last executing test programs:

10m49.109074999s ago: executing program 3 (id=2501):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0xf5ffffff, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)

10m48.847328261s ago: executing program 0 (id=2503):
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4)
connect$unix(r2, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r4 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x80, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x80]}})
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)
bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000180)={0x2}, 0x2)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x0, 0x2, {0x0, 0x0, 0xe403, r8, 0x62a1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x0)

10m48.531924453s ago: executing program 3 (id=2505):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x5, 0x4, 0x2, 0x10, 0x2, 0x68, 0xff, 0xd, 0x88, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}, 0x3e)

10m47.90749963s ago: executing program 3 (id=2507):
r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b)
cachestat(r1, &(0x7f0000000040)={0x81}, &(0x7f0000000140), 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x14, 0x40018020, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
inotify_init1(0x800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="21ffffffff14100029bd7000ffdbdf2508000300000000d60820010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000012)
bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
listen(r5, 0x80)
accept$netrom(r5, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00cb01aec128d43cf100"], 0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200ff0000000030006c540203a39f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005"], 0x80}}, 0x20000010)
r6 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r6, &(0x7f00000000c0), 0x2c8, 0x0)

10m47.728309163s ago: executing program 0 (id=2508):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xf0f, 0x70bd2c, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {}, {0xffed, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x3}}]}}]}, 0x23}, 0x1, 0x0, 0x0, 0x55}, 0x4c050)

10m47.715742032s ago: executing program 0 (id=2510):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0xb2, 0xfffffffffffffffe, 0x7fffffff}, {0x2, 0xa00, 0x5, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x746c3ee695526487, 0x3, 0x0, 0x49, 0x0, 0x800000}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'})
prlimit64(0x0, 0x2, 0x0, &(0x7f0000000100))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r0 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}}, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

10m47.16805508s ago: executing program 1 (id=2511):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = creat(0x0, 0x122)
personality(0x4000009)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r3, 0x4b4d, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000030101010000000000000000020000000c0019800800020022010000300002802c00018014000300fc020000000000000000000000000000100004"], 0x50}, 0x1, 0x0, 0x0, 0x40804}, 0x44080)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000140)={0x2, 0xde, &(0x7f0000000480)="aaf7aad88a640ea8c1ab402e8085804fde75ef33f89e42006cedf4b3cbf1be17cd0a8e59e27f8a705c0c7e2d700b3f2ffc6760ee9c495a0a4ceb5a45a3250cd140aac1284f218643c907f6d4eecce852c9c08267ac43c1377171adeceb283d21af38ba92cb78a2721b6fbe0dd6da186a4bf12dbedfc48b3f82ecb8b0e0ef536bf792ef47a99ddb191613a37f6a6d2e5acd064f7f39d3fb8137341dcf14704c24b6322e866409f6263780d62c1e597aab9ddc4479c1460fa573204272cfdc5c0c41b38bd64ef15bf7b84c6f1eb187daa818b28ceccb797a3be4162fd12f8e"})
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0)

10m45.369063784s ago: executing program 1 (id=2516):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x2}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1, 0x0, 0x0, 0x1f4}, 0x4)

10m45.021024528s ago: executing program 3 (id=2517):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x13, 0x4, 0x2, 0x10, 0x2, 0x68, 0xff, 0xd, 0x88, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x7, 0x11, "1470c7f26eb8370a02e95ffc760f34"}, @end, @timestamp_addr={0x44, 0x24, 0xd5, 0x1, 0x7, [{@private=0xa01016c, 0x1}, {@loopback, 0x6}, {@remote}, {@multicast2, 0x3}]}]}}}}}, 0x76)

10m44.861078861s ago: executing program 1 (id=2518):
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
syz_usb_connect(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="4c7261d895be41f0a412010000f601020301090250000100003dbbe5fdbb99d69d00090400000396b70a0009050f400000a62d4cfb0d3497d48bff07e91dc3e8268e27558c9b2f0efc2751fc5e660fec9989e6d8cda1756d4cb1607500"/128], 0x0)

10m44.857592967s ago: executing program 0 (id=2519):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x30483)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x1132a2, 0x0)
splice(r0, &(0x7f0000000100)=0x1ff, r1, &(0x7f0000000200)=0xfffffffffffffffe, 0x1, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x368, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ipv6header={{0x28}, {0x9, 0x13, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xffffffff, 0xff000000, 0xb8655b656eaa7822], 0x4e21, 0x4e21, 0x4e23, 0x4e21, 0x0, 0x2, 0x7fff, 0x4, 0x1}}}, {{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffff00], [0xff000000, 0xff], 'wg1\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0x7, 0x2}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "ee7f"}}, @common=@ah={{0x30}, {[0x4d3, 0x4d6], 0x8001, 0xc, 0x7}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x8, 0x7, 0x9, 'syz0\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x800448d2, &(0x7f0000000000))

10m44.600367019s ago: executing program 3 (id=2520):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="2400001f1a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)

10m44.532218375s ago: executing program 3 (id=2521):
syz_open_dev$media(&(0x7f0000000300), 0x2, 0x698542)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0xc, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe9}}}}}]}}]}}, 0x0)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x59, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x21, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x2, 0xb}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x9, 0x6, 0xff, 0x4b}, 0x1f, &(0x7f0000000100)={0x5, 0xf, 0x1f, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x20, 0x7, 0x9, 0x4e5}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x800, 0xf, 0x7, [0xffc030]}, @ptm_cap={0x3}]}, 0x2, [{0xc5, &(0x7f00000001c0)=@string={0xc5, 0x3, "7daa164689816b757805885fcd3777673df026e5ec4b16ed2457743ed0fd80c2ac0c17e94ab65c917945093226b5daa130f64123e689c7ea7b681836d6692c3818435b3cedf11a78f2548aee39459d1e29e3e803c449c6b73e7e9a9828dc6a5ed273f95ad076a4f0a1de0efd8357aa345366864c5670a3c9c5e5ae6dfca0833069fe35b9bfb5130f68054de0edcb4ac086f62794fd2b82106145cf2679a54d2a7963358f6138c8fd0748d3db52f8107f52a8b477df5f34d3887a9dce92111e576c01b2"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x412}}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0xffffffc2, &(0x7f0000000340)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x71}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, 0x0)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab968508", 0xd, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000800)
syz_usb_connect$cdc_ecm(0x1, 0x6b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010102020000282505a1a4400001020301090259000101040099090400010202060003090004000d240f0100020000040d080043052401020d152412e600a317a88b045e4f01a607c0fdcb7e392a09058202100070090009050302080008080585edc5cf976a28802b97b206d6d6dbcde699cbed428877b0a778f0b223e4cff8f3efe30b4886f9f5fd309154fcc57e1bc5b696ffb325761399e1a8d03a47a0bd778fbcad8c26418e3fdbb444d82cbded481a9e5f7a0645a57d7248e33a48e92a5bdce9b5b48db07e7b4b"], &(0x7f0000000440)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x1, 0x2, 0xfe, 0x20, 0x5}, 0xc, &(0x7f00000003c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xc, 0x2, 0x2}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2009}}]})

10m44.341647436s ago: executing program 1 (id=2522):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000400)={'wg2\x00', <r6=>0x0})
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10)
close(r3)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0)

10m44.217996523s ago: executing program 1 (id=2523):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0x1, 0xa, 0x8}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0x1, 0xa, 0x8}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)

10m44.08442024s ago: executing program 1 (id=2524):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
syz_open_dev$MSR(0x0, 0x0, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000300))
r2 = getpgrp(0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r5=>0x0})
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000004c0)='hpfs\x00', 0xc4, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r3, 0x4}, 0x10)
sched_setaffinity(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
ptrace$cont(0x18, r2, 0x2, 0xe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x800, 0x70bd2d, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10000000)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(r2, 0x1, &(0x7f0000000140)={0x7, 0xffffffffffff7fff}, &(0x7f00000002c0))
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000440)=0xe)
ioctl$TIOCVHANGUP(r9, 0x5437, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0)

10m43.505591779s ago: executing program 0 (id=2525):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32=r8], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x4}]}, 0x38}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}]}, 0x34}}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdff291f69500"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0xc000050)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

10m42.834698018s ago: executing program 0 (id=2526):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = creat(0x0, 0x122)
personality(0x4000009)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r3, 0x4b4d, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000030101010000000000000000020000000c0019800800020022010000300002802c00018014000300fc020000000000000000000000000000100004"], 0x50}, 0x1, 0x0, 0x0, 0x40804}, 0x44080)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000140)={0x2, 0xde, &(0x7f0000000480)="aaf7aad88a640ea8c1ab402e8085804fde75ef33f89e42006cedf4b3cbf1be17cd0a8e59e27f8a705c0c7e2d700b3f2ffc6760ee9c495a0a4ceb5a45a3250cd140aac1284f218643c907f6d4eecce852c9c08267ac43c1377171adeceb283d21af38ba92cb78a2721b6fbe0dd6da186a4bf12dbedfc48b3f82ecb8b0e0ef536bf792ef47a99ddb191613a37f6a6d2e5acd064f7f39d3fb8137341dcf14704c24b6322e866409f6263780d62c1e597aab9ddc4479c1460fa573204272cfdc5c0c41b38bd64ef15bf7b84c6f1eb187daa818b28ceccb797a3be4162fd12f8e"})
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0)

10m28.730242416s ago: executing program 32 (id=2524):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
syz_open_dev$MSR(0x0, 0x0, 0x0)
ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000300))
r2 = getpgrp(0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r5=>0x0})
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000004c0)='hpfs\x00', 0xc4, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r3, 0x4}, 0x10)
sched_setaffinity(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
ptrace$cont(0x18, r2, 0x2, 0xe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x800, 0x70bd2d, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10000000)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(r2, 0x1, &(0x7f0000000140)={0x7, 0xffffffffffff7fff}, &(0x7f00000002c0))
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000440)=0xe)
ioctl$TIOCVHANGUP(r9, 0x5437, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0)

10m28.617893367s ago: executing program 33 (id=2521):
syz_open_dev$media(&(0x7f0000000300), 0x2, 0x698542)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0xc, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe9}}}}}]}}]}}, 0x0)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x59, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x21, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x2, 0xb}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x9, 0x6, 0xff, 0x4b}, 0x1f, &(0x7f0000000100)={0x5, 0xf, 0x1f, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x20, 0x7, 0x9, 0x4e5}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x800, 0xf, 0x7, [0xffc030]}, @ptm_cap={0x3}]}, 0x2, [{0xc5, &(0x7f00000001c0)=@string={0xc5, 0x3, "7daa164689816b757805885fcd3777673df026e5ec4b16ed2457743ed0fd80c2ac0c17e94ab65c917945093226b5daa130f64123e689c7ea7b681836d6692c3818435b3cedf11a78f2548aee39459d1e29e3e803c449c6b73e7e9a9828dc6a5ed273f95ad076a4f0a1de0efd8357aa345366864c5670a3c9c5e5ae6dfca0833069fe35b9bfb5130f68054de0edcb4ac086f62794fd2b82106145cf2679a54d2a7963358f6138c8fd0748d3db52f8107f52a8b477df5f34d3887a9dce92111e576c01b2"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x412}}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0xffffffc2, &(0x7f0000000340)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x71}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, 0x0)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab968508", 0xd, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000800)
syz_usb_connect$cdc_ecm(0x1, 0x6b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010102020000282505a1a4400001020301090259000101040099090400010202060003090004000d240f0100020000040d080043052401020d152412e600a317a88b045e4f01a607c0fdcb7e392a09058202100070090009050302080008080585edc5cf976a28802b97b206d6d6dbcde699cbed428877b0a778f0b223e4cff8f3efe30b4886f9f5fd309154fcc57e1bc5b696ffb325761399e1a8d03a47a0bd778fbcad8c26418e3fdbb444d82cbded481a9e5f7a0645a57d7248e33a48e92a5bdce9b5b48db07e7b4b"], &(0x7f0000000440)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x1, 0x2, 0xfe, 0x20, 0x5}, 0xc, &(0x7f00000003c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xc, 0x2, 0x2}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2009}}]})

10m27.532256363s ago: executing program 34 (id=2526):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = creat(0x0, 0x122)
personality(0x4000009)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r3, 0x4b4d, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000030101010000000000000000020000000c0019800800020022010000300002802c00018014000300fc020000000000000000000000000000100004"], 0x50}, 0x1, 0x0, 0x0, 0x40804}, 0x44080)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000140)={0x2, 0xde, &(0x7f0000000480)="aaf7aad88a640ea8c1ab402e8085804fde75ef33f89e42006cedf4b3cbf1be17cd0a8e59e27f8a705c0c7e2d700b3f2ffc6760ee9c495a0a4ceb5a45a3250cd140aac1284f218643c907f6d4eecce852c9c08267ac43c1377171adeceb283d21af38ba92cb78a2721b6fbe0dd6da186a4bf12dbedfc48b3f82ecb8b0e0ef536bf792ef47a99ddb191613a37f6a6d2e5acd064f7f39d3fb8137341dcf14704c24b6322e866409f6263780d62c1e597aab9ddc4479c1460fa573204272cfdc5c0c41b38bd64ef15bf7b84c6f1eb187daa818b28ceccb797a3be4162fd12f8e"})
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0)

2m57.961735949s ago: executing program 2 (id=3789):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000002", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000050005000100000005000600010000"], 0x2c}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)
bind$bt_hci(r0, 0x0, 0x0)
write(r0, &(0x7f0000000340)="0a000300010040", 0x7)
syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[@ANYBLOB], 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffffffffc49, &(0x7f00000002c0)=ANY=[], 0x28}, 0x54)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x82000, 0x0)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="01000100000000000000100001", 0xd, 0xfffffffffffffffd)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r0})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x501000, 0x0)

2m57.236898485s ago: executing program 2 (id=3791):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m56.991971081s ago: executing program 2 (id=3792):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r1=>0x0}, 0x8)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x10)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4c, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6001010000fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e220016907801020000edff6018546189faf4ab"], 0x0)

2m56.888360119s ago: executing program 2 (id=3794):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setitimer(0x0, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, 0x0)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x5207, 0x0)
ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, 0x0)

2m56.85893465s ago: executing program 2 (id=3795):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fgetxattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00', &(0x7f00000000c0)=""/13, 0xd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = getpid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x2e, 0x9, 0x70bd27, 0x25dfdbfe, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xe}, @generic]}, @generic]}]}, 0x20}, 0x1, 0x0, 0x0, 0x46804}, 0x84)
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

2m55.09506095s ago: executing program 2 (id=3797):
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xe, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x3, '\x00', 0x3}, {0x9, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}})
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0xa)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x2})
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r10 = dup3(r9, r8, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs], 0x0, 0x0, 0x0})

2m38.236803219s ago: executing program 35 (id=3797):
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xe, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x3, '\x00', 0x3}, {0x9, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}})
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0xa)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x2})
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r10 = dup3(r9, r8, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs], 0x0, 0x0, 0x0})

11.918480561s ago: executing program 7 (id=4300):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f0000000180)={0x6, 0x0, [{0xa54, 0x0, 0x40020298ce9}, {0x251, 0x0, 0x80000000a}, {0x9f9, 0x0, 0x400}, {0x227, 0x0, 0x40}, {0x276}, {0x863, 0x1000000, 0x5}]})

11.773149006s ago: executing program 8 (id=4301):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setresgid(0x0, 0x0, 0xee01)
r2 = syz_clone(0x24000080, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(r2, 0x7, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x9, 0xc1a0, 0xfc, 0x0, 0x0, 0x5}, 0x1c)
r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r7, 0x5b02, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_link_policy={{0x5c}, {0x0, 0xc9}}}}, 0x9)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90a5adcc, 0x0, 0x3, 0x40, 0x2, 0x0, 0x0, 0x10}}, 0x50)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0)
syz_emit_vhci(&(0x7f000001b240)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f000001b340)={{r1}, {@void, @max}})
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
read$FUSE(r8, &(0x7f0000019200)={0x2020, 0x0, 0x0, <r9=>0x0}, 0x2020)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f000001b380)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@private0}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xffffffffffffff9f)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x840414, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@loose}, {@cache_readahead}, {@access_user}, {@posixacl}], [{@euid_eq={'euid', 0x3d, r9}}, {@euid_lt={'euid<', r10}}, {@measure}]}})

10.492337787s ago: executing program 6 (id=4309):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x2b, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x300000000000000, 0x0, 0x20000005}, 0x80)

10.288912897s ago: executing program 6 (id=4310):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40016100, 0x0)
syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x40200)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r7, 0x73b87}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x4000010)
sendto$packet(r5, &(0x7f0000000580)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x8100, r7, 0x1, 0xe9, 0x6, @local}, 0x14)
ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000000380))
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5, 0x1, {}, 0xff00})

9.223761804s ago: executing program 6 (id=4313):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="c892b6bc436a0000d935a9368c000000", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012)
recvmsg$can_raw(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002880)=""/4112, 0x1010}], 0x1}, 0x10000)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000061c0)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0xb, 0x3}, {0x4, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xd816451b076636a9}, 0x1)
bind$inet(r1, 0x0, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff)
mkdir(&(0x7f0000000040)='./file1\x00', 0x7)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x100, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xe}, {0xffff, 0xffff}, {0x0, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0xf3, 0x7f, 0x4, 0x1, 0x54, 0x48b, 0x3}}, {0xa, 0x2, [0x2, 0x8, 0x7]}}, {{0x1c, 0x1, {0xb, 0x8, 0x4, 0xaf, 0x2, 0x1004, 0xc6, 0x7}}, {0x12, 0x2, [0x9, 0x3, 0x4, 0xf0, 0x116, 0xef4, 0x400]}}, {{0x1c, 0x1, {0x74, 0x3, 0x101, 0xffffffc0, 0x0, 0x1, 0xffffffff, 0x9}}, {0x16, 0x2, [0xbb, 0x3ff, 0xfff7, 0x3f2, 0xb, 0x41cb, 0xe6, 0xfffa, 0xc]}}, {{0x1c, 0x1, {0xc, 0x1c, 0x3, 0x800, 0x1, 0x1, 0x60d7, 0x4}}, {0xc, 0x2, [0x81, 0x8, 0xfff, 0x4]}}, {{0x1c, 0x1, {0x3, 0x0, 0x9, 0xff, 0x1, 0x7, 0xb6c2, 0x7}}, {0x12, 0x2, [0x7, 0x4, 0xc, 0x7, 0x6, 0x1, 0x3]}}, {{0x1c, 0x1, {0x9, 0x3, 0x86, 0x8, 0x0, 0x3, 0x6, 0x6}}, {0x10, 0x2, [0x79, 0x7, 0x8, 0x2, 0x9, 0x9ea]}}, {{0x1c, 0x1, {0x3, 0x9, 0x5, 0x700000, 0x0, 0x4, 0x8}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x101}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}]}, 0x170}, 0x1, 0x0, 0x0, 0x4048000}, 0x80)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="16450e910275f429698c41b85696fcddad35664a32f7b8a92359955ea7aa837bff44a843c23bf85912b53a75a8696ae5b5ef0c8afc9b93db353e17e0be368fc6439073448665bb46a06761f8996d36c4fb2e60dd5be7bd209a5f6b802f63385bb39bdd3de50d934b3d4122c362238acd5bda6e0d912b0e35f7c3e023422cf7aec17add09d692ddc81d7f8674d4e47ce463b1f41e919081445553863501ac2e17c6c8ab6722361c3f", @ANYBLOB="e723ca809872e40ea619edac7048de8b42c723b17de1d104198f4f095cd5ba53d2b9b5f4767f9718dd6f33292d336aa5ab008a46b431abe5dd95859cb3a4194fd16d99a1c73038e6e26eb8da9e6c945aac358b56000000000000000000001413ff9d3b8a522c31c81f8b29100cc9b5e1f51d0d1409827064fa80989cc85d5fe1d20380208099a11db30fef030871163181d723faa9", @ANYBLOB="010000000d0000000000010000000000000001410002001c0017000000000000000c6574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4801}, 0x810)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x6301, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

