last executing test programs:

3m3.998725477s ago: executing program 0 (id=1371):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
gettid()
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x13, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @multicast}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)

3m3.477894868s ago: executing program 0 (id=1374):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010800000000000000000100fffc08df010073797a30"], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x460200, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000340)={0x7})
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004)
kcmp(0x0, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs$userns(r3, &(0x7f00000000c0))
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x79, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
recvmmsg$unix(r4, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/207, 0xcf}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0}], 0x1}}], 0x3, 0x400123a0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r5, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x12, 0x1c, "fe9ba2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b803ac9600010000000000000000000000000000000000000080000600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000041]}})

3m2.414449596s ago: executing program 0 (id=1379):
getpeername(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4c850)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x8, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r4, &(0x7f0000019300)=""/102392, 0x18ff8)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r5)
sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r6, 0x721, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x4004)
listen(0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r7, 0x11, 0x67, 0x0, 0x0)
sendmmsg$inet(r7, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)

3m1.105730043s ago: executing program 0 (id=1383):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x80400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4000, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000340)={0x0, 'vcan0\x00', {0x40001}, 0xfff7})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', r4, 0x0, 0x41)
move_mount(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x220)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

3m0.282715607s ago: executing program 0 (id=1387):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x40)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000088", 0x14}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4ca", 0x1a}], 0x2}, 0x8000)

2m57.382202817s ago: executing program 0 (id=1394):
socket$tipc(0x1e, 0x2, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{0x0}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m56.089018071s ago: executing program 32 (id=1394):
socket$tipc(0x1e, 0x2, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{0x0}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m49.085946514s ago: executing program 3 (id=1435):
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setpriority(0x1, 0xffffffffffffffff, 0x3)
r2 = syz_io_uring_setup(0x6fce, 0x0, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$kcm(0xa, 0xf, 0x106)
sendmsg$nl_generic(r5, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"/441], 0x1b4}, 0x1, 0x0, 0x0, 0x40890}, 0x48000)
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, 0x0}, 0x4000011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786e", @ANYRESDEC=r5, @ANYRES32=r1], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x2)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x3)
sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d0000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840)

2m48.135744163s ago: executing program 3 (id=1437):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x28e203c, &(0x7f0000000f00)=ANY=[@ANYRES32=0x0, @ANYBLOB="a8fc36f9fe911b1985403f8b150cc48b7ae369fbe863445c99a4fa90b0be41e770f5e90cfd394f919593e57a56c8545e35427c274026ab82bb2a8e40ec49cdc2776397fc6e3b07fedea0aa77bb11441ee17c36be88ae0092d53e9acf6253e7", @ANYRES64=r1, @ANYRESDEC=r0, @ANYRESHEX=r2, @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r6=>0x0)
r7 = eventfd2(0x80000000, 0x80400)
io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r5, &(0x7f00000009c0)='1', 0x1, 0xf, 0x0, 0x0, r7}])
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000000000000000000001000000181100006cfe8834653d491b579406df376a8afba5d1c22aeaf9b82e03b07afecdd5bc73bcf7411f62", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="95497258920000000000", @ANYRES32, @ANYBLOB="000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800009d3a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000005f3308000c00000018470000ffffffff00000000000000006c400001100000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000004d19fcffe8ffffff"], &(0x7f0000000480)='syzkaller\x00', 0x9, 0xee, &(0x7f00000005c0)=""/238, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, r5, 0x8, &(0x7f00000006c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r5, 0x4, 0x0, &(0x7f0000000740)=[{0x1, 0x2, 0x10, 0x5}, {0x1, 0x4, 0xd, 0xa}, {0x0, 0x1, 0x1, 0x9}, {0x5, 0x1, 0xf}], 0x10, 0x1}, 0x94)
write$FUSE_NOTIFY_STORE(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d)
dup3(r5, r3, 0x80000)
socket$pppl2tp(0x18, 0x1, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x20284, 0x160)
getdents64(r8, &(0x7f0000002600)=""/4113, 0x1011)

2m46.686440424s ago: executing program 3 (id=1440):
socket$nl_route(0x10, 0x3, 0x0)
truncate(&(0x7f0000000040)='./file2\x00', 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x0, 0x0, 0xfffffffffffffed2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB], 0x24, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

2m45.862984144s ago: executing program 3 (id=1445):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00')
open_by_handle_at(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB=' '], 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000680)="fa61", 0x2}], 0x1}}], 0x1, 0x20040804)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4)
io_setup(0x66, &(0x7f0000000400)=<r2=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000001800)='./file0\x00')
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r3, &(0x7f00000000c0)='-5', 0x2, 0x0, 0x0, 0x4}])
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0)
io_cancel(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f00000000c0)="f57ffa7f", 0x4, 0x0, 0x0, 0x0, r4}, &(0x7f00000005c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r5=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r6=>0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, 0xffffffffffffffff, 0x2000c884)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil)
io_submit(r6, 0x4, &(0x7f0000000580)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x662741983499682a, 0xe, r5, &(0x7f0000000200)="b50a8d924c3711812db0c045b646ded9d36dc7d415e135abfb026c3ea1d8d76762121c49227b29c4fe019bbe5130aab1848afc01407b9c534a636635da9ea29b25c0fee3d1eec28ce31b24cb304ba27b185a0287536ba3e6b911a49ecb23481d7b7a89680ed3cf1450f663b69b4657196fb0a4199e49ce8e6174029dcc5b06dc4fd4da1818290eff827ceffd88aea1121d96a79200bfb89ee929fc0727ea13b55b3a78c442412810b1", 0xa9, 0x1, 0x0, 0x0, r7}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xf, r1, &(0x7f0000000300)="18ceed386fd42f8272ab960df87963b2bceb832475", 0x15, 0xffffffffffffffff, 0x0, 0x2, r7}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x6, r1, &(0x7f0000000400)="61d016675f9b97c5e870476dbcecb905938f214dd0eb496f018372dd9b29ed5ecf9fb7ae972b359a41e12493383055e79d46cffaf94e3ad0e72e17b2da3aeb93f3670258298280eab0f8bb13af92c66ae71d57b4511bf7a2c755a59c4fcf5f8aa54415f632ae75b063b8d1d0010edfa3330265bd48c9fb14a3a848fb0fa7b353247f47af259c6dd87fdad4d4d1", 0x8d, 0x2, 0x0, 0x2, r7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x7fff, r1, &(0x7f0000000500)="cce2b4655e697f16e569d3f1d56f848ffd46b65c48a0485db3d80b883e", 0x1d, 0x9, 0x0, 0x1, r7}])

2m44.65340257s ago: executing program 3 (id=1452):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x8200, 0x4)
openat(r1, &(0x7f0000000500)='./file0/file0\x00', 0x400000, 0x40)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6ec6b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x103, {0x1000006, 0x2, 0x0, 0xc6, 0x4, 0xe4, {0x40, 0x1, 0xffffffffffff826c, 0x40010000, 0x5002, 0x0, 0x800, 0x81, 0x3, 0x2000, 0x75, r3, r4, 0x440, 0xd}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040}, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x800002, 0x14c0348, 0x7ff, 0x1, 0xfffffbf1, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)

2m43.305050517s ago: executing program 3 (id=1460):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x400)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
fcntl$getflags(r2, 0x401)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x23a000, 0x1000, 0x0, 0x3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0x0, 0x5d, 0x0, &(0x7f00000004c0)=""/93, 0x7ff, 0x0, 0xe5, 0x57, &(0x7f0000000540)="7d3265764d5aa86c7365bb302f96b58b9f7703a923c9b93aaf7ca1e3bb5ec289c58901d285a0b78d257f9caca76b5437f7c2edebfcc169245d7128f6bdc14962539ae0a130aaf1d922246756a847a5ab57ab2e8b1e0c50bf3ec6e617e68193edf7dd9de6401ed166a09cb8051ab2f0082ea419f370094fd780b2045b48822996c898bf74cb3d1fc4cb3ab392d9139352e1ecf90fb67f371588d3f5d46ed58404e3acd9cfcb988223a0ad7c49ac4b390d9c29a6f4976bc215f5f6f9bc6876de9a186ffff0741db5efd1e38431958da6ef54075ad7d34053c4d166455a418314fc409b9a5421", &(0x7f0000000640)="718980d65895f55e29ff67e0c23f9ae5d594843ad6c61234500d3c23aa490d7f1ff718bae11736096e7e020841ca9ecddb4327f4967cebd6929045b1bc4eaf44503f6384e7072131db5fec0ebe06092abb385a104b5e18", 0x8, 0x0, 0x81}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005})
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x7577e0b0a29503e5)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000100)={'wg1\x00', <r7=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000002c0)={r7, 0x11, 0x6, @random="08d36bf345c9"}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @mcast1, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3, 0x5}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000880)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x1a, [0x1, 0xde, 0x0, 0xff, 0x5, 0x8]}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x4, "914f"}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x2}]}}}}}}}}, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x2)

2m42.931541687s ago: executing program 33 (id=1460):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x400)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
fcntl$getflags(r2, 0x401)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x23a000, 0x1000, 0x0, 0x3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0x0, 0x5d, 0x0, &(0x7f00000004c0)=""/93, 0x7ff, 0x0, 0xe5, 0x57, &(0x7f0000000540)="7d3265764d5aa86c7365bb302f96b58b9f7703a923c9b93aaf7ca1e3bb5ec289c58901d285a0b78d257f9caca76b5437f7c2edebfcc169245d7128f6bdc14962539ae0a130aaf1d922246756a847a5ab57ab2e8b1e0c50bf3ec6e617e68193edf7dd9de6401ed166a09cb8051ab2f0082ea419f370094fd780b2045b48822996c898bf74cb3d1fc4cb3ab392d9139352e1ecf90fb67f371588d3f5d46ed58404e3acd9cfcb988223a0ad7c49ac4b390d9c29a6f4976bc215f5f6f9bc6876de9a186ffff0741db5efd1e38431958da6ef54075ad7d34053c4d166455a418314fc409b9a5421", &(0x7f0000000640)="718980d65895f55e29ff67e0c23f9ae5d594843ad6c61234500d3c23aa490d7f1ff718bae11736096e7e020841ca9ecddb4327f4967cebd6929045b1bc4eaf44503f6384e7072131db5fec0ebe06092abb385a104b5e18", 0x8, 0x0, 0x81}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005})
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x7577e0b0a29503e5)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000100)={'wg1\x00', <r7=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000002c0)={r7, 0x11, 0x6, @random="08d36bf345c9"}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @mcast1, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3, 0x5}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000880)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x1a, [0x1, 0xde, 0x0, 0xff, 0x5, 0x8]}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x4, "914f"}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x2}]}}}}}}}}, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x2)

2m29.997425776s ago: executing program 4 (id=1501):
r0 = socket$rds(0x15, 0x5, 0x0)
syz_open_pts(0xffffffffffffffff, 0x81)
syz_open_dev$sg(0x0, 0x0, 0x8002)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r4, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c2bbd7000000000000200", @ANYRES32=r5, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090)
r6 = socket$nl_route(0x10, 0x3, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x81)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', <r7=>r5, 0x7, 0x80, 0x67a, 0x7, {{0x6, 0x4, 0x2, 0x29, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}})
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x178, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40}, 0x40)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)

2m29.934203467s ago: executing program 4 (id=1502):
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) (async)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) (async)
shutdown(0xffffffffffffffff, 0x1)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x220}, 0x0) (async)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11)
capset(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x2})
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xa}, 0x1c) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x1e, 0x6, 0x1) (async)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r7=>0x0}) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r8, r7, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[], 0x0)

2m29.528044496s ago: executing program 2 (id=1504):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x4)
semctl$GETVAL(0x0, 0x2, 0xc, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f00000006c0))
socket$kcm(0x10, 0x2, 0x0)
writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1)
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="5001", @ANYRES32=r0], 0x14)

2m28.409692667s ago: executing program 2 (id=1506):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, 0x0, 0x40)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c10200000001", 0x14}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4ca", 0x1a}], 0x2}, 0x8000)

2m27.337566573s ago: executing program 4 (id=1509):
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

2m27.236668192s ago: executing program 2 (id=1511):
openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_open_dev$vim2m(&(0x7f00000002c0), 0xfffffffffffffff7, 0x2)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x3}, 0x8)
r1 = userfaultfd(0x1)
r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000000)={0x4, 0xffffffff, 0x0, 'queue0\x00', 0xd1b})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r4 = syz_ublk_setup_io_uring(0x2, &(0x7f0000000040)={0x0, 0x30b5, 0x20000, 0x2, 0xd7}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10002, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2004, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x0, 0x2, 0x246, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20000000, 0x1, 0x2, 0x1f6}}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[], 0x48)
lseek(0xffffffffffffffff, 0x38, 0x0)
setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000140), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)

2m27.230089003s ago: executing program 4 (id=1512):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180))

