x1}}, {0x3a00, 0x6, {0x0, 0x8e0}}, {0x5, 0x7f, {0x1, 0x101}}, {0xa4ec, 0x6, {0x2, 0x8}}, {0x8, 0x9f, {0x2, 0x88}}, {0xb, 0x4, {0x0, 0x3ff}}, {0x2298, 0x4, {0x3}}, {0x8001, 0x8, {0x2, 0xfffffff7}}, {0x7, 0x4, {0x0, 0x91d}}, {0x5, 0x5, {0x2, 0x1}}, {0x9, 0x4a, {0x1, 0x6}}, {0x1, 0x80, {0x1, 0x1}}, {0x1, 0xa817, {0x2, 0xffffffff}}]}}}, {{0x254, 0x1, {{0x0, 0x400}, 0x3e, 0x1, 0x2, 0x2, 0x1c, 'syz1\x00', "ccd85daa428b62f5f925a5551336485fd25681a9faffae3ccc83508ff95f2662", "c1fb38c2fdb5779f4a04bc63c748c533ae3d2f60c3f629fce1123c46a9764140", [{0x4, 0xffc0, {0x0, 0xc}}, {0x9, 0xcb40, {0x3, 0x1}}, {0x12, 0x4, {0x0, 0x3}}, {0x7, 0x7fff, {0x0, 0x3}}, {0x3, 0x1, {0x0, 0x9}}, {0x80, 0x21f, {0x2, 0x7fffffff}}, {0x7, 0x7, {0x1, 0x8}}, {0x69, 0x6, {0x2}}, {0x8, 0x8, {0x1, 0xa43e}}, {0xd2f, 0xfc, {0x2, 0x2}}, {0x1000, 0x6, {0x1, 0x408000}}, {0x7, 0x2, {0x3, 0xfffffe01}}, {0x6, 0x7, {0x1, 0x5}}, {0x5, 0x3, {0x0, 0x3}}, {0x84, 0x1000, {0x3, 0x7fff}}, {0x4, 0x8, {0x3, 0xa}}, {0x800, 0x5, {0x2, 0x7f}}, {0x3ff, 0xffff, {0x1, 0x1f}}, {0x2, 0x3, {0x1}}, {0x44, 0xd, {0x2, 0x6}}, {0x3, 0x8000, {0x3, 0x1}}, {0x8, 0xc, {0x2, 0x3}}, {0x4, 0x3, {0x0, 0x5}}, {0x0, 0x1, {0x2, 0x7}}, {0x40, 0xfffb, {0x2, 0x8}}, {0x8, 0x9, {0x2, 0x7}}, {0x2, 0xf, {0x2, 0x4d1}}, {0x6, 0x4, {0x2, 0x81}}, {0xfff, 0x7, {0x3, 0x3}}, {0x53d, 0x1ff, {0x1, 0x8}}, {0xfff9, 0x99b9, {0x2, 0x5ca7}}, {0x100, 0x400, {0x3, 0x8}}, {0x7ff, 0x1, {0x2, 0x5}}, {0x7fff, 0x0, {0x1, 0x5}}, {0x7ff, 0x800, {0x2, 0x39}}, {0x8, 0x800, {0x0, 0x4}}, {0x8, 0x7ff, {0x3}}, {0x0, 0x44, {0x3, 0x3}}, {0x9, 0x30, {0x1, 0x7ff}}, {0x8001, 0x81, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x95}, 0x6, 0x2, 0x6, 0x5, 0x28, 'syz0\x00', "5cf7b26333eb99d7299b243e6b1913322916a1d6189a39fe5519a8479785f974", "5311b5ffbdb96e059b4d840227123b8afe0b4c6a856a65a0ddb82b3ad6e8ff3a", [{0x5, 0x8, {0x1, 0xfffffffb}}, {0xffff, 0x6, {0x3, 0x1}}, {0x5, 0x2f31, {0x1, 0xcd}}, {0x0, 0xe00, {0x1, 0x5}}, {0xa, 0x3, {0x1, 0x51b}}, {0x3, 0xf, {0x3, 0x4}}, {0xd2, 0x1bd, {0x0, 0x8001}}, {0x4, 0x3, {0x1, 0x3}}, {0x9, 0xfff9, {0x2}}, {0xb227, 0x0, {0x3, 0x5}}, {0xff, 0xef, {0x0, 0x10001}}, {0x6, 0x7, {0x3, 0x1000}}, {0x0, 0xfff8, {0x3, 0x9044}}, {0x5ad, 0xf, {0x2}}, {0xfff7, 0x9e8, {0x3, 0x8}}, {0x7, 0xb, {0x3, 0x2}}, {0x6, 0x5, {0x3, 0x4}}, {0x100, 0x3, {0x6e73d3a92796dbe7, 0x7f}}, {0x6, 0x0, {0x1, 0x6}}, {0x2, 0x4, {0x0, 0x7}}, {0x8, 0xfffe, {0x0, 0x9}}, {0x7c3e, 0x9d79, {0x3, 0x7}}, {0x101, 0x4, {0x3, 0x8}}, {0xb52d, 0x6, {0x3, 0x8}}, {0xe, 0x5, {0x0, 0xd9}}, {0x7c76, 0x2, {0x0, 0x3ff}}, {0xffff, 0x7, {0x0, 0x7}}, {0x3, 0x8001, {0x1, 0xf194}}, {0x1, 0x0, {0x0, 0x7}}, {0x27, 0x1ff, {0x0, 0x6}}, {0x5, 0x6, {0x1, 0x3}}, {0x0, 0x400, {0x1, 0x9}}, {0xbf, 0x7c6, {0x1, 0x6}}, {0xd, 0xdcb, {0x1, 0x2}}, {0x7, 0x0, {0x2, 0x81}}, {0x4, 0x5, {0x2, 0x2}}, {0x7f, 0x7}, {0x6, 0x0, {0x3, 0x4}}, {0xd60, 0x0, {0x0, 0x1}}, {0xfff, 0x1000}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x2040}, 0x8c4)
r6 = syz_clone(0x82001000, 0x0, 0x0, &(0x7f0000001840), 0x0, 0x0)
wait4(r6, 0x0, 0x40000000, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0, 0x0, 0x100000000000000}], 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES64], 0x0)

2m36.645406325s ago: executing program 1 (id=3612):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121202, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0)

2m35.731848066s ago: executing program 1 (id=3613):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000020000000000000000000000095000000000020002471f25b3740c58237333cd39c65880fd874d76bee5796884af9f6ee8c42ce74f3c2fa5dbc7154706883617d5119522adc1b53d7a0f2900e0131ed89a9d242c4b4d2fef395d38a25a1564e5bd38baf7c6453d87d3cea0000000000000080a71599b4bbe59ab04df9a03d743d94d7eb0eb48716f2bd7d54c4f600d95c2db3aaa064761a90ce1f2d658810e72a39dc487e49b883dd43c7b9f21930572de8b19d9a4bb3549fef5fa928180bffc85e91d5035600"/215], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000004680)=0x80, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x8, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442})
keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x6, &(0x7f0000000140)={0x11, "03b6fd853ff9080ef36c2bd4e33982e235c9bf5f6e38f2d4315684f0a42a645872"}})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/82, 0x52}], 0x1}, 0x0)

2m35.083572207s ago: executing program 5 (id=3618):
syz_open_dev$evdev(&(0x7f0000006000), 0x2, 0x2300)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x5c}}, 0x24044091)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32], 0xb4}}, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="02030e00d335b396a6b188a8000000c70000000000008100", 0x18, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000980)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0xfff, 0xffffffff, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x65, 0x0, 0xfb, 0x2f, 0x0, @empty, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x5, [{@loopback, 0xa}]}, @rr={0x7, 0x17, 0x4e, [@local, @multicast2, @empty, @remote, @multicast1]}, @noop]}}}}})
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRESDEC], 0x54}, 0x1, 0x0, 0x0, 0x40688c5}, 0x44000)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r6 = eventfd(0x40008004)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r6})
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

2m33.297285068s ago: executing program 5 (id=3622):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, 0x0, 0x0, 0x4}, 0x20)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0)
syz_usb_ep_read(r3, 0xf, 0xffffffffffffffd2, 0x0)
r4 = fanotify_init(0x81, 0x40000)
fanotify_mark(r4, 0x105, 0x40001032, r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20)
listen(r9, 0x7)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10)
listen(r8, 0x7)
read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020)

2m32.046584414s ago: executing program 1 (id=3625):
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000)
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x11, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r4 = inotify_init()
ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0)

2m31.502197987s ago: executing program 1 (id=3628):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0xa, 0x6, 0x72, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7, 0x20, 0x8, 0x2}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x0, 0x0, 0x8000}, 0x50)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x927, 0x70bd28, 0x6800000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000440)={'ip_vti0\x00', r8, 0x80, 0x1, 0x6, 0x287, {{0x1b, 0x4, 0x2, 0x4, 0x6c, 0x64, 0x0, 0x7, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x17}, {[@noop, @ra={0x94, 0x4, 0x5}, @rr={0x7, 0x1f, 0xa1, [@dev={0xac, 0x14, 0x14, 0x12}, @loopback, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @timestamp_prespec={0x44, 0xc, 0xd1, 0x3, 0x9, [{@local, 0x8000}]}, @rr={0x7, 0xb, 0xf4, [@remote, @multicast1]}, @lsrr={0x83, 0x7, 0x33, [@empty]}, @generic={0x94, 0x10, "13a9d96228fc5d2cddd756e734ae"}, @end, @noop, @end]}}}}})
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000540)={0x0, @initdev, @private}, &(0x7f0000000580)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000006c0)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x700, 0x80, 0xd3, 0x7, {{0x31, 0x4, 0x3, 0x0, 0xc4, 0x66, 0x0, 0x4, 0x2f, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0xb, 0xfc, [@dev={0xac, 0x14, 0x14, 0x31}, @broadcast]}, @ssrr={0x89, 0xf, 0x27, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_prespec={0x44, 0x1c, 0xa9, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0x5}, {@local, 0x99}]}, @end, @rr={0x7, 0x7, 0x4b, [@rand_addr=0x64010102]}, @timestamp={0x44, 0x20, 0x28, 0x0, 0x5, [0x3, 0x7f, 0x99, 0x7, 0xfffffffa, 0x6, 0x3]}, @lsrr={0x83, 0x27, 0x26, [@empty, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @ssrr={0x89, 0x23, 0x99, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @remote, @local, @remote, @loopback, @local]}, @lsrr={0x83, 0x7, 0xe, [@local]}]}}}}})
ioctl$VT_OPENQRY(r9, 0x5600, &(0x7f00000001c0))

2m29.996914849s ago: executing program 1 (id=3632):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$cachefiles(0xffffff9c, &(0x7f0000000400), 0x90200, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x24000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$FIONREAD(r2, 0x80047456, &(0x7f0000000180))
r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r3, r3, &(0x7f0000000080), 0x7f03)

2m29.00177617s ago: executing program 1 (id=3634):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2a42)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r6, 0xab00, r7)
ioctl$NBD_DO_IT(r6, 0xab03)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x20c1b, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x0, 0x0, 0x7cce8c743ee810dd})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x84, 0xe9a, 0x0, 0x5, 0x9, 0xc, 0x1, 0x0, 0x1})

2m28.64324878s ago: executing program 5 (id=3637):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x82000)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000003c0))
r2 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="4a74cf41fcecf3d4f4d01fb7d4c76aa31a845a62a901946eff9bf3c241ecf3d0ca0800674cee787565e34845f191848ab0ee7e3ac2e73c4d70c49e80f0156396e6086caf0fc89d4ff18e2f6309cc025cff9abd633c63b5f16c1d2595a85c299385051485a4748f040287eb34e82a90d091d223411231afc89d55a60dacd76aa8dca1b7b25c1c4023cb804914b63e7fb8d5e30c32874fd83f1196629ec08f35652514"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x40880)

2m24.897891549s ago: executing program 5 (id=3646):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x1901)
move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x8b2c, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x41, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r4, 0x0, 0x0, 0x1001f0)
r5 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00')
preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0, 0x27}], 0x2, 0x0, 0x5)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @null, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
recvmmsg(0xffffffffffffffff, 0x0, 0xffffffa6, 0x0, 0x0)
io_uring_setup(0x85a, &(0x7f0000000180)={0x0, 0x58b9, 0x1, 0x2, 0x383})
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r9 = dup3(r7, r8, 0x0)
ioctl$MON_IOCG_STATS(r9, 0xc0109207, &(0x7f0000000180))
close_range(r6, 0xffffffffffffffff, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)

2m22.173282983s ago: executing program 5 (id=3656):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bind$ax25(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000"], 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069000c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)

2m21.979103838s ago: executing program 5 (id=3658):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r3, 0x0, 0x0}, 0x10)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x400, 0xa})

2m20.986800591s ago: executing program 34 (id=3658):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r3, 0x0, 0x0}, 0x10)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x400, 0xa})

2m13.071949037s ago: executing program 35 (id=3634):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2a42)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r6, 0xab00, r7)
ioctl$NBD_DO_IT(r6, 0xab03)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x20c1b, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x0, 0x0, 0x7cce8c743ee810dd})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x84, 0xe9a, 0x0, 0x5, 0x9, 0xc, 0x1, 0x0, 0x1})

12.512563053s ago: executing program 6 (id=4003):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x88}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x7b}, 0x2c)
r1 = socket$kcm(0xa, 0x2, 0x0)
mkdir(&(0x7f0000000140)='./file1\x00', 0x1bb)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="077065fb27863f5c058197b339d11c6f8e555e103a873f667a01ac02005209b6dfd779bea88fe9061fe5130cfe45b6ff485edfcad5fc2f1c6a33fc7d984e269016cd4e33126f5c163b67f8fba0e853fc7f33d1b38e147634d33e10432d5cdce9a0809556d21857813a95d7357312f31e7b0a7b4924c7bd55f6a96ccaf519c5d8432cd40c32c1"], 0x8)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x0, 0x7f, 0x3, 0xffffffffffffffff, 0x6})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
close_range(r1, r0, 0x2)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00')

12.226198985s ago: executing program 6 (id=4005):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
getsockopt$ax25_int(r4, 0x101, 0xa, &(0x7f00000023c0), &(0x7f0000002400)=0x4)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0)
socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
close_range(r5, 0xffffffffffffffff, 0x0)

10.820704644s ago: executing program 6 (id=4007):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf32(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x0, 0x9b, 0x5, 0xffffffff7fffffff, 0x2, 0x3, 0x8, 0x2a, 0x38, 0x329, 0xb, 0x0, 0x20, 0x1, 0x9, 0x7ff}, [{0x2, 0x5dbf, 0x2, 0x6, 0x8000, 0x5, 0x400, 0xb}], "", ['\x00', '\x00']}, 0x258)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x1c, 0x0, 0x38, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7b}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0)
readv(r3, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
accept(r2, 0x0, &(0x7f0000000100))
ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080))

10.225303091s ago: executing program 8 (id=4008):
r0 = syz_io_uring_setup(0x49e, &(0x7f0000000500)={0x0, 0x69af, 0x1, 0x0, 0x20a}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000240))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
mknod(0x0, 0xc000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x9c, 0xc9, @any, 0x1, 0x4}}}, 0xe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$pppl2tp(0x18, 0x1, 0x1)
openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000400)=<r7=>0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x24008800)
creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}})
io_uring_enter(r5, 0x3516, 0x483, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)

9.801254593s ago: executing program 3 (id=4010):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x28)
sched_setaffinity(0x0, 0x54, &(0x7f0000000180)=0x1400200bce)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x7)
socket(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
socketpair(0x2a, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = signalfd4(r3, &(0x7f0000000080)={[0x4]}, 0x8, 0x1000)
setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f00000003c0)={{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e24, 0xffffffc6, @remote, 0x6876}, 0xffffffffffffffff, {[0x8, 0x1, 0x9, 0x16, 0x4190b869, 0x978, 0x994, 0xffffffff]}}, 0x5c)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/173)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000280)={0x48})
socket(0x8000000010, 0x2, 0x0)

9.061698829s ago: executing program 7 (id=4012):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$video(0x0, 0xa7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a64000000060a0b0400000000000000000200000044000480400001800a0001006d61746368000000300002800c00010072617465657374001f0003007e6b92c43235dc7e977221f83c74c4183f179e65022fc067b787cd67b6d9000900020073797a3200000000140000001100200000000000000000000500000a"], 0x8c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x190da)

7.470938613s ago: executing program 8 (id=4013):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x8}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/170, 0xaa, 0x0, 0x39}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/181, 0xb5, 0x1, 0x21}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0})
dup3(r7, r6, 0x80000)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x4c, 0x1000000, 0x0})

6.766241999s ago: executing program 7 (id=4014):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30, 0x2b}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x4, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x2000000000000009, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
getpgid(0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0xee01}, 0xc)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
getdents64(r4, &(0x7f0000000400)=""/159, 0x9f)
sendmsg$NFT_BATCH(r0, &(0x7f0000010bc0)={0x0, 0x0, &(0x7f0000010b80)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x205, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x204, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)

6.483456143s ago: executing program 8 (id=4015):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
socket$netlink(0x10, 0x3, 0x10)
r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r4, 0xab00, r5)

6.26358682s ago: executing program 6 (id=4016):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="1d4c23583b0cd1a890993f7a9daab383b67c7f", 0x13}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50)

5.232636861s ago: executing program 6 (id=4018):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff08"], 0x0)
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x90000000)

5.213738546s ago: executing program 7 (id=4019):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000020000000000000000000000095000000000020002471f25b3740c58237333cd39c65880fd874d76bee5796884af9f6ee8c42ce74f3c2fa5dbc7154706883617d5119522adc1b53d7a0f2900e0131ed89a9d242c4b4d2fef395d38a25a1564e5bd38baf7c6453d87d3cea0000000000000080a71599b4bbe59ab04df9a03d743d94d7eb0eb48716f2bd7d54c4f600d95c2db3aaa064761a90ce1f2d658810e72a39dc487e49b883dd43c7b9f21930572de8b19d9a4bb3549fef5fa928180bffc85e91d5035600"/215], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000004680)=0x80, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x8, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442})
keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x6, 0x0})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/82, 0x52}], 0x1}, 0x0)