8.119361447s ago: executing program 6 (id=4314):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x38, 0xfffffffffffffffe}, 0x10)
kexec_load(0x0, 0x0, 0x0, 0x0)
request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf251f000000080001004e00000008000300", @ANYRES8=r4], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400c004)
socket(0x35, 0x3, 0x1000000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x28040680)
timerfd_create(0x0, 0x0)

8.030100096s ago: executing program 8 (id=4315):
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cbe53e", 0x8, 0x3a, 0xff, @dev, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x2, 0x3}}}}}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x10085)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x80, 0x7e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x18011}, 0x200400c0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003f00), r6)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='\r\x00\bT', @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf250100000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x4004800}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r4], 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004040)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc53a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x20, 0xfd, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0xc, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0xda7}}, {{{0x9, 0x5, 0x81, 0x3, 0x678, 0x7c, 0x5, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xff, 0x1, 0xfe}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x80, 0xd, 0x3, 0x40, 0x40}, 0x122, &(0x7f00000000c0)={0x5, 0xf, 0x122, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "e1bd805afbbe858d73fbec59fe2e1325"}, @generic={0xf5, 0x10, 0xa, "c057827b1472cac9064a3de91de39d4a2ec8405623fd7b5956588bb1dc576619c024b88395fdb08aaf873ec9acffdb93bd4f40db500e86235eecf4c91d01db85a1451a6d3ba2f8a59dd8f5ece1854fce06f15ec999456d2226c9cd0216d6a91cb8302ae57d795ffe3b44e70a5c6086c9966e523d82723526c9a7fc15d49c5523bbb758279272abfb91d1cbff956e3647deafd195b7a3b2264c937a02297358f550caeaf996944d049ba249b5e962e65a4ef89fde200395924e34de502713b0f6fd5ca7d6e60d2f013f06de33a2bbf839674e6412ba0ad42ca2ff3dafa7e9dae7533a72c4806964756a9950c83a1e14b4e085"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "9512c67f5a79cc20c84edeb3fb63a1a6"}]}, 0x5, [{0xf, &(0x7f0000000200)=@string={0xf, 0x3, "ac5b7fa80aadba8f2e6a48ca36"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x424}}, {0x18, &(0x7f0000000300)=@string={0x18, 0x3, "1d47961ee5da076c8710214f4528527b302e86c02652"}}, {0x34, &(0x7f0000000380)=@string={0x34, 0x3, "50b976f34dfec19eb0a81b4346216836bb997dbca4c3dc9206641c2003b93e9af523601fd0f6283dcbcef833b2a49cea64f3"}}]})

7.362613782s ago: executing program 5 (id=4317):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xffff, r0, 0x0}])
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000440)="5800000014001923060000000000000010ff000000000069d6e580dfee0000004e32f61bcdf1e422676b001000000100800000000000001000aadc28dad12c0d03cf77ce8196c2b228742e6faa000000c600000000000000", 0x58}], 0x1)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
creat(0x0, 0xdafbe5d6891b6e4)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000640)={0x8, {"179c4f014d5876c3e4fa4858113c67be813637500fce388e37e40fe6caf6a8ab9fc1cea8e2fcd16a3b5acde00efe8a7d7b70a535ae5f340be5bf60748b0ac30b62af7dcf60cf8d3fcfb114b6d1f9fb8b1e8aef18382d4a02753336ab7502c9892b8fdf9aec72a2039b9a51cb0ac50a9405849e2c0dfb2f2789ae9e51b59c4d4e72ecf4591d8f01a127d5395f0d99eebddea945b4297ab24a98c891f789a65c73dad8fb44eb39bf16cb1d5f31fee042b96cd65871557a30c4bedf9a3ba6c17e29554530fda4058f25b48059b02f084faa4f91e4cf0191b80074786b4d3756059d420a1f86271ea5ccc3269f6b353502fc804d94c5b3fb23156bee74a71add4880bb19133c11acee211a9f1668bf4f3934ae9be20fef0d13239d0a4c70d90c08b8b02c4f0f3b778f86322f80151ea4226fef27ca2be21fdcf48a48167fc9ac0c3b2402be32aba0d9846b4183c00de6a70c2e15f62ac166d5573d29d23d00d26af731345a5ccf20eea009e405decb055845a56d8ab1ce9b5382325993ce12d444a2acbbdc15af24765fc618af889171d224c7b5ebdc2477d6ed6d85fd9c01f79b0e5a4e1517f6eff2ec1f19b19936b084828249285813f082416ee19a66fca34b6dd41833445edfb9ffc8b39a1e47aba48692f26d7f85f1d37097a51907670c421287cba70f3f0c72d30ace0060c846f509f7fae8b552a9a7f2e8a2b484c45b70fccaf9246249c06a56dbb11029ea821b67fde0dbe1a04a4af06a414265f6890229ef46488a78cf689ba3f72ec5067eeaf62e3a6a793a9c1a0cfe27f9ce9fc9e9a86111657662996240821f476be942664ef82489944847478d1ea7741ddfe0c9bea87e1743823729ba528682e47a6891ec2e6985692b07af258418cbcfd473b1f80673156dae9f058edcff3aa2cc9c52c01352f18a74e32f5c1f268c3a92557c35d344844bacb2b7a59f813bce96fc83ba984a664d4440f2671f56c4279b003ab01262e415cab5f41ddbc0aca42b073751f27344403f8e0742ad67054fba95f91773864b8b0e8693fb46d00426a055c921bbcd7fd18af2570a9b9cc58a0724bad0e2f33fd4ee12bf721047d3b3650714ddd2226b7adc7a85293576edb7eb68ab71ac2ede80e72f70fe70c4f2716d453451bad3164a1c31d0dd140e44661c0b1c2d004dc09298df68dd329d922e04a2c569f6f5d6187286aecd2ff7c6614932c321680c609b403769612c340f346d1914775a8b8e0651965bc7c59ef65bf0822042187d78c0e0ba8ee255052eea74f7e3a01fd09ff78d8a9390d7f37f034ed9d876c3d1849c2b4e689b9da3e69a213a61ab4ac96e45b28209f5cf71bf3ca100f4b5eef2a7356e32e1fb4c2434902cf445df1d9d13b2b01d3726766f8ebf7970a9e40cce88f364b6edcd5b5def96c08dbac0cc5f627002e4730180436c061e3c64246fd1e576c17cde76244d35fb3a8ca73d1a0a4b53c470532d53aaaed056b174e9f50666ca5996794edcd095356290ef3d6319ad6372bba007a389cb597db057bb1d62e355568e05dbac146f0cad11141427e903133b3fd25180e6225789749e8f631b5820d9dddd8a7f3f21b1e46599c10244ee00e58a27d4a26e9a05bd6f4203bea31607d6b932febef464fcdada794e7c82f7b25cfac68c094ed4cdb35da044b184460191efcb16af1f5e6945b527d09b4c66cde472db864212c0c67aeaf90a29610df17ddb3c5c7b515539a433ec221e735cd23d1d58661418f40903ddec4b53330ac152b6ac1426b0115a5bcb31bc36fd59fdd694120cf4e79882ec3dc28d0551aa0f22ba8a1282bc120202a1f6fd6fd61e29b7b3e3fdcde974d1fc753cb99ffe1f1608b88e2fed004fdad78e02675c3946a65861d827b5e21f50ca5ca762c3afa5bce905b7e6d7a8b06cae47d213899c346d47ad99a177719f763168e1f70767bdf226fab1e299549a875e9e5171b1cf95359a5e0613016cf70c198fd645efe0c4d6305589989894e0084bf1c1fdd7d4ed3238a797460d035b8007f6077a9c3d158f92c5d8f9299c7dd86f78c79739889db98840bdfa0d7681a79b09d78fddfbe7a6044ed308bb51462ee08f625396b7685e87d9a302fa71ac45bcc47504a097343c8cccffad6b42026801e77e0b1bf22a974ce5468307a5b35f333341f48ebb9a844b3f2fb0b0da82b9bd4ee80d5774975c912caf598442f8b403f756e5f0160c8d5c98af30220179a1c541545957b3b1d03440df049f7bbfc84a81720f35e42dab5c462e3485a579e0dd851d74c2261fa7a05d06382a43aecfa9136b41e46e13f5ea2524beeead6dda02d9a6fc0253ba82627928058c4724f039d38847771899efcb14ace3e396a15a9d08cc3a5f9d443691d05d2d2164ee5db8a2adde60ba2943c13e83435b7c0f08911c0b2f639f5050ce641658e04bf3074d0e082bb292a8769666cb3c3a2e27650c34cad9d3cbfccd312b2376775557049e229320f7acbf3f18b9d761f65e6e86203513f18798499137535809fc3f10b5c6a22b309062f4bc8717fcf6a3660ff9155b04dc41f4887ff726c571c270a1fca4b658126e65651438cd882aabd97b9de7ef1975594ce849abb5fec448170b7d7eb18ca78c61750486e05405b5b0d61b937b3da90d8ee104406f53221b1e28651da01222c56c3542622a7089f43d45b1709f10db170398caa9cd23f1a7637e694f3e9345fa226ac33af1a91505db21fc7e3c3ae480bebff250a43c62c503e66cb6456b90ea04592e3c48b734d5d2d09da58bb5377b942871f15bdffbb5faf34171731413972191764b8046afac7ad352a69f7fb9fa48c743d59c79cca8313b41f4e37ababa98a22d23bac3bb0b575da2f65f206bf5e4dff7e6af00e56451df767d28b0af2f9c27dc570f4c81a57918802e8d3965b92d1b7dfc4412096d240daa03ecebe2d8299a8dcdcb2f80c3099f818c070aeecad7c3ededdcd0839c581f37615cf4ba0c8d887415aa636a064a800c64fdbda79ab7f9c1e9cd645cab68100a4fd570cc65a7132c43701f03fd9ed7e5b306ad6a975cc9c66e1184f4cbedf148a8c78500f12390f56259fe46f3200444aba398eaf9acf29e041af64891c5a36c7df04c70c9ae6a1c387fd8c1083ee3c4f1d4b92db609acf98b4280e17784a179b011cd99a58e8a12961519cda823d4f61b176f166652a3f4f07385d3f7d16a0c262ee6f7d29437925782805c63498cd849c11ed957fece33fd80e7e51ff9b51645a43d80251e28a03569f35b62745a70938958144f80ecf6406d672ccd9981658e36b9ebf761a4b1e3c7804c38958a1adfcdc5beaed5f6ccb8f041a6d61b0d3da42027019b8916dba7c53dc6e20bdf3f6d754e7c52551fbfc76eb460aa170047ae8f2e4d0a8e7480d9e5c408c2ba62266554b2b1c0ee270a5308e2e2749e9a7c9c0c181ccffc710294f73c30ce478bd938c23cde4cd96d3baa611d465efe9d83f5374b254b6eb0797f581fabf968e036e8ba9a59feaab2aa8b8ca2f4df30a4016503f67e9aec4b0e24fccc751fbd361219c0ece49d3e5833dfba07c131278d2434ae5d6a38d116dee699898aae19cde949601267b59286883694e5455f4ab5431eb45108ddb02c0a7cb4b4bcb8ef975ba2fadbb8144d9019fc1565a95655b6cce4a79cef35e1f63777871d14a7a0eb27040ef0b334bea57a4e5c94287e73d67efd59877f5750021a867cac4dfe34be049cc48b1ce67a81fd8ba7aaa218c1815c681d257d187a3276cf14ef5adac2972fd4e8f4e77b250b70c4ebef312cd065651250368bda5b7bf4d68289a5eb13202783a7fbe2f493ea5fde647ad988ed7eec362d7c486cd54e83e60ecc2491de0b0180b2dfe5dd44309a46e3b5cb130a732f0b5886ff0112d7f51aab8f9f92b7165807126e8edb64b2ba20a9f197631106dfd99ec1dd082d33bb8cde00fae1356b38c7cd9856172a6f1af8dce21a4f51854ad995d0db151faebf070e55ed84430fa717d7e108118aa9b84dfd962c415969476c6f9481479e5f272f16e30dcd2a4bd1e354bd0342d9d6e7abfc5a15e511ad1155ea05c3476b51fdfcceb8f8720a4c1f401c32de7e2584009a6d62cb47b44b03a8da44b13b0e1bb7677f030d17733214e6c03174fd057173e33641bdf35b2826668dd4eb491fd7ee38443827c7b6ea4432d70fe460d12733e517295fc1f950c447aba9966c0a6f91241c2b5de4672dec6284a9cf9e8b9416f19a6e763b9225ba91ae00e97351c40a800aeb77857630d883be0a47ed281d2bfefc8d033e2c34b2641f2f3e8a4c6647b15dd9bfdfeeea3fa1157d0db77669de1da9245ff97fb8617013f3e4c5c7a4ee721787db8330886d0574efcf86c7ca3a4baa02351d284474aa0e567cf45d99ceb51972b5ea776c8208585431bfa0d23fe136d714355a4e807f41bff5d458b7bc813487082eb2faf6726851ba55cdf38791e1141843284e6ad49124108eab3000b54f2a1abbde0fedfe839359ffcc2718cccc285962cd3f16bb82af6756f43de8fa014ae85ddf822c34574108aaee9a254acc6db79b9d35e89eba57663463ebadb0926528947ffdec88d3c88f11ed07fa39cfbe441e66c4950a8702c249d001642ae1f54839d3c1faa285967b0e7fc289f66f3c1847eadb4229ba49e5a2681df3ae87a279175f54b75a600223d175ab45ac2c3762ad5eda206c1e5ee9e205fa4fece9cdb63d048139134ff8d029f661ead227e29be6f65f94c68c74f0e25ebce4e5da4a94ed33804b87199c31e0a717b977a6b1d5c6f0574521c9365c5ff35b5e1ee231b949a193164e1898d6204372af99634fd75ab4fdd48c434467da038dfb96e7ce985b52cf6542b69a369b38647dfe4b7c6b7425267c5c9305daf85ff3572eafdaf583ae9f226b7986f2402ddbe9e5551630fa0bf0d717391a8973fceb96f403c5e0c2e7bd7604d199d58cb963861b125eacdddf83a5c7cd84049d2ca46e793cddd6b7507aaa563cfbffc8ba43e59a6b9ee8a362f928887671df9ae66dfacd2e9603cf322f0e1a399ea9b6ca9c030bd7e7647267239b6303f76e2d4006d061d8891cc9db4a3da516eefc74771becea5b60094863bf12e813386c22ed00e1f5be9f681116cfe352d0d36219ff89bae173de89c121e6e56bb657277d47efc817516591c3b12ff95b9ed7edd3c8d1790842412b380202032941fc5d9ec432e5c7203fd207e32102497b13ca2ea43ed8a5991cecc19fc77a7398328e9334061997700166e3e0a72ed4b0c5c47aca9fd48d05c40f50d22f1f642a6e5a4af8ea5d1d6c5e45e2f402634069f3705767847c78081b08081052920829e22881bcba19d6452d198beccc81295a2683d0c545713ba2953fa4f667362d06a352f406a33ee7e553fcc7268e2d7fc97e1ccd340bb8c73ae631a1051acdc872a0d30da2774d9570007be36f54ac6f2b93085c353b3fa0201ca7828e7154c4a7d837cd76db45cddfa39adc095d61987e8f47ebe476f75132d7e653ec59f99d9bb576ca36f3374284ecf5e816d940456dd9299c298c9bf54eb313ef9ed29c17b987baf2ce18be63d6f87f2fb93b16522211255400af050caabc26c96777e88ebd6cf529eb8924b2ef2e0a2042ea4e9410ca1236aaee7ebf4946c8573a26c9f80a0d24b7d629bdb7bfbe0db1e3e97d37fc018f9ebca783c06c43b9f9dfc98ea684d0cd74e4631a6347a0775ad8759448a25f7d60e53ab86452b1a13fb16928142f341ee3c31c7320159819ee4319d2afb3f8e47fd0ef8893fe154d08b8fea6669a52f2", 0x1000}}, 0x1006)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x4, 0x8000446, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x405}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x44830)
r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

6.510228046s ago: executing program 5 (id=4319):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x8000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0x9}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x4})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x700}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240480dd}, 0x0)

6.45654603s ago: executing program 4 (id=4320):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000200000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0)

6.356033074s ago: executing program 4 (id=4321):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv_slave_1\x00', &(0x7f0000000240)=@ethtool_flash={0x33, 0x101, './file0\x00'}})
syz_emit_ethernet(0x1e, &(0x7f0000000100)={@local, @random="7f0a00034011", @void, {@can={0xc, {{}, 0x5, 0x2, 0x0, 0x0, "002977005515678e"}}}}, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x29, 0x5, 0x0)
r7 = socket(0x18, 0x3, 0x1)
accept$packet(r7, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)

6.020622679s ago: executing program 5 (id=4322):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
r3 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
fchdir(r3)
ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000040)=0x8)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, &(0x7f0000000a40)={0xa, 0x6e24, 0x7fff, @mcast1, 0x9}, 0x1c)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read$watch_queue(r5, 0x0, 0x0)

5.324398077s ago: executing program 5 (id=4323):
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180)=0xfffffff4, 0x4)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000018030103000400c4001000459800dd006800004d2f9078e0000001ffffffff0c21880b0000000008000800010086dd0009df9bec600741ab7678efacbb4bb5eafe41dcf381519d333f7db40600000000000000bac8a3c61f767523cf49747979000000001e5c9d13eb790eef1c4576f02d0279a5110612701de9a2136391ed7d9927ebe14e3f1497a19e5a9f0d45ef3be53ee4e9092b75c4080088be000000031a0317040100000000000005080022eb00000003290eff0302000000000003a33ce789860dc984c201b1e28a9fe3cd0d2bcc93a01e37ac14a0f11b"], 0xeb)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040))
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000880)=0x4, 0x4)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000340)={0x2, 0xb8, 0x2, 0x0, 0x0, [{{}, 0x6}, {{r6}, 0x100}]})
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)={0x8000203d})
r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x5, 0x200, 0x3e, 0x7fffffff, 0x8006, 0x6, 0x0, 0x9, 0x4, 0x8, 0x400, 0x80, 0x1, 0x1ff, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x4, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x0, 0x1, 0x1000000a, 0x9, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x4, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x150, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r10=>0x0})
sendto$packet(r8, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a80000803500008100000088a8", 0x59, 0x200000c4, &(0x7f00000001c0)={0x11, 0x88a8, r10, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

