last executing test programs:

13m4.145466429s ago: executing program 4 (id=1195):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94)

13m3.455114522s ago: executing program 4 (id=1200):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mq_open(0x0, 0x40, 0x9, 0x0)
r1 = landlock_create_ruleset(0x0, 0x0, 0x2)
landlock_restrict_self(r1, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
r2 = getpid()
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50)
r4 = syz_pidfd_open(r2, 0x0)
setns(r4, 0x24020000)
getpid()
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f2, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4002090)
setns(0xffffffffffffffff, 0x24020080)
open_tree(0xffffffffffffffff, 0x0, 0x89901)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0xcf, 0x10, 0xf2, 0x40, 0x72f, 0x2200, 0xf820, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0xdc, 0x0, 0x6, [{{0x9, 0x4, 0x17, 0x8, 0x2, 0x4e, 0x97, 0x71, 0x6c, [], [{{0x9, 0x5, 0xe, 0x2, 0x20, 0x6, 0x2, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x9, 0x3}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0xae, &(0x7f0000000040)=@string={0xae, 0x3, "af32f8713586160f8b3d11b5991d2133d67a37367843d39de5d34fcb30b03ebbcc84d4043dfe106214414eb828900879c921b620be95fe00c711fb39ba9fc42ec1a034a7085cea8aa4384ac194e10994e793b627b572fc60397a89dec6c774b3929d1cf00c8901d82c3dc9b5033659d5275cdf7d7fbfffe5a80d8e760df82bbc250d36247f4cb502ce4f4f374c8f56fa0e0f0721d6bbca1bc99dcfbc69765a435c49cb4069a0e9ba0fe5da5c"}}, {0x6, &(0x7f0000000100)=@string={0x6, 0x3, "9baddbd5"}}, {0x98, &(0x7f0000000140)=@string={0x98, 0x3, "847404616891ac264e3150385b32fbcefa16bfb131f3d058f89d4a9078139cdc502b8c003effeac7bea5c7505374258d2f9cfbd911cac9b4fddacf5cbb7235d39e3546e0ab7f71e2e89a1a83f2c9fb8f07bd3f3b65f9b16436e6b8e4e3b52d7246b269920afa1c6eb2e8e34a058bb23e2b80adf83dbdc6f06fdae78a319d3ba30fbd331b93553e6d1f70e3bd8b1be5c8ba639465bfdc"}}, {0x55, &(0x7f0000000200)=@string={0x55, 0x3, "38bccd7df6ed3d1158371085e7527b18802bad0f77b597465cc3c54a4c63cfef6734b69b42d71dd6b09960e65d484c8e92ac173b0397068b1df88d7fdbf77a215106bc39bf72f20a5087710489e98561a61846"}}]})
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000003020000000000000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

13m2.334986477s ago: executing program 4 (id=1202):
bind$alg(0xffffffffffffffff, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0)
sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, r2, 0x48334cf00147764d, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044880}, 0x20000000)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002240)=@polexpire={0x1e4, 0x1b, 0x1, 0x70bd26, 0x25dfdbfc, {{{@in6=@local, @in=@multicast2, 0x4e22, 0x7ff, 0x4e20, 0x2, 0x2, 0xa0, 0x30, 0x1}, {0x400, 0x2, 0x401, 0x0, 0x7, 0x4a2f, 0x2, 0x8001}, {0x2, 0x100000000, 0x2, 0x8}, 0x4, 0x0, 0x2, 0x1, 0x0, 0x1}, 0x5}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @sa={0xe4, 0x6, {{@in=@loopback, @in=@remote, 0x4e23, 0x6, 0x4e22, 0x4, 0xa, 0xa0, 0x20, 0x3c}, {@in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x4d5, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x5, 0xfff, 0xfff, 0x1000000000000, 0x5, 0x5}, {0x25a2e1b1, 0x76, 0x8855, 0x8}, {0x2, 0x0, 0x4b9c}, 0x70bd26, 0x3505, 0x2, 0x2, 0xd4, 0x80}}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4040841}, 0x4010)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
syz_usbip_server_init(0x3)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x4, 0x380e54fa59156ef8, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x962, 0x401, 0x5}, {0x6, 0x24, 0x1a, 0xffff, 0x9}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc7, 0x80, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x71, 0x5}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x8000)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020)

12m59.116998593s ago: executing program 4 (id=1220):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x103)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4b)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00')
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xc3b, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x0, 0x6200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21f3}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x9, &(0x7f0000000200)=[{0x8, 0x7, 0x8, 0x8000}, {0x9, 0x9, 0x3, 0x4}, {0x3ff, 0x8, 0x1, 0x6}, {0x9, 0xc, 0x20, 0x7ff}, {0x2, 0x0, 0x9, 0x9}, {0x7, 0x7, 0x81, 0x5}, {0x7, 0x3, 0x79, 0xd}, {0x200, 0x6, 0x1}, {0x34, 0xf, 0x6, 0x101}]})

12m58.905382882s ago: executing program 4 (id=1222):
mmap(&(0x7f00001a3000/0x4000)=nil, 0x4000, 0x3000000, 0xc3072, 0xffffffffffffffff, 0x202000)
r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=0x6e, 0x800)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x3, 0x7, 0x2, 0x80, 0x3, 0x7, 0xd6, 0x0, 0x8, [0x8, 0x8000, 0x6, 0x3, 0x800, 0xf095, 0x7], [0x2, 0x6, 0xd, 0x3, 0x7fff, 0x2, 0x3, 0x6, 0x7]}})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
migrate_pages(r1, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272)
syz_usb_connect(0x5, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90", @ANYRESDEC=0x0, @ANYBLOB="d21c5bdb2411701c6485ab5a5982ec516c1c16d615c28c72701f3986fec36d6f4a6ea3df56649e516b4280693981449c4ce7643ec2b7ca3100c399e4a2132246b595102212f139c16e2cd96842411e36046f370607057472b8e0e3dea5ad3c2c51bcca1d2e2d939cff5ab50be0f51d50e3964e2e14d9c2d00a9ae433454781fdde5b1e67f7e3385299851ed30141221e089c21b38d858f70f3c9300087c247978433469795d5351caa49dd66887b0b24fa16cb98db133d52d765ac12481f03c5ef9c98b4992e488bbd47add8e8b371909db9261d131a", @ANYRES64=r0], 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280))

12m58.252414774s ago: executing program 4 (id=1224):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fsmount(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xc83417c22f980b3c}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000)

12m57.772678696s ago: executing program 32 (id=1224):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fsmount(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xc83417c22f980b3c}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000)

12m39.381684442s ago: executing program 2 (id=1302):
socket$netlink(0x10, 0x3, 0x15)
io_setup(0x1, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x27b6, 0x0, 0x52, 0x0, 0x0)
write$P9_RSTATu(r0, 0x0, 0x217)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)
socket(0x23, 0x5, 0x2)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002240)="3c734f4521f1b12f1279f5f624f9239ae25c3182f5177b6963826ffbca3f0d06fe108397761f6018d4824881afa581bc91d942100f5f51532b72087e5cddc016d7fd7045a7c685f7981191fa21ad1e1aff17ed05dcf103cf41e9407ca0b2734628125ce51cacaef4ee6486fdffbc56d3db61d03eccefeb9cd1c5ad090d64df0c2d214e10b966971ebaf14cd245ea69b4ee58a13f84b04fa292d360894b7d2b80b907767425b92fa29f04012d333660e8ee963543623a37201736c7e4f884f643f2e79297242f0a03ba347e268946771caf55424607681fc0d514f0e88f324f9797ba38fdc917f4419ef17eda80368ab2eb1242e142105e1a4c055631c381895e92f93091d877fa06c3c145f119a88fd5e4c5c40df8a920b28a29f6267c2501a9270e016c69f9c5f482e2f2f92d9cc9d26311e43b76f9fd4cda008b18d285c22d7ff260ecee8fbb7de3586ef521a847f57493aeae8e762efc208bea33808c23cd702a234872857e4225c970923952688d96df18ce4ff91899399c82bc811d726cd897bdc13e01dd804c5cd295ae301bdd55055c1e03037cb030357b877d83032b148c05f741ce459fd9675941ffd1c1af9f36825eff7405b0fb8b80f6962fb3a1778f79a6285d51c1d3d7d44fc33703413931dd68e7948552b9cc21447d0144146b11259acb6d63672ca6377a547818f1035a9a71bd3b65b71874522f14d8ae500ca27976e87c6a5753c71f4c8aac2789be70090d184a4450225e38a79044ac31d43dc58a3499b89c04c34a46fcd9b5e75eec6d85e33f327ef455ad4e285256e1097aaa31050d15c89abd9a96a76d606e102ab80cee218a2b965715dfa4f9078368c4d9d0a03fa5407616810f2da3260529a2ad1960eeefe2c594c53ad14658669d19768eedb012ec1b811e326103da03451aa7cc218f5409f354db2f736f46f2dac54b03e488fa15c1c2309c359b9d02430292e1e9459d868919e4faf37217e9c2fb1c9e0bad69f314828880b2ec028f0347cd459513f9228680e0e2b4a3443163874197ce7fb23f44059e672ee6b5326c0c50a94b1a0ff53b8d2f82f77ff9d1f879cfc02aedde05bb1aa2866675c19de641e5dcb11f9d828d1bac18d081ef1a7150082d3c234dff85a084c2ed08605c871684cdf354598eb0f5abda784b704ca297ea379dd780d16f73302d85b20542f34b5bed41632762cef0ef5d1730ccf36840bc9183e8274eecdb482f8734ceec492cd1d17ac0f130696c3dfd352e4c4d132b0f161325e271c4b78df3d69a19bb788255ed87eafceceda69af1b724305af6a606955cdc0c3761614afcd7ba64bb858974d97a12851ba0acf5b02958690e2c664b05676787c350f9ab1d4c5bffadc8dac96c982447a290973e0a9e2558da27c0090b477394457f59168f12cf809936c0a5459a4b2fe375c08d1beb3112cabf7203927890bae95d94ce2e53b92f99077ad8ce34309eda903c1138b51a16382c5fe80e3a02e17059626a704fd4c3294b4fb8f0c2c17506cba7e501c3321ccb6dacb14f3a56bb8634e76f0052913c74a73d09a872038e9945c2a34405330211e56dc24469abbb7b2aed3d7a093fba8a63714dd4dbc7394aac2482d9743366a2290eb7066a335cf6f3b3b239d7ea16ab3a81b1f25545a4d7c77106b6452d7b223623b35afa9db397aa873c415e18934084afb3f4b7e707a38e7740eff6de3ecc7f5e5a14181f53fb3121bb22544f5e93b1da80abf356494d5816347c64a5c29dc73f69b71caa116324afc9a00e78289ef4cf8d2a9b9b7c879a5a8889fe58c15b5f81c48ace9460f0a5a55cc2b7893455cd5254ecd715174303428fc2a16ba2f1942419e37c9d23b35c19bdc424b7a9197ffaa57d21332567f13a441f13940526b08de6876f7401b90b690f13e8796489d8be56fc6a4a4cf614636a677f4c6235ed76fd349550084ab3e74809bac7d1e853cb4a7364062d4997d6060dfbf8592cda6c9e8af728c6bfeb31e770e1d58fedb8aedcaa5ac4c10cec9e8d2b844837b94324b84fcad517144bf79e8b684a706f6e9210f4be22ff818899e554722a0cfb81404037dcdf35f47ed7a7c724c4ca87f95130d4d40a4fbc676f1ff051a19d72bec0f094d1d6c80e05e5090b177d603b1f1c2cf0a21897fe09bfa081c43ed21e45fb65e907a8d3dee9e5575f43631447e4d45b3e9d53b0009d9b56851b209860bc1857bb545fd9673dae5fdc1ea1186bcb5e90b208c340b44a9b235be97d92d1da8906ecf1b679a4c007c956ee932d3ce656d280d29f5876799985fa45fb4424fcdc50ce8d2434aa8be292bd20aee56ab0c5443264342a9887c51ffe23d0fffd483bd98475457687ab014655e1be21a57b935c614c6d2f9266d033aaa2fea1fd9a6afd1701164bf6f45c9ee0bdc1bcdff64dcc2b52586e5dd6ee3ca4bf6b5c55dc30d77a9f799e296fc513ee932cb56f6ccf151cff162ae21801b01bfb8a67f496b1579a07310143701aa8f6db684cd7f370b345d975ad8f7f0b9c4f38939f975ed277278e56b041864600ff9a587f57cef8ef1dd10e4b625629d44d3e813093a53fe8745df04fe22158beaad579b3493b3dc44a129ead317e712bc481e13fdfaa3416ad5d19266463143c32d3121b87a067b3a1876e3d14ff4990c7afb0ef8dbdabe1a1153290fd1cd65c3c837951127650c928e4a56837ec1ba53429c3a07a8fcaa9c0cf88e787b1448a44b5cdea7ff8edb9fbb79bad67c1f02159eae7e5d232611accd54d273bfb76e31b24078779bbf06767614e0c5f5a5ec31e2d1ff6aa55f381627b5aa322451ff7f66b9054af2026a43b80cdc2350075d20ee7ec5890dc0a590d45c6d51513ff7292f18b7820a2725cb15fc93eede1fe462d3f122190fcacbf7d1bf189f8861e97049aa9020e296fc635498ed738da6b9b7229a65300980e30ccfc0602ca39fef1f911090929e4d613bd7eadadb7514049104b72ec720a2bd19520daacb217877c4341e21c5efcd725b9c6f418302403960170a63161820551ba495a4d26f956a9d42bc3f8d46119e97ef4c5322d99725c785d1bda0e2bce0c1d88bd0da6e64cf7c3d5412e6bd91f7cb184103c3223d5a073c1489ec408fed9aab1303f6e6f8a4610ed1823cc2905e2ed6b2ec3a1d481702817682b83560bbff58c96f89842ec1ce4cd128aa6709a25e696a6f32be8651d1bc66a8e9cebfaaa1a81f7556e3746cbb4cd0991d323386ba67b74583ce646aa14909288138aa0895dc7abbf324980df03eefbf218ddc8d711d68a4e60e6c2c25670f6fedf3e01e966aee8b847fdee592e9fdf16bfd0ad2b2fe227e81bcbea1aec8479fd9fdb3c711bee80f01ed1f9372578984adfe2bd70ab0ace692cbdb3d7b5d6e1797a3173feb40f76359e7624023059effdff5a712222c995bda450cea3e7565b579e134a8d476f43a85486571d32f11165154bef191ebb35ee8b18121079a51421d9a0efccd9cbaa75a0465f077385ddcf3f2cbc9f6119ee453fb70052f5c1dca5e1770aa6f71ffb2cdf7731bdf4a2697aa2d41f34a39af5cde5b4e72146a76d8c1970195af56e7e2da56f72a9d3e9b0ea868aa4f562b52e5f165e58a0b59cb2dcc4353e0441f3a2af54b2ca62ce1c170c4404f108ebacd40a19910d9f0c23e5a6470c5e2b536c79ad9380deb82ee7c4a61f06e23d6a34711db8bcd0fd411bf76ff2c929bb70f5b83dfb1b3e7d0b78fd99a01137edd0e42d6dd21d182776389a28468ca23b8c9c94c7ef4b55b7715ed9efa3e9f8a84842e6ae0f0912972cd6acf0960e8a3e1f29cc5ff6a241c7b5f15f853b7427080cf41dfbf995d06868a4dd8470401d8439f868e705139555515bc1731eb0c6a892cde3da99a3dc60781ab63e51447d77e9bc66153e9560d47db9b9b007fa60899bbd5228c552d4a91b107c77a570e03dbc60a79bb431acabf687d6d96539edcbdf05abb0517b0fe66a1c8875f384634fa693f59dcfa1a4688ecdbf7e05c9172b7070b74383d523f37937489b6250c3e69581a56d4c06aef16c1ead8c16e13144c1fa60a595f99dfa7f9975619119b1fdbe6289df55ff8885ca4aadcb922b35d036e44df42342c6520d9e011023409b95b57ba460b752fc1c15722ab3050f63b41116ebf5aeb20dab27675db92ea5d35f5730fa2dabfe6240370bec6bc04439b9204612e72be1bc2e4c2eeffe6077e542f78ce53ccdf3cdf5e101efbd662eb1c88f086295a5b8ea4a2c33d53ba492ae7ab709028151bea60db96818b699c367a0417f790a650d38482ad91057c45287a7f9df65a6ae1d6f079a2c7691c39589fef9f14f33b4c64225500ba9af795505c697897a4bf7b083836c48ebc7a1b024c56895d83454cff49a2a6a73a0f610700f4a6b9c97bbb4931895e2b2ea70828467818a4f8a213427f499d9abc7fd303c27b34028051508a271e33083fbeb350f13b2edc1a03dae9f3e217d277101d12f77c3d894a1a7eea4946f25ab4514154987418986bdf1c5f2083ffb1971bf643ab7208bc37f758c6b3b92ec0d7cbf11e23d93c94eb3ea7cfba45b2f7bdf35eaffa9afd9840d03695fc8a649c78f109865b62724fab759e51a442d7b2a364909693d6524cf52e0fa705ba9052279259d3bf6bd9eb7128b6355d3e36558aec4240187c90dde70ada7d5ed39895e4ccceb5b949c17da5f3c7e85d8ac78b0e6d1e01ac3f761d85547491b9381117fc86040fe98947b6414efd310fb9d23873d0c1f280d81cfab17c9b5a37153e31b7b9b569a0bcd9d9362e9905eae28115a575b50bf40c8292603bccde01e7c70b21100eafc1b2d5ff0798125ee0d8d6ca5777f4f85b6a7a78a9041e2172d0ce0fc2c3b19fca0e77a1c1877cae11eccb7c10e95d8fcde09e6f7d2c4a0b75e27ed872f53f0a9fcb1813059781387ead5084d9e96700ea0a01da8a3b27301c5ef09fa0e0a6bba368efccda850c9bc6c66a859ebd0ab2d1a31cb84b20a550130b6572e3045adbd7b5451197e04eea698c307be501ef8fc9227b7cc6310eea48dded0d119f2fddd22cedbf50a5269d5211c2888bfc4b12e52208153a753097367da9b36171483a9a9cc59f77d0d319447c6564d245a0ebbb6a297fcb6d296e0ca63b6d9200173bf698cfad9112402fece4b643be0ce23fe94eb3344427f5997f8db9ea31dede54fb832175cdacafef3302a26202c6706b194a5a7abe72904a85a5579334727a314ee4c80dbdf60357d41987f81f23dac28470b8411d7cd0ae277017ea23190193f7d6858711807eb955038d2b484608f185d3dd98745611b846b1b580338d4a684c08e62bee65151b12243167afbdf3ae27e0f229e7596f45e2b9111ed6e0019336fa4b8897677fc5e412bcfc8ed948064dd0618d08e0b702a3984d0847e610036905b756bb7df0b9200bc5aaf0603f1a78dfb52e9f974b1327c6ae3b89857296755771b39ad8c6e4da1e204d17f207ec10ece9cabd7787e8d3d4de9cf72c19505785459a9871a2869c42fbc649d4403fb89776b6b86b8faf03858a9b007cb29b79aabc59380c1053143718c8574fe07a9471a0a6ca323e5927442a9ee806d659f450f0abb9abb39ff467ddcb7406650b196bdf797a49503a7d024b4fb1c49d7b8f6e49fe6fb672bb80b885bd5fd814f5a07a68f5c2de6e70a12c1eae4b46e5cab45bc2d52086b4f2812d7c0d082875a5c2c6718f3ffc8687fbd033f43b614dcdacaf82b3b163f77122ae3531f8247fdf83c569b8b4d172e5a852eb3ff1bde3e7d165f377149a1925aff41d26f1aef70a1d7ae04191d2ae0d18109b668ba71be28358ac9fa39c3311d9924c4ce894485449920fccd43038e9e04f81134172ddef9155fe71ab0c51e1650450c39ee6bbd282d3021bcba75bfb5489500d5569a2225c9656d76bdf08e1b0c61e06974b8f97cd81cff6ce68a356c0bdea7a499f8a7b075a111887ad5b82d58cb90cd488f281b41dc0bc08e319c0463fc57fdb8b326b93e909709bca793d2f2355f94c940476ba32928e16554ff2494aa2b79c3e3d1088c1f0369262bda183438e1174bba20f050ed68147c0c14aa7d8c0a08f7269c48a9ac43f8533545aa183d843180633d23e54e0a03082022ee13a88584b09c877a6095c7b49239ac7f9357e23760abf69bbaefe67dd26426fd7557440a44c173302f396cea6b6fdb03159784b247f4543c3758293e902e215cafaa1133cfa277f4e951a972444061cfcad4c1ffc99891bb002d2f762520ef589b21c98a9beea24e84a39bd89cc608bf71a24507d94741af211b4f66ea6e220a86f01978c09e204ef3f355acf954d7d64f10b027c518b9b57f124ce901f862f67b429b028fde95a1709a8693dbb69a60332061f441bbafaf31a9fb1ec1b697cb2a9ce56660f3f7e21768bca9a36b854295202fa077ca8c1822978ca68d0cbd4f5bde276184b05965005aa803d0b50c5b285a434a6e47d83205a144e88d57dd16cecc38a17a581b33088434056b33d92d776f7e830500f78e21f0f1f59b7a43bf417e3c97a6bd563c58e842eee8228c39d43627c7929e1ea098472c6bb3d4ee990654da3ac723ce1e3562933f7e08404c4002ca947acd9ab44a85dcf68a739be6fe7dd4ddde0715a71b379f7918b77bef996d91e4790b8f79fc88bcb9037c9889c8280aff78986f773aeb1688291b8cbb2f4bbfa2bd45e3b96fefc099b088f3dcce6144c754a311cf14662cfdae1f0fb23b877c896e4d06c2d1915740099a6be2f534f5b78f64e178149f1fb90e4fd2a32c0a055a1f596fcfff17d5a233d8d891213dc4c9991e7b02b9341f067c453a161aebac70f1adcc9b410b1b36346cba70587f57fcfe940116c39caa018f2029cf4b2e6102e1c2c4be5d31669a596a576dd8a3e84166d70883ae25591821769277f722958752c6ada729c0fdbefbfccc0ac5df3e1fee2ee7c74ddb3f7fa1f87e06d68b865b9d0447b46d40669b5fa0f754f4c5867b310147fb49123a6f2f37f32e3ee1b53488d5a3d09701b471dd3eb5f146de78d5a5ed3cbeb268732828de80ad214cda52f3ccd5a7d06329a6b74b783b66417e8e45343acc0b186205d91158bdb090610d5fe65f11fc44dc521e9e78abd304111878109b8a656d6af306115adc843a3ccffed114029464060a27315a59934683c6f83fa862c254c4cef70baf27a1d16489e152d3fa14061d20ffde3bb558b6ed3b4e864e3c35c79ff7edceccee90b97399b8ad4433c0bfba6bb826eb536c3195c1f6d9a5db2619da0905dfaced8d07445f0bf3ef2b1b3acce724dec5ed561f841a38ac2cad02d1c3cd740857f4640929ad67c660ec6891c3ccd67e0e4dd20f2d01b3b9385039a145d1cf39ce6ec373498c7b289069ec3a08d5e973f634ac7a795bf1df11fbb8daf09d93697789276ea60b74c38dd406ded426fc16788602fc87a276c2eb0a0a63a2a8aff897b83e31d5f95be0e88551e70fec7974f7563b856d3f15758e7a489bbef409998d111964e88b23078a981322266d709e9b22058f3ab5676e484eeeaaec2f25b3ed89a453e8400bdbf8175283ee7457eae77e89e699b92df221e8604004cc400f90773cd5405c88544920cd8d08a99258b0c223867002fe9a2659d2df78c9bb8aca185d728bb41a65a9a4f2fcbc0ee2de71cd2a52d1dd7d86f5a95f3b40482d5ff5e0d8028f75c804476db91d08f7392e79af73bc05284169dc2489129252edff4e5a7b34120ec4787795819f3c9f3b26a6a712abb5af6484ac3f8e4653294c7bebee574101cb229f873abcb598eb9a60733d68668e94395b8adaaf465e761e7a1d4e12885725a7bd76584a70ff0149a64c8c7ec5ac07fba3dc32978b573f236ca23538f0b9f515b846257bfd0d9b33be8ad4f0923a8d7960c63c01864a4e4cf04cbc6fe0e12d813c1619b11850a47b9eef54ca23e12e7545a80330b488c785afa7980eeaf3f99f8c041e2d3d93226ab9ba647b4eedb86d24dfae8e38800ebbec3535fd5f556fd4129cbabdd8ea9ffa15e45e5ee13984f3c3c86cf9b6cab3199205129f8fdcb230508109b07c5c402669144e96c63edefc17407c355915f5c6061c0968e756bed6869c9ce3447d4a79d953bb8c10f508e869539eaf5ca9417fe81334ae560ac0a253afc8795a2d78081169410ddb5c39774e4d890c7f820df4f154d8469213f65b9a48f36c731335f42dc7f05e3f8a0bdedf0eb0fa9042ce3a181410ffc75127308c0dc86da06140b219a14eafb14caad526b3feff6b9ba104ab48b243969daf510734cc1bd6ac4665c4774eb9f78257f06d47207c54c0009c13562d85a01d3d0e5ecbf9eb3fa0013b7c06e21d7b2a096e2d064dbaeb329cbcf8cbd4c963da11bff7bdf2d0b5a5f0ad560e3ac43714bdde1c618b64aa081053e89f89b147214560ecda1aefe72b229d01108ff9384809a55239e14ab4489c4fb7e05123d622c63345380e0a3d02a74e76c93f90d8ea5458fcdf6e7c5b0d39d543f1b12d18c40f6d920d469a6b6b8c1ff0b63e878034884798fd0e03baa25ad7fdf241439d51243ebebc07a71577bc3b6da1c8954cba555f38bed105ffc5003542884324704e4e835675904f36307df5e1bf26bbb477b5abddcb9c0ec0c9adbc9d07f890b17c6f495c6170b49857350178e8b018d22bd60adce2e4137a4ccbc1821389d7101c291467c692907c5509a6e89fd5f232a818e1ea906285427fc36edeb23ed3d77140c1b453824bc886665b47cdbb6604f153718533be781b04f2e1f9137e1aa56596faf43613a3b54e83ae423c6aac9375978b09f00bcf78aeb0d1459a1f7aed31e796a970671fddd7b356091c5ba0118f90eb12f4c6468a4cbd9383acc69fe548be67f5b69d4767fb084fb9a25092669cb8d336fe06fd651f851e250255cd633264d9c8a2ad8b5ffac9c3ec4b8808817b4d3c7e3bf260bc0b3dc258760aafeb0b91dbfcd5a21583493fda88fd1453197836b7d7f424edf878af6609156e7dc6751a095ba544f63b38d1be25de15d3ecebf3bd97e56df036a54b2655512f432bc8877153cf4e5726af40f9897271c9611bfb092317c023d24b9022baf99e9c445ad8a4eeb2fd03e68331dd0f2c62ef1f81466775b352eee6698b11a4f9105203b3425aa5524f94256169b65948cc759dfc56034114b26763b5ea960570c10bcad084f55602dc4b6f7aea2dd728b89aa5f6a0159cf62b52517a93ab21dee6bf7a224e87a805c57cec7bfa14a2be70feb3a326dbc9801b474f774ef0ee425398b4abfda5ad51eeee2887bd872eb5fc8d156dd7b612aaed61d4fc4980a33d6f5f2b48af92748d452f636359b48b9806e2993f638ebb6b52fd23bc1f82cc392b2c1829e6c8c51e8f905884989f1c479deeb14ebdb2076aa8fe999610cfb06622b2241129b27a9e8d8267f2e1b9c81de67cfe8028bf3025d54d1d27e58381cc96e117af9f517eb366f753504072e1e1b45313fa05b6708bc0becc933fcfe507bc136b8ecba3c8e567eb461b6a04fa5412e37edabe1f3c8a66c9e0f023ebcae31fdc92c711bdcad3a52fbd6d5bd336da62f3b4e3b26e86b9881fca33e8c8df15fc8f0ce5b755681f42f3d9b7d6da79dc44eab0cd93d4ba677de080de5cf42721d91664499d1a11dc23d096d325912d59efe60d4b360696b920669cd95903214e2fe9bffd03812779cacb398752539dffde80eebb34c1863ad3d07c21f7dd605237ec2b57a7594558b2b9f82c0cd9251ccc92c9d1fc1cc7cb1bf4afdea3bda27114002015278655b4f507f9635afc1a396fa42e724da8ee6cfe498da5b53a30d2cdd1878f5c2494d23a58975c026d819520af5a4e667646a3a05f6f03b64988505e7bc92d04615bb482fcf79e5264aefadaa9fe5f4c628936d59e919242c05529973eac054c12ee8ae18c7921e9ad5e3bac80f88dd034d48af7787a4e8f16ccd577a74d8d88a12183bc6ea2fb11f7f441051b11534c2d09bb0d285d64c97ad4892f479ef32839270afba342e995b63cf4967712ba4dde2ec4438786816a2b01ee64b9b791418c09720490e18706302bdae8d4df6012a07853cc1b46cc33733183be58a23d42ddc64bb7c04b7635999cd151ea8f513270d960a00130471cfa1c78b5803ec776aa6eb5ba447c6d65d2729eff296ef8cc3a304216ca0342e3fe3a8a999aeddd04c135339c62ade75941d237b56611eb1d178fe6d05e15b6dfcea7adc239d841172b94d533f9e407a2d391253e10c986e00bcb03b31b92076d03cbd0adffbb2812c70116b83d91724b0bde3ca695bed4c47c37c3d8ffb45ea46b7af41dc33097df4fe83b814ac8bbc071f881288aa25343f82ce1428802e1caf6ffb15571aaddf6141270a65444c869c3cfe76dad225d1264c38dd3dc9365d55f995cd1283e247817b2d4f301f5e155a00564e2189d6a00c7459291cec4c94fe546276af4b997b67abfba47a5d31ca7ac4f756d6f263612fd44442c379ea86a5dba75e7b6342d6b434dfd3137d556d849540b5fc3cb75ce0c638e1c561dd5708720a287bf27727af3b3fa0e4f52559680fd180b8855219f8bfc09031883a4c4ba930923e0bdb9446270429fc88a219004eb733f8b0ad45edef7b0cae3d788c54544a5265f25f10c35c0c10bad7fed04883d3a75dc7108d00033006046e246ac7bddab0d2d251bf9594f711c6f5cb6cc26019aa47811970e26f2889bf14d7f0549c157fdf1b8a6b59eacaede3926554679f1da5b53d1f740804be80e37e68789bfed672519b26e6f01efa51a4dfd7d12339b45ddc9b60f594ca2a94c6e4f84f822757d0b30a5250b214b020134cad5c144274c437c4806c4bf35cde3a40a9d977c367ebd0c634e6f390740e76e21345ea75251ecf970820b9a079185b7b83f81d938b9c517540c02d87f671efedd23069c610876671f3912f2468016541c85c8c704bc71adc697ff66d7b3ca4f8eb93e608be5f4b331ef291ec31144d010a71cac7da0f47e53817ecc94b1f446513c5a38e344cf9558f12b3d78d78b0fef62eb3e12d7d463ba76ca0634cf620d2e3b877fb292121f18433389401fd032263c8574d3c3d47cb929c3a2fb268180f8f052966e0067c77899b280a260ca71409459114a9fd9167ce3be419604259faa319268fb93fde4ee77eaa6c5c8a5ceaba2e98d28b9080d61965e418824f4152910f6f0a39d08ae84e91d38038d8a031595ccc0f67cbdee593e1bd72fdc21276d73606663a42cdf6976b333c6db1c7bd4f694f703237a2b1ee899be6efb927a990edf873e1bd2628155d3486a1035e2c82d094cc4cbfd30fed5b3d2ad8e25ea71c332183d722c97e4d89443aa04eb68f7f917f9d6729b29e09d33771bf4491927e8f171b7dd63bff3218ee15ab108121bc1c37ada6b03f607d2e5df388627de6486e3e8571d5f29855902c71037e8e6b2f3f61b89d673cfd85da5a3cce0e85a54b64070e8134fdf511707ba52c6095808bd35973b955f8db884ce7342ae0d495e441c964bbf7b4b1f4ce4f241f74a08e657ad701409c122ffe8d03a18e138018578c8ea27cc311aa46fbc50c9241542942e59b748a18fc0543988cae6", 0x2000, &(0x7f0000001800)={&(0x7f00000002c0)={0x50, 0x0, 0x9, {0x7, 0x2d, 0x4, 0x480000, 0x7c72, 0x1e1f, 0x3, 0x0, 0x0, 0x0, 0x10, 0x8}}, &(0x7f0000000340)={0x18, 0x0, 0x5, {0x7fff}}, &(0x7f0000000380)={0x18, 0x0, 0x0, {0x21}}, &(0x7f00000003c0)={0x18, 0x0, 0xfffffffffffffffc, {0x7}}, &(0x7f0000000400)={0x18, 0xffffffffffffffda, 0x8, {0x8}}, &(0x7f0000000480)={0x28, 0x0, 0x60c, {{0x8, 0x5, 0x2}}}, &(0x7f00000004c0)={0x60, 0x0, 0xa06d, {{0x4, 0x8, 0x35, 0x6c745c7c, 0x800, 0x80000001, 0x7, 0x2b7}}}, &(0x7f0000000540)={0x18, 0x0, 0x8, {0x9}}, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000000600"/17], &(0x7f00000005c0)={0x20, 0x0, 0x6, {0x0, 0x9}}, &(0x7f0000000880)={0x78, 0xfffffffffffffff5, 0x1, {0x10, 0xf0000000, 0x0, {0x2, 0x6, 0x68a6, 0x5, 0x8, 0x6, 0x8, 0xc8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x8, 0xc}}}, &(0x7f0000000a00)={0x90, 0x0, 0x5, {0x2, 0x0, 0x0, 0x7, 0x68f0, 0xe40, {0x6, 0x0, 0x4, 0x0, 0x8000, 0xe, 0x7, 0x80000001, 0x7, 0x6000, 0xfffffffb, 0x0, 0x0, 0x2, 0x3}}}, &(0x7f0000000ac0)={0x128, 0x0, 0x4, [{0x6, 0x800, 0x8, 0x3, 'nl80211\x00'}, {0x6, 0x498, 0x8, 0x3, 'nl80211\x00'}, {0x3, 0x0, 0xf, 0x1, '/dev/sequencer\x00'}, {0x6, 0xcb52, 0x8, 0x5, 'nl80211\x00'}, {0x0, 0xfffffffffffffffa, 0x8, 0x9, 'nl80211\x00'}, {0x1, 0xff, 0xf, 0x6, '/dev/cpu/#/msr\x00'}, {0x6, 0x4, 0x1, 0x2, '\x00'}, {0x5, 0x3, 0xf, 0x7, '/dev/cpu/#/msr\x00'}]}, &(0x7f0000001140)=ANY=[@ANYBLOB="d0030000000000007ff3ffffffffffff0000000000000000030000000000000006000000000000000000000000000004000000800101000003000000000000000500000000000000010000000000000004000000000000000500000000000000780000000000000003000000070000001806000000c0000001010000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="810000000400000000000000060000000000000000010000000000000f000000050000002f6465762f73657175656e63657200000100000000000000030000000000000008000000000000004a030000000000000300000000000000000000000010000005000000000000002b4e0000000000000600000000000000050000000000000000000080000000000400000007000000ff0700000010000009000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000080010300000000000000050000000000000008000000000000000200000002000000402b0000000000000400000000000000010000000000000008000000000000000100000200000000ffffffffff0700000500000000000000000000000000000002000000000000000100000000020000000000000003000700000000a000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000005000000000000000400000000000000db0200000000000008000000030000006e6c3830323131000000000000000000010000000000000081000000000000000600000000000000ffffff7f040000000400000000000000bb080000000000000200000000000000ff0700000000000003000000000000000800000000000000070000006c00000003000000006000005253ef33", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f7ffffffb47b00000000000006000000000000000400000000000000000000000900000002000000000000000000000000000000c500000000000000070000000000000004000000000000000600000000000000ffffffffffffff7f020000000000000004000000000000000300000000000000010000000000000004000000000001000000000000800000fbffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ed00000000000000000000000200000000000000000000000000000000000000005000000000000000000000030000000000000051ead30a000000000e0000000000000004000000050000000400000000000000010000000000000000f8ffffffffffff80000000000000000900000000000000e9bc00000000000003000000050000000200000000c0000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c71f0113ff0700000000000005000000000000000c000000000000000f000000090000002f6465762f6370752f232f6d73720000"], &(0x7f00000015c0)={0xa0, 0xffffffffffffffda, 0x573d, {{0x6, 0x2, 0xe, 0x100000001, 0x9, 0x1, {0x1, 0x8, 0x241, 0x15, 0xb, 0x8001, 0xfffffffc, 0xec09, 0x3, 0x4000, 0x200, 0x0, 0x0, 0x5, 0x4}}}}, &(0x7f0000001680)={0x20, 0x0, 0x100, {0xfff, 0x4, 0x7, 0x2}}, &(0x7f00000016c0)={0x130, 0x0, 0x1c0000000000000, {0xffffffff, 0x9, 0x0, '\x00', {0x400, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1000, '\x00', 0xffffffffffffff7f, 0xf, 0x0, 0x0, {0x0, 0x44cda4ca}, {0x7fff, 0x1000}, {0x40}, {0x80000000, 0x9}, 0x3ff, 0x80000001, 0x530, 0x3}}}})