5.030079708s ago: executing program 8 (id=4020):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="090000000000000000000094ef15070000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000200)=""/99)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3, 0x0, 0xfffffffffffffffe}, 0x13)
setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0)
setitimer(0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'dummy0\x00', @ifru_names='rose0\x00'})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c)
close(r5)
syz_clone3(&(0x7f0000001240)={0x200200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x838, 0x2)
accept4(r4, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0x80, 0x80000)

4.198070822s ago: executing program 3 (id=4021):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
socket$netlink(0x10, 0x3, 0x10)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x84, 0xe9a, 0x0, 0x5, 0x9, 0xc, 0x1, 0x0, 0x1})
bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

4.068363591s ago: executing program 4 (id=4022):
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, &(0x7f0000000000))

3.930946163s ago: executing program 4 (id=4023):
socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000100))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x927, 0x70bd28, 0x6800000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000440)={'ip_vti0\x00', r8, 0x80, 0x1, 0x6, 0x287, {{0x1b, 0x4, 0x2, 0x4, 0x6c, 0x64, 0x0, 0x7, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x17}, {[@noop, @ra={0x94, 0x4, 0x5}, @rr={0x7, 0x1f, 0xa1, [@dev={0xac, 0x14, 0x14, 0x12}, @loopback, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @timestamp_prespec={0x44, 0xc, 0xd1, 0x3, 0x9, [{@local, 0x8000}]}, @rr={0x7, 0xb, 0xf4, [@remote, @multicast1]}, @lsrr={0x83, 0x7, 0x33, [@empty]}, @generic={0x94, 0x10, "13a9d96228fc5d2cddd756e734ae"}, @end, @noop, @end]}}}}})
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000540)={0x0, @initdev, @private}, &(0x7f0000000580)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000006c0)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x700, 0x80, 0xd3, 0x7, {{0x31, 0x4, 0x3, 0x0, 0xc4, 0x66, 0x0, 0x4, 0x2f, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0xb, 0xfc, [@dev={0xac, 0x14, 0x14, 0x31}, @broadcast]}, @ssrr={0x89, 0xf, 0x27, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_prespec={0x44, 0x1c, 0xa9, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0x5}, {@local, 0x99}]}, @end, @rr={0x7, 0x7, 0x4b, [@rand_addr=0x64010102]}, @timestamp={0x44, 0x20, 0x28, 0x0, 0x5, [0x3, 0x7f, 0x99, 0x7, 0xfffffffa, 0x6, 0x3]}, @lsrr={0x83, 0x27, 0x26, [@empty, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @ssrr={0x89, 0x23, 0x99, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @remote, @local, @remote, @loopback, @local]}, @lsrr={0x83, 0x7, 0xe, [@local]}]}}}}})
ioctl$VT_OPENQRY(r9, 0x5600, &(0x7f00000001c0))

3.905395491s ago: executing program 8 (id=4024):
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
socket$kcm(0x1e, 0x4, 0x0)
socket(0x40000000015, 0xa, 0x15f)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
close(0x3)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r1, 0x4, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000900)={0x4, 0xfe, 0x3, 0x30, 0x1, 0x3, 0x4, 0x0, 0x7, 0x7, 0x2, 0x71, 0x2, 0x3}, 0xe)
sendto$inet6(r6, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)

3.116787111s ago: executing program 3 (id=4025):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000020000000000000000000000095000000000020002471f25b3740c58237333cd39c65880fd874d76bee5796884af9f6ee8c42ce74f3c2fa5dbc7154706883617d5119522adc1b53d7a0f2900e0131ed89a9d242c4b4d2fef395d38a25a1564e5bd38baf7c6453d87d3cea0000000000000080a71599b4bbe59ab04df9a03d743d94d7eb0eb48716f2bd7d54c4f600d95c2db3aaa064761a90ce1f2d658810e72a39dc487e49b883dd43c7b9f21930572de8b19d9a4bb3549fef5fa928180bffc85e91d5035600"/215], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000004680)=0x80, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x8, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442})
keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x6, &(0x7f0000000140)={0x11, "03b6fd853ff9080ef36c2bd4e33982e235c9bf5f6e38f2d4315684f0a42a645872"}})
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/82, 0x52}], 0x1}, 0x0)

3.040490599s ago: executing program 7 (id=4026):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
socket$netlink(0x10, 0x3, 0x10)
r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r4, 0xab00, r5)

2.930489337s ago: executing program 8 (id=4027):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r3=>0x0})
r4 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r4, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0)
r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
add_key(0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c"], 0xd4}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x44e, 0x120b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xcc, 0x80, 0x80, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xa9, 0x1, 0x1, {0x22, 0x955}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0xf, 0x5}}}}}]}}]}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x106, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="28040000", @ANYRES16=r2, @ANYBLOB="05002abd7000fddbdf2501000000060006004e24000004040880bc00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240001000000000000000000000000000000000000000000000000000000000000000000200004000a004e2000000001ff01000000000000000000000000000102000000240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c08000300070000004c02008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff2402098058000080060001000200000041000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff050003000100000064000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb05000300026688623ddf1809a900000014000200000000000000000000000000000000010500030002000000dc000080060001000a0000001400020000000000000000000000ffffac1414aa05000300030000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000000500030001000000060001000200000008000200640101000500030000000000060001000200000008000200ac1e0101050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff020000000000000000000000000001050003000200000064000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d41d86ded57630e5493c285aca40065cb6311be696b1400040002004e2200000000000000000000000008000100", @ANYRES32=r3], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x200000d4)

1.762049869s ago: executing program 6 (id=4028):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
close_range(r2, r2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x16)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="1d4c23583b0cd1a890993f7a9daab383b67c7fb083ac09df7271a95c294866dbbc38ece9", 0x24}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.760242712s ago: executing program 7 (id=4029):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="1d4c23583b0cd1a890993f7a9daab383b67c7f", 0x13}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50)

1.345409113s ago: executing program 3 (id=4030):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
syz_emit_vhci(0x0, 0x0)

1.161119004s ago: executing program 4 (id=4031):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000240), &(0x7f0000000380)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

932.389485ms ago: executing program 4 (id=4032):
r0 = syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc}, 0x0, &(0x7f0000000140)=<r1=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r2, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

765.193561ms ago: executing program 4 (id=4033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30, 0x2b}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x4, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x2000000000000009, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
getpgid(0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0xee01}, 0xc)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x800, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
getdents64(r4, &(0x7f0000000400)=""/159, 0x9f)
sendmsg$NFT_BATCH(r0, &(0x7f0000010bc0)={0x0, 0x0, &(0x7f0000010b80)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x205, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x204, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)

370.898995ms ago: executing program 3 (id=4034):
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, &(0x7f0000000000))

169.530823ms ago: executing program 7 (id=4035):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000020000000000000000000000095000000000020002471f25b3740c58237333cd39c65880fd874d76bee5796884af9f6ee8c42ce74f3c2fa5dbc7154706883617d5119522adc1b53d7a0f2900e0131ed89a9d242c4b4d2fef395d38a25a1564e5bd38baf7c6453d87d3cea0000000000000080a71599b4bbe59ab04df9a03d743d94d7eb0eb48716f2bd7d54c4f600d95c2db3aaa064761a90ce1f2d658810e72a39dc487e49b883dd43c7b9f21930572de8b19d9a4bb3549fef5fa928180bffc85e91d5035600"/215], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000004680)=0x80, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x8, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442})
keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x6, &(0x7f0000000140)={0x11, "03b6fd853ff9080ef36c2bd4e33982e235c9bf5f6e38f2d4315684f0a42a645872"}})
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/82, 0x52}], 0x1}, 0x0)

898.08µs ago: executing program 3 (id=4036):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00')
r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x1)
fchdir(r2)
r3 = fanotify_init(0x1, 0x400)
r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x15e)
readv(r3, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
fanotify_mark(r3, 0x1, 0x40001019, r4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
getdents64(r0, 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
fcntl$setstatus(r8, 0x4, 0x800)
r9 = getpid()
syz_pidfd_open(r9, 0x0)
ptrace$ARCH_SHSTK_STATUS(0x1e, r9, &(0x7f0000000000), 0x5005)
connect$bt_sco(r8, &(0x7f0000000080)={0x1f, @none}, 0x8)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)

0s ago: executing program 4 (id=4037):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000020000000000000000000000095000000000020002471f25b3740c58237333cd39c65880fd874d76bee5796884af9f6ee8c42ce74f3c2fa5dbc7154706883617d5119522adc1b53d7a0f2900e0131ed89a9d242c4b4d2fef395d38a25a1564e5bd38baf7c6453d87d3cea0000000000000080a71599b4bbe59ab04df9a03d743d94d7eb0eb48716f2bd7d54c4f600d95c2db3aaa064761a90ce1f2d658810e72a39dc487e49b883dd43c7b9f21930572de8b19d9a4bb3549fef5fa928180bffc85e91d5035600"/215], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000004680)=0x80, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
gettid()
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x8, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442})
keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x6, &(0x7f0000000140)={0x11, "03b6fd853ff9080ef36c2bd4e33982e235c9bf5f6e38f2d4315684f0a42a645872"}})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/82, 0x52}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

