last executing test programs:

2m35.268630991s ago: executing program 0 (id=790):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
getrlimit(0xe, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
socket(0x10, 0x800, 0x0)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
listen(r4, 0xfffffff8)
socket$inet_tcp(0x2, 0x1, 0x0)

2m33.813490891s ago: executing program 0 (id=792):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8, r2}, 0x18)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="240000004000070100000000fcdbdf25047c0000040000000c00018008001600e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
close(0x3)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00'})
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)

2m32.063756674s ago: executing program 0 (id=802):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000100), 0xc, 0x8500)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000002c0)={{r1}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000300000000000000080000000000000007000000000000008c0000000000000007000000000000000300000000000600000000000000000007000000000900000000000000020000"]}, @subvolid=0x8})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000001b700)=@deltfilter={0xbe0, 0x2d, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {0xe, 0x2}, {0xffff, 0xa}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x6, 0xd}}, @filter_kind_options=@f_basic={{0xa}, {0xb98, 0x2, [@TCA_BASIC_EMATCHES={0x1cc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x194, 0x2, 0x1}, {0x721, 0x7, 0x0, "20870b22628374"}}}, @TCF_EM_IPT={0x3c, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf3eb}, {{0x1, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x68, 0x3, 0x0, 0x0, {{0xe, 0x0, 0x40}, "af40dfa294c8a4f249d5db448516c01346cd3e825ad5115e3309a2c57cc0674726c852a3a20bdf2853c996cf68c1acd4ffa8b6ae1e14d05d5e690423c18ac74e26253173ce38ab277bf8340d8cb6e40096cc29cffedbb1b096"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3a, 0x7, 0x5}, {{0x1}, {0x4, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe7}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x7ff}, {{0x2}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0x7}, {0x0, 0x4, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xa0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x8e, 0x1}, {0x5, 0xc9, 0x2}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="a9ad2310c868", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="d759f1d4"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x39d, 0x7f, 0x1}, {0x5, 0x0, 0x3}}}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xc, 0x1}, {0xff, 0xa}}}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="0b9156ee", @TCF_META_TYPE_VAR="87460da892", @TCF_META_TYPE_VAR='d@']}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xffe0}}, @TCA_BASIC_POLICE={0x828, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0xcd, 0x0, 0x5, 0x5, 0x4, 0x0, 0x3ff, 0x3, 0x7, 0x5, 0xfffff838, 0x0, 0x101, 0xb, 0x1ff, 0xfffffffb, 0x1, 0xf, 0x8, 0x5, 0x40000000, 0xdf79, 0x1, 0xfffff000, 0xf, 0xe422, 0x1c0000, 0x7, 0xfffff33f, 0x7, 0x9, 0x0, 0x3, 0x9, 0xfffffffd, 0x7, 0x401, 0x1, 0x316e, 0x2, 0x81, 0x401, 0xb66c, 0x8, 0x8, 0x0, 0xdf, 0x8, 0x8, 0x3, 0x1, 0x9, 0x0, 0x8, 0x3, 0x5683, 0x1, 0x6, 0x3, 0x8, 0x1, 0x3, 0x4, 0xabd, 0x1, 0x13e, 0x7, 0x0, 0x18, 0x5, 0x95b6, 0x0, 0x3, 0xfffffff0, 0x5, 0x5, 0x7fffffff, 0x1, 0x6, 0x4, 0x9, 0x0, 0x800, 0xfff, 0x80000000, 0xc, 0x8, 0x8000, 0x5d39, 0x1, 0xfffffffe, 0x2c79, 0x47, 0x4, 0x3, 0x81, 0x9, 0x80000000, 0x1c7, 0xfff, 0x7, 0xd438, 0x0, 0x9, 0x3ff, 0x3, 0x8, 0x8001, 0x3, 0x8, 0x4, 0x6, 0x80000001, 0xfffff521, 0x3, 0x6, 0x9, 0x7, 0x8, 0x81, 0x9, 0xa, 0xfa68, 0x7fffffff, 0x7fff, 0x1, 0x0, 0xacf5713, 0x9, 0x2fc, 0x9, 0x4, 0x552, 0x1, 0x4, 0xf91d, 0x4, 0xffffff80, 0x80000000, 0x7, 0x3, 0x0, 0x2, 0xfffff53d, 0x9, 0x7, 0x6, 0x8, 0xf2, 0x9db, 0x35, 0x3, 0x0, 0x560, 0x6, 0xe9, 0xffffffff, 0x6c180403, 0x5, 0x5, 0x3, 0x8, 0x10001, 0x1, 0x3, 0x5, 0x4, 0x10001, 0x4, 0x1ff, 0x0, 0x7, 0x4d7, 0x2, 0x10, 0xffff3593, 0xffff, 0x1, 0x2, 0x274, 0x742, 0x59f, 0x10001, 0xfffffff4, 0x9f39, 0x9, 0xfffffff7, 0x0, 0x2, 0xda1, 0x100, 0x4, 0x4, 0xa, 0x7ff, 0x10, 0x5, 0x7fffffff, 0x1, 0x81, 0x90, 0x5, 0x7, 0xdb, 0x7, 0x5, 0x5, 0x6, 0x7ff, 0x12, 0x7, 0x2, 0xb3d, 0xffff56e9, 0xc97a, 0x5, 0xb, 0x7f, 0x7ff, 0xc357, 0x8, 0x25, 0x9, 0x6, 0x3, 0x7, 0x10000, 0x2, 0x3, 0x48, 0xfffffff2, 0x10000, 0x3, 0x0, 0x2, 0xf7, 0x7, 0xcb, 0x1, 0x1, 0x40, 0x6, 0x4, 0x7, 0x5, 0x12b0206e, 0x5, 0x9, 0x812, 0x0, 0xffffff9a, 0x7ff, 0x7, 0x7, 0x7, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8590}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x576, 0x7, 0x2, 0x7, 0x2, 0x9, 0x0, 0x4, 0xfffffff6, 0x8, 0x7, 0x0, 0x7, 0x8, 0x2, 0x401, 0x6, 0x6, 0x80, 0x8, 0x80, 0x10001, 0xbf3, 0x111, 0x1d, 0x2, 0x75, 0x0, 0x1, 0x1, 0x5, 0x2, 0x7, 0x7fff, 0x80000000, 0x23b8, 0x7f, 0x2, 0x6, 0xa, 0x5, 0x8000, 0x920, 0xe74b, 0x9, 0x0, 0xb, 0x0, 0x81, 0x3, 0x5, 0xfffffffd, 0x8, 0xe9, 0xffff, 0x4, 0x3, 0xc, 0x2, 0x4ed, 0x8000, 0x4, 0xe, 0x9, 0x678, 0x7, 0x4, 0xffffffff, 0xe, 0x7, 0x3, 0x8d, 0xd42, 0x4, 0x1, 0x9, 0x3, 0x4, 0x4, 0x8, 0x9, 0x9, 0x400, 0x3, 0x9, 0x6, 0x2, 0x1, 0x3, 0xfffffff9, 0x0, 0x6, 0x5, 0x6, 0x8000, 0x0, 0x69, 0xfff, 0x8, 0x5, 0x0, 0x4, 0x7, 0x0, 0x4, 0x81, 0x7, 0x2937, 0x9, 0x3d76, 0x0, 0x7, 0x4, 0xcb, 0x1, 0x0, 0x5, 0x2, 0x9, 0x10000, 0x7, 0x2, 0x2, 0x8, 0x4, 0xb, 0x101, 0x744, 0x81, 0x9, 0xe4, 0xd, 0xffffffff, 0x7, 0x40, 0x4, 0x4, 0x8000, 0xfff, 0x1ff, 0x0, 0x8c8e, 0x1000, 0x8, 0x5, 0xb, 0x1, 0x2, 0x8, 0x5, 0x3ff, 0x3, 0x401, 0x8, 0x8001, 0x9, 0x9762, 0x4, 0x1, 0x4, 0x6, 0xfffffff7, 0x51, 0x6, 0x81, 0xa, 0x7, 0x3, 0x1, 0x3, 0x10, 0x2, 0x1, 0x5, 0x8, 0x6, 0x9, 0x101, 0x81, 0x3, 0x0, 0x3, 0x1a3, 0x0, 0xe515, 0x155, 0x8, 0x0, 0xb, 0x8, 0x3, 0x2c, 0x0, 0x3, 0x2, 0x8, 0x2, 0xa3, 0x35bac6f5, 0x9, 0x6, 0xbfab, 0xfff, 0x0, 0x2, 0x2000000, 0x0, 0xffffffff, 0x3, 0x2, 0x2, 0x5, 0x4, 0xfffff45e, 0x10001, 0x3, 0xffffa0a6, 0xd, 0x6, 0x2, 0x1, 0x6, 0x0, 0xa, 0x10001, 0x6, 0x3, 0x5, 0x0, 0x3, 0x547b, 0xd2c4, 0x5, 0x3, 0x80, 0x1ff00000, 0x2, 0xfffffffe, 0x5, 0x8001, 0x5, 0x6, 0x1, 0x6, 0x46, 0x6, 0x1, 0x9, 0x4, 0x8006, 0x1ff, 0x0, 0x6, 0xf, 0x0, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}]}, @TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xa, 0x3, 0x4}, {0x1, 0x5, 0x89e, 0xc17}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_BASIC_ACT={0x16c, 0x3, [@m_gact={0x8c, 0x12, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2677, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf61, 0x7}}]}, {0x46, 0x6, "19f6f7efd3a3dac402b1e7d3c1afb39ff8cd8ab258f503e90a4f6a75436b3377185519253deca31b0a4275ec3b1aaeacb2274a933cf450fa64710fa5e06e02103855"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0xdc, 0xc, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1ff}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffff7}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xad95}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0x25, 0x6, "dee07f0647bc01846965f7e498acc00be59fceb0ab013cbb307052f03983ca5856"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x3}}]}, 0xbe0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r8 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)

2m29.717828013s ago: executing program 0 (id=805):
r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
fcntl$dupfd(r0, 0x0, r0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xfffffffc, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000)
clock_gettime(0x5, &(0x7f00000000c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001e00080029bd7000fadbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000000010000008ce211db87bd8cdcd497ce94af371cc83b7a5130a003fc8a2682"], 0x20}}, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
close(r7)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r9, 0xffffffffffffffff, 0x200000000000000)

2m29.012304818s ago: executing program 0 (id=808):
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000055090100000000009500000000000000181100000000", @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'gretap0\x00'})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x4008080)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4], 0x6f4}}, 0x0)

2m28.191897773s ago: executing program 0 (id=809):
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000600)=0x14)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x42, 0x1, {}, {0x3, 0xc, 0x9, 0xc, 0x6, 0x8, "bf040fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
io_setup(0x7, &(0x7f0000000040)=<r4=>0x0)
r5 = eventfd2(0x0, 0x0)
r6 = eventfd2(0x7, 0x80001)
r7 = eventfd2(0x7, 0x181001)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001440)={{0x1, 0x1, 0x18, <r8=>r3, {0xfff, 0x4a}}, './file0\x00'})
r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
r10 = eventfd2(0x7ff, 0x0)
io_submit(r4, 0xa, &(0x7f0000001900)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7, r2, &(0x7f0000000300)="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", 0x1000, 0x80}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x7f, r3, &(0x7f00000000c0)="c21ee9f8c0de76805bce0a12f737fdb74968ec6ebaaaee9d839dab", 0x1b, 0x100000001, 0x0, 0x1, r5}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x7f0, r3, &(0x7f0000001980)="c792101fdb64c1f62c937a933ee2b92e71cdda276af408d2e6f2b9988f14dcedd892290410ccf5bfa9034d9202268d44c2cf748d002243e6d93634ae191eb67d21fbcafbf8c71366591fbfeb5af215676e7ef389e3c425d73d5cb2cbe40f7f9e94861fe73b070f195a1c5dacc1aaecee6625e0dfe511df8f77ea55120fa89ee977d5c6a496dbdea1499d7572252935f7126e975c3295e95d09ef7b4b03f485ca182a68865f5ab7ca41f416b6f6a3a9df09717a3a7eef41c86ff760194dfaabb7cb8b24d209924b9039a60c98dab3ca7ed6ff90cae9e0f60cc35e14c8e9adc7065e06299cd6b7c312182654a6b2f38ebd", 0xf0, 0x0, 0x0, 0x3, r6}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000200)="44d0f7ca8a4116f50be12a563730473e5adb29e4eeec3dffb0f246f5ff0cadb0c5ee8c056a826ba7ad6a653b215c28d866a2df47a159ae5242060b7c30cf4c502f733c2c5249890b58ca09633749", 0x4e, 0x1, 0x0, 0x2, r7}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000001400)="bb8e9d73f5c5c74f0afa40e3fd9c43be7435b6e2536b95aab507242761f2aed60907c1dfe7b7dafb4c8152cb15d76b6c4a4b7777a2c9f15d7d373022", 0x3c, 0x7, 0x0, 0x3, r8}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f00000014c0)="c9c3a35b15edfd36c85e602c1c4cce287c59560018730cb0c94b396b89ab91bfc3", 0x21, 0xbb, 0x0, 0x3, r9}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x5, 0x3, r2, &(0x7f0000001540)="3b9fe26f557b8b13a466ddd4ec9f3e74d297b67720ca949dd54e0551dc257110ad298ef11d9f96dd7f2249a1f0341f098c92cef1b5c787a2bda9ae308ec0b6327d6280d43310a103dfd75767b185e8e053d9188cdb1ea2a80608a52dabac5a77e5992c123e6282ae3c96d94f9eba2d714454b74eb5bad436456d0d767e07767778cdeb750419e56e9ce51d2fd39c19ed64748a2e37d22b537503fda544c4690573e398b3d6fc7f55bbd80a15c0f943edaa4fd0974fad4e57e4474bd855f35c261afdf0c5524fe6d94c03142551d47d8dc5f63b725771", 0xd6, 0x2, 0x0, 0x2}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f00000016c0)="3636fe", 0x3, 0x7, 0x0, 0x1, r10}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x3, 0x8, r2, &(0x7f0000001740)="cbf2", 0x2}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x1d7d, r2, &(0x7f00000017c0)="700446d704d06b0a8fd1ca6f23a5768728c0cc14e78140fa4d9abdde47381ca003f9c3bb35b8018cc25bec6fbbf03c5d262d90990b31c9a54ab667894bbe85cbd0afcd7bf8f49d24cca2cb7e6eec9bef3879337c8b79ecc5b5aa6b7f667817563f050fb33405146db13d8d3b17f976a3611f12576e7b74849a3f8333820c6bc8256eec37e4c900d72e4cf86ddae73aef61511e6774669e8e9d2fe89f17882fe3551e232787d848fb10667b8509309c3bec9aaee0d051ba491742926eb6f81664d273bf57cdf84ed08394", 0xca, 0x0, 0x0, 0x2}])
close_range(r2, 0xffffffffffffffff, 0x0)

2m12.187742964s ago: executing program 32 (id=809):
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000600)=0x14)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x42, 0x1, {}, {0x3, 0xc, 0x9, 0xc, 0x6, 0x8, "bf040fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
io_setup(0x7, &(0x7f0000000040)=<r4=>0x0)
r5 = eventfd2(0x0, 0x0)
r6 = eventfd2(0x7, 0x80001)
r7 = eventfd2(0x7, 0x181001)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001440)={{0x1, 0x1, 0x18, <r8=>r3, {0xfff, 0x4a}}, './file0\x00'})
r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
r10 = eventfd2(0x7ff, 0x0)
io_submit(r4, 0xa, &(0x7f0000001900)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7, r2, &(0x7f0000000300)="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", 0x1000, 0x80}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x7f, r3, &(0x7f00000000c0)="c21ee9f8c0de76805bce0a12f737fdb74968ec6ebaaaee9d839dab", 0x1b, 0x100000001, 0x0, 0x1, r5}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x7f0, r3, &(0x7f0000001980)="c792101fdb64c1f62c937a933ee2b92e71cdda276af408d2e6f2b9988f14dcedd892290410ccf5bfa9034d9202268d44c2cf748d002243e6d93634ae191eb67d21fbcafbf8c71366591fbfeb5af215676e7ef389e3c425d73d5cb2cbe40f7f9e94861fe73b070f195a1c5dacc1aaecee6625e0dfe511df8f77ea55120fa89ee977d5c6a496dbdea1499d7572252935f7126e975c3295e95d09ef7b4b03f485ca182a68865f5ab7ca41f416b6f6a3a9df09717a3a7eef41c86ff760194dfaabb7cb8b24d209924b9039a60c98dab3ca7ed6ff90cae9e0f60cc35e14c8e9adc7065e06299cd6b7c312182654a6b2f38ebd", 0xf0, 0x0, 0x0, 0x3, r6}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000200)="44d0f7ca8a4116f50be12a563730473e5adb29e4eeec3dffb0f246f5ff0cadb0c5ee8c056a826ba7ad6a653b215c28d866a2df47a159ae5242060b7c30cf4c502f733c2c5249890b58ca09633749", 0x4e, 0x1, 0x0, 0x2, r7}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000001400)="bb8e9d73f5c5c74f0afa40e3fd9c43be7435b6e2536b95aab507242761f2aed60907c1dfe7b7dafb4c8152cb15d76b6c4a4b7777a2c9f15d7d373022", 0x3c, 0x7, 0x0, 0x3, r8}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f00000014c0)="c9c3a35b15edfd36c85e602c1c4cce287c59560018730cb0c94b396b89ab91bfc3", 0x21, 0xbb, 0x0, 0x3, r9}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x5, 0x3, r2, &(0x7f0000001540)="3b9fe26f557b8b13a466ddd4ec9f3e74d297b67720ca949dd54e0551dc257110ad298ef11d9f96dd7f2249a1f0341f098c92cef1b5c787a2bda9ae308ec0b6327d6280d43310a103dfd75767b185e8e053d9188cdb1ea2a80608a52dabac5a77e5992c123e6282ae3c96d94f9eba2d714454b74eb5bad436456d0d767e07767778cdeb750419e56e9ce51d2fd39c19ed64748a2e37d22b537503fda544c4690573e398b3d6fc7f55bbd80a15c0f943edaa4fd0974fad4e57e4474bd855f35c261afdf0c5524fe6d94c03142551d47d8dc5f63b725771", 0xd6, 0x2, 0x0, 0x2}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f00000016c0)="3636fe", 0x3, 0x7, 0x0, 0x1, r10}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x3, 0x8, r2, &(0x7f0000001740)="cbf2", 0x2}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x1d7d, r2, &(0x7f00000017c0)="700446d704d06b0a8fd1ca6f23a5768728c0cc14e78140fa4d9abdde47381ca003f9c3bb35b8018cc25bec6fbbf03c5d262d90990b31c9a54ab667894bbe85cbd0afcd7bf8f49d24cca2cb7e6eec9bef3879337c8b79ecc5b5aa6b7f667817563f050fb33405146db13d8d3b17f976a3611f12576e7b74849a3f8333820c6bc8256eec37e4c900d72e4cf86ddae73aef61511e6774669e8e9d2fe89f17882fe3551e232787d848fb10667b8509309c3bec9aaee0d051ba491742926eb6f81664d273bf57cdf84ed08394", 0xca, 0x0, 0x0, 0x2}])
close_range(r2, 0xffffffffffffffff, 0x0)

8.962441106s ago: executing program 2 (id=1363):
flock(0xffffffffffffffff, 0x1)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
gettid()
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000500)=""/94, 0x5e}], 0x1, 0x0, 0x0) (fail_nth: 1)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2})
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