5.016874801s ago: executing program 7 (id=4324):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
io_pgetevents(0x0, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xa)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
r2 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081b3", 0x3, 0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5})
socket(0x10, 0x803, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0x104}, 0x1, 0x0, 0x0, 0x8fda50294441b6e0}, 0x841)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
io_uring_enter(0xffffffffffffffff, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18)

4.986353925s ago: executing program 6 (id=4325):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
listen(r0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0413"], 0x8)
r4 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xf}, 0x40895)
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x800003, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd}, 0x94)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x4, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000180)={0x3ff, 0x0, 0x4, 0x0, 0x5c})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045)
r6 = io_uring_setup(0x1b7b, &(0x7f0000000300)={0x0, 0xb70, 0x4000, 0x0, 0x1a2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c)
r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0x2, r7, 0x0, 0x0)
io_uring_enter(r6, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)

4.360055552s ago: executing program 8 (id=4326):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xdf0}, 0x1c)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0x6, 0x3, 0x7)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r1, &(0x7f00000007c0)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000000240)=""/148, 0x94}, {&(0x7f0000000300)=""/187, 0xbb}, {&(0x7f00000003c0)=""/208, 0xd0}, {&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000540)=""/145, 0x91}, {&(0x7f0000000600)=""/202, 0xca}], 0x8, &(0x7f0000000780)=""/11, 0xb}, 0x40010100)
r2 = dup2(r1, r1)
chdir(&(0x7f0000000800)='./file0\x00')
getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000840)=0x5, &(0x7f0000000880)=0x4)
fstat(r0, &(0x7f00000008c0))
sendto$inet6(r2, &(0x7f0000000940)="18f3bafccaa7372add194668456602d7aa5479df511268ff37179446da676217fc32c9203e3b6684518566b7e615d1109c950929d6b197cda09b5d786ede3305e7c9d15b64f2242860327f0a33a58f0a79d54ffd5b89a59f063816b3cfd24b7f21f2dc34c59011951588de618e60a54d1490a2f78530f883881217e75d9ebf6c885276ab9962e002a9283156c033ca49065fbe49ddc66fc827cd3ce9bd90b8870d871bdff75a6b2ab17db6", 0xab, 0x40030, &(0x7f0000000a00)={0xa, 0x4e23, 0x6, @private2, 0x5}, 0x1c)
ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f0000000a40)={0xf})
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x8010, r2, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000f00)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}})
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x54, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3b}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x54}}, 0x4004)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000010c0)={<r7=>0x0, @in={{0x2, 0x4e22, @remote}}, 0x5, 0x3, 0x3, 0x1, 0x2}, &(0x7f0000001180)=0x98)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000011c0)={r7, @in={{0x2, 0x4e21, @remote}}, 0x3b8ee2bd, 0x7, 0x7, 0xa20, 0x42, 0x1000, 0x1}, 0x9c)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000012c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000001400)={0x1ff, 0x10000, 0x2})
bind$netlink(r2, &(0x7f0000001440)={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc)
io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0)
ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000001480)={0x6, "e2f745dc607a52e3fc06f195ac48363bf8b56cdaf9719940af5807a2b99912f3", 0x1, 0x20, 0xe, 0x5, 0x4, 0x2, 0x5f})
r9 = add_key$fscrypt_v1(&(0x7f0000001500), &(0x7f0000001540)={'fscrypt:', @desc2}, &(0x7f0000001580)={0x0, "b1b4cb5298bbcb55fd4140a193a40bdf171ee3222dcadc3e1d7c28f748f90354ea41cb59bf69e56e64a915c78f13a37664e42cf7aab68e55591900657c980750", 0x30}, 0x48, 0xfffffffffffffffb)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001600)={r9, 0x1000, 0x95}, 0x0, &(0x7f0000001640)="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", &(0x7f0000002640)="af716d4031d86a7829d127f1e1586cb1d5892b06a43ef8ef94775f07ff8ae75b60a412e6a36fddba3e7ba5c7f91d44bec2af857d1f1854d82d590e0a824b49abd2c6a5f051f1ea28f1f0c57f5cf644836b549c52354bcad6fa41c208f12bd210d72131cc6183b2212a43ff0301687f5f467defceaf9016d1fd659c532486e292d4b88b19b98cf6afc91b2709ead56f82226b499795")
write$binfmt_aout(r2, &(0x7f0000002700)={{0xcc, 0x9, 0x40, 0x165, 0x2b0, 0x8, 0x95, 0x1}, "a9dca9bfa5eb18b84413aa59568997", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x82f)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000002f80), r2)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x24, r10, 0x1, 0x9, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x4800)

4.328865105s ago: executing program 7 (id=4327):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000540)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x438}, 0x0, 0x12f4c4729364eade, 0x1})
io_uring_enter(r2, 0x3516, 0xa00100, 0x0, 0x0, 0x0)

4.215396467s ago: executing program 5 (id=4328):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x11}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c71825ef58d10fd5000005000000180001801400020073797a5f74756e000000000000000000500003804c000380100001800800010003000000040003"], 0x7c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3)

4.117403644s ago: executing program 7 (id=4329):
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0)
tkill(r2, 0xb)

3.96443643s ago: executing program 8 (id=4330):
r0 = socket(0x23, 0x5, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv_slave_1\x00', 0x10)
listen(r0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x89ed, 0x0) (fail_nth: 5)

3.893996715s ago: executing program 5 (id=4331):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6(0xa, 0x1, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x4000000000000000, 0x0)
r3 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c)
syz_clone3(&(0x7f0000001240)={0x200200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)
recvmsg(0xffffffffffffffff, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20)

3.801671263s ago: executing program 4 (id=4332):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioprio_get$pid(0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x2, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x6, 0x8, 0x108, 0x0, "ebb88c040000366fb6ae606bd0ff12316391a0050eb9248827eefb7ba7b9ba1812"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0)

3.730478689s ago: executing program 8 (id=4333):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
r3 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
fchdir(r3)
ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000040)=0x8)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, &(0x7f0000000a40)={0xa, 0x6e24, 0x7fff, @mcast1, 0x9}, 0x1c)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read$watch_queue(r5, 0x0, 0x0)

3.620043445s ago: executing program 6 (id=4334):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f0000000180)={0x6, 0x0, [{0xa54, 0x0, 0x40020298ce9}, {0x251, 0x0, 0x80000000a}, {0x9f9, 0x0, 0x400}, {0x227, 0x0, 0x40}, {0x276}, {0x863, 0x1000000, 0x5}]})

3.481684387s ago: executing program 7 (id=4335):
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/78, 0x0, 0xf250a284784867f7})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
eventfd2(0x8, 0x800) (async)
syz_open_dev$vim2m(0x0, 0x7, 0x2)
chdir(0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x188, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x158, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}, @TCA_GRED_PARMS={0x38, 0x1, {0x9, 0xb, 0x1, 0xc, 0x2, 0x6, 0x7, 0x7, 0x10, 0x8, 0x1d, 0xf, 0x2, 0xd, 0x7, 0x7}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480), 0xb7)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async)
lsm_get_self_attr(0x1, 0x0, &(0x7f0000001bc0), 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r7, 0x1, 0x70bd2e}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x814) (async)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)

1.893421014s ago: executing program 8 (id=4336):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000102505a8a444000102030109021b00010100deff090400ff020701010009050102"], 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r2, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020000})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$vim2m(&(0x7f0000000400), 0x6, 0x2)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='LINE \''], 0xbb)
close(r4)
r5 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x14b043)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x200000, 0x0, 0x1, 0xd, 0x0, 0x3a}, 0x1d)
r6 = syz_clone(0x10010000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setsig(0x4203, r6, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000})
getgid()
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x800, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000040)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r7, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r7, 0x7, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x6, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91dda1ea89de2b7fb0a01007a2000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d80060000000000000002000", [0xd2, 0x2]}})

1.882509256s ago: executing program 4 (id=4337):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
io_setup(0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0xa, 0x3, 0xff)
syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802)
syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x6a, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x50)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014)

915.54803ms ago: executing program 4 (id=4338):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r8, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

565.203254ms ago: executing program 4 (id=4339):
poll(0x0, 0x0, 0xffffffff)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1802000066000000000000000300000085000000d0000000850000001100000095000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x3e, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=0x1, 0xffffffffffffffff, 0x29, 0x2020}, 0x20)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
gettid()
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
accept(r3, 0x0, 0x0)

0s ago: executing program 7 (id=4340):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x1, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000040)={0x0, 0x80, 0x1, 'queue1\x00', 0x85})
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}]}}]}, 0x40}}, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x201)

kernel console output (not intermixed with test programs):