-71
[ 1295.956030][    C1] powermate: config urb returned -71
[ 1295.965113][    C1] powermate: config urb returned -71
[ 1295.973948][ T5871] usb 6-1: USB disconnect, device number 29
[ 1295.980873][    C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[ 1296.725574][T19634] netlink: 'syz.3.3428': attribute type 3 has an invalid length.
[ 1298.008577][ T5891] usb 2-1: USB disconnect, device number 105
[ 1299.131842][ T5891] usb 2-1: new full-speed USB device number 106 using dummy_hcd
[ 1299.772550][ T5891] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1299.803624][ T5891] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[ 1299.831383][ T5891] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1299.844434][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1300.080524][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.230160][T19662] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1300.238901][T19662] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1300.252520][ T5891] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1300.482857][   T30] audit: type=1400 audit(1762687192.654:2200): avc:  denied  { setcheckreqprot } for  pid=19647 comm="syz.5.3431" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 1300.803331][ T5891] usb 2-1: USB disconnect, device number 106
[ 1301.001422][ T5810] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[ 1301.152525][ T5810] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1301.166064][ T5810] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[ 1301.221504][ T5810] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1301.241362][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1301.272209][T19676] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1301.287461][T19676] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1301.307080][ T5810] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 1301.998636][   T10] usb 7-1: USB disconnect, device number 15
[ 1302.048562][T19689] netlink: 'syz.1.3442': attribute type 5 has an invalid length.
[ 1302.082856][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3442'.
[ 1302.184180][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3442'.
[ 1302.298744][   T30] audit: type=1400 audit(1762687194.604:2201): avc:  denied  { write } for  pid=19688 comm="syz.1.3442" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1303.706241][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3443'.
[ 1303.783633][T13735] block nbd1: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 1050 seconds
[ 1303.796703][T13735] block nbd1: Possible stuck request ffff888026c601c0: control (read@1024,1024B). Runtime 1050 seconds
[ 1303.821531][T13735] block nbd1: Possible stuck request ffff888026c60380: control (read@2048,1024B). Runtime 1050 seconds
[ 1303.833672][T13735] block nbd1: Possible stuck request ffff888026c60540: control (read@3072,1024B). Runtime 1050 seconds
[ 1305.899042][ T5810] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[ 1306.236416][ T5810] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1306.267041][ T5810] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[ 1306.741731][ T5810] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1306.752256][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1306.901157][T19730] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1306.908426][T19730] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1307.135279][ T5810] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 1307.243494][ T7303] Bluetooth: hci2: unexpected event for opcode 0x1003
[ 1307.292783][ T5810] usb 7-1: USB disconnect, device number 16
[ 1308.793791][T19760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19992 sclass=netlink_route_socket pid=19760 comm=syz.5.3461
[ 1309.549539][T19772] ocfs2: Bad value for 'barrier'
[ 1309.941609][T19778] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1311.342143][ T7303] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1311.351137][ T7303] Bluetooth: hci2: Injecting HCI hardware error event
[ 1311.361050][T13468] Bluetooth: hci2: hardware error 0x00
[ 1312.362203][T19792] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3467'.
[ 1312.378190][T19792] netlink: 'syz.6.3467': attribute type 7 has an invalid length.
[ 1312.386613][T19792] netlink: 'syz.6.3467': attribute type 8 has an invalid length.
[ 1312.394927][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3467'.
[ 1312.690403][   T10] usb 4-1: new full-speed USB device number 94 using dummy_hcd
[ 1312.857192][   T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1312.870532][   T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[ 1312.884111][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1312.907335][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1312.946359][T19796] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1312.968913][T19796] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1313.065756][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1313.380583][T13468] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1313.853336][   T10] usb 4-1: USB disconnect, device number 94
[ 1313.903129][T19806] FAULT_INJECTION: forcing a failure.
[ 1313.903129][T19806] name failslab, interval 1, probability 0, space 0, times 0
[ 1313.932922][T19806] CPU: 1 UID: 0 PID: 19806 Comm: syz.5.3473 Not tainted syzkaller #0 PREEMPT(full) 
[ 1313.932952][T19806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1313.932965][T19806] Call Trace:
[ 1313.932972][T19806]  <TASK>
[ 1313.932980][T19806]  dump_stack_lvl+0x16c/0x1f0
[ 1313.933015][T19806]  should_fail_ex+0x512/0x640
[ 1313.933038][T19806]  ? __kmalloc_noprof+0xca/0x880
[ 1313.933068][T19806]  should_failslab+0xc2/0x120
[ 1313.933091][T19806]  __kmalloc_noprof+0xdd/0x880
[ 1313.933118][T19806]  ? copy_splice_read+0x1a8/0xc20
[ 1313.933152][T19806]  ? copy_splice_read+0x1a8/0xc20
[ 1313.933180][T19806]  copy_splice_read+0x1a8/0xc20
[ 1313.933217][T19806]  ? __pfx_copy_splice_read+0x10/0x10
[ 1313.933250][T19806]  ? look_up_lock_class+0x6b/0x150
[ 1313.933285][T19806]  ? lockdep_init_map_type+0x5c/0x280
[ 1313.933307][T19806]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[ 1313.933330][T19806]  ? __pfx_copy_splice_read+0x10/0x10
[ 1313.933358][T19806]  do_splice_read+0x285/0x370
[ 1313.933381][T19806]  splice_direct_to_actor+0x2a1/0xa30
[ 1313.933404][T19806]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1313.933430][T19806]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1313.933447][T19806]  ? get_pid_task+0xfc/0x250
[ 1313.933473][T19806]  do_splice_direct+0x174/0x240
[ 1313.933494][T19806]  ? __pfx_do_splice_direct+0x10/0x10
[ 1313.933516][T19806]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1313.933548][T19806]  ? bpf_lsm_file_permission+0x9/0x10
[ 1313.933568][T19806]  ? security_file_permission+0x71/0x210
[ 1313.933594][T19806]  ? rw_verify_area+0xcf/0x6c0
[ 1313.933630][T19806]  do_sendfile+0xb06/0xe50
[ 1313.933665][T19806]  ? __pfx_do_sendfile+0x10/0x10
[ 1313.933695][T19806]  ? __fget_files+0x20e/0x3c0
[ 1313.933723][T19806]  __x64_sys_sendfile64+0x1d8/0x220
[ 1313.933746][T19806]  ? ksys_write+0x1ac/0x250
[ 1313.933764][T19806]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1313.933796][T19806]  do_syscall_64+0xcd/0xfa0
[ 1313.933817][T19806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1313.933838][T19806] RIP: 0033:0x7fa16bf8f6c9
[ 1313.933855][T19806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1313.933874][T19806] RSP: 002b:00007fa16cda3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1313.933895][T19806] RAX: ffffffffffffffda RBX: 00007fa16c1e5fa0 RCX: 00007fa16bf8f6c9
[ 1313.933910][T19806] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1313.933922][T19806] RBP: 00007fa16cda3090 R08: 0000000000000000 R09: 0000000000000000
[ 1313.933933][T19806] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[ 1313.933944][T19806] R13: 00007fa16c1e6038 R14: 00007fa16c1e5fa0 R15: 00007ffdef635fe8
[ 1313.933974][T19806]  </TASK>
[ 1313.934244][T19793] mmap: syz.4.3468 (19793): VmData 25841664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[ 1315.831176][T19826] binder: 19821:19826 ioctl c0306201 200000000040 returned -22
[ 1316.727495][   T30] audit: type=1326 audit(1762687209.054:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.1.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851e78f6c9 code=0x7ffc0000
[ 1316.911968][   T30] audit: type=1326 audit(1762687209.054:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.1.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f851e78f6c9 code=0x7ffc0000
[ 1316.946192][   T30] audit: type=1326 audit(1762687209.054:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.1.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851e78f6c9 code=0x7ffc0000
[ 1317.076288][   T30] audit: type=1326 audit(1762687209.054:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.1.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f851e78f6c9 code=0x7ffc0000
[ 1317.108586][   T30] audit: type=1326 audit(1762687209.434:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.1.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851e78f6c9 code=0x7ffc0000
[ 1317.595315][   T30] audit: type=1326 audit(1762687209.434:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.1.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851e78f6c9 code=0x7ffc0000
[ 1317.647688][   T30] audit: type=1326 audit(1762687209.474:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.1.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f851e78f6c9 code=0x7ffc0000
[ 1317.753899][   T30] audit: type=1326 audit(1762687209.474:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.1.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851e78f6c9 code=0x7ffc0000
[ 1317.786255][   T30] audit: type=1326 audit(1762687209.474:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.1.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851e78f6c9 code=0x7ffc0000
[ 1318.091458][T19856] sd 0:0:1:0: device reset
[ 1319.944889][T19867] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[ 1320.259089][T19860] block nbd4: shutting down sockets
[ 1320.730915][T19880] binder: 19876:19880 ioctl c018620c 200000000100 returned -1
[ 1323.282755][T19901] lo speed is unknown, defaulting to 1000
[ 1324.850213][T19923] overlayfs: missing 'lowerdir'
[ 1327.709832][T19944] binder: 19934:19944 ioctl c0306201 200000000040 returned -22
[ 1328.582305][T19950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3513'.
[ 1328.611376][T19950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3513'.
[ 1328.678973][T19950] gretap0: entered promiscuous mode
[ 1329.256588][T19950] gretap0: left promiscuous mode
[ 1330.675582][T19971] overlayfs: missing 'lowerdir'
[ 1331.370621][ T5892] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1331.529969][ T5892] usb 6-1: Using ep0 maxpacket: 8
[ 1331.551539][ T5892] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1331.571887][ T5892] usb 6-1: config 239 has an invalid interface number: 255 but max is 0
[ 1331.581067][ T5892] usb 6-1: config 239 has no interface number 0
[ 1331.697775][T19986] ieee802154 phy1 wpan1: encryption failed: -22
[ 1331.716420][   T30] audit: type=1400 audit(1762687224.024:2211): avc:  denied  { write } for  pid=19985 comm="syz.3.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1331.756957][ T5892] usb 6-1: config 239 interface 255 has no altsetting 0
[ 1331.786313][ T5892] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=ba.f6
[ 1331.897873][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1331.918114][ T5892] usb 6-1: Product: syz
[ 1331.923044][ T5892] usb 6-1: Manufacturer: syz
[ 1331.927653][ T5892] usb 6-1: SerialNumber: syz
[ 1332.357674][T19976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1332.481778][T19976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1332.529997][T19976] sctp: [Deprecated]: syz.5.3523 (pid 19976) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1332.529997][T19976] Use struct sctp_sack_info instead
[ 1332.982758][ T5892] visor 6-1:239.255: Sony Clie 3.5 converter detected
[ 1333.029425][ T5892] usb 6-1: clie_3_5_startup: get config number failed: -71
[ 1333.040618][ T5892] visor 6-1:239.255: probe with driver visor failed with error -71
[ 1333.172588][ T5892] usb 6-1: USB disconnect, device number 30
[ 1333.866776][T10138] block nbd1: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 1080 seconds
[ 1333.878442][T10138] block nbd1: Possible stuck request ffff888026c601c0: control (read@1024,1024B). Runtime 1080 seconds
[ 1333.921927][T10138] block nbd1: Possible stuck request ffff888026c60380: control (read@2048,1024B). Runtime 1080 seconds
[ 1333.972129][T10138] block nbd1: Possible stuck request ffff888026c60540: control (read@3072,1024B). Runtime 1080 seconds
[ 1334.975806][T20010] FAULT_INJECTION: forcing a failure.
[ 1334.975806][T20010] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1334.990897][T20010] CPU: 0 UID: 0 PID: 20010 Comm: syz.3.3530 Not tainted syzkaller #0 PREEMPT(full) 
[ 1334.990924][T20010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1334.990935][T20010] Call Trace:
[ 1334.990942][T20010]  <TASK>
[ 1334.990951][T20010]  dump_stack_lvl+0x16c/0x1f0
[ 1334.990987][T20010]  should_fail_ex+0x512/0x640
[ 1334.991015][T20010]  _copy_from_user+0x2e/0xd0
[ 1334.991047][T20010]  copy_msghdr_from_user+0x98/0x160
[ 1334.991074][T20010]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1334.991114][T20010]  ___sys_sendmsg+0xfe/0x1d0
[ 1334.991142][T20010]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1334.991166][T20010]  ? __lock_acquire+0x622/0x1c90
[ 1334.991231][T20010]  __sys_sendmsg+0x16d/0x220
[ 1334.991257][T20010]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1334.991301][T20010]  do_syscall_64+0xcd/0xfa0
[ 1334.991323][T20010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1334.991344][T20010] RIP: 0033:0x7f4b8318f6c9
[ 1334.991361][T20010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1334.991379][T20010] RSP: 002b:00007f4b83fc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1334.991399][T20010] RAX: ffffffffffffffda RBX: 00007f4b833e6090 RCX: 00007f4b8318f6c9
[ 1334.991413][T20010] RDX: 0000000000044014 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1334.991426][T20010] RBP: 00007f4b83fc1090 R08: 0000000000000000 R09: 0000000000000000
[ 1334.991439][T20010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1334.991451][T20010] R13: 00007f4b833e6128 R14: 00007f4b833e6090 R15: 00007ffdca6d7808
[ 1334.991480][T20010]  </TASK>
[ 1335.581857][T20015] overlayfs: missing 'lowerdir'
[ 1336.460484][T20025] lo: entered allmulticast mode
[ 1336.529935][   T30] audit: type=1400 audit(1762687741.741:2212): avc:  denied  { append } for  pid=20017 comm="syz.5.3533" name="sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1336.570108][T20025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1337.940981][   T30] audit: type=1400 audit(1762687743.221:2213): avc:  denied  { ioctl } for  pid=20033 comm="syz.1.3538" path="socket:[93154]" dev="sockfs" ino=93154 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1338.099248][T20039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19992 sclass=netlink_route_socket pid=20039 comm=syz.3.3539
[ 1338.710439][T20058] netlink: 'syz.3.3539': attribute type 1 has an invalid length.
[ 1338.718452][T20058] netlink: 'syz.3.3539': attribute type 2 has an invalid length.
[ 1338.960686][ T5892] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1339.709079][T20075] overlayfs: missing 'lowerdir'
[ 1340.630956][   T30] audit: type=1400 audit(1762687745.951:2214): avc:  denied  { write } for  pid=20068 comm="syz.1.3546" path="socket:[93218]" dev="sockfs" ino=93218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1341.359010][T20083] lo speed is unknown, defaulting to 1000
[ 1343.026680][T20097] overlayfs: missing 'workdir'
[ 1343.121358][ T5810] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1343.237400][ T5878] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1343.312004][ T5810] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1343.324209][ T5810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1343.394752][ T5810] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1343.405074][ T5810] usb 4-1: config 1 has no interface number 1
[ 1343.431855][ T5810] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1343.470919][ T5878] usb 6-1: Using ep0 maxpacket: 32
[ 1343.502259][ T5878] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[ 1343.516752][ T5878] usb 6-1: config 0 has no interface number 0
[ 1343.531219][ T5878] usb 6-1: config 0 interface 85 has no altsetting 0
[ 1343.538703][ T5810] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1343.561174][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1343.588943][ T5810] usb 4-1: Product: syz
[ 1343.615306][ T5878] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1343.651859][ T5810] usb 4-1: Manufacturer: syz
[ 1343.661523][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1343.669658][ T5810] usb 4-1: SerialNumber: syz
[ 1343.675316][ T5878] usb 6-1: Product: syz
[ 1343.679622][ T5878] usb 6-1: Manufacturer: syz
[ 1343.716348][ T5878] usb 6-1: SerialNumber: syz
[ 1343.756505][ T5878] usb 6-1: config 0 descriptor??
[ 1344.553114][ T5878] appletouch 6-1:0.85: Could not find int-in endpoint
[ 1344.565731][ T5878] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[ 1344.577565][ T5810] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[ 1344.594821][ T5878] usbhid 6-1:0.85: couldn't find an input interrupt endpoint
[ 1344.604225][ T5810] usb 4-1: MIDIStreaming interface descriptor not found
[ 1344.732236][T20114] overlayfs: missing 'lowerdir'
[ 1345.283125][ T5810] usb 4-1: USB disconnect, device number 95
[ 1345.547714][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1345.555552][   T30] audit: type=1400 audit(1762687750.841:2215): avc:  denied  { connect } for  pid=20118 comm="syz.6.3560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1345.662738][T20122] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3561'.
[ 1345.696619][   T30] audit: type=1400 audit(1762687751.001:2216): avc:  denied  { shutdown } for  pid=20123 comm="syz.1.3562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1348.098514][T13820] usb 6-1: USB disconnect, device number 31
[ 1348.989035][T13468] block nbd4: Receive control failed (result -32)
[ 1349.053642][T20159] block nbd4: shutting down sockets
[ 1349.119090][ T5920] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1349.300522][   T30] audit: type=1400 audit(1762687754.581:2217): avc:  denied  { mount } for  pid=20155 comm="syz.1.3572" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 1349.471970][ T5920] usb 7-1: Using ep0 maxpacket: 32
[ 1349.561584][   T30] audit: type=1400 audit(1762687754.581:2218): avc:  denied  { search } for  pid=20155 comm="syz.1.3572" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1349.647859][T20164] wg1 speed is unknown, defaulting to 1000
[ 1349.672681][T20164] wg1 speed is unknown, defaulting to 1000
[ 1349.714465][ T5920] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[ 1349.729914][   T30] audit: type=1400 audit(1762687754.591:2219): avc:  denied  { search } for  pid=20155 comm="syz.1.3572" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1349.760306][T20164] wg1 speed is unknown, defaulting to 1000
[ 1349.799569][ T5920] usb 7-1: config 0 has no interface number 0
[ 1350.657592][ T5920] usb 7-1: config 0 interface 85 has no altsetting 0
[ 1350.670885][   T30] audit: type=1400 audit(1762687754.591:2220): avc:  denied  { search } for  pid=20155 comm="syz.1.3572" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1350.698610][   T30] audit: type=1400 audit(1762687754.591:2221): avc:  denied  { search } for  pid=20155 comm="syz.1.3572" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1350.734593][ T5920] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1350.744241][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1350.754359][ T5920] usb 7-1: Product: syz
[ 1350.758608][ T5920] usb 7-1: Manufacturer: syz
[ 1350.767155][ T5920] usb 7-1: SerialNumber: syz
[ 1350.790373][ T5920] usb 7-1: config 0 descriptor??