2m26.229325015s ago: executing program 2 (id=1516):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x6e1f, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)='B', 0x1}], 0x1}, 0x20000010)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)=0x8)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, &(0x7f0000001300)="92", 0x2)
syz_open_dev$char_usb(0xc, 0xb4, 0x4001000000)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @remote}, 0x10)

2m26.220777079s ago: executing program 4 (id=1517):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
pwritev(r1, &(0x7f0000000900)=[{&(0x7f00000004c0)="02d28374", 0x4}], 0x1, 0x8002, 0x4)
open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00fffffffffffffff7"], 0x16080)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f00000002c0)=0x20, 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x103841, 0x186)
lseek(r3, 0xfffffffffffffff7, 0x0)

2m26.013735941s ago: executing program 4 (id=1518):
io_uring_setup(0xa18, &(0x7f0000000340)={0x0, 0x46d06, 0x0, 0x2000003, 0x23d})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="9ee2ff"], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sync()
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x8, 0x1f, 0x20000006})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xd7, 0x1ff, 0xb})
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000000800)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x120)
readv(r1, &(0x7f0000002780)=[{&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000080)=""/40, 0x28}, {0x0}], 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x5, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141080, 0x0)
timer_create(0xb, &(0x7f0000000580)={0x0, 0x9, 0x1, @thr={0x0, 0x0}}, &(0x7f00000005c0)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000600)={{0x0, 0x3938700}}, &(0x7f0000000640))

2m23.687173614s ago: executing program 2 (id=1524):
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000840)={0x1, 0x0, 0x4, 0xfff7fffe, 0x2, 0xfffffffc, 0xffffffff, 0xfffffffd, 0x4, 0x3, 0x2, 0xffffffff, &(0x7f0000000100)=[0x200007], 0x1, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)={'L+', 0x6}, 0x16, 0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xb, 0x40, 0x5, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_trace_dev_match', 0x602000, 0x80)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', r4, &(0x7f0000000280)='./file2\x00', 0x6)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = io_uring_setup(0x76fc, &(0x7f0000000440)={0x0, 0x100afd4, 0x1000, 0xa, 0x8011d})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000540)=[{0x0}], 0x1)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r6], 0x0)
syz_clone3(&(0x7f0000000680)={0x802000, &(0x7f00000002c0), &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000400), {0x2b}, &(0x7f0000000580)=""/3, 0x3, &(0x7f00000005c0)=""/66, &(0x7f0000000640)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58)
fcntl$setownex(r7, 0xf, &(0x7f0000000700)={0x2, r8})
io_uring_setup(0x7625, &(0x7f0000000740)={0x0, 0x20006543, 0x10000, 0x4, 0x28e})
socket$key(0xf, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2m23.412163214s ago: executing program 2 (id=1526):
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2, 0x4002}}, 0x2e) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr\x00')
preadv(0xffffffffffffffff, &(0x7f000001b240)=[{&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f000001a240)=""/4094, 0xffe}], 0x2, 0x91, 0x7) (async)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0)
read$msr(r1, &(0x7f000004b680)=""/102392, 0x18ff8) (async)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1)
setsockopt$sock_attach_bpf(r2, 0x6, 0x3, &(0x7f0000000080), 0x4) (async)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0d1) (async)
close(r0) (async)
r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x90f81825ba255a13, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) (async)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) (async)
creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x10005}, &(0x7f0000000380)=0x8)

2m10.769344153s ago: executing program 34 (id=1518):
io_uring_setup(0xa18, &(0x7f0000000340)={0x0, 0x46d06, 0x0, 0x2000003, 0x23d})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="9ee2ff"], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sync()
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x8, 0x1f, 0x20000006})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xd7, 0x1ff, 0xb})
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000000800)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x120)
readv(r1, &(0x7f0000002780)=[{&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000080)=""/40, 0x28}, {0x0}], 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x5, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141080, 0x0)
timer_create(0xb, &(0x7f0000000580)={0x0, 0x9, 0x1, @thr={0x0, 0x0}}, &(0x7f00000005c0)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000600)={{0x0, 0x3938700}}, &(0x7f0000000640))

2m7.932481223s ago: executing program 35 (id=1526):
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2, 0x4002}}, 0x2e) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr\x00')
preadv(0xffffffffffffffff, &(0x7f000001b240)=[{&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f000001a240)=""/4094, 0xffe}], 0x2, 0x91, 0x7) (async)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0)
read$msr(r1, &(0x7f000004b680)=""/102392, 0x18ff8) (async)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1)
setsockopt$sock_attach_bpf(r2, 0x6, 0x3, &(0x7f0000000080), 0x4) (async)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0d1) (async)
close(r0) (async)
r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x90f81825ba255a13, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) (async)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) (async)
creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x10005}, &(0x7f0000000380)=0x8)

10.428215946s ago: executing program 5 (id=1946):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a0d6}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf5, 0x0, 0x4, 0xb, 0x3}, 0x2f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000088", 0x14}, {&(0x7f00000022c0)}], 0x2}, 0x8000)

10.050132383s ago: executing program 5 (id=1950):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$inet_icmp(0x2, 0x2, 0x1)
socket(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket$kcm(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x3, 0x8000000003c)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)

9.904147494s ago: executing program 5 (id=1951):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300"], 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='N}'])

9.0148646s ago: executing program 6 (id=1954):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000000, 0x3)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x300000d, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ptrace$ARCH_SET_GS(0x1e, r3, 0x0, 0x1001)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xffffffff, 0x8, 0x3eb2, 0x5, 0x0, [{0x77, 0x0, 0x8, '\x00', 0xc}, {0x8, 0x0, 0x7, '\x00', 0x9}, {0x7, 0x1, 0xc, '\x00', 0xd4}, {0x95, 0x6, 0x3, '\x00', 0xff}, {0xc4, 0xa, 0x1, '\x00', 0x4}, {0x4f, 0x4, 0x1, '\x00', 0x8}, {0xfb, 0x7, 0x75, '\x00', 0x2}, {0x7, 0x10, 0xfc, '\x00', 0x2}, {0x12, 0x4, 0xf, '\x00', 0x1}, {0x4, 0x0, 0x6, '\x00', 0x7}, {0x5, 0x0, 0x8, '\x00', 0x9}, {0x9, 0xd, 0x5, '\x00', 0x6}, {0x4, 0x8, 0x4, '\x00', 0x2}, {0xa, 0x53, 0x5, '\x00', 0x19}, {0x4, 0xfa, 0x1, '\x00', 0x6}, {0x5, 0x0, 0x4, '\x00', 0x9}, {0x3b, 0xc, 0x6, '\x00', 0x7}, {0x4, 0x8d, 0x80, '\x00', 0x7}, {0x3, 0x9, 0x28, '\x00', 0x1}, {0x7c, 0x5, 0x3d, '\x00', 0x5}, {0x0, 0x6, 0xfd, '\x00', 0x9}, {0x8f, 0x8, 0x7, '\x00', 0x9}, {0xa9, 0x10, 0xe, '\x00', 0x4}, {0x46, 0x4, 0x1, '\x00', 0x8}]}})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
unshare(0x6a040000)
r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0x6a0})
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$lock(r1, 0x6, &(0x7f00000000c0)={0x0, 0x1, 0x8000, 0x9, r3})
recvfrom$inet6(r2, 0x0, 0x0, 0x2000, 0x0, 0x0)

8.084221073s ago: executing program 6 (id=1955):
r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0)
syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)=ANY=[@ANYRES32=r0], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x5d, &(0x7f0000000200)=@string={0x5d, 0x3, "7a5cc9ba7e98255cc0dbdb0a78e59797f7e655cf0b3aed105ce7f2019d379fc482b340de437f9b58c1861727e9556ea4f0079a71e7a00df188cd698eb4f716572bb1b94380d1b780b953b286b9e6735ad619fe02bfd45500000000"}}, {0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}]})
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x11)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xf0)
socket$kcm(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000002a40)=[{{&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000002980)=[{&(0x7f00000004c0)=""/20, 0x14}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/245, 0xf5}, {&(0x7f00000016c0)=""/45, 0xffffffffffffff9c}, {&(0x7f0000001700)=""/117, 0x75}, {&(0x7f00000001c0)=""/58, 0x3a}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/144, 0x90}, {&(0x7f0000002880)=""/235, 0xeb}], 0x9}, 0xffffffff}], 0x1, 0x40000142, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00')
r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2204, 0x1)

7.935359959s ago: executing program 5 (id=1957):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2c, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c)
sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x6e1f, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{0x0}], 0x1}, 0x20000010)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)=0x8)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, &(0x7f0000001300)="92", 0x2)
syz_open_dev$char_usb(0xc, 0xb4, 0x4001000000)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @remote}, 0x10)

7.381902934s ago: executing program 8 (id=1958):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x40)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000001", 0x14}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4ca", 0x1a}], 0x2}, 0x8000)

6.588833101s ago: executing program 1 (id=1962):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)}, 0x8000}], 0x2, 0x10002, 0x0)
mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)

6.371900724s ago: executing program 1 (id=1964):
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x620b}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r2=>0x0})
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="20c88bffffffffffffbd70f2ffff00000c8e85845ff945b0055a43c3be156dc4bc2f79d7bd5ee060808f558cd4830a5370f73d3ccd6c55a39c1c4d3002620b8edf1695e9139a40af9e6e2ca9102348eb589d1bd216aa578c7e68b2b2688c4531ec79f6d8"], 0x38}, 0x1, 0x0, 0x0, 0x2004c0d4}, 0x4044010)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x1c)
r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xffffffff, 0x100, 0x2, 0x1e5}, 0x0, &(0x7f0000000080)=<r6=>0x0, &(0x7f00000003c0)=<r7=>0x0)
syz_ublk_add_dev(r5, 0x0, r6, r7, &(0x7f00000004c0)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2000c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0xdc9, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x40}}}, 0x0)
syz_ublk_setup_queues(r3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcba4, 0x8000, 0x2, 0x81, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5019, 0xffff, 0x5, 0x1cc, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfbd, 0x800, 0x3, 0x8d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e19, 0x4000, 0x2, 0x165, 0x0, r5}}], 0x4, &(0x7f0000002f00)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1ff}, 0x0, 0x0, '\x00', {0x3, 0xc0, 0x0, 0x0}}, &(0x7f0000002f80))
socket$nl_generic(0x10, 0x3, 0x10)

5.506365942s ago: executing program 1 (id=1965):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES64=r0], 0x50)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005880)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, 0x0, 0x2, 0x5, 0x0, 0x0, {0x4, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x80}}, 0x20008000)
r5 = accept4(r1, 0x0, 0x0, 0x800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c)
sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
syz_usb_connect$uac3(0x0, 0xb3, &(0x7f0000000500)=ANY=[@ANYBLOB="1201100100000040cd0c14004000010203010902a1009e1801c010080b0002010130070904000000010130000a2401103d0007000000132403050101060250ff0700cbb3000900ff010c240b0701fcffffff08060014240302"], 0x0)

5.317538494s ago: executing program 7 (id=1966):
r0 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x18, 0x100)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0xfffffffc)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r5 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000)
getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14)

4.971323872s ago: executing program 8 (id=1967):
creat(&(0x7f0000000180)='./file0\x00', 0xa)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[])
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000009b40)=""/102392, 0x18ff8)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x4, {0x5, 0x0, 0x3, 0x0, 0x0, 0x6, {0x2, 0x2, 0x8000000000, 0x7, 0x0, 0x0, 0x100, 0x0, 0x0, 0x2000, 0x0, 0x0, 0xee00, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d2}, 0x4000000)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, &(0x7f0000000040))
open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000006)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000})
syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0)

4.860984481s ago: executing program 5 (id=1968):
timer_create(0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040)
syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a03080003010107"], 0x0)

4.405795466s ago: executing program 6 (id=1969):
r0 = socket$rds(0x15, 0x5, 0x0)
syz_open_pts(0xffffffffffffffff, 0x81)
syz_open_dev$sg(0x0, 0x0, 0x8002)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000140)="0100cd7995f1a8d5583a3d5e03002112229c4bd8160b9dddc9125038131abd95b8788c4dd322bf02ad68e081044458669e11dfe4fde7c4182cf7787b63832576195e0c0fd04a")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c2bbd7000000000000200", @ANYRES32=r5, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090)
r6 = socket$nl_route(0x10, 0x3, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x81)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', <r7=>r5, 0x7, 0x80, 0x67a, 0x7, {{0x6, 0x4, 0x2, 0x29, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}})
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x178, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40}, 0x40)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)

4.074458229s ago: executing program 6 (id=1970):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x4000)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r1, 0x0, 0x7}, 0x38)

3.965395012s ago: executing program 7 (id=1971):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x4)
semctl$GETVAL(0x0, 0x2, 0xc, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f00000006c0))
socket$kcm(0x10, 0x2, 0x0)
writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1)
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="5001", @ANYRES32=r0], 0x14)