12m37.741871578s ago: executing program 2 (id=1307):
r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
r2 = syz_io_uring_setup(0xa4, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x5, 0x40000336}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000020c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)

12m37.459224723s ago: executing program 2 (id=1309):
io_setup(0x41, &(0x7f0000000000)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
gettid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r6 = socket(0x10, 0x2, 0x0)
write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f00000001c0)={0xed, 0x0, 0x8})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80131}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000851}, 0x4008014)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x10, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0xfff2, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r9 = add_key$user(&(0x7f0000000440), 0x0, &(0x7f0000000100)='7\f', 0x2, 0xffffffffffffffff)
keyctl$read(0xb, r9, &(0x7f00000000c0), 0x0)

12m32.248112793s ago: executing program 2 (id=1325):
accept4(0xffffffffffffffff, &(0x7f0000000100)=@vsock, &(0x7f0000000000)=0x80, 0x80800)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0xfffe})
socket$inet_tcp(0x2, 0x1, 0x0)
fchown(r1, 0x0, 0x0)
fchmod(r1, 0x50)

12m30.058469112s ago: executing program 2 (id=1336):
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(0x0, 0xb)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

12m29.466342371s ago: executing program 2 (id=1339):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000002040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="dbe900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000400"/28], 0x50)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa9525000)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$char_usb(r2, &(0x7f0000000380)="e8f91ee0ce1b2c3ee9d03e7027a43a6b37c0a0e36985d71b8a44edcaa71be80f1c41fbfee0a997ad94c42d2fa43a2574fe8a468e018000000000000090975a9696a49b2f5c00a006e5524abb3e308f5fcd471fa5781e9d071d29506d5927ca85c0958e6c3bd957491af6201c82e854c30c5d9741a38abb2b81e779340ca8f28a0ab0c20dcc87f9ece4155d6723712814fc43dfa046900643ac8c1a8b6ea44792c3d76eac06fe90fe283f73e094b120a6ab50cd2ccd0000000000", 0xba)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000010000000300000014873d4720800400", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001000000040000000f00000000000000", @ANYRES32=r2, @ANYBLOB="00000200"], 0x50)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0)
write$dsp(r3, &(0x7f0000002000)='`', 0x88020) (async)
write$dsp(r3, &(0x7f0000002000)='`', 0x88020)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005aba41100b0c09a12deb010203010902120001000030002904130000a656e200"], 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005aba41100b0c09a12deb010203010902120001000030002904130000a656e200"], 0x0)
timer_create(0x4, &(0x7f0000000140)={0x0, 0x2b, 0x1, @thr={&(0x7f0000000080)="b349a51a0d052d1198932747face9dc1a0829f020e9d373dcb6906c46f696e59b06cd6caed919a3c30f3f396827094f0131ad74b34", &(0x7f0000000100)="57bbe1d569256b6ea65ed9ba919c25ee3915c976ed471a2f52bddcbf9590a9abe2a258aa9d3e481129c6608c1fce82"}}, &(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid() (async)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setgroups(0x0, 0x0)
setregid(0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xc3) (async)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3)
bind$ax25(r7, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
connect$ax25(r7, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async)
connect$ax25(r7, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)

12m12.565948975s ago: executing program 33 (id=1339):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000002040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="dbe900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000400"/28], 0x50)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa9525000)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$char_usb(r2, &(0x7f0000000380)="e8f91ee0ce1b2c3ee9d03e7027a43a6b37c0a0e36985d71b8a44edcaa71be80f1c41fbfee0a997ad94c42d2fa43a2574fe8a468e018000000000000090975a9696a49b2f5c00a006e5524abb3e308f5fcd471fa5781e9d071d29506d5927ca85c0958e6c3bd957491af6201c82e854c30c5d9741a38abb2b81e779340ca8f28a0ab0c20dcc87f9ece4155d6723712814fc43dfa046900643ac8c1a8b6ea44792c3d76eac06fe90fe283f73e094b120a6ab50cd2ccd0000000000", 0xba)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000010000000300000014873d4720800400", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001000000040000000f00000000000000", @ANYRES32=r2, @ANYBLOB="00000200"], 0x50)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0)
write$dsp(r3, &(0x7f0000002000)='`', 0x88020) (async)
write$dsp(r3, &(0x7f0000002000)='`', 0x88020)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005aba41100b0c09a12deb010203010902120001000030002904130000a656e200"], 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005aba41100b0c09a12deb010203010902120001000030002904130000a656e200"], 0x0)
timer_create(0x4, &(0x7f0000000140)={0x0, 0x2b, 0x1, @thr={&(0x7f0000000080)="b349a51a0d052d1198932747face9dc1a0829f020e9d373dcb6906c46f696e59b06cd6caed919a3c30f3f396827094f0131ad74b34", &(0x7f0000000100)="57bbe1d569256b6ea65ed9ba919c25ee3915c976ed471a2f52bddcbf9590a9abe2a258aa9d3e481129c6608c1fce82"}}, &(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid() (async)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setgroups(0x0, 0x0)
setregid(0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xc3) (async)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3)
bind$ax25(r7, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
connect$ax25(r7, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async)
connect$ax25(r7, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)

2m34.112582263s ago: executing program 0 (id=3491):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c570820fae0900cd3292ea54c7beef915d564c90c2", 0x18) (async)
r2 = accept4(r1, 0x0, 0x0, 0x800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2m33.945805726s ago: executing program 0 (id=3494):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000004c80)={0x0, 0xf3}, &(0x7f0000004d40)=0x8)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e0000000109021200"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
pipe(0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r5, 0x2)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000080)='Y')
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x50, 0xd, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x3, 0x7f, {0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0xe91}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x38, 0x0, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x9, 0x7f, 0x6a, 0x60, 0x6}, 0x3d, &(0x7f0000000040)={0x5, 0xf, 0x3d, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "fd51d41a5b9c2715872c2eae02c0d18a"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x0, 0xd}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x7fffffa, 0xf, 0x5, [0xcc692dc760e2e726]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xc2, 0x9, 0x4}, @ptm_cap={0x3}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "2f73fbdeec3e9df0de6aceb7692199243babc3c406f3b7fd807a4b53e00f56cdf8eb82333f12b6676e883263c2ed8b3939973ce729354e0ec27eedfb88b98414f7da1456c44e830b54702cc1a80788d6840131e4d435793fc8f4d85443b5ad8b978989db069953e673fe114bb3f6b75322"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc04}}]})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000e40)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970011a811"], 0x11de)

2m29.603257221s ago: executing program 1 (id=3506):
r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x10000, 0x4000})
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x14e2]}, 0x8)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r1, &(0x7f00000002c0)=']\x00', 0x444040, &(0x7f0000000300)={@_ha_fsid={[0x401, 0x9]}, {0xfffc, 0x4, 0x1, 0x7}}, 0x60000000, &(0x7f0000000340), &(0x7f0000000380)=0x5}, {[0xd189, 0x7, 0x3, 0xfa]}, 0x5, 0x5, &(0x7f00000003c0)=""/5}) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x10, 0x0, 0x8}, 0x48)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f0000000080))

2m29.581343912s ago: executing program 0 (id=3507):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x889, 0x4, 0xfcf4, 0x8, 0x14, "2f9b416c74f74046"})
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0xc2, 0x4, 0x4, 0x341b9dc1, 0x14, "3c7a463a94e12b770fb012df5e5f4336b87646"})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000000), 0x4)
dup3(r2, r0, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040))

2m29.535442445s ago: executing program 1 (id=3508):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0)

2m29.3957375s ago: executing program 0 (id=3509):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf252d0000000c00990006000000320000005b00450049dc9b4f7431ad8b3e801517f670393569187836c707187bd7653372004e3224a2428b65842c80ee3e78a264e811125cc2afbcebab455955cf6ea45bea4f8c4023dfdaa0f228067b2e28711d34db21e29dc249931d336c00c8be67325dad072f9c589c1e1d2c96b5a413ad1ed92391726bf0e60c3a2a1690b37b33492b"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x8, 0x0, 0x0, 0x0, [], [0x0, 0x4], [0x0, 0x0, 0x0, 0x551], [0x40000000000000, 0x0, 0xd, 0xf]})
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@private, @local, <r4=>0x0}, &(0x7f0000000240)=0xc)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x174, 0x12, 0x500, 0x70bd27, 0x25dfdbfd, {0x1e, 0x3, 0xb, 0x24, {0x4e23, 0x4e20, [0x9, 0x3ff, 0xff, 0x975b], [0x1, 0x3, 0x9, 0xfffffffe], r4, [0x36d4, 0x2]}, 0xb, 0x664}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "e1f7e12d7285db4521e02924a1ffb3858d461d81f87020e70dbe8d9db864502773476caf5054acf8bb29dcca43fb052e678eb4175c64d84c0dc68669a8dc44de33deae79a52f"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "0b6e21eaaffbcc62109229ec29f07ce1e2668e695c2bd2c61f37ebd1233dab2d1a3d3c31d79bdbf95a77b1d15045a2656a8074a1b41d8c9960f1a79771ecef08930070fbac8cf6422d514b5ed5ac9eeca54ddc049d879b8dc8df31cf7f1be01f5ceadd955d5f94abeb9500a788ff70770515456bf119c13bf4758bfb6bfdf9c732df133625a5293127825b9d3a482429d597bccbee907a9d416368bd25f882ae9af3080efb3438df79db8295c00f8f3f8fcf33399ac25ee172e93420c7a4e85273347a2e70f8b412fa778c52fb492fff0af4b8ad78100fea"}]}, 0x174}, 0x1, 0x0, 0x0, 0x10}, 0x8000845)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffc0900020073797a30000000000500010006000000050005000a0000000500040000000000140007800800114000000000050015002800000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0)
dup(0xffffffffffffffff)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$inet6_udp(0xa, 0x2, 0x0)
add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000080)="74fe", 0x2, 0xfffffffffffffffd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)