[ 1350.806447][   T30] audit: type=1400 audit(1762687756.141:2222): avc:  denied  { create } for  pid=20169 comm="syz.4.3575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[ 1350.950612][T20179] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20179 comm=syz.4.3575
[ 1351.265986][T20164] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98
[ 1351.356868][ T5920] appletouch 7-1:0.85: Could not find int-in endpoint
[ 1351.386676][ T5920] appletouch 7-1:0.85: probe with driver appletouch failed with error -5
[ 1351.412244][ T5920] usbhid 7-1:0.85: couldn't find an input interrupt endpoint
[ 1351.438336][ T5920] usb 7-1: USB disconnect, device number 17
[ 1351.940985][T20164] wg1 speed is unknown, defaulting to 1000
[ 1352.065494][T20164] wg1 speed is unknown, defaulting to 1000
[ 1352.075153][T20164] wg1 speed is unknown, defaulting to 1000
[ 1352.136970][T20164] wg1 speed is unknown, defaulting to 1000
[ 1352.175198][T20164] wg1 speed is unknown, defaulting to 1000
[ 1352.184397][T20164] wg1 speed is unknown, defaulting to 1000
[ 1352.195810][T20164] wg1 speed is unknown, defaulting to 1000
[ 1352.206914][T20164] wg1 speed is unknown, defaulting to 1000
[ 1353.018718][   T30] audit: type=1400 audit(1762687758.352:2223): avc:  denied  { call } for  pid=20197 comm="syz.1.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1353.028357][T20198] binder_alloc: 20197: pid 20197 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1353.526524][T20196] lo speed is unknown, defaulting to 1000
[ 1353.562389][T20196] wg1 speed is unknown, defaulting to 1000
[ 1353.826004][T20206] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1353.850290][T20206] FAULT_INJECTION: forcing a failure.
[ 1353.850290][T20206] name failslab, interval 1, probability 0, space 0, times 0
[ 1353.864772][T20206] CPU: 0 UID: 0 PID: 20206 Comm: syz.6.3581 Not tainted syzkaller #0 PREEMPT(full) 
[ 1353.864803][T20206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1353.864815][T20206] Call Trace:
[ 1353.864824][T20206]  <TASK>
[ 1353.864833][T20206]  dump_stack_lvl+0x16c/0x1f0
[ 1353.864870][T20206]  should_fail_ex+0x512/0x640
[ 1353.864894][T20206]  ? __kmalloc_noprof+0xca/0x880
[ 1353.864925][T20206]  should_failslab+0xc2/0x120
[ 1353.864949][T20206]  __kmalloc_noprof+0xdd/0x880
[ 1353.864977][T20206]  ? ovl_cache_entry_new+0x65/0x970
[ 1353.865008][T20206]  ? ovl_cache_entry_new+0x65/0x970
[ 1353.865032][T20206]  ovl_cache_entry_new+0x65/0x970
[ 1353.865065][T20206]  ovl_fill_merge+0xa91/0xfa0
[ 1353.865097][T20206]  ? __pfx_ovl_fill_merge+0x10/0x10
[ 1353.865122][T20206]  ? kernfs_root+0xee/0x2a0
[ 1353.865156][T20206]  kernfs_fop_readdir+0x3d8/0x930
[ 1353.865195][T20206]  iterate_dir+0x296/0xaf0
[ 1353.865233][T20206]  ovl_dir_read_merged+0x37c/0x780
[ 1353.865264][T20206]  ? __pfx_ovl_dir_read_merged+0x10/0x10
[ 1353.865298][T20206]  ? __pfx_ovl_fill_merge+0x10/0x10
[ 1353.865342][T20206]  ovl_iterate+0x8ae/0x1000
[ 1353.865371][T20206]  ? wrap_directory_iterator+0x8d/0xe0
[ 1353.865409][T20206]  ? __pfx_ovl_iterate+0x10/0x10
[ 1353.865435][T20206]  wrap_directory_iterator+0xa2/0xe0
[ 1353.865465][T20206]  iterate_dir+0x296/0xaf0
[ 1353.865499][T20206]  __x64_sys_getdents64+0x13c/0x2c0
[ 1353.865527][T20206]  ? ksys_write+0x188/0x250
[ 1353.865547][T20206]  ? __pfx___x64_sys_getdents64+0x10/0x10
[ 1353.865577][T20206]  ? __pfx_filldir64+0x10/0x10
[ 1353.865618][T20206]  do_syscall_64+0xcd/0xfa0
[ 1353.865643][T20206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1353.865665][T20206] RIP: 0033:0x7f100238f6c9
[ 1353.865683][T20206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1353.865703][T20206] RSP: 002b:00007f10005b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 1353.865723][T20206] RAX: ffffffffffffffda RBX: 00007f10025e6180 RCX: 00007f100238f6c9
[ 1353.865737][T20206] RDX: 00000000000000ae RSI: 0000200000000580 RDI: 0000000000000006
[ 1353.865750][T20206] RBP: 00007f10005b4090 R08: 0000000000000000 R09: 0000000000000000
[ 1353.865763][T20206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1353.865776][T20206] R13: 00007f10025e6218 R14: 00007f10025e6180 R15: 00007ffdad3343d8
[ 1353.865808][T20206]  </TASK>
[ 1353.867482][   T30] audit: type=1400 audit(1762687759.162:2224): avc:  denied  { mounton } for  pid=20202 comm="syz.6.3581" path="/216/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[ 1355.135645][T20212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3583'.
[ 1355.144878][T20212] netlink: 'syz.1.3583': attribute type 7 has an invalid length.
[ 1355.153508][T20212] netlink: 'syz.1.3583': attribute type 8 has an invalid length.
[ 1355.161481][T20212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3583'.
[ 1355.621346][T20226] ptrace attach of "./syz-executor exec"[16959] was attempted by "                                                                �   ��\x09��\x09�\x1bD\x09\x09���8����S�\x0d=��\x0720l\x09����\x0a\x0a��\x0a�3a��K�$\x0d[\x0a�~�R
 ���xp�R<�\x1b\x1b[1\x07\x0d\x07J\x096�;x\x0d�a��   X�\x07\x22r'��g��W��¨t�*����\x0c�1�\x0d��;�`�3�Jb�o0�e�[��\x0aᓗ75�m[\x1bc� 0]?Fc^�ձݩ�-t����;#��Pu����i�\x09       u'\x1b(c)�i�B��x��}n��$�D�[13O�Û�:�.Ͱ��o����\x0d�8��D��� IA����c�p��\x5cUC*�����T�#n������vbIkݻ    /��AnV�\x1b1�b��
�B�k��~}�$Q�d[�\x0cavi1N/�pޘ�v��\x0d�G�o����*K_����o�b�ؠ�q<Xc\x093��J�t���4�#|�-�\x09�Ш��wtz�6\x094�)���ٕ;�)��s���'�E�F�\x0b�o�JĈ���\x0a'��D���TޠY�CQ?       \x0a6!�l� ��\x0cA�n���d�vyT�K��c�OK�0��ԫ�b�\x1b[�A�u��\x0dx$��M�� &�OgL$1ܡA��iʷ�f�é�>�9����&Ƶ�K\x07�^�4�\x09���pw���~�3Iu��4���/�x�����*xi�Xde&���C�`�W\x22�R$I�Flc+5p$?���|��e�a\x0c �!�S�R   ����/�u�g����y\x09PpA�`B\x0cVd�y!�M�ۈ��2Э{�F�5������_`Π�w�      �
[ 1355.629526][T20226] FAULT_INJECTION: forcing a failure.
[ 1355.629526][T20226] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1355.736509][T20226] CPU: 0 UID: 0 PID: 20226 Comm: syz.1.3587 Not tainted syzkaller #0 PREEMPT(full) 
[ 1355.736536][T20226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1355.736545][T20226] Call Trace:
[ 1355.736553][T20226]  <TASK>
[ 1355.736562][T20226]  dump_stack_lvl+0x16c/0x1f0
[ 1355.736594][T20226]  should_fail_ex+0x512/0x640
[ 1355.736620][T20226]  should_fail_alloc_page+0xe7/0x130
[ 1355.736646][T20226]  prepare_alloc_pages+0x3c2/0x610
[ 1355.736671][T20226]  __alloc_frozen_pages_noprof+0x18b/0x2470
[ 1355.736700][T20226]  ? trace_sched_exit_tp+0xd1/0x120
[ 1355.736720][T20226]  ? __schedule+0x11a3/0x5de0
[ 1355.736745][T20226]  ? kvm_sched_clock_read+0x11/0x20
[ 1355.736773][T20226]  ? sched_clock+0x38/0x60
[ 1355.736807][T20226]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1355.736853][T20226]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1355.736881][T20226]  ? policy_nodemask+0xea/0x4e0
[ 1355.736909][T20226]  alloc_pages_mpol+0x1fb/0x550
[ 1355.736930][T20226]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1355.736960][T20226]  folio_alloc_noprof+0x20/0x2d0
[ 1355.736983][T20226]  filemap_alloc_folio_noprof+0x3a1/0x470
[ 1355.737008][T20226]  ? __pfx_filemap_alloc_folio_noprof+0x10/0x10
[ 1355.737029][T20226]  ? irqentry_exit+0x3b/0x90
[ 1355.737044][T20226]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1355.737084][T20226]  __filemap_get_folio+0x5e1/0xc30
[ 1355.737113][T20226]  ? folio_end_read+0xa5/0x190
[ 1355.737140][T20226]  ioctx_alloc+0x761/0x2120
[ 1355.737177][T20226]  ? __pfx_ioctx_alloc+0x10/0x10
[ 1355.737201][T20226]  ? __x64_sys_io_setup+0xb3/0x210
[ 1355.737224][T20226]  ? __x64_sys_io_setup+0xc1/0x210
[ 1355.737251][T20226]  __x64_sys_io_setup+0xc9/0x210
[ 1355.737276][T20226]  do_syscall_64+0xcd/0xfa0
[ 1355.737295][T20226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1355.737331][T20226] RIP: 0033:0x7f851e78f6c9
[ 1355.737347][T20226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1355.737363][T20226] RSP: 002b:00007f851f61a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[ 1355.737380][T20226] RAX: ffffffffffffffda RBX: 00007f851e9e6090 RCX: 00007f851e78f6c9
[ 1355.737392][T20226] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000042
[ 1355.737403][T20226] RBP: 00007f851f61a090 R08: 0000000000000000 R09: 0000000000000000
[ 1355.737414][T20226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1355.737424][T20226] R13: 00007f851e9e6128 R14: 00007f851e9e6090 R15: 00007fffd4cc56d8
[ 1355.737450][T20226]  </TASK>
[ 1356.770579][   T30] audit: type=1400 audit(1762687762.072:2225): avc:  denied  { getopt } for  pid=20235 comm="syz.6.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1356.803054][T20243] FAULT_INJECTION: forcing a failure.
[ 1356.803054][T20243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1356.834171][T20243] CPU: 1 UID: 0 PID: 20243 Comm: syz.3.3590 Not tainted syzkaller #0 PREEMPT(full) 
[ 1356.834200][T20243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1356.834213][T20243] Call Trace:
[ 1356.834220][T20243]  <TASK>
[ 1356.834229][T20243]  dump_stack_lvl+0x16c/0x1f0
[ 1356.834265][T20243]  should_fail_ex+0x512/0x640
[ 1356.834293][T20243]  _copy_from_user+0x2e/0xd0
[ 1356.834320][T20243]  copy_from_sockptr_offset.constprop.0+0x153/0x1a0
[ 1356.834347][T20243]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[ 1356.834381][T20243]  do_ipv6_setsockopt+0x86e/0x44b0
[ 1356.834411][T20243]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[ 1356.834444][T20243]  ? find_held_lock+0x2b/0x80
[ 1356.834471][T20243]  ? avc_has_perm_noaudit+0x117/0x3b0
[ 1356.834503][T20243]  ? avc_has_perm_noaudit+0x149/0x3b0
[ 1356.834535][T20243]  ? avc_has_perm+0x144/0x1f0
[ 1356.834562][T20243]  ? __pfx_avc_has_perm+0x10/0x10
[ 1356.834591][T20243]  ? get_pid_task+0x106/0x250
[ 1356.834610][T20243]  ? proc_fail_nth_write+0x9f/0x220
[ 1356.834640][T20243]  ? sock_has_perm+0x259/0x2f0
[ 1356.834670][T20243]  ? __pfx_sock_has_perm+0x10/0x10
[ 1356.834706][T20243]  ? ipv6_setsockopt+0xcb/0x170
[ 1356.834728][T20243]  ipv6_setsockopt+0xcb/0x170
[ 1356.834754][T20243]  rawv6_setsockopt+0xc2/0x510
[ 1356.834776][T20243]  ? __pfx_rawv6_setsockopt+0x10/0x10
[ 1356.834799][T20243]  ? selinux_socket_setsockopt+0x6a/0x80
[ 1356.834828][T20243]  ? sock_common_setsockopt+0x2e/0xf0
[ 1356.834858][T20243]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1356.834891][T20243]  do_sock_setsockopt+0xf3/0x1d0
[ 1356.834925][T20243]  __sys_setsockopt+0x1a0/0x230
[ 1356.834955][T20243]  __x64_sys_setsockopt+0xbd/0x160
[ 1356.834979][T20243]  ? syscall_trace_enter+0xee/0x240
[ 1356.835005][T20243]  do_syscall_64+0xcd/0xfa0
[ 1356.835027][T20243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.835050][T20243] RIP: 0033:0x7f4b8318f6c9
[ 1356.835063][T20243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1356.835079][T20243] RSP: 002b:00007f4b83fe2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1356.835097][T20243] RAX: ffffffffffffffda RBX: 00007f4b833e5fa0 RCX: 00007f4b8318f6c9
[ 1356.835111][T20243] RDX: 00000000000000d0 RSI: 0000000000000029 RDI: 0000000000000003
[ 1356.835124][T20243] RBP: 00007f4b83fe2090 R08: 0000000000000004 R09: 0000000000000000
[ 1356.835136][T20243] R10: 0000200000004680 R11: 0000000000000246 R12: 0000000000000001
[ 1356.835149][T20243] R13: 00007f4b833e6038 R14: 00007f4b833e5fa0 R15: 00007ffdca6d7808
[ 1356.835178][T20243]  </TASK>
[ 1358.005989][   T30] audit: type=1400 audit(1762687763.252:2226): avc:  denied  { nlmsg_read } for  pid=20248 comm="syz.3.3592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1358.441059][T20234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1359.439893][ T5920] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1359.601400][ T5920] usb 6-1: device descriptor read/64, error -71
[ 1359.980753][ T5920] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1360.191578][ T5920] usb 6-1: device descriptor read/64, error -71
[ 1360.311049][ T5920] usb usb6-port1: attempt power cycle
[ 1360.869895][ T5920] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1360.958249][ T5920] usb 6-1: device descriptor read/8, error -71
[ 1361.025118][T20284] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3603'.
[ 1361.146732][T20287] netlink: 'syz.4.3601': attribute type 1 has an invalid length.
[ 1361.315925][ T5920] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1361.337128][T20287] bond1: entered promiscuous mode
[ 1361.352873][T20287] bond1: entered allmulticast mode
[ 1361.376965][T20287] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1361.393404][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.920457][ T5920] usb 6-1: device descriptor read/8, error -71
[ 1362.114354][ T5920] usb usb6-port1: unable to enumerate USB device
[ 1362.197254][T20287] bridge1: entered promiscuous mode
[ 1362.255222][T17696] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1362.693201][T20287] bridge1: entered allmulticast mode
[ 1362.704578][T20287] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1362.810756][ T1104] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1362.978746][T13820] IPVS: starting estimator thread 0...
[ 1363.180413][T20307] IPVS: using max 32 ests per chain, 76800 per kthread
[ 1363.613888][T20312] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16)
[ 1363.615531][T20314] lo speed is unknown, defaulting to 1000
[ 1363.898544][T20314] wg1 speed is unknown, defaulting to 1000
[ 1363.942056][T13735] block nbd1: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 1110 seconds
[ 1363.953552][T13735] block nbd1: Possible stuck request ffff888026c601c0: control (read@1024,1024B). Runtime 1110 seconds
[ 1364.300838][T13735] block nbd1: Possible stuck request ffff888026c60380: control (read@2048,1024B). Runtime 1110 seconds
[ 1364.342538][T13735] block nbd1: Possible stuck request ffff888026c60540: control (read@3072,1024B). Runtime 1110 seconds
[ 1365.581344][   T30] audit: type=1400 audit(1762687770.912:2227): avc:  denied  { write } for  pid=20341 comm="syz.5.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1365.892390][T20348] overlayfs: missing 'workdir'
[ 1366.646783][T13820] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1366.980024][T13820] usb 7-1: Using ep0 maxpacket: 8
[ 1367.001694][T13820] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1367.013957][T13820] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1367.025568][T13820] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1367.036659][T13820] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1367.519517][T13820] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1367.535435][T13820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1367.535859][T13468] block nbd3: Receive control failed (result -32)
[ 1367.583851][T20357] block nbd3: shutting down sockets
[ 1367.796757][T20360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3623'.
[ 1367.822509][T20360] netlink: 'syz.3.3623': attribute type 7 has an invalid length.
[ 1367.842480][T20360] netlink: 'syz.3.3623': attribute type 8 has an invalid length.
[ 1367.881011][T13820] usb 7-1: GET_CAPABILITIES returned 0
[ 1367.887958][T13820] usbtmc 7-1:16.0: can't read capabilities
[ 1367.888072][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3623'.
[ 1368.429652][T13820] usb 7-1: USB disconnect, device number 18
[ 1368.438882][T20366] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3625'.
[ 1369.117903][T20379] netlink: 'syz.1.3628': attribute type 1 has an invalid length.
[ 1369.243256][T20379] bond7: (slave bridge7): Enslaving as a backup interface with an up link
[ 1369.931420][ T5810] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1370.071071][ T5810] usb 4-1: device descriptor read/64, error -71
[ 1370.229328][T20392] overlayfs: missing 'lowerdir'
[ 1371.071149][ T5810] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1371.172625][T20398] siw: device registration error -23
[ 1371.218082][ T7660] IPVS: starting estimator thread 0...
[ 1371.240844][ T5810] usb 4-1: device descriptor read/64, error -71
[ 1371.310863][T20401] IPVS: using max 38 ests per chain, 91200 per kthread
[ 1371.350745][ T5810] usb usb4-port1: attempt power cycle
[ 1371.446271][T20406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19992 sclass=netlink_route_socket pid=20406 comm=syz.6.3636
[ 1372.140869][ T5810] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 1372.183285][ T5810] usb 4-1: device descriptor read/8, error -71
[ 1372.266404][   T30] audit: type=1400 audit(1762687777.602:2228): avc:  denied  { getopt } for  pid=20412 comm="syz.4.3638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1372.440970][ T5810] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1372.450966][T13820] usb 6-1: new low-speed USB device number 36 using dummy_hcd
[ 1372.471771][ T5810] usb 4-1: device descriptor read/8, error -71
[ 1373.028334][T13820] usb 6-1: device descriptor read/64, error -71
[ 1373.143292][ T5810] usb usb4-port1: unable to enumerate USB device
[ 1373.271891][T13820] usb 6-1: new low-speed USB device number 37 using dummy_hcd
[ 1373.446155][T20406] netlink: 'syz.6.3636': attribute type 1 has an invalid length.
[ 1373.457575][T20406] netlink: 'syz.6.3636': attribute type 2 has an invalid length.
[ 1373.490874][T13820] usb 6-1: device descriptor read/64, error -71
[ 1373.603464][T13820] usb usb6-port1: attempt power cycle
[ 1373.970738][T13820] usb 6-1: new low-speed USB device number 38 using dummy_hcd
[ 1373.991705][T13820] usb 6-1: device descriptor read/8, error -71
[ 1374.007840][   T30] audit: type=1400 audit(1762687779.342:2229): avc:  denied  { create } for  pid=20427 comm="syz.3.3642" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1374.039644][   T30] audit: type=1400 audit(1762687779.372:2230): avc:  denied  { write } for  pid=20427 comm="syz.3.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[ 1374.086405][   T30] audit: type=1400 audit(1762687779.422:2231): avc:  denied  { mounton } for  pid=20427 comm="syz.3.3642" path="/226/file0" dev="tmpfs" ino=1245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1374.086442][T20428] overlay: Unknown parameter 'volatile::erity'
[ 1374.321536][T13820] usb 6-1: new low-speed USB device number 39 using dummy_hcd
[ 1374.336522][   T30] audit: type=1400 audit(1762687779.672:2232): avc:  denied  { unlink } for  pid=16516 comm="syz-executor" name="file0" dev="tmpfs" ino=1245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1374.351976][T13820] usb 6-1: device descriptor read/8, error -71
[ 1374.398088][T20434] netlink: 'syz.4.3643': attribute type 1 has an invalid length.
[ 1374.480826][T13820] usb usb6-port1: unable to enumerate USB device
[ 1374.605968][T20439] bond2: entered promiscuous mode
[ 1374.614763][T20439] bond2: entered allmulticast mode
[ 1374.621235][T20439] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1374.716405][T20434] bridge2: entered promiscuous mode
[ 1374.723054][T20434] bridge2: entered allmulticast mode
[ 1374.730151][T20434] bond2: (slave bridge2): Enslaving as a backup interface with an up link
[ 1374.756199][   T49] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1374.757493][T20444] bridge3: entered allmulticast mode
[ 1374.900505][T16530] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1375.071705][T13820] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1375.230373][T13820] usb 7-1: Using ep0 maxpacket: 8
[ 1375.236852][T13820] usb 7-1: config 0 has an invalid interface number: 109 but max is 0
[ 1375.255734][T13820] usb 7-1: config 0 has no interface number 0
[ 1375.267145][T13820] usb 7-1: too many endpoints for config 0 interface 109 altsetting 95: 117, using maximum allowed: 30
[ 1375.284857][T13820] usb 7-1: config 0 interface 109 altsetting 95 has 0 endpoint descriptors, different from the interface descriptor's value: 117
[ 1375.302477][T13820] usb 7-1: config 0 interface 109 has no altsetting 0
[ 1375.314969][T13820] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1375.334338][T13820] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1375.344236][T13820] usb 7-1: Product: syz
[ 1375.349639][T13820] usb 7-1: Manufacturer: syz
[ 1375.356264][T13820] usb 7-1: SerialNumber: syz
[ 1375.371399][T13820] usb 7-1: config 0 descriptor??
[ 1375.502217][   T30] audit: type=1400 audit(1762687780.832:2233): avc:  denied  { read } for  pid=20446 comm="syz.5.3646" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1375.556668][   T30] audit: type=1400 audit(1762687780.832:2234): avc:  denied  { open } for  pid=20446 comm="syz.5.3646" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1375.605563][T13820] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1375.615522][T13820] gspca_zc3xx: reg_w_i err -71