3.425951052s ago: executing program 7 (id=1972):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$inet_icmp(0x2, 0x2, 0x1)
socket(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa000000000000000001", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket$kcm(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x3, 0x8000000003c)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)

3.241032774s ago: executing program 7 (id=1973):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a0d6}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf5, 0x0, 0x4, 0xb, 0x3}, 0x2f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000088", 0x14}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158", 0xd}], 0x2}, 0x8000)

2.981791801s ago: executing program 1 (id=1974):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{0x0}], 0x1}, 0x8000}], 0x2, 0x10002, 0x0)
mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)

2.910468554s ago: executing program 7 (id=1975):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x4)
semctl$GETVAL(0x0, 0x2, 0xc, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f00000006c0))
socket$kcm(0x10, 0x2, 0x0)
writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1)
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="5001", @ANYRES32=r0], 0x14)

2.421246255s ago: executing program 7 (id=1976):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2c, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c)
sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x6e1f, @private=0xa010100}, 0x10, &(0x7f0000000440)}, 0x20000010)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)=0x8)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, &(0x7f0000001300)="92", 0x2)
syz_open_dev$char_usb(0xc, 0xb4, 0x4001000000)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @remote}, 0x10)

2.355152348s ago: executing program 1 (id=1977):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x40)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000001", 0x14}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4ca", 0x1a}], 0x2}, 0x8000)

2.346735928s ago: executing program 5 (id=1978):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2c, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c)
sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x6e1f, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{0x0}], 0x1}, 0x20000010)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)=0x8)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, &(0x7f0000001300)="92", 0x2)
syz_open_dev$char_usb(0xc, 0xb4, 0x4001000000)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @remote}, 0x10)

2.145261445s ago: executing program 1 (id=1979):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
write$yama_ptrace_scope(r1, &(0x7f0000000140)='3\x00', 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0xffffffffffffff24, 0xfa00, {0x4, &(0x7f0000000180)={<r7=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r7, 0x0, 0x3, 0x1}}, 0x20)
eventfd2(0x4, 0x800)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = dup(r8)
write$UHID_INPUT(r9, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000040)=0x7, 0xffffffffffffffff, 0x0, 0xfffffffffffff629, 0x9)
bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x17, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)

1.883159986s ago: executing program 8 (id=1980):
r0 = socket$rds(0x15, 0x5, 0x0)
syz_open_pts(0xffffffffffffffff, 0x81)
syz_open_dev$sg(0x0, 0x0, 0x8002)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000140)="0100cd7995f1a8d5583a3d5e03002112229c4bd8160b9dddc9125038131abd95b8788c4dd322bf02ad68e081044458669e11dfe4fde7c4182cf7787b63832576195e0c0fd04a")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c2bbd7000000000000200", @ANYRES32=r5, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090)
r6 = socket$nl_route(0x10, 0x3, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x81)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', <r7=>r5, 0x7, 0x80, 0x67a, 0x7, {{0x6, 0x4, 0x2, 0x29, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}})
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x178, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40}, 0x40)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)

1.493568937s ago: executing program 8 (id=1981):
r0 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x18, 0x100)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0xfffffffc)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r5 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000)
getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14)

546.870864ms ago: executing program 6 (id=1982):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x4)
semctl$GETVAL(0x0, 0x2, 0xc, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f00000006c0))
socket$kcm(0x10, 0x2, 0x0)
writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1)
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="5001", @ANYRES32=r0], 0x14)

105.881854ms ago: executing program 8 (id=1983):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$inet_icmp(0x2, 0x2, 0x1)
socket(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa000000000000000001", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket$kcm(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x3, 0x8000000003c)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)

52.043242ms ago: executing program 6 (id=1984):
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x1})
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000048040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703", 0x44}, {&(0x7f0000000840)='C1', 0x2}], 0x2}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0xc8781, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0xa)
fchdir(r4)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0)
ftruncate(r5, 0x2007ffb)
close(r5)
r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r6, 0x402, 0x8000003d)
fcntl$setsig(r6, 0xa, 0x1d)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)

0s ago: executing program 8 (id=1985):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a0d6}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf5, 0x0, 0x4, 0xb, 0x3}, 0x2f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000088", 0x14}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158", 0xd}], 0x2}, 0x8000)

kernel console output (not intermixed with test programs):