370.705087][T21733] RAX: ffffffffffffffda RBX: 00007f9521216090 RCX: 00007f9520f9c629
[ 1370.705094][T21733] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000004
[ 1370.705100][T21733] RBP: 00007f9521ead090 R08: 0000000000000000 R09: 0000000000000000
[ 1370.705107][T21733] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1370.705113][T21733] R13: 00007f9521216128 R14: 00007f9521216090 R15: 00007ffe562f04e8
[ 1370.705127][T21733]  </TASK>
[ 1370.945481][ T5913] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1371.027440][ T5913] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1371.102034][ T5913] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1371.135902][T21739] fuse: Unknown parameter ''
[ 1371.156827][   T29] audit: type=1400 audit(1771962738.770:1787): avc:  denied  { bind } for  pid=21736 comm="syz.6.3914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1371.163107][ T5913] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1371.584467][ T5913] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1371.595285][ T5913] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1371.648703][  T792] usb 6-1: USB disconnect, device number 29
[ 1371.656036][ T5913] usb 7-1: USB disconnect, device number 41
[ 1371.711823][   T29] audit: type=1400 audit(1771962738.780:1788): avc:  denied  { bind } for  pid=21736 comm="syz.6.3914" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1371.753845][   T29] audit: type=1400 audit(1771962738.780:1789): avc:  denied  { name_bind } for  pid=21736 comm="syz.6.3914" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[ 1371.793053][   T29] audit: type=1400 audit(1771962738.780:1790): avc:  denied  { node_bind } for  pid=21736 comm="syz.6.3914" saddr=fc00::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[ 1371.897220][   T29] audit: type=1400 audit(1771962739.481:1791): avc:  denied  { unmount } for  pid=16003 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1372.150393][   T29] audit: type=1400 audit(1771962739.697:1792): avc:  denied  { name_connect } for  pid=21751 comm="syz.7.3919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[ 1372.604514][T21760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=21760 comm=syz.4.3921
[ 1373.057286][  T792] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1373.175332][ T1662] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1373.580869][ T1662] usb 7-1: Using ep0 maxpacket: 16
[ 1373.587638][ T1662] usb 7-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config
[ 1373.603486][ T1662] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1373.614573][ T1662] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1373.657081][  T792] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1373.666368][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1373.678449][ T1662] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1373.689147][  T792] usb 6-1: Product: syz
[ 1373.693375][  T792] usb 6-1: Manufacturer: syz
[ 1373.698889][ T1662] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1373.712108][  T792] usb 6-1: SerialNumber: syz
[ 1373.805054][T21774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3925'.
[ 1374.019573][ T5913] IPVS: starting estimator thread 0...
[ 1374.027072][  T792] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1374.041366][   T29] audit: type=1400 audit(1771962741.185:1793): avc:  denied  { read } for  pid=21770 comm="syz.7.3925" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1374.192946][T21777] IPVS: using max 45 ests per chain, 108000 per kthread
[ 1374.200297][ T1662] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1374.383702][ T1662] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1374.409185][ T1662] usb 7-1: Manufacturer: syz
[ 1374.416229][   T29] audit: type=1400 audit(1771962741.185:1794): avc:  denied  { open } for  pid=21770 comm="syz.7.3925" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1374.444606][ T1662] usb 7-1: config 0 descriptor??
[ 1374.451920][ T5913] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1374.471637][   T29] audit: type=1400 audit(1771962741.260:1795): avc:  denied  { ioctl } for  pid=21770 comm="syz.7.3925" path="/dev/input/event2" dev="devtmpfs" ino=920 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1374.500437][   T29] audit: type=1400 audit(1771962741.802:1796): avc:  denied  { firmware_load } for  pid=5913 comm="kworker/0:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 1374.816446][T21785] netlink: 'syz.7.3927': attribute type 16 has an invalid length.
[ 1374.826200][T21785] netlink: 'syz.7.3927': attribute type 17 has an invalid length.
[ 1374.885861][T21785] 8021q: adding VLAN 0 to HW filter on device .`
[ 1375.056684][T21785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1375.113585][T21788] blk_print_req_error: 7 callbacks suppressed
[ 1375.113603][T21788] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1375.119477][ T1662] rc_core: IR keymap rc-hauppauge not found
[ 1375.125108][T21788] buffer_io_error: 6 callbacks suppressed
[ 1375.125124][T21788] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1375.129855][ T1662] Registered IR keymap rc-empty
[ 1375.166793][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1375.187909][T21788] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1375.201761][T21788] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1375.205843][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1375.228800][T21788] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1375.239045][T21788] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1375.247362][T21788] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1375.255885][ T1662] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 1375.260961][T21788] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1375.288107][ T1662] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input105
[ 1375.344125][T21788] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1375.353631][T21788] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1375.371927][T21791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3929'.
[ 1375.383816][T21788] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1375.411301][T21764] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3922'.
[ 1375.466628][T21786] usb 6-1: USB disconnect, device number 30
[ 1375.477058][T21788] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1375.912159][ T5913] usb 6-1: Service connection timeout for: 256
[ 1375.918349][ T5913] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1375.929869][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1375.937918][ T5913] ath9k_htc: Failed to initialize the device
[ 1375.940187][T21788] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1375.944339][T21786] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1375.964555][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1375.984676][T21788] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1375.998391][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1376.017418][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1376.018212][T21788] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1376.041348][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1376.055847][T21788] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1376.079286][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1376.086508][T21788] ldm_validate_partition_table(): Disk read failed.
[ 1376.086702][T21788] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1376.114286][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1376.121575][T21788] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1376.185464][T21788] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1376.200143][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1376.224492][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1376.232453][T21788] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1376.243727][T21788] Dev nbd4: unable to read RDB block 0
[ 1376.249512][T21788]  nbd4: unable to read partition table
[ 1376.548191][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1376.585632][ T1662] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1376.620133][ T1662] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1376.655796][   T29] kauditd_printk_skb: 1 callbacks suppressed
[ 1376.655810][   T29] audit: type=1400 audit(1771962743.918:1798): avc:  denied  { create } for  pid=21804 comm="syz.5.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1376.705124][ T1662] usb 7-1: USB disconnect, device number 42
[ 1376.823631][T21803] team_slave_1: mtu less than device minimum
[ 1376.824051][   T29] audit: type=1400 audit(1771962744.086:1799): avc:  denied  { ioctl } for  pid=21790 comm="syz.7.3929" path="socket:[99820]" dev="sockfs" ino=99820 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1377.153212][T21812] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1377.365474][T21816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=21816 comm=syz.4.3934
[ 1377.799862][T21820] fuse: Unknown parameter ''
[ 1377.852258][   T29] audit: type=1400 audit(1771962745.050:1800): avc:  denied  { write } for  pid=21822 comm="syz.5.3935" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1380.708336][T21833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3938'.
[ 1380.717677][T21833] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 1380.730468][T21833] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1380.765179][T21836] Bluetooth: MGMT ver 1.23
[ 1380.769635][T21836] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[ 1381.081636][T21786] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 1381.177825][ T5916] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1381.199186][ T1662] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1381.243601][T21786] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1381.322461][T21786] usb 5-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30
[ 1381.336779][T21786] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1381.353133][T21786] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1381.362706][T21786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1381.414158][ T5916] usb 7-1: Using ep0 maxpacket: 16
[ 1381.544326][   T29] audit: type=1400 audit(1771962748.429:1801): avc:  denied  { append } for  pid=21849 comm="syz.8.3945" name="sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1381.759870][T21786] usb 5-1: Product: syz
[ 1381.764215][T21786] usb 5-1: Manufacturer: syz
[ 1381.769719][T21786] usb 5-1: SerialNumber: syz
[ 1381.779343][ T1662] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1381.781881][ T5916] usb 7-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config
[ 1381.789843][ T1662] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1381.791283][T21786] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[ 1381.806493][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1381.827215][   T29] audit: type=1400 audit(1771962748.438:1802): avc:  denied  { open } for  pid=21849 comm="syz.8.3945" path="/dev/sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1381.853635][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1381.863414][ T5916] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1381.873547][ T5916] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1381.891003][T21786] cdc_ncm 5-1:1.0: bind() failure
[ 1381.898115][ T1662] usb 6-1: Product: syz
[ 1381.898165][ T5916] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1381.911561][ T5916] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1381.924507][ T5916] usb 7-1: Manufacturer: syz
[ 1381.929566][ T1662] usb 6-1: Manufacturer: syz
[ 1381.932145][ T5916] usb 7-1: config 0 descriptor??
[ 1381.938946][   T29] audit: type=1400 audit(1771962748.438:1803): avc:  denied  { ioctl } for  pid=21849 comm="syz.8.3945" path="/dev/sg0" dev="devtmpfs" ino=791 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1381.972582][ T1662] usb 6-1: SerialNumber: syz
[ 1381.984942][ T1662] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1382.020677][ T5913] usb 5-1: USB disconnect, device number 102
[ 1382.041453][T21786] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1382.254782][T21855] No such timeout policy "syz0"
[ 1382.299883][ T5916] rc_core: IR keymap rc-hauppauge not found
[ 1382.305823][ T5916] Registered IR keymap rc-empty
[ 1382.313190][ T5916] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1382.363861][ T5916] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1382.393110][ T5916] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 1382.400789][T21859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=21859 comm=syz.8.3948
[ 1382.426775][ T5916] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input106
[ 1382.800726][ T5916] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1382.887730][ T5916] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1382.912636][T21843] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3942'.
[ 1382.954095][T19542] usb 6-1: USB disconnect, device number 31
[ 1383.500851][T21786] usb 6-1: Service connection timeout for: 256
[ 1383.510270][T21786] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1383.525392][T21786] ath9k_htc: Failed to initialize the device
[ 1383.678624][ T5916] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1383.930842][T19542] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1383.967164][ T5916] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1383.995071][T21872] FAULT_INJECTION: forcing a failure.
[ 1383.995071][T21872] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1384.010615][ T5916] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1384.024319][   T29] audit: type=1400 audit(1771962750.815:1804): avc:  denied  { getopt } for  pid=21871 comm="syz.8.3952" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1384.059921][ T5916] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1384.078757][T21872] CPU: 0 UID: 0 PID: 21872 Comm: syz.5.3951 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1384.078777][T21872] Tainted: [L]=SOFTLOCKUP
[ 1384.078781][T21872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1384.078788][T21872] Call Trace:
[ 1384.078791][T21872]  <TASK>
[ 1384.078796][T21872]  dump_stack_lvl+0x100/0x190
[ 1384.078817][T21872]  should_fail_ex.cold+0x5/0xa
[ 1384.078831][T21872]  _copy_to_user+0x32/0xd0
[ 1384.078848][T21872]  simple_read_from_buffer+0xcb/0x170
[ 1384.078868][T21872]  proc_fail_nth_read+0x1af/0x230
[ 1384.078884][T21872]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1384.078898][T21872]  ? rw_verify_area+0xce/0x6d0
[ 1384.078912][T21872]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1384.078929][T21872]  vfs_read+0x1e4/0xb30
[ 1384.078955][T21872]  ? __pfx_vfs_read+0x10/0x10
[ 1384.078973][T21872]  ? __fget_files+0x215/0x3d0
[ 1384.078987][T21872]  ? __fget_files+0x21f/0x3d0
[ 1384.079001][T21872]  ksys_read+0x12a/0x250
[ 1384.079016][T21872]  ? __pfx_ksys_read+0x10/0x10
[ 1384.079035][T21872]  do_syscall_64+0x106/0xf80
[ 1384.079046][T21872]  ? clear_bhb_loop+0x40/0x90
[ 1384.079059][T21872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1384.079069][T21872] RIP: 0033:0x7fc1dad5cece
[ 1384.079079][T21872] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1384.079089][T21872] RSP: 002b:00007fc1dbd2bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1384.079100][T21872] RAX: ffffffffffffffda RBX: 00007fc1dbd2c6c0 RCX: 00007fc1dad5cece
[ 1384.079107][T21872] RDX: 000000000000000f RSI: 00007fc1dbd2c0a0 RDI: 0000000000000004
[ 1384.079114][T21872] RBP: 00007fc1dbd2c090 R08: 0000000000000000 R09: 0000000000000000
[ 1384.079120][T21872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1384.079126][T21872] R13: 00007fc1db016038 R14: 00007fc1db015fa0 R15: 00007ffc2997bce8
[ 1384.079140][T21872]  </TASK>
[ 1384.272733][ T5916] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1384.342183][ T5916] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1384.384176][ T5916] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1384.425159][ T5916] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1384.462403][ T5916] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1384.471955][ T5916] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1384.562232][T21885] fuse: Unknown parameter ''
[ 1384.617772][   T29] audit: type=1400 audit(1771962751.377:1805): avc:  denied  { read } for  pid=21886 comm="syz.8.3956" path="socket:[99949]" dev="sockfs" ino=99949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 1384.702621][T21890] tmpfs: Unknown parameter 'func'
[ 1384.717953][ T5916] usb 7-1: USB disconnect, device number 43
[ 1384.745798][   T29] audit: type=1400 audit(1771962751.433:1806): avc:  denied  { setopt } for  pid=21886 comm="syz.8.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1384.924787][T21893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=21893 comm=syz.6.3958
[ 1385.908621][   T29] audit: type=1400 audit(1771962751.910:1807): avc:  denied  { mount } for  pid=21892 comm="syz.8.3959" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1386.253087][   T29] audit: type=1400 audit(1771962752.893:1808): avc:  denied  { create } for  pid=21900 comm="syz.4.3962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1386.319731][T21908] FAULT_INJECTION: forcing a failure.
[ 1386.319731][T21908] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1386.332992][T21908] CPU: 0 UID: 0 PID: 21908 Comm: syz.6.3964 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1386.333012][T21908] Tainted: [L]=SOFTLOCKUP
[ 1386.333016][T21908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1386.333022][T21908] Call Trace:
[ 1386.333028][T21908]  <TASK>
[ 1386.333033][T21908]  dump_stack_lvl+0x100/0x190
[ 1386.333054][T21908]  should_fail_ex.cold+0x5/0xa
[ 1386.333068][T21908]  _copy_from_user+0x2e/0xd0
[ 1386.333084][T21908]  copy_msghdr_from_user+0x9f/0x4f0
[ 1386.333099][T21908]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1386.333120][T21908]  ___sys_sendmsg+0x106/0x1e0
[ 1386.333135][T21908]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1386.333164][T21908]  __sys_sendmsg+0x170/0x220
[ 1386.333175][T21908]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1386.333199][T21908]  do_syscall_64+0x106/0xf80
[ 1386.333210][T21908]  ? clear_bhb_loop+0x40/0x90
[ 1386.333223][T21908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1386.333234][T21908] RIP: 0033:0x7f3fdb39c629
[ 1386.333244][T21908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1386.333254][T21908] RSP: 002b:00007f3fd95f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1386.333268][T21908] RAX: ffffffffffffffda RBX: 00007f3fdb615fa0 RCX: 00007f3fdb39c629
[ 1386.333275][T21908] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[ 1386.333282][T21908] RBP: 00007f3fd95f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1386.333288][T21908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1386.333295][T21908] R13: 00007f3fdb616038 R14: 00007f3fdb615fa0 R15: 00007ffe12a500c8
[ 1386.333308][T21908]  </TASK>
[ 1386.691444][   T29] audit: type=1400 audit(1771962752.977:1809): avc:  denied  { create } for  pid=21907 comm="syz.6.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1386.812336][   T29] audit: type=1400 audit(1771962753.192:1810): avc:  denied  { write } for  pid=21909 comm="syz.6.3965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1387.139777][   T29] audit: type=1400 audit(1771962753.211:1811): avc:  denied  { accept } for  pid=21909 comm="syz.6.3965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1387.162003][   T29] audit: type=1400 audit(1771962753.220:1812): avc:  denied  { connect } for  pid=21905 comm="syz.4.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1387.334276][   T29] audit: type=1400 audit(1771962753.220:1813): avc:  denied  { write } for  pid=21905 comm="syz.4.3963" laddr=fe80::11 lport=26356 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1388.091715][T13618] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1388.127561][T21925] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3961'.
[ 1388.262170][T13618] usb 7-1: Using ep0 maxpacket: 16
[ 1388.269608][T13618] usb 7-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config
[ 1388.281121][T13618] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1388.293084][T13618] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1388.304681][T13618] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1388.368737][T13618] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1388.386000][T13618] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1388.501094][T13618] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1388.510675][T13618] usb 7-1: Manufacturer: syz
[ 1388.526029][T13618] usb 7-1: config 0 descriptor??
[ 1389.546913][T13618] rc_core: IR keymap rc-hauppauge not found
[ 1389.869786][T13618] Registered IR keymap rc-empty
[ 1389.874875][T13618] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1389.929925][T13618] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1389.964200][T13618] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 1390.072566][   T29] kauditd_printk_skb: 5 callbacks suppressed
[ 1390.131858][   T29] audit: type=1400 audit(1771963012.474:1819): avc:  denied  { append } for  pid=21933 comm="syz.5.3971" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1390.274677][T13618] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input107
[ 1390.294338][T13618] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1390.311998][T21934] loop6: detected capacity change from 0 to 2640
[ 1390.319089][T13618] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1390.332845][T21934] buffer_io_error: 6 callbacks suppressed
[ 1390.332856][T21934] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.347541][T13618] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1390.362692][T21934] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.370791][T13618] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1390.382131][T21934] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.399245][T13618] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1390.413128][T21934] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.421419][T13618] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1390.431245][T21934] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.442650][T13618] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1390.452151][   T29] audit: type=1400 audit(1771963012.839:1820): avc:  denied  { append } for  pid=21938 comm="syz.4.3972" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1390.486738][T21944] veth0: entered promiscuous mode
[ 1390.492152][T21934] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.500175][T13618] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1390.505881][T21934] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.509930][   T29] audit: type=1400 audit(1771963012.867:1821): avc:  denied  { map } for  pid=21938 comm="syz.4.3972" path="socket:[101231]" dev="sockfs" ino=101231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1390.540094][T13618] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1390.570472][T13618] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1390.592429][T13618] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1390.603013][T13618] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1390.647409][T21934] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.647858][T13618] usb 7-1: USB disconnect, device number 44
[ 1390.710306][T21934] ldm_validate_partition_table(): Disk read failed.
[ 1390.784752][T21934] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.850072][T21934] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1390.882801][T21934] Dev loop6: unable to read RDB block 0
[ 1390.890602][T21934]  loop6: unable to read partition table