8.160748889s ago: executing program 2 (id=1366):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000040)={0x0, 0x8, 0x62, 0x7, @vifc_lcl_ifindex, @multicast1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x801, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/4096, 0x1000}, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r8 = dup(r7)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'gretap0\x00', <r10=>0x0})
ioctl$PPPIOCGFLAGS1(r8, 0x8004745a, &(0x7f00000000c0))
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x7}, {0xfff1, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0)
ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000000)=0x1000000010)
ioctl$BLKRRPART(r8, 0x125f, 0x0)

6.475671747s ago: executing program 1 (id=1373):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000800000000879000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r9, &(0x7f0000000280)=""/21, 0x3a, 0x60, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
close_range(r0, 0xffffffffffffffff, 0x0)

5.737477864s ago: executing program 5 (id=1374):
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d00000018010000202064"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, 0x0}}], 0x1, 0x11)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
getsockopt$inet_buf(r2, 0x0, 0x28, &(0x7f0000000600)=""/125, &(0x7f00000006c0)=0x7d)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

5.472819796s ago: executing program 1 (id=1375):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000800000000879000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r9, &(0x7f0000000280)=""/21, 0x3a, 0x60, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
close_range(r0, 0xffffffffffffffff, 0x0)

5.323917854s ago: executing program 3 (id=1376):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
lsetxattr$security_ima(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x66, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff2, 0xfff3}, {}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async)
ftruncate(r0, 0xc17a) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000009800)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}], 0x1}, 0x81}], 0x1, 0x2100, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r8 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r11}, 0x18)
socket$inet6(0xa, 0x400000000001, 0xe5a4)

5.31877813s ago: executing program 4 (id=1377):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x9, 0x1, 0x94}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) (fail_nth: 1)
sched_getattr(0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
ioctl$sock_bt_hci(r3, 0x400448c9, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])

4.635503809s ago: executing program 5 (id=1378):
r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00')
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0)

4.552159026s ago: executing program 3 (id=1379):
pipe(&(0x7f0000000080))
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1})

4.468915735s ago: executing program 1 (id=1380):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x9309, 0x2002)
socket(0xa, 0x3, 0xff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
kcmp(r4, r4, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r6 = dup(r5)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}})

4.415738369s ago: executing program 5 (id=1381):
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'gretap0\x00'})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x4008080)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4.015757961s ago: executing program 5 (id=1382):
mkdirat(0xffffffffffffff9c, 0x0, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002007465"], 0x2c}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
fsmount(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x1)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

3.991523476s ago: executing program 3 (id=1383):
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x10c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xf}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8f}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x20043}, {0x5, 0x14, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000004c0)={<r5=>0x0, 0x7, 0x4, [0x9, 0xfe, 0xc5, 0x6]}, &(0x7f0000000500)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000540)={r5, 0x39}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4c26, 0x20000002, @empty, 0x6a9}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r7 = io_uring_setup(0x3b7b, &(0x7f0000000040)={0x0, 0xc89f, 0x2, 0x7, 0x20002f7})
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r10=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r10], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1})

3.151818905s ago: executing program 4 (id=1384):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSPGRP(r4, 0x5410, 0xfffffffffffffffe)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x80000)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f000030e000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/233, 0xe9, 0x1, &(0x7f0000000240)=""/65, 0x41}, &(0x7f0000000300)=0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
open_by_handle_at(r3, &(0x7f0000000340)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x2, 0x10001}, 0x100, 0x32e}}, 0x101040)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x5f, 0x0]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28)
socket$pppl2tp(0x18, 0x1, 0x1)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x25dfdbfc, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000))
write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1022}}, 0x1006)

3.06895161s ago: executing program 5 (id=1385):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x19ff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(r1, 0x8, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r7)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000000640)={0x2020, 0x0, <r8=>0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[0x0, &(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xa2\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRESDEC=r0, @ANYRES16=r8, @ANYRES16=r9], 0x50)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)

3.0607866s ago: executing program 2 (id=1386):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x19ff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(r1, 0x8, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r7)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000000640)={0x2020, 0x0, <r8=>0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[0x0, &(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xa2\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRESDEC=r0, @ANYRES16=r8, @ANYRES16=r9], 0x50)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)

2.300162043s ago: executing program 3 (id=1387):
syz_open_dev$vim2m(&(0x7f00000002c0), 0x3, 0x2)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0xa000200)
semget$private(0x0, 0x4000, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0)

1.987226383s ago: executing program 4 (id=1388):
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000550901000000000095000000000000001811000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'gretap0\x00'})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.643546569s ago: executing program 4 (id=1389):
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
r3 = timerfd_create(0x0, 0x80000)
read(r3, &(0x7f0000000080)=""/149, 0x95)
ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000040)=0x8004)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.435033412s ago: executing program 3 (id=1390):
flock(0xffffffffffffffff, 0x1)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = gettid()
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000500)=""/94, 0x5e}], 0x1, 0x0, 0x0)
timer_create(0x6, &(0x7f0000000180)={0x0, 0x2b, 0x2, @tid=r2}, &(0x7f0000000000)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2})
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0)
mprotect(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x2000001)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1.360261135s ago: executing program 1 (id=1391):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x15, 0x5, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005a00010000000000000800038004000000"], 0x1c}}, 0x0)

1.02236537s ago: executing program 4 (id=1392):
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000055090100000000009500000000000000181100000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'gretap0\x00'})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x4008080)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

962.499706ms ago: executing program 2 (id=1393):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) (async)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) (async, rerun: 64)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) (rerun: 64)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async, rerun: 64)
syz_open_dev$tty1(0xc, 0x4, 0x3) (async, rerun: 64)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f00000004c0)=[{0x101, 0x8801, 0x22, &(0x7f0000000080)="2030f0c09da3b7fa9c148983951694782089285ef4de0bbdaf52f484809b8782bdb1"}, {0x0, 0xa400, 0x0, 0x0}, {0x7fff, 0x1000, 0x0, 0x0}], 0x3}) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000880)={{0x1, 0x0, 0x80, {0x4000, 0xf000, 0x6}}, "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", "9d4c17bfba8edd862a831500d59dc05de79bbc2dd3e11649fb45f45591323641085daf23c8ebf3b459f37703a9c585750ba34ba6f9d5063d5581de99cb1b3424f33e873d829f14082a179c50e05861021d20f8362d6cca4145fa08d0ff1127c461a89c313637a93489692a3e0688b7a70310cdd80736a70ff0bb8e1abd584bfe94b960165bf1506b2a708a414254c54fea3fc5d9fcd42a30c58723514fd5bde27ab2cc82b671e714c1f679c67aa5fb1ef39209ac16300f705701bd1f02778cc4b5f4062964d0a2400955ecaa191099053dd4559c42c2431f3b210d151753ab102cf3115f634483c788d055be9a425523d8c70c0edd91f9fc3d0219c11a587cbb3669f98f69ee18ff06da94ad978c5f1eb572be6433b53499b459e70456bf6ea8f198c5bde915638a15bbd979927d8a78262866dee9848245454dfeb994f61e155489b3b18869d21da1824b39f89bc6015273704f9ecedcc0379e1a62cf65097d638d9dc671da4148c70735c5217f07fa90e086e756fa6ee368f9fd4c5413582ba5dc65cd5807d889e59096d990bddc78981142c746c151749d945c6396b96511f1b03c2be24222a4190c164beff70d420c3bd95e75f3593013e5c47527b56081a8a0be4e9a29f863d34102146068f3ac4c7181f07282d45b0a4816f701897a364aafc0e37fcb0783b71b96558777cfa0b394bf93e19dfb9639b42a443542aee44d1ee5a7079120b0deed607cf47af5fdec1740d17a174e0554a0097c462618ff9645cd27c53de2150d715df689b4dc2a2a63973e0e50b4cb77bdaeb45950cb91d18cde87cd47dcfb5bdc5559454b5dbf7b5784e6eb5668fa034243acdce435634d6a332add7b5406434d9eef0090c2f01820bb71a788233d8ebc5cc6f858c10f5840034ed249aec8d6dffca711da8963cff0825ea25e452d0bc42961f4c4e1cfb71f4fc4675bca7b8b3ae53cbcf8bc8331eae76998ad84689e22dc155c17bb6feaa86d10951e28e2993d23cafdde5c63917678c5854238e81f615cc06dab678766ad87dde2c3eefecc958a584cc7d965760f88bcb8aafccc0ada6ce52a445949537f167505c9b2bd8db27ba5ea3161a17757cbfcd8170278b19b0d62f4803eaaf2f341a5a11c57575a414b238ce02c55d4ebe210e9085c1d371a86754935c5081d3bc2fb8292183c9ccd7c48f7ae73a458dd9bbb18c64319fe749e70b1c107942875e6eed504556ed597f0db383b02ebd60cce67e0121509602b52f5af6e39b489dedea5860b1238f96836ef4482d0e738bf1eedd3558ff415d599919e2fefdeec83a10ac7747ce6af57fe22fdbac53442276eed93431c0219a69cb4a2c5762011ceb05943daf54c6fd4e7fe9563124c4f7190c30b040290db978a78de560a0240f643d1cd5dcc1d78b63aec7d4924ff99a875ce9e33388b9328f82112b2d8cb15b23b6bffda4e16d921255cdd378666852ddd8c695ef9c5a25127a25b4ab2094236a56525d07ad6b9b4af6dcbe82d8b1b74e4b428767861a071394dad0716760494cf62dbf08c1339ce700eec18d5789dddcfa4997e2951f1c712b28ba593c0c23e84a34d397621075ff192eaa7bff3ac694660052309aa0edf133701503b9831a33393a4c228227bbd21dbaa8b996317211cedf63ad78af6a71c903f0f13a1741647eb34b050ead16a2edfddfcef6a3571698d612f6f7f29f303da06331e139f75524c69e84a5f4fb8969c4565b68e41cc3f58e166178408cc9ae05656736b8c53c0630dbaccd870d83f9b5268b9d9f2c254e630128ad7e2a2182fb15f18dc1fe96ddc2a69afc4c57865b51acf3509b5fd1cd4188342ed38b637817399a6710ff23d73ab91409303c61c2480b8ae4380bbfc2aa85db99a3716741d18336f9339a351c677167544f62bca8514866c8c868c50870dd7bd97eda6b39a52456229f8b452d56d4b3bb6046c6cfde3ec470b188d3a5dba4fb128bd14c1e6132951b1e7ed0fe87d5c7a64eb5a029f172ea60f8414b31d9c00e0603d01326a106f94b79fda1d9f7f0e76735872f0133eb3b36c7e0fd25fb277c94f5e6fdbdfa1e49018df1c5f3e91b79e451619ce3c16081ef41f6ddd325f7ef1aa8aa1ad450b7f19406d1f72c563f49f11ec3fbbdf62263eab2aab4093b89caee2ad0969decb4146a65c94cd1c5badf93a2fe0c415ea77945a038dd60020466bc86a622d077a90ef46d765565fae0ecfb2c11fb4cde586e6f6e29fb54877ad211c2a8d3efa7a8abaee3ac38cc988747b32507202f2663d32093cae72f0f9afa1086def4cdc37ec51813fc1f84f625bee96b9130291d2d9ace756d540bb336611de082b0fc74795f68941bdf35f2e35256bdc6c818dce40b56d25cba1375ff5bd1bd624a7afa62ea4aba454768f0e29141a2ead101e83e6e732946f7eb61ea960683b6a247cb8d27476aa03b21f982899d1ae4f02c58660d83c82267c64619b61ad242a50d08d51a14f97530181f587a16c68ac7d57d1a5e230618a0d68003b7f95b908cffbee76c8b2c27196754409877f4ddbe846dabbac7c17c6212e4cca2d222d33bacb48088a34d056da40e96ba6bb8100ff726c311f301317be37c6c692d87f5cff0a2358f17349a203c302448591f4692991623464acb18eaabddc134c5dd468a2b3527e1951f2a98b9c59a8736780d2a467ab6df5077e5b9511d2a549264df095762b794abbda9448eb4d73fa15a52450907ff6d976443de89bbde7cf5d8151899ac03ed4ee107691184dd439b446a0a9bb3512ba2b38f4dc8367ccc102c0e2486264e60fe0e6e744eb025a5f64d4a767086900de8c03e4606d6e4a5056e6703616efd811bf29910ffac0dc004d0727ca67fe336125644b719e82d5e8de6e9a168ec7655c820a7f298d7777afd708aa1c0eaea1e247c294d148ed0e59e6ef28bb8a2a6ad38c987704b3e6ea10433bfc6fd0d466fcaaa1ad8839bfda15305c2f460bf185718d5085dd222c65d77e173b3b623162041b1e8a36bb5fb126339b5d48f5d2a9dbc1407eab056bd54d7b3e997d8c2ae7d91ddfc9aaabe3c471decaaeda1ff79bb4cd6cd4ba441fa2570b4601bd7afc11702d5b8fdcc0986e9024a3e41fcb1a39e5133ad107700f381a1fd08344f0d8f247109c83668bc8efdca6a3937de1a78794faec30443edf55637a15c3731b3c11ce66b526a377521439688fe46faf9e60891f4af7438ea294b52dc368fd0456a445378acac86eef7ef8d671aed67095a3de0579dadb7fc796ef168c7eb99a75af97f1f188354836d7dfea422c26d5e023178d4a75b36a7186df0736f2ee42ea03a755b215dc664f4897346e8cccfc2275b694fda32f7ec160477ddcda8717b0d4b6d3175deedd5dabfb9187e63629d9f914c68db4007ac5e731730f84a422b07f25f38762adf7d098f77baef964c594b51baa73b9099316897ff3dec921465017ccc7e52b0c810ab27ad767460be1d3ed84b9cf5e53df051e00848ecd7581007fe596a2e58ee3845b96ee877237966ef2443aba281fbf343c575d7848fa294f9d8e1355824117e4297cb06baa399e9487cca8fafe12f0eb4c29df8de074eea678d7cd5d3292017671f1367f4d03bd422b9256ad1ce3164328333e761b690c8350ce16fa565e424b8899b0f8d5e11e81858f7ed8367438a2963bb492a93590d5beaf1b71abe221b4c2ddc5776c08dd1afcc2d1e7c20f9d434f959e5b38f3cb30849b1ae06e41b154a93fb518f3694e7d0d56c15240ea65540d82033ba4f4e5cbbc40d75a5ffded881ecd219cca0ecf8d830bbe6a8c1693e2e0dc33781eca382c915fbd57fcf3c86e2cbadc2224d513ccc1a41c4dc24d39e7e2319112a3a93d43d709a2440619b2912b529ce2d6c2482bdb4126144deafab9d1d7d58805fe627e480f230365d30284a61a210c5367f2c4036afbe810c660b93b34c2b1292536af04b52738d7bfab5e7b71cdc3acab8f288b8b129e64a3a2399091c2bac33ddbb08a3c2ed914a7ac061fced7d2f3fd1194184abb473e943e98ae03ae736cf01e2f50eb45a57caec64cdbfecb980159d3f05edef912b53a85b66aefa02d74705f8160334d9cb030fe1b3b25064d32a9896e0f8915f5bbee094843c0cc34d28edefd15ff48498888203c34f7c4306279d508e3498b4c0eca6e74682503138a0cf9d234d9bed346f365db7a154abf441becade2265d60877ab529b6aa97b7a93c86e78395bb7a3b9fabe4e273b87848cc8236589e97574480df9ac29f612187f872c750cec989c145bb92b04d86ceeccb931799f283dd0cf9ea8c0399f9eb2d99b70990ca5026f491d11333139c08bd0af82334be85858bb7c4ca5f00ff9a392eab0e0e212ef72d4827fed07f1934f15aaccdf4c4f756f9d4dce85d7d471fcc1d4cae222ba03d88557868145e6e59ad0a85a5fcf9e643b76c9a1376ba8bac0cefff4bc82c3c2ca5b6b1f7a7a16eed3032b38b13b6e1697fc673274f7a9c22b63e2cda3d26836b54fe3992e1f3b8a115f110638c93d87fbec12bb678e88a6e65f24f94b8febb362f2f7f31512d9d701c6726f59505c080e3e336b571197182b3104c7149fd06cca238ce5f686bc38a20f7b9943e44e8fc65a0f4b867e5ae5c6d2d983f772ff8f7553209fd68e33b2b2f5686f6d30e38559f55289c6ee4c5a49825f72477564a7fd1d5681746e0bc1ec0406679adad1812732e78b344c5253fb1fa4ecf2dd6038b9f3e48ef1cfce2d65c8159874f34357ce22701f9d5a5081e3353d8f4dd18c75c2afc5882027e8a9a87bee14f191e13b004e90eb49cd610977ee3ba8a5b2431bd0263cb1684447e38589b188ad7dacba1cf47f04188695b322b0ce23dc74290f5112bcc93f6264c901fc7d24525f86dc2ff9396e896906724913421604fd138542d840e07b544808bc739e3ad73b1117071b5e5e920f15b12e07ce98728e2a170b1e2ff72db7866a32c3c7f5bfa5ef3c2baac81121f34a09519fef5cf93878d718585dd28b02b1610d642367b89037c06c1c4a671236bf7c5382929bacf92e27f480531a2b1b8a30ac085d3da4ad5b7d1fa86fe1ec1dd97655a4628e90f692753b21e125b27fd3e6d0c3431a66dc42e480c7fd90b8f7d1d69cfcf49aa5519bef7c19dbab2465c74f5eac66b71e660f6d45615885c1cfc69b7343ec7721a69440841d6fc42c738dfcda27607ef48e0aabd74c72d2a1684deb76604aa26ac05d1f8e9f745c1c1a29e4c8cd7dad601be998ac9ed1429113d4619ad6c76f570c536f51778fbab4705ea142f17d91d593515f0c0c79885c241f08c7bc784abdaafddb72722ac8d8a8fdf8c449407fc3d094b213725094eec789a1de25817bc827ec947c0f43f6306d7d5b687296282636b064c32b03c55103a9a7b0325d7ee7a443aac3640f5f79fc1dc132d5f1ebec08f13c6627fbba2bb223b561a0cf71cd851a15a0ac9e6678a8568b75d14db672ef7658cf3a7d77941d55aab9ba474a8d666bc837a167c41efcaa94dc055c51cb98d6e5d4ce93928960c010d1ae1ebe2c831e0c7aabe2dcf3cd81a2af89bb8751f327cb836ba8a4108ed7891c7f04634c54c6b4afcbdb74926f95a3b38c08bfa5be181b320ebf01b66c9c1d1a064ccb8efc81bc486226f17a89bd8cdd78fbb901384753bdf252d9882579d68f8e9a135418bf218548bde1cc94079492893525b85a551adfe176435f7e5c20b9927d1ce3fcefe5c4d03b9ff753909b9e5b59e3cb5ef40c9da57ddd5f36dfc67eaa88ab1549bc034d040b8f29a91c562b4e7d34aa08cb5"}) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x60, r6, 0x1, 0x0, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x7}}]}, 0x60}}, 0xd0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0)

925.934309ms ago: executing program 4 (id=1394):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
socket(0x2, 0x80805, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
sysinfo(&(0x7f0000000000)=""/196)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"})
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080))