SB Raw Gadget: couldn't find an available UDC or it's busy
[  472.742183][T11892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.874647][T11917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.916139][ T5704] usb 7-1: GET_CAPABILITIES returned 0
[  472.932827][T11917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.757680][   T30] audit: type=1800 audit(1784478098.115:637): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1599" name="bus" dev="ramfs" ino=34340 res=0 errno=0
[  473.758009][ T5704] usbtmc 7-1:16.0: can't read capabilities
[  473.961898][T11924] FAULT_INJECTION: forcing a failure.
[  473.961898][T11924] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  473.976191][T11924] CPU: 0 UID: 0 PID: 11924 Comm: syz.1.1602 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  473.976218][T11924] Tainted: [L]=SOFTLOCKUP
[  473.976223][T11924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  473.976232][T11924] Call Trace:
[  473.976238][T11924]  <TASK>
[  473.976244][T11924]  dump_stack_lvl+0x100/0x190
[  473.976269][T11924]  should_fail_ex.cold+0x5/0xa
[  473.976289][T11924]  _copy_from_user+0x2e/0xd0
[  473.976310][T11924]  copy_from_sockptr_offset.constprop.0+0x12c/0x150
[  473.976333][T11924]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  473.976361][T11924]  do_sock_getsockopt+0x530/0x6e0
[  473.976380][T11924]  ? __lock_acquire+0x49f/0x1a40
[  473.976401][T11924]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  473.976421][T11924]  ? rcu_read_lock_any_held+0x6a/0xa0
[  473.976453][T11924]  ? find_held_lock+0x2b/0x80
[  473.976481][T11924]  ? __fget_files+0x21f/0x3d0
[  473.976502][T11924]  __sys_getsockopt+0x148/0x260
[  473.976526][T11924]  ? __x64_sys_getsockopt+0xbd/0x160
[  473.976541][T11924]  __x64_sys_getsockopt+0xbd/0x160
[  473.976556][T11924]  ? do_syscall_64+0x90/0x870
[  473.976572][T11924]  ? lockdep_hardirqs_on+0x78/0x100
[  473.976602][T11924]  do_syscall_64+0x115/0x870
[  473.976616][T11924]  ? clear_bhb_loop+0x40/0x90
[  473.976635][T11924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.976651][T11924] RIP: 0033:0x7fef3219de99
[  473.976665][T11924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  473.976680][T11924] RSP: 002b:00007fef303f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  473.976696][T11924] RAX: ffffffffffffffda RBX: 00007fef32425fa0 RCX: 00007fef3219de99
[  473.976706][T11924] RDX: 0000000000000004 RSI: 0000000000000112 RDI: 0000000000000004
[  473.976716][T11924] RBP: 00007fef303f6090 R08: 0000200000000000 R09: 0000000000000000
[  473.976725][T11924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  473.976734][T11924] R13: 00007fef32426038 R14: 00007fef32425fa0 R15: 00007fff0aa193a8
[  473.976756][T11924]  </TASK>
[  474.250632][ T5704] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  474.421212][ T5704] usb 8-1: Using ep0 maxpacket: 8
[  474.440964][ T5704] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  474.449094][ T5704] usb 8-1: config 0 has no interface number 0
[  474.462508][ T5704] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  474.473644][ T5704] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  474.489917][ T5704] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.531557][ T5704] usb 8-1: config 0 descriptor??
[  474.554127][ T5704] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[  474.752354][    C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  474.763945][T11922] usbtmc 7-1:16.0: Unable to send data, error -71
[  475.481315][  T188] usb 8-1: USB disconnect, device number 2
[  475.509716][ T5734] usb 7-1: USB disconnect, device number 9
[  475.664395][T11938] siw: device registration error -23
[  476.252950][ T5734] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  476.493240][ T5734] usb 2-1: too many configurations: 25, using maximum allowed: 8
[  476.529600][ T5734] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98
[  476.549036][T11943] syzkaller1: entered promiscuous mode
[  476.557716][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.567588][T11943] syzkaller1: entered allmulticast mode
[  476.595726][ T5734] usb 2-1: config 0 descriptor??
[  476.659915][ T5734] pwc: Creative Labs Webcam Pro Ex detected.
[  476.666110][ T5734] pwc: Warning: more than 1 configuration available.
[  476.750087][ T5704] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  476.846043][T11957] FAULT_INJECTION: forcing a failure.
[  476.846043][T11957] name failslab, interval 1, probability 0, space 0, times 0
[  476.872971][   T30] audit: type=1400 audit(1784478101.235:638): avc:  denied  { read append } for  pid=11939 comm="syz.1.1606" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  476.885575][T11957] CPU: 1 UID: 0 PID: 11957 Comm: syz.6.1611 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  476.885601][T11957] Tainted: [L]=SOFTLOCKUP
[  476.885606][T11957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  476.885614][T11957] Call Trace:
[  476.885619][T11957]  <TASK>
[  476.885625][T11957]  dump_stack_lvl+0x100/0x190
[  476.885651][T11957]  should_fail_ex.cold+0x5/0xa
[  476.885671][T11957]  should_failslab+0xc2/0x120
[  476.885690][T11957]  __kmalloc_noprof+0xfc/0x820
[  476.885705][T11957]  ? rcu_is_watching+0x12/0xc0
[  476.885726][T11957]  ? tomoyo_realpath_from_path+0xb6/0x690
[  476.885753][T11957]  tomoyo_realpath_from_path+0xb6/0x690
[  476.885780][T11957]  tomoyo_path_number_perm+0x23c/0x580
[  476.885798][T11957]  ? tomoyo_path_number_perm+0x22e/0x580
[  476.885818][T11957]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  476.885859][T11957]  ? find_held_lock+0x2b/0x80
[  476.885879][T11957]  ? __fget_files+0x215/0x3d0
[  476.885893][T11957]  ? hook_file_ioctl_common+0x140/0x440
[  476.885907][T11957]  ? __fget_files+0x215/0x3d0
[  476.885925][T11957]  ? __fget_files+0x21f/0x3d0
[  476.885942][T11957]  security_file_ioctl+0xd3/0x230
[  476.885964][T11957]  __x64_sys_ioctl+0xb7/0x210
[  476.885985][T11957]  do_syscall_64+0x115/0x870
[  476.885999][T11957]  ? clear_bhb_loop+0x40/0x90
[  476.886018][T11957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.886033][T11957] RIP: 0033:0x7f820ff9de99
[  476.886046][T11957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.886060][T11957] RSP: 002b:00007f8210e74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  476.886076][T11957] RAX: ffffffffffffffda RBX: 00007f8210225fa0 RCX: 00007f820ff9de99
[  476.886085][T11957] RDX: 0000200000000080 RSI: 00000000402c5639 RDI: 0000000000000003
[  476.886094][T11957] RBP: 00007f8210e74090 R08: 0000000000000000 R09: 0000000000000000
[  476.886103][T11957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.886111][T11957] R13: 00007f8210226038 R14: 00007f8210225fa0 R15: 00007fff79574a98
[  476.886132][T11957]  </TASK>
[  476.886154][T11957] ERROR: Out of memory at tomoyo_realpath_from_path.
[  476.973770][ T5704] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  477.136267][   T30] audit: type=1400 audit(1784478101.235:639): avc:  denied  { open } for  pid=11939 comm="syz.1.1606" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  477.163891][   T30] audit: type=1400 audit(1784478101.235:640): avc:  denied  { ioctl } for  pid=11939 comm="syz.1.1606" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  477.190713][ T5704] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  477.200906][ T5704] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  477.247604][ T5704] usb 9-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  477.327365][ T5704] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.358230][ T5704] usb 9-1: config 0 descriptor??
[  477.399572][ T5734] pwc: Failed to set LED on/off time (-71)
[  477.421794][ T5734] pwc: send_video_command error -71
[  477.433387][ T5734] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  477.447239][ T5734] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  477.465810][ T5734] usb 2-1: USB disconnect, device number 36
[  477.740104][  T805] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  477.794607][ T5704] hid_parser_main: 222 callbacks suppressed
[  477.794628][ T5704] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0
[  477.809041][ T5704] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0
[  477.816933][ T5704] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0
[  477.841115][ T5704] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0
[  477.855509][ T5704] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0
[  477.927072][  T805] usb 7-1: config 24 has too many interfaces: 158, using maximum allowed: 32
[  477.963634][  T805] usb 7-1: config 24 has an invalid descriptor of length 43, skipping remainder of the config
[  477.964622][ T5704] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0
[  478.013818][ T5704] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0
[  478.025700][  T805] usb 7-1: config 24 has 1 interface, different from the descriptor's value: 158
[  478.198634][ T5704] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0
[  478.219524][ T5704] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0
[  478.235688][ T5704] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0
[  478.237459][  T805] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40
[  478.248970][ T5704] hid-multitouch 0003:0457:07DA.000D: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.8-1/input0
[  478.264581][   T30] audit: type=1400 audit(1784478102.615:641): avc:  denied  { create } for  pid=11973 comm="syz.5.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  478.338435][  T805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.376279][  T805] usb 7-1: Product: syz
[  478.400141][  T805] usb 7-1: Manufacturer: syz
[  478.417270][  T805] usb 7-1: SerialNumber: syz
[  478.542466][T11974] netlink: 'syz.8.1573': attribute type 10 has an invalid length.
[  478.553514][T11974] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1573'.
[  478.570548][T11974] team0: Device geneve1 is up. Set it down before adding it as a team port
[  478.631729][T11974] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  478.680338][  T805] usb 7-1: 0:1 : does not exist
[  478.687063][  T805] usb 7-1: unit 2: unexpected type 0x03
[  478.694077][T11986] syzkaller0: entered promiscuous mode
[  478.699756][  T805] usb 7-1: unit 80 not found!
[  478.705341][T11986] syzkaller0: entered allmulticast mode
[  478.711364][  T805] usb 7-1: unit 142 not found!
[  478.789797][  T805] usb 7-1: USB disconnect, device number 10
[  478.816125][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:24.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  479.172829][T11325] usb 9-1: USB disconnect, device number 2
[  479.274418][  T805] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  479.587133][T12002] siw: device registration error -23
[  480.050042][  T805] usb 8-1: Using ep0 maxpacket: 8
[  480.083709][  T805] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  480.091871][  T805] usb 8-1: config 0 has no interface number 0
[  480.097977][  T805] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  480.108890][  T805] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  480.118079][  T805] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.135021][  T805] usb 8-1: config 0 descriptor??
[  480.159213][  T805] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  480.477410][T12015] FAULT_INJECTION: forcing a failure.
[  480.477410][T12015] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  480.499762][T12016] FAULT_INJECTION: forcing a failure.
[  480.499762][T12016] name failslab, interval 1, probability 0, space 0, times 0
[  480.516994][T12015] CPU: 1 UID: 0 PID: 12015 Comm: syz.6.1624 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  480.517021][T12015] Tainted: [L]=SOFTLOCKUP
[  480.517027][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  480.517037][T12015] Call Trace:
[  480.517043][T12015]  <TASK>
[  480.517050][T12015]  dump_stack_lvl+0x100/0x190
[  480.517076][T12015]  should_fail_ex.cold+0x5/0xa
[  480.517101][T12015]  _copy_from_user+0x2e/0xd0
[  480.517125][T12015]  copy_msghdr_from_user+0x9f/0x4c0
[  480.517150][T12015]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  480.517186][T12015]  ___sys_sendmsg+0x106/0x1e0
[  480.517213][T12015]  ? __pfx____sys_sendmsg+0x10/0x10
[  480.517235][T12015]  ? __lock_acquire+0x49f/0x1a40
[  480.517255][T12015]  ? get_pid_task+0x106/0x250
[  480.517292][T12015]  __sys_sendmsg+0x160/0x210
[  480.517304][T12015]  ? __pfx___sys_sendmsg+0x10/0x10
[  480.517322][T12015]  do_syscall_64+0x115/0x870
[  480.517332][T12015]  ? clear_bhb_loop+0x40/0x90
[  480.517345][T12015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.517355][T12015] RIP: 0033:0x7f820ff9de99
[  480.517365][T12015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  480.517375][T12015] RSP: 002b:00007f8210e74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  480.517386][T12015] RAX: ffffffffffffffda RBX: 00007f8210225fa0 RCX: 00007f820ff9de99
[  480.517393][T12015] RDX: 00000000200040c4 RSI: 0000200000000180 RDI: 0000000000000003
[  480.517399][T12015] RBP: 00007f8210e74090 R08: 0000000000000000 R09: 0000000000000000
[  480.517405][T12015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.517411][T12015] R13: 00007f8210226038 R14: 00007f8210225fa0 R15: 00007fff79574a98
[  480.517425][T12015]  </TASK>
[  480.697161][T12016] CPU: 1 UID: 0 PID: 12016 Comm: syz.5.1625 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  480.697187][T12016] Tainted: [L]=SOFTLOCKUP
[  480.697192][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  480.697198][T12016] Call Trace:
[  480.697202][T12016]  <TASK>
[  480.697206][T12016]  dump_stack_lvl+0x100/0x190
[  480.697223][T12016]  should_fail_ex.cold+0x5/0xa
[  480.697236][T12016]  should_failslab+0xc2/0x120
[  480.697249][T12016]  __kmalloc_noprof+0xfc/0x820
[  480.697260][T12016]  ? rcu_is_watching+0x12/0xc0
[  480.697275][T12016]  ? tomoyo_realpath_from_path+0xb6/0x690
[  480.697294][T12016]  tomoyo_realpath_from_path+0xb6/0x690
[  480.697313][T12016]  tomoyo_path_number_perm+0x23c/0x580
[  480.697326][T12016]  ? tomoyo_path_number_perm+0x22e/0x580
[  480.697341][T12016]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  480.697367][T12016]  ? find_held_lock+0x2b/0x80
[  480.697382][T12016]  ? __fget_files+0x215/0x3d0
[  480.697391][T12016]  ? hook_file_ioctl_common+0x140/0x440
[  480.697402][T12016]  ? __fget_files+0x215/0x3d0
[  480.697413][T12016]  ? __fget_files+0x21f/0x3d0
[  480.697424][T12016]  security_file_ioctl+0xd3/0x230
[  480.697440][T12016]  __x64_sys_ioctl+0xb7/0x210
[  480.697459][T12016]  do_syscall_64+0x115/0x870
[  480.697469][T12016]  ? clear_bhb_loop+0x40/0x90
[  480.697482][T12016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.697492][T12016] RIP: 0033:0x7f4f4819de99
[  480.697502][T12016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  480.697517][T12016] RSP: 002b:00007f4f490ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  480.697528][T12016] RAX: ffffffffffffffda RBX: 00007f4f48425fa0 RCX: 00007f4f4819de99
[  480.697534][T12016] RDX: 0000200000000240 RSI: 0000000040946400 RDI: 0000000000000003
[  480.697541][T12016] RBP: 00007f4f490ac090 R08: 0000000000000000 R09: 0000000000000000
[  480.697547][T12016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.697553][T12016] R13: 00007f4f48426038 R14: 00007f4f48425fa0 R15: 00007ffc841dd468
[  480.697566][T12016]  </TASK>
[  480.698274][T12016] ERROR: Out of memory at tomoyo_realpath_from_path.
[  481.057227][T12025] syzkaller0: entered promiscuous mode
[  481.083967][T12025] syzkaller0: entered allmulticast mode
[  481.153519][T12028] comedi comedi3: das16m1: I/O port conflict (0x500,8)
[  481.212576][T12032] FAULT_INJECTION: forcing a failure.
[  481.212576][T12032] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.232417][T12030] FAULT_INJECTION: forcing a failure.
[  481.232417][T12030] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.245606][T12032] CPU: 0 UID: 0 PID: 12032 Comm: syz.5.1631 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  481.245630][T12032] Tainted: [L]=SOFTLOCKUP
[  481.245635][T12032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  481.245645][T12032] Call Trace:
[  481.245650][T12032]  <TASK>
[  481.245656][T12032]  dump_stack_lvl+0x100/0x190
[  481.245676][T12032]  should_fail_ex.cold+0x5/0xa
[  481.245689][T12032]  _copy_from_user+0x2e/0xd0
[  481.245703][T12032]  copy_msghdr_from_user+0x9f/0x4c0
[  481.245719][T12032]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  481.245752][T12032]  ___sys_sendmsg+0x106/0x1e0
[  481.245776][T12032]  ? __pfx____sys_sendmsg+0x10/0x10
[  481.245796][T12032]  ? __lock_acquire+0x49f/0x1a40
[  481.245813][T12032]  ? get_pid_task+0x106/0x250
[  481.245842][T12032]  __sys_sendmsg+0x160/0x210
[  481.245853][T12032]  ? __pfx___sys_sendmsg+0x10/0x10
[  481.245873][T12032]  do_syscall_64+0x115/0x870
[  481.245889][T12032]  ? clear_bhb_loop+0x40/0x90
[  481.245909][T12032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.245925][T12032] RIP: 0033:0x7f4f4819de99
[  481.245939][T12032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.245953][T12032] RSP: 002b:00007f4f490ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  481.245964][T12032] RAX: ffffffffffffffda RBX: 00007f4f48425fa0 RCX: 00007f4f4819de99
[  481.245971][T12032] RDX: 0000000000000000 RSI: 0000200000002580 RDI: 0000000000000003
[  481.245977][T12032] RBP: 00007f4f490ac090 R08: 0000000000000000 R09: 0000000000000000
[  481.245983][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  481.245989][T12032] R13: 00007f4f48426038 R14: 00007f4f48425fa0 R15: 00007ffc841dd468
[  481.246002][T12032]  </TASK>
[  481.432158][T12030] CPU: 1 UID: 0 PID: 12030 Comm: syz.6.1630 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  481.432185][T12030] Tainted: [L]=SOFTLOCKUP
[  481.432191][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  481.432200][T12030] Call Trace:
[  481.432206][T12030]  <TASK>
[  481.432212][T12030]  dump_stack_lvl+0x100/0x190
[  481.432240][T12030]  should_fail_ex.cold+0x5/0xa
[  481.432262][T12030]  _copy_from_user+0x2e/0xd0
[  481.432285][T12030]  copy_msghdr_from_user+0x9f/0x4c0
[  481.432312][T12030]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  481.432349][T12030]  ___sys_sendmsg+0x106/0x1e0
[  481.432376][T12030]  ? __pfx____sys_sendmsg+0x10/0x10
[  481.432400][T12030]  ? __lock_acquire+0x49f/0x1a40
[  481.432421][T12030]  ? get_pid_task+0x106/0x250
[  481.432473][T12030]  __sys_sendmsg+0x160/0x210
[  481.432493][T12030]  ? __pfx___sys_sendmsg+0x10/0x10
[  481.432525][T12030]  do_syscall_64+0x115/0x870
[  481.432542][T12030]  ? clear_bhb_loop+0x40/0x90
[  481.432564][T12030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.432582][T12030] RIP: 0033:0x7f820ff9de99
[  481.432597][T12030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.432614][T12030] RSP: 002b:00007f8210e74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  481.432631][T12030] RAX: ffffffffffffffda RBX: 00007f8210225fa0 RCX: 00007f820ff9de99
[  481.432643][T12030] RDX: 0000000024048084 RSI: 0000200000000240 RDI: 0000000000000003
[  481.432653][T12030] RBP: 00007f8210e74090 R08: 0000000000000000 R09: 0000000000000000
[  481.432664][T12030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  481.432674][T12030] R13: 00007f8210226038 R14: 00007f8210225fa0 R15: 00007fff79574a98
[  481.432697][T12030]  </TASK>
[  481.927240][T12040] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1634'.
[  481.940819][T12040] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.948727][T12040] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.970870][T12040] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1634'.
[  482.480221][T12042] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1632'.
[  482.491441][T12042] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.498972][T12042] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.693244][T12042] FAULT_INJECTION: forcing a failure.
[  482.693244][T12042] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  482.706337][T12042] CPU: 0 UID: 0 PID: 12042 Comm: syz.5.1632 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  482.706365][T12042] Tainted: [L]=SOFTLOCKUP
[  482.706371][T12042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  482.706382][T12042] Call Trace:
[  482.706388][T12042]  <TASK>
[  482.706394][T12042]  dump_stack_lvl+0x100/0x190
[  482.706421][T12042]  should_fail_ex.cold+0x5/0xa
[  482.706443][T12042]  _copy_from_user+0x2e/0xd0
[  482.706466][T12042]  copy_msghdr_from_user+0x9f/0x4c0
[  482.706494][T12042]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  482.706535][T12042]  ___sys_sendmsg+0x106/0x1e0
[  482.706562][T12042]  ? __pfx____sys_sendmsg+0x10/0x10
[  482.706584][T12042]  ? __lock_acquire+0x49f/0x1a40
[  482.706605][T12042]  ? get_pid_task+0x106/0x250
[  482.706658][T12042]  __sys_sendmsg+0x160/0x210
[  482.706678][T12042]  ? __pfx___sys_sendmsg+0x10/0x10
[  482.706710][T12042]  do_syscall_64+0x115/0x870
[  482.706727][T12042]  ? clear_bhb_loop+0x40/0x90
[  482.706749][T12042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.706767][T12042] RIP: 0033:0x7f4f4819de99
[  482.706782][T12042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  482.706799][T12042] RSP: 002b:00007f4f4906a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  482.706816][T12042] RAX: ffffffffffffffda RBX: 00007f4f48426180 RCX: 00007f4f4819de99
[  482.706828][T12042] RDX: 000000000c048094 RSI: 0000200000000280 RDI: 0000000000000004
[  482.706838][T12042] RBP: 00007f4f4906a090 R08: 0000000000000000 R09: 0000000000000000
[  482.706848][T12042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  482.706857][T12042] R13: 00007f4f48426218 R14: 00007f4f48426180 R15: 00007ffc841dd468
[  482.706881][T12042]  </TASK>
[  482.989870][ T5851] block nbd0: Possible stuck request ffff8880281063c0: control (read@0,4096B). Runtime 180 seconds
[  483.197658][T12045] siw: device registration error -23
[  483.362749][T11215] usb 8-1: USB disconnect, device number 3
[  483.950419][T12053] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1636'.
[  484.060373][T12051] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1636'.
[  484.333763][T12060] FAULT_INJECTION: forcing a failure.
[  484.333763][T12060] name failslab, interval 1, probability 0, space 0, times 0
[  484.386083][T12060] CPU: 1 UID: 0 PID: 12060 Comm: syz.5.1639 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  484.386110][T12060] Tainted: [L]=SOFTLOCKUP
[  484.386115][T12060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  484.386124][T12060] Call Trace:
[  484.386129][T12060]  <TASK>
[  484.386135][T12060]  dump_stack_lvl+0x100/0x190
[  484.386162][T12060]  should_fail_ex.cold+0x5/0xa
[  484.386183][T12060]  should_failslab+0xc2/0x120
[  484.386203][T12060]  __kmalloc_noprof+0xfc/0x820
[  484.386219][T12060]  ? rcu_is_watching+0x12/0xc0
[  484.386242][T12060]  ? tomoyo_realpath_from_path+0xb6/0x690
[  484.386273][T12060]  tomoyo_realpath_from_path+0xb6/0x690
[  484.386302][T12060]  tomoyo_path_number_perm+0x23c/0x580
[  484.386321][T12060]  ? tomoyo_path_number_perm+0x22e/0x580
[  484.386344][T12060]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  484.386387][T12060]  ? find_held_lock+0x2b/0x80
[  484.386410][T12060]  ? __fget_files+0x215/0x3d0
[  484.386424][T12060]  ? hook_file_ioctl_common+0x140/0x440
[  484.386440][T12060]  ? __fget_files+0x215/0x3d0
[  484.386458][T12060]  ? __fget_files+0x21f/0x3d0
[  484.386477][T12060]  security_file_ioctl+0xd3/0x230
[  484.386502][T12060]  __x64_sys_ioctl+0xb7/0x210
[  484.386526][T12060]  do_syscall_64+0x115/0x870
[  484.386542][T12060]  ? clear_bhb_loop+0x40/0x90
[  484.386563][T12060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.386580][T12060] RIP: 0033:0x7f4f4819de99
[  484.386594][T12060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  484.386608][T12060] RSP: 002b:00007f4f490ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  484.386624][T12060] RAX: ffffffffffffffda RBX: 00007f4f48425fa0 RCX: 00007f4f4819de99
[  484.386635][T12060] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 0000000000000003
[  484.386646][T12060] RBP: 00007f4f490ac090 R08: 0000000000000000 R09: 0000000000000000
[  484.386656][T12060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  484.386666][T12060] R13: 00007f4f48426038 R14: 00007f4f48425fa0 R15: 00007ffc841dd468
[  484.386688][T12060]  </TASK>
[  484.386699][T12057] kAFS: No cell specified
[  484.386746][T12060] ERROR: Out of memory at tomoyo_realpath_from_path.
[  484.712589][T12057] netlink: 620 bytes leftover after parsing attributes in process `syz.8.1638'.
[  484.775775][T12057] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  484.873045][T11325] kernel read not supported for file /null (pid: 11325 comm: kworker/1:3)
[  485.054404][T12073] syzkaller0: entered promiscuous mode
[  485.082889][T12073] syzkaller0: entered allmulticast mode
[  485.224805][T12080] FAULT_INJECTION: forcing a failure.
[  485.224805][T12080] name failslab, interval 1, probability 0, space 0, times 0
[  485.280887][T12080] CPU: 1 UID: 0 PID: 12080 Comm: syz.5.1644 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  485.280914][T12080] Tainted: [L]=SOFTLOCKUP
[  485.280919][T12080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  485.280929][T12080] Call Trace:
[  485.280935][T12080]  <TASK>
[  485.280942][T12080]  dump_stack_lvl+0x100/0x190
[  485.280967][T12080]  should_fail_ex.cold+0x5/0xa
[  485.280988][T12080]  should_failslab+0xc2/0x120
[  485.281010][T12080]  __kmalloc_noprof+0xfc/0x820
[  485.281026][T12080]  ? rcu_is_watching+0x12/0xc0
[  485.281050][T12080]  ? tomoyo_realpath_from_path+0xb6/0x690
[  485.281083][T12080]  tomoyo_realpath_from_path+0xb6/0x690
[  485.281115][T12080]  tomoyo_path_number_perm+0x23c/0x580
[  485.281136][T12080]  ? tomoyo_path_number_perm+0x22e/0x580
[  485.281159][T12080]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  485.281205][T12080]  ? find_held_lock+0x2b/0x80
[  485.281228][T12080]  ? __fget_files+0x215/0x3d0
[  485.281242][T12080]  ? hook_file_ioctl_common+0x140/0x440
[  485.281258][T12080]  ? __fget_files+0x215/0x3d0
[  485.281278][T12080]  ? __fget_files+0x21f/0x3d0
[  485.281297][T12080]  security_file_ioctl+0xd3/0x230
[  485.281322][T12080]  __x64_sys_ioctl+0xb7/0x210
[  485.281347][T12080]  do_syscall_64+0x115/0x870
[  485.281363][T12080]  ? clear_bhb_loop+0x40/0x90
[  485.281383][T12080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.281401][T12080] RIP: 0033:0x7f4f4819de99
[  485.281416][T12080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  485.281433][T12080] RSP: 002b:00007f4f4908b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  485.281457][T12080] RAX: ffffffffffffffda RBX: 00007f4f48426090 RCX: 00007f4f4819de99
[  485.281468][T12080] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 0000000000000003
[  485.281478][T12080] RBP: 00007f4f4908b090 R08: 0000000000000000 R09: 0000000000000000
[  485.281487][T12080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  485.281497][T12080] R13: 00007f4f48426128 R14: 00007f4f48426090 R15: 00007ffc841dd468
[  485.281522][T12080]  </TASK>
[  485.281546][T12080] ERROR: Out of memory at tomoyo_realpath_from_path.
[  485.440090][ T5704] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  485.639533][   T30] audit: type=1326 audit(1784478109.995:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3219de99 code=0x7ffc0000
[  485.706205][T12083] netlink: 'syz.1.1647': attribute type 1 has an invalid length.
[  485.714299][T12083] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1647'.
[  485.782872][   T30] audit: type=1326 audit(1784478110.035:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3219de99 code=0x7ffc0000
[  485.819289][ T5704] usb 7-1: device descriptor read/64, error -71
[  486.080570][ T5704] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  486.104958][   T30] audit: type=1326 audit(1784478110.035:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3219de99 code=0x7ffc0000
[  486.207528][T12087] siw: device registration error -23
[  486.261459][   T30] audit: type=1326 audit(1784478110.035:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3219de99 code=0x7ffc0000
[  486.289106][ T5704] usb 7-1: device descriptor read/64, error -71
[  486.400838][ T5704] usb usb7-port1: attempt power cycle
[  486.735515][   T30] audit: type=1326 audit(1784478110.035:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3219de99 code=0x7ffc0000
[  486.823206][   T30] audit: type=1326 audit(1784478110.035:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fef3219de99 code=0x7ffc0000
[  486.921503][   T30] audit: type=1326 audit(1784478110.035:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3219de99 code=0x7ffc0000
[  487.060418][ T5704] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  487.081461][ T5704] usb 7-1: device descriptor read/8, error -71
[  487.346934][   T30] audit: type=1326 audit(1784478110.055:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3219de99 code=0x7ffc0000
[  487.390160][ T5704] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  487.421437][ T5704] usb 7-1: device descriptor read/8, error -71
[  487.544806][   T30] audit: type=1326 audit(1784478110.055:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3219de99 code=0x7ffc0000
[  487.611071][ T5704] usb usb7-port1: unable to enumerate USB device
[  488.149117][   T30] audit: type=1326 audit(1784478110.055:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fef3219de99 code=0x7ffc0000
[  488.844064][T12116] FAULT_INJECTION: forcing a failure.
[  488.844064][T12116] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  488.897916][T12116] CPU: 0 UID: 0 PID: 12116 Comm: syz.1.1656 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  488.897935][T12116] Tainted: [L]=SOFTLOCKUP
[  488.897940][T12116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  488.897946][T12116] Call Trace:
[  488.897949][T12116]  <TASK>
[  488.897953][T12116]  dump_stack_lvl+0x100/0x190
[  488.897969][T12116]  should_fail_ex.cold+0x5/0xa
[  488.897983][T12116]  _copy_to_user+0x32/0xd0
[  488.897997][T12116]  simple_read_from_buffer+0xcb/0x170
[  488.898015][T12116]  proc_fail_nth_read+0x1af/0x230
[  488.898031][T12116]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  488.898047][T12116]  ? rw_verify_area+0xce/0x6d0
[  488.898060][T12116]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  488.898074][T12116]  vfs_read+0x1e4/0xb40
[  488.898091][T12116]  ? __pfx_vfs_read+0x10/0x10
[  488.898105][T12116]  ? __fget_files+0x215/0x3d0
[  488.898118][T12116]  ? __fget_files+0x21f/0x3d0
[  488.898131][T12116]  ksys_read+0x12a/0x250
[  488.898145][T12116]  ? __pfx_ksys_read+0x10/0x10
[  488.898164][T12116]  do_syscall_64+0x115/0x870
[  488.898174][T12116]  ? clear_bhb_loop+0x40/0x90
[  488.898187][T12116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.898198][T12116] RIP: 0033:0x7fef3215e6ce
[  488.898207][T12116] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  488.898217][T12116] RSP: 002b:00007fef303f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  488.898227][T12116] RAX: ffffffffffffffda RBX: 00007fef303f66c0 RCX: 00007fef3215e6ce
[  488.898234][T12116] RDX: 000000000000000f RSI: 00007fef303f60a0 RDI: 0000000000000004
[  488.898240][T12116] RBP: 00007fef303f6090 R08: 0000000000000000 R09: 0000000000000000
[  488.898246][T12116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  488.898252][T12116] R13: 00007fef32426038 R14: 00007fef32425fa0 R15: 00007fff0aa193a8
[  488.898265][T12116]  </TASK>
[  489.377494][T12122] syzkaller0: entered promiscuous mode
[  489.395422][T12122] syzkaller0: entered allmulticast mode
[  489.674878][T12124] siw: device registration error -23
[  490.901959][ T5704] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  490.926694][T12144] xt_NFQUEUE: number of total queues is 0
[  491.152136][ T5704] usb 8-1: device descriptor read/64, error -71
[  491.239398][T12149] gretap1: entered promiscuous mode
[  491.421188][ T5704] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  491.460148][  T188] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  491.914403][ T5704] usb 8-1: device descriptor read/64, error -71
[  491.964138][  T188] usb 7-1: config 0 has no interfaces?