2m29.309925339s ago: executing program 1 (id=3511):
r0 = timerfd_create(0x4, 0x800)
timerfd_gettime(r0, &(0x7f0000000000))
timerfd_gettime(r0, &(0x7f0000000040)) (async)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000080)=[@nested_amd_vmload={0x182, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x2, 0x9}}, @code={0xa, 0x63, {"0fc7ba0200000066ba2000ec65643e410f01ca66ba2100b00bee2ef3400f060f01c9c42181f249d848b817500000000000000f23d80f21f835000000300f23f8450f0666baf80cb83c9b9282ef66bafc0ced"}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x25000, 0xec6e}}, @enable_nested={0x12c, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control64=0x2023, 0x6, 0x2, 0x7ff}}, @nested_amd_vmload={0x182, 0x18}, @rdmsr={0x66, 0x18, {0xb0d}}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x4, 0x2}}, @nested_load_code={0x12e, 0x6d, {0x0, "c46351492f1bc4c1797ea2bc00000066baa000ec0f01c5f266f0878a0000000036f2410f11d7b805000000b96f0000000f01d9c744240021000000c744240208000000ff1c2466ba2100b00eee4e0fc7aa8c6d0000"}}, @nested_load_syzos={0x136, 0x128, {0x3, 0x1, [@wr_drn={0x68, 0x20, {0x2, 0x400}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x54, 0x2, 0x7}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x6, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x8, 0xf36e}}, @wr_crn={0x67, 0x20, {0x8, 0x9}}, @nested_amd_vmsave={0x183, 0x18, 0x2}]}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @code={0xa, 0x59, {"0f0d77efb9800000c00f3235000100000f30dea60000ffff66460fd99270dae6f8b99f080000b800200000ba000000000f308f293896d9650f017005263e470fe4e566f3446e679c"}}, @wrmsr={0x65, 0x20, {0x99d, 0x489a}}, @code={0xa, 0x65, {"c4a271b9a6f2790000470f01c9460fc771580f0667420f001c4d6a000000b979090000b800000000ba010000000f30660f38828300000000b9a1080000b84b110000ba000000000f3066410f7ee8440f0f55000c"}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x8, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee0000, 0x8f72}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x8ff}}, @in_dx={0x69, 0x20, {0x95e6, 0x5}}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x70, {0x0, "4a0fc7a80a00000066f243ac66660fc7b75100000066baf80cb8dbf46f8aef66bafc0cb000ee660ff56b1566ba4000b0a3eeb9800000c00f3235000800000f30c4836d48aa00480000010f20d835200000000f22d80f01cb"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host_nat=0x6c08, 0x6ba4, 0x80, 0x8000000000000001}}, @nested_amd_vmload={0x182, 0x18}, @code={0xa, 0x58, {"6640dbc93e430f001966b81d018ee8f4b933000000b800880000ba000000000f30363ef3ac0fc7bff1000000460f01c4b9740a0000b88c300000ba000000000f3066b8e2008ec0"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x5a3, 0x3, 0x3, 0x189600000000}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0xe142}}], 0x65e})
ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000740)) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000900), 0x602, 0x0) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000940)={0x3, [<r3=>0x0, <r4=>0x0, 0x0]}, &(0x7f0000000980)=0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000009c0)={r3, 0x9}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000a00)={r4, 0x43, "8302d00b6661139a131b2d08899fdae59830f1cff5790349065bf6ddce600b036d178b24d90277bec0f43952d62451dc7ea27c37dec08da1ee2a58827ae4ba12d3e0bd"}, &(0x7f0000000a80)=0x4b)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x1) (async)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000b00)=0x9) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000b40)={0x80, 0x100, 0x8003, 0x1, 0x6, 0x3, 0x3, 0xdd3, r4}, &(0x7f0000000b80)=0x20)
read$watch_queue(r2, &(0x7f0000000bc0)=""/4096, 0x1000)
ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000001bc0)={0x2})
r7 = open(&(0x7f0000001c00)='./file0\x00', 0x404800, 0x190)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000001c40)={{0x1, 0x1, 0x18, <r8=>r5, {0xfffffffe}}, './file0\x00'}) (async)
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001c80), 0x10000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r9, 0xc0189374, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) (async)
r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0) (async)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000001d80)={<r11=>0x0, @initdev, @initdev}, &(0x7f0000001dc0)=0xc) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001e40)={'syztnl1\x00', &(0x7f0000001e00)={'ip_vti0\x00', <r12=>0x0, 0x8, 0x80, 0x81, 0x0, {{0x7, 0x4, 0x2, 0x23, 0x1c, 0x66, 0x0, 0x1, 0x2b, 0x0, @local, @broadcast, {[@ra={0x94, 0x4}, @end]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001e80)={'team0\x00', <r13=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000002000)={'sit0\x00', &(0x7f0000001ec0)={'gre0\x00', <r14=>0x0, 0x80, 0x7, 0x10000, 0x7, {{0x46, 0x4, 0x2, 0x8, 0x118, 0x67, 0x0, 0x39, 0x2f, 0x0, @empty, @multicast1, {[@generic={0x89, 0x2}, @timestamp={0x44, 0x2c, 0x38, 0x0, 0x7, [0x1f78, 0x1, 0x4169, 0x4, 0x7, 0xb, 0x10001, 0x9, 0x2, 0xffffffff]}, @cipso={0x86, 0x3e, 0x3, [{0x1, 0x12, "5ab94dbcf961bc110b96f79fab65cfdb"}, {0x7, 0x4, "e793"}, {0x1, 0xa, "696223b5aa6ac148"}, {0x7, 0x6, "7a79008a"}, {0x5, 0x12, "572109ca130dfbec504d306cc0cd5bef"}]}, @timestamp={0x44, 0x18, 0xfa, 0x0, 0xa, [0x80000000, 0x100, 0x4, 0x1000, 0x400]}, @lsrr={0x83, 0xf, 0xf, [@private=0xa010102, @loopback, @multicast1]}, @cipso={0x86, 0x57, 0x3, [{0x0, 0x2}, {0x2, 0x6, "cd41aeb6"}, {0x2, 0x10, "cdb7d75d956ebb1b6f3bd27dce92"}, {0x6, 0x12, "4f7b7a7801fbfac90db96940ef2db7dd"}, {0x0, 0x4, "be83"}, {0x2, 0xd, "9e3075250ee59456f44a6b"}, {0x1, 0x9, "53ceba4a2bc905"}, {0x6, 0x9, "7b82615db18591"}, {0x1, 0x4, "0378"}]}, @ssrr={0x89, 0x17, 0x16, [@multicast1, @multicast1, @private=0xa010102, @empty, @local]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000002040)={'team0\x00', <r15=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000002080)={'wg1\x00', <r16=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000020c0)={'team0\x00', <r17=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000002100)={'batadv0\x00', <r18=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000021c0)={'ip_vti0\x00', &(0x7f0000002140)={'syztnl1\x00', <r19=>0x0, 0x7, 0x10, 0xa7ba, 0x6, {{0xb, 0x4, 0x2, 0x4, 0x2c, 0x67, 0x0, 0x4, 0x4, 0x0, @multicast2, @loopback, {[@ra={0x94, 0x4, 0x1}, @generic={0x7, 0x10, "8633020e8dabf7a2c88854e69eb1"}, @noop]}}}}})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000002c00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002500)={0x69c, 0x0, 0x100, 0x70bd2c, 0x206, {}, [{{0x8, 0x1, r11}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1000, 0xdb, 0x10}, {0x6, 0xf, 0x2, 0x1e}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r13}, {0x4}}, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xb, 0xf7, 0x4, 0x7}, {0x6e9, 0xb, 0x6, 0x249}, {0x3, 0x3, 0x64, 0x5}, {0x6, 0x1, 0x3, 0x8000}, {0x4, 0x0, 0x2, 0x7f}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb61}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x69c}, 0x1, 0x0, 0x0, 0x20044040}, 0x20004801)

2m29.189837609s ago: executing program 1 (id=3514):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x40000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500340000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

2m28.439488274s ago: executing program 1 (id=3516):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r1 = fsmount(r0, 0x0, 0xb)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c80)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "b4c069143122e33e22f7e8b566780204"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffff, 0x2, 0xfffff000, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x7, 0x30000000, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100007}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0)
fchdir(r1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x880)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, r15, 0x1, 0xbe9d, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x10)
r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r11, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x48, r16, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x48}}, 0x8004)
socket$inet6_tcp(0xa, 0x1, 0x0)

2m28.371975828s ago: executing program 0 (id=3519):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}})

2m27.936744089s ago: executing program 0 (id=3522):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x207, 0xfc, 0x8, 0x6, 0x0, @local}, 0x10) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x21f, 0x0, 0x0, {0x5, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xdc}}, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x1)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) (async)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="05000000010000", 0x7) (async)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)

2m27.216133698s ago: executing program 1 (id=3523):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0401000016000104fdffffff00000000e00000020000000000000000000000002001000000000000000000000000000200040000000000000000802000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x400c805}, 0x4808)
fsetxattr(r0, &(0x7f00000001c0)=@known='user.incfs.id\x00', &(0x7f0000000200)='\x00', 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff0100ffff080049f00050006700000306907864010100ac1414aa070b07ac14143aac1e000107039300000000000000000000000000000000000300004e2100004e2200001f0100000000000000030000000000000001"], 0x0)
unshare(0x6a040000)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')
writev(r4, &(0x7f0000003740)=[{&(0x7f0000001440)='de', 0x2}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2, 0x1, 0x0, 0xc}]})
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80882)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}})
syz_open_dev$cec(0x0, 0x0, 0x0)
r7 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1)
pread64(r7, &(0x7f0000000100)=""/70, 0x46, 0x8002)
syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
r8 = syz_open_dev$usbfs(0x0, 0x77, 0x101301)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r10, &(0x7f000000c8c0)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="cf60fa8f2b9aadaff08e6ef044959142a072b60e7bc60730662acc16600b5fddb3581f4093636e7f49941734c02659e3315eb52d8ec002acd257e5a5d9e2998b9cef19d96dbd3d2da3773f7b10886e3c8fed0fbe64f8324e4acbb6ef8068aafd1ad3f21f3e736627a58b5f6c897e56db21aff0dcd7439636a3e531936abcb971b9821ca5121fa8c3085a25a8c9ba22c84e8a93dc836cea8474e69ca6d48a4e6043a9"}], 0x0, &(0x7f0000000b00)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred, @cred, @rights={{0x0, 0x1, 0x1, [r5, r1, r8]}}, @cred, @cred, @cred, @cred], 0x0, 0x20048000}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e24}, 0x0, &(0x7f00000082c0)=[{&(0x7f0000001080)="8a4a8e63da2eac314eeaf6035d640253ec3971c043357a1964dc061d3f207ceda9858e60162335e36a7170f48f6dceee0115907a404a35e183e0da238d133446469ec291a2647f526fa81f3f74f5d6cfff44ae9cce537232a903fa8b2b94ab64"}, {&(0x7f0000000ec0)="43748977935a50e5e3afcd52c936e2148f0c9b4a6ade047677dd539a40979a3d7f1f557611e4b8b1b9bad0b2ff24bd3cc1cf2f93bf71ed4b194e"}, {&(0x7f0000001280)="3f7fa8ea79c1140c614352d5a9cb0d145a25777fe1519a4b58b3c94d2a910f2f44a494422172939a86e558a12e165413fca46b9d7261ac5b033c2b82b6b89405f4244b2b666f08d97615c2dc7bda8d6b78582c80dd6e2f14074cd09140b501f1ad4823d390c7b5abe38d9093604f5747bb9ca2fb2f3a5b23706c3d843ba1736abce3c3647c67ae6ad6a42a809494e27268473a4335d78920a66140f5fa717531b192741c1b673be1ef31cdde4abe91cf491b5d67fbc29b72703f6400c4c89c09f1a6eab3f4"}, {&(0x7f0000001380)="8bccd9ff0f6a8a7ba000aca14e9dac159775428f47bdd2583020fc54df2ec34fbb1e81a79f6e24b250e467bf04c98f3179ee5bcd8b0079201337d90db377ce6243cff845c3bae1f74ff27a4d11a7432d834b386a2635069714e743a759dfea9720fed3949d8c34ecd36b76f046026e527ed063f37ef5741a7cda671e2240c44949630f780fe5192cd92d5bdce240e985d7013d6d79"}, {&(0x7f0000001100)="38cda52be34223a47bd2382ec11a6de05cffad08a86e4e0fa835a4b5b1d4241670ce69f54f6bf6b52ae7e324c838ed425e6feeab1b4261537efd35e9fc00bdb945b8c6f3dad58bade73eb11e0ba20ed42e09fd1da0bacad07a"}, {&(0x7f00000081c0)="53521e1b19d87e3896a8f4ea5d6742c164c71c884363672de86f93cd7191ea18208c5733002f61c2c583811686086ad1fc15abd36dc09a3d9f150f462f95420ebad4b56b5012760a24831cffda992ecfc261d07865c2d3a86126aa78653d5b23d96f1ec9068a35eed6893a9e7e692fe83878fe3c7929775043a349c89b9776b0e737cccc8711ea9646bc13520a2f8a1ec430f599d7b89b374db6003536957d5d0691aa58ab8218d49df64c4bc829d6e73987bb517faf4d867c7e8e7b57451f62bfd049b284f142cf7a3c09d4f401d6d3cb05e821bbdb6bdb56fcc6f9f256699adc5c3ee267aa9a551a231cd76940d9b0c3896c36117139"}], 0x0, &(0x7f0000008340)=[@cred, @cred, @cred, @cred], 0x0, 0x4040810}}, {{0x0, 0x0, &(0x7f000000c400), 0x0, &(0x7f000000c480)=[@cred, @cred], 0x0, 0x800}}, {{&(0x7f000000c4c0)=@file={0x0, './file0/file0\x00'}, 0x0, &(0x7f000000c780)=[{&(0x7f000000c540)="7d2454a96e462c1fe51ed6a218351d2c78668304499b4353c0985efb8951f3b3810fc42837f6b329a700adcde5a0b385f4b11f54f72ee9660c684c341a5345776554bc6beec555d14f5e7b48a94ae34f6948d982c19fa69375be2dadc7f44f9bf4f35ea050e4c3a07196bff71b5648140288ecb04d3d9132f3d2bdc73d99521a6bd2a857"}, {&(0x7f000000c600)="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"}, {&(0x7f000000c700)="47bef4952ca47b8510d5a530da2163f00097038bd20363dc31d700cf00ea70ea81c8853b3f176254fe1b097320eadcf35cf4a7699dea8c7784590d64d264403106c7f2a35b98397c9bd6c92daaf5b0342c3b071cb317a1c0299151ca1dc7134f0fc567fe5d9cd293e6e01958651f0e72b3fc54520644fea79b0c6a371f8139c5"}], 0x0, &(0x7f000000c800)=[@cred, @cred, @cred, @cred, @cred], 0x0, 0x20000000}}], 0x365, 0xc8c1)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

2m13.401647402s ago: executing program 34 (id=3522):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x207, 0xfc, 0x8, 0x6, 0x0, @local}, 0x10) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x21f, 0x0, 0x0, {0x5, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xdc}}, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x1)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) (async)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="05000000010000", 0x7) (async)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)

2m12.861454012s ago: executing program 35 (id=3523):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0401000016000104fdffffff00000000e00000020000000000000000000000002001000000000000000000000000000200040000000000000000802000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x400c805}, 0x4808)
fsetxattr(r0, &(0x7f00000001c0)=@known='user.incfs.id\x00', &(0x7f0000000200)='\x00', 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff0100ffff080049f00050006700000306907864010100ac1414aa070b07ac14143aac1e000107039300000000000000000000000000000000000300004e2100004e2200001f0100000000000000030000000000000001"], 0x0)
unshare(0x6a040000)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')
writev(r4, &(0x7f0000003740)=[{&(0x7f0000001440)='de', 0x2}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2, 0x1, 0x0, 0xc}]})
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80882)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}})
syz_open_dev$cec(0x0, 0x0, 0x0)
r7 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1)
pread64(r7, &(0x7f0000000100)=""/70, 0x46, 0x8002)
syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
r8 = syz_open_dev$usbfs(0x0, 0x77, 0x101301)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r10, &(0x7f000000c8c0)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="cf60fa8f2b9aadaff08e6ef044959142a072b60e7bc60730662acc16600b5fddb3581f4093636e7f49941734c02659e3315eb52d8ec002acd257e5a5d9e2998b9cef19d96dbd3d2da3773f7b10886e3c8fed0fbe64f8324e4acbb6ef8068aafd1ad3f21f3e736627a58b5f6c897e56db21aff0dcd7439636a3e531936abcb971b9821ca5121fa8c3085a25a8c9ba22c84e8a93dc836cea8474e69ca6d48a4e6043a9"}], 0x0, &(0x7f0000000b00)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred, @cred, @rights={{0x0, 0x1, 0x1, [r5, r1, r8]}}, @cred, @cred, @cred, @cred], 0x0, 0x20048000}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e24}, 0x0, &(0x7f00000082c0)=[{&(0x7f0000001080)="8a4a8e63da2eac314eeaf6035d640253ec3971c043357a1964dc061d3f207ceda9858e60162335e36a7170f48f6dceee0115907a404a35e183e0da238d133446469ec291a2647f526fa81f3f74f5d6cfff44ae9cce537232a903fa8b2b94ab64"}, {&(0x7f0000000ec0)="43748977935a50e5e3afcd52c936e2148f0c9b4a6ade047677dd539a40979a3d7f1f557611e4b8b1b9bad0b2ff24bd3cc1cf2f93bf71ed4b194e"}, {&(0x7f0000001280)="3f7fa8ea79c1140c614352d5a9cb0d145a25777fe1519a4b58b3c94d2a910f2f44a494422172939a86e558a12e165413fca46b9d7261ac5b033c2b82b6b89405f4244b2b666f08d97615c2dc7bda8d6b78582c80dd6e2f14074cd09140b501f1ad4823d390c7b5abe38d9093604f5747bb9ca2fb2f3a5b23706c3d843ba1736abce3c3647c67ae6ad6a42a809494e27268473a4335d78920a66140f5fa717531b192741c1b673be1ef31cdde4abe91cf491b5d67fbc29b72703f6400c4c89c09f1a6eab3f4"}, {&(0x7f0000001380)="8bccd9ff0f6a8a7ba000aca14e9dac159775428f47bdd2583020fc54df2ec34fbb1e81a79f6e24b250e467bf04c98f3179ee5bcd8b0079201337d90db377ce6243cff845c3bae1f74ff27a4d11a7432d834b386a2635069714e743a759dfea9720fed3949d8c34ecd36b76f046026e527ed063f37ef5741a7cda671e2240c44949630f780fe5192cd92d5bdce240e985d7013d6d79"}, {&(0x7f0000001100)="38cda52be34223a47bd2382ec11a6de05cffad08a86e4e0fa835a4b5b1d4241670ce69f54f6bf6b52ae7e324c838ed425e6feeab1b4261537efd35e9fc00bdb945b8c6f3dad58bade73eb11e0ba20ed42e09fd1da0bacad07a"}, {&(0x7f00000081c0)="53521e1b19d87e3896a8f4ea5d6742c164c71c884363672de86f93cd7191ea18208c5733002f61c2c583811686086ad1fc15abd36dc09a3d9f150f462f95420ebad4b56b5012760a24831cffda992ecfc261d07865c2d3a86126aa78653d5b23d96f1ec9068a35eed6893a9e7e692fe83878fe3c7929775043a349c89b9776b0e737cccc8711ea9646bc13520a2f8a1ec430f599d7b89b374db6003536957d5d0691aa58ab8218d49df64c4bc829d6e73987bb517faf4d867c7e8e7b57451f62bfd049b284f142cf7a3c09d4f401d6d3cb05e821bbdb6bdb56fcc6f9f256699adc5c3ee267aa9a551a231cd76940d9b0c3896c36117139"}], 0x0, &(0x7f0000008340)=[@cred, @cred, @cred, @cred], 0x0, 0x4040810}}, {{0x0, 0x0, &(0x7f000000c400), 0x0, &(0x7f000000c480)=[@cred, @cred], 0x0, 0x800}}, {{&(0x7f000000c4c0)=@file={0x0, './file0/file0\x00'}, 0x0, &(0x7f000000c780)=[{&(0x7f000000c540)="7d2454a96e462c1fe51ed6a218351d2c78668304499b4353c0985efb8951f3b3810fc42837f6b329a700adcde5a0b385f4b11f54f72ee9660c684c341a5345776554bc6beec555d14f5e7b48a94ae34f6948d982c19fa69375be2dadc7f44f9bf4f35ea050e4c3a07196bff71b5648140288ecb04d3d9132f3d2bdc73d99521a6bd2a857"}, {&(0x7f000000c600)="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"}, {&(0x7f000000c700)="47bef4952ca47b8510d5a530da2163f00097038bd20363dc31d700cf00ea70ea81c8853b3f176254fe1b097320eadcf35cf4a7699dea8c7784590d64d264403106c7f2a35b98397c9bd6c92daaf5b0342c3b071cb317a1c0299151ca1dc7134f0fc567fe5d9cd293e6e01958651f0e72b3fc54520644fea79b0c6a371f8139c5"}], 0x0, &(0x7f000000c800)=[@cred, @cred, @cred, @cred, @cred], 0x0, 0x20000000}}], 0x365, 0xc8c1)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

9.836810097s ago: executing program 8 (id=3929):
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0xb, 0x11, r0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r6})
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r7, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, 0x0)
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8916, &(0x7f0000000140)={'team_slave_0\x00', @random="0200ac7f7f00"})
socket$inet(0xa, 0x1, 0x0)
epoll_create1(0x80000)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000540)=ANY=[], 0x34}}, 0x8004)

9.744745663s ago: executing program 5 (id=3930):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e9878e1e7373a6785580100000000000000000000000000000d02000000000000000000000d00000100000000000000000203000000000000000000005f00"], 0x0, 0x61}, 0x20)

8.967071708s ago: executing program 3 (id=3932):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000002800128009000100766c616e000000001800028006000100040000000c0002001c0000001000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000800)={"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"})
openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x7f, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @void, @void}, 0x39)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f000001e580)=""/102392, 0x18ff8)

8.6790994s ago: executing program 8 (id=3933):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = fcntl$dupfd(r0, 0x406, r1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0})
ioctl(r3, 0x8b1a, &(0x7f0000000040))
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mlock2(&(0x7f0000a24000/0x1000)=nil, 0x1000, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r6 = io_uring_setup(0xbae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0xa, 0x2})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="480000003600010003000000fbdbdf25370017800c00030008ac0f0000000000140001000000000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49cbd270400"], 0x48}], 0x1, 0x0, 0x0, 0x4001}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
ioctl$KDSIGACCEPT(r2, 0x400455c8, 0x9)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

8.151364405s ago: executing program 5 (id=3934):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030091000000000000000a00000708000240000000020900010073797a31000000002c000000020a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x600, 0x0, 0x8080}, 0x20004450)

8.11483325s ago: executing program 7 (id=3935):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8040)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0xf5, 0x0, 0x4000840}, 0x0)

7.682888649s ago: executing program 7 (id=3936):
socket$nl_route(0x10, 0x3, 0x0)
open(0x0, 0x640200, 0x32)
epoll_create1(0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@access_any}], [], 0x6b}})
socket$nl_rdma(0x10, 0x3, 0x14)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x3}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x6)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040ed5000410"], 0x11)
read$msr(r6, &(0x7f0000019680)=""/102378, 0x18fea)
r7 = getpgid(0x0)
sched_rr_get_interval(r7, &(0x7f0000000000))
r8 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0)

7.622524914s ago: executing program 6 (id=3937):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x90, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)