[ 1375.621975][T13820] gspca_zc3xx 7-1:0.109: probe with driver gspca_zc3xx failed with error -71
[ 1375.634739][T13820] usb 7-1: USB disconnect, device number 19
[ 1375.730606][T20452] overlayfs: missing 'workdir'
[ 1375.848528][T13468] Bluetooth: hci1: ACL packet for unknown connection handle 201
[ 1376.882018][T20467] binder: 20462:20467 ioctl c0306201 200000000040 returned -14
[ 1377.898661][T20477] lo speed is unknown, defaulting to 1000
[ 1377.918465][T20477] wg1 speed is unknown, defaulting to 1000
[ 1378.944112][   T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1379.314936][   T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1380.404926][   T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1380.542994][ T7303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1380.553229][ T7303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1380.562346][ T7303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1380.570055][ T7303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1380.583120][ T7303] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1380.591481][   T30] audit: type=1400 audit(1762687785.922:2235): avc:  denied  { bind } for  pid=20496 comm="syz.4.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1380.622740][   T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1380.903542][T20500] syzkaller0: entered promiscuous mode
[ 1380.909078][T20500] syzkaller0: entered allmulticast mode
[ 1382.669982][ T7303] Bluetooth: hci0: command tx timeout
[ 1383.151136][ T7660] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1383.321612][ T7660] usb 7-1: Using ep0 maxpacket: 8
[ 1383.332627][ T7660] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1383.363432][ T7660] usb 7-1: config 4 interface 0 has no altsetting 0
[ 1383.401960][ T7660] usb 7-1: string descriptor 0 read error: -22
[ 1383.408259][ T7660] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1383.441576][ T7660] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1383.508782][ T7660] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1383.542813][ T7660] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1383.573406][ T7660] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1383.618789][ T7660] usb 7-1: media controller created
[ 1383.656733][ T7660] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1383.895257][T20525] usb 7-1: dvb_usb_au6610: wlen=0, aborting
[ 1384.054951][ T7660] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1384.113596][ T7660] usb 7-1: USB disconnect, device number 20
[ 1384.741484][ T7303] Bluetooth: hci0: command tx timeout
[ 1385.868246][T20508] lo speed is unknown, defaulting to 1000
[ 1385.918800][T20508] wg1 speed is unknown, defaulting to 1000
[ 1385.926515][T20543] lo speed is unknown, defaulting to 1000
[ 1386.111480][T20543] wg1 speed is unknown, defaulting to 1000
[ 1386.156263][   T49] bridge0: port 3(batadv0) entered disabled state
[ 1386.172427][   T49] bridge_slave_1: left allmulticast mode
[ 1386.199911][   T49] bridge_slave_1: left promiscuous mode
[ 1386.205679][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1386.236295][   T49] bridge_slave_0: left allmulticast mode
[ 1386.253265][   T49] bridge_slave_0: left promiscuous mode
[ 1386.259012][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1386.820782][ T7303] Bluetooth: hci0: command tx timeout
[ 1386.829524][   T49] bond0 (unregistering): (slave bridge1): Removing an active aggregator
[ 1386.844069][   T49] bond0 (unregistering): (slave bridge1): Releasing backup interface
[ 1386.867352][   T49] bridge1 (unregistering): left promiscuous mode
[ 1386.895141][   T49] bridge1 (unregistering): left allmulticast mode
[ 1387.123516][   T49] bond1 (unregistering): (slave bridge2): Removing an active aggregator
[ 1387.151577][   T49] bond1 (unregistering): (slave bridge2): Releasing backup interface
[ 1387.179363][   T49] bridge2 (unregistering): left promiscuous mode
[ 1387.186083][   T49] bridge2 (unregistering): left allmulticast mode
[ 1387.465865][   T30] audit: type=1400 audit(1762687792.542:2236): avc:  denied  { getopt } for  pid=20552 comm="syz.4.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1387.560799][   T49] bond2 (unregistering): (slave bridge3): Removing an active aggregator
[ 1387.583703][   T49] bond2 (unregistering): (slave bridge3): Releasing backup interface
[ 1387.602539][   T49] bridge3 (unregistering): left promiscuous mode
[ 1387.612944][   T49] bridge3 (unregistering): left allmulticast mode
[ 1387.703840][   T49] bond3 (unregistering): (slave bridge4): Removing an active aggregator
[ 1387.713004][   T49] bond3 (unregistering): (slave bridge4): Releasing backup interface
[ 1387.722145][   T49] bridge4 (unregistering): left promiscuous mode
[ 1387.728561][   T49] bridge4 (unregistering): left allmulticast mode
[ 1387.803531][T13468] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1387.811964][   T49] bond4 (unregistering): (slave bridge5): Releasing backup interface
[ 1387.826161][T13468] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1387.836529][T13468] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1387.845488][T13468] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1387.855162][T13468] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1388.007719][   T49] bond0 (unregistering): Released all slaves
[ 1388.124591][   T49] bond1 (unregistering): Released all slaves
[ 1388.241022][   T49] bond2 (unregistering): Released all slaves
[ 1388.358632][   T49] bond3 (unregistering): Released all slaves
[ 1388.371223][   T49] bond4 (unregistering): Released all slaves
[ 1388.559569][T20550] lo speed is unknown, defaulting to 1000
[ 1388.610763][T20550] wg1 speed is unknown, defaulting to 1000
[ 1388.625751][T20556] lo speed is unknown, defaulting to 1000
[ 1388.673193][T20556] wg1 speed is unknown, defaulting to 1000
[ 1388.851343][   T49] hsr_slave_0: left promiscuous mode
[ 1388.857267][   T49] hsr_slave_1: left promiscuous mode
[ 1388.864060][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1388.872125][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1388.882910][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1388.891007][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1388.900121][T13468] Bluetooth: hci0: command tx timeout
[ 1388.923596][   T49] veth1_vlan: left allmulticast mode
[ 1388.929086][   T49] veth1_macvtap: left promiscuous mode
[ 1388.934836][   T49] veth0_macvtap: left promiscuous mode
[ 1388.941083][   T49] veth1_vlan: left promiscuous mode
[ 1388.946343][   T49] veth0_vlan: left promiscuous mode
[ 1389.419795][   T49] team0 (unregistering): Port device team_slave_1 removed
[ 1389.474452][   T49] team0 (unregistering): Port device team_slave_0 removed
[ 1389.940574][T13468] Bluetooth: hci2: command tx timeout
[ 1390.097262][T20508] chnl_net:caif_netlink_parms(): no params data found
[ 1390.404301][T20556] chnl_net:caif_netlink_parms(): no params data found
[ 1390.675164][   T49] IPVS: stop unused estimator thread 0...
[ 1390.904372][T20508] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1390.953993][T20578] overlayfs: failed to resolve './file1/file0': -2
[ 1390.963070][T20508] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1391.070872][T20508] bridge_slave_0: entered allmulticast mode
[ 1391.078320][T20508] bridge_slave_0: entered promiscuous mode
[ 1391.519169][T20508] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1391.526417][T20508] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1391.536539][T20578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3681'.
[ 1391.538373][T20508] bridge_slave_1: entered allmulticast mode
[ 1391.553164][T20508] bridge_slave_1: entered promiscuous mode
[ 1391.805401][T20556] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1391.813087][T20556] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1391.822114][T20556] bridge_slave_0: entered allmulticast mode
[ 1391.828995][T20556] bridge_slave_0: entered promiscuous mode
[ 1391.839446][T20580] bridge0: port 4(team0) entered blocking state
[ 1391.846435][T20580] bridge0: port 4(team0) entered disabled state
[ 1391.854566][T20580] bridge0: port 4(team0) entered blocking state
[ 1391.860983][T20580] bridge0: port 4(team0) entered forwarding state
[ 1391.882242][   T30] audit: type=1400 audit(1762687797.211:2237): avc:  denied  { load_policy } for  pid=20577 comm="syz.3.3681" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 1392.020750][T13468] Bluetooth: hci2: command tx timeout
[ 1392.466248][T20585] SELinux: failed to load policy
[ 1393.018475][T20556] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1393.037267][T20556] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1393.500700][T20556] bridge_slave_1: entered allmulticast mode
[ 1393.507663][T20556] bridge_slave_1: entered promiscuous mode
[ 1394.093016][T13735] block nbd1: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 1140 seconds
[ 1394.119566][T13468] Bluetooth: hci2: command tx timeout
[ 1394.128000][T13735] block nbd1: Possible stuck request ffff888026c601c0: control (read@1024,1024B). Runtime 1140 seconds
[ 1394.155834][T20508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1394.241687][   T30] audit: type=1400 audit(1762687799.571:2238): avc:  denied  { write } for  pid=20600 comm="syz.6.3686" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1394.286979][T20556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1394.306053][T20508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1394.327917][T20556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1394.713746][T20604] program syz.6.3686 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1394.725900][T13735] block nbd1: Possible stuck request ffff888026c60380: control (read@2048,1024B). Runtime 1140 seconds
[ 1394.738158][T13735] block nbd1: Possible stuck request ffff888026c60540: control (read@3072,1024B). Runtime 1140 seconds
[ 1394.826900][T20611] sd 0:0:1:0: device reset
[ 1395.113239][T20508] team0: Port device team_slave_0 added
[ 1395.134259][T20508] team0: Port device team_slave_1 added
[ 1395.209456][T20556] team0: Port device team_slave_0 added
[ 1395.268327][T20556] team0: Port device team_slave_1 added
[ 1395.332716][T20508] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1395.353496][T20508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1395.394434][T20508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1395.425775][T20508] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1395.434057][T20508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1395.468103][T20508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1395.704212][T20556] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1395.712729][T20556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1395.738690][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1395.747180][T20556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1395.767181][T20614] lo speed is unknown, defaulting to 1000
[ 1395.871380][T20556] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1396.092088][T20556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1396.232777][ T7303] Bluetooth: hci2: command tx timeout
[ 1396.255477][T20556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1396.430861][T20614] wg1 speed is unknown, defaulting to 1000
[ 1396.504350][T20508] hsr_slave_0: entered promiscuous mode
[ 1396.518059][T20508] hsr_slave_1: entered promiscuous mode
[ 1396.526192][T20508] debugfs: 'hsr0' already exists in 'hsr'
[ 1396.534597][T20508] Cannot create hsr debugfs directory
[ 1396.591578][T20630] sd 0:0:1:0: device reset
[ 1396.801308][T20556] hsr_slave_0: entered promiscuous mode
[ 1396.812804][T20556] hsr_slave_1: entered promiscuous mode
[ 1396.829567][T20556] debugfs: 'hsr0' already exists in 'hsr'
[ 1396.841331][T20556] Cannot create hsr debugfs directory
[ 1397.485641][T20508] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1397.530658][T20508] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1397.550230][T20508] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1397.603111][T20508] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1397.911387][T20556] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1397.982132][T20643] sd 0:0:1:0: device reset
[ 1398.445610][T20556] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1398.468732][T20556] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1398.485919][T20556] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1398.638328][T20556] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1398.772767][T20556] 8021q: adding VLAN 0 to HW filter on device team0
[ 1398.833372][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1398.840562][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1398.884338][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1398.891537][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1399.083959][T20508] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1399.648410][T20508] 8021q: adding VLAN 0 to HW filter on device team0
[ 1399.731904][T20651] block nbd3: shutting down sockets
[ 1399.888829][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1399.895990][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1400.587450][T16528] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1400.594623][T16528] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1400.871969][ T5920] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1400.938072][T20556] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1401.030780][ T5920] usb 4-1: Using ep0 maxpacket: 16
[ 1401.037498][ T5920] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1401.058146][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1401.090505][ T5920] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1401.110066][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1401.129344][ T5920] usb 4-1: config 0 descriptor??
[ 1401.386998][T20685] lo speed is unknown, defaulting to 1000
[ 1401.419051][T20685] wg1 speed is unknown, defaulting to 1000
[ 1401.674160][ T5920] hid_parser_main: 343 callbacks suppressed
[ 1401.674175][ T5920] acrux 0003:1A34:0802.001C: unknown main item tag 0x0
[ 1401.716375][ T5920] acrux 0003:1A34:0802.001C: unknown main item tag 0x0
[ 1401.729680][T20508] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1401.743223][ T5920] acrux 0003:1A34:0802.001C: unknown main item tag 0x0
[ 1401.765161][ T5920] acrux 0003:1A34:0802.001C: unknown main item tag 0x0
[ 1401.779060][ T5920] acrux 0003:1A34:0802.001C: unknown main item tag 0x0
[ 1401.810812][ T5920] acrux 0003:1A34:0802.001C: hidraw0: USB HID v0.05 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0
[ 1401.860811][ T5920] acrux 0003:1A34:0802.001C: no inputs found
[ 1401.908150][ T5920] acrux 0003:1A34:0802.001C: Failed to enable force feedback support, error: -19
[ 1401.908841][T20556] veth0_vlan: entered promiscuous mode
[ 1401.981399][T20556] veth1_vlan: entered promiscuous mode
[ 1402.675701][T20556] veth0_macvtap: entered promiscuous mode
[ 1402.703877][    T9] usb 4-1: USB disconnect, device number 100
[ 1402.725423][T20556] veth1_macvtap: entered promiscuous mode
[ 1402.804046][T20556] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1402.835963][T20556] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1402.862241][ T1104] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1402.872118][ T1104] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1402.915069][ T1104] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1402.925675][ T1104] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1403.057197][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1403.074031][T20508] veth0_vlan: entered promiscuous mode
[ 1403.086295][T20508] veth1_vlan: entered promiscuous mode
[ 1403.089830][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1403.156492][T16528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1403.158968][T20508] veth0_macvtap: entered promiscuous mode
[ 1403.184734][T20508] veth1_macvtap: entered promiscuous mode
[ 1403.186288][T16528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1403.211372][T20508] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1403.234979][T20508] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1403.267099][   T60] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1403.303754][   T60] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1403.364656][   T60] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1403.753062][   T60] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1405.491442][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1405.499282][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1406.679569][T16528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1406.689467][T16528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1406.735037][T20730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3709'.
[ 1406.746032][T20730] netlink: 'syz.3.3709': attribute type 7 has an invalid length.
[ 1406.756383][T20730] netlink: 'syz.3.3709': attribute type 8 has an invalid length.
[ 1406.772817][   T30] audit: type=1326 audit(1762687812.101:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz.6.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100238f6c9 code=0x7ffc0000
[ 1406.774520][T20731] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3710'.
[ 1406.808682][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3709'.
[ 1406.853419][   T30] audit: type=1326 audit(1762687812.111:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz.6.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f100238f6c9 code=0x7ffc0000
[ 1406.908734][T20731] batadv1: entered promiscuous mode
[ 1406.958035][T20731] batadv1: entered allmulticast mode
[ 1406.978547][   T30] audit: type=1326 audit(1762687812.111:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz.6.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100238f6c9 code=0x7ffc0000
[ 1407.020030][   T30] audit: type=1326 audit(1762687812.111:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz.6.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f100238f6c9 code=0x7ffc0000
[ 1407.046282][   T30] audit: type=1326 audit(1406.752:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz.6.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100238f6c9 code=0x7ffc0000
[ 1407.075219][   T30] audit: type=1326 audit(1406.752:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz.6.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f100238f6c9 code=0x7ffc0000
[ 1407.156579][T20737] lo speed is unknown, defaulting to 1000
[ 1407.158477][   T30] audit: type=1326 audit(1406.752:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz.6.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100238f6c9 code=0x7ffc0000
[ 1407.283387][T20737] wg1 speed is unknown, defaulting to 1000
[ 1407.952968][   T30] audit: type=1326 audit(1406.752:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz.6.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f100238f6c9 code=0x7ffc0000
[ 1408.037156][   T30] audit: type=1326 audit(1406.752:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz.6.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100238f6c9 code=0x7ffc0000
[ 1408.079667][   T30] audit: type=1326 audit(1406.752:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz.6.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f100238f6c9 code=0x7ffc0000
[ 1408.492805][T20753] sd 0:0:1:0: device reset
[ 1409.174623][T20757] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3716'.
[ 1409.212354][T20757] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3716'.
[ 1409.327025][T20755] bridge4: entered allmulticast mode
[ 1409.460965][ T5891] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1409.680598][ T5891] usb 4-1: Using ep0 maxpacket: 8
[ 1410.123154][ T5891] usb 4-1: config 0 has an invalid interface number: 109 but max is 0
[ 1410.134213][ T5891] usb 4-1: config 0 has no interface number 0
[ 1410.142948][ T5891] usb 4-1: too many endpoints for config 0 interface 109 altsetting 95: 117, using maximum allowed: 30
[ 1410.271240][T20766] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1410.281541][T20766] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1410.882673][ T5891] usb 4-1: config 0 interface 109 altsetting 95 has 0 endpoint descriptors, different from the interface descriptor's value: 117
[ 1410.896148][ T5891] usb 4-1: config 0 interface 109 has no altsetting 0