806.556926ms ago: executing program 2 (id=1395):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1)
syz_emit_ethernet(0xbe, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaa57088128c67b23aaaabbbbbbbbbbbb0800450000b0000000000011907800000000000000004e224e20009c90780100000001000000a324647ae3941d17f76247380b57bb23a78bd1175c15533631d10cd068c525e1cdf16868aaf371b13a6a21324c50a094ab38785b31fe60b985a578ad106fd0eafef54485b61e1df4a065c451bf0f242795107d8608ddf3268d2045b27ebf8ee672bc4421549386a5a5903b20b95909966d4e34f496775e3b6484c1851f6984768a7bb2fb41992618b6722efb4f1d017e3c3e4c11c5915b02eabcee87661c309327dff4a31f69bc4ee081b8f0781a8d7eb554a354fee6247c23d5a6ea67f8ea5946a67064b2e44181ae3d4ae5a046911d3aa29f44545a46252821d5e2421d629dd8acea8e817c8e89493be49483a0bf0a6810aa4c59d69db556f0077cbdfa9d4da5e10d36ba99b753d1b20ea830b733720c414ab43905d05372035ef8f9f9e954efba3b219d6a0ad0a70e2b8c379943e053ee73742a3ab2ea09ea0321"], 0x0)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0))
ioctl$KVM_REINJECT_CONTROL(r2, 0x4048aec9, &(0x7f0000000240)={0x7})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r4], 0x58}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20008801}, 0x408c001)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0})
write$tun(r6, &(0x7f0000000400)=ANY=[], 0xa2)
readv(r6, &(0x7f0000000800)=[{&(0x7f00000015c0)=""/4096, 0x57}], 0x1)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r8, 0x0)
ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x6, 0xb3})
sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="f00100000d0a00000000000000000000020000090900010073797a0d000000000900020073797a3100000000b00103809c010080a8000b80780001800b00010074617267657400006800028008000240000008000d000100434845434b53554d000000004a0003002070073d8925784b224096b4d8e78170742762e6351a62f9b9b82f10daaaefbf89795990de3e327f84fb17d1ddffef2d9671a50d59d76fdc79c3eec74aa8d67652f331170e0200002c0001800b0001007470726f787900001c0002800800034000000002080001400000000208000240000000100c0004400000000000000001a2000640437b75a16a9e6f3b7949e7446f4540b0ea0d6aaf1d521414b4e2deeb1a5fc5b0b428c24f8077004cacaf17266ddbaca2c2302e1e951b0189056eefe1676ba9480a0e7bd9a61b57d4a6574a4561b6515d450d2a02e96d21790a5c86638e44eec1056c4477f34871e20e1ffe9a6658ac752a612338edf9df9c529cf185229e6c4b8fb322309f1071e8b120cca82de5ec219c082c7c438e5c20f09a27bc061e0000400007800e000100627974656f726465720000002c000280080003400000000108000440000000470800024000000008080002400000000b0800054000000050100000800900090073797a300000000008000440000000010900010073797a3100000000"], 0x1f0}, 0x1, 0x0, 0x0, 0x20000055}, 0x20004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)

579.658995ms ago: executing program 5 (id=1396):
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000600)=0x14)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x42, 0x1, {}, {0x3, 0xc, 0x9, 0xc, 0x6, 0x8, "bf040fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
io_setup(0x7, &(0x7f0000000040)=<r4=>0x0)
r5 = eventfd2(0x0, 0x0)
r6 = eventfd2(0x7, 0x80001)
r7 = eventfd2(0x7, 0x181001)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001440)={{0x1, 0x1, 0x18, <r8=>r3, {0xfff, 0x4a}}, './file0\x00'})
r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
read$FUSE(r9, &(0x7f00000037c0)={0x2020}, 0x2020)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
r11 = eventfd2(0x7ff, 0x0)
r12 = eventfd(0x6)
io_submit(r4, 0xa, &(0x7f0000001900)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7, r2, &(0x7f0000000300)="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", 0x1000, 0x80}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x7f, r3, &(0x7f00000000c0)="c21ee9f8c0de76805bce0a12f737fdb74968ec6ebaaaee9d839dab", 0x1b, 0x100000001, 0x0, 0x1, r5}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x7f0, r3, &(0x7f0000001980)="c792101fdb64c1f62c937a933ee2b92e71cdda276af408d2e6f2b9988f14dcedd892290410ccf5bfa9034d9202268d44c2cf748d002243e6d93634ae191eb67d21fbcafbf8c71366591fbfeb5af215676e7ef389e3c425d73d5cb2cbe40f7f9e94861fe73b070f195a1c5dacc1aaecee6625e0dfe511df8f77ea55120fa89ee977d5c6a496dbdea1499d7572252935f7126e975c3295e95d09ef7b4b03f485ca182a68865f5ab7ca41f416b6f6a3a9df09717a3a7eef41c86ff760194dfaabb7cb8b24d209924b9039a60c98dab3ca7ed6ff90cae9e0f60cc35e14c8e9adc7065e06299cd6b7c312182654a6b2f38ebd", 0xf0, 0x0, 0x0, 0x3, r6}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000200)="44d0f7ca8a4116f50be12a563730473e5adb29e4eeec3dffb0f246f5ff0cadb0c5ee8c056a826ba7ad6a653b215c28d866a2df47a159ae5242060b7c30cf4c502f733c2c5249890b58ca09633749", 0x4e, 0x1, 0x0, 0x2, r7}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000001400)="bb8e9d73f5c5c74f0afa40e3fd9c43be7435b6e2536b95aab507242761f2aed60907c1dfe7b7dafb4c8152cb15d76b6c4a4b7777a2c9f15d7d373022", 0x3c, 0x7, 0x0, 0x3, r8}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f00000014c0)="c9c3a35b15edfd36c85e602c1c4cce287c59560018730cb0c94b396b89ab91bfc3", 0x21, 0xbb, 0x0, 0x3, r9}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x5, 0x3, r2, &(0x7f0000001540)="3b9fe26f557b8b13a466ddd4ec9f3e74d297b67720ca949dd54e0551dc257110ad298ef11d9f96dd7f2249a1f0341f098c92cef1b5c787a2bda9ae308ec0b6327d6280d43310a103dfd75767b185e8e053d9188cdb1ea2a80608a52dabac5a77e5992c123e6282ae3c96d94f9eba2d714454b74eb5bad436456d0d767e07767778cdeb750419e56e9ce51d2fd39c19ed64748a2e37d22b537503fda544c4690573e398b3d6fc7f55bbd80a15c0f943edaa4fd0974fad4e57e4474bd855f35c261afdf0c5524fe6d94c03142551d47d8dc5f63b725771", 0xd6, 0x2, 0x0, 0x2, r10}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f00000016c0)="3636fe", 0x3, 0x7, 0x0, 0x1, r11}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x3, 0x8, r2, &(0x7f0000001740)="cbf2", 0x2, 0x0, 0x0, 0x0, r12}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x1d7d, r2, &(0x7f00000017c0)="700446d704d06b0a8fd1ca6f23a5768728c0cc14e78140fa4d9abdde47381ca003f9c3bb35b8018cc25bec6fbbf03c5d262d90990b31c9a54ab667894bbe85cbd0afcd7bf8f49d24cca2cb7e6eec9bef3879337c8b79ecc5b5aa6b7f667817563f050fb33405146db13d8d3b17f976a3611f12576e7b74849a3f8333820c6bc8256eec37e4c900d72e4cf86ddae73aef61511e6774669e8e9d2fe89f17882fe3551e232787d848fb10667b8509309c3bec9aaee0d051ba491742926eb6f81664d273bf57cdf84ed08394", 0xca, 0x0, 0x0, 0x2}])

574.38702ms ago: executing program 2 (id=1397):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0)
poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x9, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x3, 0x2, 0x4, 0xc}, {0x5, 0x3, 0x10, 0x8}, {0x3, 0x5, 0x7, 0x3}, {0x5, 0x1, 0xd, 0x2}], 0x10, 0x22b}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], 0x0, 0x4d, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=0x0], 0x0, 0x4, 0x0, 0x0, 0x100, 0x32, '\x00', r3, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, 0x0, &(0x7f0000000040))
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000010ef17097300000000000109022400010000200009040000010900030009210000000122050009058103"], 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4)

238.845671ms ago: executing program 1 (id=1398):
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'gretap0\x00'})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x4008080)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0)

143.488322ms ago: executing program 3 (id=1399):
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000600)=0x14)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x42, 0x1, {}, {0x3, 0xc, 0x9, 0xc, 0x6, 0x8, "bf040fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
io_setup(0x7, &(0x7f0000000040))
eventfd2(0x0, 0x0)
eventfd2(0x7, 0x80001)
eventfd2(0x7, 0x181001)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001440)={{0x1, 0x1, 0x18, r2, {0xfff, 0x4a}}, './file0\x00'})
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
read$FUSE(r3, &(0x7f00000037c0)={0x2020}, 0x2020)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
eventfd2(0x7ff, 0x0)
eventfd(0x6)
eventfd(0xffffffff)

0s ago: executing program 1 (id=1400):
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000550901000000000095000000000000001811000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'gretap0\x00'})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

kernel console output (not intermixed with test programs):