[ 1390.927760][T21934] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[ 1390.928526][   T29] audit: type=1400 audit(1771963013.289:1822): avc:  denied  { create } for  pid=21947 comm="syz.5.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[ 1390.966647][   T29] audit: type=1400 audit(1771963013.326:1823): avc:  denied  { setopt } for  pid=21947 comm="syz.5.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[ 1391.055799][T21932] veth0: left promiscuous mode
[ 1391.067800][ T5177] ldm_validate_partition_table(): Disk read failed.
[ 1391.082061][ T5177] Dev loop6: unable to read RDB block 0
[ 1391.095186][ T5177]  loop6: unable to read partition table
[ 1391.232912][   T29] audit: type=1400 audit(1771963013.569:1824): avc:  denied  { kexec_image_load } for  pid=21954 comm="syz.7.3976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[ 1391.598707][T21967] fuse: Unknown parameter ''
[ 1392.226031][T17744] block nbd35: Possible stuck request ffff8880622f8000: control (read@0,1024B). Runtime 90 seconds
[ 1392.245105][T17744] block nbd35: Possible stuck request ffff8880622f8200: control (read@1024,1024B). Runtime 90 seconds
[ 1392.257282][T17744] block nbd35: Possible stuck request ffff8880622f8400: control (read@2048,1024B). Runtime 90 seconds
[ 1392.268370][T17744] block nbd35: Possible stuck request ffff8880622f8600: control (read@3072,1024B). Runtime 90 seconds
[ 1393.175135][T21977] netlink: 'syz.4.3982': attribute type 4 has an invalid length.
[ 1393.208728][T21977] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3982'.
[ 1393.900502][   T29] audit: type=1400 audit(1771963016.068:1825): avc:  denied  { wake_alarm } for  pid=21957 comm="syz.6.3978" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1394.247508][T21989] netdevsim netdevsim5: Firmware load for './file0/file0/..' refused, path contains '..' component
[ 1394.642569][   T29] audit: type=1400 audit(1771963016.751:1826): avc:  denied  { read write } for  pid=21994 comm="syz.8.3985" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1394.691302][   T29] audit: type=1400 audit(1771963016.751:1827): avc:  denied  { open } for  pid=21994 comm="syz.8.3985" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1394.718823][T21989] �� speed is unknown, defaulting to 1000
[ 1395.098454][   T29] audit: type=1400 audit(1771963016.920:1828): avc:  denied  { setopt } for  pid=21998 comm="syz.4.3986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1395.544556][   T29] kauditd_printk_skb: 1 callbacks suppressed
[ 1395.544566][   T29] audit: type=1400 audit(1771963017.612:1830): avc:  denied  { create } for  pid=21994 comm="syz.8.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1395.651593][   T29] audit: type=1400 audit(1771963017.640:1831): avc:  denied  { write } for  pid=21994 comm="syz.8.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1395.762741][ T1662] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1395.923764][ T1662] usb 7-1: Using ep0 maxpacket: 16
[ 1395.930617][ T1662] usb 7-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config
[ 1395.942308][ T1662] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1395.966666][ T1662] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1395.985575][ T1662] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1396.015078][ T1662] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1396.047764][ T1662] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1396.057460][ T1662] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1396.076020][ T1662] usb 7-1: Manufacturer: syz
[ 1396.113831][ T1662] usb 7-1: config 0 descriptor??
[ 1396.895758][T22027] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1396.898965][ T1662] rc_core: IR keymap rc-hauppauge not found
[ 1396.915046][ T1662] Registered IR keymap rc-empty
[ 1396.926966][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1396.980178][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1397.077133][ T1662] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 1397.121156][ T1662] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input108
[ 1397.184951][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1397.238109][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1397.263466][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1397.295405][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1397.345271][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1397.365786][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1397.387061][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1397.430230][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1397.461696][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1397.471682][T22037] netlink: 'syz.8.3994': attribute type 4 has an invalid length.
[ 1397.491779][T22037] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3994'.
[ 1397.501125][ T1662] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1397.527443][ T1662] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1397.538161][ T1662] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1397.647060][ T1662] usb 7-1: USB disconnect, device number 45
[ 1401.244520][T22060] netlink: 'syz.8.3999': attribute type 4 has an invalid length.
[ 1401.252323][T22060] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3999'.
[ 1401.371907][   T29] audit: type=1400 audit(1771963022.919:1832): avc:  denied  { read write } for  pid=22044 comm="syz.7.3996" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1401.666455][   T29] audit: type=1400 audit(1771963022.919:1833): avc:  denied  { open } for  pid=22044 comm="syz.7.3996" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1401.726021][   T29] audit: type=1400 audit(1771963022.919:1834): avc:  denied  { ioctl } for  pid=22044 comm="syz.7.3996" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1401.961854][T22068] FAULT_INJECTION: forcing a failure.
[ 1401.961854][T22068] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1402.021843][T22068] CPU: 1 UID: 0 PID: 22068 Comm: syz.6.4000 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1402.021863][T22068] Tainted: [L]=SOFTLOCKUP
[ 1402.021867][T22068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1402.021873][T22068] Call Trace:
[ 1402.021877][T22068]  <TASK>
[ 1402.021881][T22068]  dump_stack_lvl+0x100/0x190
[ 1402.021903][T22068]  should_fail_ex.cold+0x5/0xa
[ 1402.021918][T22068]  _copy_to_user+0x32/0xd0
[ 1402.021934][T22068]  simple_read_from_buffer+0xcb/0x170
[ 1402.021952][T22068]  proc_fail_nth_read+0x1af/0x230
[ 1402.021967][T22068]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1402.021982][T22068]  ? rw_verify_area+0xce/0x6d0
[ 1402.021996][T22068]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1402.022010][T22068]  vfs_read+0x1e4/0xb30
[ 1402.022027][T22068]  ? __pfx_vfs_read+0x10/0x10
[ 1402.022041][T22068]  ? __fget_files+0x215/0x3d0
[ 1402.022054][T22068]  ? __fget_files+0x21f/0x3d0
[ 1402.022068][T22068]  ksys_read+0x12a/0x250
[ 1402.022083][T22068]  ? __pfx_ksys_read+0x10/0x10
[ 1402.022102][T22068]  do_syscall_64+0x106/0xf80
[ 1402.022113][T22068]  ? clear_bhb_loop+0x40/0x90
[ 1402.022126][T22068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1402.022137][T22068] RIP: 0033:0x7f3fdb35cece
[ 1402.022147][T22068] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1402.022157][T22068] RSP: 002b:00007f3fd95f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1402.022169][T22068] RAX: ffffffffffffffda RBX: 00007f3fd95f66c0 RCX: 00007f3fdb35cece
[ 1402.022176][T22068] RDX: 000000000000000f RSI: 00007f3fd95f60a0 RDI: 0000000000000004
[ 1402.022182][T22068] RBP: 00007f3fd95f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1402.022188][T22068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1402.022195][T22068] R13: 00007f3fdb616038 R14: 00007f3fdb615fa0 R15: 00007ffe12a500c8
[ 1402.022209][T22068]  </TASK>
[ 1402.919788][   T29] audit: type=1400 audit(1771963024.510:1835): avc:  denied  { create } for  pid=22076 comm="syz.4.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1403.732490][   T29] audit: type=1400 audit(1771963024.510:1836): avc:  denied  { getopt } for  pid=22076 comm="syz.4.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1404.135159][   T29] audit: type=1400 audit(1771963025.652:1837): avc:  denied  { write } for  pid=22087 comm="syz.8.4004" name="binder0" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1404.633672][   T29] audit: type=1400 audit(1771963025.961:1838): avc:  denied  { append } for  pid=22096 comm="syz.6.4006" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1404.751003][T22100] input: syz1 as /devices/virtual/input/input109
[ 1405.094362][   T29] audit: type=1400 audit(1771963026.101:1839): avc:  denied  { ioctl } for  pid=22087 comm="syz.8.4004" path="socket:[102008]" dev="sockfs" ino=102008 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1405.360710][   T29] audit: type=1400 audit(1771963026.223:1840): avc:  denied  { write } for  pid=22087 comm="syz.8.4004" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1406.266912][   T29] audit: type=1400 audit(1771963027.252:1841): avc:  denied  { bind } for  pid=22111 comm="syz.7.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1406.327011][T22121] blk_print_req_error: 6 callbacks suppressed
[ 1406.327952][T22121] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1406.347283][T22121] buffer_io_error: 27 callbacks suppressed
[ 1406.347316][T22121] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1406.363046][T22121] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1406.373007][T22121] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1406.382159][T22121] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1406.393659][T22121] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1406.404100][T22121] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1406.413997][T22121] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1406.423703][T22121] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1406.435809][T22121] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1406.445895][T22121] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1406.455784][T22121] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1406.468965][T22121] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1406.478735][T22121] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1406.487451][T22121] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1406.500131][T22121] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1406.508203][T22121] ldm_validate_partition_table(): Disk read failed.
[ 1406.516713][T22121] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1406.528609][T22121] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1406.537097][T22121] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1406.549575][T22121] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1406.562016][T22121] Dev nbd7: unable to read RDB block 0
[ 1406.569392][T22121]  nbd7: unable to read partition table
[ 1406.576048][T22121] Mount JFS Failure: -5
[ 1407.185805][T22130] �� speed is unknown, defaulting to 1000
[ 1407.444246][   T29] kauditd_printk_skb: 3 callbacks suppressed
[ 1407.444263][   T29] audit: type=1400 audit(1771963028.750:1845): avc:  denied  { write } for  pid=22143 comm="syz.5.4017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1407.586106][   T29] audit: type=1400 audit(1771963028.881:1846): avc:  denied  { unlink } for  pid=22148 comm="syz.5.4018" name="#44" dev="tmpfs" ino=1618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1407.762343][ T5916] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1407.785018][   T29] audit: type=1400 audit(1771963028.881:1847): avc:  denied  { mount } for  pid=22148 comm="syz.5.4018" name="/" dev="overlay" ino=1613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1407.931590][T22156] loop6: detected capacity change from 0 to 2640
[ 1407.940261][T22156] ldm_validate_partition_table(): Disk read failed.
[ 1407.946952][T22156] Dev loop6: unable to read RDB block 0
[ 1407.962765][T22156]  loop6: unable to read partition table
[ 1407.976345][ T5916] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1407.994891][ T5916] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1408.021066][T22156] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[ 1408.158933][ T5916] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 1408.320030][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1408.506391][ T5916] usb 9-1: config 0 descriptor??
[ 1408.662514][ T5177] ldm_validate_partition_table(): Disk read failed.
[ 1408.681017][ T5177] Dev loop6: unable to read RDB block 0
[ 1408.686772][ T5177]  loop6: unable to read partition table
[ 1408.767013][T22141] serio: Serial port ttyS3
[ 1408.809068][T22166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1408.857043][T22166] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1409.286655][ T5916] kovaplus 0003:1E7D:2D50.0061: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.8-1/input0
[ 1409.324066][T22174] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4023'.
[ 1409.359551][T22176] fuse: Unknown parameter ''
[ 1409.594216][   T29] audit: type=1400 audit(1771963286.749:1848): avc:  denied  { bind } for  pid=22179 comm="syz.6.4026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1409.701761][   T29] audit: type=1400 audit(1771963286.749:1849): avc:  denied  { ioctl } for  pid=22179 comm="syz.6.4026" path="socket:[102827]" dev="sockfs" ino=102827 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1409.703077][   T47] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0
[ 1409.737689][   T29] audit: type=1400 audit(1771963286.749:1850): avc:  denied  { append } for  pid=22179 comm="syz.6.4026" name="userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1409.776103][   T29] audit: type=1400 audit(1771963286.749:1851): avc:  denied  { create } for  pid=22179 comm="syz.6.4026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1409.843221][   T29] audit: type=1400 audit(1771963286.749:1852): avc:  denied  { setopt } for  pid=22179 comm="syz.6.4026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1409.880505][   T47] hid-generic 0000:0000:0000.0062: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1410.051781][   T29] audit: type=1400 audit(1771963287.189:1853): avc:  denied  { write } for  pid=22185 comm="syz.7.4028" path="socket:[102844]" dev="sockfs" ino=102844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1410.180840][   T47] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1410.356135][   T29] audit: type=1400 audit(1771963287.189:1854): avc:  denied  { listen } for  pid=22177 comm="syz.4.4025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1410.424412][   T47] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1410.426071][   T47] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a
[ 1410.426095][   T47] usb 7-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160
[ 1410.426114][   T47] usb 7-1: Product: syz
[ 1410.426128][   T47] usb 7-1: Manufacturer: syz
[ 1410.426156][   T47] usb 7-1: SerialNumber: syz
[ 1410.427909][   T47] usb 7-1: config 0 descriptor??
[ 1410.436559][   T47] comedi comedi5: Wrong number of endpoints
[ 1410.436579][   T47] ni6501 7-1:0.0: driver 'ni6501' failed to auto-configure device.
[ 1410.523284][T22191] fido_id[22191]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1410.683026][ T5913] usb 9-1: USB disconnect, device number 4
[ 1410.985670][T22196] ldm_validate_partition_table(): Disk read failed.
[ 1410.986075][T22196] Dev nbd8: unable to read RDB block 0
[ 1410.986550][T22196]  nbd8: unable to read partition table
[ 1410.987415][T22196] Mount JFS Failure: -5
[ 1411.474645][T22207] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4033'.
[ 1411.543976][T22209] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4027'.
[ 1411.593089][T22212] loop6: detected capacity change from 0 to 2640
[ 1411.602404][T22212] ldm_validate_partition_table(): Disk read failed.
[ 1411.842323][T22212] buffer_io_error: 67 callbacks suppressed
[ 1411.842443][T22212] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1412.801147][T22212] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1413.310004][T22212] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1413.709286][T22212] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1413.734353][T22212] Dev loop6: unable to read RDB block 0
[ 1413.746680][T22212] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1413.754668][T22212] Buffer I/O error on dev loop6, logical block 3, async page read
[ 1413.954947][T22229] netlink: 'syz.8.4036': attribute type 10 has an invalid length.
[ 1414.001033][T22212] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1414.046461][T22229] team0: Port device dummy0 added
[ 1414.142090][T22212] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1414.193907][T22228] netlink: 'syz.8.4036': attribute type 10 has an invalid length.
[ 1414.259621][T22212]  loop6: unable to read partition table
[ 1414.263389][T22228] team0: Port device dummy0 removed
[ 1414.290671][T22212] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[ 1414.407738][T22228] .`: (slave dummy0): Enslaving as an active interface with an up link
[ 1414.659742][    C1] blk_print_req_error: 22 callbacks suppressed
[ 1414.659755][    C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1414.676552][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1414.712925][T22234] Buffer I/O error on dev loop9, logical block 1, async page read
[ 1414.729655][   T47] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1414.772814][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1414.785267][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1414.820111][   T29] kauditd_printk_skb: 3 callbacks suppressed
[ 1414.820128][   T29] audit: type=1400 audit(1771963547.647:1858): avc:  denied  { bind } for  pid=22240 comm="syz.7.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1414.860491][T22243] fuse: Unknown parameter ''
[ 1415.005517][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1415.029221][   T29] audit: type=1400 audit(1771963547.816:1859): avc:  denied  { write } for  pid=22240 comm="syz.7.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1415.056057][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1415.057440][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1415.080143][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1415.092938][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1415.105457][T22234] ldm_validate_partition_table(): Disk read failed.
[ 1415.129053][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1415.148401][    C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1415.167540][   T47] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1415.208335][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1415.212157][   T29] audit: type=1400 audit(1771963547.890:1860): avc:  denied  { ioctl } for  pid=22240 comm="syz.7.4041" path="socket:[103040]" dev="sockfs" ino=103040 ioctlcmd=0x5441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1415.224419][T22234] Dev loop9: unable to read RDB block 0
[ 1415.274499][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1415.287220][   T47] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1415.306707][ T5913] usb 7-1: USB disconnect, device number 46
[ 1415.355920][   T47] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1415.409899][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1415.411492][T22234]  loop9: unable to read partition table
[ 1415.437327][T22234] loop9: partition table beyond EOD, truncated
[ 1415.444243][   T47] usb 6-1: Product: syz
[ 1415.461447][   T47] usb 6-1: Manufacturer: syz
[ 1415.476490][   T47] usb 6-1: SerialNumber: syz
[ 1415.492809][   T47] usb 6-1: config 0 descriptor??
[ 1415.505339][   T47] ums-isd200 6-1:0.0: USB Mass Storage device detected
[ 1415.675768][T22251] fuse: Unknown parameter '0x00000000000000030x0000000000000003'
[ 1416.214610][   T47] ums-isd200 6-1:0.0: probe with driver ums-isd200 failed with error -22
[ 1416.221511][T22258] mkiss: ax0: crc mode is auto.
[ 1416.242016][T22258] FAULT_INJECTION: forcing a failure.
[ 1416.242016][T22258] name failslab, interval 1, probability 0, space 0, times 0
[ 1416.254860][T22258] CPU: 0 UID: 0 PID: 22258 Comm: syz.6.4045 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1416.254887][T22258] Tainted: [L]=SOFTLOCKUP
[ 1416.254891][T22258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1416.254899][T22258] Call Trace:
[ 1416.254904][T22258]  <TASK>
[ 1416.254909][T22258]  dump_stack_lvl+0x100/0x190
[ 1416.254930][T22258]  should_fail_ex.cold+0x5/0xa
[ 1416.254945][T22258]  ? tomoyo_encode2+0xfb/0x3c0
[ 1416.254958][T22258]  should_failslab+0xc2/0x120
[ 1416.254974][T22258]  __kmalloc_noprof+0xe0/0x850
[ 1416.254989][T22258]  ? tomoyo_encode2+0x68/0x3c0
[ 1416.255003][T22258]  tomoyo_encode2+0xfb/0x3c0
[ 1416.255017][T22258]  tomoyo_encode+0x29/0x50
[ 1416.255029][T22258]  tomoyo_realpath_from_path+0x18c/0x690
[ 1416.255045][T22258]  tomoyo_path_number_perm+0x23c/0x580
[ 1416.255061][T22258]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1416.255080][T22258]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1416.255111][T22258]  ? find_held_lock+0x2b/0x80
[ 1416.255124][T22258]  ? __fget_files+0x215/0x3d0
[ 1416.255134][T22258]  ? hook_file_ioctl_common+0x146/0x410
[ 1416.255151][T22258]  ? __fget_files+0x21f/0x3d0
[ 1416.255163][T22258]  security_file_ioctl+0xd3/0x230
[ 1416.255176][T22258]  __x64_sys_ioctl+0xb7/0x210
[ 1416.255192][T22258]  do_syscall_64+0x106/0xf80
[ 1416.255203][T22258]  ? clear_bhb_loop+0x40/0x90
[ 1416.255217][T22258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1416.255228][T22258] RIP: 0033:0x7f3fdb39c629
[ 1416.255238][T22258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1416.255249][T22258] RSP: 002b:00007f3fd95d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1416.255260][T22258] RAX: ffffffffffffffda RBX: 00007f3fdb616090 RCX: 00007f3fdb39c629
[ 1416.255267][T22258] RDX: 0000200000000200 RSI: 0000000000005412 RDI: 0000000000000005
[ 1416.255273][T22258] RBP: 00007f3fd95d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1416.255279][T22258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1416.255286][T22258] R13: 00007f3fdb616128 R14: 00007f3fdb616090 R15: 00007ffe12a500c8
[ 1416.255300][T22258]  </TASK>
[ 1416.255331][T22258] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1416.649785][   T47] usb 6-1: USB disconnect, device number 32
[ 1416.897250][   T29] audit: type=1400 audit(1771963549.575:1861): avc:  denied  { read } for  pid=22261 comm="syz.8.4046" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1416.977462][   T29] audit: type=1400 audit(1771963549.575:1862): avc:  denied  { open } for  pid=22261 comm="syz.8.4046" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1417.189263][   T29] audit: type=1400 audit(1771963549.846:1863): avc:  denied  { getopt } for  pid=22269 comm="syz.5.4048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1417.977185][   T29] audit: type=1400 audit(1771963549.893:1864): avc:  denied  { bind } for  pid=22269 comm="syz.5.4048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1418.010409][   T29] audit: type=1400 audit(1771963550.633:1865): avc:  denied  { write } for  pid=22269 comm="syz.5.4048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1418.480938][T22274] loop6: detected capacity change from 0 to 2640
[ 1418.520090][T22186] buffer_io_error: 26 callbacks suppressed
[ 1418.520109][T22186] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1418.648391][T22186] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1418.692547][T22186] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1418.713924][T22186] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1418.721777][T22186] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1418.942536][T22186] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1418.980882][T22186] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1419.001113][T22186] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1419.021228][T22186] ldm_validate_partition_table(): Disk read failed.