[  491.978555][  T188] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  492.039246][ T5704] usb usb8-port1: attempt power cycle
[  492.084048][  T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.270569][  T188] usb 7-1: config 0 descriptor??
[  492.445683][T12166] syzkaller0: entered promiscuous mode
[  492.453326][T12166] syzkaller0: entered allmulticast mode
[  492.538917][  T188] usb 7-1: USB disconnect, device number 15
[  492.560365][ T5704] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  492.592097][ T5704] usb 8-1: device descriptor read/8, error -71
[  493.270107][ T5704] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  493.293182][ T5704] usb 8-1: device descriptor read/8, error -71
[  493.410212][ T5704] usb usb8-port1: unable to enumerate USB device
[  493.511869][T11324] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  493.650238][T11324] usb 6-1: device descriptor read/64, error -71
[  493.761014][T12188] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1676'.
[  493.785961][T12191] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1678'.
[  494.074499][T11324] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  494.083192][  T188] IPVS: starting estimator thread 0...
[  494.096045][T12189] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12187] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12189]
[  494.182960][T12193] IPVS: using max 42 ests per chain, 100800 per kthread
[  494.220080][T11324] usb 6-1: device descriptor read/64, error -71
[  494.340406][T11324] usb usb6-port1: attempt power cycle
[  494.460298][T12201] syzkaller0: entered promiscuous mode
[  494.478433][T12201] syzkaller0: entered allmulticast mode
[  494.509441][   T30] kauditd_printk_skb: 64 callbacks suppressed
[  494.509457][   T30] audit: type=1400 audit(1784478118.855:716): avc:  denied  { bind } for  pid=12200 comm="syz.8.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  494.710276][T11324] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  494.740520][T11324] usb 6-1: device descriptor read/8, error -71
[  494.858880][T12211] siw: device registration error -23
[  494.914147][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1683'.
[  494.992535][T12215] atomic_op ffff888027699998 conn xmit_atomic 0000000000000000
[  495.014633][T11324] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  495.146957][T11324] usb 6-1: device descriptor read/8, error -71
[  495.260169][T11325] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  495.645893][T11324] usb usb6-port1: unable to enumerate USB device
[  495.830059][T11325] usb 7-1: Using ep0 maxpacket: 32
[  495.886393][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  495.906222][T11325] usb 7-1: unable to get BOS descriptor or descriptor too short
[  495.927599][T11325] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  495.944828][T11325] usb 7-1: config 1 has an invalid interface descriptor of length 5, skipping
[  495.970935][T11325] usb 7-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config
[  495.990092][T11325] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  496.010650][T11325] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  496.047033][T11325] usb 7-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40
[  496.068894][T11325] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.098317][T11325] usb 7-1: Product: ꦪ㏋蔇ꩯ嵰׶掴ય깳졭뼵绘陟룏ズ썩凋禱䠖ꊬ瞣檭ᒣ脠╰⟚䲝꛲표큷쮩Კ路ž싟ꔈ큸
[  496.135279][T11325] usb 7-1: Manufacturer: ⠊
[  496.173328][T11325] gspca_main: STV06xx-2.14.0 probing 046d:08f6
[  496.190813][T11325] gspca_stv06xx: st6422 sensor detected
[  496.511367][ T5809] block nbd2: Possible stuck request ffff8880281fbb40: control (read@0,1024B). Runtime 150 seconds
[  496.934696][T12225] 9p: Could not find request transport: rdma.
[  497.024820][T11325] STV06xx 7-1:1.0: probe with driver STV06xx failed with error -71
[  497.130215][ T5734] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  497.148227][T11325] usb 7-1: USB disconnect, device number 16
[  497.300169][ T5734] usb 6-1: device descriptor read/64, error -71
[  498.080057][ T5734] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  498.160152][   T24] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  498.419254][ T5734] usb 6-1: device descriptor read/64, error -71
[  499.138674][T12245] syzkaller0: entered promiscuous mode
[  499.150680][ T5734] usb usb6-port1: attempt power cycle
[  499.156066][T12245] syzkaller0: entered allmulticast mode
[  499.191630][   T24] usb 8-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  499.214144][   T24] usb 8-1: config 0 interface 0 has no altsetting 0
[  499.222695][   T24] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  499.244350][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.261684][   T24] usb 8-1: config 0 descriptor??
[  499.358351][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1695'.
[  499.520392][ T5734] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  499.660579][ T5734] usb 6-1: device descriptor read/8, error -71
[  499.709940][   T24] hid_parser_main: 24 callbacks suppressed
[  499.709954][   T24] koneplus 0003:1E7D:2E22.000E: unknown main item tag 0x0
[  499.728269][   T24] koneplus 0003:1E7D:2E22.000E: unknown main item tag 0x0
[  499.738596][   T24] koneplus 0003:1E7D:2E22.000E: collection stack underflow
[  499.746670][   T24] koneplus 0003:1E7D:2E22.000E: item 0 2 0 12 parsing failed
[  499.760566][   T24] koneplus 0003:1E7D:2E22.000E: parse failed
[  499.767269][   T24] koneplus 0003:1E7D:2E22.000E: probe with driver koneplus failed with error -22
[  499.787661][T12258] siw: device registration error -23
[  499.940269][ T5734] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  500.170157][ T5734] usb 6-1: device not accepting address 15, error -71
[  500.641621][ T5734] usb usb6-port1: unable to enumerate USB device
[  500.941852][T12238] syz.7.1690 (12238) used greatest stack depth: 17880 bytes left
[  500.951337][ T5734] usb 8-1: USB disconnect, device number 8
[  501.432587][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1704'.
[  502.320070][T12283] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0)
[  502.484785][   T30] audit: type=1800 audit(1784478126.785:717): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1698" name="bus" dev="ramfs" ino=36941 res=0 errno=0
[  502.653182][T12290] syzkaller0: entered promiscuous mode
[  502.661276][T12288] siw: device registration error -23
[  502.670696][T12290] syzkaller0: entered allmulticast mode
[  502.804381][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1708'.
[  503.380061][T11324] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  503.540083][  T188] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  503.949980][T11324] usb 2-1: config 0 has no interfaces?
[  504.281817][T11324] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  504.295478][T11324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.307931][T11324] usb 2-1: config 0 descriptor??
[  504.441576][  T188] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  504.460618][  T188] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  504.588382][  T188] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  504.599937][   T30] audit: type=1400 audit(1784478128.945:718): avc:  denied  { ioctl } for  pid=12301 comm="syz.7.1710" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  504.630054][  T188] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  504.652622][  T188] usb 8-1: Manufacturer: syz
[  504.661141][  T188] usb 8-1: config 0 descriptor??
[  504.878012][   T30] audit: type=1400 audit(1784478129.235:719): avc:  denied  { read write } for  pid=11768 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  504.923771][ T5734] usb 2-1: USB disconnect, device number 37
[  504.953801][   T30] audit: type=1400 audit(1784478129.235:720): avc:  denied  { open } for  pid=11768 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  504.981220][   T30] audit: type=1400 audit(1784478129.235:721): avc:  denied  { ioctl } for  pid=11768 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  505.019733][   T30] audit: type=1400 audit(1784478129.365:722): avc:  denied  { read write } for  pid=12309 comm="syz.5.1713" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  505.048119][   T30] audit: type=1400 audit(1784478129.365:723): avc:  denied  { open } for  pid=12309 comm="syz.5.1713" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  505.077355][   T30] audit: type=1400 audit(1784478129.365:724): avc:  denied  { mounton } for  pid=12309 comm="syz.5.1713" path="/61/file0" dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  505.112757][   T30] audit: type=1400 audit(1784478129.365:725): avc:  denied  { mount } for  pid=12309 comm="syz.5.1713" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  505.142146][   T30] audit: type=1400 audit(1784478129.365:726): avc:  denied  { module_request } for  pid=12309 comm="syz.5.1713" kmod="fs-<NULL>" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  505.380122][   T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  505.560115][   T24] usb 6-1: Using ep0 maxpacket: 32
[  505.572396][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  505.595843][   T24] usb 6-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40
[  505.618608][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.643807][   T24] usb 6-1: Product: syz
[  505.648825][   T24] usb 6-1: Manufacturer: syz
[  505.656167][   T24] usb 6-1: SerialNumber: syz
[  505.741396][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1718'.
[  506.150788][   T24] usb 6-1: USB disconnect, device number 16
[  507.528348][  T188] usb 8-1: USB disconnect, device number 9
[  507.568113][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  507.568130][   T30] audit: type=1400 audit(1784478131.925:767): avc:  denied  { create } for  pid=12336 comm="syz.5.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  507.832340][   T30] audit: type=1400 audit(1784478131.925:768): avc:  denied  { create } for  pid=12337 comm="syz.1.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  507.946000][   T30] audit: type=1400 audit(1784478131.925:769): avc:  denied  { bind } for  pid=12337 comm="syz.1.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  508.030295][T12338] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  508.039859][T12338] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  508.080326][T11703] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.100044][T12344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1721'.
[  508.126614][   T30] audit: type=1400 audit(1784478131.925:770): avc:  denied  { listen } for  pid=12337 comm="syz.1.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  508.147026][T11703] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.159584][T11703] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.168191][T11703] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.178114][   T30] audit: type=1400 audit(1784478131.945:771): avc:  denied  { connect } for  pid=12337 comm="syz.1.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  508.199676][   T30] audit: type=1400 audit(1784478131.945:772): avc:  denied  { create } for  pid=12337 comm="syz.1.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  508.220433][   T30] audit: type=1400 audit(1784478131.945:773): avc:  denied  { write } for  pid=12337 comm="syz.1.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  508.240759][   T30] audit: type=1400 audit(1784478131.945:774): avc:  denied  { accept } for  pid=12337 comm="syz.1.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  508.262191][   T30] audit: type=1400 audit(1784478131.945:775): avc:  denied  { write } for  pid=12337 comm="syz.1.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  508.282916][   T30] audit: type=1400 audit(1784478131.945:776): avc:  denied  { read } for  pid=12337 comm="syz.1.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  509.242245][T12356] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1725'.
[  509.860268][  T188] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  510.028146][  T188] usb 9-1: config 0 has no interfaces?
[  510.060448][  T188] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  510.112923][  T188] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.160677][  T188] usb 9-1: config 0 descriptor??
[  510.631891][T11324] usb 9-1: USB disconnect, device number 3
[  510.924101][T12376] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1731'.
[  511.394052][T12382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1732'.
[  512.425677][ T5704] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  512.588995][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  512.589016][   T30] audit: type=1400 audit(1784478136.945:801): avc:  denied  { create } for  pid=12393 comm="syz.7.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  512.700551][ T5704] usb 9-1: Using ep0 maxpacket: 8
[  512.874300][ T5704] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  512.908039][ T5704] usb 9-1: config 0 has no interface number 0
[  512.930503][   T30] audit: type=1400 audit(1784478137.005:802): avc:  denied  { bind } for  pid=12393 comm="syz.7.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  512.949963][ T5704] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  513.038501][ T5704] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  513.048521][   T30] audit: type=1400 audit(1784478137.005:803): avc:  denied  { setopt } for  pid=12393 comm="syz.7.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  513.071709][ T5704] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.582134][   T30] audit: type=1400 audit(1784478137.205:804): avc:  denied  { accept } for  pid=12393 comm="syz.7.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  513.606701][ T5704] usb 9-1: config 0 descriptor??
[  513.612055][T10216] block nbd0: Possible stuck request ffff8880281063c0: control (read@0,4096B). Runtime 210 seconds
[  513.639285][ T5704] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  513.661185][   T30] audit: type=1400 audit(1784478137.205:805): avc:  denied  { write } for  pid=12393 comm="syz.7.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  513.721346][   T30] audit: type=1400 audit(1784478137.225:806): avc:  denied  { read } for  pid=12393 comm="syz.7.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  513.761200][   T30] audit: type=1400 audit(1784478137.285:807): avc:  denied  { execmem } for  pid=12398 comm="syz.6.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  513.802997][   T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  513.819482][T12405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1738'.
[  513.842765][   T30] audit: type=1400 audit(1784478137.395:808): avc:  denied  { ioctl } for  pid=12393 comm="syz.7.1736" path="socket:[37133]" dev="sockfs" ino=37133 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  513.887215][   T30] audit: type=1400 audit(1784478138.245:809): avc:  denied  { write } for  pid=12386 comm="syz.8.1734" name="iowarrior0" dev="devtmpfs" ino=3424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  514.000640][ T5704] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  514.012207][   T24] usb 8-1: config 24 has too many interfaces: 158, using maximum allowed: 32
[  514.035132][   T24] usb 8-1: config 24 has an invalid descriptor of length 43, skipping remainder of the config
[  514.047573][   T24] usb 8-1: config 24 has 1 interface, different from the descriptor's value: 158
[  514.063533][   T24] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40
[  514.073403][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.082219][   T24] usb 8-1: Product: syz
[  514.086509][   T24] usb 8-1: Manufacturer: syz
[  514.091235][   T24] usb 8-1: SerialNumber: syz
[  514.160185][ T5704] usb 6-1: Using ep0 maxpacket: 8
[  514.171517][ T5704] usb 6-1: config 3 has an invalid interface number: 45 but max is 0
[  514.184385][ T5704] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  514.195384][ T5704] usb 6-1: config 3 has no interface number 0
[  514.201945][ T5704] usb 6-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  514.215499][ T5704] usb 6-1: config 3 interface 45 has no altsetting 0