7.550221043s ago: executing program 5 (id=3938):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x200040, 0x0)
ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_SEND_IPI(r5, 0x4068aea3, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="2100000001000080030000007f9e000004040000", @ANYRES32, @ANYBLOB="080200000000001700000000006b91e52514bb416f00000000e7ffffff", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="03000000000000000200"/28], 0x50)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r8 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$nl_route_sched_retired(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=@delchain={0x500, 0x65, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x8, 0xfff3}, {0x7, 0x5}, {0xb, 0xffe6}}, [@f_tcindex={{0xc}, {0x468, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0xfff9}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xc}}, @TCA_TCINDEX_POLICE={0x18, 0x6, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff3}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x6}, @TCA_TCINDEX_POLICE={0x41c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3ff, 0x0, 0x9, 0x400, 0x5095, 0x1, 0x80000001, 0x10001, 0x3, 0x9, 0x6, 0xffffffff, 0x5, 0x1, 0x3, 0x5, 0x6, 0x3, 0x8, 0x6, 0x9, 0x3, 0x7, 0xd4ec, 0x7f, 0x0, 0x4de, 0x4, 0x8, 0x2, 0xfffffffb, 0x6, 0x5, 0xd, 0xe, 0x4, 0x1, 0x80000000, 0x100, 0xaa, 0x81, 0x6, 0x5, 0x14, 0x1, 0x3, 0xab, 0x1, 0x6, 0x80000000, 0x2, 0x6, 0x7, 0x0, 0x3, 0x653f, 0x5, 0x0, 0x9, 0x80ff, 0x37e, 0x8001, 0x44, 0xd41, 0x9, 0xfff, 0x0, 0x56d0, 0x0, 0x1, 0xfffffff7, 0xfffffffc, 0x3ff, 0x5, 0x8, 0x237d, 0x1ff, 0x7f, 0x2, 0x5, 0xda3a, 0x8, 0x7ff, 0x4, 0x0, 0xf57f, 0xffffffff, 0x8, 0x2, 0x0, 0x930, 0x2, 0xc44, 0xfffffff7, 0x3ff, 0x3aa4, 0x2, 0x8, 0xffffffff, 0x5, 0x9, 0x6, 0x9, 0x4, 0x4, 0xfffffffb, 0x7, 0x400, 0x3, 0x5a, 0xe9f, 0x2, 0xa5c, 0x101, 0x4, 0x3ff, 0x10000, 0xf, 0x4, 0x702c, 0x2, 0x0, 0x2, 0x3, 0x515, 0xa, 0x1, 0x7ff, 0x7, 0x6068, 0x9af, 0x5, 0x6, 0x9, 0x7fff, 0x2, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x8001, 0x8, 0xfffffff3, 0x2f, 0xf, 0x10000, 0x0, 0x6, 0x2, 0x9, 0x6, 0x9, 0x6, 0x3, 0x5, 0x2, 0x1, 0x7, 0x80000000, 0xb, 0xc6db, 0xa, 0x7, 0x400, 0x9, 0x40, 0xe4e, 0x4, 0x9, 0x5, 0x6, 0x5, 0x6, 0x20000002, 0xd920, 0xd5b, 0x400, 0x9, 0x8001, 0x4, 0x3, 0x80000000, 0x10, 0x7, 0x6, 0x7, 0x6, 0x101, 0x5, 0x401, 0x3, 0x80000001, 0xdb8a, 0x200, 0x313b, 0x8, 0x0, 0x1, 0x0, 0x20000, 0x2, 0x80000001, 0x1ff, 0x2, 0x3, 0xe, 0x9, 0x7, 0x7, 0xffffffff, 0x5, 0x6, 0x1, 0x93, 0xd3fb, 0x0, 0x81, 0x1f7, 0x0, 0x5, 0xfffffff9, 0xfffffff7, 0x1, 0x8001, 0xc15f, 0x7, 0x8, 0x3, 0x8, 0x1, 0xc0000000, 0x6aa, 0x2, 0x4, 0x2, 0x4, 0x1cb, 0x4, 0x8, 0x10, 0x4429, 0x2, 0x3ff, 0xffffffc0, 0x6, 0x2, 0x9, 0x9, 0x7, 0x0, 0x0, 0x2, 0x0, 0xe]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6}]}}, @f_tcindex={{0xc}, {0x1c, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x7, 0xb}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xe, 0x3}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}]}}, @f_tcindex={{0xc}, {0x34, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff2, 0x8}}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xffe0, 0x4c552c25b4252df6}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x8, 0xfff1}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfffb, 0x9}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0xc1}]}}]}, 0x500}}, 0x0)
ptrace$setregset(0x4205, 0x0, 0x3, &(0x7f0000000180)={&(0x7f00000003c0)="a7f46437c5e57b8742d2451e6e5e62cd0beb8aa00990e0e4ca84ff1436c105b26c5e0a081a6a70b96eb525813f1cbe3ab8fac6e6302257492dd82e16edc7b49a180caf0f292ff9fb5ac0964052621e6d421481d57c6feca58b9b71e5ffcf33d5da6f4cdc266958bccce6be7a7d89b7bc2f54a56a164d59d5ed78c1d8e2bb574dee7402f550d7829879", 0x89})
recvmmsg(r8, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)

7.421277496s ago: executing program 6 (id=3939):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
flistxattr(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0})
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x10)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r6, 0xc048aeca, &(0x7f0000000000))
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x50424752, 0x3, @discrete={0x4, 0xffff}})

6.93154835s ago: executing program 3 (id=3940):
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00')
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001380), 0x292040, 0x0)
ioctl$TIOCNOTTY(r4, 0x5422)
r5 = syz_usb_connect(0x7, 0x9dd, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000001780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x7e, 0xff, 0x88, 0x20, 0xf9}, 0x19, &(0x7f0000000400)=ANY=[@ANYRES8=r3]})
syz_usb_control_io$hid(r5, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r7 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
close(r1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
getpid()

6.849861196s ago: executing program 7 (id=3941):
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00')
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001380), 0x292040, 0x0)
ioctl$TIOCNOTTY(r4, 0x5422)
r5 = syz_usb_connect(0x7, 0x9dd, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000001780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x7e, 0xff, 0x88, 0x20, 0xf9}, 0x19, &(0x7f0000000400)=ANY=[@ANYRES8=r3]})
syz_usb_control_io$hid(r5, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r7 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
close(r1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
getpid()

6.335964127s ago: executing program 6 (id=3942):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x81}, {0x6}]}, 0x10)
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
io_uring_enter(0xffffffffffffffff, 0x7357, 0x9fcb, 0x1, &(0x7f0000000780)={[0x7]}, 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
r7 = getpgid(0x0)
r8 = syz_pidfd_open(r7, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x2, 0x6, 0x638, 0x448, 0x308, 0x1c0, 0x448, 0x1c0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x7, 0x1}, {0xffffffffffffffff, 0x23}, 0x6, 0x7ff}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x2, 0x1}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14, 0x22, 0x40}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698)
process_madvise(r8, &(0x7f0000000080)=[{&(0x7f0000000000)="854b", 0x2}], 0x20, 0x14, 0x0)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r10, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0)

5.491791345s ago: executing program 6 (id=3943):
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000100)={0x4, 0x1, 0x2})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x1008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0)
r4 = socket$inet6(0x10, 0x3, 0x0)
r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xaae, 0x8, 0x0, 0x34a}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r5})
io_uring_enter(r5, 0x847ba, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000700)="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", 0x199, 0x80, 0x0, 0x0)
r8 = socket(0xa, 0x3, 0x3a)
r9 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r10)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r11=>0x0}, &(0x7f0000000480)=0xc)
r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
read$FUSE(r12, &(0x7f00000021c0)={0x2020, 0x0, <r13=>0x0, 0x0, <r14=>0x0}, 0x2020)
write$FUSE_INIT(r12, &(0x7f0000000080)={0x50, 0x0, r13, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
setresgid(r10, r11, r14)
sendto$inet6(r4, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

5.371410868s ago: executing program 8 (id=3944):
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=@isofs={0x14, 0x1, {0x3, 0x180, 0xfff9, 0x7, 0x0, 0x3}}, &(0x7f00000003c0), 0x1000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f00000000c0)=@ethtool_stats})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'pim6reg0\x00', 0x0})
setresuid(0x0, 0xee00, 0xee01)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0)
ioctl$RTC_UIE_ON(r3, 0x7003)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x1000000}, 0x0)
r7 = geteuid()
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)=@delpolicy={0x64, 0x14, 0xa, 0x70bd28, 0x25dfdbfc, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0xff, 0x2, 0x4e20, 0x154, 0xa, 0x0, 0x20, 0x3b, r6, r7}, 0x6e6bba}, [@srcaddr={0x14, 0xd, @in6=@mcast1}]}, 0x64}, 0x1, 0x0, 0x0, 0xc5}, 0x8804)
ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x3b, 0x15, 0x10, 0x84, 0xe80, 0x5, 0x40}})
close(r3)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000400)={0x40, 0xe, 0x102, {0x102, 0x24, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x0, 0x14, 0x62, "136801d5713789425ce9e56929e2bf3742fc2b0fc24ea0ca0ee8948aab2655fc48bf8b93fc5570a2da9dbdb06fe80e383103d98ea6a0a148cd414d6457ad3f905296f4e869b9498c723b3726a6496e13df7075c3aeb9e2033775634a12bde5c03d52"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000280)={0xc0, 0x5, 0x2, "183d"}, &(0x7f00000002c0)={0x40, 0x5, 0x3, "1cf5a0"}})

4.189085749s ago: executing program 6 (id=3945):
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(0x0, 0xb)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f140000001f0000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

4.008026319s ago: executing program 6 (id=3946):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000060000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000540)="f6e3cc9b9bdaa4c2b473804988ca", 0xe}], 0x1)

3.814884112s ago: executing program 5 (id=3947):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x8)
r2 = inotify_init1(0x80000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xcc, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/245, 0xf5, 0x0, 0x6}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/113, 0x71, 0x1, 0x36}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}, @register_looper, @decrefs={0x40046307, 0x1}, @dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x0, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/93, 0x5d, 0x0, 0x21}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x1000}, @increfs={0x40046304, 0x3}, @exit_looper, @clear_death={0x400c630f, 0x3}, @increfs], 0x14, 0x0, &(0x7f00000004c0)="e2b1cdb276fa13f3aaedffe428ede9203e58e6d8"})
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000540))
ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000580)=0x5)
r3 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TCFLSH(r3, 0x540b, 0x1)
fcntl$setlease(r0, 0x400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x5}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r5, 0x401, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="b9a68d3bb97a"}]}, 0x20}, 0x1, 0x0, 0x0, 0x4042000}, 0x20008000)
r6 = syz_open_dev$loop(&(0x7f0000000740), 0x2, 0x183200)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000780)={r4, 0x6470, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x1b, 0x19, "d06ac685f2da9c87ae8750717dfa1ea29ac552435a69063eac0c25388c947f74de2f3da2bd9bce0efc01b75c01928fd2251f5e5ff6f1f4131519d651bb891e54", "632c7eb06cb600b169a4d38b1a8a8308fe05200e3811f65d9fb316274240134c6075c7ce655fda3c6acf070db5c39214e21b0911bad001a66d6222af51cc4cb5", "b1e3941fddd8f7af59e461d71eeda200e0ac97b616dd209e5e841d95ef32ee07", [0xfff, 0x3]}})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000008c0)={<r7=>0x0, <r8=>0x0}, &(0x7f0000000900)=0xc)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000000940)={0x4})
syz_io_uring_setup(0x3252, &(0x7f0000000980)={0x0, 0x6fa4, 0x10, 0x0, 0x13f, 0x0, r4}, &(0x7f0000000a00)=<r9=>0x0, &(0x7f0000000a40))
r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0)
shutdown(r10, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000b00)={{0xa, 0x0, 0x7, 0x344, 'syz0\x00', 0x2}, 0x6, 0x3, 0x4675, r7, 0x2, 0x4, 'syz0\x00', &(0x7f0000000ac0)=['/selinux/avc/cache_threshold\x00', '/dev/loop#\x00'], 0x28})
ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000c40))
openat$uinput(0xffffffffffffff9c, &(0x7f0000000c80), 0x7499ce291a956dd2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r10, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r4, {0x10001}}, './file0/file0\x00'})
io_uring_register$IORING_REGISTER_PROBE(r10, 0x8, &(0x7f0000000d00)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xe)
ioctl$DRM_IOCTL_GET_CLIENT(r10, 0xc0286405, &(0x7f0000000d80)={0xaf3, 0x4000, {r7}, {r8}, 0x7, 0x8000})
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r10, 0x110, 0x3)
statx(0xffffffffffffffff, &(0x7f0000000e00)='./file0\x00', 0x2000, 0x7ff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
sendmsg$nl_xfrm(r3, &(0x7f00000011c0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000f40)=@delpolicy={0x230, 0x14, 0x613, 0x70bd2b, 0x25dfdbfb, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e22, 0xe, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x33, 0x0, r11}, 0x6e6bbe, 0x1}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @algo_comp={0x87, 0x3, {{'lzjh\x00'}, 0x1f8, "735deba5c434c57ea9960b4937cc30892cbb1b64d158d4ff8928e8728942ed20efe4357eecd988a26c7709521ac8755cc2a9cac7987788788b2ab0a60ac7e8"}}, @algo_comp={0x139, 0x3, {{'lzjh\x00'}, 0x788, "a4b66c7b2353f915c91dbeacca757eb48f4259227fd67a5c44d2990e8f3f62d0064ec6a602f528d0aa7d0feb3cd96cc0ef9c47e684f68c1a95ed5341329449b26e0e67b6f64e365473c15d57cdc10798da8bad66e0b7209f5c33f86b48af2e2589e42e6ffcef000f2500f01a531ca55c653387f9afa5a3675b81a0367b7e7860813b0a95f55c24f558522aa248ff8383219a97fe0dbc70e43db1ec0863855b93f95f9cdd250e4ec944878e0c94fe817dac3b900a2a2eccb5d27eece399be61e657686f84e61ab64605cc5de6a90f170d3712ace83c6f3253033e0f1ee6b7f97bcd72f8bb800914be5a1dd843f6a867654d"}}]}, 0x230}, 0x1, 0x0, 0x0, 0x4044040}, 0x40000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x100, &(0x7f0000001200)=0x1, 0x0, 0x4)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000001240)={{0x7, 0x80000001}, 0x100, './file0/file1\x00'})

3.745017326s ago: executing program 7 (id=3948):
bind$alg(0xffffffffffffffff, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0)
sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, r2, 0x48334cf00147764d, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044880}, 0x20000000)
socket$inet_tcp(0x2, 0x1, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002240)=@polexpire={0x1e4, 0x1b, 0x1, 0x70bd26, 0x25dfdbfc, {{{@in6=@local, @in=@multicast2, 0x4e22, 0x7ff, 0x4e20, 0x2, 0x2, 0xa0, 0x30, 0x1}, {0x400, 0x2, 0x401, 0x0, 0x7, 0x4a2f, 0x2, 0x8001}, {0x2, 0x100000000, 0x2, 0x8}, 0x4, 0x0, 0x2, 0x1, 0x0, 0x1}, 0x5}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @sa={0xe4, 0x6, {{@in=@loopback, @in=@remote, 0x4e23, 0x6, 0x4e22, 0x4, 0xa, 0xa0, 0x20, 0x3c}, {@in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x4d5, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x5, 0xfff, 0xfff, 0x1000000000000, 0x5, 0x5}, {0x25a2e1b1, 0x76, 0x8855, 0x8}, {0x2, 0x0, 0x4b9c}, 0x70bd26, 0x3505, 0x2, 0x2, 0xd4, 0x80}}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4040841}, 0x4010)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
syz_usbip_server_init(0x3)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x4, 0x380e54fa59156ef8, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x962, 0x401, 0x5}, {0x6, 0x24, 0x1a, 0xffff, 0x9}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc7, 0x80, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x71, 0x5}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x8000)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020)

3.639132732s ago: executing program 8 (id=3949):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="000000ffffffd0006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94)

2.866269345s ago: executing program 3 (id=3950):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8040)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68a75f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014000000008080002"], 0x1ec}, 0x1, 0x1d8, 0x0, 0x4000840}, 0x0)

2.706259601s ago: executing program 5 (id=3951):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030091000000000000000a00000708000240000000020900010073797a31000000002c000000020a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x900, 0x0, 0x8080}, 0x20004450)

2.683949465s ago: executing program 8 (id=3952):
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x40)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140))
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x7)
ioctl$TIOCSISO7816(r2, 0xc0285443, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800})

2.522149458s ago: executing program 3 (id=3953):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x6d33b656779dbe78, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f00000000c0)={0x55b, 0x56555959, 0x3, @discrete={0x4, 0xffff}})

2.4098323s ago: executing program 5 (id=3954):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0xff07, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005580)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYBLOB="050029bd7000000000004400000008060300", @ANYRES32=0x0, @ANYBLOB="0c0070000400050004000700"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4040080)
sendmsg$NFT_BATCH(r0, 0x0, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

2.349016245s ago: executing program 3 (id=3955):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0xfffffff0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}})

1.752363096s ago: executing program 3 (id=3956):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
move_mount(r1, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x2)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084149, &(0x7f0000000080))
r4 = socket$inet(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffe78, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xa2313b630ad1f80d}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010100, @loopback}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
close_range(r0, 0xffffffffffffffff, 0x0)

587.113708ms ago: executing program 7 (id=3957):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x1d, 0x5, 0x3)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
timerfd_create(0x8, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1ff, 0xe}, &(0x7f0000000300)=0x90)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x4})
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1409, 0x1}, 0x10}}, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)

122.256644ms ago: executing program 8 (id=3958):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xf21d}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[])
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e00028042e76623000000000000", 0x2e}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"})
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61)

0s ago: executing program 7 (id=3959):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1)

kernel console output (not intermixed with test programs):