[ 1419.042812][T22186] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1419.131196][T22186] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1419.193379][T22186] Dev loop6: unable to read RDB block 0
[ 1419.208182][T22186]  loop6: unable to read partition table
[ 1419.226043][T22274] ldm_validate_partition_table(): Disk read failed.
[ 1419.294205][T22274] Dev loop6: unable to read RDB block 0
[ 1419.313412][T22274]  loop6: unable to read partition table
[ 1419.346335][T22274] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[ 1419.602170][T22293] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4051'.
[ 1420.019265][T22298] blk_print_req_error: 4 callbacks suppressed
[ 1420.020526][T22298] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1420.038735][T22298] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1420.049261][T22298] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1420.060175][T22298] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1420.070012][T22298] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1420.080137][T22298] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1420.090897][T22298] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1420.101054][T22298] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1420.110803][T22298] ldm_validate_partition_table(): Disk read failed.
[ 1420.118494][T22298] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1420.128592][T22298] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1420.139671][T22298] Dev nbd8: unable to read RDB block 0
[ 1420.159650][T22298]  nbd8: unable to read partition table
[ 1420.168131][T22298] Mount JFS Failure: -5
[ 1420.425534][T17454] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[ 1421.254264][T22286] sctp: [Deprecated]: syz.7.4053 (pid 22286) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1421.254264][T22286] Use struct sctp_sack_info instead
[ 1421.286783][T17963] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1421.294873][T22313] FAULT_INJECTION: forcing a failure.
[ 1421.294873][T22313] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1421.321963][T22313] CPU: 0 UID: 0 PID: 22313 Comm: syz.4.4059 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1421.321984][T22313] Tainted: [L]=SOFTLOCKUP
[ 1421.321990][T22313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1421.321999][T22313] Call Trace:
[ 1421.322005][T22313]  <TASK>
[ 1421.322012][T22313]  dump_stack_lvl+0x100/0x190
[ 1421.322095][T22313]  should_fail_ex.cold+0x5/0xa
[ 1421.322117][T22313]  _copy_to_user+0x32/0xd0
[ 1421.322142][T22313]  simple_read_from_buffer+0xcb/0x170
[ 1421.322161][T22313]  proc_fail_nth_read+0x1af/0x230
[ 1421.322176][T22313]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1421.322191][T22313]  ? rw_verify_area+0xce/0x6d0
[ 1421.322205][T22313]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1421.322219][T22313]  vfs_read+0x1e4/0xb30
[ 1421.322236][T22313]  ? __pfx_vfs_read+0x10/0x10
[ 1421.322251][T22313]  ? __fget_files+0x215/0x3d0
[ 1421.322265][T22313]  ? __fget_files+0x21f/0x3d0
[ 1421.322284][T22313]  ksys_read+0x12a/0x250
[ 1421.322299][T22313]  ? __pfx_ksys_read+0x10/0x10
[ 1421.322319][T22313]  do_syscall_64+0x106/0xf80
[ 1421.322330][T22313]  ? clear_bhb_loop+0x40/0x90
[ 1421.322343][T22313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1421.322355][T22313] RIP: 0033:0x7f0181b5cece
[ 1421.322365][T22313] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1421.322379][T22313] RSP: 002b:00007f01829d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1421.322390][T22313] RAX: ffffffffffffffda RBX: 00007f01829d16c0 RCX: 00007f0181b5cece
[ 1421.322397][T22313] RDX: 000000000000000f RSI: 00007f01829d10a0 RDI: 0000000000000005
[ 1421.322403][T22313] RBP: 00007f01829d1090 R08: 0000000000000000 R09: 0000000000000000
[ 1421.322409][T22313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1421.322416][T22313] R13: 00007f0181e16128 R14: 00007f0181e16090 R15: 00007ffc223fa0d8
[ 1421.322430][T22313]  </TASK>
[ 1422.104148][   T29] audit: type=1400 audit(1771963810.299:1866): avc:  denied  { watch } for  pid=22323 comm="syz.4.4063" path="/208/file1" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1422.350109][   T29] audit: type=1400 audit(1771963810.299:1867): avc:  denied  { watch_sb watch_reads } for  pid=22323 comm="syz.4.4063" path="/208/file1" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1422.620127][T22332] siw: device registration error -23
[ 1422.632497][   T29] audit: type=1400 audit(1771963810.954:1868): avc:  denied  { set_context_mgr } for  pid=22319 comm="syz.6.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1422.710824][ T5913] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1422.819519][   T47] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1422.871194][ T5913] usb 6-1: device descriptor read/64, error -71
[ 1423.027140][   T47] usb 9-1: Using ep0 maxpacket: 8
[ 1423.125071][   T47] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1423.128061][ T5913] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1423.140833][   T47] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1423.140858][   T47] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1423.140880][   T47] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1423.140902][   T47] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1423.247781][T22341] siw: device registration error -23
[ 1423.259547][T22341] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[ 1423.593983][T17454] Bluetooth: hci3: command 0x1003 tx timeout
[ 1423.597007][ T5129] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1423.603187][   T47] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1423.650974][ T5913] usb 6-1: device descriptor read/64, error -71
[ 1423.668954][   T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1423.769102][ T5913] usb usb6-port1: attempt power cycle
[ 1423.910510][ T5129] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[ 1424.105806][   T47] usb 9-1: usb_control_msg returned -32
[ 1424.136872][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1424.159854][   T47] usbtmc 9-1:16.0: can't read capabilities
[ 1424.163195][ T5913] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1424.253845][ T5913] usb 6-1: device descriptor read/8, error -71
[ 1424.342220][   T29] audit: type=1400 audit(1771963812.555:1869): avc:  denied  { read } for  pid=22352 comm="syz.6.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1424.367874][T22356] overlayfs: missing 'lowerdir'
[ 1424.384368][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4071'.
[ 1424.432439][T22353] mkiss: ax0: crc mode is auto.
[ 1424.500911][T22358] usbtmc 9-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[ 1424.529600][ T5913] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1424.570059][ T5913] usb 6-1: device descriptor read/8, error -71
[ 1424.671799][   T29] audit: type=1400 audit(1771963812.873:1870): avc:  denied  { connect } for  pid=22359 comm="syz.6.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1424.693179][ T5913] usb usb6-port1: unable to enumerate USB device
[ 1424.700052][T22360] tipc: Started in network mode
[ 1424.714883][T22360] tipc: Node identity 9a51ab22e234, cluster identity 4711
[ 1424.716109][ T5913] usb 9-1: USB disconnect, device number 5
[ 1424.733684][T22360] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1424.762003][T22360] syzkaller0: entered promiscuous mode
[ 1424.782865][T22360] syzkaller0: entered allmulticast mode
[ 1424.799353][T22360] tipc: Resetting bearer <eth:syzkaller0>
[ 1424.806159][T21292] block nbd35: Possible stuck request ffff8880622f8000: control (read@0,1024B). Runtime 120 seconds
[ 1424.818373][T21292] block nbd35: Possible stuck request ffff8880622f8200: control (read@1024,1024B). Runtime 120 seconds
[ 1424.836085][T21292] block nbd35: Possible stuck request ffff8880622f8400: control (read@2048,1024B). Runtime 120 seconds
[ 1424.848265][T21292] block nbd35: Possible stuck request ffff8880622f8600: control (read@3072,1024B). Runtime 120 seconds
[ 1424.965270][ T1662] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1425.124837][ T1662] usb 5-1: Using ep0 maxpacket: 8
[ 1425.160746][ T1662] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1425.284127][ T1662] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[ 1425.387341][ T1662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1425.471314][ T1662] usb 5-1: config 0 descriptor??
[ 1425.549851][T22359] tipc: Resetting bearer <eth:syzkaller0>
[ 1425.557380][   T29] audit: type=1400 audit(1771963813.687:1871): avc:  denied  { create } for  pid=22367 comm="syz.8.4076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1425.588640][T22359] tipc: Disabling bearer <eth:syzkaller0>
[ 1425.752967][T22375] blk_print_req_error: 6 callbacks suppressed
[ 1425.752987][T22375] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1425.781131][T22375] buffer_io_error: 43 callbacks suppressed
[ 1425.781147][T22375] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1425.787103][T22375] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1425.844754][T22375] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1425.890755][T22375] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1425.900906][T22375] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1425.910051][T22375] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1426.035506][T22375] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1426.066142][T22375] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1426.313350][   T29] audit: type=1400 audit(1771963814.408:1872): avc:  denied  { connect } for  pid=22361 comm="syz.4.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1426.499954][T22375] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1426.500094][T22375] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1426.500116][T22375] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1426.500155][T22375] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1426.500168][T22375] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1426.500216][T22375] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1426.500230][T22375] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1426.500240][T22375] ldm_validate_partition_table(): Disk read failed.
[ 1426.500266][T22375] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1426.500279][T22375] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1426.500304][T22375] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1426.500325][T22375] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1426.500385][T22375] Dev nbd7: unable to read RDB block 0
[ 1426.500544][T22375]  nbd7: unable to read partition table
[ 1426.994952][   T29] audit: type=1400 audit(1771963814.707:1873): avc:  denied  { write } for  pid=22361 comm="syz.4.4073" path="socket:[103695]" dev="sockfs" ino=103695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1427.008637][   T29] audit: type=1400 audit(1771963815.063:1874): avc:  denied  { create } for  pid=22361 comm="syz.4.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[ 1427.189060][   T29] audit: type=1400 audit(1771963815.231:1875): avc:  denied  { read } for  pid=22372 comm="syz.7.4077" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1427.572310][   T29] audit: type=1400 audit(1771963815.381:1876): avc:  denied  { setopt } for  pid=22389 comm="syz.6.4081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1427.722202][T22393] /dev/nullb0: Can't open blockdev
[ 1428.171140][T17454] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[ 1428.234550][T17454] CPU: 1 UID: 0 PID: 17454 Comm: kworker/u9:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1428.234585][T17454] Tainted: [L]=SOFTLOCKUP
[ 1428.234592][T17454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1428.234605][T17454] Workqueue: hci2 hci_rx_work
[ 1428.234638][T17454] Call Trace:
[ 1428.234645][T17454]  <TASK>
[ 1428.234653][T17454]  dump_stack_lvl+0x100/0x190
[ 1428.234686][T17454]  sysfs_warn_dup.cold+0x1c/0x28
[ 1428.234715][T17454]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1428.234743][T17454]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1428.234773][T17454]  ? kobject_add_internal+0x292/0x930
[ 1428.234796][T17454]  ? __pfx_kobject_namespace+0x10/0x10
[ 1428.234819][T17454]  kobject_add_internal+0x2c8/0x930
[ 1428.234847][T17454]  kobject_add+0x16a/0x1e0
[ 1428.234868][T17454]  ? __pfx_kobject_add+0x10/0x10
[ 1428.234887][T17454]  ? preempt_schedule_thunk+0x16/0x30
[ 1428.234915][T17454]  ? kobject_put+0xb9/0x640
[ 1428.234932][T17454]  ? _raw_spin_unlock+0x3e/0x50
[ 1428.234964][T17454]  device_add+0x294/0x1950
[ 1428.234989][T17454]  ? __pfx_dev_set_name+0x10/0x10
[ 1428.235018][T17454]  ? __pfx_device_add+0x10/0x10
[ 1428.235039][T17454]  ? mgmt_send_event_skb+0x2fb/0x460
[ 1428.235071][T17454]  hci_conn_add_sysfs+0x1a3/0x260
[ 1428.235092][T17454]  le_conn_complete_evt+0x11cb/0x1f40
[ 1428.235127][T17454]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1428.235156][T17454]  ? irqentry_exit+0x180/0x670
[ 1428.235179][T17454]  hci_le_conn_complete_evt+0x23c/0x3a0
[ 1428.235205][T17454]  ? skb_pull_data+0x15f/0x1e0
[ 1428.235232][T17454]  hci_le_meta_evt+0x34a/0x5f0
[ 1428.235269][T17454]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1428.235297][T17454]  hci_event_packet+0x682/0x11c0
[ 1428.235325][T17454]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1428.235352][T17454]  ? __pfx_hci_event_packet+0x10/0x10
[ 1428.235385][T17454]  ? kcov_remote_start+0x384/0x660
[ 1428.235416][T17454]  hci_rx_work+0x451/0xfc0
[ 1428.235448][T17454]  process_one_work+0x9d7/0x1920
[ 1428.235480][T17454]  ? __pfx_process_one_work+0x10/0x10
[ 1428.235505][T17454]  ? __pfx_hci_rx_work+0x10/0x10
[ 1428.235538][T17454]  worker_thread+0x5da/0xe40
[ 1428.235565][T17454]  ? __pfx_worker_thread+0x10/0x10
[ 1428.235586][T17454]  ? kthread+0x13a/0x450
[ 1428.235602][T17454]  ? __pfx_worker_thread+0x10/0x10
[ 1428.235620][T17454]  kthread+0x370/0x450
[ 1428.235636][T17454]  ? __pfx_kthread+0x10/0x10
[ 1428.235654][T17454]  ret_from_fork+0x754/0xd80
[ 1428.235674][T17454]  ? __pfx_ret_from_fork+0x10/0x10
[ 1428.235696][T17454]  ? __switch_to+0x7b4/0x1120
[ 1428.235719][T17454]  ? __pfx_kthread+0x10/0x10
[ 1428.235739][T17454]  ret_from_fork_asm+0x1a/0x30
[ 1428.235775][T17454]  </TASK>
[ 1428.235857][T17454] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1428.511714][T17454] Bluetooth: hci2: failed to register connection device
[ 1428.762809][T22406] �� speed is unknown, defaulting to 1000
[ 1428.786904][ T1662] usbhid 5-1:0.0: can't add hid device: -71
[ 1428.819678][ T1662] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1428.857233][ T1662] usb 5-1: USB disconnect, device number 103
[ 1428.927829][   T29] audit: type=1400 audit(1771963816.850:1877): avc:  denied  { bind } for  pid=22407 comm="syz.6.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1428.985819][   T29] audit: type=1400 audit(1771963816.850:1878): avc:  denied  { write } for  pid=22407 comm="syz.6.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1429.041562][T22411] FAULT_INJECTION: forcing a failure.
[ 1429.041562][T22411] name failslab, interval 1, probability 0, space 0, times 0
[ 1429.073528][T22411] CPU: 0 UID: 0 PID: 22411 Comm: syz.4.4086 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1429.073547][T22411] Tainted: [L]=SOFTLOCKUP
[ 1429.073551][T22411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1429.073558][T22411] Call Trace:
[ 1429.073562][T22411]  <TASK>
[ 1429.073567][T22411]  dump_stack_lvl+0x100/0x190
[ 1429.073594][T22411]  should_fail_ex.cold+0x5/0xa
[ 1429.073608][T22411]  ? __rds_conn_create+0x75f/0x2590
[ 1429.073624][T22411]  should_failslab+0xc2/0x120
[ 1429.073641][T22411]  __kmalloc_noprof+0xe0/0x850
[ 1429.073658][T22411]  __rds_conn_create+0x75f/0x2590
[ 1429.073680][T22411]  ? __pfx___rds_conn_create+0x10/0x10
[ 1429.073696][T22411]  ? rcu_is_watching+0x12/0xc0
[ 1429.073708][T22411]  ? trace_kmalloc+0x101/0x130
[ 1429.073724][T22411]  ? lockdep_init_map_type+0x5c/0x250
[ 1429.073737][T22411]  rds_conn_create_outgoing+0x44/0x60
[ 1429.073756][T22411]  rds_sendmsg+0x10da/0x3480
[ 1429.073768][T22411]  ? __pfx_avc_has_perm+0x10/0x10
[ 1429.073788][T22411]  ? __pfx_rds_sendmsg+0x10/0x10
[ 1429.073803][T22411]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[ 1429.073816][T22411]  ? iovec_from_user+0xda/0x140
[ 1429.073839][T22411]  ? ____sys_sendmsg+0xa54/0xc30
[ 1429.073852][T22411]  ____sys_sendmsg+0xa54/0xc30
[ 1429.073866][T22411]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1429.073885][T22411]  ___sys_sendmsg+0x190/0x1e0
[ 1429.073900][T22411]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1429.073930][T22411]  __sys_sendmsg+0x170/0x220
[ 1429.073940][T22411]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1429.073959][T22411]  do_syscall_64+0x106/0xf80
[ 1429.073970][T22411]  ? clear_bhb_loop+0x40/0x90
[ 1429.073983][T22411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1429.073994][T22411] RIP: 0033:0x7f0181b9c629
[ 1429.074003][T22411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1429.074014][T22411] RSP: 002b:00007f01829f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1429.074026][T22411] RAX: ffffffffffffffda RBX: 00007f0181e15fa0 RCX: 00007f0181b9c629
[ 1429.074033][T22411] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[ 1429.074039][T22411] RBP: 00007f01829f2090 R08: 0000000000000000 R09: 0000000000000000
[ 1429.074046][T22411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1429.074052][T22411] R13: 00007f0181e16038 R14: 00007f0181e15fa0 R15: 00007ffc223fa0d8
[ 1429.074066][T22411]  </TASK>
[ 1429.344145][T22414] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4087'.
[ 1429.564925][   T29] audit: type=1400 audit(1771963817.449:1879): avc:  denied  { ioctl } for  pid=22416 comm="syz.4.4088" path="socket:[104727]" dev="sockfs" ino=104727 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1429.593185][   T29] audit: type=1400 audit(1771963817.477:1880): avc:  denied  { bind } for  pid=22416 comm="syz.4.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1429.615046][T22418] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4088'.
[ 1429.625720][T22418] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4088'.
[ 1429.656370][ T3180] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 1429.709434][   T29] audit: type=1400 audit(1771963817.590:1881): avc:  denied  { shutdown } for  pid=22421 comm="syz.5.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1429.817062][   T29] audit: type=1400 audit(1771963817.608:1882): avc:  denied  { setopt } for  pid=22421 comm="syz.5.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1429.851448][ T3180] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1429.872745][   T29] audit: type=1400 audit(1771963817.693:1883): avc:  denied  { map } for  pid=22426 comm="syz.8.4091" path="socket:[104742]" dev="sockfs" ino=104742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1429.876558][ T3180] usb 7-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[ 1429.949280][ T3180] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1429.974240][   T29] audit: type=1400 audit(1771963817.693:1884): avc:  denied  { accept } for  pid=22426 comm="syz.8.4091" path="socket:[104742]" dev="sockfs" ino=104742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1430.013253][T22429] netlink: 'syz.8.4092': attribute type 5 has an invalid length.
[ 1430.095020][ T3180] usb 7-1: config 0 descriptor??
[ 1430.106524][ T3180] smsusb:smsusb_probe: board id=8, interface number 0
[ 1430.139379][ T3180] smsusb:smsusb_probe: Device initialized with return code -19
[ 1430.820282][T22434] FAULT_INJECTION: forcing a failure.
[ 1430.820282][T22434] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1430.834371][T22434] CPU: 0 UID: 0 PID: 22434 Comm: syz.8.4093 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1430.834400][T22434] Tainted: [L]=SOFTLOCKUP
[ 1430.834407][T22434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1430.834417][T22434] Call Trace:
[ 1430.834424][T22434]  <TASK>
[ 1430.834431][T22434]  dump_stack_lvl+0x100/0x190
[ 1430.834464][T22434]  should_fail_ex.cold+0x5/0xa
[ 1430.834487][T22434]  _copy_from_user+0x2e/0xd0
[ 1430.834512][T22434]  kvm_arch_vcpu_ioctl+0x2e31/0x5740
[ 1430.834542][T22434]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[ 1430.834567][T22434]  ? __pfx_stack_trace_save+0x10/0x10
[ 1430.834592][T22434]  ? stack_depot_save_flags+0x27/0x9d0
[ 1430.834619][T22434]  ? __lock_acquire+0x4a5/0x2630
[ 1430.834649][T22434]  ? tomoyo_path_number_perm+0x46d/0x580
[ 1430.834682][T22434]  ? __lock_acquire+0x4a5/0x2630
[ 1430.834709][T22434]  ? do_syscall_64+0x106/0xf80
[ 1430.834726][T22434]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1430.834754][T22434]  ? lock_acquire+0x1cf/0x380
[ 1430.834790][T22434]  ? __mutex_lock+0x26a/0x1b90
[ 1430.834810][T22434]  ? kvm_vcpu_ioctl+0x322/0x1730
[ 1430.834840][T22434]  ? __pfx___mutex_lock+0x10/0x10
[ 1430.834858][T22434]  ? kasan_quarantine_put+0x104/0x240
[ 1430.834881][T22434]  ? lockdep_hardirqs_on+0x78/0x100
[ 1430.834901][T22434]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1430.834935][T22434]  ? tomoyo_path_number_perm+0x188/0x580
[ 1430.834966][T22434]  ? kvm_vcpu_ioctl+0x8a0/0x1730
[ 1430.834990][T22434]  kvm_vcpu_ioctl+0x8a0/0x1730
[ 1430.835017][T22434]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1430.835042][T22434]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1430.835069][T22434]  ? do_vfs_ioctl+0x226/0x13e0
[ 1430.835095][T22434]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1430.835121][T22434]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1430.835151][T22434]  ? __fget_files+0x215/0x3d0
[ 1430.835166][T22434]  ? hook_file_ioctl_common+0x146/0x410
[ 1430.835197][T22434]  ? selinux_file_ioctl+0x139/0x290
[ 1430.835216][T22434]  ? selinux_file_ioctl+0xb4/0x290
[ 1430.835237][T22434]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1430.835263][T22434]  __x64_sys_ioctl+0x18e/0x210
[ 1430.835289][T22434]  do_syscall_64+0x106/0xf80
[ 1430.835305][T22434]  ? clear_bhb_loop+0x40/0x90
[ 1430.835326][T22434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1430.835344][T22434] RIP: 0033:0x7f9520f9c629
[ 1430.835361][T22434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1430.835378][T22434] RSP: 002b:00007f9521e8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1430.835396][T22434] RAX: ffffffffffffffda RBX: 00007f9521216180 RCX: 00007f9520f9c629
[ 1430.835408][T22434] RDX: 0000200000000180 RSI: 00000000c048aeca RDI: 0000000000000007
[ 1430.835419][T22434] RBP: 00007f9521e8c090 R08: 0000000000000000 R09: 0000000000000000
[ 1430.835429][T22434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1430.835440][T22434] R13: 00007f9521216218 R14: 00007f9521216180 R15: 00007ffe562f04e8
[ 1430.835465][T22434]  </TASK>
[ 1432.572265][ T5129] Bluetooth: hci2: command tx timeout
[ 1432.651509][ T1662] usb 7-1: USB disconnect, device number 47
[ 1433.124204][   T29] audit: type=1400 audit(1771963820.659:1885): avc:  denied  { ioctl } for  pid=22436 comm="syz.4.4094" path="socket:[103987]" dev="sockfs" ino=103987 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1433.564400][T22452] binder: 22447:22452 ioctl c0306201 200000000040 returned -22
[ 1434.443430][   T29] audit: type=1400 audit(1771963821.698:1886): avc:  denied  { append } for  pid=22453 comm="syz.4.4097" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1435.403638][ T5129] Bluetooth: hci2: command 0x0406 tx timeout