[  514.227027][ T5704] usb 6-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  514.236504][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.245787][ T5704] usb 6-1: Product: syz
[  514.250338][ T5704] usb 6-1: Manufacturer: syz
[  514.255026][ T5704] usb 6-1: SerialNumber: syz
[  514.290187][ T5734] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  514.340715][   T24] usb 8-1: 0:1 : does not exist
[  514.347487][   T24] usb 8-1: unit 2: unexpected type 0x03
[  514.353299][   T24] usb 8-1: unit 80 not found!
[  514.358088][   T24] usb 8-1: unit 142 not found!
[  514.432322][   T24] usb 8-1: USB disconnect, device number 10
[  514.440078][ T5734] usb 7-1: Using ep0 maxpacket: 8
[  514.449254][ T5734] usb 7-1: config 3 has an invalid interface number: 45 but max is 0
[  514.474110][ T5734] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  514.488121][ T5734] usb 7-1: config 3 has no interface number 0
[  514.496587][ T5734] usb 7-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  514.512012][ T5734] usb 7-1: config 3 interface 45 has no altsetting 0
[  514.530723][ T5734] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  514.540580][ T5734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.548660][ T5734] usb 7-1: Product: syz
[  514.553223][ T5734] usb 7-1: Manufacturer: syz
[  514.557944][ T5734] usb 7-1: SerialNumber: syz
[  514.576163][ T5704] usb 6-1: USB disconnect, device number 17
[  514.629269][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  514.831951][ T5734] usb 7-1: USB disconnect, device number 17
[  514.847720][   T30] audit: type=1400 audit(1784478139.205:810): avc:  denied  { ioctl } for  pid=12413 comm="syz.1.1741" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37148 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  514.889769][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  515.014318][T12420] macsec1: entered promiscuous mode
[  515.019702][T12420] dummy0: entered promiscuous mode
[  515.027288][T12420] macsec1: entered allmulticast mode
[  515.037368][T12420] dummy0: entered allmulticast mode
[  515.054980][T12420] dummy0: left allmulticast mode
[  515.128542][   T24] dummy0: left promiscuous mode
[  515.444277][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1745'.
[  515.453951][T12425] netlink: 'syz.7.1745': attribute type 29 has an invalid length.
[  515.461872][ T5704] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  515.469578][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1745'.
[  515.480470][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1745'.
[  515.489337][T12425] netlink: 'syz.7.1745': attribute type 29 has an invalid length.
[  515.497332][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1745'.
[  515.622976][ T5704] usb 6-1: config 0 has no interfaces?
[  515.630759][ T5704] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  515.642010][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.675544][ T5704] usb 6-1: config 0 descriptor??
[  516.065220][ T5704] usb 9-1: USB disconnect, device number 4
[  516.347411][T11324] usb 6-1: USB disconnect, device number 18
[  518.008643][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  518.008764][   T30] audit: type=1400 audit(1784478142.365:817): avc:  denied  { mount } for  pid=12449 comm="syz.1.1752" name="/" dev="ramfs" ino=37209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  518.052044][T12445] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1751'.
[  518.280808][   T30] audit: type=1400 audit(1784478142.435:818): avc:  denied  { watch watch_reads } for  pid=12449 comm="syz.1.1752" path="/" dev="ramfs" ino=37209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  518.578766][   T30] audit: type=1326 audit(1784478142.925:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.7.1753" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65219de99 code=0x7ffc0000
[  518.660067][ T5734] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  519.236908][   T30] audit: type=1326 audit(1784478142.925:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.7.1753" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65219de99 code=0x7ffc0000
[  519.273092][   T30] audit: type=1326 audit(1784478142.925:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.7.1753" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65219de99 code=0x7ffc0000
[  519.310049][ T5734] usb 9-1: Using ep0 maxpacket: 8
[  519.319525][   T30] audit: type=1326 audit(1784478142.925:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.7.1753" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65219de99 code=0x7ffc0000
[  519.360109][   T30] audit: type=1326 audit(1784478142.925:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.7.1753" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe65215e6ce code=0x7ffc0000
[  519.387875][ T5734] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  519.402587][ T5734] usb 9-1: config 179 has 0 interfaces, different from the descriptor's value: 1
[  519.412899][ T5734] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  519.423429][ T5734] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.468783][   T30] audit: type=1326 audit(1784478142.925:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.7.1753" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65219de99 code=0x7ffc0000
[  519.534934][   T30] audit: type=1326 audit(1784478142.925:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.7.1753" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65219de99 code=0x7ffc0000
[  519.572695][   T30] audit: type=1326 audit(1784478142.925:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.7.1753" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65219de99 code=0x7ffc0000
[  519.724249][ T5734] usb 9-1: USB disconnect, device number 5
[  519.870686][ T5704] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  520.031882][ T5704] usb 7-1: Using ep0 maxpacket: 8
[  520.049207][ T5704] usb 7-1: config 3 has an invalid interface number: 45 but max is 0
[  520.072673][ T5704] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  520.094552][ T5704] usb 7-1: config 3 has no interface number 0
[  520.106134][ T5704] usb 7-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  520.129510][ T5704] usb 7-1: config 3 interface 45 has no altsetting 0
[  520.145924][ T5704] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  520.162991][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.179172][ T5704] usb 7-1: Product: syz
[  520.187924][ T5704] usb 7-1: Manufacturer: syz
[  520.199647][ T5704] usb 7-1: SerialNumber: syz
[  520.320244][ T5697] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  521.305924][ T5697] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  521.323652][ T5697] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  521.347202][ T5697] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  521.363096][ T5697] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  521.372323][ T5697] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  521.382846][ T5697] usb 6-1: Manufacturer: syz
[  521.546441][ T5697] usb 6-1: config 0 descriptor??
[  521.695373][ T5697] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  522.476314][ T5704] usb 7-1: USB disconnect, device number 18
[  523.079440][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  523.196435][   T30] kauditd_printk_skb: 175 callbacks suppressed
[  523.196452][   T30] audit: type=1400 audit(1784478147.555:1002): avc:  denied  { name_bind } for  pid=12498 comm="syz.6.1765" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  523.297388][T12508] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1767'.
[  523.327979][   T30] audit: type=1400 audit(1784478147.615:1003): avc:  denied  { create } for  pid=12498 comm="syz.6.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  523.389212][   T30] audit: type=1400 audit(1784478147.625:1004): avc:  denied  { write } for  pid=12498 comm="syz.6.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  523.432046][T12508] batadv_slave_1: entered promiscuous mode
[  523.451064][   T30] audit: type=1400 audit(1784478147.625:1005): avc:  denied  { unlink } for  pid=12498 comm="syz.6.1765" name="#18" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  523.488112][   T30] audit: type=1400 audit(1784478147.635:1006): avc:  denied  { mount } for  pid=12498 comm="syz.6.1765" name="/" dev="overlay" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  523.535639][   T30] audit: type=1400 audit(1784478147.795:1007): avc:  denied  { ioctl } for  pid=12507 comm="syz.7.1767" path="socket:[38617]" dev="sockfs" ino=38617 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  523.568100][   T30] audit: type=1400 audit(1784478147.925:1008): avc:  denied  { write } for  pid=12511 comm="syz.1.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  523.588005][ T5704] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  523.650829][T11215] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  523.698877][T12524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1769'.
[  523.762248][ T5704] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  523.771633][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.779811][ T5704] usb 7-1: Product: syz
[  523.785098][ T5704] usb 7-1: Manufacturer: syz
[  523.789855][ T5704] usb 7-1: SerialNumber: syz
[  523.800122][T11215] usb 9-1: Using ep0 maxpacket: 8
[  523.807094][ T5704] usb 7-1: config 0 descriptor??
[  523.816884][T11215] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  523.827041][T11215] usb 9-1: config 0 has no interface number 0
[  523.841076][T11215] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  523.858647][T11215] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  523.869753][T11215] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.895094][T11215] usb 9-1: config 0 descriptor??
[  523.926268][T11215] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  524.086539][T11215] usb 7-1: USB disconnect, device number 19
[  524.222050][   T30] audit: type=1400 audit(1784478148.585:1009): avc:  denied  { read } for  pid=12525 comm="syz.1.1770" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  525.164851][   T30] audit: type=1400 audit(1784478148.585:1010): avc:  denied  { open } for  pid=12525 comm="syz.1.1770" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  525.418149][   T30] audit: type=1400 audit(1784478148.605:1011): avc:  denied  { ioctl } for  pid=12525 comm="syz.1.1770" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  525.474628][ T5697] usb 6-1: USB disconnect, device number 19
[  526.532948][T12507] batadv_slave_1: left promiscuous mode
[  526.595239][ T5809] block nbd2: Possible stuck request ffff8880281fbb40: control (read@0,1024B). Runtime 180 seconds
[  526.617536][T12547] netlink: 'syz.5.1775': attribute type 1 has an invalid length.
[  526.659136][T12547] netlink: 'syz.5.1775': attribute type 3 has an invalid length.
[  526.676111][ T5697] usb 9-1: USB disconnect, device number 6
[  526.708597][T12547] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1775'.
[  527.128326][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1775'.
[  528.450474][T12577] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1780'.
[  528.621112][T11215] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  528.741646][T12583] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1781'.
[  528.821667][T11215] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  528.855611][T11215] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  529.195978][T11215] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  529.275668][T11215] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  529.298618][T11215] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  529.314208][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  529.314218][   T30] audit: type=1326 audit(1784478153.675:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.1.1783" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef3219de99 code=0x0
[  529.410752][T11215] usb 6-1: Manufacturer: syz
[  529.476508][T11215] usb 6-1: config 0 descriptor??
[  529.502791][T11215] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  529.551612][   T30] audit: type=1400 audit(1784478153.915:1017): avc:  denied  { setopt } for  pid=12579 comm="syz.1.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  531.393209][   T30] audit: type=1400 audit(1784478155.755:1018): avc:  denied  { mounton } for  pid=12607 comm="syz.7.1788" path="/42/bus" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  531.442587][T12610] siw: device registration error -23
[  531.675384][ T5734] usb 6-1: USB disconnect, device number 20
[  532.955410][   T30] audit: type=1400 audit(1784478157.305:1019): avc:  denied  { mount } for  pid=12619 comm="syz.5.1793" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  533.806802][   T30] audit: type=1400 audit(1784478157.305:1020): avc:  denied  { nlmsg_read } for  pid=12619 comm="syz.5.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  534.630062][   T30] audit: type=1400 audit(1784478158.975:1021): avc:  denied  { read write } for  pid=12635 comm="syz.8.1796" name="sg0" dev="devtmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  535.160733][T12638] program syz.8.1796 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  535.235537][   T30] audit: type=1400 audit(1784478158.975:1022): avc:  denied  { ioctl open } for  pid=12635 comm="syz.8.1796" path="/dev/sg0" dev="devtmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  535.376430][T12647] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1797'.
[  535.949291][T12662] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1804'.
[  536.005252][T12663] batadv_slave_1: entered promiscuous mode
[  536.210554][  T805] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  536.372021][  T805] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  536.393248][  T805] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  536.423094][  T805] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  536.459810][  T805] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  536.477403][  T805] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  536.504270][  T805] usb 2-1: Manufacturer: syz
[  536.526830][  T805] usb 2-1: config 0 descriptor??
[  536.556552][  T805] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  538.945660][T12660] batadv_slave_1: left promiscuous mode
[  540.162208][T11215] usb 2-1: USB disconnect, device number 38
[  541.110167][ T5734] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  541.190149][  T805] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  541.303993][ T5734] usb 2-1: config 24 has too many interfaces: 158, using maximum allowed: 32
[  541.313547][ T5734] usb 2-1: config 24 has an invalid descriptor of length 157, skipping remainder of the config
[  541.327224][ T5734] usb 2-1: config 24 has 1 interface, different from the descriptor's value: 158
[  541.344260][ T5734] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40
[  541.355278][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.368936][ T5734] usb 2-1: Product: syz
[  541.378391][ T5734] usb 2-1: Manufacturer: syz
[  541.384588][  T805] usb 9-1: config 0 has no interfaces?
[  541.391217][  T805] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  541.401186][  T805] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.409396][ T5734] usb 2-1: SerialNumber: syz
[  541.444911][  T805] usb 9-1: config 0 descriptor??
[  541.510213][   T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  541.673601][  T805] usb 9-1: USB disconnect, device number 7
[  541.780111][   T24] usb 7-1: Using ep0 maxpacket: 8
[  541.866882][   T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  541.979886][   T24] usb 7-1: config 0 has no interface number 0
[  542.049049][   T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  542.062012][ T5734] usb 2-1: 0:1 : does not exist
[  542.085899][ T5734] usb 2-1: unit 2: unexpected type 0x03
[  542.092282][   T24] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  542.103268][ T5734] usb 2-1: unit 80 not found!