[ 1410.905406][ T5891] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1410.915057][ T5891] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1410.923321][ T5891] usb 4-1: Product: syz
[ 1410.928599][ T5891] usb 4-1: Manufacturer: syz
[ 1410.936200][ T5891] usb 4-1: SerialNumber: syz
[ 1410.976321][ T5891] usb 4-1: config 0 descriptor??
[ 1411.006550][T20768] bridge4: entered allmulticast mode
[ 1411.221731][ T5891] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1411.256581][ T5891] gspca_zc3xx: reg_w_i err -71
[ 1411.270456][ T5891] gspca_zc3xx 4-1:0.109: probe with driver gspca_zc3xx failed with error -71
[ 1411.316387][ T5891] usb 4-1: USB disconnect, device number 101
[ 1411.350802][ T5878] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1411.381848][T20775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19992 sclass=netlink_route_socket pid=20775 comm=syz.4.3723
[ 1411.531066][ T5878] usb 7-1: Using ep0 maxpacket: 8
[ 1411.537855][ T5878] usb 7-1: config 0 has an invalid interface number: 109 but max is 0
[ 1411.559409][ T5878] usb 7-1: config 0 has no interface number 0
[ 1411.569332][ T5878] usb 7-1: too many endpoints for config 0 interface 109 altsetting 95: 117, using maximum allowed: 30
[ 1411.601611][ T5878] usb 7-1: config 0 interface 109 altsetting 95 has 0 endpoint descriptors, different from the interface descriptor's value: 117
[ 1411.641325][ T5878] usb 7-1: config 0 interface 109 has no altsetting 0
[ 1411.652260][ T5878] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1411.662477][ T5878] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1411.690877][ T5878] usb 7-1: Product: syz
[ 1411.695069][ T5878] usb 7-1: Manufacturer: syz
[ 1411.710803][ T5878] usb 7-1: SerialNumber: syz
[ 1411.717868][ T5878] usb 7-1: config 0 descriptor??
[ 1411.908164][T20779] netlink: 'syz.4.3723': attribute type 1 has an invalid length.
[ 1411.916123][T20779] netlink: 'syz.4.3723': attribute type 2 has an invalid length.
[ 1411.957460][ T5878] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1412.132308][ T5878] gspca_zc3xx: reg_w_i err -71
[ 1412.137155][ T5878] gspca_zc3xx 7-1:0.109: probe with driver gspca_zc3xx failed with error -71
[ 1412.628586][ T5878] usb 7-1: USB disconnect, device number 21
[ 1415.406646][T20815] lo speed is unknown, defaulting to 1000
[ 1415.418295][T20815] wg1 speed is unknown, defaulting to 1000
[ 1415.546897][   T30] kauditd_printk_skb: 8 callbacks suppressed
[ 1415.546913][   T30] audit: type=1400 audit(1415.512:2257): avc:  denied  { write } for  pid=20817 comm="syz.6.3734" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1415.741285][   T30] audit: type=1400 audit(1415.512:2258): avc:  denied  { open } for  pid=20817 comm="syz.6.3734" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1415.841071][   T30] audit: type=1400 audit(1415.562:2259): avc:  denied  { ioctl } for  pid=20817 comm="syz.6.3734" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1415.938754][T20824] overlayfs: missing 'workdir'
[ 1416.225573][   T30] audit: type=1400 audit(1416.192:2260): avc:  denied  { read } for  pid=20819 comm="syz.3.3735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1416.717265][T20837] vcan0: tx drop: invalid da for name 0x0000000000000003
[ 1418.427359][T20858] bridge3: entered allmulticast mode
[ 1419.493248][T20877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19992 sclass=netlink_route_socket pid=20877 comm=syz.6.3751
[ 1419.591142][T20880] FAULT_INJECTION: forcing a failure.
[ 1419.591142][T20880] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1419.605175][T20880] CPU: 0 UID: 0 PID: 20880 Comm: syz.3.3752 Not tainted syzkaller #0 PREEMPT(full) 
[ 1419.605203][T20880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1419.605215][T20880] Call Trace:
[ 1419.605222][T20880]  <TASK>
[ 1419.605229][T20880]  dump_stack_lvl+0x16c/0x1f0
[ 1419.605262][T20880]  should_fail_ex+0x512/0x640
[ 1419.605288][T20880]  _copy_from_user+0x2e/0xd0
[ 1419.605312][T20880]  copy_msghdr_from_user+0x98/0x160
[ 1419.605338][T20880]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1419.605367][T20880]  ? kfree+0x252/0x6d0
[ 1419.605400][T20880]  ___sys_sendmsg+0xfe/0x1d0
[ 1419.605427][T20880]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1419.605480][T20880]  ? __pfx___might_resched+0x10/0x10
[ 1419.605512][T20880]  __sys_sendmmsg+0x200/0x420
[ 1419.605542][T20880]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1419.605578][T20880]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1419.605611][T20880]  ? fput+0x9b/0xd0
[ 1419.605642][T20880]  ? ksys_write+0x1ac/0x250
[ 1419.605661][T20880]  ? __pfx_ksys_write+0x10/0x10
[ 1419.605685][T20880]  __x64_sys_sendmmsg+0x9c/0x100
[ 1419.605711][T20880]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1419.605741][T20880]  do_syscall_64+0xcd/0xfa0
[ 1419.605762][T20880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1419.605783][T20880] RIP: 0033:0x7f4b8318f6c9
[ 1419.605801][T20880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1419.605820][T20880] RSP: 002b:00007f4b83fe2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1419.605843][T20880] RAX: ffffffffffffffda RBX: 00007f4b833e5fa0 RCX: 00007f4b8318f6c9
[ 1419.605857][T20880] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000003
[ 1419.605870][T20880] RBP: 00007f4b83fe2090 R08: 0000000000000000 R09: 0000000000000000
[ 1419.605881][T20880] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000002
[ 1419.605893][T20880] R13: 00007f4b833e6038 R14: 00007f4b833e5fa0 R15: 00007ffdca6d7808
[ 1419.605922][T20880]  </TASK>
[ 1420.157812][T20879] lo speed is unknown, defaulting to 1000
[ 1420.210528][T20879] wg1 speed is unknown, defaulting to 1000
[ 1420.341566][T20881] netlink: 'syz.6.3751': attribute type 1 has an invalid length.
[ 1420.369543][T20881] netlink: 'syz.6.3751': attribute type 2 has an invalid length.
[ 1420.884319][    T9] IPVS: starting estimator thread 0...
[ 1420.902187][T20890] IPVS: wlc: FWM 3 0x00000003 - no destination available
[ 1420.909549][    C0] IPVS: wlc: FWM 3 0x00000003 - no destination available
[ 1421.002444][T20892] lo speed is unknown, defaulting to 1000
[ 1421.009584][T20892] wg1 speed is unknown, defaulting to 1000
[ 1421.061414][T20891] IPVS: using max 44 ests per chain, 105600 per kthread
[ 1421.521391][   T30] audit: type=1400 audit(1421.302:2261): avc:  denied  { write } for  pid=20894 comm="syz.8.3757" path="socket:[98482]" dev="sockfs" ino=98482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1421.839245][   T30] audit: type=1400 audit(1421.432:2262): avc:  denied  { ioctl } for  pid=20894 comm="syz.8.3757" path="socket:[98094]" dev="sockfs" ino=98094 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1421.939464][T20902] overlayfs: failed to resolve './file1/file0': -2
[ 1421.974489][T20902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3759'.
[ 1421.990955][   T30] audit: type=1400 audit(1421.942:2263): avc:  denied  { cmd } for  pid=20898 comm="syz.7.3756" path="socket:[98113]" dev="sockfs" ino=98113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1422.910039][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.120059][T20907] SELinux: failed to load policy
[ 1425.133528][ T7303] Bluetooth: hci1: unexpected event for opcode 0x0000
[ 1425.261228][T20914] netlink: 'syz.7.3764': attribute type 1 has an invalid length.
[ 1427.359695][T13735] block nbd1: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 1170 seconds
[ 1427.373190][T13735] block nbd1: Possible stuck request ffff888026c601c0: control (read@1024,1024B). Runtime 1170 seconds
[ 1427.389605][T20914] team_slave_0: entered promiscuous mode
[ 1427.395414][T13735] block nbd1: Possible stuck request ffff888026c60380: control (read@2048,1024B). Runtime 1170 seconds
[ 1427.488901][T13735] block nbd1: Possible stuck request ffff888026c60540: control (read@3072,1024B). Runtime 1170 seconds
[ 1427.630143][T20914] team_slave_0: entered allmulticast mode
[ 1427.933172][T20939] bridge1: entered allmulticast mode
[ 1428.100682][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1428.141640][T20947] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3771'.
[ 1428.300415][   T10] usb 9-1: Using ep0 maxpacket: 8
[ 1428.309613][   T10] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1428.390803][   T10] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1428.408088][   T10] usb 9-1: Product: syz
[ 1428.418167][   T10] usb 9-1: Manufacturer: syz
[ 1428.423987][   T10] usb 9-1: SerialNumber: syz
[ 1428.724711][   T30] audit: type=1400 audit(1428.612:2264): avc:  denied  { link } for  pid=20946 comm="syz.6.3772" name="#75" dev="tmpfs" ino=1467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1428.838822][   T10] usb 9-1: config 0 descriptor??
[ 1428.844632][   T30] audit: type=1400 audit(1428.612:2265): avc:  denied  { rename } for  pid=20946 comm="syz.6.3772" name="#76" dev="tmpfs" ino=1467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1428.899185][   T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1429.080135][   T10] gspca_zc3xx: reg_w_i err -71
[ 1429.110112][   T10] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 1429.142697][ T7303] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1429.153800][ T7303] Bluetooth: hci1: Injecting HCI hardware error event
[ 1429.154003][   T10] usb 9-1: USB disconnect, device number 2
[ 1429.173949][T13468] Bluetooth: hci1: hardware error 0x00
[ 1431.138298][   T30] audit: type=1800 audit(1431.042:2266): pid=20972 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3778" name="bus" dev="overlay" ino=102 res=0 errno=0
[ 1431.254022][T13468] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1434.828131][T21010] tipc: Started in network mode
[ 1434.846750][T21010] tipc: Node identity , cluster identity 4711
[ 1434.877876][T21010] tipc: Failed to set node id, please configure manually
[ 1434.908244][T21010] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1435.063464][T21014] overlayfs: missing 'workdir'
[ 1436.268060][T21026] ucma_write: process 621 (syz.4.3793) changed security contexts after opening file descriptor, this is not allowed.
[ 1436.334641][T21028] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1436.948060][T21035] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1436.987918][T21035] cramfs: wrong magic
[ 1437.179879][    T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1437.316326][    T9] usb 9-1: device descriptor read/64, error -71
[ 1437.699941][    T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1438.279904][    T9] usb 9-1: device descriptor read/64, error -71
[ 1438.476839][    T9] usb usb9-port1: attempt power cycle
[ 1438.590335][ T5891] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[ 1438.741946][ T5891] usb 8-1: config 0 has no interfaces?
[ 1438.750541][ T5891] usb 8-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[ 1438.766313][   T30] audit: type=1400 audit(1438.732:2267): avc:  denied  { unmount } for  pid=17570 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1438.792210][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1438.823690][ T5891] usb 8-1: Product: syz
[ 1438.828581][ T5891] usb 8-1: Manufacturer: syz
[ 1438.833574][ T5891] usb 8-1: SerialNumber: syz
[ 1438.843107][ T5891] usb 8-1: config 0 descriptor??
[ 1438.869781][    T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1439.319655][    T9] usb 9-1: device descriptor read/8, error -71
[ 1439.470788][T21063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1439.484398][T21063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1439.750703][   T30] audit: type=1400 audit(1439.642:2268): avc:  denied  { mounton } for  pid=21064 comm="syz.4.3804" path="/174/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[ 1440.106884][   T30] audit: type=1400 audit(1440.042:2269): avc:  denied  { unmount } for  pid=17570 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 1442.974403][ T5878] usb 8-1: USB disconnect, device number 2
[ 1443.255487][T21095] sctp: [Deprecated]: syz.3.3812 (pid 21095) Use of int in max_burst socket option deprecated.
[ 1443.255487][T21095] Use struct sctp_assoc_value instead
[ 1444.782892][T13468] block nbd4: Receive control failed (result -32)
[ 1444.923195][T21105] block nbd4: shutting down sockets
[ 1445.151275][ T5878] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1445.310782][ T5878] usb 8-1: device descriptor read/64, error -71
[ 1445.580909][ T5878] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1445.721596][ T5878] usb 8-1: device descriptor read/64, error -71
[ 1445.840871][ T5878] usb usb8-port1: attempt power cycle
[ 1446.650618][ T5878] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1446.882646][   T30] audit: type=1800 audit(1446.592:2270): pid=21122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3819" name="bus" dev="overlay" ino=1509 res=0 errno=0
[ 1446.929408][ T5878] usb 8-1: device descriptor read/8, error -71
[ 1447.363259][T21133] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3823'.
[ 1447.667953][T21143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19992 sclass=netlink_route_socket pid=21143 comm=syz.6.3828
[ 1448.920285][T21152] netlink: 'syz.6.3828': attribute type 1 has an invalid length.
[ 1448.936226][T21152] netlink: 'syz.6.3828': attribute type 2 has an invalid length.
[ 1452.289262][T21193] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1452.379819][   T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1452.744182][   T10] usb 8-1: device descriptor read/64, error -71
[ 1453.421913][   T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1453.673253][   T10] usb 8-1: device descriptor read/64, error -71
[ 1453.781116][   T10] usb usb8-port1: attempt power cycle
[ 1454.280515][   T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1454.881222][   T10] usb 8-1: device descriptor read/8, error -71
[ 1455.082161][T21219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3847'.
[ 1457.925174][T13735] block nbd1: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 1200 seconds
[ 1457.938282][T13735] block nbd1: Possible stuck request ffff888026c601c0: control (read@1024,1024B). Runtime 1200 seconds
[ 1457.950681][T13735] block nbd1: Possible stuck request ffff888026c60380: control (read@2048,1024B). Runtime 1200 seconds
[ 1457.963064][T13735] block nbd1: Possible stuck request ffff888026c60540: control (read@3072,1024B). Runtime 1200 seconds
[ 1458.073713][T21229] lo speed is unknown, defaulting to 1000
[ 1458.087673][T21229] wg1 speed is unknown, defaulting to 1000
[ 1458.097676][T21230] Mount JFS Failure: -5
[ 1458.301516][T19960] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1458.412179][ T5878] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1458.456115][T21245] Cannot find add_set index 0 as target
[ 1458.480780][T19960] usb 9-1: Using ep0 maxpacket: 16
[ 1458.541069][T19960] usb 9-1: config 0 has an invalid interface number: 41 but max is 0
[ 1458.565160][T19960] usb 9-1: config 0 has no interface number 0
[ 1458.575769][T19960] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1458.587829][T19960] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1458.599396][T19960] usb 9-1: config 0 interface 41 has no altsetting 0
[ 1458.605387][T21242] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3855'.
[ 1458.610950][T19960] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1458.627927][ T5878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1458.644624][ T5878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1458.656767][T19960] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1458.835799][T19960] usb 9-1: Product: syz
[ 1458.842024][T19960] usb 9-1: Manufacturer: syz
[ 1458.846646][T19960] usb 9-1: SerialNumber: syz
[ 1458.853238][ T5878] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1458.868902][ T5878] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1458.880159][T19960] usb 9-1: config 0 descriptor??
[ 1458.885333][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1458.894816][T21236] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1458.904579][T21236] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1459.344120][ T5878] usb 8-1: config 0 descriptor??
[ 1459.368777][T21236] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1459.392774][T21236] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1459.861034][T19960] Error reading MAC address
[ 1459.918043][T21236] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1460.322498][T21236] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1460.372972][ T5878] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[ 1460.461746][T21267] FAULT_INJECTION: forcing a failure.
[ 1460.461746][T21267] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1460.551201][T21267] CPU: 1 UID: 0 PID: 21267 Comm: syz.4.3861 Not tainted syzkaller #0 PREEMPT(full) 
[ 1460.551232][T21267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1460.551243][T21267] Call Trace:
[ 1460.551249][T21267]  <TASK>
[ 1460.551260][T21267]  dump_stack_lvl+0x16c/0x1f0
[ 1460.551298][T21267]  should_fail_ex+0x512/0x640
[ 1460.551327][T21267]  _copy_to_user+0x32/0xd0
[ 1460.551354][T21267]  simple_read_from_buffer+0xcb/0x170
[ 1460.551387][T21267]  proc_fail_nth_read+0x197/0x240
[ 1460.551412][T21267]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1460.551435][T21267]  ? rw_verify_area+0xcf/0x6c0
[ 1460.551461][T21267]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1460.551482][T21267]  vfs_read+0x1e4/0xcf0
[ 1460.551505][T21267]  ? __pfx___mutex_lock+0x10/0x10
[ 1460.551527][T21267]  ? __pfx_vfs_read+0x10/0x10
[ 1460.551552][T21267]  ? __fget_files+0x20e/0x3c0
[ 1460.551582][T21267]  ksys_read+0x12a/0x250
[ 1460.551602][T21267]  ? __pfx_ksys_read+0x10/0x10
[ 1460.551622][T21267]  ? fput+0x9b/0xd0
[ 1460.551650][T21267]  do_syscall_64+0xcd/0xfa0
[ 1460.551671][T21267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1460.551692][T21267] RIP: 0033:0x7f7a9038e0dc
[ 1460.551708][T21267] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1460.551728][T21267] RSP: 002b:00007f7a912a2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1460.551747][T21267] RAX: ffffffffffffffda RBX: 00007f7a905e5fa0 RCX: 00007f7a9038e0dc
[ 1460.551761][T21267] RDX: 000000000000000f RSI: 00007f7a912a20a0 RDI: 0000000000000004
[ 1460.551775][T21267] RBP: 00007f7a912a2090 R08: 0000000000000000 R09: 0000000000000000
[ 1460.551788][T21267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1460.551804][T21267] R13: 00007f7a905e6038 R14: 00007f7a905e5fa0 R15: 00007ffd2d059f08
[ 1460.551831][T21267]  </TASK>
[ 1460.996845][T19960] sr9700 9-1:0.41 eth9: register 'sr9700' at usb-dummy_hcd.8-1, CoreChip SR9700 USB Ethernet, 06:cc:4c:3d:aa:15
[ 1461.019042][T19960] usb 9-1: USB disconnect, device number 7
[ 1461.042609][T19960] sr9700 9-1:0.41 eth9: unregister 'sr9700' usb-dummy_hcd.8-1, CoreChip SR9700 USB Ethernet
[ 1461.285879][ T5878] usb 8-1: USB disconnect, device number 11
[ 1461.601670][T21284] netlink: 'syz.7.3865': attribute type 1 has an invalid length.
[ 1461.831303][T21290] smc: net device bond0 applied user defined pnetid SYZ2
[ 1461.839629][T21290] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3866'.
[ 1462.106913][T21290] smc: removing net device bond0 with user defined pnetid SYZ2
[ 1462.122109][T21290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1462.143795][T21290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1462.156675][T21290] bond0 (unregistering): Released all slaves
[ 1462.182300][T21284] bond1: entered promiscuous mode
[ 1462.187763][T21284] bond1: entered allmulticast mode
[ 1462.204001][T21284] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1462.349316][T21285] bridge1: entered promiscuous mode
[ 1462.355067][T21285] bridge1: entered allmulticast mode
[ 1462.406623][T21293] overlayfs: missing 'workdir'
[ 1462.411266][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1462.432976][T21285] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1462.505360][T21295] Bluetooth: MGMT ver 1.23
[ 1462.550757][ T7327] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1462.856775][T21299] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1464.390636][ T5892] kernel read not supported for file /dsp1 (pid: 5892 comm: kworker/0:4)
[ 1465.152555][T21320] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3873'.