696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f67d158f6c9 code=0x7ffc0000
[  269.666608][   T30] audit: type=1326 audit(1762827340.328:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d158f6c9 code=0x7ffc0000
[  270.124247][   T30] audit: type=1326 audit(1762827340.328:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d158f6c9 code=0x7ffc0000
[  270.383106][   T30] audit: type=1326 audit(1762827340.328:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67d158f6c9 code=0x7ffc0000
[  270.493871][   T30] audit: type=1326 audit(1762827340.328:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d158f6c9 code=0x7ffc0000
[  270.517622][   T30] audit: type=1326 audit(1762827340.328:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d158f6c9 code=0x7ffc0000
[  270.613396][ T8484] FAULT_INJECTION: forcing a failure.
[  270.613396][ T8484] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  270.626894][ T8484] CPU: 0 UID: 0 PID: 8484 Comm: syz.1.701 Not tainted syzkaller #0 PREEMPT(full) 
[  270.626915][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  270.626925][ T8484] Call Trace:
[  270.626930][ T8484]  <TASK>
[  270.626937][ T8484]  dump_stack_lvl+0x16c/0x1f0
[  270.626966][ T8484]  should_fail_ex+0x512/0x640
[  270.626989][ T8484]  _copy_from_user+0x2e/0xd0
[  270.627011][ T8484]  core_sys_select+0x2c8/0xc20
[  270.627034][ T8484]  ? __pfx_core_sys_select+0x10/0x10
[  270.627073][ T8484]  ? set_user_sigmask+0x21b/0x2b0
[  270.627093][ T8484]  ? __pfx_set_user_sigmask+0x10/0x10
[  270.627117][ T8484]  do_pselect.constprop.0+0x19f/0x1e0
[  270.627136][ T8484]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  270.627161][ T8484]  __x64_sys_pselect6+0x182/0x240
[  270.627179][ T8484]  ? __pfx___x64_sys_pselect6+0x10/0x10
[  270.627202][ T8484]  do_syscall_64+0xcd/0xfa0
[  270.627228][ T8484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.627243][ T8484] RIP: 0033:0x7effc138f6c9
[  270.627256][ T8484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.627272][ T8484] RSP: 002b:00007effc222e038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  270.627289][ T8484] RAX: ffffffffffffffda RBX: 00007effc15e5fa0 RCX: 00007effc138f6c9
[  270.627300][ T8484] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040
[  270.627310][ T8484] RBP: 00007effc222e090 R08: 0000000000000000 R09: 0000000000000000
[  270.627319][ T8484] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001
[  270.627330][ T8484] R13: 00007effc15e6038 R14: 00007effc15e5fa0 R15: 00007ffe5a7d96d8
[  270.627353][ T8484]  </TASK>
[  270.926767][ T8492] 9pnet_fd: Insufficient options for proto=fd
[  270.942103][ T5876] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  271.319921][ T5876] usb 3-1: Using ep0 maxpacket: 16
[  271.340554][ T5876] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  271.421798][ T8503] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  271.780686][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.800475][ T5876] usb 3-1: Product: syz
[  271.831571][ T5876] usb 3-1: Manufacturer: syz
[  271.839958][ T5876] usb 3-1: SerialNumber: syz
[  271.949899][ T5876] r8152-cfgselector 3-1: Unknown version 0x0000
[  271.970963][ T5876] r8152-cfgselector 3-1: config 0 descriptor??
[  272.597418][ T5940] r8152-cfgselector 3-1: USB disconnect, device number 21
[  273.827980][ T8520] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.711'.
[  275.619793][   T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  276.310367][   T24] usb 3-1: Using ep0 maxpacket: 16
[  276.324281][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.538115][ T8554] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  276.557542][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  276.584808][ T8554] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  276.591185][   T24] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  276.609803][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.800698][ T8554] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  276.806776][ T8554] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  277.275908][ T8554] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  277.284455][   T24] usb 3-1: config 0 descriptor??
[  277.370567][   T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  277.383492][ T8554] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  278.408377][ T8582] 9pnet_fd: Insufficient options for proto=fd
[  278.484236][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout
[  278.879822][ T5133] Bluetooth: hci2: command 0x0c1a tx timeout
[  278.879937][ T5812] Bluetooth: hci1: command 0x0c1a tx timeout
[  279.402002][ T5876] usb 3-1: USB disconnect, device number 22
[  279.417065][ T5812] Bluetooth: hci3: command 0x0c1a tx timeout
[  279.439787][ T5812] Bluetooth: hci4: command 0x0c1a tx timeout
[  279.919417][ T8604] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.738'.
[  280.247956][ T8612] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  280.476370][ T5940] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  280.624389][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout
[  280.750910][ T5940] usb 1-1: Using ep0 maxpacket: 16
[  280.879906][ T5940] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  280.909260][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.939795][ T5940] usb 1-1: Product: syz
[  280.952594][ T5940] usb 1-1: Manufacturer: syz
[  280.968940][ T5940] usb 1-1: SerialNumber: syz
[  280.985349][ T5940] r8152-cfgselector 1-1: Unknown version 0x0000
[  280.992179][ T5940] r8152-cfgselector 1-1: config 0 descriptor??
[  281.365027][ T8624] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  281.372276][ T8624] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  281.378351][ T8624] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  281.385292][ T8624] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  281.391755][ T8624] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  281.398090][ T8624] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  281.407855][ T5940] r8152-cfgselector 1-1: USB disconnect, device number 17
[  281.645661][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'.
[  282.009921][ T5940] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  282.200032][ T5940] usb 4-1: Using ep0 maxpacket: 32
[  282.211899][ T5940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.297434][ T5940] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  282.332714][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.362083][ T5940] usb 4-1: config 0 descriptor??
[  282.382607][ T5940] dvb-usb: found a 'TeVii S662' in warm state.
[  282.394076][ T5940] dw2102: su3000_power_ctrl: 1, initialized 0
[  282.413152][ T5940] dvb-usb: bulk message failed: -22 (2/0)
[  282.654521][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  282.701316][ T5940] dvbdev: DVB: registering new adapter (TeVii S662)
[  282.816280][ T5940] usb 4-1: media controller created
[  282.821590][ T5940] dvb-usb: bulk message failed: -22 (6/0)
[  282.832790][ T5940] dw2102: i2c transfer failed.
[  282.837845][ T5940] dvb-usb: bulk message failed: -22 (6/0)
[  282.843656][ T5940] dw2102: i2c transfer failed.
[  282.849045][ T5940] dvb-usb: bulk message failed: -22 (6/0)
[  282.854855][ T5940] dw2102: i2c transfer failed.
[  282.859651][ T5940] dvb-usb: bulk message failed: -22 (6/0)
[  282.866834][ T5940] dw2102: i2c transfer failed.
[  282.871684][ T5940] dvb-usb: bulk message failed: -22 (6/0)
[  282.877474][ T5940] dw2102: i2c transfer failed.
[  282.882413][ T5940] dvb-usb: bulk message failed: -22 (6/0)
[  282.888174][ T5940] dw2102: i2c transfer failed.
[  282.894139][ T5940] dvb-usb: MAC address: 02:02:02:02:02:02
[  282.921768][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  282.945259][ T5940] dvb-usb: bulk message failed: -22 (3/0)
[  282.951075][ T5940] dw2102: command 0x0e transfer failed.
[  282.956665][ T5940] dvb-usb: bulk message failed: -22 (3/0)
[  282.965503][ T5940] dw2102: command 0x0e transfer failed.
[  283.326164][ T5940] dvb-usb: bulk message failed: -22 (3/0)
[  283.399788][   T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  283.423319][ T5940] dw2102: command 0x0e transfer failed.
[  283.438950][ T5940] dvb-usb: bulk message failed: -22 (3/0)
[  283.439883][ T5812] Bluetooth: hci4: command 0x0c1a tx timeout
[  283.445130][ T5133] Bluetooth: hci3: command 0x0c1a tx timeout
[  283.450781][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout
[  283.456669][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout
[  283.469098][ T5817] Bluetooth: hci0: command 0x0c1a tx timeout
[  283.475307][ T5940] dw2102: command 0x0e transfer failed.
[  283.480905][ T5940] dvb-usb: bulk message failed: -22 (1/0)
[  283.486667][ T5940] dw2102: command 0x51 transfer failed.
[  283.492273][ T5940] dvb-usb: bulk message failed: -22 (5/0)
[  283.498035][ T5940] dw2102: i2c probe for address 0x68 failed.
[  283.504974][ T5940] dvb-usb: bulk message failed: -22 (5/0)
[  283.512666][ T5940] dw2102: i2c probe for address 0x69 failed.
[  283.518689][ T5940] dvb-usb: bulk message failed: -22 (5/0)
[  283.528884][ T5940] dw2102: i2c probe for address 0x6a failed.
[  283.543217][ T5940] dw2102: probing for demodulator failed. Is the external power switched on?
[  283.554940][ T5940] dvb-usb: no frontend was attached by 'TeVii S662'
[  283.600003][   T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  283.620797][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.642030][   T24] usb 5-1: config 0 descriptor??
[  283.659811][ T5940] rc_core: IR keymap rc-tt-1500 not found
[  283.671490][   T24] cp210x 5-1:0.0: cp210x converter detected
[  283.680364][ T5940] Registered IR keymap rc-empty
[  283.708994][ T5940] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  283.728664][ T5940] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input10
[  283.754454][ T5940] dvb-usb: schedule remote query interval to 250 msecs.
[  283.769229][ T8664] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  283.778011][ T5940] dw2102: su3000_power_ctrl: 0, initialized 1
[  283.784630][ T5940] dvb-usb: TeVii S662 successfully initialized and connected.
[  284.040847][ T5940] dvb-usb: bulk message failed: -22 (1/0)
[  284.063495][ T5940] dw2102: i2c transfer failed.
[  284.069087][   T24] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  284.092061][   T24] usb 5-1: cp210x converter now attached to ttyUSB0
[  284.329860][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  284.347856][   T24] dw2102: i2c transfer failed.
[  284.672459][ T5922] usb 4-1: USB disconnect, device number 13
[  284.904087][   T24] usb 5-1: USB disconnect, device number 20
[  284.911192][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  284.952219][ T8683] netlink: 52 bytes leftover after parsing attributes in process `syz.3.762'.
[  285.143621][   T24] cp210x 5-1:0.0: device disconnected
[  285.217166][ T5922] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  285.519780][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout
[  285.818125][ T8702] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  286.185059][ T8701] evm: overlay not supported
[  286.208143][   T30] kauditd_printk_skb: 80 callbacks suppressed
[  286.208156][   T30] audit: type=1326 audit(1762827356.838:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa790d8f6c9 code=0x7ffc0000
[  286.417162][   T30] audit: type=1326 audit(1762827356.838:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa790d8f6c9 code=0x7ffc0000
[  286.784855][ T8710] SQUASHFS error: Failed to read block 0x0: -5
[  286.791361][ T8710] unable to read squashfs_super_block
[  286.994972][   T30] audit: type=1326 audit(1762827356.838:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa790d8f6c9 code=0x7ffc0000
[  287.050088][ T8712] 9pnet_fd: Insufficient options for proto=fd
[  287.132013][   T30] audit: type=1326 audit(1762827356.838:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa790d8f6c9 code=0x7ffc0000
[  287.215851][ T8688] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  287.219915][   T30] audit: type=1326 audit(1762827356.838:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa790d8f6c9 code=0x7ffc0000
[  287.359886][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout
[  287.370251][   T30] audit: type=1326 audit(1762827356.848:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa790d8f6c9 code=0x7ffc0000
[  287.399110][   T30] audit: type=1326 audit(1762827356.848:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa790d8f6c9 code=0x7ffc0000
[  287.423614][   T30] audit: type=1326 audit(1762827356.848:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa790d8f6c9 code=0x7ffc0000
[  287.446986][   T30] audit: type=1326 audit(1762827356.848:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa790d8f6c9 code=0x7ffc0000
[  287.470918][ T8716] nbd0: detected capacity change from 0 to 127
[  287.490210][   T30] audit: type=1326 audit(1762827356.848:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.3.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa790d8f6c9 code=0x7ffc0000
[  287.549797][ T5876] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  287.609783][ T5940] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  287.736923][ T5876] usb 1-1: device descriptor read/64, error -71
[  287.789792][ T5940] usb 5-1: Using ep0 maxpacket: 16
[  287.804509][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.932131][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  288.075924][ T5940] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  288.174749][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.230678][ T5940] usb 5-1: config 0 descriptor??
[  288.245664][ T5940] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  288.395627][ T5876] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  288.672803][ T5876] usb 1-1: device descriptor read/64, error -71
[  289.307800][  T976] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  289.342174][ T5876] usb usb1-port1: attempt power cycle
[  289.505551][  T976] usb 4-1: Using ep0 maxpacket: 8
[  289.518481][  T976] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  289.556939][  T976] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  289.640521][  T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.698238][  T976] usb 4-1: Product: syz
[  289.714140][  T976] usb 4-1: Manufacturer: syz
[  289.719858][ T5876] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  289.727400][  T976] usb 4-1: SerialNumber: syz
[  289.750269][ T5876] usb 1-1: device descriptor read/8, error -71
[  289.757510][  T976] usb 4-1: config 0 descriptor??
[  289.990120][ T5876] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  290.000537][ T8742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.780'.
[  290.012528][   T58] usb 4-1: USB disconnect, device number 14
[  290.019882][   T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  290.020255][ T5876] usb 1-1: device descriptor read/8, error -71
[  290.153283][ T5876] usb usb1-port1: unable to enumerate USB device
[  290.726381][   T58] usb 5-1: USB disconnect, device number 21
[  290.752130][   T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  290.770623][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.788618][   T24] usb 3-1: config 0 descriptor??
[  290.795767][   T24] cp210x 3-1:0.0: cp210x converter detected
[  290.798238][ T5133] block nbd0: Receive control failed (result -104)
[  291.118641][ T8770] program syz.4.785 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  291.225909][   T24] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  291.379825][   T58] usb 5-1: new low-speed USB device number 22 using dummy_hcd
[  291.396082][   T24] usb 3-1: cp210x converter now attached to ttyUSB0
[  291.579779][   T58] usb 5-1: device descriptor read/64, error -71
[  292.172081][   T24] usb 3-1: USB disconnect, device number 23
[  292.184140][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  292.193752][   T24] cp210x 3-1:0.0: device disconnected
[  292.400831][   T58] usb 5-1: new low-speed USB device number 23 using dummy_hcd
[  293.149777][   T58] usb 5-1: device descriptor read/64, error -71
[  293.300274][   T58] usb usb5-port1: attempt power cycle
[  293.630891][ T8799] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.796'.
[  293.720238][ T8805] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  293.758509][ T8805] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  294.024591][   T58] usb 5-1: new low-speed USB device number 24 using dummy_hcd
[  294.082525][   T58] usb 5-1: device descriptor read/8, error -71
[  294.625527][ T8814] Zero length message leads to an empty skb
[  297.005935][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout
[  297.012275][ T8815] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  297.060068][   T58] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  297.351017][   T58] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  297.411586][   T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.550205][   T58] usb 3-1: config 0 descriptor??
[  297.564615][   T58] cp210x 3-1:0.0: cp210x converter detected
[  297.962166][ T8846] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  297.981532][ T8846] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  298.395782][ T8847] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.808'.
[  298.580998][   T58] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  298.855160][   T58] usb 3-1: cp210x converter now attached to ttyUSB0
[  298.893061][ T8831] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  299.021552][ T5876] usb 3-1: USB disconnect, device number 24
[  299.030998][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  299.085207][ T5876] cp210x 3-1:0.0: device disconnected
[  299.199814][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout
[  299.658027][ T8872] fuse: Invalid rootmode
[  299.789785][   T58] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  299.850835][ T5922] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  299.889528][ T8881] SQUASHFS error: Failed to read block 0x0: -5
[  299.897963][ T8881] unable to read squashfs_super_block
[  299.959814][   T58] usb 2-1: Using ep0 maxpacket: 16
[  300.018411][   T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  300.030231][   T58] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  300.044959][   T58] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  300.054033][ T5922] usb 3-1: Using ep0 maxpacket: 8
[  300.062319][   T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.110506][   T58] usb 2-1: config 0 descriptor??
[  300.153661][   T58] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  300.189541][ T5922] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  300.231042][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.248370][ T5922] usb 3-1: Product: syz
[  300.259963][ T5922] usb 3-1: Manufacturer: syz
[  300.264663][ T5922] usb 3-1: SerialNumber: syz
[  300.280681][ T5922] usb 3-1: config 0 descriptor??
[  300.309748][ T5922] usb 3-1: selecting invalid altsetting 3
[  300.324691][ T5922] comedi comedi5: could not set alternate setting 3 in high speed
[  300.338572][ T5922] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device.
[  300.437514][ T5922] usbdux 3-1:0.0: probe with driver usbdux failed with error -22
[  300.602802][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.819'.
[  300.930169][ T3876] usb 3-1: USB disconnect, device number 25
[  301.831336][ T8914] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  302.591349][ T5922] usb 2-1: USB disconnect, device number 18
[  305.376250][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  305.376262][   T30] audit: type=1400 audit(1762827376.478:499): avc:  denied  { connect } for  pid=8956 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  306.409452][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout
[  306.502161][ T8948] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  307.351841][ T8976] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.850'.
[  307.812791][   T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  308.209810][   T24] usb 5-1: Using ep0 maxpacket: 16
[  308.269050][   T24] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  308.287414][   T24] usb 5-1: config 0 has no interface number 0
[  308.312470][   T24] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  308.325774][   T24] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  308.344904][   T24] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  308.354378][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.363615][   T24] usb 5-1: Product: syz
[  308.367849][   T24] usb 5-1: Manufacturer: syz
[  308.373060][   T24] usb 5-1: SerialNumber: syz
[  308.391983][   T24] usb 5-1: config 0 descriptor??
[  308.397509][ T8985] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  308.405235][ T8985] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  308.679929][ T8985] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  308.687111][ T8985] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  308.918001][   T24] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  309.043260][   T24] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  309.077487][ T9001] fuse: Invalid rootmode
[  309.094436][   T24] asix 5-1:0.251: probe with driver asix failed with error -5
[  309.150034][   T24] usb 5-1: USB disconnect, device number 26
[  309.365589][ T9014] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.863'.
[  309.622029][ T5918] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  310.409813][ T5918] usb 2-1: Using ep0 maxpacket: 32
[  310.536579][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  310.550107][ T5918] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  310.559149][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.574149][ T5918] usb 2-1: config 0 descriptor??
[  310.595432][ T5918] dvb-usb: found a 'TeVii S662' in warm state.
[  310.615016][ T5918] dw2102: su3000_power_ctrl: 1, initialized 0
[  310.629752][ T5918] dvb-usb: bulk message failed: -22 (2/0)
[  310.683675][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  310.738065][ T5918] dvbdev: DVB: registering new adapter (TeVii S662)
[  310.793947][ T5918] usb 2-1: media controller created
[  310.817183][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  310.830311][ T5918] dw2102: i2c transfer failed.
[  310.839879][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  310.853670][ T5918] dw2102: i2c transfer failed.
[  310.866925][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  310.914044][ T5918] dw2102: i2c transfer failed.
[  310.931810][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  310.949619][ T5918] dw2102: i2c transfer failed.
[  310.968188][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  310.986294][ T5918] dw2102: i2c transfer failed.
[  310.991794][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  310.997551][ T5918] dw2102: i2c transfer failed.
[  311.003174][ T5918] dvb-usb: MAC address: 02:02:02:02:02:02
[  311.024502][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  311.066874][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  311.074273][ T5918] dw2102: command 0x0e transfer failed.
[  311.084363][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  311.090890][ T5918] dw2102: command 0x0e transfer failed.
[  311.150447][  T976] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  311.475054][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  311.496067][ T9042] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.874'.
[  311.529833][ T5918] dw2102: command 0x0e transfer failed.
[  311.535386][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  311.545601][ T5918] dw2102: command 0x0e transfer failed.
[  311.549764][  T976] usb 5-1: Using ep0 maxpacket: 16
[  311.551193][ T5918] dvb-usb: bulk message failed: -22 (1/0)
[  311.566623][ T5918] dw2102: command 0x51 transfer failed.
[  311.652589][ T5918] dvb-usb: bulk message failed: -22 (5/0)
[  311.658420][ T5918] dw2102: i2c probe for address 0x68 failed.
[  311.664532][ T5918] dvb-usb: bulk message failed: -22 (5/0)
[  311.671872][ T5918] dw2102: i2c probe for address 0x69 failed.
[  311.679178][ T5918] dvb-usb: bulk message failed: -22 (5/0)
[  311.685212][ T5918] dw2102: i2c probe for address 0x6a failed.
[  311.691816][ T5918] dw2102: probing for demodulator failed. Is the external power switched on?