mber=3
[ 1003.588334][T10360] usb 4-1: Product: syz
[ 1003.593037][T10360] usb 4-1: Manufacturer: syz
[ 1003.597992][T10360] usb 4-1: SerialNumber: syz
[ 1003.628373][T10360] usb 4-1: config 0 descriptor??
[ 1003.635823][T10360] f81534 4-1:0.12: required endpoints missing
[ 1003.808780][T19454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3455'.
[ 1003.818027][T19454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3455'.
[ 1003.842704][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3456'.
[ 1003.867627][T19458] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3453'.
[ 1004.198814][T10360] usb 7-1: new high-speed USB device number 76 using dummy_hcd
[ 1004.351333][T10360] usb 7-1: Using ep0 maxpacket: 8
[ 1004.447287][T10360] usb 7-1: config 2 has an invalid interface number: 57 but max is 0
[ 1004.455400][T10360] usb 7-1: config 2 has no interface number 0
[ 1004.464591][T10360] usb 7-1: config 2 interface 57 has no altsetting 0
[ 1004.476349][T10360] usb 7-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=a9.c2
[ 1004.486252][T10360] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1004.504877][T19464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3459'.
[ 1004.938140][T10360] usb 7-1: string descriptor 0 read error: -71
[ 1004.951785][T10360] usb 7-1: USB disconnect, device number 76
[ 1005.077147][ T5934] usb 6-1: USB disconnect, device number 87
[ 1005.275360][ T5930] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1005.428144][ T5930] usb 2-1: Using ep0 maxpacket: 8
[ 1005.439337][ T5930] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[ 1005.564760][T19484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3462'.
[ 1005.603141][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1005.618680][   T29] usb 4-1: USB disconnect, device number 96
[ 1005.648334][ T5930] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1005.658579][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64
[ 1005.680249][ T5930] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1005.690929][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1006.427268][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1006.475367][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1006.813960][T19490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1006.831949][ T5930] usb 2-1: config 0 descriptor??
[ 1006.839999][T19470] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1006.852307][T19490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1007.045259][T19494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1007.053825][T19470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1007.066059][T19470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1007.074306][T19494] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1007.113382][   T29] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1007.265664][   T29] usb 4-1: Using ep0 maxpacket: 8
[ 1007.277275][   T29] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1007.292715][   T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1007.311880][   T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1007.332090][   T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1007.352493][   T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1007.377364][   T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1007.394678][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1007.581422][T19498] SET target dimension over the limit!
[ 1008.093351][   T29] usb 4-1: GET_CAPABILITIES returned 0
[ 1008.099538][   T29] usbtmc 4-1:16.0: can't read capabilities
[ 1008.136595][ T5869] usb 2-1: USB disconnect, device number 106
[ 1008.468925][T19507] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3469'.
[ 1008.477994][T19507] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3469'.
[ 1008.814376][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1008.823749][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1008.832810][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1008.841848][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1008.850880][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1008.859914][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1008.868970][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1008.878000][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1008.972460][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1008.981570][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1008.990615][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1008.999663][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1009.008695][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1009.017738][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1009.026778][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1009.035814][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1009.115969][   T29] usb 4-1: USB disconnect, device number 97
[ 1009.144121][T19514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3470'.
[ 1009.201446][ T5869] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 1009.361582][ T5930] usb 7-1: new high-speed USB device number 77 using dummy_hcd
[ 1009.380150][ T5869] usb 6-1: Using ep0 maxpacket: 32
[ 1009.389551][ T5869] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1009.399018][ T5869] usb 6-1: config 0 has no interface number 0
[ 1009.410378][ T5869] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1009.419590][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1009.430670][ T5869] usb 6-1: Product: syz
[ 1009.435307][ T5869] usb 6-1: Manufacturer: syz
[ 1009.440390][ T5869] usb 6-1: SerialNumber: syz
[ 1009.460174][ T5869] usb 6-1: config 0 descriptor??
[ 1009.502953][ T5869] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1009.514778][ T5930] usb 7-1: Using ep0 maxpacket: 16
[ 1009.521068][ T5869] usb 6-1: selecting invalid altsetting 1
[ 1009.523860][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1009.535546][ T5869] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1009.559334][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1009.615724][ T5930] usb 7-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00
[ 1009.879119][ T5869] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1009.928919][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.929151][ T5869] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1010.056748][ T5869] usb 6-1: media controller created
[ 1010.593431][T19537] geneve2: entered promiscuous mode
[ 1010.598670][T19537] geneve2: entered allmulticast mode
[ 1010.656476][   T30] audit: type=1400 audit(2000001910.183:1645): avc:  denied  { map } for  pid=19509 comm="syz.5.3471" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1010.959509][ T5930] usb 7-1: config 0 descriptor??
[ 1010.988457][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1011.036640][   T30] audit: type=1400 audit(2000001910.183:1646): avc:  denied  { execute } for  pid=19509 comm="syz.5.3471" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1011.254400][T19546] SET target dimension over the limit!
[ 1011.407148][T19549] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3480'.
[ 1011.669372][ T5930] magicmouse 0003:05AC:0323.0019: hidraw0: USB HID v0.00 Device [HID 05ac:0323] on usb-dummy_hcd.6-1/input0
[ 1011.686573][   T30] audit: type=1400 audit(2000001911.757:1647): avc:  denied  { getopt } for  pid=19543 comm="syz.1.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1011.777977][ T5862] usb 7-1: USB disconnect, device number 77
[ 1011.881927][T19551] fido_id[19551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1012.429945][T19559] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1012.477228][T19559] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1012.639553][T19559] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[ 1012.647976][T19559] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[ 1012.662115][T19559] overlayfs: d_ino too big (132, ino=9223372036854776516, xinobits=3)
[ 1012.674189][T19559] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[ 1012.685354][T19559] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[ 1012.697282][T19559] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[ 1012.713390][T19559] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[ 1012.724529][T19559] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[ 1012.737350][T19559] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3)
[ 1012.752080][T19559] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3)
[ 1013.117997][ T5869] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1013.131778][ T5869] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1013.240337][T19550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'.
[ 1013.366911][T19562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3483'.
[ 1013.376049][T19562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3483'.
[ 1013.721303][ T5869] usb 6-1: USB disconnect, device number 88
[ 1013.833553][T19568] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3487'.
[ 1013.962123][ T5934] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 1014.506214][ T5934] usb 4-1: config 248 has an invalid interface number: 81 but max is 0
[ 1014.714544][ T5934] usb 4-1: config 248 has an invalid descriptor of length 0, skipping remainder of the config
[ 1014.857197][ T5934] usb 4-1: config 248 has no interface number 0
[ 1014.863499][ T5934] usb 4-1: config 248 interface 81 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1014.922825][ T5934] usb 4-1: config 248 interface 81 has no altsetting 0
[ 1014.946004][ T5934] usb 4-1: New USB device found, idVendor=04f2, idProduct=aff8, bcdDevice=b9.51
[ 1014.992334][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1015.019025][ T5934] usb 4-1: Product: 汑
[ 1015.023214][ T5934] usb 4-1: Manufacturer: ࠌ
[ 1015.027805][ T5934] usb 4-1: SerialNumber: syz
[ 1015.539306][T19591] SET target dimension over the limit!
[ 1016.776898][ T5934] usb 4-1: USB disconnect, device number 98
[ 1016.997675][   T30] audit: type=1400 audit(2000001917.301:1648): avc:  denied  { read write } for  pid=19603 comm="syz.6.3497" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1017.084525][   T30] audit: type=1400 audit(2000001917.301:1649): avc:  denied  { open } for  pid=19603 comm="syz.6.3497" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1018.046280][T16434] usb 4-1: new full-speed USB device number 99 using dummy_hcd
[ 1018.192267][T16434] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1018.211960][T16434] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1018.228405][T16434] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1018.262074][T16434] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[ 1018.276127][T16434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1018.334531][T16434] usb 4-1: config 0 descriptor??
[ 1018.580657][   T30] audit: type=1400 audit(2000001918.981:1650): avc:  denied  { setopt } for  pid=19629 comm="syz.1.3504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1019.342613][T19618] netlink: 'syz.3.3501': attribute type 1 has an invalid length.
[ 1019.409285][T19618] bond1: entered promiscuous mode
[ 1019.429206][T19618] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1019.459588][T19618] bond1: (slave bridge0): making interface the new active one
[ 1019.474423][T19618] bridge0: entered promiscuous mode
[ 1019.497005][T19618] bond1: (slave bridge0): Enslaving as an active interface with an up link
[ 1019.546786][T16434] usbhid 4-1:0.0: can't add hid device: -71
[ 1019.619279][T16434] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1019.661849][T16434] usb 4-1: USB disconnect, device number 99
[ 1019.772046][   T30] audit: type=1400 audit(2000001920.241:1651): avc:  denied  { append } for  pid=19652 comm="syz.1.3511" name="pfkey" dev="proc" ino=4026533364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[ 1019.926196][T19657] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1019.935880][T19657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1019.943681][T19657] IPv6: NLM_F_CREATE should be set when creating new route
[ 1021.028896][T19677] fuse: Bad value for 'fd'
[ 1021.126258][T19672] netlink: 'syz.1.3516': attribute type 1 has an invalid length.
[ 1021.204753][T19678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19678 comm=syz.1.3516
[ 1021.619404][T10360] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1021.795373][   T30] audit: type=1400 audit(2000001922.362:1652): avc:  denied  { setattr } for  pid=16554 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1021.860422][   T30] audit: type=1400 audit(2000001922.435:1653): avc:  denied  { setopt } for  pid=19696 comm="syz.5.3524" lport=44188 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 1021.930431][T10360] usb 4-1: Using ep0 maxpacket: 32
[ 1022.030061][T10360] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1022.041151][T10360] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1022.053442][T10360] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1022.067639][T10360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1022.078917][T10360] usb 4-1: config 0 descriptor??
[ 1022.164347][   T30] audit: type=1400 audit(2000001922.761:1654): avc:  denied  { ioctl } for  pid=19703 comm="syz.6.3526" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1023.531973][T19720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1023.585939][T19720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1023.596655][T19733] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3533'.
[ 1023.605712][   T30] audit: type=1400 audit(2000001924.252:1655): avc:  denied  { bind } for  pid=19732 comm="syz.5.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1024.568134][   T30] audit: type=1400 audit(2000001925.280:1656): avc:  denied  { mount } for  pid=19748 comm="syz.5.3537" name="/" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 1024.855362][T19759] binder: BINDER_SET_CONTEXT_MGR already set
[ 1024.863490][T19759] binder: 19757:19759 ioctl 4018620d 2000000002c0 returned -16
[ 1025.038591][ T5862] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 1025.164796][T16434] usb 4-1: USB disconnect, device number 100
[ 1025.183828][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1025.194867][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[ 1025.215596][ T5862] usb 6-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18
[ 1025.231788][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.252867][ T5862] usb 6-1: Product: syz
[ 1025.262457][ T5862] usb 6-1: Manufacturer: syz
[ 1025.271525][ T5862] usb 6-1: SerialNumber: syz
[ 1025.284212][ T5862] usb 6-1: config 0 descriptor??
[ 1025.495159][ T5862] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1025.557817][ T5862] usb 6-1: USB disconnect, device number 89
[ 1025.627944][T18843] udevd[18843]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1025.667062][ T5869] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1025.819944][ T5869] usb 4-1: Using ep0 maxpacket: 8
[ 1025.830689][ T5869] usb 4-1: config 6 has an invalid interface number: 2 but max is 0
[ 1025.848670][ T5869] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1025.867697][ T5869] usb 4-1: config 6 has no interface number 0
[ 1025.884109][ T5869] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1025.915419][ T5869] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1025.935365][ T5869] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[ 1025.943459][ T5869] usb 4-1: Product: syz
[ 1025.962725][ T5869] usb 4-1: Manufacturer: syz
[ 1025.967318][ T5869] usb 4-1: SerialNumber: syz
[ 1026.000951][ T5869] hso 4-1:6.2: Failed to find INT IN ep
[ 1026.151591][   T30] audit: type=1400 audit(2000001926.939:1657): avc:  denied  { connect } for  pid=19773 comm="syz.5.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1026.195148][   T30] audit: type=1400 audit(2000001926.939:1658): avc:  denied  { write } for  pid=19773 comm="syz.5.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1026.196833][T16434] usb 4-1: USB disconnect, device number 101
[ 1028.088809][   T29] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1028.267686][   T29] usb 4-1: Using ep0 maxpacket: 16
[ 1028.289685][   T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1028.300064][   T29] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1028.310162][   T29] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1028.324631][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1028.344313][   T29] usb 4-1: config 0 descriptor??
[ 1029.660030][T19813] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19813 comm=syz.5.3553
[ 1029.709677][T19814] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19814 comm=syz.5.3553
[ 1029.724348][T19814] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19814 comm=syz.5.3553
[ 1029.745781][   T30] audit: type=1400 audit(2000001930.709:1659): avc:  denied  { audit_write } for  pid=19812 comm="syz.5.3553" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1029.835899][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3554'.
[ 1029.983790][   T30] audit: type=1400 audit(2000001930.971:1660): avc:  denied  { write } for  pid=19820 comm="syz.5.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1030.106748][T19824] lo speed is unknown, defaulting to 1000
[ 1030.113963][T19824] lo speed is unknown, defaulting to 1000
[ 1030.484247][T19825] syzkaller1: entered promiscuous mode
[ 1030.490539][T19825] syzkaller1: entered allmulticast mode
[ 1030.687983][ T5862] usb 4-1: USB disconnect, device number 102
[ 1031.261702][T19839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3556'.
[ 1031.270759][T19839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3556'.
[ 1031.433759][T13195] block nbd0: Possible stuck request ffff888028218000: control (read@0,1024B). Runtime 60 seconds
[ 1031.444536][T13195] block nbd0: Possible stuck request ffff888028218200: control (read@1024,1024B). Runtime 60 seconds
[ 1031.457570][T13195] block nbd0: Possible stuck request ffff888028218400: control (read@2048,1024B). Runtime 60 seconds
[ 1031.470690][T13195] block nbd0: Possible stuck request ffff888028218600: control (read@3072,1024B). Runtime 60 seconds
[ 1033.174471][   T30] audit: type=1400 audit(2000001934.320:1661): avc:  denied  { ioctl } for  pid=19852 comm="syz.5.3563" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1033.931985][T19858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3562'.
[ 1034.059384][T19858] bond1: (slave bridge0): Releasing backup interface
[ 1034.066100][T19858] bridge0 (unregistering): left promiscuous mode
[ 1034.448889][   T29] usb 7-1: new high-speed USB device number 78 using dummy_hcd
[ 1034.593538][   T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1034.619767][   T29] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1034.698803][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1034.744085][   T29] usb 7-1: config 0 descriptor??
[ 1035.207441][   T29] lenovo 0003:17EF:6047.001A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0
[ 1035.563059][   T29] lenovo 0003:17EF:6047.001A: Failed to switch middle button: -71
[ 1035.571572][T19865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1035.593123][   T29] lenovo 0003:17EF:6047.001A: Fn-lock setting failed: -71
[ 1035.621385][   T29] lenovo 0003:17EF:6047.001A: Sensitivity setting failed: -71
[ 1035.693212][   T29] usb 7-1: USB disconnect, device number 78
[ 1035.879819][T15001] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1035.892635][T15001] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1035.904889][T15001] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1035.915061][T15001] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1035.927406][T15001] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1035.961494][ T5128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1035.974893][ T5128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1035.986821][ T5128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1035.994771][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1036.002254][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1036.099347][T19881] lo speed is unknown, defaulting to 1000
[ 1036.150200][T19881] lo speed is unknown, defaulting to 1000
[ 1037.331164][ T5128] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1037.348582][ T5128] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1037.358082][ T5128] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1037.365772][ T5128] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1037.374593][ T5128] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1037.476064][T19892] lo speed is unknown, defaulting to 1000
[ 1037.499490][T19892] lo speed is unknown, defaulting to 1000
[ 1037.827510][   T30] audit: type=1400 audit(2000001939.192:1662): avc:  denied  { associate } for  pid=19906 comm="syz.6.3577" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1037.963417][ T5128] Bluetooth: hci4: command tx timeout
[ 1038.699358][T19881] chnl_net:caif_netlink_parms(): no params data found
[ 1039.411679][ T5128] Bluetooth: hci6: command tx timeout
[ 1039.600359][T19922] erspan0: entered promiscuous mode
[ 1039.607577][T19922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3581'.
[ 1039.973487][ T5128] Bluetooth: hci4: command tx timeout
[ 1040.101916][T19881] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1040.327351][T19881] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1040.516232][T19881] bridge_slave_0: entered allmulticast mode
[ 1040.536780][T19881] bridge_slave_0: entered promiscuous mode
[ 1040.569276][T19881] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1040.582829][T19881] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1040.590053][T19881] bridge_slave_1: entered allmulticast mode
[ 1040.601029][   T30] audit: type=1400 audit(2000001942.100:1663): avc:  denied  { bind } for  pid=19936 comm="syz.6.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1040.643536][T19881] bridge_slave_1: entered promiscuous mode
[ 1040.697597][T19892] chnl_net:caif_netlink_parms(): no params data found
[ 1041.039365][T19881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1041.099411][T19881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1041.118343][   T30] audit: type=1400 audit(2000001942.657:1664): avc:  denied  { map } for  pid=19942 comm="syz.5.3586" path="socket:[67014]" dev="sockfs" ino=67014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1041.468859][ T5178] udevd[5178]: worker [18892] /devices/virtual/block/nbd0 is taking a long time
[ 1041.496997][ T5128] Bluetooth: hci6: command tx timeout
[ 1041.518443][T19881] team0: Port device team_slave_0 added
[ 1041.584413][T19881] team0: Port device team_slave_1 added
[ 1041.754813][T19892] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1041.792803][T19892] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1041.800576][T19892] bridge_slave_0: entered allmulticast mode
[ 1041.811121][T19892] bridge_slave_0: entered promiscuous mode
[ 1041.828746][T19881] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1041.836089][T19881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1042.427888][T19881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1042.455893][T19881] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1042.463081][T19881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1042.565579][T19881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1042.576801][T19892] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1042.585232][T19892] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1042.592743][T19892] bridge_slave_1: entered allmulticast mode
[ 1042.600024][T19892] bridge_slave_1: entered promiscuous mode
[ 1042.606701][ T5128] Bluetooth: hci4: command tx timeout
[ 1042.684482][T19881] hsr_slave_0: entered promiscuous mode
[ 1042.699321][T19881] hsr_slave_1: entered promiscuous mode
[ 1042.705625][T19881] debugfs: 'hsr0' already exists in 'hsr'
[ 1042.714795][T19881] Cannot create hsr debugfs directory
[ 1042.727302][T19892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1042.736468][ T5934] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1042.766131][T19892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1042.904434][ T5934] usb 4-1: Using ep0 maxpacket: 16
[ 1043.101841][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1043.113030][   T29] usb 6-1: new full-speed USB device number 90 using dummy_hcd
[ 1043.140227][ T5934] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1043.161941][T19892] team0: Port device team_slave_0 added
[ 1043.173536][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.196622][T19892] team0: Port device team_slave_1 added
[ 1043.197779][ T5934] usb 4-1: config 0 descriptor??
[ 1043.449722][ T5128] Bluetooth: hci6: command tx timeout
[ 1043.675311][   T29] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1043.681733][T19892] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1043.688599][   T29] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1043.699762][   T29] usb 6-1: can't read configurations, error -71
[ 1043.725944][T19892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1043.782784][T19892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1043.848788][T19892] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1043.862885][T19892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1043.935586][T19892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1044.056399][T19959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1044.066074][T19959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1044.090119][ T5934] usbhid 4-1:0.0: can't add hid device: -71
[ 1044.104025][T19892] hsr_slave_0: entered promiscuous mode
[ 1044.118576][T19892] hsr_slave_1: entered promiscuous mode
[ 1044.125283][ T5934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1044.144988][T19892] debugfs: 'hsr0' already exists in 'hsr'
[ 1044.147413][ T5934] usb 4-1: USB disconnect, device number 103
[ 1044.166765][T19892] Cannot create hsr debugfs directory
[ 1046.196055][ T5128] Bluetooth: hci4: command tx timeout
[ 1046.201607][ T5128] Bluetooth: hci6: command tx timeout
[ 1046.237562][T19881] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1046.641667][T19881] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1046.666264][T19881] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1046.730212][T19881] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1046.906904][T19892] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1046.936553][T19892] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1046.948489][T19892] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1046.988023][T19892] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1047.621956][   T30] audit: type=1400 audit(2000001949.481:1665): avc:  denied  { connect } for  pid=19994 comm="syz.3.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1047.676525][T20003] sd 0:0:1:0: device reset
[ 1047.950774][T20007] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3600'.
[ 1048.292346][   T30] audit: type=1400 audit(2000001949.828:1666): avc:  denied  { setopt } for  pid=20004 comm="syz.6.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1048.323183][T19881] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1048.374629][T19881] 8021q: adding VLAN 0 to HW filter on device team0
[ 1048.398826][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1048.405924][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1048.427803][T19892] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1048.456052][  T127] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1048.463178][  T127] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1048.485658][T19892] 8021q: adding VLAN 0 to HW filter on device team0
[ 1048.513170][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1048.520264][ T7582] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1048.574069][ T5934] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1048.633900][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1048.641041][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1048.654601][T20009] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3601'.
[ 1048.676854][T19881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1048.745021][T19892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1048.783566][T19892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1048.783956][ T5934] usb 4-1: Using ep0 maxpacket: 32
[ 1048.819835][ T5934] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[ 1048.841577][ T5934] usb 4-1: config 0 has no interface number 0
[ 1048.859573][ T5934] usb 4-1: config 0 interface 184 has no altsetting 0
[ 1048.878622][ T5934] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1048.911320][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1048.939439][ T5934] usb 4-1: Product: syz
[ 1048.943631][ T5934] usb 4-1: Manufacturer: syz
[ 1048.967050][ T5934] usb 4-1: SerialNumber: syz
[ 1048.995151][ T5934] usb 4-1: config 0 descriptor??
[ 1049.082587][T19881] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1049.153765][T20022] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3603'.
[ 1049.219728][T19892] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1049.221554][ T5934] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1049.793683][ T5934] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1049.803886][ T5934] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 1049.814389][ T5934] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[ 1049.885880][ T5934] usb 4-1: USB disconnect, device number 104
[ 1050.036120][T20036] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3605'.
[ 1050.062372][T20036] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3605'.
[ 1050.324621][T19892] veth0_vlan: entered promiscuous mode
[ 1050.376371][T19892] veth1_vlan: entered promiscuous mode
[ 1050.398814][T19881] veth0_vlan: entered promiscuous mode
[ 1050.432753][T19881] veth1_vlan: entered promiscuous mode
[ 1050.443795][ T5869] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1050.468852][T19892] veth0_macvtap: entered promiscuous mode
[ 1050.502350][T19892] veth1_macvtap: entered promiscuous mode
[ 1050.538783][T19881] veth0_macvtap: entered promiscuous mode
[ 1050.562847][T19881] veth1_macvtap: entered promiscuous mode
[ 1050.580876][T19892] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1050.608444][T19892] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1050.622097][ T5869] usb 6-1: config 252 has an invalid descriptor of length 252, skipping remainder of the config