[ 1435.924052][   T29] audit: type=1400 audit(1771963821.708:1887): avc:  denied  { setopt } for  pid=22453 comm="syz.4.4097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1435.957081][T21786] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 1436.185128][T21786] usb 5-1: Using ep0 maxpacket: 32
[ 1436.193652][T21786] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9B, changing to 0x8B
[ 1436.236284][T21786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 106, changing to 10
[ 1436.262434][T21786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24659, setting to 1024
[ 1436.292491][T21786] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1436.323291][T21786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1436.345223][T21786] usb 5-1: config 0 descriptor??
[ 1436.365030][T21786] hub 5-1:0.0: USB hub found
[ 1436.801077][T21786] hub 5-1:0.0: 2 ports detected
[ 1437.019422][T21786] hub 5-1:0.0: hub_hub_status failed (err = -71)
[ 1437.025854][T21786] hub 5-1:0.0: config failed, can't get hub status (err -71)
[ 1437.062948][T21786] usbhid 5-1:0.0: can't add hid device: -71
[ 1437.071004][T21786] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1437.454692][T22492] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4106'.
[ 1437.798346][T21786] usb 5-1: USB disconnect, device number 104
[ 1438.741342][ T3180] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0
[ 1438.969471][ T3180] hid-generic 0000:0000:0000.0063: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1439.227078][T22514] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4111'.
[ 1439.638543][T22520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4113'.
[ 1440.362230][T22547] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[ 1440.374768][T22547] Cannot find add_set index 0 as target
[ 1441.359631][   T29] audit: type=1400 audit(1771963828.306:1888): avc:  denied  { connect } for  pid=22562 comm="syz.7.4127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1441.484225][T22567] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1442.884335][ T3180] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[ 1443.055338][ T3180] usb 7-1: Using ep0 maxpacket: 32
[ 1443.062200][ T3180] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1443.074791][ T3180] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1443.084218][ T3180] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1443.093943][ T3180] usb 7-1: Product: syz
[ 1443.098442][ T3180] usb 7-1: Manufacturer: syz
[ 1443.103036][ T3180] usb 7-1: SerialNumber: syz
[ 1443.110675][ T3180] usb 7-1: config 0 descriptor??
[ 1443.116270][T22574] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1443.126070][ T3180] hub 7-1:0.0: bad descriptor, ignoring hub
[ 1443.132111][ T3180] hub 7-1:0.0: probe with driver hub failed with error -5
[ 1443.318470][T22587] binder: 22580:22587 unknown command 0
[ 1443.324164][T22587] binder: 22580:22587 ioctl c0306201 200000000280 returned -22
[ 1444.828179][T14496] usb 7-1: USB disconnect, device number 48
[ 1445.521794][T22626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4144'.
[ 1445.535126][T22626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4144'.
[ 1445.545344][T22626] netlink: 'syz.5.4144': attribute type 11 has an invalid length.
[ 1445.554053][T22626] netlink: 'syz.5.4144': attribute type 13 has an invalid length.
[ 1445.572673][T22626] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1445.579969][T22626] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1445.620395][T22626] bridge0: entered allmulticast mode
[ 1445.648961][T22626] bridge_slave_1: left allmulticast mode
[ 1445.656302][T22626] bridge_slave_1: left promiscuous mode
[ 1445.663542][T22626] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1445.680433][T22626] bridge_slave_0: left allmulticast mode
[ 1445.690030][T22626] bridge_slave_0: left promiscuous mode
[ 1445.696388][T22626] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1447.612834][T22650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22650 comm=syz.8.4150
[ 1448.044051][T13618] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1448.208438][T13618] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1448.231495][T13618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1448.250994][T13618] usb 6-1: Product: syz
[ 1448.259791][T13618] usb 6-1: Manufacturer: syz
[ 1448.268938][T13618] usb 6-1: SerialNumber: syz
[ 1448.291933][T13618] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1448.312751][ T1662] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1449.831902][ T5913] usb 5-1: new full-speed USB device number 105 using dummy_hcd
[ 1449.839772][ T1662] usb 6-1: Service connection timeout for: 256
[ 1449.857543][ T1662] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1449.918668][ T1662] ath9k_htc: Failed to initialize the device
[ 1449.930301][ T1662] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1450.000967][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1450.012875][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1450.037841][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1450.113341][ T5913] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[ 1450.133299][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1450.164636][ T5913] usb 5-1: config 0 descriptor??
[ 1450.568356][T14496] usb 6-1: USB disconnect, device number 37
[ 1450.625009][ T5913] hid-u2fzero 0003:10C4:8ACF.0064: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0
[ 1451.047108][T22679] tmpfs: Unknown parameter 'grpquota/#/msr'
[ 1451.185641][ T5913] hid-u2fzero 0003:10C4:8ACF.0064: U2F Zero LED initialised
[ 1451.236920][ T5913] hid-u2fzero 0003:10C4:8ACF.0064: U2F Zero RNG initialised
[ 1451.279427][ T5913] usb 5-1: USB disconnect, device number 105
[ 1452.870978][   T29] audit: type=1400 audit(1771963839.256:1889): avc:  denied  { read } for  pid=22717 comm="syz.7.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1453.165487][T22696] program syz.8.4162 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1453.180175][   T29] audit: type=1400 audit(1771963839.537:1890): avc:  denied  { read } for  pid=22695 comm="syz.8.4162" name="sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1454.451570][T22735] capability: warning: `syz.4.4174' uses 32-bit capabilities (legacy support in use)
[ 1455.020301][   T29] audit: type=1400 audit(1771963841.268:1891): avc:  denied  { ioctl } for  pid=22743 comm="syz.6.4176" path="socket:[105460]" dev="sockfs" ino=105460 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1455.023618][T22744] netlink: 'syz.6.4176': attribute type 1 has an invalid length.
[ 1455.051137][T22746] xt_hashlimit: invalid interval
[ 1455.121204][T22747] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[ 1455.463793][   T29] audit: type=1400 audit(1771963841.680:1892): avc:  denied  { ioctl } for  pid=22748 comm="syz.4.4178" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1455.727175][T14496] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1456.096480][T22764] fuse: Unknown parameter ''
[ 1456.109061][T14496] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 252, changing to 11
[ 1456.238553][T22763] �� speed is unknown, defaulting to 1000
[ 1456.278875][T14496] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1456.287750][T14496] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[ 1456.342765][T14496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1456.566432][T14496] usb 5-1: config 0 descriptor??
[ 1457.661622][T21292] block nbd35: Possible stuck request ffff8880622f8000: control (read@0,1024B). Runtime 150 seconds
[ 1457.671011][T14496] apple 0003:05AC:027A.0065: hidraw0: USB HID v0.05 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0
[ 1457.672712][T21292] block nbd35: Possible stuck request ffff8880622f8200: control (read@1024,1024B). Runtime 150 seconds
[ 1457.695812][T21292] block nbd35: Possible stuck request ffff8880622f8400: control (read@2048,1024B). Runtime 150 seconds
[ 1457.709253][T21292] block nbd35: Possible stuck request ffff8880622f8600: control (read@3072,1024B). Runtime 150 seconds
[ 1457.904695][T22749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1457.918811][T22749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1457.943760][  T792] usb 5-1: USB disconnect, device number 106
[ 1457.993569][T22776] fido_id[22776]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1458.300947][T22790] netlink: 'syz.8.4188': attribute type 13 has an invalid length.
[ 1458.410809][T22790] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1458.418392][T22790] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1458.626815][T22790] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1458.680352][T22790] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1458.773604][   T29] audit: type=1800 audit(1771963844.778:1893): pid=22785 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.4186" name="/" dev="fuse" ino=4 res=0 errno=0
[ 1458.941484][T22814] netlink: 'syz.5.4192': attribute type 3 has an invalid length.
[ 1459.994622][  T228] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1460.094703][T22828] tipc: Started in network mode
[ 1460.100467][T22828] tipc: Node identity 4, cluster identity 4711
[ 1460.106623][T22828] tipc: Node number set to 4
[ 1460.157761][  T228] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1460.240917][  T228] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1460.328535][  T228] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1461.703403][T22861] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4198'.
[ 1462.426617][  T792] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1462.586932][  T792] usb 9-1: Using ep0 maxpacket: 16
[ 1463.598102][  T792] usb 9-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[ 1463.609366][  T792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1463.705374][  T792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1463.764264][  T792] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1463.826331][  T792] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1463.895009][  T792] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1463.926632][  T792] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1463.970116][  T792] usb 9-1: Manufacturer: syz
[ 1464.007978][  T792] usb 9-1: config 0 descriptor??
[ 1464.349979][  T792] rc_core: IR keymap rc-hauppauge not found
[ 1464.357124][  T792] Registered IR keymap rc-empty
[ 1464.369171][  T792] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1464.402673][  T792] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1464.437511][  T792] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1464.744682][  T792] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input111
[ 1464.774696][  T792] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1464.819258][  T792] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1464.840653][  T792] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1464.863085][  T792] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1465.011927][  T792] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1465.040128][  T792] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1465.087946][  T792] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1465.179390][T22899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4205'.
[ 1465.195278][  T792] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1465.215756][  T792] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1465.248412][  T792] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1465.276288][  T792] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1465.286943][  T792] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1465.438628][  T792] usb 9-1: USB disconnect, device number 6
[ 1465.590494][T22905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4209'.
[ 1465.891358][T22913] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1465.908031][T22913] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1465.919073][T22913] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3)
[ 1466.253486][   T29] audit: type=1400 audit(1771963851.441:1894): avc:  denied  { mount } for  pid=22906 comm="syz.5.4210" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 1466.323102][   T29] audit: type=1400 audit(1771963851.441:1895): avc:  denied  { mounton } for  pid=22906 comm="syz.5.4210" path="/340/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1466.393741][T22920] tmpfs: Bad value for 'nr_inodes'
[ 1466.864825][   T29] audit: type=1400 audit(1771963852.358:1896): avc:  denied  { unmount } for  pid=15970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 1467.784409][   T29] audit: type=1400 audit(1771963853.219:1897): avc:  denied  { name_bind } for  pid=22936 comm="syz.7.4220" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 1468.077870][   T29] audit: type=1400 audit(1771963853.491:1898): avc:  denied  { mount } for  pid=22936 comm="syz.7.4220" name="/" dev="autofs" ino=106872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 1468.382500][T22956] tmpfs: Bad value for 'nr_inodes'
[ 1468.391957][  T792] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1468.751237][  T792] usb 5-1: Using ep0 maxpacket: 16
[ 1468.762136][  T792] usb 5-1: config 0 has no interfaces?
[ 1468.767845][  T792] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1468.785053][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1468.810875][  T792] usb 5-1: config 0 descriptor??
[ 1468.950370][   T29] audit: type=1400 audit(1771963854.305:1899): avc:  denied  { read } for  pid=22969 comm="syz.8.4229" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1469.047472][   T29] audit: type=1400 audit(1771963854.305:1900): avc:  denied  { open } for  pid=22969 comm="syz.8.4229" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1469.178528][T22974] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12 sclass=netlink_xfrm_socket pid=22974 comm=syz.5.4231
[ 1469.184394][   T29] audit: type=1400 audit(1771963854.520:1901): avc:  denied  { getopt } for  pid=22972 comm="syz.5.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1469.283261][   T29] audit: type=1400 audit(1771963854.520:1902): avc:  denied  { write } for  pid=22972 comm="syz.5.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1469.422016][T22977] netlink: 'syz.4.4223': attribute type 11 has an invalid length.
[ 1469.665197][  T792] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1470.044340][  T792] usb 9-1: Using ep0 maxpacket: 16
[ 1470.092750][  T792] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1470.108599][  T792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1470.116728][  T792] usb 9-1: Product: syz
[ 1470.124932][  T792] usb 9-1: Manufacturer: syz
[ 1470.130090][  T792] usb 9-1: SerialNumber: syz
[ 1470.146355][  T792] usb 9-1: config 0 descriptor??
[ 1470.166357][  T792] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1470.211586][T22982] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4233'.
[ 1470.589457][ T5876] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1470.788930][ T5876] usb 6-1: Using ep0 maxpacket: 32
[ 1470.841025][ T5876] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1470.853447][  T792] ssu100 9-1:0.0: probe with driver ssu100 failed with error -110
[ 1470.909378][ T5876] usb 6-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[ 1471.100593][ T5876] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1471.186336][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1471.270667][ T5876] usb 6-1: Product: syz
[ 1471.299475][ T5876] usb 6-1: Manufacturer: syz
[ 1471.324741][ T5876] usb 6-1: SerialNumber: syz
[ 1471.417925][ T3180] usb 5-1: USB disconnect, device number 107
[ 1471.462707][ T5876] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 1471.562531][ T5876] imon 6-1:155.0: unable to initialize intf0, err -19
[ 1471.664152][ T5876] imon:imon_probe: failed to initialize context!
[ 1471.733078][ T5876] imon 6-1:155.0: unable to register, err -19
[ 1471.934659][T22988] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[ 1472.605268][   T29] audit: type=1400 audit(1771963857.730:1903): avc:  denied  { read } for  pid=22975 comm="syz.8.4232" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1472.633061][   T29] audit: type=1400 audit(1771963857.730:1904): avc:  denied  { open } for  pid=22975 comm="syz.8.4232" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1472.696556][   T29] audit: type=1400 audit(1771963857.815:1905): avc:  denied  { bind } for  pid=22998 comm="syz.6.4237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1474.139125][T13618] usb 9-1: USB disconnect, device number 7
[ 1474.179185][  T792] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1474.367561][  T792] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1474.394945][  T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1474.695310][  T792] usb 5-1: Product: syz
[ 1474.709002][  T792] usb 5-1: Manufacturer: syz
[ 1474.717528][  T792] usb 5-1: SerialNumber: syz
[ 1474.794634][ T3180] usb 6-1: USB disconnect, device number 38
[ 1474.868822][T23027] tmpfs: Bad value for 'nr_inodes'
[ 1475.083370][T23030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4245'.
[ 1475.328038][  T792] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1475.356838][  T792] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1475.403991][   T29] audit: type=1400 audit(1771963860.351:1906): avc:  denied  { lock } for  pid=23031 comm="syz.6.4246" path="socket:[106457]" dev="sockfs" ino=106457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1476.057086][  T792] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[ 1476.092716][T13618] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 1476.149580][  T792] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1476.171019][  T792] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1476.240815][  T792] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[ 1476.278899][T13618] usb 7-1: Using ep0 maxpacket: 32
[ 1476.295282][  T792] usb 5-1: USB disconnect, device number 108
[ 1476.308803][T13618] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1476.326227][T13618] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=4b.70
[ 1476.610356][T13618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1476.626009][T13618] usb 7-1: Product: syz
[ 1476.669892][T13618] usb 7-1: Manufacturer: syz
[ 1476.679643][T13618] usb 7-1: SerialNumber: syz
[ 1476.692757][T13618] usb 7-1: config 0 descriptor??
[ 1477.042040][T13618] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1477.089423][T13618] usb 7-1: USB disconnect, device number 49
[ 1477.121802][T22186] udevd[22186]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1478.416328][   T29] audit: type=1400 audit(1771963863.168:1907): avc:  denied  { setopt } for  pid=23039 comm="syz.8.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1478.652582][T23067] comedi comedi3: pcl818: I/O port conflict (0x4f23,16)
[ 1480.332230][T23084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4257'.
[ 1480.406661][   T29] audit: type=1326 audit(1771963865.012:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23074 comm="syz.7.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3725d9c629 code=0x7ffc0000
[ 1480.471963][   T29] audit: type=1326 audit(1771963865.012:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23074 comm="syz.7.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3725d9c629 code=0x7ffc0000
[ 1480.529430][   T29] audit: type=1326 audit(1771963865.012:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23074 comm="syz.7.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3725d9c629 code=0x7ffc0000
[ 1480.610716][   T29] audit: type=1326 audit(1771963865.012:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23074 comm="syz.7.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3725d9c629 code=0x7ffc0000
[ 1480.686366][   T29] audit: type=1326 audit(1771963865.012:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23074 comm="syz.7.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3725d9c629 code=0x7ffc0000
[ 1480.750421][   T29] audit: type=1326 audit(1771963865.012:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23074 comm="syz.7.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f3725d9c629 code=0x7ffc0000
[ 1480.774651][T13618] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1480.817595][   T29] audit: type=1326 audit(1771963865.012:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23074 comm="syz.7.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3725d9c629 code=0x7ffc0000
[ 1480.873291][   T29] audit: type=1326 audit(1771963865.012:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23074 comm="syz.7.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3725d9c629 code=0x7ffc0000
[ 1480.942735][T13618] usb 5-1: Using ep0 maxpacket: 16
[ 1480.951853][   T29] audit: type=1326 audit(1771963865.012:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23074 comm="syz.7.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f3725d9c629 code=0x7ffc0000
[ 1480.996403][T13618] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1481.007978][T13618] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1481.014567][T13618] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[ 1481.055053][T13618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1481.109126][T13618] usb 5-1: config 0 descriptor??
[ 1481.163459][T23094] /dev/nullb0: Can't lookup blockdev
[ 1481.748929][T13618] cougar 0003:060B:500A.0066: unknown main item tag 0x0
[ 1481.784724][T13618] cougar 0003:060B:500A.0066: unknown main item tag 0x0
[ 1481.816338][T13618] cougar 0003:060B:500A.0066: unknown main item tag 0x0
[ 1481.878551][T13618] cougar 0003:060B:500A.0066: unknown main item tag 0x0
[ 1481.906653][T13618] cougar 0003:060B:500A.0066: unknown main item tag 0x0
[ 1481.928805][T13618] cougar 0003:060B:500A.0066: unknown main item tag 0x0
[ 1481.961397][T13618] cougar 0003:060B:500A.0066: unknown main item tag 0x0
[ 1481.987883][T13618] cougar 0003:060B:500A.0066: unknown main item tag 0x0
[ 1482.016414][T13618] cougar 0003:060B:500A.0066: unknown main item tag 0x0
[ 1482.043277][T13618] cougar 0003:060B:500A.0066: unknown main item tag 0x0
[ 1482.087066][T13618] cougar 0003:060B:500A.0066: hidraw0: USB HID v0.00 Device [HID 060b:500a] on usb-dummy_hcd.4-1/input0
[ 1482.654324][ T1662] usb 5-1: USB disconnect, device number 109
[ 1483.454483][ T1662] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1483.603282][ T1662] usb 6-1: device descriptor read/64, error -71
[ 1483.807270][ T3180] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1483.882251][ T1662] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1483.966669][ T3180] usb 5-1: Using ep0 maxpacket: 32
[ 1483.973263][ T3180] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[ 1483.981687][ T3180] usb 5-1: config 0 has no interface number 0
[ 1483.989897][ T3180] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1484.000161][ T3180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1484.008198][ T3180] usb 5-1: Product: syz
[ 1484.012740][ T3180] usb 5-1: Manufacturer: syz
[ 1484.017323][ T3180] usb 5-1: SerialNumber: syz
[ 1484.024059][ T3180] usb 5-1: config 0 descriptor??
[ 1484.030867][ T1662] usb 6-1: device descriptor read/64, error -71
[ 1484.032017][ T3180] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1484.149044][ T1662] usb usb6-port1: attempt power cycle
[ 1484.628308][ T1662] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1484.652108][ T1662] usb 6-1: device descriptor read/8, error -71
[ 1485.249412][   T29] kauditd_printk_skb: 23 callbacks suppressed