[  311.700653][ T5918] dvb-usb: no frontend was attached by 'TeVii S662'
[  311.709589][  T976] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  312.207020][  T976] usb 5-1: config 0 has no interface number 0
[  312.216340][  T976] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  312.234250][  T976] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  312.262721][ T5918] rc_core: IR keymap rc-tt-1500 not found
[  312.271714][  T976] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  312.285818][ T5918] Registered IR keymap rc-empty
[  312.289365][  T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.307381][  T976] usb 5-1: Product: syz
[  312.315347][  T976] usb 5-1: Manufacturer: syz
[  312.320124][  T976] usb 5-1: SerialNumber: syz
[  312.320834][ T5918] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  312.343042][  T976] usb 5-1: config 0 descriptor??
[  312.348446][ T9031] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  312.403587][ T9031] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  312.426412][ T5918] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input11
[  312.445346][ T5918] dvb-usb: schedule remote query interval to 250 msecs.
[  312.454969][ T5918] dw2102: su3000_power_ctrl: 0, initialized 1
[  312.462699][ T5918] dvb-usb: TeVii S662 successfully initialized and connected.
[  312.503646][ T5918] usb 2-1: USB disconnect, device number 19
[  312.623040][ T5918] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  312.682151][ T9031] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  312.689319][ T9031] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  312.992578][  T976] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  313.006014][  T976] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  313.018591][  T976] asix 5-1:0.251: probe with driver asix failed with error -5
[  313.105691][  T976] usb 5-1: USB disconnect, device number 27
[  316.856940][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  316.857009][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  317.513541][ T5133] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  317.521790][ T5133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  317.540029][ T5133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  317.550371][ T5133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  317.557846][ T5133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  317.622345][   T30] audit: type=1400 audit(1762827388.718:500): avc:  denied  { mounton } for  pid=9115 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  318.330270][  T122] block nbd0: Possible stuck request ffff8880264be000: control (read@0,1024B). Runtime 30 seconds
[  318.341789][  T122] block nbd0: Possible stuck request ffff8880264be1c0: control (read@1024,1024B). Runtime 30 seconds
[  318.352681][  T122] block nbd0: Possible stuck request ffff8880264be380: control (read@2048,1024B). Runtime 30 seconds
[  318.363622][  T122] block nbd0: Possible stuck request ffff8880264be540: control (read@3072,1024B). Runtime 30 seconds
[  319.074839][ T9128] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  319.080952][ T9128] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  319.090086][ T9128] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  319.158917][ T9128] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  319.166186][ T9128] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  319.173423][ T9128] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  319.181423][ T9128] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  319.352471][ T9128] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  319.383200][ T9115] chnl_net:caif_netlink_parms(): no params data found
[  319.820570][ T9115] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.827647][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.834770][ T9115] bridge_slave_0: entered allmulticast mode
[  319.842523][ T9115] bridge_slave_0: entered promiscuous mode
[  319.849434][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.856727][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.867003][ T9115] bridge_slave_1: entered allmulticast mode
[  319.874313][ T9115] bridge_slave_1: entered promiscuous mode
[  319.981769][ T9115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.002164][ T9115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.212365][ T9115] team0: Port device team_slave_0 added
[  320.244680][ T9115] team0: Port device team_slave_1 added
[  320.404928][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.460004][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  320.559373][ T9115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.617365][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.624925][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  320.792046][ T9115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.800101][ T5133] Bluetooth: hci3: command 0x0c1a tx timeout
[  321.800146][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout
[  321.807028][ T5817] Bluetooth: hci0: command 0x0c1a tx timeout
[  321.812569][ T5823] Bluetooth: hci1: command 0x041b tx timeout
[  321.819398][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout
[  322.461219][ T9115] hsr_slave_0: entered promiscuous mode
[  322.467512][ T9115] hsr_slave_1: entered promiscuous mode
[  322.495021][ T9115] debugfs: 'hsr0' already exists in 'hsr'
[  322.539042][ T9115] Cannot create hsr debugfs directory
[  322.959812][ T5876] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  323.212531][ T5876] usb 2-1: Using ep0 maxpacket: 8
[  323.273535][ T5876] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  323.296636][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.329737][ T5876] usb 2-1: Product: syz
[  323.350851][ T5876] usb 2-1: Manufacturer: syz
[  323.369944][ T5876] usb 2-1: SerialNumber: syz
[  323.400721][ T5876] usb 2-1: config 0 descriptor??
[  323.987092][ T5876] usb 2-1: selecting invalid altsetting 3
[  323.993862][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout
[  324.014436][ T5809] Bluetooth: hci1: command 0x041b tx timeout
[  324.040134][ T5876] comedi comedi5: could not set alternate setting 3 in high speed
[  324.050411][ T5876] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device.
[  324.134450][ T5876] usbdux 2-1:0.0: probe with driver usbdux failed with error -22
[  324.135366][ T9164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.910'.
[  324.286549][ T5876] usb 2-1: USB disconnect, device number 20
[  324.514557][ T9115] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  324.525117][ T9115] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  324.537748][ T9115] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  324.549567][ T9115] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  324.727196][ T9115] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.751665][ T9115] 8021q: adding VLAN 0 to HW filter on device team0
[  324.764062][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.771217][ T6090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.803611][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.810780][ T6090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.848684][ T5918] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  324.898223][ T9115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  324.913636][ T9115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  325.262174][ T5918] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  325.293116][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.333704][ T5918] usb 4-1: config 0 descriptor??
[  325.357247][ T5918] cp210x 4-1:0.0: cp210x converter detected
[  325.872812][ T5918] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  325.900432][ T5918] usb 4-1: cp210x converter now attached to ttyUSB0
[  326.019069][ T9115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.084451][ T5809] Bluetooth: hci1: command 0x041b tx timeout
[  326.361441][ T5918] usb 4-1: USB disconnect, device number 15
[  326.371128][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  326.449333][ T5918] cp210x 4-1:0.0: device disconnected
[  326.842845][ T9115] veth0_vlan: entered promiscuous mode
[  326.895105][ T9115] veth1_vlan: entered promiscuous mode
[  326.989129][ T9115] veth0_macvtap: entered promiscuous mode
[  327.023873][ T9115] veth1_macvtap: entered promiscuous mode
[  327.077693][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.566436][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.621209][ T5922] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  327.887383][ T6090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.936137][ T6090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.987245][ T6090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.997224][ T6090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.029777][ T5922] usb 4-1: Using ep0 maxpacket: 16
[  328.038343][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.049869][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.178706][ T5809] Bluetooth: hci1: command 0x041b tx timeout
[  328.229767][   T58] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  328.240985][ T5922] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  328.249147][ T5922] usb 4-1: config 0 has no interface number 0
[  328.255400][ T5922] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  328.265537][ T5922] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  328.298751][ T9094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.306966][ T9094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.325940][   T30] audit: type=1400 audit(1762827399.428:501): avc:  denied  { mount } for  pid=9115 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  328.580554][   T30] audit: type=1400 audit(1762827399.448:502): avc:  denied  { mount } for  pid=9115 comm="syz-executor" name="/" dev="gadgetfs" ino=7518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  328.633956][ T5922] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  328.729947][   T58] usb 3-1: Using ep0 maxpacket: 32
[  328.736725][   T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  328.759208][   T58] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  328.779677][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.790170][ T5922] usb 4-1: Product: syz
[  328.792270][   T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.794329][ T5922] usb 4-1: Manufacturer: syz
[  328.794346][ T5922] usb 4-1: SerialNumber: syz
[  328.838851][   T58] usb 3-1: config 0 descriptor??
[  328.860428][ T5922] usb 4-1: config 0 descriptor??
[  328.865670][   T58] dvb-usb: found a 'TeVii S662' in warm state.
[  328.873943][ T9241] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  328.882417][ T9241] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  328.906297][   T58] dw2102: su3000_power_ctrl: 1, initialized 0
[  328.937003][   T58] dvb-usb: bulk message failed: -22 (2/0)
[  329.008837][   T58] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  329.060552][   T58] dvbdev: DVB: registering new adapter (TeVii S662)
[  329.111085][ T9241] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  329.118505][ T9241] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  329.121429][   T58] usb 3-1: media controller created
[  329.139750][   T58] dvb-usb: bulk message failed: -22 (6/0)
[  329.146373][   T58] dw2102: i2c transfer failed.
[  329.152407][   T58] dvb-usb: bulk message failed: -22 (6/0)
[  329.159237][   T58] dw2102: i2c transfer failed.
[  329.171362][   T58] dvb-usb: bulk message failed: -22 (6/0)
[  329.179910][   T58] dw2102: i2c transfer failed.
[  329.187722][   T58] dvb-usb: bulk message failed: -22 (6/0)
[  329.195311][   T58] dw2102: i2c transfer failed.
[  329.201830][   T58] dvb-usb: bulk message failed: -22 (6/0)
[  329.209381][   T58] dw2102: i2c transfer failed.
[  329.218070][   T58] dvb-usb: bulk message failed: -22 (6/0)
[  329.226748][   T58] dw2102: i2c transfer failed.
[  329.233256][   T58] dvb-usb: MAC address: 02:02:02:02:02:02
[  329.340740][   T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  329.384341][ T5922] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  329.394689][ T5922] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  329.412950][ T5922] asix 4-1:0.251: probe with driver asix failed with error -5
[  329.426223][   T58] dvb-usb: bulk message failed: -22 (3/0)
[  329.451839][ T5922] usb 4-1: USB disconnect, device number 16
[  329.462012][   T58] dw2102: command 0x0e transfer failed.
[  329.515331][   T58] dvb-usb: bulk message failed: -22 (3/0)
[  329.522075][   T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  329.547982][   T58] dw2102: command 0x0e transfer failed.
[  329.679777][   T24] usb 2-1: Using ep0 maxpacket: 32
[  329.753908][   T24] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  329.764370][   T24] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  329.775345][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  329.784727][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.793963][   T24] usb 2-1: Product: syz
[  329.798155][   T24] usb 2-1: Manufacturer: syz
[  330.344670][ T5809] Bluetooth: hci1: command 0x041b tx timeout
[  330.362509][   T58] dvb-usb: bulk message failed: -22 (3/0)
[  330.368308][   T58] dw2102: command 0x0e transfer failed.
[  330.375718][   T24] usb 2-1: SerialNumber: syz
[  330.381481][   T58] dvb-usb: bulk message failed: -22 (3/0)
[  330.395280][   T58] dw2102: command 0x0e transfer failed.
[  330.404322][   T58] dvb-usb: bulk message failed: -22 (1/0)
[  330.411928][   T58] dw2102: command 0x51 transfer failed.
[  330.417575][   T58] dvb-usb: bulk message failed: -22 (5/0)
[  330.423644][   T58] dw2102: i2c probe for address 0x68 failed.
[  330.429761][   T58] dvb-usb: bulk message failed: -22 (5/0)
[  330.435605][   T58] dw2102: i2c probe for address 0x69 failed.
[  330.442088][   T58] dvb-usb: bulk message failed: -22 (5/0)
[  330.447904][   T58] dw2102: i2c probe for address 0x6a failed.
[  330.454621][   T58] dw2102: probing for demodulator failed. Is the external power switched on?
[  330.464154][   T58] dvb-usb: no frontend was attached by 'TeVii S662'
[  330.645426][   T58] rc_core: IR keymap rc-tt-1500 not found
[  330.673454][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.683737][   T58] Registered IR keymap rc-empty
[  330.715609][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.752581][   T30] audit: type=1400 audit(1762827402.858:503): avc:  denied  { getopt } for  pid=9265 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  331.900525][   T58] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  331.982149][   T58] input: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input12
[  332.163519][   T58] dvb-usb: schedule remote query interval to 250 msecs.
[  332.203536][   T58] dw2102: su3000_power_ctrl: 0, initialized 1
[  332.233651][   T30] audit: type=1400 audit(1762827403.108:504): avc:  denied  { setopt } for  pid=9265 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  332.252950][    C1] vkms_vblank_simulate: vblank timer overrun
[  332.303321][   T58] dvb-usb: TeVii S662 successfully initialized and connected.
[  332.363388][   T58] usb 3-1: USB disconnect, device number 26
[  332.504421][ T5809] Bluetooth: hci1: command 0x041b tx timeout
[  332.604422][ T9293] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  334.713127][   T58] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  335.318533][ T9307] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  335.329886][ T9307] block device autoloading is deprecated and will be removed.
[  335.604434][   T30] audit: type=1400 audit(1762827406.388:505): avc:  denied  { read } for  pid=9301 comm="syz.4.941" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  335.652057][   T30] audit: type=1400 audit(1762827406.388:506): avc:  denied  { open } for  pid=9301 comm="syz.4.941" path="/183/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  336.232608][   T24] usb 2-1: USB disconnect, device number 21
[  336.297678][ T9314] kvm: emulating exchange as write
[  336.547401][ T9331] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  338.196423][ T9347] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  339.750924][   T30] audit: type=1400 audit(1762827410.828:507): avc:  denied  { setopt } for  pid=9368 comm="syz.5.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  340.170741][   T30] audit: type=1400 audit(1762827411.258:508): avc:  denied  { nlmsg_write } for  pid=9382 comm="syz.5.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  340.476854][ T9396] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  341.547645][ T9399] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  341.819579][ T9412] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  341.834498][ T9412] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  341.850033][ T9412] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  341.864237][ T9412] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  341.929920][ T9412] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  342.536633][ T9412] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  343.159825][ T5951] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  343.319893][ T5951] usb 4-1: Using ep0 maxpacket: 8
[  343.378506][ T5951] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  343.401342][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.419893][ T5951] usb 4-1: Product: syz
[  343.426954][ T5951] usb 4-1: Manufacturer: syz
[  343.432194][ T5951] usb 4-1: SerialNumber: syz
[  343.448898][ T5951] usb 4-1: config 0 descriptor??
[  343.467019][ T5951] usb 4-1: selecting invalid altsetting 3
[  343.605203][ T5951] comedi comedi5: could not set alternate setting 3 in high speed
[  343.613159][ T5951] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device.
[  343.628653][ T5951] usbdux 4-1:0.0: probe with driver usbdux failed with error -22
[  343.829789][ T9426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.979'.
[  343.840297][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout
[  343.896164][ T5951] usb 4-1: USB disconnect, device number 17
[  343.917191][ T9437] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  343.927555][ T5809] Bluetooth: hci4: command 0x0c1a tx timeout
[  343.934119][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout
[  343.940249][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout
[  344.590673][ T5809] Bluetooth: hci1: command 0x041b tx timeout
[  346.025422][ T5809] Bluetooth: hci4: command 0x0c1a tx timeout
[  347.081873][ T9475] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  347.481677][ T9488] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  347.718528][ T9485] macvtap0: entered allmulticast mode
[  347.736010][ T9485] veth0_macvtap: entered allmulticast mode
[  348.640506][  T122] block nbd0: Possible stuck request ffff8880264be000: control (read@0,1024B). Runtime 60 seconds
[  348.651218][  T122] block nbd0: Possible stuck request ffff8880264be1c0: control (read@1024,1024B). Runtime 60 seconds
[  348.662216][  T122] block nbd0: Possible stuck request ffff8880264be380: control (read@2048,1024B). Runtime 60 seconds
[  348.673604][  T122] block nbd0: Possible stuck request ffff8880264be540: control (read@3072,1024B). Runtime 60 seconds
[  349.161219][ T9503] FAULT_INJECTION: forcing a failure.
[  349.161219][ T9503] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  349.244238][ T9503] CPU: 1 UID: 0 PID: 9503 Comm: syz.5.999 Not tainted syzkaller #0 PREEMPT(full) 
[  349.244263][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  349.244272][ T9503] Call Trace:
[  349.244279][ T9503]  <TASK>
[  349.244285][ T9503]  dump_stack_lvl+0x16c/0x1f0
[  349.244315][ T9503]  should_fail_ex+0x512/0x640
[  349.244339][ T9503]  _copy_to_user+0x32/0xd0
[  349.244362][ T9503]  simple_read_from_buffer+0xcb/0x170
[  349.244385][ T9503]  proc_fail_nth_read+0x197/0x240
[  349.244397][ T9503]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  349.244410][ T9503]  ? rw_verify_area+0xcf/0x6c0
[  349.244428][ T9503]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  349.244440][ T9503]  vfs_read+0x1e4/0xcf0
[  349.244451][ T9503]  ? __pfx___mutex_lock+0x10/0x10
[  349.244462][ T9503]  ? __pfx_vfs_read+0x10/0x10
[  349.244475][ T9503]  ? __fget_files+0x20e/0x3c0
[  349.244489][ T9503]  ksys_read+0x12a/0x250
[  349.244498][ T9503]  ? __pfx_ksys_read+0x10/0x10
[  349.244508][ T9503]  ? fput+0x9b/0xd0
[  349.244521][ T9503]  do_syscall_64+0xcd/0xfa0
[  349.244532][ T9503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.244543][ T9503] RIP: 0033:0x7f9f60f8e0dc
[  349.244551][ T9503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  349.244561][ T9503] RSP: 002b:00007f9f61efe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  349.244572][ T9503] RAX: ffffffffffffffda RBX: 00007f9f611e5fa0 RCX: 00007f9f60f8e0dc
[  349.244578][ T9503] RDX: 000000000000000f RSI: 00007f9f61efe0a0 RDI: 0000000000000004
[  349.244584][ T9503] RBP: 00007f9f61efe090 R08: 0000000000000000 R09: 0000000000000000
[  349.244590][ T9503] R10: 0000000000004005 R11: 0000000000000246 R12: 0000000000000001
[  349.244596][ T9503] R13: 00007f9f611e6038 R14: 00007f9f611e5fa0 R15: 00007ffd97177008
[  349.244610][ T9503]  </TASK>
[  350.372279][ T9516] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  350.382101][ T9516] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  350.909992][ T5918] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  350.955743][ T9525] FAULT_INJECTION: forcing a failure.
[  350.955743][ T9525] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  351.059981][ T5918] usb 4-1: Using ep0 maxpacket: 8
[  351.072615][ T9525] CPU: 1 UID: 0 PID: 9525 Comm: syz.4.1005 Not tainted syzkaller #0 PREEMPT(full) 
[  351.072637][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  351.072648][ T9525] Call Trace:
[  351.072654][ T9525]  <TASK>
[  351.072660][ T9525]  dump_stack_lvl+0x16c/0x1f0
[  351.072691][ T9525]  should_fail_ex+0x512/0x640
[  351.072716][ T9525]  copy_fpstate_to_sigframe+0x854/0xaf0
[  351.072745][ T9525]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  351.072768][ T9525]  ? posixtimer_deliver_signal+0x105/0x6b0
[  351.072794][ T9525]  ? x86_task_fpu+0x5f/0x90
[  351.072817][ T9525]  get_sigframe+0x4a8/0x9c0
[  351.072840][ T9525]  ? __pfx_get_sigframe+0x10/0x10
[  351.072860][ T9525]  ? trace_irq_enable.constprop.0+0x2f/0x120
[  351.072885][ T9525]  ? _raw_spin_unlock_irq+0x29/0x50
[  351.072922][ T9525]  ? siginfo_layout+0x177/0x290
[  351.072946][ T9525]  x64_setup_rt_frame+0x12e/0xcf0
[  351.072973][ T9525]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  351.073001][ T9525]  arch_do_signal_or_restart+0x5e4/0x7c0
[  351.073021][ T9525]  ? __fget_files+0x20e/0x3c0
[  351.073039][ T9525]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  351.073068][ T9525]  ? ksys_write+0x1ac/0x250
[  351.073084][ T9525]  ? __pfx_ksys_write+0x10/0x10
[  351.073106][ T9525]  exit_to_user_mode_loop+0x85/0x130
[  351.073126][ T9525]  do_syscall_64+0x426/0xfa0
[  351.073145][ T9525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.073161][ T9525] RIP: 0033:0x7f67d158e17f
[  351.073174][ T9525] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  351.073190][ T9525] RSP: 002b:00007f67d2346030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  351.073206][ T9525] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00007f67d158e17f
[  351.073216][ T9525] RDX: 0000000000000001 RSI: 00007f67d2346090 RDI: 0000000000000004
[  351.073226][ T9525] RBP: 00007f67d2346090 R08: 0000000000000000 R09: 00007f67d2345df7
[  351.073236][ T9525] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  351.073245][ T9525] R13: 00007f67d17e6038 R14: 00007f67d17e5fa0 R15: 00007ffe5ff7fea8
[  351.073270][ T9525]  </TASK>
[  351.347392][ T5918] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  351.380568][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.388605][ T5918] usb 4-1: Product: syz
[  351.395157][ T5918] usb 4-1: Manufacturer: syz
[  351.402841][ T5918] usb 4-1: SerialNumber: syz
[  351.411920][ T5918] usb 4-1: config 0 descriptor??
[  351.413383][ T9531] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  351.430847][ T5918] usb 4-1: selecting invalid altsetting 3
[  351.436645][ T5918] comedi comedi5: could not set alternate setting 3 in high speed
[  351.444503][ T5918] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device.