[ 1050.641129][ T5869] usb 6-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[ 1050.658988][  T127] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.671778][ T5869] usb 6-1: New USB device found, idVendor=0594, idProduct=2200, bcdDevice=46.29
[ 1050.679285][  T127] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.681766][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1050.710328][T19881] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1050.717254][ T5869] usb 6-1: Product: syz
[ 1050.726807][ T5869] usb 6-1: Manufacturer: syz
[ 1050.727109][  T127] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.731410][ T5869] usb 6-1: SerialNumber: syz
[ 1050.759522][  T127] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.808564][T19881] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1050.994447][T20044] random: crng reseeded on system resumption
[ 1051.001170][   T30] audit: type=1400 audit(2000001953.030:1667): avc:  denied  { write } for  pid=20043 comm="syz.5.3607" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1051.055923][   T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1051.057564][   T30] audit: type=1400 audit(2000001953.030:1668): avc:  denied  { open } for  pid=20043 comm="syz.5.3607" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1051.069188][   T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1051.097857][   T30] audit: type=1400 audit(2000001953.072:1669): avc:  denied  { write } for  pid=20050 comm="syz.3.3608" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1051.139512][   T30] audit: type=1400 audit(2000001953.177:1670): avc:  denied  { connect } for  pid=20047 comm="syz.6.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1051.256436][T20055] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 1051.261357][T20052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1051.269530][   T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1051.281929][   T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1051.289879][T20052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1051.329301][ T7582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1051.355302][ T7582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1051.400216][ T5869] usb 6-1: USB disconnect, device number 92
[ 1051.443638][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1051.460425][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1051.499231][ T1067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1051.519836][ T1067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1051.575264][ T7582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1051.584172][ T7582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1051.748141][   T30] audit: type=1400 audit(2000001953.817:1671): avc:  denied  { cmd } for  pid=20061 comm="syz.8.3571" path="socket:[68443]" dev="sockfs" ino=68443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1051.774472][T19379] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1052.037358][T19379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1052.052615][T19379] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1052.132503][T20078] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3612'.
[ 1052.141796][T20078] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3612'.
[ 1052.150763][T20078] netlink: 'syz.8.3612': attribute type 13 has an invalid length.
[ 1052.158615][T20078] netlink: 'syz.8.3612': attribute type 12 has an invalid length.
[ 1052.542454][T20071] lo speed is unknown, defaulting to 1000
[ 1052.573766][T19379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.616845][   T30] audit: type=1400 audit(2000001954.699:1672): avc:  denied  { firmware_load } for  pid=20076 comm="syz.5.3613" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 1052.635608][T19379] usb 4-1: config 0 descriptor??
[ 1052.658807][T20081] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input31
[ 1052.666428][T20071] lo speed is unknown, defaulting to 1000
[ 1053.865369][T19379] lenovo 0003:17EF:6047.001B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0
[ 1054.574014][T19379] lenovo 0003:17EF:6047.001B: Failed to switch middle button: -71
[ 1054.593275][T19379] lenovo 0003:17EF:6047.001B: Fn-lock setting failed: -71
[ 1054.602208][T19379] lenovo 0003:17EF:6047.001B: Sensitivity setting failed: -71
[ 1054.631974][T19379] usb 4-1: USB disconnect, device number 105
[ 1054.648418][T20095] fido_id[20095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[ 1055.479146][T20107] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3617'.
[ 1055.488196][T20107] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3617'.
[ 1056.014896][   T30] audit: type=1400 audit(2000001958.300:1673): avc:  denied  { write } for  pid=20113 comm="syz.8.3622" name="file2" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1056.040480][   T30] audit: type=1400 audit(2000001958.300:1674): avc:  denied  { open } for  pid=20113 comm="syz.8.3622" path="/4/file2" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1056.164794][ T5930] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[ 1056.331931][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1056.363768][ T5930] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1056.377889][ T5930] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[ 1056.390051][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1056.460872][ T5930] usb 6-1: config 0 descriptor??
[ 1056.536395][T19379] usb 7-1: new high-speed USB device number 79 using dummy_hcd
[ 1056.794987][T19379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1056.844771][T19379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1056.857029][T19379] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1056.873883][T19379] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1056.884210][T19379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1056.923803][T19379] usb 7-1: config 0 descriptor??
[ 1057.254952][ T5930] konepure 0003:1E7D:2DB4.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.5-1/input0
[ 1057.326639][ T5869] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1057.435666][T20133] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1057.448866][T20133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1057.490318][ T5869] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1057.499732][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1057.510292][ T5869] usb 9-1: config 0 descriptor??
[ 1057.628261][ T5862] usb 6-1: USB disconnect, device number 93
[ 1058.236451][T19379] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1058.240952][T19379] usb 7-1: USB disconnect, device number 79
[ 1058.258966][T20125] syzkaller0: entered promiscuous mode
[ 1058.258989][T20125] syzkaller0: entered allmulticast mode
[ 1058.358173][T20142] fido_id[20142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1058.747788][T20149] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3629'.
[ 1058.796135][T20151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3632'.
[ 1058.805301][T20151] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1059.259941][T20125] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3625'.
[ 1059.269055][   T30] audit: type=1400 audit(2000001961.692:1675): avc:  denied  { name_bind } for  pid=20124 comm="syz.8.3625" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[ 1059.322693][T20158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1059.380549][T20158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1059.395532][ T5917] IPVS: starting estimator thread 0...
[ 1059.529372][T20159] IPVS: using max 70 ests per chain, 168000 per kthread
[ 1059.672727][ T5869] usb 9-1: Cannot set autoneg
[ 1059.677751][ T5869] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1059.709226][ T5869] usb 9-1: USB disconnect, device number 2
[ 1060.460221][T13195] block nbd0: Possible stuck request ffff888028218000: control (read@0,1024B). Runtime 90 seconds
[ 1060.470926][T13195] block nbd0: Possible stuck request ffff888028218200: control (read@1024,1024B). Runtime 90 seconds
[ 1060.481827][T13195] block nbd0: Possible stuck request ffff888028218400: control (read@2048,1024B). Runtime 90 seconds
[ 1060.492713][T13195] block nbd0: Possible stuck request ffff888028218600: control (read@3072,1024B). Runtime 90 seconds
[ 1060.546655][T20169] No such timeout policy "syz1"
[ 1061.329272][T20182] loop7: detected capacity change from 0 to 7
[ 1061.342142][    C0] blk_print_req_error: 10 callbacks suppressed
[ 1061.342156][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1061.357916][    C0] buffer_io_error: 4 callbacks suppressed
[ 1061.357926][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1061.374660][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1061.384316][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1061.392452][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1061.402061][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1061.413201][T20176] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3635'.
[ 1061.441548][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1061.451197][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1061.487286][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1061.496880][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1061.506777][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1061.516348][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1061.526590][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1061.536161][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1061.544629][T20182] ldm_validate_partition_table(): Disk read failed.
[ 1061.559121][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1061.568737][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1061.578944][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1061.588530][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1061.599450][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1061.609075][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1061.638890][T20182] Dev loop7: unable to read RDB block 0
[ 1061.653353][T20182]  loop7: unable to read partition table
[ 1061.663022][T20182] loop7: partition table beyond EOD, truncated
[ 1061.680376][T19379] usb 7-1: new high-speed USB device number 80 using dummy_hcd
[ 1061.697877][T20182] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õÖ�˜Èµ4FLQkÝŠ5) failed (rc=-5)
[ 1061.844681][T19379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1061.878224][T19379] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1061.914205][T19379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1062.036350][T19379] usb 7-1: config 0 descriptor??
[ 1062.130540][ T5869] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1062.315563][ T5869] usb 9-1: Using ep0 maxpacket: 16
[ 1062.340228][ T5869] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1062.362671][ T5869] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1062.385518][T20208] can: request_module (can-proto-3) failed.
[ 1062.399108][ T5869] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1062.433403][ T5869] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1062.444638][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1062.467844][ T5869] usb 9-1: Product: syz
[ 1062.477592][T20213] netlink: 'syz.7.3644': attribute type 1 has an invalid length.
[ 1062.509992][ T5869] usb 9-1: Manufacturer: syz
[ 1062.514394][T19379] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor
[ 1062.514678][ T5869] usb 9-1: SerialNumber: syz
[ 1062.733025][T20185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1062.749648][T19379] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.001E/input/input32
[ 1062.772049][T20185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1062.847900][T20217] libceph: resolve 'c' (ret=-3): failed
[ 1062.923301][T19379] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[ 1063.022373][ T5917] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1063.148568][ T5869] usb 9-1: 0:2 : does not exist
[ 1063.167594][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1063.180879][ T5917] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1
[ 1063.191583][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1063.207278][ T5917] usb 4-1: Product: syz
[ 1063.216192][T20185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1063.226124][ T5917] usb 4-1: Manufacturer: syz
[ 1063.230736][ T5917] usb 4-1: SerialNumber: syz
[ 1063.242127][T20185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1063.252198][ T5917] usb 4-1: config 0 descriptor??
[ 1063.262505][ T5917] cytherm 4-1:0.0: Cypress thermometer device now attached
[ 1063.275369][   T29] usb 7-1: USB disconnect, device number 80
[ 1063.309493][T19379] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1063.460522][T19379] usb 8-1: Using ep0 maxpacket: 16
[ 1063.461376][T20216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1063.481776][T20216] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1063.483023][T19379] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1063.494780][    T9] usb 4-1: USB disconnect, device number 106
[ 1063.526859][T19379] usb 8-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[ 1063.546218][T19379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.547060][    T9] cytherm 4-1:0.0: Cypress thermometer now disconnected
[ 1063.576475][T19379] usb 8-1: config 0 descriptor??
[ 1063.729951][T20196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1063.742957][T20196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1063.793869][ T5869] usb 9-1: USB disconnect, device number 3
[ 1063.894852][   T30] audit: type=1400 audit(2000001966.563:1676): avc:  denied  { shutdown } for  pid=20221 comm="syz.5.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1064.164724][T19379] usbhid 8-1:0.0: can't add hid device: -71
[ 1064.175494][T19379] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1064.202172][T19379] usb 8-1: USB disconnect, device number 2
[ 1064.208095][   T29] usb 7-1: new high-speed USB device number 81 using dummy_hcd
[ 1064.365346][ T5869] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1064.375276][   T29] usb 7-1: Using ep0 maxpacket: 32
[ 1064.381925][   T29] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1064.413336][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1064.423596][   T29] usb 7-1: config 0 descriptor??
[ 1064.442023][   T29] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1064.519086][ T5869] usb 4-1: Using ep0 maxpacket: 32
[ 1064.537623][T20228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1064.550525][T20228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1064.681899][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1064.688208][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1064.700606][T20228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1064.750910][T20228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1065.244826][ T5869] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1065.288069][ T5869] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1065.317789][ T5869] usb 4-1: can't read configurations, error -71
[ 1065.334134][T20226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1065.349281][T20239] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3653'.
[ 1065.368744][T20226] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1065.378427][   T29] gspca_sunplus: reg_r err -110
[ 1065.383305][   T29] sunplus 7-1:0.0: probe with driver sunplus failed with error -110
[ 1065.466181][T10360] usb 7-1: USB disconnect, device number 81
[ 1065.936868][ T5869] usb 4-1: new low-speed USB device number 108 using dummy_hcd
[ 1066.099566][ T5869] usb 4-1: Invalid ep0 maxpacket: 64
[ 1066.105564][ T5869] usb usb4-port1: attempt power cycle
[ 1066.451355][ T5869] usb 4-1: new low-speed USB device number 109 using dummy_hcd
[ 1066.775512][ T5869] usb 4-1: Invalid ep0 maxpacket: 64
[ 1067.023188][T19379] usb 7-1: new high-speed USB device number 82 using dummy_hcd
[ 1067.194219][ T5869] usb 4-1: new low-speed USB device number 110 using dummy_hcd
[ 1067.217790][ T5869] usb 4-1: Invalid ep0 maxpacket: 64
[ 1067.230818][ T5869] usb usb4-port1: unable to enumerate USB device
[ 1067.275781][T19379] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1067.296757][T19379] usb 7-1: config 2 has an invalid interface number: 241 but max is 0
[ 1067.305980][T19379] usb 7-1: config 2 has no interface number 0
[ 1067.312533][T20269] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3663'.
[ 1067.330266][T20269] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3663'.
[ 1067.341077][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3663'.
[ 1067.350136][T20269] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3663'.
[ 1067.371462][T19379] usb 7-1: config 2 interface 241 has no altsetting 0
[ 1067.467703][T19379] usb 7-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=3c.e0
[ 1067.480943][T19379] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1067.488974][T19379] usb 7-1: Product: syz
[ 1067.493160][T19379] usb 7-1: Manufacturer: syz
[ 1067.497790][T19379] usb 7-1: SerialNumber: syz
[ 1068.092731][T19379] gspca_main: mars-2.14.0 probing 093a:050f
[ 1068.102543][T19379] usb 7-1: USB disconnect, device number 82
[ 1068.674026][T20281] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1069.295501][T20291] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11)
[ 1069.302118][T20291] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1069.338932][T20291] vhci_hcd vhci_hcd.0: Device attached
[ 1069.566135][    T9] usb 47-1: new high-speed USB device number 2 using vhci_hcd
[ 1069.584786][ T5869] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1071.511337][T20292] vhci_hcd: connection reset by peer
[ 1071.543473][   T12] vhci_hcd vhci_hcd.7: stop threads
[ 1071.556786][   T12] vhci_hcd vhci_hcd.7: release socket
[ 1071.569523][   T12] vhci_hcd vhci_hcd.7: disconnect device
[ 1071.598151][ T5869] usb 9-1: Using ep0 maxpacket: 16
[ 1071.871477][ T5869] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1071.875389][T20310] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3674'.
[ 1071.947550][ T5869] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1072.018347][ T5869] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1072.036886][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.344263][ T5869] usb 9-1: Product: syz
[ 1072.354085][ T5869] usb 9-1: Manufacturer: syz
[ 1072.390863][ T5869] usb 9-1: SerialNumber: syz
[ 1072.428735][ T5869] usb 9-1: config 0 descriptor??
[ 1072.483611][T20318] SET target dimension over the limit!
[ 1072.525573][ T5869] usb 9-1: can't set config #0, error -71
[ 1072.559663][ T5869] usb 9-1: USB disconnect, device number 4
[ 1072.593611][   T30] audit: type=1400 audit(2000001975.697:1677): avc:  denied  { map } for  pid=20309 comm="syz.5.3674" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1073.006683][T20326] netlink: 'syz.3.3677': attribute type 1 has an invalid length.
[ 1073.411863][T20331] can: request_module (can-proto-3) failed.
[ 1073.444466][T20322] can: request_module (can-proto-3) failed.
[ 1073.645637][T20331] netlink: 'syz.8.3676': attribute type 1 has an invalid length.
[ 1075.389199][    T9] vhci_hcd vhci_hcd.7: vhci_device speed not set
[ 1075.592889][T20353] can: request_module (can-proto-3) failed.
[ 1075.594791][T20359] netlink: 'syz.8.3683': attribute type 1 has an invalid length.
[ 1076.147352][T16434] usb 7-1: new high-speed USB device number 83 using dummy_hcd
[ 1076.301408][T16434] usb 7-1: Using ep0 maxpacket: 32
[ 1076.327951][T16434] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1076.361120][T16434] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1076.399478][T16434] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1076.421323][T16434] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1076.461175][T16434] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1076.473303][T16434] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1076.489826][T16434] usb 7-1: Product: syz
[ 1076.499104][T16434] usb 7-1: Manufacturer: syz
[ 1076.509197][T16434] usb 7-1: SerialNumber: syz
[ 1076.509257][ T5862] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1076.556155][    C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1076.576131][T16434] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input34
[ 1076.684386][ T5862] usb 8-1: Using ep0 maxpacket: 32
[ 1076.695997][ T5862] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1077.018066][ T5862] usb 8-1: config 0 has an invalid interface number: 11 but max is 0
[ 1077.042921][ T5862] usb 8-1: config 0 has no interface number 0
[ 1077.049037][ T5862] usb 8-1: config 0 interface 11 has no altsetting 0
[ 1077.052344][T16434] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1077.071671][T16434]  (id 0x00)
[ 1077.092277][ T5862] usb 8-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=13.a1
[ 1077.109694][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.126521][ T5862] usb 8-1: Product: syz
[ 1077.142139][ T5862] usb 8-1: Manufacturer: syz
[ 1077.152944][ T5862] usb 8-1: SerialNumber: syz
[ 1077.169008][ T5862] usb 8-1: config 0 descriptor??
[ 1077.172034][   T30] audit: type=1400 audit(2000001980.506:1678): avc:  denied  { listen } for  pid=20379 comm="syz.5.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1077.205713][T16434] rc_core: IR keymap rc-imon-pad not found
[ 1077.222601][T16434] Registered IR keymap rc-empty
[ 1077.239410][T16434] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1077.259484][   T30] audit: type=1400 audit(2000001980.506:1679): avc:  denied  { accept } for  pid=20379 comm="syz.5.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1077.281539][T16434] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1077.310520][T16434] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0
[ 1077.333715][T16434] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input35
[ 1077.354766][T16434] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:83> initialized
[ 1077.455790][ T5862] HFC-S_USB 8-1:0.11: probe with driver HFC-S_USB failed with error -5
[ 1077.499820][ T5862] usb 8-1: USB disconnect, device number 3
[ 1077.523276][   T29] usb 7-1: USB disconnect, device number 83
[ 1077.826901][T20389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3691'.
[ 1077.836086][T20389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3691'.
[ 1078.436367][T20393] can: request_module (can-proto-3) failed.
[ 1078.632790][T20397] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3692'.
[ 1078.642021][T20397] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3692'.
[ 1079.046175][T20398] netlink: 'syz.7.3693': attribute type 1 has an invalid length.
[ 1079.436742][T20402] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1079.664061][T16434] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1079.671542][ T5869] usb 7-1: new high-speed USB device number 84 using dummy_hcd
[ 1079.700289][ T5862] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1079.881316][ T5869] usb 7-1: Using ep0 maxpacket: 32
[ 1079.888451][ T5862] usb 9-1: too many configurations: 9, using maximum allowed: 8
[ 1080.177582][ T5862] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1080.187131][ T5869] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[ 1080.195185][ T5869] usb 7-1: config 0 has no interface number 0
[ 1080.214702][ T5862] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1080.243283][T16434] usb 4-1: Using ep0 maxpacket: 16
[ 1080.243673][ T5862] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1080.288247][ T5862] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1080.300112][ T5862] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1080.311259][ T5862] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1080.318241][T16434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1080.319155][ T5862] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1080.332884][T16434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1080.366996][T16434] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1080.380182][ T5869] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1080.397468][T16434] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1080.407444][T16434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1080.416452][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1080.425025][ T5862] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1080.446051][ T5869] usb 7-1: Product: syz
[ 1080.446896][T16434] usb 4-1: config 0 descriptor??
[ 1080.450239][ T5869] usb 7-1: Manufacturer: syz
[ 1080.455313][T19379] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[ 1080.466645][ T5862] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1080.476857][ T5869] usb 7-1: SerialNumber: syz
[ 1080.482884][ T5862] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1080.493570][ T5862] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1080.506527][ T5869] usb 7-1: config 0 descriptor??
[ 1080.515683][ T5862] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1080.523927][ T5869] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1080.533933][ T5862] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1080.545803][ T5862] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1080.557055][ T5862] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1080.564960][ T5862] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1080.574119][ T5862] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1080.585273][ T5862] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1080.594193][ T5862] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1080.603460][ T5862] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1080.614537][ T5862] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1080.622728][ T5862] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1080.632125][ T5862] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1080.644210][T19379] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1080.654131][ T5862] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1080.654631][T19379] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1080.662971][ T5862] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1080.676682][ T5862] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1080.686365][ T5862] usb 9-1: Product: syz
[ 1080.690620][ T5862] usb 9-1: Manufacturer: syz
[ 1080.695257][ T5862] usb 9-1: SerialNumber: syz
[ 1080.697881][T19379] usb 8-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[ 1080.711384][T19379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1080.713958][ T5862] usb 9-1: config 0 descriptor??
[ 1080.757160][ T5869] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1080.789449][T16434] usbhid 4-1:0.0: can't add hid device: -71
[ 1080.796067][T16434] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1080.814003][ T5862] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0
[ 1080.828875][ T5869] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1080.851696][T19379] usb 8-1: config 0 descriptor??
[ 1080.866615][T16434] usb 4-1: USB disconnect, device number 111
[ 1081.136514][    C0] usb 9-1: yurex_control_callback - control failed: -71
[ 1081.216260][T16434] usb 9-1: USB disconnect, device number 5
[ 1081.243018][T20423] yurex 9-1:0.0: yurex_write - failed to send bulk msg, error -19
[ 1081.289360][T19379] hid (null): unknown global tag 0xd
[ 1081.295179][T16434] yurex 9-1:0.0: USB YUREX #0 now disconnected
[ 1081.307100][T19379] hid (null): invalid report_size -1082622629
[ 1081.813792][T19379] hid (null): unknown global tag 0xe
[ 1081.843951][T19379] aquacomputer_d5next 0003:0C70:F011.001F: unknown global tag 0xd
[ 1081.858814][T19379] aquacomputer_d5next 0003:0C70:F011.001F: item 0 0 1 13 parsing failed
[ 1081.881598][T19379] aquacomputer_d5next 0003:0C70:F011.001F: probe with driver aquacomputer_d5next failed with error -22
[ 1082.523232][T19379] usb 8-1: USB disconnect, device number 4
[ 1082.787101][    C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1082.851051][ T5862] usb 7-1: USB disconnect, device number 84
[ 1082.878552][ T5862] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1082.901055][ T5862] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1082.937063][ T5862] quatech2 7-1:0.51: device disconnected
[ 1083.035595][T20443] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3704'.
[ 1083.044654][T20443] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3704'.
[ 1084.021195][T20454] SET target dimension over the limit!
[ 1086.349867][T20472] fuse: Bad value for 'user_id'
[ 1086.354757][T20472] fuse: Bad value for 'user_id'
[ 1086.434694][T19379] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1086.520695][ T5862] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 1086.634179][T19379] usb 4-1: Using ep0 maxpacket: 32
[ 1086.672123][ T5862] usb 6-1: Using ep0 maxpacket: 16
[ 1086.677005][T19379] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1086.693995][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1086.780327][T19379] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1086.817256][T19379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1087.160149][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1087.170065][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1087.185210][T19379] usb 4-1: Product: syz
[ 1087.194324][ T5862] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1087.204259][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1087.212393][T19379] usb 4-1: Manufacturer: syz
[ 1087.221694][ T5862] usb 6-1: config 0 descriptor??
[ 1087.233875][T19379] usb 4-1: SerialNumber: syz
[ 1087.250817][T19379] usb 4-1: config 0 descriptor??
[ 1087.275938][T19379] gs_usb 4-1:0.0: Required endpoints not found
[ 1087.536737][T20483] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3716'.
[ 1087.545805][T20483] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3716'.
[ 1087.729336][T16434] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1087.935106][T20470] x_tables: duplicate underflow at hook 1
[ 1087.997326][ T5869] usb 4-1: USB disconnect, device number 112
[ 1087.997604][T16434] usb 9-1: config 0 has an invalid interface number: 119 but max is 0
[ 1088.021939][T16434] usb 9-1: config 0 has no interface number 0
[ 1088.033648][T16434] usb 9-1: New USB device found, idVendor=10c4, idProduct=813d, bcdDevice=ae.9d
[ 1088.092923][ T5862] usbhid 6-1:0.0: can't add hid device: -71
[ 1088.102185][ T5862] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1088.124967][T16434] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1088.142606][T16434] usb 9-1: Product: syz
[ 1088.146796][T16434] usb 9-1: Manufacturer: syz
[ 1088.152488][ T5862] usb 6-1: USB disconnect, device number 94