[ 1485.249426][   T29] audit: type=1400 audit(1771963869.570:1940): avc:  denied  { ioctl } for  pid=23115 comm="syz.5.4268" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1485.346589][   T29] audit: type=1400 audit(1771963869.663:1941): avc:  denied  { recv } for  pid=21384 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.115 dest=59800 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1485.376589][   T29] audit: type=1400 audit(1771963869.682:1942): avc:  denied  { read write } for  pid=21384 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1485.419710][ T1662] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1485.480753][   T29] audit: type=1400 audit(1771963869.682:1943): avc:  denied  { open } for  pid=21384 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1485.516128][   T29] audit: type=1400 audit(1771963869.682:1944): avc:  denied  { ioctl } for  pid=21384 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1485.543174][ T1662] usb 6-1: device descriptor read/8, error -71
[ 1485.564599][   T29] audit: type=1400 audit(1771963869.775:1945): avc:  denied  { unmount } for  pid=16003 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 1485.605981][   T29] audit: type=1400 audit(1771963869.813:1946): avc:  denied  { read } for  pid=23134 comm="syz.8.4273" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1485.646196][   T29] audit: type=1400 audit(1771963869.813:1947): avc:  denied  { open } for  pid=23134 comm="syz.8.4273" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1485.672362][   T29] audit: type=1400 audit(1771963869.860:1948): avc:  denied  { create } for  pid=23134 comm="syz.8.4273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1485.678330][ T1662] usb usb6-port1: unable to enumerate USB device
[ 1485.693528][   T29] audit: type=1400 audit(1771963869.860:1949): avc:  denied  { write } for  pid=23134 comm="syz.8.4273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1486.850872][T23142] veth0: entered promiscuous mode
[ 1487.278161][T23149] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=23149 comm=syz.8.4276
[ 1487.305447][T23141] veth0: left promiscuous mode
[ 1487.679530][T23158] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4280'.
[ 1487.716903][T23158] netlink: 'syz.5.4280': attribute type 6 has an invalid length.
[ 1487.724683][T23158] netlink: 'syz.5.4280': attribute type 5 has an invalid length.
[ 1487.743591][T23158] netlink: 'syz.5.4280': attribute type 4 has an invalid length.
[ 1487.774190][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4282'.
[ 1487.969466][T23177] /dev/nullb0: Can't open blockdev
[ 1488.745373][ T5129] Bluetooth: hci2: unexpected event for opcode 0x2003
[ 1489.021382][ T5876] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[ 1489.733467][ T3180] usb 5-1: qt2_attach - failed to power on unit: -110
[ 1489.782435][T21292] block nbd35: Possible stuck request ffff8880622f8000: control (read@0,1024B). Runtime 180 seconds
[ 1489.782694][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1489.793345][T21292] block nbd35: Possible stuck request ffff8880622f8200: control (read@1024,1024B). Runtime 180 seconds
[ 1489.812661][T21292] block nbd35: Possible stuck request ffff8880622f8400: control (read@2048,1024B). Runtime 180 seconds
[ 1489.828101][T21292] block nbd35: Possible stuck request ffff8880622f8600: control (read@3072,1024B). Runtime 180 seconds
[ 1489.836630][ T5876] usb 9-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1490.009600][ T3180] quatech2 5-1:0.51: probe with driver quatech2 failed with error -110
[ 1490.200596][ T5876] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1490.217012][ T3180] usb 5-1: USB disconnect, device number 110
[ 1490.313216][ T5876] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1490.331423][ T5876] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1490.351334][ T5876] usb 9-1: Product: syz
[ 1490.359606][ T5876] usb 9-1: Manufacturer: syz
[ 1490.364314][ T5876] usb 9-1: SerialNumber: syz
[ 1490.418494][ T5876] usb 9-1: config 0 descriptor??
[ 1490.767936][T23205] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=23205 comm=syz.4.4291
[ 1490.865563][ T5876] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1490.932078][T22186] udevd[22186]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1491.159910][T13618] usb 9-1: USB disconnect, device number 8
[ 1491.301453][   T29] kauditd_printk_skb: 65 callbacks suppressed
[ 1491.301491][   T29] audit: type=1400 audit(1771964387.229:2015): avc:  denied  { open } for  pid=23214 comm="syz.5.4293" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1491.626927][   T29] audit: type=1400 audit(1771964387.229:2016): avc:  denied  { ioctl } for  pid=23214 comm="syz.5.4293" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1492.095497][ T5129] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[ 1492.110337][   T29] audit: type=1400 audit(1771964387.846:2017): avc:  denied  { create } for  pid=23224 comm="syz.4.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1492.344907][   T29] audit: type=1400 audit(1771964387.865:2018): avc:  denied  { bind } for  pid=23224 comm="syz.4.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1492.424684][T23232] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[ 1492.523444][   T29] audit: type=1400 audit(1771964387.865:2019): avc:  denied  { read } for  pid=23224 comm="syz.4.4296" dev="nsfs" ino=4026534842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1492.590937][T23242] �� speed is unknown, defaulting to 1000
[ 1492.600884][   T29] audit: type=1400 audit(1771964387.865:2020): avc:  denied  { open } for  pid=23224 comm="syz.4.4296" path="net:[4026534842]" dev="nsfs" ino=4026534842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1492.699669][   T29] audit: type=1400 audit(1771964387.874:2021): avc:  denied  { create } for  pid=23224 comm="syz.4.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1492.739472][   T29] audit: type=1400 audit(1771964387.902:2022): avc:  denied  { bind } for  pid=23224 comm="syz.4.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1492.761373][   T29] audit: type=1400 audit(1771964387.902:2023): avc:  denied  { listen } for  pid=23224 comm="syz.4.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1492.793760][   T29] audit: type=1400 audit(1771964387.902:2024): avc:  denied  { accept } for  pid=23224 comm="syz.4.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1492.814745][T23246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4302'.
[ 1492.824513][T13618] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1492.998966][T13618] usb 9-1: Using ep0 maxpacket: 8
[ 1493.003546][T23250] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1493.020303][T13618] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1493.046735][T13618] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1493.160991][T13618] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1493.225141][T13618] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1493.328552][T13618] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1493.393790][T13618] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1493.449196][T13618] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1493.729922][T13618] usb 9-1: usb_control_msg returned -32
[ 1493.744947][T13618] usbtmc 9-1:16.0: can't read capabilities
[ 1494.233710][T23279] gre1: entered promiscuous mode
[ 1494.238791][T23279] gre1: entered allmulticast mode
[ 1494.678371][T17454] Bluetooth: hci2: unexpected event for opcode 0x080d
[ 1494.686853][T23280] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4301'.
[ 1494.703996][T23284] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4312'.
[ 1495.801744][T23293] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1
[ 1495.814909][T23293] ref_ctr increment failed for inode: 0x55c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888035fa1880
[ 1496.092475][ T3180] usb 9-1: USB disconnect, device number 9
[ 1496.261630][T23278] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1
[ 1496.283888][T23296] xt_hashlimit: size too large, truncated to 1048576
[ 1496.291629][T23278] ref_ctr decrement failed for inode: 0x55c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888035fa1880
[ 1496.321148][T23278] uprobe: syz.4.4311:23278 failed to unregister, leaking uprobe
[ 1496.703084][ T1662] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1497.114360][ T1662] usb 9-1: Using ep0 maxpacket: 8
[ 1497.121532][ T1662] usb 9-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 124, changing to 10
[ 1497.232204][   T29] kauditd_printk_skb: 34 callbacks suppressed
[ 1497.232217][   T29] audit: type=1400 audit(1771964392.778:2059): avc:  denied  { ioctl } for  pid=23310 comm="syz.4.4318" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1497.379342][ T1662] usb 9-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1656, setting to 1024
[ 1497.402155][ T1662] usb 9-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 255, changing to 11
[ 1497.421125][ T1662] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1497.430335][ T1662] usb 9-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.40
[ 1497.439404][ T1662] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.447670][ T1662] usb 9-1: Product: Ф
[ 1497.451996][ T1662] usb 9-1: Manufacturer: Л
[ 1497.456501][ T1662] usb 9-1: SerialNumber: 䜝ẖ氇ႇ伡⡅筒⸰삆刦
[ 1497.465875][ T1662] usb 9-1: rejected 1 configuration due to insufficient available bus power
[ 1497.476431][ T1662] usb 9-1: no configuration chosen from 1 choice
[ 1497.505599][T23309] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4314'.
[ 1497.723515][   T29] audit: type=1400 audit(1771964393.237:2060): avc:  denied  { read append } for  pid=23319 comm="syz.5.4319" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1497.791498][   T29] audit: type=1400 audit(1771964393.237:2061): avc:  denied  { open } for  pid=23319 comm="syz.5.4319" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1497.791549][   T29] audit: type=1400 audit(1771964393.293:2062): avc:  denied  { ioctl } for  pid=23319 comm="syz.5.4319" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1498.573520][   T29] audit: type=1400 audit(1771964394.033:2063): avc:  denied  { create } for  pid=23323 comm="syz.4.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1498.720419][   T29] audit: type=1400 audit(1771964394.079:2064): avc:  denied  { create } for  pid=23323 comm="syz.4.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1498.850606][   T29] audit: type=1400 audit(1771964394.089:2065): avc:  denied  { accept } for  pid=23323 comm="syz.4.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1498.957676][   T29] audit: type=1400 audit(1771964394.388:2066): avc:  denied  { read } for  pid=23333 comm="syz.5.4323" name="sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1499.068541][   T29] audit: type=1400 audit(1771964394.388:2067): avc:  denied  { open } for  pid=23333 comm="syz.5.4323" path="/dev/sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1499.172650][   T29] audit: type=1400 audit(1771964394.482:2068): avc:  denied  { write } for  pid=23333 comm="syz.5.4323" name="sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1499.711277][ T1662] usb 9-1: USB disconnect, device number 10
[ 1500.219561][ T3180] libceph: connect (1)[c::]:6789 error -13
[ 1500.254198][ T3180] libceph: mon0 (1)[c::]:6789 connect error
[ 1500.366570][T23352] ceph: No mds server is up or the cluster is laggy
[ 1502.661553][ T3180] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1502.807029][T23385] netlink: 'syz.4.4337': attribute type 16 has an invalid length.
[ 1502.815016][T23385] netlink: 'syz.4.4337': attribute type 17 has an invalid length.
[ 1502.874900][T23385] 8021q: adding VLAN 0 to HW filter on device .`
[ 1503.045425][T23385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1503.179316][ T3180] usb 9-1: Using ep0 maxpacket: 16
[ 1503.197867][ T3180] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1503.233320][ T3180] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1503.252791][ T3180] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1503.352069][ T3180] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1503.400398][ T3180] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.44
[ 1503.433160][ T3180] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1503.501497][ T3180] usb 9-1: Product: syz
[ 1503.562216][ T3180] usb 9-1: Manufacturer: syz
[ 1503.567090][ T3180] usb 9-1: SerialNumber: syz
[ 1503.674631][ T3180] usb 9-1: rejected 1 configuration due to insufficient available bus power
[ 1503.820003][T17454] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[ 1504.054197][ T3180] usb 9-1: no configuration chosen from 1 choice
[ 1504.137011][   T30] INFO: task syz.2.3797:21195 blocked for more than 143 seconds.
[ 1504.171628][   T30]       Tainted: G             L      syzkaller #0
[ 1504.204897][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1504.270163][   T30] task:syz.2.3797      state:D stack:25720 pid:21195 tgid:21191 ppid:17991  task_flags:0x400040 flags:0x00080002
[ 1504.329008][   T30] Call Trace:
[ 1504.333414][   T29] kauditd_printk_skb: 18 callbacks suppressed
[ 1504.333427][   T29] audit: type=1400 audit(1771964399.433:2085): avc:  denied  { name_bind } for  pid=23394 comm="syz.7.4340" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[ 1504.472737][   T30]  <TASK>
[ 1504.491037][   T30]  __schedule+0xfee/0x60e0
[ 1504.518309][   T30]  ? __lock_acquire+0x4a5/0x2630
[ 1504.580936][   T30]  ? __pfx___schedule+0x10/0x10
[ 1504.615606][   T30]  ? find_held_lock+0x2b/0x80
[ 1504.644194][   T30]  ? schedule+0x2bf/0x390
[ 1504.676713][   T30]  schedule+0xdd/0x390
[ 1504.699293][   T30]  io_schedule+0x8a/0xf0
[ 1504.730412][   T30]  folio_wait_bit_common+0x414/0xa70
[ 1504.769924][   T30]  ? folio_wait_bit_common+0x2a0/0xa70
[ 1504.815127][   T30]  ? __pfx_folio_wait_bit_common+0x10/0x10
[ 1504.855701][   T30]  ? __pfx_wake_page_function+0x10/0x10
[ 1504.877461][   T30]  ? __pfx___might_resched+0x10/0x10
[ 1504.910633][   T30]  ? compaction_free+0x182/0x430
[ 1504.947783][   T30]  migrate_pages_batch+0x1b85/0x4530
[ 1504.981776][   T30]  ? __pfx_compaction_alloc+0x10/0x10
[ 1505.010593][   T30]  ? __pfx_compaction_free+0x10/0x10
[ 1505.040573][   T30]  ? lockdep_hardirqs_on+0x78/0x100
[ 1505.071684][   T30]  ? __pfx_migrate_pages_batch+0x10/0x10
[ 1505.108835][   T30]  ? trace_sched_exit_tp+0x13a/0x180
[ 1505.144992][   T30]  ? __schedule+0x1000/0x60e0
[ 1505.161464][   T30]  ? __schedule+0x1000/0x60e0
[ 1505.174986][   T30]  migrate_pages_sync+0x4db/0x880
[ 1505.186833][   T30]  ? __pfx_compaction_alloc+0x10/0x10
[ 1505.204948][   T30]  ? __pfx_compaction_free+0x10/0x10
[ 1505.217776][   T30]  ? __pfx_migrate_pages_sync+0x10/0x10
[ 1505.250141][   T30]  migrate_pages+0x1aae/0x28a0
[ 1505.269770][   T30]  ? __pfx_compaction_alloc+0x10/0x10
[ 1505.285923][   T30]  ? __pfx_compaction_free+0x10/0x10
[ 1505.306662][   T30]  ? __pfx_migrate_pages+0x10/0x10
[ 1505.323415][   T30]  ? __pfx_isolate_migratepages_block+0x10/0x10
[ 1505.347393][   T30]  ? __nr_to_section+0xaa/0x100
[ 1505.367151][   T30]  ? pfn_to_online_page+0x178/0x4c0
[ 1505.382221][   T30]  compact_zone+0x2464/0x44c0
[ 1505.397732][   T30]  ? debug_object_free+0x295/0x550
[ 1505.412485][   T30]  ? __pfx_debug_object_free+0x10/0x10
[ 1505.418733][   T30]  ? __pfx_compact_zone+0x10/0x10
[ 1505.453183][   T30]  ? __flush_work+0x928/0xcb0
[ 1505.472768][   T30]  ? __flush_work+0x928/0xcb0
[ 1505.493703][   T30]  compact_node+0x17f/0x2c0
[ 1505.507452][   T30]  ? __pfx_compact_node+0x10/0x10
[ 1505.526736][   T30]  ? __lru_add_drain_all+0x43c/0x650
[ 1505.549106][   T30]  ? __lru_add_drain_all+0x441/0x650
[ 1505.569042][   T30]  sysctl_compaction_handler+0x141/0x210
[ 1505.588766][   T30]  proc_sys_call_handler+0x47f/0x5a0
[ 1505.607171][   T30]  ? __pfx_proc_sys_call_handler+0x10/0x10
[ 1505.631863][   T30]  ? splice_from_pipe_next+0x1ec/0x5a0
[ 1505.660035][   T30]  iter_file_splice_write+0x830/0x10a0
[ 1505.675619][ T3180] usb 9-1: USB disconnect, device number 11
[ 1505.683386][   T30]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1505.724920][   T30]  ? __pfx_copy_splice_read+0x10/0x10
[ 1505.761522][   T30]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1505.778383][   T30]  direct_splice_actor+0x192/0x6c0
[ 1505.790381][   T30]  splice_direct_to_actor+0x345/0xa30
[ 1505.820013][   T30]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1505.850081][   T30]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1505.896229][   T30]  do_splice_direct+0x174/0x240
[ 1505.931108][   T30]  ? __pfx_do_splice_direct+0x10/0x10
[ 1505.956771][   T30]  ? avc_policy_seqno+0x9/0x20
[ 1505.974330][   T30]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1505.988124][   T30]  ? rw_verify_area+0xce/0x6d0
[ 1506.008613][   T30]  do_sendfile+0xadc/0xe20
[ 1506.024943][   T30]  ? __pfx_do_sendfile+0x10/0x10
[ 1506.041650][   T30]  __x64_sys_sendfile64+0x154/0x220
[ 1506.069710][   T30]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1506.082529][   T30]  do_syscall_64+0x106/0xf80
[ 1506.100645][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1506.111060][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1506.126349][   T30] RIP: 0033:0x7f165419c629
[ 1506.139557][   T30] RSP: 002b:00007f1655075028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1506.159802][   T30] RAX: ffffffffffffffda RBX: 00007f1654416180 RCX: 00007f165419c629
[ 1506.178464][   T30] RDX: 00002000000000c0 RSI: 0000000000000009 RDI: 000000000000000a
[ 1506.197358][   T30] RBP: 00007f1654232b39 R08: 0000000000000000 R09: 0000000000000000
[ 1506.218859][   T30] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000
[ 1506.240392][   T30] R13: 00007f1654416218 R14: 00007f1654416180 R15: 00007ffc23f9ad68
[ 1506.276588][   T30]  </TASK>
[ 1506.293270][   T30] 
[ 1506.293270][   T30] Showing all locks held in the system:
[ 1506.309887][   T30] 1 lock held by rcu_preempt/16:
[ 1506.324852][   T30]  #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[ 1506.354070][   T30] 1 lock held by khungtaskd/30:
[ 1506.365856][   T30]  #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1506.402521][   T30] 2 locks held by getty/5569:
[ 1506.412976][   T30]  #0: ffff888038e9a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1506.444876][   T30]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 1506.486293][   T30] 3 locks held by kworker/u8:10/17962:
[ 1506.519768][   T30]  #0: ffff8880332a4148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1506.545741][   T30]  #1: ffffc90005247d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1506.585103][   T30]  #2: ffffffff9060f268 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360
[ 1506.604725][   T30] 1 lock held by udevd/19451:
[ 1506.617417][   T30]  #0: ffff888064b50358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1506.644476][   T30] 1 lock held by syz.2.3797/21195:
[ 1506.652477][   T30]  #0: ffff88805755c420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30
[ 1506.675428][   T30] 2 locks held by syz.7.4340/23397:
[ 1506.682305][   T30]  #0: ffffffff9060f268 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1506.692786][   T30]  #1: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 1506.724313][   T30] 
[ 1506.745473][   T30] =============================================
[ 1506.745473][   T30] 
[ 1506.754718][   T30] NMI backtrace for cpu 0
[ 1506.754733][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1506.754757][   T30] Tainted: [L]=SOFTLOCKUP
[ 1506.754763][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1506.754772][   T30] Call Trace:
[ 1506.754778][   T30]  <TASK>
[ 1506.754786][   T30]  dump_stack_lvl+0x100/0x190
[ 1506.754817][   T30]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1506.754837][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1506.754865][   T30]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1506.754893][   T30]  sys_info+0x141/0x190
[ 1506.754912][   T30]  watchdog+0xd25/0x1050
[ 1506.754944][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1506.754968][   T30]  ? __kthread_parkme+0x18c/0x230
[ 1506.754995][   T30]  ? kthread+0x13a/0x450
[ 1506.755009][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1506.755031][   T30]  kthread+0x370/0x450
[ 1506.755046][   T30]  ? __pfx_kthread+0x10/0x10
[ 1506.755063][   T30]  ret_from_fork+0x754/0xd80
[ 1506.755082][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[ 1506.755102][   T30]  ? __switch_to+0x7b4/0x1120
[ 1506.755123][   T30]  ? __pfx_kthread+0x10/0x10
[ 1506.755140][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1506.755172][   T30]  </TASK>
[ 1506.755179][   T30] Sending NMI from CPU 0 to CPUs 1:
[ 1506.883495][    C1] NMI backtrace for cpu 1
[ 1506.883512][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1506.883531][    C1] Tainted: [L]=SOFTLOCKUP
[ 1506.883536][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1506.883544][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1506.883569][    C1] Code: d8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 0c 1c 00 fb f4 <e9> bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1506.883586][    C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242
[ 1506.883597][    C1] RAX: 0000000008c902bf RBX: ffff88801e6b2480 RCX: ffffffff8b8f7c75
[ 1506.883607][    C1] RDX: 0000000000000000 RSI: ffffffff8de71ed4 RDI: ffffffff8c1aefa0
[ 1506.883616][    C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795
[ 1506.883624][    C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd6490
[ 1506.883633][    C1] R13: 0000000000000001 R14: ffffffff90d96410 R15: 0000000000000000
[ 1506.883649][    C1] FS:  0000000000000000(0000) GS:ffff88812444a000(0000) knlGS:0000000000000000
[ 1506.883664][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1506.883673][    C1] CR2: 00007fc1dafe82f8 CR3: 000000007480f000 CR4: 00000000003526f0
[ 1506.883683][    C1] Call Trace:
[ 1506.883688][    C1]  <TASK>
[ 1506.883693][    C1]  default_idle+0x9/0x10
[ 1506.883708][    C1]  default_idle_call+0x6c/0xb0
[ 1506.883723][    C1]  do_idle+0x35b/0x4b0
[ 1506.883741][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1506.883758][    C1]  ? do_idle+0x2b9/0x4b0
[ 1506.883774][    C1]  cpu_startup_entry+0x4f/0x60
[ 1506.883791][    C1]  start_secondary+0x21d/0x2d0
[ 1506.883810][    C1]  ? __pfx_start_secondary+0x10/0x10
[ 1506.883831][    C1]  common_startup_64+0x13e/0x148
[ 1506.883851][    C1]  </TASK>
[ 1507.064992][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 1507.071842][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1507.082490][   T30] Tainted: [L]=SOFTLOCKUP
[ 1507.086791][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1507.096838][   T30] Call Trace:
[ 1507.100103][   T30]  <TASK>
[ 1507.103019][   T30]  dump_stack_lvl+0x100/0x190
[ 1507.107690][   T30]  vpanic+0x552/0x970
[ 1507.111684][   T30]  ? __pfx_vpanic+0x10/0x10
[ 1507.116174][   T30]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1507.122322][   T30]  panic+0xd1/0xe0
[ 1507.126050][   T30]  ? __pfx_panic+0x10/0x10
[ 1507.130451][   T30]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1507.136584][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1507.142722][   T30]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1507.148865][   T30]  ? watchdog.cold+0x198/0x1ca
[ 1507.153611][   T30]  ? watchdog+0xd35/0x1050
[ 1507.158036][   T30]  watchdog.cold+0x1a9/0x1ca
[ 1507.162611][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1507.167266][   T30]  ? __kthread_parkme+0x18c/0x230
[ 1507.172269][   T30]  ? kthread+0x13a/0x450
[ 1507.176487][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1507.181155][   T30]  kthread+0x370/0x450
[ 1507.185204][   T30]  ? __pfx_kthread+0x10/0x10
[ 1507.189774][   T30]  ret_from_fork+0x754/0xd80
[ 1507.194341][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[ 1507.199433][   T30]  ? __switch_to+0x7b4/0x1120
[ 1507.204095][   T30]  ? __pfx_kthread+0x10/0x10
[ 1507.208664][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1507.213416][   T30]  </TASK>
[ 1507.216703][   T30] Kernel Offset: disabled
[ 1507.221004][   T30] Rebooting in 86400 seconds..