[  351.457562][ T5918] usbdux 4-1:0.0: probe with driver usbdux failed with error -22
[  351.783535][ T5918] usb 4-1: USB disconnect, device number 18
[  351.886594][ T9554] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  352.380704][   T30] audit: type=1400 audit(1762827423.478:509): avc:  denied  { setopt } for  pid=9557 comm="syz.3.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  352.525247][   T30] audit: type=1400 audit(1762827423.478:510): avc:  denied  { ioctl } for  pid=9557 comm="syz.3.1014" path="socket:[28742]" dev="sockfs" ino=28742 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  352.550668][ T9560] wg2 speed is unknown, defaulting to 1000
[  352.591906][   T30] audit: type=1400 audit(1762827423.508:511): avc:  denied  { read } for  pid=9557 comm="syz.3.1014" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  352.658732][ T9560] wg2 speed is unknown, defaulting to 1000
[  352.762358][ T9560] wg2 speed is unknown, defaulting to 1000
[  352.832266][   T30] audit: type=1400 audit(1762827423.508:512): avc:  denied  { ioctl } for  pid=9557 comm="syz.3.1014" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  352.972034][   T30] audit: type=1400 audit(1762827423.688:513): avc:  denied  { append } for  pid=9561 comm="syz.2.1015" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  354.147806][   T30] audit: type=1400 audit(1762827424.848:514): avc:  denied  { create } for  pid=9573 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  354.232905][ T5918] wg2 speed is unknown, defaulting to 1000
[  354.240068][ T9560] infiniband syz0: set active
[  354.244849][ T9560] infiniband syz0: added wg2
[  354.257689][ T9560] syz0: rxe_create_cq: returned err = -12
[  354.277540][ T9560] infiniband syz0: Couldn't create ib_mad CQ
[  354.325284][ T9560] infiniband syz0: Couldn't open port 1
[  354.523475][ T9560] RDS/IB: syz0: added
[  354.551236][ T9560] smc: adding ib device syz0 with port count 1
[  354.578594][ T9560] smc:    ib device syz0 port 1 has no pnetid
[  354.833004][ T5876] wg2 speed is unknown, defaulting to 1000
[  354.984241][ T9560] wg2 speed is unknown, defaulting to 1000
[  355.243721][ T9560] wg2 speed is unknown, defaulting to 1000
[  355.459745][ T5876] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  355.629878][ T5876] usb 5-1: Using ep0 maxpacket: 16
[  355.660826][ T5876] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  355.688139][ T5876] usb 5-1: config 0 has no interface number 0
[  355.710724][ T5876] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  355.726599][ T5876] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  355.746841][ T5876] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  355.766245][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.793037][ T5876] usb 5-1: Product: syz
[  355.808181][ T5876] usb 5-1: Manufacturer: syz
[  355.813269][ T5876] usb 5-1: SerialNumber: syz
[  355.881292][ T5876] usb 5-1: config 0 descriptor??
[  355.910691][ T9560] wg2 speed is unknown, defaulting to 1000
[  355.920125][ T9591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  355.927344][ T9591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  356.660627][ T9591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  356.670475][ T9591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  356.896152][ T9560] wg2 speed is unknown, defaulting to 1000
[  356.905495][ T5876] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  356.947541][ T5876] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  356.979344][ T5876] asix 5-1:0.251: probe with driver asix failed with error -5
[  357.020628][ T5876] usb 5-1: USB disconnect, device number 28
[  357.713989][ T9560] wg2 speed is unknown, defaulting to 1000
[  358.278107][ T9560] wg2 speed is unknown, defaulting to 1000
[  358.308856][ T9635] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  358.618885][ T9650] FAULT_INJECTION: forcing a failure.
[  358.618885][ T9650] name failslab, interval 1, probability 0, space 0, times 0
[  358.631824][ T9650] CPU: 0 UID: 0 PID: 9650 Comm: syz.4.1043 Not tainted syzkaller #0 PREEMPT(full) 
[  358.631846][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  358.631856][ T9650] Call Trace:
[  358.631860][ T9650]  <TASK>
[  358.631864][ T9650]  dump_stack_lvl+0x16c/0x1f0
[  358.631884][ T9650]  should_fail_ex+0x512/0x640
[  358.631897][ T9650]  ? fs_reclaim_acquire+0xae/0x150
[  358.631910][ T9650]  should_failslab+0xc2/0x120
[  358.631922][ T9650]  __kmalloc_noprof+0xdd/0x880
[  358.631936][ T9650]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  358.631952][ T9650]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  358.631963][ T9650]  tomoyo_realpath_from_path+0xc2/0x6e0
[  358.631978][ T9650]  tomoyo_path_number_perm+0x245/0x580
[  358.631987][ T9650]  ? tomoyo_path_number_perm+0x237/0x580
[  358.631997][ T9650]  ? io_schedule_timeout+0x124/0x150
[  358.632012][ T9650]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  358.632035][ T9650]  ? hook_file_ioctl_common+0x36/0x410
[  358.632050][ T9650]  ? hook_file_ioctl_common+0x66/0x410
[  358.632064][ T9650]  ? hook_file_ioctl_common+0x145/0x410
[  358.632080][ T9650]  ? __fget_files+0x20e/0x3c0
[  358.632093][ T9650]  security_file_ioctl+0x9b/0x240
[  358.632105][ T9650]  __x64_sys_ioctl+0xb7/0x210
[  358.632120][ T9650]  do_syscall_64+0xcd/0xfa0
[  358.632131][ T9650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.632142][ T9650] RIP: 0033:0x7f67d158f6c9
[  358.632150][ T9650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  358.632160][ T9650] RSP: 002b:00007f67cf7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  358.632171][ T9650] RAX: ffffffffffffffda RBX: 00007f67d17e6090 RCX: 00007f67d158f6c9
[  358.632177][ T9650] RDX: 0000200000000100 RSI: 00000000800452d2 RDI: 0000000000000006
[  358.632184][ T9650] RBP: 00007f67cf7f6090 R08: 0000000000000000 R09: 0000000000000000
[  358.632189][ T9650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  358.632195][ T9650] R13: 00007f67d17e6128 R14: 00007f67d17e6090 R15: 00007ffe5ff7fea8
[  358.632209][ T9650]  </TASK>
[  358.858411][ T9650] ERROR: Out of memory at tomoyo_realpath_from_path.
[  361.324307][ T9654] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  361.348294][ T9654] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  361.399835][ T9654] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  361.408558][ T9654] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  361.414756][ T9654] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  361.809747][ T5918] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  361.969276][ T9689] fuse: Invalid rootmode
[  361.998995][ T5918] usb 3-1: Using ep0 maxpacket: 16
[  362.005570][ T5918] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  362.025197][ T5918] usb 3-1: config 0 has no interface number 0
[  362.064031][ T5918] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  362.065675][ T9689] wg2 speed is unknown, defaulting to 1000
[  362.560622][ T5918] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  362.577238][ T5918] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  362.586470][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.594529][ T5918] usb 3-1: Product: syz
[  362.599033][ T5918] usb 3-1: Manufacturer: syz
[  362.603763][ T5918] usb 3-1: SerialNumber: syz
[  362.745638][ T5918] usb 3-1: config 0 descriptor??
[  362.767060][ T9686] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  362.774769][ T9686] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  363.024240][ T9686] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  363.031955][ T9686] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  363.378242][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout
[  363.378249][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout
[  363.444880][ T5809] Bluetooth: hci1: command 0x041b tx timeout
[  363.450908][ T5809] Bluetooth: hci4: command 0x0c1a tx timeout
[  363.456883][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout
[  363.487955][ T5918] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  363.529753][ T5918] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  363.545413][ T5918] asix 3-1:0.251: probe with driver asix failed with error -5
[  363.561003][ T5918] usb 3-1: USB disconnect, device number 27
[  363.645697][   T30] audit: type=1400 audit(1762827434.728:515): avc:  denied  { ioctl } for  pid=9714 comm="syz.5.1061" path="/28/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  364.944005][   T30] audit: type=1400 audit(1762827435.868:516): avc:  denied  { create } for  pid=9733 comm="syz.4.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  365.207114][   T30] audit: type=1400 audit(1762827436.138:517): avc:  denied  { setopt } for  pid=9733 comm="syz.4.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  365.312841][   T30] audit: type=1400 audit(1762827436.268:518): avc:  denied  { mount } for  pid=9733 comm="syz.4.1067" name="/" dev="ramfs" ino=30594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  366.333134][ T9755] pim6reg: entered allmulticast mode
[  366.760083][ T9766] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  366.830372][ T5918] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  366.992803][ T5918] usb 6-1: Using ep0 maxpacket: 8
[  367.002943][ T9758] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  367.013735][ T5918] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  367.032583][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.069751][ T5918] usb 6-1: Product: syz
[  367.086195][ T5918] usb 6-1: Manufacturer: syz
[  367.109835][ T5918] usb 6-1: SerialNumber: syz
[  367.137363][ T5918] usb 6-1: config 0 descriptor??
[  367.155686][ T5918] usb 6-1: selecting invalid altsetting 3
[  367.165199][ T5918] comedi comedi5: could not set alternate setting 3 in high speed
[  367.226159][ T5918] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device.
[  367.317616][ T5918] usbdux 6-1:0.0: probe with driver usbdux failed with error -22
[  367.548697][ T5918] usb 6-1: USB disconnect, device number 2
[  368.239760][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout
[  368.289849][   T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  368.310289][   T30] audit: type=1400 audit(1762827439.388:519): avc:  denied  { ioctl } for  pid=9796 comm="syz.2.1084" path="socket:[29435]" dev="sockfs" ino=29435 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  368.448489][   T24] usb 5-1: device descriptor read/64, error -71
[  368.455313][   T30] audit: type=1400 audit(1762827439.398:520): avc:  denied  { accept } for  pid=9796 comm="syz.2.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  368.474852][   T30] audit: type=1400 audit(1762827439.398:521): avc:  denied  { write } for  pid=9796 comm="syz.2.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  368.495932][   T30] audit: type=1400 audit(1762827439.418:522): avc:  denied  { listen } for  pid=9796 comm="syz.2.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  368.602253][ T9802] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  369.099727][   T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  369.276254][   T24] usb 5-1: device descriptor read/64, error -71
[  369.390315][   T24] usb usb5-port1: attempt power cycle
[  369.476634][ T9812] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  369.651628][ T9820] netlink: 'syz.2.1092': attribute type 72 has an invalid length.
[  369.732347][   T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  369.783574][   T24] usb 5-1: device descriptor read/8, error -71
[  370.069742][   T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  370.094061][   T24] usb 5-1: device descriptor read/8, error -71
[  370.259785][ T9833] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  370.379695][   T24] usb usb5-port1: unable to enumerate USB device
[  371.857938][ T9856] netlink: 'syz.2.1104': attribute type 72 has an invalid length.
[  371.915858][ T9854] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  372.637346][   T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  372.908685][   T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  373.365570][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.384363][   T24] usb 6-1: Product: syz
[  373.396448][   T24] usb 6-1: Manufacturer: syz
[  373.407119][   T24] usb 6-1: SerialNumber: syz
[  373.426807][   T24] usb 6-1: config 0 descriptor??
[  373.663379][ T9870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.690045][ T9870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.826376][ T5951] usb 6-1: USB disconnect, device number 3
[  374.359757][ T5922] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  374.388182][ T9874] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  374.559898][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout
[  374.599736][ T5922] usb 2-1: Using ep0 maxpacket: 32
[  374.640790][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  374.661778][ T5922] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  374.671130][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.690985][ T5922] usb 2-1: config 0 descriptor??
[  374.730132][ T5922] dvb-usb: found a 'TeVii S662' in warm state.
[  374.763756][ T9897] netlink: 'syz.3.1116': attribute type 72 has an invalid length.
[  374.764276][ T5922] dw2102: su3000_power_ctrl: 1, initialized 0
[  374.961527][ T5922] dvb-usb: bulk message failed: -22 (2/0)
[  374.972569][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  374.991432][ T5922] dvbdev: DVB: registering new adapter (TeVii S662)
[  374.999178][ T5922] usb 2-1: media controller created
[  375.006565][ T5922] dvb-usb: bulk message failed: -22 (6/0)
[  375.019919][ T5922] dw2102: i2c transfer failed.
[  375.024749][ T5922] dvb-usb: bulk message failed: -22 (6/0)
[  375.030537][ T5922] dw2102: i2c transfer failed.
[  375.036382][ T5922] dvb-usb: bulk message failed: -22 (6/0)
[  375.042405][ T5922] dw2102: i2c transfer failed.
[  375.048237][ T5922] dvb-usb: bulk message failed: -22 (6/0)
[  375.054574][ T5922] dw2102: i2c transfer failed.
[  375.064567][ T5922] dvb-usb: bulk message failed: -22 (6/0)
[  375.084575][ T5922] dw2102: i2c transfer failed.
[  375.108735][ T5922] dvb-usb: bulk message failed: -22 (6/0)
[  375.115188][ T5922] dw2102: i2c transfer failed.
[  375.121089][ T5922] dvb-usb: MAC address: 02:02:02:02:02:02
[  375.303047][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  375.318651][ T5922] dvb-usb: bulk message failed: -22 (3/0)
[  375.324641][ T5922] dw2102: command 0x0e transfer failed.
[  375.330675][ T5922] dvb-usb: bulk message failed: -22 (3/0)
[  375.562046][ T9913] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  375.803739][ T5922] dw2102: command 0x0e transfer failed.
[  376.126211][ T5922] dvb-usb: bulk message failed: -22 (3/0)
[  376.132085][ T5922] dw2102: command 0x0e transfer failed.
[  376.138705][ T5922] dvb-usb: bulk message failed: -22 (3/0)
[  376.145807][ T5922] dw2102: command 0x0e transfer failed.
[  376.152844][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[  376.158702][ T5922] dw2102: command 0x51 transfer failed.
[  376.165904][ T5922] dvb-usb: bulk message failed: -22 (5/0)
[  376.174581][ T5922] dw2102: i2c probe for address 0x68 failed.
[  376.192355][ T5922] dvb-usb: bulk message failed: -22 (5/0)
[  376.198193][ T5922] dw2102: i2c probe for address 0x69 failed.
[  376.211646][ T5922] dvb-usb: bulk message failed: -22 (5/0)
[  376.217478][ T5922] dw2102: i2c probe for address 0x6a failed.
[  376.227279][ T5922] dw2102: probing for demodulator failed. Is the external power switched on?
[  376.251360][ T5922] dvb-usb: no frontend was attached by 'TeVii S662'
[  376.479226][ T5922] rc_core: IR keymap rc-tt-1500 not found
[  376.490274][ T5922] Registered IR keymap rc-empty
[  376.496834][ T5922] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  376.511971][ T5922] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input13
[  376.521765][ T5922] dvb-usb: schedule remote query interval to 250 msecs.
[  376.528715][ T5922] dw2102: su3000_power_ctrl: 0, initialized 1
[  376.535213][ T5922] dvb-usb: TeVii S662 successfully initialized and connected.
[  376.779729][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[  376.785472][ T5922] dw2102: i2c transfer failed.
[  376.917560][ T5922] usb 2-1: USB disconnect, device number 22
[  377.188874][ T5922] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  378.043454][ T9950] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  378.409180][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  378.426246][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  378.431601][ T9951] FAULT_INJECTION: forcing a failure.
[  378.431601][ T9951] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  378.445891][ T9951] CPU: 0 UID: 0 PID: 9951 Comm: syz.5.1130 Not tainted syzkaller #0 PREEMPT(full) 
[  378.445913][ T9951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  378.445922][ T9951] Call Trace:
[  378.445927][ T9951]  <TASK>
[  378.445933][ T9951]  dump_stack_lvl+0x16c/0x1f0
[  378.445964][ T9951]  should_fail_ex+0x512/0x640
[  378.445986][ T9951]  _copy_to_user+0x32/0xd0
[  378.446008][ T9951]  simple_read_from_buffer+0xcb/0x170
[  378.446037][ T9951]  proc_fail_nth_read+0x197/0x240
[  378.446057][ T9951]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  378.446078][ T9951]  ? rw_verify_area+0xcf/0x6c0
[  378.446102][ T9951]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  378.446121][ T9951]  vfs_read+0x1e4/0xcf0
[  378.446141][ T9951]  ? __pfx___mutex_lock+0x10/0x10
[  378.446158][ T9951]  ? __pfx_vfs_read+0x10/0x10
[  378.446181][ T9951]  ? __fget_files+0x20e/0x3c0
[  378.446196][ T9951]  ? fput+0x90/0xd0
[  378.446223][ T9951]  ksys_read+0x12a/0x250
[  378.446237][ T9951]  ? __pfx_ksys_read+0x10/0x10
[  378.446260][ T9951]  do_syscall_64+0xcd/0xfa0
[  378.446278][ T9951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.446295][ T9951] RIP: 0033:0x7f9f60f8e0dc
[  378.446309][ T9951] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  378.446325][ T9951] RSP: 002b:00007f9f61edd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  378.446341][ T9951] RAX: ffffffffffffffda RBX: 00007f9f611e6090 RCX: 00007f9f60f8e0dc
[  378.446352][ T9951] RDX: 000000000000000f RSI: 00007f9f61edd0a0 RDI: 0000000000000007
[  378.446362][ T9951] RBP: 00007f9f61edd090 R08: 0000000000000000 R09: 0000000000000000
[  378.446371][ T9951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  378.446381][ T9951] R13: 00007f9f611e6128 R14: 00007f9f611e6090 R15: 00007ffd97177008
[  378.446405][ T9951]  </TASK>
[  378.919245][  T122] block nbd0: Possible stuck request ffff8880264be000: control (read@0,1024B). Runtime 90 seconds
[  378.930138][  T122] block nbd0: Possible stuck request ffff8880264be1c0: control (read@1024,1024B). Runtime 90 seconds
[  378.941128][  T122] block nbd0: Possible stuck request ffff8880264be380: control (read@2048,1024B). Runtime 90 seconds
[  378.953396][  T122] block nbd0: Possible stuck request ffff8880264be540: control (read@3072,1024B). Runtime 90 seconds
[  378.981347][ T9948] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1128'.
[  379.547903][ T9959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  379.708412][   T30] audit: type=1400 audit(1762827450.808:523): avc:  denied  { map } for  pid=9953 comm="syz.2.1131" path="socket:[31509]" dev="sockfs" ino=31509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  379.733135][ T9960] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9960 comm=syz.2.1131
[  379.889724][   T30] audit: type=1326 audit(1762827450.988:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.2.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573558f6c9 code=0x7fc00000
[  381.355647][T10002] macvtap0: entered allmulticast mode
[  381.361111][T10002] veth0_macvtap: entered allmulticast mode
[  381.872388][T10010] macvtap0: entered allmulticast mode
[  381.897018][T10010] veth0_macvtap: entered allmulticast mode
[  382.138775][ T9992] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  382.167872][ T9992] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  382.174626][ T9992] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  382.299101][ T9992] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  382.983169][ T9992] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  382.997814][ T9992] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  383.352529][T10018] binder: 10017:10018 ioctl c0306201 2000000003c0 returned -14
[  383.529823][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout
[  383.874560][T10033] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1152'.
[  384.239781][ T5133] Bluetooth: hci3: command 0x0c1a tx timeout
[  384.239803][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout
[  384.356103][ T5940] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  384.521484][ T5940] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  384.560334][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.580273][ T5940] usb 5-1: config 0 descriptor??
[  384.591989][ T5940] cp210x 5-1:0.0: cp210x converter detected
[  385.055510][ T5809] Bluetooth: hci1: command 0x041b tx timeout
[  385.063144][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout
[  385.252069][ T5940] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  385.300418][ T5940] usb 5-1: cp210x converter now attached to ttyUSB0
[  385.452492][T10051] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  385.738704][ T5940] usb 5-1: USB disconnect, device number 33
[  385.754284][ T5940] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  385.785174][ T5940] cp210x 5-1:0.0: device disconnected
[  386.369728][ T5133] Bluetooth: hci3: command 0x0c1a tx timeout
[  386.376314][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'.
[  386.881274][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout
[  387.046691][T10076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  388.563772][T10102] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  389.386534][T10107] fuse: Invalid rootmode
[  389.471924][T10107] wg2 speed is unknown, defaulting to 1000
[  395.869714][   T58] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  395.974914][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1193'.
[  395.983990][T10196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1193'.
[  395.993606][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1193'.
[  396.004764][T10196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1193'.
[  396.020023][   T58] usb 3-1: Using ep0 maxpacket: 16
[  396.435951][   T58] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  396.444154][   T58] usb 3-1: config 0 has no interface number 0
[  396.450333][   T58] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  396.476546][   T58] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  396.506657][   T58] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  396.518642][   T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.533550][   T58] usb 3-1: Product: syz
[  396.537763][   T58] usb 3-1: Manufacturer: syz
[  396.543918][   T58] usb 3-1: SerialNumber: syz
[  396.638831][   T58] usb 3-1: config 0 descriptor??
[  396.647606][T10193] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  396.655300][T10193] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  396.954307][T10193] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  396.988320][T10193] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  397.155273][T10203] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  397.250661][   T58] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  397.310402][   T58] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  397.331990][   T58] asix 3-1:0.251: probe with driver asix failed with error -5
[  397.360047][   T58] usb 3-1: USB disconnect, device number 28
[  397.449735][ T5922] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  397.637543][T10219] macvtap0: entered allmulticast mode
[  397.643083][T10219] veth0_macvtap: entered allmulticast mode
[  397.753785][ T5922] usb 4-1: Using ep0 maxpacket: 8
[  397.783368][ T5922] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  397.794275][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.802617][ T5922] usb 4-1: Product: syz
[  397.806888][ T5922] usb 4-1: Manufacturer: syz
[  397.825785][ T5922] usb 4-1: SerialNumber: syz
[  397.974088][ T5922] usb 4-1: config 0 descriptor??