[ 1088.173827][T16434] usb 9-1: SerialNumber: syz
[ 1088.222426][T16434] usb 9-1: config 0 descriptor??
[ 1088.234589][T16434] cp210x 9-1:0.119: cp210x converter detected
[ 1088.374324][T20500] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3721'.
[ 1088.435538][T19379] usb 7-1: new low-speed USB device number 85 using dummy_hcd
[ 1088.805858][T19379] usb 7-1: config 7 has an invalid interface number: 252 but max is 0
[ 1088.816869][T19379] usb 7-1: config 7 has no interface number 0
[ 1088.823339][T19379] usb 7-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4
[ 1088.835083][   T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1088.893521][T19379] usb 7-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0
[ 1088.904805][T19379] usb 7-1: config 7 interface 252 has no altsetting 0
[ 1088.944800][T19379] usb 7-1: string descriptor 0 read error: -22
[ 1088.952827][T19379] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[ 1088.963930][T19379] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1088.973426][T16434] cp210x 9-1:0.119: failed to get vendor val 0x000e size 678: -71
[ 1088.987071][T19379] idmouse 7-1:7.252: Unable to find bulk-in endpoint.
[ 1088.998127][T16434] cp210x 9-1:0.119: GPIO initialisation failed: -71
[ 1089.034424][   T29] usb 8-1: Using ep0 maxpacket: 8
[ 1089.044021][   T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1089.108822][   T29] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1089.121895][T16434] usb 9-1: cp210x converter now attached to ttyUSB0
[ 1089.186631][   T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1089.202934][T16434] usb 9-1: USB disconnect, device number 6
[ 1089.299168][   T29] usb 8-1: config 0 descriptor??
[ 1089.366714][T16434] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1089.376604][   T29] iowarrior 8-1:0.0: no interrupt-in endpoint found
[ 1089.443270][T16434] cp210x 9-1:0.119: device disconnected
[ 1089.534940][T20511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1089.696986][T13195] block nbd0: Possible stuck request ffff888028218000: control (read@0,1024B). Runtime 120 seconds
[ 1089.707902][T13195] block nbd0: Possible stuck request ffff888028218200: control (read@1024,1024B). Runtime 120 seconds
[ 1089.719128][T13195] block nbd0: Possible stuck request ffff888028218400: control (read@2048,1024B). Runtime 120 seconds
[ 1089.739072][T13195] block nbd0: Possible stuck request ffff888028218600: control (read@3072,1024B). Runtime 120 seconds
[ 1089.755677][T20511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1089.865264][T10360] usb 7-1: USB disconnect, device number 85
[ 1089.965935][T20517] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.3725'.
[ 1090.183641][   T30] audit: type=1400 audit(2000001994.166:1680): avc:  denied  { write } for  pid=20516 comm="syz.5.3727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1090.308556][   T30] audit: type=1400 audit(2000001994.292:1681): avc:  denied  { append } for  pid=20516 comm="syz.5.3727" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1090.510465][T19379] usb 4-1: new full-speed USB device number 113 using dummy_hcd
[ 1090.618197][   T30] audit: type=1400 audit(2000001994.617:1682): avc:  denied  { map } for  pid=20532 comm="syz.5.3731" path="socket:[69591]" dev="sockfs" ino=69591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1090.642955][T20537] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3732'.
[ 1090.662414][T20534] lo speed is unknown, defaulting to 1000
[ 1090.672000][T20534] lo speed is unknown, defaulting to 1000
[ 1090.733406][T19379] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1090.756801][T19379] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1090.766238][T19379] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1090.775867][T19379] usb 4-1: Product: syz
[ 1090.780237][T19379] usb 4-1: Manufacturer: syz
[ 1090.784875][T19379] usb 4-1: SerialNumber: syz
[ 1090.800564][T19379] usb 4-1: config 0 descriptor??
[ 1090.872500][T19379] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1090.917560][T19034] udevd[19034]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1091.265485][T19379] usb 8-1: USB disconnect, device number 5
[ 1092.191292][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3737'.
[ 1092.200457][T20558] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3737'.
[ 1092.209632][T20558] netlink: 'syz.7.3737': attribute type 13 has an invalid length.
[ 1092.217517][T20558] netlink: 'syz.7.3737': attribute type 12 has an invalid length.
[ 1093.197315][T19379] usb 4-1: USB disconnect, device number 113
[ 1093.270833][T20574] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3741'.
[ 1093.532011][T20576] FAULT_INJECTION: forcing a failure.
[ 1093.532011][T20576] name failslab, interval 1, probability 0, space 0, times 0
[ 1093.555849][T20576] CPU: 1 UID: 0 PID: 20576 Comm: syz.3.3742 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1093.555879][T20576] Tainted: [L]=SOFTLOCKUP
[ 1093.555885][T20576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1093.555894][T20576] Call Trace:
[ 1093.555900][T20576]  <TASK>
[ 1093.555907][T20576]  dump_stack_lvl+0x100/0x190
[ 1093.555939][T20576]  should_fail_ex.cold+0x5/0xa
[ 1093.555962][T20576]  ? tomoyo_encode2+0xfb/0x3c0
[ 1093.555986][T20576]  should_failslab+0xc2/0x120
[ 1093.556010][T20576]  __kmalloc_noprof+0xe0/0x850
[ 1093.556029][T20576]  ? d_absolute_path+0x136/0x1b0
[ 1093.556054][T20576]  tomoyo_encode2+0xfb/0x3c0
[ 1093.556080][T20576]  tomoyo_encode+0x29/0x50
[ 1093.556101][T20576]  tomoyo_realpath_from_path+0x18c/0x690
[ 1093.556131][T20576]  tomoyo_mount_acl+0x1b6/0x8b0
[ 1093.556151][T20576]  ? is_bpf_text_address+0x8a/0x1a0
[ 1093.556174][T20576]  ? bpf_ksym_find+0x128/0x1c0
[ 1093.556197][T20576]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1093.556222][T20576]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[ 1093.556242][T20576]  ? kernel_text_address+0x8d/0x100
[ 1093.556261][T20576]  ? unwind_get_return_address+0x59/0xa0
[ 1093.556306][T20576]  ? tomoyo_domain+0xb2/0x150
[ 1093.556323][T20576]  ? tomoyo_profile+0x47/0x60
[ 1093.556342][T20576]  tomoyo_mount_permission+0x214/0x460
[ 1093.556365][T20576]  ? tomoyo_mount_permission+0x1f6/0x460
[ 1093.556389][T20576]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[ 1093.556429][T20576]  security_sb_mount+0xdd/0x270
[ 1093.556454][T20576]  path_mount+0x158/0x23d0
[ 1093.556477][T20576]  ? __pfx_path_mount+0x10/0x10
[ 1093.556494][T20576]  ? lockdep_hardirqs_on+0x78/0x100
[ 1093.556519][T20576]  ? putname+0xb1/0x110
[ 1093.556534][T20576]  ? kmem_cache_free+0x124/0x6a0
[ 1093.556563][T20576]  ? __x64_sys_mount+0x293/0x310
[ 1093.556580][T20576]  __x64_sys_mount+0x293/0x310
[ 1093.556598][T20576]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1093.556624][T20576]  do_syscall_64+0x106/0xf80
[ 1093.556643][T20576]  ? clear_bhb_loop+0x40/0x90
[ 1093.556665][T20576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.556683][T20576] RIP: 0033:0x7fcc34f9bf79
[ 1093.556699][T20576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1093.556715][T20576] RSP: 002b:00007fcc35e10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1093.556733][T20576] RAX: ffffffffffffffda RBX: 00007fcc35215fa0 RCX: 00007fcc34f9bf79
[ 1093.556743][T20576] RDX: 0000200000000040 RSI: 0000200000002080 RDI: 0000000000000000
[ 1093.556754][T20576] RBP: 00007fcc35e10090 R08: 0000200000000300 R09: 0000000000000000
[ 1093.556764][T20576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1093.556773][T20576] R13: 00007fcc35216038 R14: 00007fcc35215fa0 R15: 00007ffc1ecb78e8
[ 1093.556795][T20576]  </TASK>
[ 1093.556811][T20576] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1093.672218][T20580] fuse: Bad value for 'fd'
[ 1093.982530][T20586] can: request_module (can-proto-3) failed.
[ 1094.052029][T20590] netlink: 'syz.5.3746': attribute type 1 has an invalid length.
[ 1094.129695][T19379] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1094.350186][T20593] SET target dimension over the limit!
[ 1094.656814][T19379] usb 9-1: config 0 has an invalid interface number: 64 but max is 0
[ 1094.669262][T19379] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1094.681288][T19379] usb 9-1: config 0 has no interface number 0
[ 1094.690663][T19379] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[ 1094.705630][T19379] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1094.739914][T19379] usb 9-1: Product: syz
[ 1094.752597][T19379] usb 9-1: Manufacturer: syz
[ 1094.757223][T19379] usb 9-1: SerialNumber: syz
[ 1094.768442][T19379] usb 9-1: config 0 descriptor??
[ 1095.123129][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3750'.
[ 1095.132121][T20606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3750'.
[ 1095.141111][T20606] netlink: 'syz.5.3750': attribute type 13 has an invalid length.
[ 1095.148974][T20606] netlink: 'syz.5.3750': attribute type 12 has an invalid length.
[ 1095.768859][T19379] uvcvideo 9-1:0.64: Found UVC 0.00 device syz (046d:0823)
[ 1095.787559][T19379] uvcvideo 9-1:0.64: No valid video chain found.
[ 1095.800848][T19379] usb 9-1: USB disconnect, device number 7
[ 1096.965317][T20625] FAULT_INJECTION: forcing a failure.
[ 1096.965317][T20625] name failslab, interval 1, probability 0, space 0, times 0
[ 1096.997349][T20625] CPU: 1 UID: 0 PID: 20625 Comm: syz.3.3755 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1096.997380][T20625] Tainted: [L]=SOFTLOCKUP
[ 1096.997386][T20625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1096.997396][T20625] Call Trace:
[ 1096.997402][T20625]  <TASK>
[ 1096.997409][T20625]  dump_stack_lvl+0x100/0x190
[ 1096.997441][T20625]  should_fail_ex.cold+0x5/0xa
[ 1096.997463][T20625]  ? tomoyo_encode2+0xfb/0x3c0
[ 1096.997488][T20625]  should_failslab+0xc2/0x120
[ 1096.997512][T20625]  __kmalloc_noprof+0xe0/0x850
[ 1096.997538][T20625]  tomoyo_encode2+0xfb/0x3c0
[ 1096.997566][T20625]  tomoyo_encode+0x29/0x50
[ 1096.997590][T20625]  tomoyo_mount_acl+0x388/0x8b0
[ 1096.997613][T20625]  ? is_bpf_text_address+0x8a/0x1a0
[ 1096.997637][T20625]  ? bpf_ksym_find+0x128/0x1c0
[ 1096.997667][T20625]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[ 1096.997689][T20625]  ? kernel_text_address+0x8d/0x100
[ 1096.997710][T20625]  ? unwind_get_return_address+0x59/0xa0
[ 1096.997757][T20625]  ? tomoyo_domain+0xb2/0x150
[ 1096.997774][T20625]  ? tomoyo_profile+0x47/0x60
[ 1096.997802][T20625]  tomoyo_mount_permission+0x214/0x460
[ 1096.997825][T20625]  ? tomoyo_mount_permission+0x1f6/0x460
[ 1096.997852][T20625]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[ 1096.997892][T20625]  security_sb_mount+0xdd/0x270
[ 1096.997917][T20625]  path_mount+0x158/0x23d0
[ 1096.997942][T20625]  ? __pfx_path_mount+0x10/0x10
[ 1096.997959][T20625]  ? lockdep_hardirqs_on+0x78/0x100
[ 1096.997984][T20625]  ? putname+0xb1/0x110
[ 1096.997999][T20625]  ? kmem_cache_free+0x124/0x6a0
[ 1096.998027][T20625]  ? __x64_sys_mount+0x293/0x310
[ 1096.998044][T20625]  __x64_sys_mount+0x293/0x310
[ 1096.998064][T20625]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1096.998090][T20625]  do_syscall_64+0x106/0xf80
[ 1096.998112][T20625]  ? clear_bhb_loop+0x40/0x90
[ 1096.998134][T20625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1096.998152][T20625] RIP: 0033:0x7fcc34f9bf79
[ 1096.998168][T20625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1096.998185][T20625] RSP: 002b:00007fcc35e10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1096.998204][T20625] RAX: ffffffffffffffda RBX: 00007fcc35215fa0 RCX: 00007fcc34f9bf79
[ 1096.998216][T20625] RDX: 0000200000000040 RSI: 0000200000002080 RDI: 0000000000000000
[ 1096.998226][T20625] RBP: 00007fcc35e10090 R08: 0000200000000300 R09: 0000000000000000
[ 1096.998237][T20625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1096.998248][T20625] R13: 00007fcc35216038 R14: 00007fcc35215fa0 R15: 00007ffc1ecb78e8
[ 1096.998272][T20625]  </TASK>
[ 1097.380928][T19379] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1097.625287][ T5862] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 1097.735200][T19379] usb 9-1: Using ep0 maxpacket: 16
[ 1098.256052][T19379] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1098.264940][T19379] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1098.265854][ T5862] usb 6-1: Using ep0 maxpacket: 32
[ 1098.275366][T19379] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1098.379840][T19379] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1098.380086][T19379] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1098.380266][T19379] usb 9-1: Product: syz
[ 1098.380476][T19379] usb 9-1: Manufacturer: syz
[ 1098.380646][T19379] usb 9-1: SerialNumber: syz
[ 1098.392196][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1098.526160][T20634] sp0: Synchronizing with TNC
[ 1098.558319][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1098.658996][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1098.840171][T20639] SET target dimension over the limit!
[ 1099.120054][ T5862] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1099.128536][T19379] usb 9-1: 0:2 : does not exist
[ 1099.145510][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1099.165629][ T5862] usb 6-1: config 0 descriptor??
[ 1099.181751][T20627] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1099.209656][ T5862] hub 6-1:0.0: USB hub found
[ 1099.413425][ T5862] hub 6-1:0.0: config failed, hub has too many ports! (err -19)
[ 1099.711832][T20627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1099.856563][T20627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1099.865175][T20623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1099.877545][T20623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1099.952727][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3761'.
[ 1099.961764][T20647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3761'.
[ 1099.970741][T20647] netlink: 'syz.7.3761': attribute type 13 has an invalid length.
[ 1099.978635][T20647] netlink: 'syz.7.3761': attribute type 12 has an invalid length.
[ 1100.294063][ T5862] usbhid 6-1:0.0: can't add hid device: -71
[ 1100.305559][ T5862] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1100.351962][ T5862] usb 6-1: USB disconnect, device number 95
[ 1100.448213][T19379] usb 9-1: USB disconnect, device number 8
[ 1101.027815][T19034] udevd[19034]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1101.536644][T20661] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3764'.
[ 1101.796533][T20665] syzkaller0: entered promiscuous mode
[ 1101.803897][T20665] syzkaller0: entered allmulticast mode
[ 1102.261101][T20677] FAULT_INJECTION: forcing a failure.
[ 1102.261101][T20677] name failslab, interval 1, probability 0, space 0, times 0
[ 1102.297366][T20677] CPU: 1 UID: 0 PID: 20677 Comm: syz.6.3769 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1102.297395][T20677] Tainted: [L]=SOFTLOCKUP
[ 1102.297401][T20677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1102.297412][T20677] Call Trace:
[ 1102.297418][T20677]  <TASK>
[ 1102.297425][T20677]  dump_stack_lvl+0x100/0x190
[ 1102.297458][T20677]  should_fail_ex.cold+0x5/0xa
[ 1102.297482][T20677]  should_failslab+0xc2/0x120
[ 1102.297507][T20677]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1102.297525][T20677]  ? alloc_fs_context+0x57/0xf40
[ 1102.297549][T20677]  alloc_fs_context+0x57/0xf40
[ 1102.297572][T20677]  path_mount+0xdbd/0x23d0
[ 1102.297596][T20677]  ? __pfx_path_mount+0x10/0x10
[ 1102.297611][T20677]  ? lockdep_hardirqs_on+0x78/0x100
[ 1102.297637][T20677]  ? putname+0xb1/0x110
[ 1102.297651][T20677]  ? kmem_cache_free+0x124/0x6a0
[ 1102.297676][T20677]  ? __x64_sys_mount+0x293/0x310
[ 1102.297693][T20677]  __x64_sys_mount+0x293/0x310
[ 1102.297712][T20677]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1102.297745][T20677]  do_syscall_64+0x106/0xf80
[ 1102.297766][T20677]  ? clear_bhb_loop+0x40/0x90
[ 1102.297788][T20677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1102.297805][T20677] RIP: 0033:0x7f1d8df9bf79
[ 1102.297821][T20677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1102.297838][T20677] RSP: 002b:00007f1d8ed7b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1102.297855][T20677] RAX: ffffffffffffffda RBX: 00007f1d8e215fa0 RCX: 00007f1d8df9bf79
[ 1102.297867][T20677] RDX: 0000200000000040 RSI: 0000200000002080 RDI: 0000000000000000
[ 1102.297878][T20677] RBP: 00007f1d8ed7b090 R08: 0000200000000300 R09: 0000000000000000
[ 1102.297889][T20677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1102.297899][T20677] R13: 00007f1d8e216038 R14: 00007f1d8e215fa0 R15: 00007ffc3d06c6b8
[ 1102.297920][T20677]  </TASK>
[ 1102.797264][T20689] SET target dimension over the limit!
[ 1103.252705][T20692] netlink: 'syz.7.3770': attribute type 4 has an invalid length.
[ 1103.698130][T19379] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1103.911581][T19379] usb 4-1: Using ep0 maxpacket: 16
[ 1103.981400][ T5862] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 1103.986586][T19379] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1104.122287][T19379] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1104.127564][  T127] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1104.284394][T20709] netlink: 'syz.7.3777': attribute type 1 has an invalid length.
[ 1104.340405][T19379] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1104.359791][T19379] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1104.369745][T20700] can: request_module (can-proto-3) failed.
[ 1104.386902][T19379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.395186][T19379] usb 4-1: Product: syz
[ 1104.399639][T19379] usb 4-1: Manufacturer: syz
[ 1104.406607][T19379] usb 4-1: SerialNumber: syz
[ 1104.569549][T20712] netlink: 'syz.8.3778': attribute type 1 has an invalid length.
[ 1104.683018][T20703] can: request_module (can-proto-3) failed.
[ 1104.873500][ T5862] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[ 1104.882167][ T5862] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1104.930476][ T5862] usb 6-1: config 0 has no interface number 0
[ 1104.960678][ T5862] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[ 1104.993376][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1105.025321][ T5862] usb 6-1: Product: syz
[ 1105.033439][ T5862] usb 6-1: Manufacturer: syz
[ 1105.044796][ T5862] usb 6-1: SerialNumber: syz
[ 1105.051701][ T5862] usb 6-1: config 0 descriptor??
[ 1105.064405][ T5862] ims_pcu 6-1:0.41: Missing CDC union descriptor
[ 1105.086560][ T5862] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22
[ 1105.291385][T19379] usb 4-1: 0:2 : does not exist
[ 1105.913870][T19379] usb 4-1: USB disconnect, device number 114
[ 1105.934170][T19034] udevd[19034]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1105.958095][T20733] random: crng reseeded on system resumption
[ 1106.021589][ T5128] Bluetooth: hci2: Entering manufacturer mode failed (-110)
[ 1106.033826][   T30] audit: type=1400 audit(2000002010.723:1683): avc:  denied  { read } for  pid=20728 comm="syz.7.3782" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1106.113860][   T30] audit: type=1400 audit(2000002010.723:1684): avc:  denied  { ioctl } for  pid=20728 comm="syz.7.3782" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1106.664515][T10360] usb 6-1: USB disconnect, device number 96
[ 1106.817380][   T29] usb 7-1: new high-speed USB device number 86 using dummy_hcd
[ 1107.024138][T20742] SET target dimension over the limit!
[ 1107.531167][   T29] usb 7-1: Using ep0 maxpacket: 16
[ 1107.542581][   T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1107.609076][   T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1107.644709][   T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1107.783043][   T29] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1107.798253][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1108.052243][   T29] usb 7-1: config 0 descriptor??
[ 1108.400906][   T29] usbhid 7-1:0.0: can't add hid device: -71
[ 1108.417219][   T29] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1108.434081][   T29] usb 7-1: USB disconnect, device number 86
[ 1108.528522][ T5813] kworker/0:3 (5813) used greatest stack depth: 18104 bytes left
[ 1109.129570][ T5869] usb 6-1: new full-speed USB device number 97 using dummy_hcd
[ 1109.408299][T20773] FAULT_INJECTION: forcing a failure.
[ 1109.408299][T20773] name failslab, interval 1, probability 0, space 0, times 0
[ 1109.426145][T10360] usb 7-1: new high-speed USB device number 87 using dummy_hcd
[ 1109.459681][ T5869] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[ 1109.478015][ T5869] usb 6-1: config 0 has no interface number 0
[ 1109.497572][T20773] CPU: 1 UID: 0 PID: 20773 Comm: syz.3.3794 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1109.497599][T20773] Tainted: [L]=SOFTLOCKUP
[ 1109.497606][T20773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1109.497617][T20773] Call Trace:
[ 1109.497623][T20773]  <TASK>
[ 1109.497630][T20773]  dump_stack_lvl+0x100/0x190
[ 1109.497661][T20773]  should_fail_ex.cold+0x5/0xa
[ 1109.497684][T20773]  should_failslab+0xc2/0x120
[ 1109.497709][T20773]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[ 1109.497731][T20773]  ? vfs_parse_fs_qstr+0x112/0x1c0
[ 1109.497755][T20773]  kmemdup_nul+0x49/0xd0
[ 1109.497780][T20773]  vfs_parse_fs_qstr+0x112/0x1c0
[ 1109.497799][T20773]  ? __pfx_vfs_parse_fs_qstr+0x10/0x10
[ 1109.497826][T20773]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 1109.497846][T20773]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 1109.497864][T20773]  vfs_parse_monolithic_sep+0x195/0x210
[ 1109.497886][T20773]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[ 1109.497912][T20773]  ? alloc_fs_context+0x65a/0xf40
[ 1109.497936][T20773]  path_mount+0x77f/0x23d0
[ 1109.497959][T20773]  ? __pfx_path_mount+0x10/0x10
[ 1109.497976][T20773]  ? lockdep_hardirqs_on+0x78/0x100
[ 1109.498001][T20773]  ? putname+0xb1/0x110
[ 1109.498015][T20773]  ? kmem_cache_free+0x124/0x6a0
[ 1109.498043][T20773]  ? __x64_sys_mount+0x293/0x310
[ 1109.498061][T20773]  __x64_sys_mount+0x293/0x310
[ 1109.498081][T20773]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1109.498106][T20773]  do_syscall_64+0x106/0xf80
[ 1109.498126][T20773]  ? clear_bhb_loop+0x40/0x90
[ 1109.498147][T20773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1109.498164][T20773] RIP: 0033:0x7fcc34f9bf79
[ 1109.498178][T20773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1109.498194][T20773] RSP: 002b:00007fcc35e10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1109.498211][T20773] RAX: ffffffffffffffda RBX: 00007fcc35215fa0 RCX: 00007fcc34f9bf79
[ 1109.498223][T20773] RDX: 0000200000000040 RSI: 0000200000002080 RDI: 0000000000000000
[ 1109.498233][T20773] RBP: 00007fcc35e10090 R08: 0000200000000300 R09: 0000000000000000
[ 1109.498244][T20773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1109.498254][T20773] R13: 00007fcc35216038 R14: 00007fcc35215fa0 R15: 00007ffc1ecb78e8
[ 1109.498278][T20773]  </TASK>
[ 1109.521691][ T5869] usb 6-1: config 0 interface 41 has no altsetting 0
[ 1109.884390][T10360] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1109.899122][T10360] usb 7-1: config 6 has an invalid interface number: 158 but max is 0
[ 1109.910162][T10360] usb 7-1: config 6 has no interface number 0
[ 1109.928896][T10360] usb 7-1: config 6 interface 158 has no altsetting 0
[ 1109.935893][   T30] audit: type=1400 audit(2000002014.891:1685): avc:  denied  { bind } for  pid=20774 comm="syz.7.3795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1109.971775][T10360] usb 7-1: string descriptor 0 read error: -22
[ 1109.978047][T10360] usb 7-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29
[ 1109.996568][   T30] audit: type=1400 audit(2000002014.891:1686): avc:  denied  { mount } for  pid=20774 comm="syz.7.3795" name="/" dev="autofs" ino=71035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 1110.019269][T10360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1110.092967][ T5869] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1110.160593][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1110.171002][ T5869] usb 6-1: Product: syz
[ 1110.175487][ T5869] usb 6-1: Manufacturer: syz
[ 1110.197798][ T5869] usb 6-1: SerialNumber: syz
[ 1110.408899][T20765] netlink: 'syz.6.3790': attribute type 1 has an invalid length.
[ 1110.410981][ T5869] usb 6-1: config 0 descriptor??
[ 1110.416768][T20765] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3790'.
[ 1110.435820][T20765] netlink: 658 bytes leftover after parsing attributes in process `syz.6.3790'.
[ 1110.444879][T20765] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3790'.
[ 1110.654643][T20782] No such timeout policy "syz1"
[ 1111.076958][T10360] rtsx_usb 7-1:6.158: probe with driver rtsx_usb failed with error -110
[ 1111.138583][   T30] audit: type=1400 audit(2000002016.161:1687): avc:  denied  { unmount } for  pid=19881 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 1112.489078][ T5862] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1112.654663][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1112.665171][ T5862] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1113.638195][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1114.142229][T20794] SET target dimension over the limit!
[ 1114.147911][T20793] SET target dimension over the limit!
[ 1114.424859][ T5862] usb 4-1: config 0 descriptor??
[ 1114.482100][ T5862] usb 4-1: can't set config #0, error -71
[ 1114.588599][ T5862] usb 4-1: USB disconnect, device number 115
[ 1114.611758][ T5869] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[ 1114.626311][    T9] usb 7-1: USB disconnect, device number 87
[ 1114.649492][ T5869] usb 6-1: USB disconnect, device number 97
[ 1115.080872][T20805] random: crng reseeded on system resumption
[ 1116.851606][T20826] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3808'.
[ 1116.903058][   T29] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1117.303323][   T29] usb 4-1: Using ep0 maxpacket: 16
[ 1117.373817][   T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1117.384131][   T29] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1117.403643][T20828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3809'.
[ 1117.414475][   T29] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1118.098578][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1118.114071][   T30] audit: type=1400 audit(2000002022.891:1688): avc:  denied  { accept } for  pid=20832 comm="syz.7.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1118.114748][   T29] usb 4-1: config 0 descriptor??
[ 1118.496122][    T9] usb 4-1: USB disconnect, device number 116
[ 1118.955592][T13195] block nbd0: Possible stuck request ffff888028218000: control (read@0,1024B). Runtime 150 seconds
[ 1118.966579][T13195] block nbd0: Possible stuck request ffff888028218200: control (read@1024,1024B). Runtime 150 seconds
[ 1118.977667][T13195] block nbd0: Possible stuck request ffff888028218400: control (read@2048,1024B). Runtime 150 seconds
[ 1118.988690][T13195] block nbd0: Possible stuck request ffff888028218600: control (read@3072,1024B). Runtime 150 seconds
[ 1119.128071][T20852] random: crng reseeded on system resumption
[ 1119.509529][T20858] No such timeout policy "syz1"
[ 1119.904464][T20859] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1119.953624][T20859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3816'.
[ 1120.152901][T20854] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3816'.
[ 1120.518323][T20859] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12)
[ 1120.524934][T20859] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1120.533503][T20859] vhci_hcd vhci_hcd.0: Device attached
[ 1120.789666][   T29] usb 39-1: new high-speed USB device number 8 using vhci_hcd
[ 1120.836907][T16434] usb 7-1: new high-speed USB device number 88 using dummy_hcd
[ 1120.933776][T20882] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3821'.
[ 1121.233193][T20868] vhci_hcd: connection reset by peer
[ 1121.252900][ T1067] vhci_hcd vhci_hcd.3: stop threads
[ 1121.277213][ T1067] vhci_hcd vhci_hcd.3: release socket
[ 1121.322225][T16434] usb 7-1: Using ep0 maxpacket: 16
[ 1121.348774][ T1067] vhci_hcd vhci_hcd.3: disconnect device
[ 1121.355860][T16434] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1121.551785][T20888] random: crng reseeded on system resumption
[ 1121.612053][T16434] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1121.623010][T16434] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1121.714051][T16434] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1121.732600][T16434] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1121.829883][T16434] usb 7-1: config 0 descriptor??
[ 1121.866719][ T5917] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1122.115960][ T5917] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1122.126042][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1122.555384][T16434] shield 0003:0955:7214.0020: unknown main item tag 0x0
[ 1122.584072][T16434] shield 0003:0955:7214.0020: unknown main item tag 0x0
[ 1122.597708][ T5917] usb 9-1: config 0 descriptor??
[ 1122.603787][T16434] shield 0003:0955:7214.0020: unknown main item tag 0x0
[ 1122.611324][T16434] shield 0003:0955:7214.0020: unknown main item tag 0x0
[ 1122.620755][ T5917] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1122.627605][T16434] shield 0003:0955:7214.0020: unknown main item tag 0x0
[ 1122.659492][T16434] input: HID 0955:7214 Haptics as /devices/virtual/input/input36
[ 1122.761091][T20870] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[ 1122.864964][T16434] shield 0003:0955:7214.0020: Registered Thunderstrike controller
[ 1122.926087][T20896] CIFS mount error: No usable UNC path provided in device string!
[ 1122.926087][T20896] 
[ 1122.936368][T20896] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1123.130245][ T5917] gspca_cpia1: usb_control_msg 03, error -71
[ 1123.150734][ T5917] gspca_cpia1: usb_control_msg 01, error -71
[ 1123.190459][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1123.203361][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1124.219285][ T5917] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0)
[ 1124.229107][T16434] shield 0003:0955:7214.0020: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0
[ 1124.253045][ T5917] usb 9-1: USB disconnect, device number 9
[ 1124.325037][ T5930] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1124.341873][T16434] usb 7-1: USB disconnect, device number 88