[ 1466.073264][ T5878] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1466.300739][ T5810] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1466.322725][ T5878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1466.335597][ T5878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1466.348038][ T5878] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1466.364494][ T5878] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1466.374595][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1466.390612][    T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1466.393543][ T5878] usb 9-1: config 0 descriptor??
[ 1466.451387][ T5810] usb 4-1: Using ep0 maxpacket: 32
[ 1466.481748][ T5810] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[ 1466.507060][ T5810] usb 4-1: config 0 has no interface number 0
[ 1466.572508][ T5810] usb 4-1: config 0 interface 85 has no altsetting 0
[ 1466.607683][    T9] usb 7-1: Using ep0 maxpacket: 32
[ 1466.633979][    T9] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[ 1466.645328][    T9] usb 7-1: config 0 has no interface number 0
[ 1466.652340][    T9] usb 7-1: config 0 interface 85 has no altsetting 0
[ 1466.674526][ T5810] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1466.676471][    T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1466.698531][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1466.736855][    T9] usb 7-1: Product: syz
[ 1466.742840][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1466.742858][    T9] usb 7-1: Manufacturer: syz
[ 1466.750993][    T9] usb 7-1: SerialNumber: syz
[ 1466.764435][    T9] usb 7-1: config 0 descriptor??
[ 1466.771727][    T9] appletouch 7-1:0.85: Could not find int-in endpoint
[ 1466.783874][    T9] appletouch 7-1:0.85: probe with driver appletouch failed with error -5
[ 1466.793411][    T9] usbhid 7-1:0.85: couldn't find an input interrupt endpoint
[ 1466.901600][ T5810] usb 4-1: Product: syz
[ 1466.911344][ T5810] usb 4-1: Manufacturer: syz
[ 1466.929493][ T5810] usb 4-1: SerialNumber: syz
[ 1466.981653][ T5878] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1467.052120][ T5810] usb 4-1: config 0 descriptor??
[ 1467.180992][ T5810] appletouch 4-1:0.85: Could not find int-in endpoint
[ 1467.235865][ T5810] appletouch 4-1:0.85: probe with driver appletouch failed with error -5
[ 1467.331529][ T5810] usbhid 4-1:0.85: couldn't find an input interrupt endpoint
[ 1468.212410][ T5892] usb 7-1: USB disconnect, device number 22
[ 1468.272375][T21330] usb 9-1: string descriptor 0 read error: -2
[ 1468.400846][ T5891] usb 9-1: reset high-speed USB device number 8 using dummy_hcd
[ 1468.454049][ T5892] usb 4-1: USB disconnect, device number 102
[ 1468.572207][ T5891] usb 9-1: device descriptor read/64, error -32
[ 1468.825005][ T5891] usb 9-1: reset high-speed USB device number 8 using dummy_hcd
[ 1469.103020][ T5891] usb 9-1: device descriptor read/64, error -32
[ 1469.359863][ T5891] usb 9-1: reset high-speed USB device number 8 using dummy_hcd
[ 1469.661041][T21366] overlayfs: missing 'workdir'
[ 1469.803478][ T5891] usb 9-1: device not accepting address 8, error -71
[ 1470.848398][    T9] usb 9-1: USB disconnect, device number 8
[ 1474.910963][ T5891] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1475.284679][T21421] input: syz1 as /devices/virtual/input/input52
[ 1475.389878][ T5891] usb 8-1: Using ep0 maxpacket: 8
[ 1475.397239][ T5891] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1475.418802][ T5891] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1475.428270][ T5891] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1475.474165][ T5891] usb 8-1: config 0 descriptor??
[ 1475.506806][ T5891] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1475.841823][T13468] Bluetooth: hci4: SCO packet for unknown connection handle 200
[ 1475.942864][T21413] FAULT_INJECTION: forcing a failure.
[ 1475.942864][T21413] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1475.968340][T21413] CPU: 0 UID: 0 PID: 21413 Comm: syz.7.3897 Not tainted syzkaller #0 PREEMPT(full) 
[ 1475.968369][T21413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1475.968381][T21413] Call Trace:
[ 1475.968388][T21413]  <TASK>
[ 1475.968396][T21413]  dump_stack_lvl+0x16c/0x1f0
[ 1475.968434][T21413]  should_fail_ex+0x512/0x640
[ 1475.968461][T21413]  _copy_to_user+0x32/0xd0
[ 1475.968487][T21413]  simple_read_from_buffer+0xcb/0x170
[ 1475.968521][T21413]  proc_fail_nth_read+0x197/0x240
[ 1475.968546][T21413]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1475.968572][T21413]  ? rw_verify_area+0xcf/0x6c0
[ 1475.968600][T21413]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1475.968623][T21413]  vfs_read+0x1e4/0xcf0
[ 1475.968646][T21413]  ? __pfx___mutex_lock+0x10/0x10
[ 1475.968667][T21413]  ? __pfx_vfs_read+0x10/0x10
[ 1475.968700][T21413]  ? __fget_files+0x20e/0x3c0
[ 1475.968730][T21413]  ksys_read+0x12a/0x250
[ 1475.968748][T21413]  ? __pfx_ksys_read+0x10/0x10
[ 1475.968776][T21413]  do_syscall_64+0xcd/0xfa0
[ 1475.968798][T21413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1475.968819][T21413] RIP: 0033:0x7efcd0d8e0dc
[ 1475.968835][T21413] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1475.968854][T21413] RSP: 002b:00007efcd1b47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1475.968874][T21413] RAX: ffffffffffffffda RBX: 00007efcd0fe5fa0 RCX: 00007efcd0d8e0dc
[ 1475.968888][T21413] RDX: 000000000000000f RSI: 00007efcd1b470a0 RDI: 0000000000000007
[ 1475.968900][T21413] RBP: 00007efcd1b47090 R08: 0000000000000000 R09: 0000000000000000
[ 1475.968913][T21413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1475.968926][T21413] R13: 00007efcd0fe6038 R14: 00007efcd0fe5fa0 R15: 00007fff3f989ca8
[ 1475.968957][T21413]  </TASK>
[ 1476.359925][ T5891] gspca_vc032x: reg_w err -110
[ 1476.366454][ T5891] vc032x 8-1:0.0: probe with driver vc032x failed with error -110
[ 1476.385432][ T5891] usb 8-1: USB disconnect, device number 12
[ 1476.415463][T21439] netlink: 'syz.3.3904': attribute type 1 has an invalid length.
[ 1476.432539][   T30] audit: type=1400 audit(1476.182:2271): avc:  denied  { map } for  pid=21436 comm="syz.8.3905" path="/dev/sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1476.721122][ T5878] usb 9-1: new low-speed USB device number 9 using dummy_hcd
[ 1476.740201][   T30] audit: type=1400 audit(1476.402:2272): avc:  denied  { execute } for  pid=21436 comm="syz.8.3905" path="/dev/sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1476.912886][ T5878] usb 9-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a
[ 1477.006857][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1477.052818][T21439] smc: adding net device bond0 with user defined pnetid SYZ2
[ 1477.063166][T21446] bond0: entered promiscuous mode
[ 1477.075873][T21446] bond0: entered allmulticast mode
[ 1477.089077][T21446] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1477.105662][ T5878] usb 9-1: config 0 descriptor??
[ 1477.986645][ T5878] pwc: Logitech QuickCam Notebook Pro USB webcam detected.
[ 1478.004601][T21454] block nbd6: shutting down sockets
[ 1480.266248][ T5878] pwc: Failed to set LED on/off time (-71)
[ 1480.550049][ T5878] pwc: send_video_command error -71
[ 1480.581441][ T5878] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1480.611113][ T5878] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71
[ 1480.671774][ T5878] usb 9-1: USB disconnect, device number 9
[ 1480.690579][T21475] FAULT_INJECTION: forcing a failure.
[ 1480.690579][T21475] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1480.746637][T21475] CPU: 1 UID: 0 PID: 21475 Comm: syz.8.3914 Not tainted syzkaller #0 PREEMPT(full) 
[ 1480.746664][T21475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1480.746676][T21475] Call Trace:
[ 1480.746683][T21475]  <TASK>
[ 1480.746691][T21475]  dump_stack_lvl+0x16c/0x1f0
[ 1480.746722][T21475]  should_fail_ex+0x512/0x640
[ 1480.746750][T21475]  _copy_to_user+0x32/0xd0
[ 1480.746775][T21475]  simple_read_from_buffer+0xcb/0x170
[ 1480.746806][T21475]  proc_fail_nth_read+0x197/0x240
[ 1480.746830][T21475]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1480.746855][T21475]  ? rw_verify_area+0xcf/0x6c0
[ 1480.746883][T21475]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1480.746905][T21475]  vfs_read+0x1e4/0xcf0
[ 1480.746926][T21475]  ? __pfx___mutex_lock+0x10/0x10
[ 1480.746945][T21475]  ? __pfx_vfs_read+0x10/0x10
[ 1480.746970][T21475]  ? __fget_files+0x20e/0x3c0
[ 1480.747000][T21475]  ksys_read+0x12a/0x250
[ 1480.747018][T21475]  ? __pfx_ksys_read+0x10/0x10
[ 1480.747047][T21475]  do_syscall_64+0xcd/0xfa0
[ 1480.747067][T21475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1480.747088][T21475] RIP: 0033:0x7f1e4758e0dc
[ 1480.747104][T21475] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1480.747123][T21475] RSP: 002b:00007f1e48492030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1480.747143][T21475] RAX: ffffffffffffffda RBX: 00007f1e477e5fa0 RCX: 00007f1e4758e0dc
[ 1480.747157][T21475] RDX: 000000000000000f RSI: 00007f1e484920a0 RDI: 0000000000000004
[ 1480.747168][T21475] RBP: 00007f1e48492090 R08: 0000000000000000 R09: 0000000000000000
[ 1480.747180][T21475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1480.747193][T21475] R13: 00007f1e477e6038 R14: 00007f1e477e5fa0 R15: 00007ffc23da3918
[ 1480.747224][T21475]  </TASK>
[ 1482.228376][T21500] No source specified
[ 1482.241429][T21500] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3920'.
[ 1482.527245][   T30] audit: type=1400 audit(1482.492:2273): avc:  denied  { write } for  pid=21507 comm="syz.4.3926" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1483.553453][ T5940] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1483.980715][ T5940] usb 7-1: Using ep0 maxpacket: 32
[ 1483.995721][ T5940] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1484.015103][ T5940] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1484.140617][ T5940] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1484.159611][ T5940] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1484.175046][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1484.236399][ T5940] usb 7-1: Product: syz
[ 1484.256189][ T5940] usb 7-1: Manufacturer: syz
[ 1484.266956][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.321803][ T5940] usb 7-1: SerialNumber: syz
[ 1484.351148][ T5940] cdc_ncm 7-1:1.0: skipping garbage
[ 1484.375165][ T5940] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[ 1484.388029][ T5940] cdc_ncm 7-1:1.0: bind() failure
[ 1484.561705][ T5940] usb 7-1: USB disconnect, device number 23
[ 1485.383224][T21532] FAULT_INJECTION: forcing a failure.
[ 1485.383224][T21532] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1485.527188][T21532] CPU: 0 UID: 0 PID: 21532 Comm: syz.6.3931 Not tainted syzkaller #0 PREEMPT(full) 
[ 1485.527219][T21532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1485.527231][T21532] Call Trace:
[ 1485.527238][T21532]  <TASK>
[ 1485.527247][T21532]  dump_stack_lvl+0x16c/0x1f0
[ 1485.527282][T21532]  should_fail_ex+0x512/0x640
[ 1485.527310][T21532]  _copy_to_user+0x32/0xd0
[ 1485.527337][T21532]  simple_read_from_buffer+0xcb/0x170
[ 1485.527366][T21532]  proc_fail_nth_read+0x197/0x240
[ 1485.527389][T21532]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1485.527413][T21532]  ? rw_verify_area+0xcf/0x6c0
[ 1485.527441][T21532]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1485.527463][T21532]  vfs_read+0x1e4/0xcf0
[ 1485.527487][T21532]  ? __pfx___mutex_lock+0x10/0x10
[ 1485.527508][T21532]  ? __pfx_vfs_read+0x10/0x10
[ 1485.527535][T21532]  ? __fget_files+0x20e/0x3c0
[ 1485.527564][T21532]  ksys_read+0x12a/0x250
[ 1485.527583][T21532]  ? __pfx_ksys_read+0x10/0x10
[ 1485.527609][T21532]  do_syscall_64+0xcd/0xfa0
[ 1485.527632][T21532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1485.527653][T21532] RIP: 0033:0x7f100238e0dc
[ 1485.527670][T21532] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1485.527687][T21532] RSP: 002b:00007f10005f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1485.527707][T21532] RAX: ffffffffffffffda RBX: 00007f10025e5fa0 RCX: 00007f100238e0dc
[ 1485.527719][T21532] RDX: 000000000000000f RSI: 00007f10005f60a0 RDI: 0000000000000004
[ 1485.527733][T21532] RBP: 00007f10005f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1485.527745][T21532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1485.527758][T21532] R13: 00007f10025e6038 R14: 00007f10025e5fa0 R15: 00007ffdad3343d8
[ 1485.527788][T21532]  </TASK>
[ 1486.300885][ T5878] IPVS: starting estimator thread 0...
[ 1487.373058][T21542] IPVS: using max 33 ests per chain, 79200 per kthread
[ 1487.507569][    T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1487.806682][    T9] usb 8-1: Using ep0 maxpacket: 8
[ 1487.848975][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1487.885400][    T9] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1487.905634][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1488.060259][    T9] usb 8-1: config 0 descriptor??
[ 1488.144911][T13735] block nbd1: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 1230 seconds
[ 1488.147219][    T9] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1488.157288][T13735] block nbd1: Possible stuck request ffff888026c601c0: control (read@1024,1024B). Runtime 1230 seconds
[ 1488.176673][T13735] block nbd1: Possible stuck request ffff888026c60380: control (read@2048,1024B). Runtime 1230 seconds
[ 1488.188688][T13735] block nbd1: Possible stuck request ffff888026c60540: control (read@3072,1024B). Runtime 1230 seconds
[ 1488.264196][T21556] loop7: detected capacity change from 0 to 7
[ 1488.360499][T21556] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1488.376631][T21556] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1488.390307][T21556] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1488.404295][T21556] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1488.417049][T21556] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1488.430072][T21556] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1488.441726][T21556] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1488.450676][T21556] ldm_validate_partition_table(): Disk read failed.
[ 1488.460031][T21556] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1488.469012][T21556] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1488.479600][T21556] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1488.489797][T21556] Dev loop7: unable to read RDB block 0
[ 1488.499932][T21556]  loop7: unable to read partition table
[ 1488.510530][T21556] loop7: partition table beyond EOD, truncated
[ 1488.516857][T21556] loop_reread_partitions: partition scan of loop7 (����7x~��S�j̖�P) failed (rc=-5)
[ 1488.736589][T21561] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3941'.
[ 1488.870090][ T5185] ldm_validate_partition_table(): Disk read failed.
[ 1488.881274][ T5185] Dev loop7: unable to read RDB block 0
[ 1488.893035][ T5185]  loop7: unable to read partition table
[ 1488.899063][ T5185] loop7: partition table beyond EOD, truncated
[ 1489.117888][T13468] block nbd3: Receive control failed (result -32)
[ 1489.125600][T21560] block nbd3: shutting down sockets
[ 1489.302276][T21578] FAULT_INJECTION: forcing a failure.
[ 1489.302276][T21578] name failslab, interval 1, probability 0, space 0, times 0
[ 1489.315672][T21578] CPU: 1 UID: 0 PID: 21578 Comm: syz.4.3945 Not tainted syzkaller #0 PREEMPT(full) 
[ 1489.315699][T21578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1489.315712][T21578] Call Trace:
[ 1489.315721][T21578]  <TASK>
[ 1489.315729][T21578]  dump_stack_lvl+0x16c/0x1f0
[ 1489.315764][T21578]  should_fail_ex+0x512/0x640
[ 1489.315788][T21578]  ? fs_reclaim_acquire+0xae/0x150
[ 1489.315804][T21578]  should_failslab+0xc2/0x120
[ 1489.315817][T21578]  __kmalloc_noprof+0xdd/0x880
[ 1489.315833][T21578]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1489.315850][T21578]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1489.315872][T21578]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1489.315899][T21578]  ? tomoyo_profile+0x47/0x60
[ 1489.315928][T21578]  tomoyo_path_number_perm+0x245/0x580
[ 1489.315957][T21578]  ? tomoyo_path_number_perm+0x237/0x580
[ 1489.315990][T21578]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1489.316023][T21578]  ? find_held_lock+0x2b/0x80
[ 1489.316075][T21578]  ? find_held_lock+0x2b/0x80
[ 1489.316088][T21578]  ? hook_file_ioctl_common+0x145/0x410
[ 1489.316106][T21578]  ? __fget_files+0x20e/0x3c0
[ 1489.316120][T21578]  security_file_ioctl+0x9b/0x240
[ 1489.316135][T21578]  __x64_sys_ioctl+0xb7/0x210
[ 1489.316164][T21578]  do_syscall_64+0xcd/0xfa0
[ 1489.316186][T21578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1489.316208][T21578] RIP: 0033:0x7f7a9038f6c9
[ 1489.316222][T21578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1489.316233][T21578] RSP: 002b:00007f7a91281038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1489.316244][T21578] RAX: ffffffffffffffda RBX: 00007f7a905e6090 RCX: 00007f7a9038f6c9
[ 1489.316252][T21578] RDX: 0000200000000040 RSI: 00000000402c542b RDI: 0000000000000006
[ 1489.316260][T21578] RBP: 00007f7a91281090 R08: 0000000000000000 R09: 0000000000000000
[ 1489.316266][T21578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1489.316272][T21578] R13: 00007f7a905e6128 R14: 00007f7a905e6090 R15: 00007ffd2d059f08
[ 1489.316297][T21578]  </TASK>
[ 1489.316306][T21578] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1489.535816][    T9] gspca_vc032x: reg_w err -71
[ 1489.560949][    T9] vc032x 8-1:0.0: probe with driver vc032x failed with error -71
[ 1489.596288][    T9] usb 8-1: USB disconnect, device number 13
[ 1489.954752][T21590] xt_hashlimit: size too large, truncated to 1048576
[ 1489.971325][T21590] xt_hashlimit: max too large, truncated to 1048576
[ 1490.632783][T21608] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3951'.
[ 1490.831269][ T7660] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1491.024535][   T30] audit: type=1400 audit(1490.982:2274): avc:  denied  { getopt } for  pid=21619 comm="syz.6.3954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1491.106162][ T7660] usb 4-1: Using ep0 maxpacket: 8
[ 1491.139620][ T7660] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1491.163066][ T7660] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1491.224237][ T7660] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1491.260638][ T7660] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1491.286956][ T7660] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1491.324802][ T7660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1491.543537][    T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1491.579121][T21635] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3958'.
[ 1491.613877][ T7660] usb 4-1: GET_CAPABILITIES returned 0
[ 1491.650496][T21635] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3958'.
[ 1491.657292][ T7660] usbtmc 4-1:16.0: can't read capabilities
[ 1491.913556][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1491.927322][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1491.948749][    T9] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1491.980351][    T9] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1492.000827][    T9] usb 7-1: Manufacturer: syz
[ 1492.044408][    T9] usb 7-1: config 0 descriptor??
[ 1492.415285][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.424710][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.433793][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.442894][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.453894][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.462999][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.472068][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.481153][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.501727][ T7660] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1492.509623][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.519270][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.528386][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.537468][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.546537][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.560315][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.569432][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.578510][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1492.690724][ T7660] usb 8-1: device descriptor read/64, error -71