[  398.044398][ T5922] usb 4-1: selecting invalid altsetting 3
[  398.050967][ T5922] comedi comedi5: could not set alternate setting 3 in high speed
[  398.058790][ T5922] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device.
[  398.092094][ T5922] usbdux 4-1:0.0: probe with driver usbdux failed with error -22
[  398.304766][ T5951] usb 4-1: USB disconnect, device number 19
[  398.620053][T10231] macvtap0: entered allmulticast mode
[  398.625451][T10231] veth0_macvtap: entered allmulticast mode
[  400.314166][T10247] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  401.227136][ T5951] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  401.449708][ T5951] usb 5-1: Using ep0 maxpacket: 8
[  401.458490][ T5951] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  401.508814][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.528926][ T5951] usb 5-1: Product: syz
[  401.630205][ T5951] usb 5-1: Manufacturer: syz
[  401.634822][ T5951] usb 5-1: SerialNumber: syz
[  401.645861][T10257] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  401.660768][ T5951] usb 5-1: config 0 descriptor??
[  401.674610][ T5951] usb 5-1: selecting invalid altsetting 3
[  401.690304][ T5951] comedi comedi5: could not set alternate setting 3 in high speed
[  401.703613][ T5951] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device.
[  401.731284][ T5951] usbdux 5-1:0.0: probe with driver usbdux failed with error -22
[  401.904905][ T5951] usb 5-1: USB disconnect, device number 34
[  402.040282][T10259] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  402.046869][T10259] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  402.063641][T10259] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  402.079112][T10259] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  402.097564][T10259] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  402.116700][T10259] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  402.150337][T10259] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  402.420131][ T5940] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  402.888602][ T5876] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  402.939829][ T5940] usb 3-1: Using ep0 maxpacket: 16
[  402.962596][ T5940] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  402.989754][ T5940] usb 3-1: config 0 has no interface number 0
[  402.996654][ T5940] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  403.039726][ T5940] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  403.061081][ T5940] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  403.061263][ T5876] usb 6-1: Using ep0 maxpacket: 32
[  403.084604][ T5876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  403.087158][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.152117][ T5876] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  403.179839][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.224532][ T5876] usb 6-1: config 0 descriptor??
[  403.245052][ T5940] usb 3-1: Product: syz
[  403.250043][ T5940] usb 3-1: Manufacturer: syz
[  403.255014][ T5940] usb 3-1: SerialNumber: syz
[  403.263996][ T5940] usb 3-1: config 0 descriptor??
[  403.269473][T10263] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  403.280258][ T5876] dvb-usb: found a 'TeVii S662' in warm state.
[  403.289339][T10263] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  403.294378][ T5876] dw2102: su3000_power_ctrl: 1, initialized 0
[  403.311197][T10282] Attempt to restore checkpoint with obsolete wellknown handles
[  403.325727][ T5876] dvb-usb: bulk message failed: -22 (2/0)
[  403.347892][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  403.358635][ T5876] dvbdev: DVB: registering new adapter (TeVii S662)
[  403.381516][ T5876] usb 6-1: media controller created
[  403.398027][ T5876] dvb-usb: bulk message failed: -22 (6/0)
[  403.415541][ T5876] dw2102: i2c transfer failed.
[  403.445298][ T5876] dvb-usb: bulk message failed: -22 (6/0)
[  403.463245][ T5876] dw2102: i2c transfer failed.
[  403.488857][ T5876] dvb-usb: bulk message failed: -22 (6/0)
[  403.494977][ T5876] dw2102: i2c transfer failed.
[  403.503323][ T5876] dvb-usb: bulk message failed: -22 (6/0)
[  403.509426][ T5876] dw2102: i2c transfer failed.
[  403.523572][T10263] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  403.523775][ T5876] dvb-usb: bulk message failed: -22 (6/0)
[  403.614308][T10288] fuse: Invalid rootmode
[  403.727431][T10288] wg2 speed is unknown, defaulting to 1000
[  403.952201][T10263] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  404.090528][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout
[  404.091148][ T5133] Bluetooth: hci2: command 0x0c1a tx timeout
[  404.098680][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout
[  404.210344][ T5809] Bluetooth: hci1: command 0x041b tx timeout
[  404.216443][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout
[  404.224805][ T5876] dw2102: i2c transfer failed.
[  404.241740][ T5876] dvb-usb: bulk message failed: -22 (6/0)
[  404.259436][ T5876] dw2102: i2c transfer failed.
[  404.275279][ T5876] dvb-usb: MAC address: 02:02:02:02:02:02
[  404.285193][ T5940] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  404.342390][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  404.415922][ T5876] dvb-usb: bulk message failed: -22 (3/0)
[  404.444165][ T5876] dw2102: command 0x0e transfer failed.
[  404.452976][ T5940] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  404.463691][ T5940] asix 3-1:0.251: probe with driver asix failed with error -5
[  404.478625][ T5876] dvb-usb: bulk message failed: -22 (3/0)
[  404.497592][ T5876] dw2102: command 0x0e transfer failed.
[  404.542782][ T5940] usb 3-1: USB disconnect, device number 29
[  405.062610][ T5876] dvb-usb: bulk message failed: -22 (3/0)
[  405.178143][T10304] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  405.523752][ T5876] dw2102: command 0x0e transfer failed.
[  405.530145][ T5876] dvb-usb: bulk message failed: -22 (3/0)
[  405.535914][ T5876] dw2102: command 0x0e transfer failed.
[  405.541514][ T5876] dvb-usb: bulk message failed: -22 (1/0)
[  405.630358][ T5876] dw2102: command 0x51 transfer failed.
[  405.682613][ T5876] dvb-usb: bulk message failed: -22 (5/0)
[  405.688342][ T5876] dw2102: i2c probe for address 0x68 failed.
[  405.740358][ T5876] dvb-usb: bulk message failed: -22 (5/0)
[  405.750519][ T5876] dw2102: i2c probe for address 0x69 failed.
[  405.756491][ T5876] dvb-usb: bulk message failed: -22 (5/0)
[  405.844729][ T5876] dw2102: i2c probe for address 0x6a failed.
[  405.864926][ T5876] dw2102: probing for demodulator failed. Is the external power switched on?
[  405.901164][   T24] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[  405.918876][ T5876] dvb-usb: no frontend was attached by 'TeVii S662'
[  406.029697][ T5876] rc_core: IR keymap rc-tt-1500 not found
[  406.035826][ T5876] Registered IR keymap rc-empty
[  406.050116][ T5876] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  406.061488][   T24] usb 3-1: not running at top speed; connect to a high speed hub
[  406.070214][   T24] usb 3-1: config 1 interface 0 has no altsetting 0
[  406.078404][   T24] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  406.089195][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.107503][   T24] usb 3-1: Product: syz
[  406.119844][   T58] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  406.129725][   T24] usb 3-1: Manufacturer: syz
[  406.131583][ T5876] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input15
[  406.134305][   T24] usb 3-1: SerialNumber: syz
[  406.159990][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout
[  406.181685][ T5876] dvb-usb: schedule remote query interval to 250 msecs.
[  406.214352][ T5876] dw2102: su3000_power_ctrl: 0, initialized 1
[  406.239934][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout
[  406.249947][ T5876] dvb-usb: TeVii S662 successfully initialized and connected.
[  406.270988][ T5951] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  406.329724][   T58] usb 4-1: Using ep0 maxpacket: 8
[  406.343201][   T58] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  406.370556][   T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.419548][T10317] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  406.426437][   T58] usb 4-1: Product: syz
[  406.439693][   T58] usb 4-1: Manufacturer: syz
[  406.456702][   T58] usb 4-1: SerialNumber: syz
[  406.514762][   T58] usb 4-1: config 0 descriptor??
[  406.730238][   T30] audit: type=1400 audit(1762827477.618:525): avc:  granted  { setsecparam } for  pid=10305 comm="syz.2.1221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  406.769429][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[  406.775459][ T5876] usb 6-1: USB disconnect, device number 4
[  406.782872][   T24] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 4 proto 2 vid 0x04B8 pid 0x0202
[  406.793723][ T5922] dw2102: i2c transfer failed.
[  406.794949][   T58] usb 4-1: selecting invalid altsetting 3
[  406.808100][   T58] comedi comedi5: could not set alternate setting 3 in high speed
[  406.818029][   T58] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device.
[  406.827697][   T24] usb 3-1: USB disconnect, device number 30
[  406.849023][   T58] usbdux 4-1:0.0: probe with driver usbdux failed with error -22
[  406.886419][   T58] usb 4-1: USB disconnect, device number 20
[  406.928203][   T24] usblp0: removed
[  407.305938][ T5951] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  407.323031][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.345139][ T5951] usb 5-1: Product: syz
[  407.358695][ T5951] usb 5-1: Manufacturer: syz
[  407.373969][ T5951] usb 5-1: SerialNumber: syz
[  407.379120][ T5876] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  407.397084][ T5951] usb 5-1: config 0 descriptor??
[  407.568466][   T30] audit: type=1400 audit(1762827478.668:526): avc:  denied  { setopt } for  pid=10327 comm="syz.2.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  407.877510][   T30] audit: type=1400 audit(1762827478.978:527): avc:  denied  { shutdown } for  pid=10327 comm="iou-wrk-10328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  407.956618][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.040848][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.100184][   T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  408.158925][ T5876] usb 5-1: USB disconnect, device number 35
[  408.264109][   T24] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  408.513672][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.524438][   T24] usb 4-1: Product: syz
[  408.528631][   T24] usb 4-1: Manufacturer: syz
[  408.533878][   T24] usb 4-1: SerialNumber: syz
[  408.543135][   T24] usb 4-1: config 0 descriptor??
[  408.800402][ T5918] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  408.874794][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.884207][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.897183][   T58] usb 4-1: USB disconnect, device number 21
[  409.190128][ T5918] usb 6-1: Using ep0 maxpacket: 32
[  409.212953][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  409.273630][ T5918] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  409.298706][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.322183][ T5918] usb 6-1: config 0 descriptor??
[  409.423262][ T5918] dvb-usb: found a 'TeVii S662' in warm state.
[  409.439575][ T5918] dw2102: su3000_power_ctrl: 1, initialized 0
[  409.458776][  T122] block nbd0: Possible stuck request ffff8880264be000: control (read@0,1024B). Runtime 120 seconds
[  409.472787][  T122] block nbd0: Possible stuck request ffff8880264be1c0: control (read@1024,1024B). Runtime 120 seconds
[  409.483743][  T122] block nbd0: Possible stuck request ffff8880264be380: control (read@2048,1024B). Runtime 120 seconds
[  409.494711][  T122] block nbd0: Possible stuck request ffff8880264be540: control (read@3072,1024B). Runtime 120 seconds
[  409.505890][ T5918] dvb-usb: bulk message failed: -22 (2/0)
[  409.539707][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  409.549618][ T5918] dvbdev: DVB: registering new adapter (TeVii S662)
[  409.556386][ T5918] usb 6-1: media controller created
[  409.565685][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  409.571515][ T5918] dw2102: i2c transfer failed.
[  409.576392][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  409.584452][ T5918] dw2102: i2c transfer failed.
[  409.589902][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  409.597156][ T5918] dw2102: i2c transfer failed.
[  409.606136][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  409.612157][ T5918] dw2102: i2c transfer failed.
[  409.621101][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  409.627520][ T5918] dw2102: i2c transfer failed.
[  409.632379][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  409.638468][ T5918] dw2102: i2c transfer failed.
[  409.643429][ T5918] dvb-usb: MAC address: 02:02:02:02:02:02
[  409.741035][T10363] SQUASHFS error: Failed to read block 0x0: -5
[  409.747762][T10363] unable to read squashfs_super_block
[  409.997012][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  410.256571][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  410.438844][ T5918] dw2102: command 0x0e transfer failed.
[  410.445061][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  410.451172][ T5918] dw2102: command 0x0e transfer failed.
[  410.840984][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  410.856163][ T5940] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  410.863817][ T5918] dw2102: command 0x0e transfer failed.
[  410.869368][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  410.889326][ T5918] dw2102: command 0x0e transfer failed.
[  410.906609][ T5918] dvb-usb: bulk message failed: -22 (1/0)
[  410.914665][ T5918] dw2102: command 0x51 transfer failed.
[  410.920356][ T5918] dvb-usb: bulk message failed: -22 (5/0)
[  410.927875][ T5918] dw2102: i2c probe for address 0x68 failed.
[  410.935970][T10365] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  410.942693][ T5918] dvb-usb: bulk message failed: -22 (5/0)
[  410.948463][ T5918] dw2102: i2c probe for address 0x69 failed.
[  410.959161][ T5918] dvb-usb: bulk message failed: -22 (5/0)
[  410.969258][ T5918] dw2102: i2c probe for address 0x6a failed.
[  410.975362][   T58] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  410.984148][ T5918] dw2102: probing for demodulator failed. Is the external power switched on?
[  410.994861][ T5918] dvb-usb: no frontend was attached by 'TeVii S662'
[  411.119865][ T5940] usb 5-1: Using ep0 maxpacket: 8
[  411.128441][ T5940] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  411.172810][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.182177][ T5940] usb 5-1: Product: syz
[  411.189796][ T5940] usb 5-1: Manufacturer: syz
[  411.194688][ T5940] usb 5-1: SerialNumber: syz
[  411.201012][ T5918] rc_core: IR keymap rc-tt-1500 not found
[  411.206865][ T5918] Registered IR keymap rc-empty
[  411.229906][   T58] usb 4-1: config 118 has an invalid interface number: 97 but max is 0
[  411.238158][   T58] usb 4-1: config 118 has no interface number 0
[  411.252304][ T5918] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  411.261567][ T5940] usb 5-1: config 0 descriptor??
[  411.267736][   T58] usb 4-1: too many endpoints for config 118 interface 97 altsetting 97: 97, using maximum allowed: 30
[  411.283354][ T5918] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input16
[  411.300923][ T5940] usb 5-1: selecting invalid altsetting 3
[  411.309847][   T58] usb 4-1: config 118 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97
[  411.323278][ T5940] comedi comedi5: could not set alternate setting 3 in high speed
[  411.332149][ T5918] dvb-usb: schedule remote query interval to 250 msecs.
[  411.339846][ T5940] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device.
[  411.349540][ T5918] dw2102: su3000_power_ctrl: 0, initialized 1
[  411.363407][   T58] usb 4-1: config 118 interface 97 has no altsetting 0
[  411.399855][ T5918] dvb-usb: TeVii S662 successfully initialized and connected.
[  411.418277][   T58] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67
[  411.427970][ T5940] usbdux 5-1:0.0: probe with driver usbdux failed with error -22
[  411.480018][ T5918] usb 6-1: USB disconnect, device number 5
[  411.486591][   T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.497699][ T5940] usb 5-1: USB disconnect, device number 36
[  411.555606][   T58] usb 4-1: Product: syz
[  411.575284][   T58] usb 4-1: Manufacturer: syz
[  411.589717][   T58] usb 4-1: SerialNumber: syz
[  411.850150][T10391] fuse: Invalid rootmode
[  411.999376][T10391] wg2 speed is unknown, defaulting to 1000
[  412.194979][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout
[  412.226782][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'.
[  412.287150][ T5918] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  412.320070][T10386] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  412.368507][   T30] audit: type=1400 audit(1762827483.438:528): avc:  denied  { write } for  pid=10378 comm="syz.3.1242" name="cgroup.subtree_control" dev="cgroup2" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  412.565312][   T58] usb 4-1: USB disconnect, device number 22
[  412.599723][   T30] audit: type=1400 audit(1762827483.438:529): avc:  denied  { open } for  pid=10378 comm="syz.3.1242" path="<too_long>" dev="cgroup2" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  412.626401][   T30] audit: type=1400 audit(1762827483.508:530): avc:  denied  { ioctl } for  pid=10378 comm="syz.3.1242" path="<too_long>" dev="cgroup2" ino=265 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  413.289098][T10414] FAULT_INJECTION: forcing a failure.
[  413.289098][T10414] name failslab, interval 1, probability 0, space 0, times 0
[  413.368542][T10414] CPU: 0 UID: 0 PID: 10414 Comm: syz.4.1251 Not tainted syzkaller #0 PREEMPT(full) 
[  413.368566][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  413.368577][T10414] Call Trace:
[  413.368583][T10414]  <TASK>
[  413.368590][T10414]  dump_stack_lvl+0x16c/0x1f0
[  413.368622][T10414]  should_fail_ex+0x512/0x640
[  413.368643][T10414]  ? fs_reclaim_acquire+0xae/0x150
[  413.368665][T10414]  should_failslab+0xc2/0x120
[  413.368685][T10414]  __kmalloc_noprof+0xdd/0x880
[  413.368709][T10414]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  413.368735][T10414]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  413.368754][T10414]  tomoyo_realpath_from_path+0xc2/0x6e0
[  413.368776][T10414]  ? tomoyo_profile+0x47/0x60
[  413.368801][T10414]  tomoyo_path_number_perm+0x245/0x580
[  413.368817][T10414]  ? tomoyo_path_number_perm+0x237/0x580
[  413.368836][T10414]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  413.368853][T10414]  ? find_held_lock+0x2b/0x80
[  413.368899][T10414]  ? find_held_lock+0x2b/0x80
[  413.368919][T10414]  ? hook_file_ioctl_common+0x145/0x410
[  413.368948][T10414]  ? __fget_files+0x20e/0x3c0
[  413.368970][T10414]  security_file_ioctl+0x9b/0x240
[  413.368991][T10414]  __x64_sys_ioctl+0xb7/0x210
[  413.369016][T10414]  do_syscall_64+0xcd/0xfa0
[  413.369034][T10414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.369051][T10414] RIP: 0033:0x7f67d158f6c9
[  413.369065][T10414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  413.369082][T10414] RSP: 002b:00007f67d2346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  413.369098][T10414] RAX: ffffffffffffffda RBX: 00007f67d17e5fa0 RCX: 00007f67d158f6c9
[  413.369110][T10414] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000006
[  413.369121][T10414] RBP: 00007f67d2346090 R08: 0000000000000000 R09: 0000000000000000
[  413.369134][T10414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  413.369144][T10414] R13: 00007f67d17e6038 R14: 00007f67d17e5fa0 R15: 00007ffe5ff7fea8
[  413.369170][T10414]  </TASK>
[  413.369192][T10414] ERROR: Out of memory at tomoyo_realpath_from_path.
[  413.879722][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  414.052901][   T10] usb 6-1: Using ep0 maxpacket: 16
[  414.081520][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  414.109962][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  414.162485][   T10] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  414.192272][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.286561][T10436] fuse: Invalid rootmode
[  414.343858][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout
[  414.646473][T10436] wg2 speed is unknown, defaulting to 1000
[  414.903141][   T10] usb 6-1: config 0 descriptor??
[  414.926801][   T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  415.581150][T10445] wg2 speed is unknown, defaulting to 1000
[  415.884482][T10438] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  415.890517][T10438] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  416.495595][T10438] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  416.523066][T10438] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  416.553365][T10438] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  416.579685][T10438] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  416.959959][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout
[  417.624199][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'.
[  417.763326][ T5876] usb 6-1: USB disconnect, device number 6
[  418.561130][ T5133] Bluetooth: hci2: command 0x0c1a tx timeout
[  418.567154][ T5133] Bluetooth: hci1: command 0x041b tx timeout
[  418.569720][ T5809] Bluetooth: hci4: command 0x0c1a tx timeout
[  418.574216][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout
[  419.425296][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout
[  421.039317][T10515] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  421.065782][T10515] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  421.120270][T10515] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  421.126376][T10515] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  421.134540][T10515] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  421.140993][T10515] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  421.254678][T10538] FAULT_INJECTION: forcing a failure.
[  421.254678][T10538] name failslab, interval 1, probability 0, space 0, times 0
[  421.267360][T10538] CPU: 1 UID: 0 PID: 10538 Comm: syz.1.1289 Not tainted syzkaller #0 PREEMPT(full) 
[  421.267382][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  421.267392][T10538] Call Trace:
[  421.267400][T10538]  <TASK>
[  421.267406][T10538]  dump_stack_lvl+0x16c/0x1f0
[  421.267438][T10538]  should_fail_ex+0x512/0x640
[  421.267460][T10538]  ? fs_reclaim_acquire+0xae/0x150
[  421.267482][T10538]  should_failslab+0xc2/0x120
[  421.267503][T10538]  __kmalloc_noprof+0xdd/0x880
[  421.267527][T10538]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  421.267553][T10538]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  421.267573][T10538]  tomoyo_realpath_from_path+0xc2/0x6e0
[  421.267595][T10538]  ? tomoyo_profile+0x47/0x60
[  421.267620][T10538]  tomoyo_path_number_perm+0x245/0x580
[  421.267636][T10538]  ? tomoyo_path_number_perm+0x237/0x580
[  421.267656][T10538]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  421.267674][T10538]  ? find_held_lock+0x2b/0x80
[  421.267719][T10538]  ? find_held_lock+0x2b/0x80
[  421.267740][T10538]  ? hook_file_ioctl_common+0x145/0x410
[  421.267769][T10538]  ? __fget_files+0x20e/0x3c0
[  421.267792][T10538]  security_file_ioctl+0x9b/0x240
[  421.267812][T10538]  __x64_sys_ioctl+0xb7/0x210
[  421.267839][T10538]  do_syscall_64+0xcd/0xfa0
[  421.267858][T10538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.267875][T10538] RIP: 0033:0x7effc138f6c9
[  421.267889][T10538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  421.267904][T10538] RSP: 002b:00007effc222e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  421.267920][T10538] RAX: ffffffffffffffda RBX: 00007effc15e5fa0 RCX: 00007effc138f6c9
[  421.267931][T10538] RDX: 0000200000000300 RSI: 000000004068aea3 RDI: 000000000000000d
[  421.267941][T10538] RBP: 00007effc222e090 R08: 0000000000000000 R09: 0000000000000000
[  421.267951][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  421.267961][T10538] R13: 00007effc15e6038 R14: 00007effc15e5fa0 R15: 00007ffe5a7d96d8
[  421.267986][T10538]  </TASK>