[ 1124.364934][ T5930] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1124.413012][ T5930] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1124.427404][ T5930] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1125.254445][   T30] audit: type=1400 audit(2000002030.976:1689): avc:  denied  { mount } for  pid=20912 comm="syz.3.3832" name="/" dev="hugetlbfs" ino=71373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[ 1125.648850][T20922] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3834'.
[ 1125.657884][T20922] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3834'.
[ 1126.079921][   T30] audit: type=1400 audit(2000002031.259:1690): avc:  denied  { setopt } for  pid=20917 comm="syz.8.3834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1126.123824][   T29] vhci_hcd vhci_hcd.3: vhci_device speed not set
[ 1127.785468][T20942] sp0: Synchronizing with TNC
[ 1127.944201][ T5869] usb 7-1: new high-speed USB device number 89 using dummy_hcd
[ 1128.106602][ T5869] usb 7-1: Using ep0 maxpacket: 16
[ 1128.124521][ T5869] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1128.545302][ T5869] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1128.572588][ T5869] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1128.609756][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1128.636596][ T5869] usb 7-1: config 0 descriptor??
[ 1128.963512][   T30] audit: type=1400 audit(2000002034.881:1691): avc:  denied  { setopt } for  pid=20949 comm="syz.3.3841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1129.199457][    T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1129.244812][T20954] pim6reg1: entered promiscuous mode
[ 1129.250434][T20954] pim6reg1: entered allmulticast mode
[ 1129.351403][    T9] usb 9-1: Using ep0 maxpacket: 16
[ 1129.358290][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1129.369621][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1129.379557][    T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1129.392606][    T9] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1129.401694][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1129.411711][    T9] usb 9-1: config 0 descriptor??
[ 1129.772186][T20953] syzkaller0: entered promiscuous mode
[ 1129.777778][T20953] syzkaller0: entered allmulticast mode
[ 1129.899920][   T30] audit: type=1400 audit(2000002035.868:1692): avc:  denied  { write } for  pid=20965 comm="syz.5.3846" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1130.047174][T20969] No such timeout policy "syz1"
[ 1131.819875][T16434] usb 7-1: USB disconnect, device number 89
[ 1132.392691][    T9] usbhid 9-1:0.0: can't add hid device: -71
[ 1132.398699][    T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1132.635919][    T9] usb 9-1: USB disconnect, device number 10
[ 1133.385249][   T30] audit: type=1400 audit(2000002039.060:1693): avc:  denied  { name_connect } for  pid=20982 comm="syz.6.3850" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[ 1133.803219][   T30] audit: type=1400 audit(2000002039.942:1694): avc:  denied  { map } for  pid=20991 comm="syz.7.3853" path="socket:[72310]" dev="sockfs" ino=72310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[ 1134.302027][   T30] audit: type=1400 audit(2000002040.488:1695): avc:  denied  { name_bind } for  pid=21004 comm="syz.3.3849" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 1134.651462][T21011] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3857'.
[ 1134.910267][T21013] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3858'.
[ 1135.163995][T21018] sp0: Synchronizing with TNC
[ 1135.492790][T21028] SET target dimension over the limit!
[ 1136.943496][T21024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3859'.
[ 1137.674848][T21051] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[ 1137.731344][T21056] trusted_key: encrypted_key: keyword 'new0default' not recognized
[ 1138.202849][T21051] syzkaller0: entered promiscuous mode
[ 1138.211910][T21051] syzkaller0: entered allmulticast mode
[ 1138.218156][T21051] tipc: Resetting bearer <eth:syzkaller0>
[ 1139.188955][ T7582] tipc: Resetting bearer <eth:syzkaller0>
[ 1139.312347][T21074] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3873'.
[ 1139.578260][T21050] tipc: Resetting bearer <eth:syzkaller0>
[ 1139.762249][T21077] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3874'.
[ 1140.734197][ T5128] Bluetooth: hci6: link tx timeout
[ 1140.739811][ T5128] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1140.939595][T15001] Bluetooth: hci6: link tx timeout
[ 1140.946707][T15001] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1141.909452][   T30] audit: type=1400 audit(2000002048.457:1696): avc:  denied  { connect } for  pid=21113 comm="syz.7.3882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1142.662003][T15001] Bluetooth: hci6: command 0x0406 tx timeout
[ 1142.769113][T21120] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3883'.
[ 1143.133959][T21124] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3884'.
[ 1144.655155][T21050] tipc: Disabling bearer <eth:syzkaller0>
[ 1144.769522][T21129] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3886'.
[ 1144.780761][T21129] 9pnet_virtio: no channels available for device ./bus
[ 1144.913627][T21134] kvm: user requested TSC rate below hardware speed
[ 1145.110072][T21137] overlayfs: missing 'workdir'
[ 1145.127459][   T30] audit: type=1400 audit(2000002051.848:1697): avc:  denied  { bind } for  pid=21133 comm="syz.3.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1145.547279][   T30] audit: type=1400 audit(2000002051.848:1698): avc:  denied  { name_bind } for  pid=21133 comm="syz.3.3888" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[ 1145.624426][   T30] audit: type=1400 audit(2000002051.858:1699): avc:  denied  { node_bind } for  pid=21133 comm="syz.3.3888" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[ 1145.934114][ T9015] usb 7-1: new full-speed USB device number 90 using dummy_hcd
[ 1145.941913][ T5930] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1146.125230][ T9015] usb 7-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[ 1146.144379][ T9015] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1146.161983][ T9015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1146.170671][ T5930] usb 4-1: config 1 has an invalid interface number: 188 but max is 0
[ 1146.182911][ T5930] usb 4-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config
[ 1146.203029][ T5930] usb 4-1: config 1 has no interface number 0
[ 1146.209160][ T5930] usb 4-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1146.249643][ T9015] aiptek 7-1:17.0: interface has no int in endpoints, but must have minimum 1
[ 1146.270933][ T5930] usb 4-1: config 1 interface 188 has no altsetting 0
[ 1146.279715][ T5930] usb 4-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b
[ 1146.289006][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1146.329678][ T5930] usb 4-1: Product: syz
[ 1146.359395][ T5930] usb 4-1: Manufacturer: syz
[ 1146.371315][ T5930] usb 4-1: SerialNumber: syz
[ 1146.965056][   T30] audit: type=1400 audit(2000002053.790:1700): avc:  denied  { getopt } for  pid=21142 comm="syz.6.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1147.011214][T21143] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3890'.
[ 1147.024096][T21143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1147.806630][ T5869] usb 7-1: USB disconnect, device number 90
[ 1148.006289][ T5930] usb 4-1: unknown interface protocol 0xc1, assuming v1
[ 1148.444803][T13195] block nbd0: Possible stuck request ffff888028218000: control (read@0,1024B). Runtime 180 seconds
[ 1148.456809][T13195] block nbd0: Possible stuck request ffff888028218200: control (read@1024,1024B). Runtime 180 seconds
[ 1148.468437][T13195] block nbd0: Possible stuck request ffff888028218400: control (read@2048,1024B). Runtime 180 seconds
[ 1148.479932][T13195] block nbd0: Possible stuck request ffff888028218600: control (read@3072,1024B). Runtime 180 seconds
[ 1148.494008][ T5930] usb 4-1: 188:116 : does not exist
[ 1148.563263][ T5930] usb 4-1: USB disconnect, device number 117
[ 1148.619887][T19034] udevd[19034]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1148.863368][T21180] can: request_module (can-proto-3) failed.
[ 1148.875881][T21186] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3902'.
[ 1148.970870][T21180] netlink: 'syz.6.3899': attribute type 1 has an invalid length.
[ 1149.780721][T21194] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3901'.
[ 1149.789757][T21194] bridge_slave_1: left allmulticast mode
[ 1149.795525][T21194] bridge_slave_1: left promiscuous mode
[ 1149.801419][T21194] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1149.950676][T21194] bridge_slave_0: left allmulticast mode
[ 1149.956537][T21194] bridge_slave_0: left promiscuous mode
[ 1149.962903][T21194] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1151.975734][T21222] random: crng reseeded on system resumption
[ 1152.432584][   T30] audit: type=1326 audit(2000002059.491:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.5.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3784b9bf79 code=0x7fc00000
[ 1152.686651][   T30] audit: type=1326 audit(2000002059.491:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.5.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3784b9bf79 code=0x7fc00000
[ 1152.795241][   T30] audit: type=1326 audit(2000002059.491:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.5.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3784b9bf79 code=0x7fc00000
[ 1152.821166][   T30] audit: type=1326 audit(2000002059.491:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.5.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3784b9bf79 code=0x7fc00000
[ 1152.858210][   T30] audit: type=1326 audit(2000002059.502:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.5.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3784b9bf79 code=0x7fc00000
[ 1152.858524][T21226] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9)
[ 1152.883740][   T30] audit: type=1326 audit(2000002059.502:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.5.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3784b9bf79 code=0x7fc00000
[ 1152.888175][T21226] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1152.912735][T21226] vhci_hcd vhci_hcd.0: Device attached
[ 1153.220522][ T5930] usb 9-1: new low-speed USB device number 11 using dummy_hcd
[ 1153.412444][ T5862] usb 49-1: new high-speed USB device number 2 using vhci_hcd
[ 1153.448458][   T30] audit: type=1326 audit(2000002059.502:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.5.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3784b9bf79 code=0x7fc00000
[ 1153.489848][ T5930] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8
[ 1153.504127][ T5930] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[ 1153.554110][   T30] audit: type=1326 audit(2000002059.502:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.5.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3784b9bf79 code=0x7fc00000
[ 1153.578200][ T5930] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[ 1153.637113][ T5930] usb 9-1: string descriptor 0 read error: -22
[ 1153.643830][ T5930] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1153.654126][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1153.667764][   T30] audit: type=1326 audit(2000002059.502:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.5.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3784b9bf79 code=0x7fc00000
[ 1153.699983][T21228] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1153.837094][   T30] audit: type=1326 audit(2000002059.502:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.5.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3784b9bf79 code=0x7fc00000
[ 1154.280579][T21239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3911'.
[ 1154.289607][T21239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'.
[ 1154.298600][T21239] netlink: 'syz.3.3911': attribute type 13 has an invalid length.
[ 1154.306495][T21239] netlink: 'syz.3.3911': attribute type 12 has an invalid length.
[ 1154.400585][T15001] Bluetooth: hci4: command 0x0406 tx timeout
[ 1154.663393][ T5930] cdc_ncm 9-1:1.0: bind() failure
[ 1154.679326][T21230] vhci_hcd: connection reset by peer
[ 1154.679975][ T5930] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[ 1154.685061][ T1103] vhci_hcd vhci_hcd.8: stop threads
[ 1154.692017][ T5930] cdc_ncm 9-1:1.1: bind() failure
[ 1154.795076][ T1103] vhci_hcd vhci_hcd.8: release socket
[ 1154.805150][ T5930] usb 9-1: USB disconnect, device number 11
[ 1154.811357][ T1103] vhci_hcd vhci_hcd.8: disconnect device
[ 1154.998959][T21247] sp0: Synchronizing with TNC
[ 1155.319794][T21249] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3914'.
[ 1157.411275][T21258] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3918'.
[ 1157.461511][T21258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3918'.
[ 1158.278042][ T5862] vhci_hcd vhci_hcd.8: vhci_device speed not set
[ 1160.383698][T21307] can: request_module (can-proto-3) failed.
[ 1160.450064][T21307] netlink: 'syz.7.3931': attribute type 1 has an invalid length.
[ 1160.551601][T21318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3932'.
[ 1160.710547][T21319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1160.744902][T21319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1160.953480][T21321] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3935'.
[ 1161.002555][T21323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3934'.
[ 1161.011739][T21321] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3935'.
[ 1161.463467][ T5128] Bluetooth: hci4: unexpected event for opcode 0x1004
[ 1161.685207][   T30] kauditd_printk_skb: 56 callbacks suppressed
[ 1161.685223][   T30] audit: type=1400 audit(2000002069.234:1767): avc:  denied  { checkpoint_restore } for  pid=21333 comm="syz.6.3939" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1162.219761][T21344] random: crng reseeded on system resumption
[ 1162.460823][T21348] random: crng reseeded on system resumption
[ 1162.813141][T21354] SET target dimension over the limit!
[ 1163.307411][T21349] trusted_key: syz.5.3938 sent an empty control message without MSG_MORE.
[ 1164.089159][ T5917] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1164.306517][ T5917] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 1164.317647][ T5917] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1164.332286][ T5917] usb 9-1: Product: syz
[ 1164.340001][ T5917] usb 9-1: Manufacturer: syz
[ 1164.447735][ T5917] usb 9-1: SerialNumber: syz
[ 1164.909620][ T5917] rtl8150 9-1:1.0: couldn't reset the device
[ 1164.916554][ T5917] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5
[ 1165.025746][ T5917] usb 9-1: USB disconnect, device number 12
[ 1165.172640][T21365] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[ 1165.289085][ T5128] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1165.306901][ T5128] Bluetooth: hci4: Injecting HCI hardware error event
[ 1165.317015][ T5128] Bluetooth: hci4: hardware error 0x00
[ 1165.403285][T21371] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8)
[ 1165.409820][T21371] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1165.422584][T21371] vhci_hcd vhci_hcd.0: Device attached
[ 1165.434839][T21365] syzkaller0: entered promiscuous mode
[ 1165.461141][T21365] syzkaller0: entered allmulticast mode
[ 1166.069859][T21365] tipc: Resetting bearer <eth:syzkaller0>
[ 1166.116741][T20807] usb 47-1: new high-speed USB device number 3 using vhci_hcd
[ 1166.160500][T21364] tipc: Resetting bearer <eth:syzkaller0>
[ 1166.217105][T21380] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3950'.
[ 1166.279059][T21380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3950'.
[ 1166.334923][T21382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3951'.
[ 1166.866135][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3954'.
[ 1166.875153][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3954'.
[ 1166.884154][T21390] netlink: 'syz.5.3954': attribute type 13 has an invalid length.
[ 1166.892053][T21390] netlink: 'syz.5.3954': attribute type 12 has an invalid length.
[ 1167.269387][ T5128] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1168.361709][T21372] vhci_hcd: connection reset by peer
[ 1168.383965][ T1086] vhci_hcd vhci_hcd.7: stop threads
[ 1168.392761][ T1086] vhci_hcd vhci_hcd.7: release socket
[ 1168.400540][ T1086] vhci_hcd vhci_hcd.7: disconnect device
[ 1168.458682][T21403] can: request_module (can-proto-3) failed.
[ 1168.946039][T21408] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3)
[ 1168.952553][T21408] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1168.960270][T21408] vhci_hcd vhci_hcd.0: Device attached
[ 1168.968926][T21408] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5)
[ 1168.975439][T21408] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1168.983070][T21408] vhci_hcd vhci_hcd.0: Device attached
[ 1169.013038][T21408] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(7)
[ 1169.019589][T21408] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1169.027633][T21408] vhci_hcd vhci_hcd.0: Device attached
[ 1169.478367][    T9] usb 49-1: new low-speed USB device number 3 using vhci_hcd
[ 1169.486700][   T31] INFO: task syz.0.3522:19686 blocked for more than 143 seconds.
[ 1169.497431][   T31]       Tainted: G             L      syzkaller #0
[ 1169.504854][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1169.513627][   T31] task:syz.0.3522      state:D stack:28760 pid:19686 tgid:19684 ppid:14999  task_flags:0x400140 flags:0x00080002
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[ 1169.525650][   T31] Call Trace:
[ 1169.528983][   T31]  <TASK>
[ 1169.531907][   T31]  __schedule+0xfee/0x60e0
[ 1169.537553][   T30] audit: type=1400 audit(2000002077.487:1768): avc:  denied  { write } for  pid=5791 comm="syz-executor" path="pipe:[5176]" dev="pipefs" ino=5176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 1169.545603][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1169.571469][   T31]  ? __pfx___schedule+0x10/0x10
[ 1169.580861][   T31]  ? find_held_lock+0x2b/0x80
[ 1169.598249][   T31]  ? schedule+0x2bf/0x390
[ 1169.612107][   T31]  schedule+0xdd/0x390
[ 1169.654674][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1169.660301][   T31]  __mutex_lock+0xc9a/0x1b90
[ 1169.664909][   T31]  ? bdev_open+0x41a/0xe40
[ 1169.682249][   T31]  ? find_held_lock+0x2b/0x80
[ 1169.686971][   T31]  ? find_inode_fast+0x5e3/0x910
[ 1169.692229][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1169.697276][   T31]  ? find_inode_fast+0x1fa/0x910
[ 1169.726610][   T31]  ? bdev_open+0x41a/0xe40
[ 1169.735893][   T31]  bdev_open+0x41a/0xe40
[ 1169.746082][   T31]  ? iput+0x3a/0x40
[ 1169.749896][   T31]  blkdev_open+0x34e/0x4f0
[ 1169.754293][   T31]  do_dentry_open+0x6d8/0x1660
[ 1169.759134][   T31]  ? __pfx_blkdev_open+0x10/0x10
[ 1169.767955][   T31]  vfs_open+0x82/0x3f0
[ 1169.772040][   T31]  path_openat+0x208c/0x31a0
[ 1169.776819][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1169.781801][   T31]  do_file_open+0x20e/0x430
[ 1169.788573][   T31]  ? __pfx_do_file_open+0x10/0x10
[ 1169.793742][   T31]  ? alloc_fd+0x476/0x790
[ 1169.798089][   T31]  ? do_getname+0x191/0x390
[ 1169.802570][   T31]  do_sys_openat2+0x10d/0x1e0
[ 1169.807293][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1169.813436][   T31]  __x64_sys_openat+0x12d/0x210
[ 1169.818279][   T31]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1169.823689][   T31]  ? do_user_addr_fault+0x8d6/0x12f0
[ 1169.829181][   T31]  do_syscall_64+0x106/0xf80
[ 1169.833791][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1169.838458][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1169.844412][   T31] RIP: 0033:0x7f199dd5c84e
[ 1169.848819][   T31] RSP: 002b:00007f199ed3cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1169.857733][   T31] RAX: ffffffffffffffda RBX: 00007f199ed3d6c0 RCX: 00007f199dd5c84e
[ 1169.865915][   T31] RDX: 0000000000000001 RSI: 00007f199ed3cc00 RDI: ffffffffffffff9c
[ 1169.873897][   T31] RBP: 00007f199ed3cc00 R08: 0000000000000000 R09: 0000000000000000
[ 1169.881975][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1169.891476][   T31] R13: 00007f199e016038 R14: 00007f199e015fa0 R15: 00007ffeeffd1048
[ 1169.899491][   T31]  </TASK>
[ 1169.909087][   T31] 
[ 1169.909087][   T31] Showing all locks held in the system:
[ 1169.916827][   T31] 5 locks held by kworker/0:0/9:
[ 1169.921922][   T31]  #0: ffff8880222ba148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1169.932920][   T31]  #1: ffffc900000e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1169.944853][   T31]  #2: ffff88802cea5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 1169.954598][   T31]  #3: ffff88802cea2518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0
[ 1169.965080][   T31]  #4: ffff88802ce5a368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0
[ 1169.975160][   T31] 1 lock held by khungtaskd/31:
[ 1169.980007][   T31]  #0: ffffffff8e7e94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1169.990329][   T31] 3 locks held by kworker/u8:2/36:
[ 1169.996824][   T31]  #0: ffff888033e14948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1170.008177][   T31]  #1: ffffc90000ac7d08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1170.024429][   T31]  #2: ffffffff9060cd28 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30
[ 1170.034275][   T31] 2 locks held by getty/5565:
[ 1170.038948][   T31]  #0: ffff8880340ae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1170.049135][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 1170.059644][   T31] 3 locks held by kworker/0:4/5862:
[ 1170.064839][   T31]  #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1170.075686][   T31]  #1: ffffc90003e87d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1170.086387][   T31]  #2: ffffffff8e7f50b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[ 1170.097213][   T31] 3 locks held by kworker/0:7/5877:
[ 1170.105339][   T31] 1 lock held by udevd/18892:
[ 1170.113543][   T31]  #0: ffff8880280ee358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1170.123487][   T31] 1 lock held by syz.0.3522/19686:
[ 1170.130302][   T31]  #0: ffff8880280ee358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1170.139945][   T31] 5 locks held by kworker/0:2/20807:
[ 1170.145226][   T31]  #0: ffff8880222ba148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1170.156106][   T31]  #1: ffffc9000d327d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1170.167463][   T31]  #2: ffff88802ccfa198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 1170.177153][   T31]  #3: ffff88802ccff518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0
[ 1170.187679][   T31]  #4: ffff88802cc94e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0
[ 1170.197471][   T31] 1 lock held by syz.3.3826/20899:
[ 1170.202780][   T31]  #0: ffffffff9060cd28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1170.211778][   T31] 2 locks held by syz.6.3946/21364:
[ 1170.216984][   T31]  #0: ffffffff9060cd28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1170.226292][   T31]  #1: ffffffff8e7f50b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 1170.236490][   T31] 2 locks held by syz.5.3954/21390:
[ 1170.241946][   T31]  #0: ffffffff90d97528 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0
[ 1170.251580][   T31]  #1: ffffffff9060cd28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380
[ 1170.260660][   T31] 1 lock held by syz.3.3956/21394:
[ 1170.265741][   T31]  #0: ffffffff9060cd28 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90
[ 1170.275150][   T31] 1 lock held by syz.3.3956/21395:
[ 1170.280338][   T31]  #0: ffffffff9060cd28 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0x105/0x3310
[ 1170.289860][   T31] 1 lock held by syz.8.3958/21421:
[ 1170.294961][   T31]  #0: ffffffff9060cd28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380
[ 1170.304068][   T31] 1 lock held by syz.7.3960/21419:
[ 1170.309207][   T31]  #0: ffffffff9060cd28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1170.331270][   T31] 
[ 1170.333643][   T31] =============================================
[ 1170.333643][   T31] 
[ 1170.345682][   T31] NMI backtrace for cpu 1
[ 1170.345701][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1170.345723][   T31] Tainted: [L]=SOFTLOCKUP
[ 1170.345729][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1170.345738][   T31] Call Trace:
[ 1170.345744][   T31]  <TASK>
[ 1170.345751][   T31]  dump_stack_lvl+0x100/0x190
[ 1170.345787][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1170.345804][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1170.345830][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1170.345858][   T31]  sys_info+0x141/0x190
[ 1170.345879][   T31]  watchdog+0xd25/0x1050
[ 1170.345906][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1170.345926][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1170.345951][   T31]  ? kthread+0x13a/0x450
[ 1170.345963][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1170.345981][   T31]  kthread+0x370/0x450
[ 1170.345994][   T31]  ? __pfx_kthread+0x10/0x10
[ 1170.346009][   T31]  ret_from_fork+0x754/0xd80
[ 1170.346026][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1170.346043][   T31]  ? __switch_to+0x7b4/0x1120
[ 1170.346062][   T31]  ? __pfx_kthread+0x10/0x10
[ 1170.346077][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1170.346107][   T31]  </TASK>
[ 1170.346113][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1170.471557][    C0] NMI backtrace for cpu 0
[ 1170.471574][    C0] CPU: 0 UID: 0 PID: 1086 Comm: kworker/u8:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1170.471594][    C0] Tainted: [L]=SOFTLOCKUP
[ 1170.471599][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1170.471608][    C0] Workqueue: events_unbound toggle_allocation_gate
[ 1170.471632][    C0] RIP: 0010:walk_to_pmd+0x1bd/0x4c0
[ 1170.471654][    C0] Code: 84 a8 01 00 00 e8 d3 ee ae ff 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 74 02 00 00 4c 8b 2b 31 ff <4d> 89 ee 49 83 e6 9f 4c 89 f6 e8 84 e9 ae ff 4d 85 f6 0f 84 6f 01
[ 1170.471667][    C0] RSP: 0018:ffffc9000440f8a8 EFLAGS: 00000246
[ 1170.471677][    C0] RAX: dffffc0000000000 RBX: ffff88813fe7d2a8 RCX: 0000000000000027
[ 1170.471686][    C0] RDX: 1ffff11027fcfa55 RSI: ffffffff8259a9ed RDI: 0000000000000000
[ 1170.471695][    C0] RBP: 00002aaaaaaab000 R08: 0000000000000005 R09: 000000000000003f
[ 1170.471704][    C0] R10: 0000000000000027 R11: 0000000000000000 R12: ffff88813fe88c40
[ 1170.471712][    C0] R13: 000000013fe7e067 R14: ffffc9000440f990 R15: 8000000000000063
[ 1170.471722][    C0] FS:  0000000000000000(0000) GS:ffff888124352000(0000) knlGS:0000000000000000
[ 1170.471735][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1170.471744][    C0] CR2: 0000558c61c0ba78 CR3: 000000000e598000 CR4: 00000000003526f0
[ 1170.471753][    C0] Call Trace:
[ 1170.471758][    C0]  <TASK>
[ 1170.471763][    C0]  ? __text_poke+0x52d/0xae0
[ 1170.471778][    C0]  ? __kmalloc_noprof+0xf5/0x850
[ 1170.471794][    C0]  get_locked_pte+0x25/0xc0
[ 1170.471806][    C0]  ? __kmalloc_noprof+0xf5/0x850
[ 1170.471822][    C0]  __text_poke+0x250/0xae0
[ 1170.471836][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[ 1170.471852][    C0]  ? __pfx___text_poke+0x10/0x10
[ 1170.471867][    C0]  ? __kmalloc_noprof+0xf5/0x850
[ 1170.471885][    C0]  smp_text_poke_batch_finish+0x6b5/0xc60
[ 1170.471903][    C0]  ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190
[ 1170.471921][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[ 1170.471939][    C0]  ? arch_jump_label_transform_queue+0xc0/0x120
[ 1170.471960][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[ 1170.471978][    C0]  jump_label_update+0x37a/0x550
[ 1170.472000][    C0]  static_key_disable_cpuslocked+0x162/0x1c0
[ 1170.472020][    C0]  static_key_disable+0x1a/0x20
[ 1170.472044][    C0]  toggle_allocation_gate+0x149/0x2d0
[ 1170.472061][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[ 1170.472078][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1170.472098][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1170.472115][    C0]  process_one_work+0x9d7/0x1920
[ 1170.472133][    C0]  ? __pfx_process_one_work+0x10/0x10
[ 1170.472150][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[ 1170.472168][    C0]  worker_thread+0x5da/0xe40
[ 1170.472186][    C0]  ? kthread+0x13a/0x450
[ 1170.472197][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1170.472209][    C0]  kthread+0x370/0x450
[ 1170.472221][    C0]  ? __pfx_kthread+0x10/0x10
[ 1170.472233][    C0]  ret_from_fork+0x754/0xd80
[ 1170.472246][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1170.472260][    C0]  ? __switch_to+0x7b4/0x1120
[ 1170.472276][    C0]  ? __pfx_kthread+0x10/0x10
[ 1170.472288][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1170.472309][    C0]  </TASK>
[ 1170.790409][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1170.797276][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1170.807929][   T31] Tainted: [L]=SOFTLOCKUP
[ 1170.812237][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1170.822284][   T31] Call Trace:
[ 1170.825536][   T31]  <TASK>
[ 1170.828440][   T31]  dump_stack_lvl+0x100/0x190
[ 1170.833105][   T31]  vpanic+0x552/0x970
[ 1170.837066][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1170.841541][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1170.847674][   T31]  panic+0xd1/0xe0
[ 1170.851375][   T31]  ? __pfx_panic+0x10/0x10
[ 1170.855779][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1170.861910][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1170.868040][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1170.874185][   T31]  ? watchdog.cold+0x198/0x1ca
[ 1170.878936][   T31]  ? watchdog+0xd35/0x1050
[ 1170.883347][   T31]  watchdog.cold+0x1a9/0x1ca
[ 1170.887952][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1170.892634][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1170.897647][   T31]  ? kthread+0x13a/0x450
[ 1170.901873][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1170.906534][   T31]  kthread+0x370/0x450
[ 1170.910584][   T31]  ? __pfx_kthread+0x10/0x10
[ 1170.915155][   T31]  ret_from_fork+0x754/0xd80
[ 1170.919728][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1170.924823][   T31]  ? __switch_to+0x7b4/0x1120
[ 1170.929485][   T31]  ? __pfx_kthread+0x10/0x10
[ 1170.934068][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1170.938825][   T31]  </TASK>
[ 1170.942100][   T31] Kernel Offset: disabled
[ 1170.946397][   T31] Rebooting in 86400 seconds..