[ 1492.722175][    T9] uclogic 0003:256C:006D.001F: failed retrieving Huion firmware version: -71
[ 1492.731944][    T9] uclogic 0003:256C:006D.001F: failed probing parameters: -71
[ 1492.741328][    T9] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71
[ 1492.755573][    T9] usb 7-1: USB disconnect, device number 24
[ 1492.930336][ T7660] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 1493.070879][ T7660] usb 8-1: device descriptor read/64, error -71
[ 1493.184562][ T7660] usb usb8-port1: attempt power cycle
[ 1493.802809][    T9] usb 4-1: USB disconnect, device number 103
[ 1493.921019][ T7660] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1493.934673][   T30] audit: type=1400 audit(1493.902:2275): avc:  denied  { getattr } for  pid=21668 comm="syz.3.3966" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1493.951364][ T7660] usb 8-1: device descriptor read/8, error -71
[ 1494.010481][ T5891] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1494.261046][ T7660] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[ 1494.279749][ T5891] usb 9-1: Using ep0 maxpacket: 32
[ 1494.353315][ T7660] usb 8-1: device descriptor read/8, error -71
[ 1494.393672][ T5891] usb 9-1: config 0 has an invalid interface number: 85 but max is 0
[ 1494.473122][ T5891] usb 9-1: config 0 has no interface number 0
[ 1494.505881][ T5891] usb 9-1: config 0 interface 85 has no altsetting 0
[ 1494.519336][ T7660] usb usb8-port1: unable to enumerate USB device
[ 1494.529219][ T5891] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1494.873967][T21675] team_slave_0: entered promiscuous mode
[ 1494.880177][T21675] team_slave_1: entered promiscuous mode
[ 1494.886205][T21675] macsec2: entered promiscuous mode
[ 1494.891527][T21675] team0: entered promiscuous mode
[ 1494.899861][T21675] macsec2: entered allmulticast mode
[ 1494.918142][T21675] team0: entered allmulticast mode
[ 1494.929878][T21675] team_slave_0: entered allmulticast mode
[ 1494.941744][T21675] team_slave_1: entered allmulticast mode
[ 1495.009841][T21675] team0: Device macsec2 is already an upper device of the team interface
[ 1495.249239][ T5878] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1495.575329][ T5891] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1495.610851][ T5891] usb 9-1: Product: syz
[ 1495.639719][ T5891] usb 9-1: Manufacturer: syz
[ 1495.644370][ T5891] usb 9-1: SerialNumber: syz
[ 1495.663442][T21675] team0: left allmulticast mode
[ 1495.669381][T21675] team_slave_0: left allmulticast mode
[ 1495.677117][T21675] team_slave_1: left allmulticast mode
[ 1495.684819][T21675] team0: left promiscuous mode
[ 1495.694051][T21675] team_slave_0: left promiscuous mode
[ 1495.699436][T21675] team_slave_1: left promiscuous mode
[ 1495.716671][ T5878] usb 7-1: Using ep0 maxpacket: 16
[ 1495.724686][ T5878] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1495.725395][ T5891] usb 9-1: config 0 descriptor??
[ 1495.747156][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1495.779528][ T5878] usb 7-1: config 0 descriptor??
[ 1495.912365][ T5891] appletouch 9-1:0.85: Could not find int-in endpoint
[ 1496.011922][ T5891] appletouch 9-1:0.85: probe with driver appletouch failed with error -5
[ 1496.126908][ T5878] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1496.195488][ T5891] usbhid 9-1:0.85: couldn't find an input interrupt endpoint
[ 1496.947437][   T10] usb 9-1: USB disconnect, device number 10
[ 1497.510839][ T5878] gspca_sonixj: reg_w1 err -110
[ 1497.531267][ T5878] sonixj 7-1:0.0: probe with driver sonixj failed with error -110
[ 1497.624089][T13468] block nbd3: Receive control failed (result -32)
[ 1497.636269][T21696] block nbd3: shutting down sockets
[ 1498.616182][T21719] No source specified
[ 1498.634543][T21719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3975'.
[ 1498.960752][ T5878] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[ 1498.961387][ T5891] usb 7-1: USB disconnect, device number 25
[ 1499.121059][ T5878] usb 8-1: device descriptor read/64, error -71
[ 1499.130959][ T5940] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1499.292882][ T5940] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1499.305633][ T5940] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1499.317393][ T5940] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1499.332614][ T5940] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1499.353373][ T5940] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1499.362785][ T5878] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[ 1499.381379][ T5940] usb 9-1: config 0 descriptor??
[ 1499.499874][ T5878] usb 8-1: device descriptor read/64, error -71
[ 1499.700938][ T5878] usb usb8-port1: attempt power cycle
[ 1499.842514][ T5940] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1500.151453][T21724] usb 9-1: string descriptor 0 read error: -71
[ 1500.172293][ T5891] usb 9-1: USB disconnect, device number 11
[ 1500.529570][ T5878] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[ 1500.591972][ T5878] usb 8-1: device descriptor read/8, error -71
[ 1500.600427][T21738] binder: 21727:21738 ioctl c0306201 200000000040 returned -14
[ 1501.011273][ T5878] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[ 1501.041862][ T5878] usb 8-1: device descriptor read/8, error -71
[ 1501.165278][ T5878] usb usb8-port1: unable to enumerate USB device
[ 1502.902809][T21763] delete_channel: no stack
[ 1502.916205][   T30] audit: type=1400 audit(1502.882:2276): avc:  denied  { ioctl } for  pid=21757 comm="syz.6.3992" path="socket:[102012]" dev="sockfs" ino=102012 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1502.966272][T21763] fuse: Unknown parameter 'fd0x000000000000000d'
[ 1506.705154][T21785] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1506.712260][T21785] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1506.718712][T21785] comedi comedi3: 8255: I/O port conflict (0x7,4)
[ 1506.725683][T21785] comedi comedi3: 8255: I/O port conflict (0x4,4)
[ 1506.784013][T21785] comedi comedi3: 8255: I/O port conflict (0x8,4)
[ 1506.806514][T21785] comedi comedi3: 8255: I/O port conflict (0xa,4)
[ 1506.930025][T21794] binder: 21782:21794 ioctl c0306201 200000000040 returned -14
[ 1507.020319][   T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1507.469810][   T10] usb 9-1: device descriptor read/64, error -71
[ 1507.717237][   T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1507.857333][   T10] usb 9-1: device descriptor read/64, error -71
[ 1508.115484][   T10] usb usb9-port1: attempt power cycle
[ 1508.841147][ T7303] Bluetooth: hci0: command 0x0406 tx timeout
[ 1508.849771][   T30] audit: type=1400 audit(1508.362:2277): avc:  denied  { getopt } for  pid=21809 comm="syz.6.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1509.614379][T21825] overlayfs: overlapping lowerdir path
[ 1510.560850][T21832] sd 0:0:1:0: device reset
[ 1510.820848][ T5878] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1511.121343][T21841] overlayfs: failed to resolve './file1/file0': -2
[ 1511.182050][T21841] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4012'.
[ 1511.417575][T21844] fuse: Bad value for 'fd'
[ 1511.562660][   T30] audit: type=1400 audit(1511.382:2278): avc:  denied  { mounton } for  pid=21837 comm="syz.4.4011" path="/215/file0" dev="tmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[ 1511.611296][ T5878] usb 4-1: Using ep0 maxpacket: 32
[ 1511.653194][ T5878] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1512.209813][T13468] Bluetooth: hci2: command 0x0406 tx timeout
[ 1512.347182][T21845] SELinux: failed to load policy
[ 1512.631190][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1512.650797][ T5878] usb 4-1: Product: syz
[ 1512.655274][ T5878] usb 4-1: Manufacturer: syz
[ 1512.663946][ T5878] usb 4-1: SerialNumber: syz
[ 1512.704784][ T5878] usb 4-1: config 0 descriptor??
[ 1512.837144][ T5878] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1512.930972][T21851] binder: 21848:21851 ioctl c0306201 200000000040 returned -14
[ 1513.954769][T21855] overlayfs: overlapping lowerdir path
[ 1514.968231][T21856] block nbd8: shutting down sockets
[ 1515.109849][ T5810] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1515.272019][ T5810] usb 7-1: Using ep0 maxpacket: 8
[ 1515.310919][ T5810] usb 7-1: no configurations
[ 1515.315698][ T5810] usb 7-1: can't read configurations, error -22
[ 1515.820674][ T5810] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 1515.877413][ T5878] gspca_stk1135: reg_w 0x203 err -71
[ 1515.886489][ T5878] gspca_stk1135: serial bus timeout: status=0x00
[ 1515.896977][ T5878] gspca_stk1135: Sensor write failed
[ 1515.905600][ T5878] gspca_stk1135: serial bus timeout: status=0x00
[ 1515.932943][ T5878] gspca_stk1135: Sensor write failed
[ 1515.947691][ T5878] gspca_stk1135: serial bus timeout: status=0x00
[ 1515.961347][ T5878] gspca_stk1135: Sensor read failed
[ 1515.973743][ T5878] gspca_stk1135: serial bus timeout: status=0x00
[ 1515.979947][T21879] syz.8.4020 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1515.981505][ T5878] gspca_stk1135: Sensor read failed
[ 1516.000859][ T5878] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1516.007651][ T5878] gspca_stk1135: serial bus timeout: status=0x00
[ 1516.033161][ T5810] usb 7-1: Using ep0 maxpacket: 8
[ 1516.048964][ T5810] usb 7-1: no configurations
[ 1516.061461][ T5878] gspca_stk1135: Sensor read failed
[ 1516.066727][ T5878] gspca_stk1135: serial bus timeout: status=0x00
[ 1516.077979][ T5810] usb 7-1: can't read configurations, error -22
[ 1516.079442][   T30] audit: type=1400 audit(1516.052:2279): avc:  denied  { accept } for  pid=21876 comm="syz.8.4020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1516.085916][ T5878] gspca_stk1135: Sensor read failed
[ 1516.114338][ T5810] usb usb7-port1: attempt power cycle
[ 1516.122540][ T5878] gspca_stk1135: serial bus timeout: status=0x00
[ 1516.128980][ T5878] gspca_stk1135: Sensor write failed
[ 1516.136502][ T5878] gspca_stk1135: serial bus timeout: status=0x00
[ 1516.145075][ T5878] gspca_stk1135: Sensor write failed
[ 1516.153038][ T5878] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[ 1516.171333][ T5878] usb 4-1: USB disconnect, device number 104
[ 1516.404102][T21891] netlink: 'syz.4.4023': attribute type 1 has an invalid length.
[ 1516.772234][T21881] block nbd3: shutting down sockets
[ 1516.778077][ T5810] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 1516.855593][ T5810] usb 7-1: Using ep0 maxpacket: 8
[ 1516.989535][ T5810] usb 7-1: no configurations
[ 1517.001331][T21891] bond3: entered promiscuous mode
[ 1517.006458][ T5810] usb 7-1: can't read configurations, error -22
[ 1517.015624][T21891] bond3: entered allmulticast mode
[ 1517.023407][T21891] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1517.165575][ T5810] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[ 1517.205543][ T5810] usb 7-1: Using ep0 maxpacket: 8
[ 1517.221782][ T5810] usb 7-1: no configurations
[ 1517.260266][ T5810] usb 7-1: can't read configurations, error -22
[ 1517.284718][T21891] bridge4: entered promiscuous mode
[ 1517.290447][T21891] bridge4: entered allmulticast mode
[ 1517.297107][T21891] bond3: (slave bridge4): Enslaving as a backup interface with an up link
[ 1517.363868][ T1104] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1517.378359][ T5810] usb usb7-port1: unable to enumerate USB device
[ 1518.074123][T21262] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1518.185517][T13735] block nbd1: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 1260 seconds
[ 1518.220502][T21901] block nbd7: shutting down sockets
[ 1518.226619][T13735] block nbd1: Possible stuck request ffff888026c601c0: control (read@1024,1024B). Runtime 1260 seconds
[ 1518.238588][T13735] block nbd1: Possible stuck request ffff888026c60380: control (read@2048,1024B). Runtime 1260 seconds
[ 1518.309472][T13735] block nbd1: Possible stuck request ffff888026c60540: control (read@3072,1024B). Runtime 1260 seconds
[ 1518.722673][   T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1518.999761][   T10] usb 9-1: Using ep0 maxpacket: 16
[ 1520.590577][   T30] audit: type=1400 audit(1520.552:2280): avc:  denied  { watch watch_reads } for  pid=21940 comm="syz.3.4036" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[ 1520.741996][   T31] INFO: task syz.1.3634:20408 blocked for more than 143 seconds.
[ 1520.751097][   T31]       Not tainted syzkaller #0
[ 1520.756041][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1520.828471][   T31] task:syz.1.3634      state:D stack:26904 pid:20408 tgid:20403 ppid:16959  task_flags:0x400040 flags:0x00080002
[ 1520.867512][   T31] Call Trace:
[ 1520.876457][   T31]  <TASK>
[ 1520.879557][   T31]  __schedule+0x1190/0x5de0
[ 1520.885484][   T31]  ? look_up_lock_class+0x6b/0x150
[ 1520.892920][   T31]  ? __lock_acquire+0x622/0x1c90
[ 1520.899187][   T31]  ? __pfx___schedule+0x10/0x10
[ 1520.908674][   T31]  ? find_held_lock+0x2b/0x80
[ 1520.914854][   T31]  ? schedule+0x2d7/0x3a0
[ 1520.922255][   T31]  ? bdev_open+0x41a/0xe40
[ 1520.929559][   T31]  schedule+0xe7/0x3a0
[ 1520.934785][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1520.942588][   T31]  __mutex_lock+0x818/0x1060
[ 1520.947433][   T31]  ? bdev_open+0x41a/0xe40
[ 1520.953598][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1520.959591][   T31]  ? bdev_open+0x41a/0xe40
[ 1520.968529][   T31]  bdev_open+0x41a/0xe40
[ 1520.976143][   T31]  ? iput+0x35/0x40
[ 1520.985167][   T31]  blkdev_open+0x34e/0x4f0
[ 1520.993209][   T31]  do_dentry_open+0x982/0x1530
[ 1520.999921][   T31]  ? __pfx_blkdev_open+0x10/0x10
[ 1521.005762][   T31]  vfs_open+0x82/0x3f0
[ 1521.014316][   T31]  path_openat+0x1de4/0x2cb0
[ 1521.021042][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1521.027659][   T31]  ? __lock_acquire+0xb8a/0x1c90
[ 1521.035972][   T31]  do_filp_open+0x20b/0x470
[ 1521.043717][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1521.049255][   T31]  ? alloc_fd+0x471/0x7d0
[ 1521.077651][   T31]  do_sys_openat2+0x11b/0x1d0
[ 1521.083781][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1521.098316][   T31]  ? find_held_lock+0x2b/0x80
[ 1521.104725][   T31]  ? handle_mm_fault+0x2ab/0xd10
[ 1521.113929][   T31]  __x64_sys_openat+0x174/0x210
[ 1521.119384][   T31]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1521.129219][   T31]  ? do_user_addr_fault+0x843/0x1370
[ 1521.140121][   T31]  do_syscall_64+0xcd/0xfa0
[ 1521.145821][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1521.153696][   T31] RIP: 0033:0x7f851e78df10
[ 1521.158273][   T31] RSP: 002b:00007f851f5f8b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1521.167813][   T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f851e78df10
[ 1521.176855][   T31] RDX: 0000000000000000 RSI: 00007f851f5f8c10 RDI: 00000000ffffff9c
[ 1521.186270][   T31] RBP: 00007f851f5f8c10 R08: 0000000000000000 R09: 002364626e2f7665
[ 1521.195155][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[ 1521.203535][   T31] R13: 00007f851e9e6218 R14: 00007f851e9e6180 R15: 00007fffd4cc56d8
[ 1521.213745][   T31]  </TASK>
[ 1521.277170][T21910] kthread_run failed with err -4
[ 1521.305393][   T31] 
[ 1521.305393][   T31] Showing all locks held in the system:
[ 1521.332212][   T31] 5 locks held by kworker/0:1/10:
[ 1521.337383][   T31]  #0: ffff8881442fc148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1521.351156][   T31]  #1: ffffc900000f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1521.428358][   T31]  #2: ffff8881447f6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0
[ 1521.454891][   T31]  #3: ffff888144b08518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0
[ 1521.485499][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1521.505431][   T10] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1521.541549][   T31]  #4: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0
[ 1521.562006][   T10] usb 9-1: can't read configurations, error -71
[ 1521.572906][   T31] 2 locks held by kworker/u8:0/12:
[ 1521.580794][   T31] 1 lock held by khungtaskd/31:
[ 1521.585860][   T31]  #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 1521.596086][   T31] 2 locks held by getty/5573:
[ 1521.601449][   T31]  #0: ffff88814dc480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1521.611551][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 1521.626709][   T31] 1 lock held by udevd/5826:
[ 1521.631998][   T31]  #0: ffff888025f7c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1521.641768][   T31] 1 lock held by syz.1.3634/20408:
[ 1521.647905][   T31]  #0: ffff888025f7c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1521.659532][   T31] 
[ 1521.662824][   T31] =============================================
[ 1521.662824][   T31] 
[ 1521.672169][   T31] NMI backtrace for cpu 1
[ 1521.672187][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1521.672207][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1521.672214][   T31] Call Trace:
[ 1521.672219][   T31]  <TASK>
[ 1521.672224][   T31]  dump_stack_lvl+0x116/0x1f0
[ 1521.672245][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 1521.672260][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1521.672286][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1521.672302][   T31]  watchdog+0xf3f/0x1170
[ 1521.672318][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1521.672333][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1521.672345][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1521.672363][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1521.672380][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1521.672392][   T31]  kthread+0x3c5/0x780
[ 1521.672403][   T31]  ? __pfx_kthread+0x10/0x10
[ 1521.672414][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1521.672427][   T31]  ? __pfx_kthread+0x10/0x10
[ 1521.672438][   T31]  ret_from_fork+0x675/0x7d0
[ 1521.672448][   T31]  ? __pfx_kthread+0x10/0x10
[ 1521.672458][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1521.672481][   T31]  </TASK>
[ 1521.672486][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1521.801374][    C0] NMI backtrace for cpu 0
[ 1521.801390][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1521.801413][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1521.801424][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1521.801456][    C0] Code: d7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 86 29 00 fb f4 <e9> 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1521.801473][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
[ 1521.801488][    C0] RAX: 0000000005417ed1 RBX: 0000000000000000 RCX: ffffffff8b60a2a9
[ 1521.801501][    C0] RDX: 0000000000000000 RSI: ffffffff8da2b6a1 RDI: ffffffff8bf070c0
[ 1521.801514][    C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655
[ 1521.801526][    C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000
[ 1521.801538][    C0] R13: ffffffff8e097a00 R14: ffffffff90820cd0 R15: 0000000000000000
[ 1521.801551][    C0] FS:  0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000
[ 1521.801568][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1521.801580][    C0] CR2: 0000001b2ed0fff8 CR3: 0000000064759000 CR4: 00000000003526f0
[ 1521.801593][    C0] Call Trace:
[ 1521.801601][    C0]  <TASK>
[ 1521.801608][    C0]  default_idle+0x13/0x20
[ 1521.801628][    C0]  default_idle_call+0x6c/0xb0
[ 1521.801647][    C0]  do_idle+0x38d/0x500
[ 1521.801671][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1521.801693][    C0]  ? trace_sched_exit_tp+0x2f/0x120
[ 1521.801716][    C0]  cpu_startup_entry+0x4f/0x60
[ 1521.801738][    C0]  rest_init+0x16b/0x2b0
[ 1521.801759][    C0]  ? acpi_subsystem_init+0x133/0x180
[ 1521.801782][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1521.801809][    C0]  start_kernel+0x3f6/0x4e0
[ 1521.801833][    C0]  x86_64_start_reservations+0x18/0x30
[ 1521.801857][    C0]  x86_64_start_kernel+0x130/0x190
[ 1521.801882][    C0]  common_startup_64+0x13e/0x148
[ 1521.801910][    C0]  </TASK>
[ 1525.250858][ T5185] udevd[5185]: worker [5826] /devices/virtual/block/nbd1 timeout; kill it
[ 1525.259456][ T5185] udevd[5185]: seq 13465 '/devices/virtual/block/nbd1' killed