[  421.267998][T10538] ERROR: Out of memory at tomoyo_realpath_from_path.
[  422.418778][T10550] SQUASHFS error: Failed to read block 0x0: -5
[  422.425289][T10550] unable to read squashfs_super_block
[  422.729740][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout
[  423.119741][ T5133] Bluetooth: hci2: command 0x0c1a tx timeout
[  423.199752][ T5133] Bluetooth: hci1: command 0x041b tx timeout
[  423.205795][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout
[  423.212008][ T5133] Bluetooth: hci3: command 0x0c1a tx timeout
[  423.580027][   T30] audit: type=1400 audit(1762827493.948:531): avc:  denied  { write } for  pid=10557 comm="syz.3.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  423.715103][   T30] audit: type=1400 audit(1762827494.008:532): avc:  denied  { write } for  pid=10557 comm="syz.3.1295" name="001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  425.351385][ T5133] Bluetooth: hci1: command 0x041b tx timeout
[  425.387835][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1306'.
[  426.221469][T10600] FAULT_INJECTION: forcing a failure.
[  426.221469][T10600] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  426.234521][T10600] CPU: 1 UID: 0 PID: 10600 Comm: syz.1.1308 Not tainted syzkaller #0 PREEMPT(full) 
[  426.234535][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  426.234541][T10600] Call Trace:
[  426.234545][T10600]  <TASK>
[  426.234549][T10600]  dump_stack_lvl+0x16c/0x1f0
[  426.234568][T10600]  should_fail_ex+0x512/0x640
[  426.234583][T10600]  _copy_from_user+0x2e/0xd0
[  426.234596][T10600]  copy_msghdr_from_user+0x98/0x160
[  426.234610][T10600]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  426.234630][T10600]  ___sys_sendmsg+0xfe/0x1d0
[  426.234644][T10600]  ? __pfx____sys_sendmsg+0x10/0x10
[  426.234656][T10600]  ? __lock_acquire+0x622/0x1c90
[  426.234681][T10600]  __sys_sendmsg+0x16d/0x220
[  426.234695][T10600]  ? __pfx___sys_sendmsg+0x10/0x10
[  426.234707][T10600]  ? __pfx_bpf_trace_run2+0x10/0x10
[  426.234723][T10600]  ? syscall_trace_enter+0x1cb/0x240
[  426.234740][T10600]  ? rcu_is_watching+0x12/0xc0
[  426.234755][T10600]  do_syscall_64+0xcd/0xfa0
[  426.234766][T10600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.234776][T10600] RIP: 0033:0x7effc138f6c9
[  426.234785][T10600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  426.234794][T10600] RSP: 002b:00007effc222e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  426.234804][T10600] RAX: ffffffffffffffda RBX: 00007effc15e5fa0 RCX: 00007effc138f6c9
[  426.234810][T10600] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  426.234816][T10600] RBP: 00007effc222e090 R08: 0000000000000000 R09: 0000000000000000
[  426.234822][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  426.234828][T10600] R13: 00007effc15e6038 R14: 00007effc15e5fa0 R15: 00007ffe5a7d96d8
[  426.234841][T10600]  </TASK>
[  426.414634][    C1] vkms_vblank_simulate: vblank timer overrun
[  426.462356][T10580] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  426.940379][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout
[  427.462483][ T5133] Bluetooth: hci1: command 0x041b tx timeout
[  427.575294][T10625] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  429.053222][T10633] FAULT_INJECTION: forcing a failure.
[  429.053222][T10633] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  429.066378][T10633] CPU: 1 UID: 0 PID: 10633 Comm: syz.4.1317 Not tainted syzkaller #0 PREEMPT(full) 
[  429.066399][T10633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  429.066408][T10633] Call Trace:
[  429.066413][T10633]  <TASK>
[  429.066419][T10633]  dump_stack_lvl+0x16c/0x1f0
[  429.066447][T10633]  should_fail_ex+0x512/0x640
[  429.066472][T10633]  _copy_from_user+0x2e/0xd0
[  429.066493][T10633]  __sys_bpf+0x248/0x4980
[  429.066521][T10633]  ? __pfx___sys_bpf+0x10/0x10
[  429.066547][T10633]  ? __pfx___schedule+0x10/0x10
[  429.066574][T10633]  ? find_held_lock+0x2b/0x80
[  429.066602][T10633]  ? rcu_is_watching+0x12/0xc0
[  429.066622][T10633]  ? irqentry_exit+0x3b/0x90
[  429.066649][T10633]  ? fput+0x9b/0xd0
[  429.066676][T10633]  ? ksys_write+0x1ac/0x250
[  429.066691][T10633]  ? __pfx_ksys_write+0x10/0x10
[  429.066711][T10633]  __x64_sys_bpf+0x78/0xc0
[  429.066725][T10633]  ? lockdep_hardirqs_on+0x7c/0x110
[  429.066750][T10633]  do_syscall_64+0xcd/0xfa0
[  429.066766][T10633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.066783][T10633] RIP: 0033:0x7f67d158f6c9
[  429.066797][T10633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  429.066813][T10633] RSP: 002b:00007f67d2346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  429.066829][T10633] RAX: ffffffffffffffda RBX: 00007f67d17e5fa0 RCX: 00007f67d158f6c9
[  429.066839][T10633] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  429.066849][T10633] RBP: 00007f67d2346090 R08: 0000000000000000 R09: 0000000000000000
[  429.066858][T10633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  429.066868][T10633] R13: 00007f67d17e6038 R14: 00007f67d17e5fa0 R15: 00007ffe5ff7fea8
[  429.066891][T10633]  </TASK>
[  429.244700][    C1] vkms_vblank_simulate: vblank timer overrun
[  429.499296][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'.
[  430.649372][T10673] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  430.801516][T10675] ubi0: attaching mtd0
[  430.825007][T10675] ubi0: scanning is finished
[  430.829714][T10675] ubi0: empty MTD device detected
[  431.258132][T10675] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  431.265648][T10675] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  431.273580][T10675] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  431.280588][T10675] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  431.287927][T10675] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  431.294700][T10675] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  431.302716][T10675] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1379256603
[  431.312702][T10675] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  431.398824][T10679] ubi0: background thread "ubi_bgt0d" started, PID 10679
[  431.779699][T10654] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  431.850898][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout
[  432.350041][T10694] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1336'.
[  433.507380][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'.
[  433.771593][T10710] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  433.794034][T10718] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1345'.
[  433.989769][   T58] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  434.399979][   T58] usb 4-1: Using ep0 maxpacket: 16
[  434.415397][   T58] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  434.436056][   T58] usb 4-1: config 0 has no interface number 0
[  434.465266][   T58] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  434.497909][   T58] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  434.520807][   T58] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  434.634852][   T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.644178][   T58] usb 4-1: Product: syz
[  434.648392][   T58] usb 4-1: Manufacturer: syz
[  434.654347][   T58] usb 4-1: SerialNumber: syz
[  434.661490][   T58] usb 4-1: config 0 descriptor??
[  434.667055][T10708] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  434.675202][T10708] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  434.759992][T10734] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  437.043511][   T58] asix 4-1:0.251: probe with driver asix failed with error -71
[  437.098268][   T58] usb 4-1: USB disconnect, device number 23
[  437.340121][T10751] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1356'.
[  437.556630][T10758] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1359'.
[  438.151727][T10772] FAULT_INJECTION: forcing a failure.
[  438.151727][T10772] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  438.189007][T10772] CPU: 0 UID: 0 PID: 10772 Comm: syz.2.1363 Not tainted syzkaller #0 PREEMPT(full) 
[  438.189022][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  438.189027][T10772] Call Trace:
[  438.189031][T10772]  <TASK>
[  438.189035][T10772]  dump_stack_lvl+0x16c/0x1f0
[  438.189055][T10772]  should_fail_ex+0x512/0x640
[  438.189069][T10772]  copy_fpstate_to_sigframe+0x854/0xaf0
[  438.189087][T10772]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  438.189101][T10772]  ? posixtimer_deliver_signal+0x105/0x6b0
[  438.189115][T10772]  ? x86_task_fpu+0x5f/0x90
[  438.189128][T10772]  get_sigframe+0x4a8/0x9c0
[  438.189142][T10772]  ? __pfx_get_sigframe+0x10/0x10
[  438.189154][T10772]  ? trace_irq_enable.constprop.0+0x2f/0x120
[  438.189170][T10772]  ? _raw_spin_unlock_irq+0x29/0x50
[  438.189184][T10772]  ? siginfo_layout+0x177/0x290
[  438.189199][T10772]  x64_setup_rt_frame+0x12e/0xcf0
[  438.189214][T10772]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  438.189230][T10772]  arch_do_signal_or_restart+0x5e4/0x7c0
[  438.189243][T10772]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  438.189259][T10772]  ? __pfx_do_preadv+0x10/0x10
[  438.189278][T10772]  exit_to_user_mode_loop+0x85/0x130
[  438.189289][T10772]  do_syscall_64+0x426/0xfa0
[  438.189300][T10772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.189310][T10772] RIP: 0033:0x7f573558f6c7
[  438.189318][T10772] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  438.189328][T10772] RSP: 002b:00007f57363e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  438.189338][T10772] RAX: 0000000000000127 RBX: 00007f57357e5fa0 RCX: 00007f573558f6c9
[  438.189344][T10772] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004
[  438.189350][T10772] RBP: 00007f57363e4090 R08: 0000000000000000 R09: 0000000000000000
[  438.189356][T10772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.189362][T10772] R13: 00007f57357e6038 R14: 00007f57357e5fa0 R15: 00007ffec0ad9a18
[  438.189375][T10772]  </TASK>
[  438.809672][T10785] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  439.260954][   T30] audit: type=1400 audit(1762827510.368:533): avc:  denied  { setopt } for  pid=10781 comm="syz.5.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  439.280676][    C1] vkms_vblank_simulate: vblank timer overrun
[  439.540883][T10797] netlink: 'syz.4.1368': attribute type 1 has an invalid length.
[  439.564249][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  439.575559][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  439.651886][T10797] bond1: entered promiscuous mode
[  439.657965][T10797] 8021q: adding VLAN 0 to HW filter on device bond1
[  439.894610][T10797] 8021q: adding VLAN 0 to HW filter on device bond1
[  439.901503][T10797] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  439.912037][T10797] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  439.923800][  T122] block nbd0: Possible stuck request ffff8880264be000: control (read@0,1024B). Runtime 150 seconds
[  439.925511][T10797] bond1: (slave wireguard0): making interface the new active one
[  439.943099][T10797] wireguard0: entered promiscuous mode
[  439.949327][T10797] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  439.963305][  T122] block nbd0: Possible stuck request ffff8880264be1c0: control (read@1024,1024B). Runtime 150 seconds
[  439.981004][  T122] block nbd0: Possible stuck request ffff8880264be380: control (read@2048,1024B). Runtime 150 seconds
[  439.993445][  T122] block nbd0: Possible stuck request ffff8880264be540: control (read@3072,1024B). Runtime 150 seconds
[  440.009865][   T30] audit: type=1400 audit(1762827510.798:534): avc:  denied  { create } for  pid=10790 comm="syz.4.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  440.029340][    C1] vkms_vblank_simulate: vblank timer overrun
[  442.382180][T10836] FAULT_INJECTION: forcing a failure.
[  442.382180][T10836] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.395292][T10836] CPU: 1 UID: 0 PID: 10836 Comm: syz.4.1377 Not tainted syzkaller #0 PREEMPT(full) 
[  442.395313][T10836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  442.395323][T10836] Call Trace:
[  442.395329][T10836]  <TASK>
[  442.395336][T10836]  dump_stack_lvl+0x16c/0x1f0
[  442.395366][T10836]  should_fail_ex+0x512/0x640
[  442.395390][T10836]  _copy_from_user+0x2e/0xd0
[  442.395411][T10836]  __sys_bpf+0x248/0x4980
[  442.395436][T10836]  ? finish_task_switch.isra.0+0x21c/0xc10
[  442.395461][T10836]  ? __pfx___sys_bpf+0x10/0x10
[  442.395485][T10836]  ? lockdep_hardirqs_on+0x7c/0x110
[  442.395511][T10836]  ? finish_task_switch.isra.0+0x221/0xc10
[  442.395532][T10836]  ? rcu_is_watching+0x12/0xc0
[  442.395555][T10836]  ? trace_sched_exit_tp+0xd1/0x120
[  442.395573][T10836]  ? __schedule+0x11a3/0x5de0
[  442.395619][T10836]  ? fput+0x9b/0xd0
[  442.395640][T10836]  ? ksys_write+0x1ac/0x250
[  442.395662][T10836]  __x64_sys_bpf+0x78/0xc0
[  442.395676][T10836]  ? lockdep_hardirqs_on+0x7c/0x110
[  442.395702][T10836]  do_syscall_64+0xcd/0xfa0
[  442.395719][T10836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.395735][T10836] RIP: 0033:0x7f67d158f6c9
[  442.395749][T10836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  442.395765][T10836] RSP: 002b:00007f67cf7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  442.395786][T10836] RAX: ffffffffffffffda RBX: 00007f67d17e6180 RCX: 00007f67d158f6c9
[  442.395796][T10836] RDX: 0000000000000070 RSI: 0000200000000080 RDI: 0000000000000005
[  442.395806][T10836] RBP: 00007f67cf7d5090 R08: 0000000000000000 R09: 0000000000000000
[  442.395816][T10836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.395825][T10836] R13: 00007f67d17e6218 R14: 00007f67d17e6180 R15: 00007ffe5ff7fea8
[  442.395849][T10836]  </TASK>
[  442.583122][    C1] vkms_vblank_simulate: vblank timer overrun
[  442.643875][T10836] 9pnet_fd: Insufficient options for proto=fd
[  442.688243][T10840] netlink: 'syz.5.1381': attribute type 72 has an invalid length.
[  442.979425][T10834] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  443.061717][T10847] netlink: 'syz.5.1382': attribute type 1 has an invalid length.
[  443.321822][T10847] bond1: entered promiscuous mode
[  443.329116][T10847] 8021q: adding VLAN 0 to HW filter on device bond1
[  443.478937][T10851] 9pnet_fd: Insufficient options for proto=fd
[  443.502801][T10849] 8021q: adding VLAN 0 to HW filter on device bond1
[  443.509760][T10849] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  443.520281][T10849] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  443.545537][T10849] bond1: (slave wireguard0): making interface the new active one
[  443.553468][T10849] wireguard0: entered promiscuous mode
[  443.561147][T10849] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  445.290578][T10873] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  445.676212][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'.
[  445.982680][   T30] audit: type=1326 audit(1762827517.088:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573558f6c9 code=0x7ffc0000
[  446.030316][T10894] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1395'.
[  446.047245][   T30] audit: type=1326 audit(1762827517.088:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573558f6c9 code=0x7ffc0000
[  446.109008][   T30] audit: type=1326 audit(1762827517.118:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f573558f6c9 code=0x7ffc0000
[  446.132341][    C1] vkms_vblank_simulate: vblank timer overrun
[  446.155703][   T30] audit: type=1326 audit(1762827517.118:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573558f6c9 code=0x7ffc0000
[  446.179103][    C1] vkms_vblank_simulate: vblank timer overrun
[  446.250100][   T30] audit: type=1326 audit(1762827517.118:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573558f6c9 code=0x7ffc0000
[  446.414993][T10899] SQUASHFS error: Failed to read block 0x0: -5
[  446.421466][T10899] unable to read squashfs_super_block
[  446.499789][   T30] audit: type=1326 audit(1762827517.118:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f573558df10 code=0x7ffc0000
[  446.568792][T10902] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1398'.
[  446.584500][   T30] audit: type=1326 audit(1762827517.118:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573558f6c9 code=0x7ffc0000
[  446.599670][ T5876] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  446.608186][   T30] audit: type=1326 audit(1762827517.118:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573558f6c9 code=0x7ffc0000
[  446.813386][ T5876] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  446.865828][   T30] audit: type=1326 audit(1762827517.118:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f573558f6c9 code=0x7ffc0000
[  446.889283][   T30] audit: type=1326 audit(1762827517.118:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573558f6c9 code=0x7ffc0000
[  446.912628][    C1] vkms_vblank_simulate: vblank timer overrun
[  446.918675][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.004398][T10910] SQUASHFS error: Failed to read block 0x0: -5
[  447.011371][T10910] unable to read squashfs_super_block
[  447.200868][   T31] INFO: task syz.0.809:8850 blocked for more than 143 seconds.
[  447.209758][ T5876] usb 3-1: Product: syz
[  447.213923][ T5876] usb 3-1: Manufacturer: syz
[  447.218504][ T5876] usb 3-1: SerialNumber: syz
[  447.257668][   T31]       Not tainted syzkaller #0
[  447.270753][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  447.362435][   T31] task:syz.0.809       state:D stack:28232 pid:8850  tgid:8848  ppid:5808   task_flags:0x400140 flags:0x00080002
[  447.380304][   T31] Call Trace:
[  447.393899][   T31]  <TASK>
[  447.398707][   T31]  __schedule+0x1190/0x5de0
[  447.403731][ T5876] usb 3-1: config 0 descriptor??
[  447.410386][   T31]  ? check_path.constprop.0+0x24/0x50
[  447.453014][   T31]  ? __pfx___schedule+0x10/0x10
[  447.458443][   T31]  ? find_held_lock+0x2b/0x80
[  447.463346][   T31]  ? schedule+0x2d7/0x3a0
[  447.467660][   T31]  ? bdev_open+0xa2/0xe40
[  447.472566][   T31]  schedule+0xe7/0x3a0
[  447.477220][   T31]  schedule_preempt_disabled+0x13/0x30
[  447.483796][   T31]  __mutex_lock+0x818/0x1060
[  447.519543][   T31]  ? bdev_open+0xa2/0xe40
[  447.527695][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  447.533839][   T31]  ? __pfx_bd_prepare_to_claim+0x10/0x10
[  447.539494][   T31]  ? bdev_open+0xa2/0xe40
[  447.545518][   T31]  bdev_open+0xa2/0xe40
[  447.551642][   T31]  ? iput+0x35/0x40
[  447.557681][   T31]  bdev_file_open_by_dev+0x182/0x210
[  447.563260][   T31]  setup_bdev_super+0x39b/0x730
[  447.568166][   T31]  get_tree_bdev_flags+0x363/0x620
[  447.573700][   T31]  ? __pfx_squashfs_fill_super+0x10/0x10
[  447.579380][   T31]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  447.585307][   T31]  ? bpf_lsm_capable+0x9/0x10
[  447.590163][   T31]  ? security_capable+0x7e/0x260
[  447.595102][   T31]  vfs_get_tree+0x8e/0x340
[  447.599510][   T31]  path_mount+0x7b9/0x23a0
[  447.604284][   T31]  ? __pfx_path_mount+0x10/0x10
[  447.609187][   T31]  ? putname+0x154/0x1a0
[  447.613672][   T31]  ? putname+0x154/0x1a0
[  447.617918][   T31]  ? putname+0x154/0x1a0
[  447.622232][   T31]  ? __x64_sys_mount+0x293/0x310
[  447.627173][   T31]  __x64_sys_mount+0x293/0x310
[  447.632003][   T31]  ? __pfx___x64_sys_mount+0x10/0x10
[  447.637325][   T31]  ? syscall_trace_enter+0x1cb/0x240
[  447.642679][   T31]  ? rcu_is_watching+0x12/0xc0
[  447.647494][   T31]  do_syscall_64+0xcd/0xfa0
[  447.652058][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.656789][T10897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.661223][   T31] RIP: 0033:0x7fa25278f6c9
[  447.670862][   T31] RSP: 002b:00007fa2509d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  447.679283][   T31] RAX: ffffffffffffffda RBX: 00007fa2529e6090 RCX: 00007fa25278f6c9
[  447.687671][T10897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.689684][   T31] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000140
[  447.701145][   T58] usb 3-1: USB disconnect, device number 31
[  447.703569][   T31] RBP: 00007fa252811f91 R08: 0000000000000000 R09: 0000000000000000
[  447.717415][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  447.725725][   T31] R13: 00007fa2529e6128 R14: 00007fa2529e6090 R15: 00007ffc088f6588
[  447.734339][   T31]  </TASK>
[  447.737462][   T31] 
[  447.737462][   T31] Showing all locks held in the system:
[  447.745424][   T31] 1 lock held by khungtaskd/31:
[  447.750952][   T31]  #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  447.795071][   T31] 3 locks held by kworker/1:1/58:
[  447.800192][   T31] 2 locks held by getty/5567:
[  447.804856][   T31]  #0: ffff88814d5640a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  447.814718][   T31]  #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  447.824904][   T31] 1 lock held by udevd/6018:
[  447.830870][   T31]  #0: ffff8881433ee358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  447.840681][   T31] 2 locks held by syz.0.809/8850:
[  447.845695][   T31]  #0: ffff888027f420e0 (&type->s_umount_key#72/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60
[  447.855924][   T31]  #1: ffff8881433ee358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40
[  447.866763][   T31] 
[  447.869069][   T31] =============================================
[  447.869069][   T31] 
[  447.878884][   T31] NMI backtrace for cpu 0
[  447.878896][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  447.878914][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  447.878924][   T31] Call Trace:
[  447.878930][   T31]  <TASK>
[  447.878936][   T31]  dump_stack_lvl+0x116/0x1f0
[  447.878965][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  447.878988][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  447.879014][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  447.879038][   T31]  watchdog+0xf3f/0x1170
[  447.879063][   T31]  ? rcu_is_watching+0x12/0xc0
[  447.879085][   T31]  ? __pfx_watchdog+0x10/0x10
[  447.879105][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  447.879132][   T31]  ? __kthread_parkme+0x19e/0x250
[  447.879158][   T31]  ? __pfx_watchdog+0x10/0x10
[  447.879178][   T31]  kthread+0x3c5/0x780
[  447.879195][   T31]  ? __pfx_kthread+0x10/0x10
[  447.879213][   T31]  ? rcu_is_watching+0x12/0xc0
[  447.879234][   T31]  ? __pfx_kthread+0x10/0x10
[  447.879252][   T31]  ret_from_fork+0x675/0x7d0
[  447.879266][   T31]  ? __pfx_kthread+0x10/0x10
[  447.879282][   T31]  ret_from_fork_asm+0x1a/0x30
[  447.879317][   T31]  </TASK>
[  447.879323][   T31] Sending NMI from CPU 0 to CPUs 1:
[  448.000590][    C1] NMI backtrace for cpu 1
[  448.000602][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  448.000618][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  448.000626][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  448.000650][    C1] Code: e7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 94 29 00 fb f4 <e9> 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  448.000662][    C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6
[  448.000674][    C1] RAX: 0000000001a7451d RBX: 0000000000000001 RCX: ffffffff8b6092a9
[  448.000683][    C1] RDX: 0000000000000000 RSI: ffffffff8da2b720 RDI: ffffffff8bf070c0
[  448.000692][    C1] RBP: ffffed1003adc490 R08: 0000000000000001 R09: ffffed10170a6655
[  448.000701][    C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001
[  448.000709][    C1] R13: ffff88801d6e2480 R14: ffffffff90820cd0 R15: 0000000000000000
[  448.000717][    C1] FS:  0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000
[  448.000731][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  448.000740][    C1] CR2: 0000001b2fcf4ff8 CR3: 000000006c72c000 CR4: 00000000003526f0
[  448.000749][    C1] Call Trace:
[  448.000753][    C1]  <TASK>
[  448.000757][    C1]  default_idle+0x13/0x20
[  448.000771][    C1]  default_idle_call+0x6c/0xb0
[  448.000784][    C1]  do_idle+0x38d/0x500
[  448.000803][    C1]  ? __pfx_do_idle+0x10/0x10
[  448.000818][    C1]  ? trace_sched_exit_tp+0x2f/0x120
[  448.000834][    C1]  cpu_startup_entry+0x4f/0x60
[  448.000849][    C1]  start_secondary+0x21d/0x2b0
[  448.000868][    C1]  ? __pfx_start_secondary+0x10/0x10
[  448.000887][    C1]  common_startup_64+0x13e/0x148
[  448.000906][    C1]  </TASK>
[  448.178541][    C1] vkms_vblank_simulate: vblank timer overrun
[  451.428318][ T5183] udevd[5183]: worker [6018] /devices/virtual/block/nbd0 is taking a long time