[  542.108047][ T5734] usb 2-1: unit 197 not found!
[  542.114370][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.122901][ T5734] usb 2-1: unit 168 not found!
[  542.231646][   T24] usb 7-1: config 0 descriptor??
[  542.323218][   T24] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  542.425557][ T5734] usb 2-1: USB disconnect, device number 39
[  542.568194][T12735] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1820'.
[  542.702131][T12744] netlink: 'syz.1.1822': attribute type 1 has an invalid length.
[  542.827970][T12744] 8021q: adding VLAN 0 to HW filter on device bond1
[  542.879626][T12748] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  542.971038][T12744] macvlan0: entered promiscuous mode
[  543.004402][T12744] macvlan0: entered allmulticast mode
[  543.038286][T12744] bond1: entered promiscuous mode
[  543.115743][T12744] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  543.115840][   T30] audit: type=1400 audit(1784478167.475:1023): avc:  denied  { bind } for  pid=12740 comm="syz.1.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  543.212505][T12744] bond1: left promiscuous mode
[  543.340044][ T5697] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  543.561163][ T5734] usb 7-1: USB disconnect, device number 20
[  543.590056][ T5697] usb 6-1: Using ep0 maxpacket: 32
[  544.082063][ T5697] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  544.095972][ T1714] block nbd0: Possible stuck request ffff8880281063c0: control (read@0,4096B). Runtime 240 seconds
[  544.141971][ T5697] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  544.186314][ T5697] usb 6-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[  544.201815][ T5697] usb 6-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  544.225374][ T5697] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  544.235447][ T5697] usb 6-1: config 1 interface 1 has no altsetting 0
[  544.293093][ T5697] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  544.304447][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.314583][ T5697] usb 6-1: Product: syz
[  544.324777][ T5697] usb 6-1: Manufacturer: syz
[  544.334979][ T5697] usb 6-1: SerialNumber: syz
[  544.829474][   T30] audit: type=1400 audit(1784478169.185:1024): avc:  denied  { create } for  pid=12752 comm="syz.5.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  544.924844][   T30] audit: type=1400 audit(1784478169.195:1025): avc:  denied  { ioctl } for  pid=12752 comm="syz.5.1823" path="socket:[39179]" dev="sockfs" ino=39179 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  544.960452][T11324] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  544.993039][ T5697] usb 6-1: selecting invalid altsetting 0
[  545.011627][   T30] audit: type=1400 audit(1784478169.195:1026): avc:  denied  { read } for  pid=12752 comm="syz.5.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  545.360036][   T30] audit: type=1400 audit(1784478169.255:1027): avc:  denied  { write } for  pid=12752 comm="syz.5.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  545.360934][ T5697] usb 6-1: 1:1: cannot get freq (v2/v3): err -32
[  545.415684][ T5697] usb 6-1: 1:1: cannot set freq 44100 (v2/v3): err -71
[  545.415964][T11215] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  545.445983][T11324] usb 2-1: config 0 has no interfaces?
[  545.469569][T11324] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  545.561662][T11324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.567315][ T5697] usb 6-1: USB disconnect, device number 21
[  545.649451][T11324] usb 2-1: config 0 descriptor??
[  545.681976][T11215] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.713749][T11215] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  545.754437][T11215] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  545.805471][T11215] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  545.825914][T11215] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  545.861097][T11215] usb 9-1: Manufacturer: syz
[  545.871815][T11215] usb 9-1: config 0 descriptor??
[  545.901485][T11215] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  545.982556][ T5697] usb 2-1: USB disconnect, device number 40
[  546.038264][   T30] audit: type=1400 audit(1784478170.395:1028): avc:  denied  { read write } for  pid=12774 comm="syz.6.1828" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  546.145389][   T30] audit: type=1400 audit(1784478170.425:1029): avc:  denied  { open } for  pid=12774 comm="syz.6.1828" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  546.408375][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1830'.
[  546.988166][   T30] audit: type=1400 audit(1784478171.345:1030): avc:  denied  { mount } for  pid=12789 comm="syz.1.1832" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  547.094284][   T30] audit: type=1400 audit(1784478171.455:1031): avc:  denied  { unmount } for  pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  547.216529][   T30] audit: type=1400 audit(1784478171.575:1032): avc:  denied  { write } for  pid=12799 comm="syz.1.1834" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  547.553199][T12807] lo speed is unknown, defaulting to 1000
[  548.058097][T11215] usb 9-1: USB disconnect, device number 8
[  548.080828][T12808] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  548.086745][T12808] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  548.186059][T12808] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  548.192011][T12808] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  548.324885][T12817] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1836'.
[  548.911524][ T5704] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  549.194286][ T5704] usb 8-1: config 24 has too many interfaces: 158, using maximum allowed: 32
[  549.239710][ T5704] usb 8-1: config 24 has an invalid descriptor of length 157, skipping remainder of the config
[  549.278884][ T5704] usb 8-1: config 24 has 1 interface, different from the descriptor's value: 158
[  549.591060][ T5704] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40
[  549.639522][ T5704] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.639524][ T5697] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  549.639548][ T5704] usb 8-1: Product: syz
[  549.698984][ T5704] usb 8-1: Manufacturer: syz
[  549.717190][ T5704] usb 8-1: SerialNumber: syz
[  549.860227][ T5697] usb 2-1: Using ep0 maxpacket: 8
[  549.886875][ T5697] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  549.914163][ T5697] usb 2-1: config 0 has no interface number 0
[  549.937741][ T5697] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  549.989390][ T5697] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  550.023585][ T5704] usb 8-1: 0:1 : does not exist
[  550.025882][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.072902][ T5704] usb 8-1: unit 2: unexpected type 0x03
[  550.076524][ T5697] usb 2-1: config 0 descriptor??
[  550.098686][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  550.098699][   T30] audit: type=1400 audit(1784478174.455:1034): avc:  denied  { audit_write } for  pid=12828 comm="syz.8.1839" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  550.143541][ T5697] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  550.196961][ T5704] usb 8-1: unit 80 not found!
[  550.196986][ T5704] usb 8-1: unit 197 not found!
[  550.197001][ T5704] usb 8-1: unit 168 not found!
[  550.201026][   T30] audit: type=1107 audit(1784478174.495:1035): pid=12828 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ti1���[��Po�
[  550.201026][   T30] �/v,��L�9���2���MeX�7xW�Ϩ���	fXKSRU�r�j�[j�ט���\�ȩ�(,����%�����9�0��.:� �����sϨ��-I�
!>g&�"��/���\Y=L3�{!҃�2�Ԧpj���>�;���ۺ�/��ٴ����ف�]�a���'v-���<�$��%�Q���5���l���eFr�=���/�a���#
[  550.201026][   T30] ���h��0�V��Z�2�'
[  550.201189][   T30] audit: type=1400 audit(1784478174.495:1036): avc:  denied  { read } for  pid=12828 comm="syz.8.1839" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  550.211046][   T30] audit: type=1400 audit(1784478174.495:1037): avc:  denied  { open } for  pid=12828 comm="syz.8.1839" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  550.211073][   T30] audit: type=1400 audit(1784478174.495:1038): avc:  denied  { ioctl } for  pid=12828 comm="syz.8.1839" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  550.345250][   T30] audit: type=1400 audit(1784478174.705:1039): avc:  denied  { connect } for  pid=12828 comm="syz.8.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  550.424324][   T30] audit: type=1400 audit(1784478174.785:1040): avc:  denied  { getopt } for  pid=12828 comm="syz.8.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  550.478621][   T30] audit: type=1400 audit(1784478174.835:1041): avc:  denied  { map } for  pid=12828 comm="syz.8.1839" path="socket:[40058]" dev="sockfs" ino=40058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  550.512298][   T30] audit: type=1400 audit(1784478174.875:1042): avc:  denied  { read } for  pid=12828 comm="syz.8.1839" path="socket:[40058]" dev="sockfs" ino=40058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  550.601748][ T5704] usb 8-1: USB disconnect, device number 11
[  550.770258][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:24.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  550.843007][T12840] random: crng reseeded on system resumption
[  550.847267][   T30] audit: type=1400 audit(1784478175.205:1043): avc:  denied  { write } for  pid=12837 comm="syz.6.1840" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  551.360919][ T5734] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  551.393502][ T5697] usb 2-1: USB disconnect, device number 41
[  551.510658][ T5734] usb 6-1: Using ep0 maxpacket: 32
[  551.530198][  T805] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  551.544301][ T5734] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  551.562581][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.573441][ T5734] usb 6-1: Product: syz
[  551.579434][ T5734] usb 6-1: Manufacturer: syz
[  551.588478][ T5734] usb 6-1: SerialNumber: syz
[  551.603942][ T5734] usb 6-1: config 0 descriptor??
[  551.701294][  T805] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  551.716414][  T805] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  551.732065][  T805] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  551.747584][  T805] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  551.760163][  T805] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  551.783986][  T805] usb 8-1: Manufacturer: syz
[  551.804919][  T805] usb 8-1: config 0 descriptor??
[  551.828956][  T805] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  551.989351][T12867] syzkaller0: entered promiscuous mode
[  552.569839][T12867] syzkaller0: entered allmulticast mode
[  552.741908][ T5734] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  552.823735][T12878] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1853'.
[  553.038818][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1851'.
[  553.059261][T12881] batadv_slave_1: entered promiscuous mode
[  553.143190][ T5734] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71
[  553.166668][ T5734] usb 6-1: USB disconnect, device number 22
[  553.263201][T12876] batadv_slave_1: left promiscuous mode
[  553.354000][T12894] FAULT_INJECTION: forcing a failure.
[  553.354000][T12894] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  553.381058][T12894] CPU: 1 UID: 0 PID: 12894 Comm: syz.8.1856 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  553.381086][T12894] Tainted: [L]=SOFTLOCKUP
[  553.381092][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  553.381102][T12894] Call Trace:
[  553.381107][T12894]  <TASK>
[  553.381115][T12894]  dump_stack_lvl+0x100/0x190
[  553.381144][T12894]  should_fail_ex.cold+0x5/0xa
[  553.381165][T12894]  _copy_from_user+0x2e/0xd0
[  553.381188][T12894]  __x64_sys_epoll_ctl+0x131/0x1e0
[  553.381210][T12894]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  553.381236][T12894]  do_syscall_64+0x115/0x870
[  553.381249][T12894]  ? clear_bhb_loop+0x40/0x90
[  553.381262][T12894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.381272][T12894] RIP: 0033:0x7f9074d9de99
[  553.381281][T12894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  553.381291][T12894] RSP: 002b:00007f9075ced028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  553.381302][T12894] RAX: ffffffffffffffda RBX: 00007f9075025fa0 RCX: 00007f9074d9de99
[  553.381309][T12894] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004
[  553.381315][T12894] RBP: 00007f9075ced090 R08: 0000000000000000 R09: 0000000000000000
[  553.381321][T12894] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  553.381327][T12894] R13: 00007f9075026038 R14: 00007f9075025fa0 R15: 00007ffe49692918
[  553.381340][T12894]  </TASK>
[  553.737329][T12900] Bluetooth: MGMT ver 1.23
[  555.219391][ T5697] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  555.396806][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  555.396839][   T30] audit: type=1400 audit(1784478179.715:1049): avc:  denied  { read } for  pid=12916 comm="syz.5.1861" name="usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  555.477867][ T5697] usb 2-1: Using ep0 maxpacket: 8
[  555.754454][ T5697] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  555.768960][ T5697] usb 2-1: config 0 has no interface number 0
[  555.780061][   T24] usb 8-1: USB disconnect, device number 12
[  555.793617][ T5697] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  555.813626][   T30] audit: type=1400 audit(1784478179.715:1050): avc:  denied  { open } for  pid=12916 comm="syz.5.1861" path="/dev/usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  555.847262][ T5697] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  555.876695][T12919] libceph: resolve '.�R�H�e'�ˠ/����1�C��
�~�1W����e�xEA���eSb{~R�' (ret=-3): failed
[  555.899585][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.975913][   T30] audit: type=1400 audit(1784478179.735:1051): avc:  denied  { ioctl } for  pid=12916 comm="syz.5.1861" path="/dev/usbmon6" dev="devtmpfs" ino=735 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  556.005877][ T5697] usb 2-1: config 0 descriptor??
[  556.051234][   T30] audit: type=1400 audit(1784478179.825:1052): avc:  denied  { watch } for  pid=12916 comm="syz.5.1861" path="/88/file5" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  556.078321][ T5697] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  556.152402][   T30] audit: type=1400 audit(1784478179.825:1053): avc:  denied  { watch_sb watch_reads } for  pid=12916 comm="syz.5.1861" path="/88/file5" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  556.188284][   T30] audit: type=1400 audit(1784478179.825:1054): avc:  denied  { watch_mount } for  pid=12916 comm="syz.5.1861" path="/88/file5" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  556.213237][   T30] audit: type=1400 audit(1784478180.495:1055): avc:  denied  { ioctl } for  pid=12928 comm="syz.7.1863" path="socket:[39683]" dev="sockfs" ino=39683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  556.227935][ T5697] usb 2-1: USB disconnect, device number 42
[  556.569611][T12933] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.576907][T12933] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.636925][T12933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  556.646288][T12933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  556.686469][ T6808] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  556.695886][ T5809] block nbd2: Possible stuck request ffff8880281fbb40: control (read@0,1024B). Runtime 210 seconds
[  556.722082][ T6808] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  556.759763][ T6808] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  556.778221][ T6808] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  556.924702][   T30] audit: type=1400 audit(1784478181.285:1056): avc:  denied  { nlmsg_write } for  pid=12936 comm="syz.5.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  556.972969][T12939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1868'.
[  557.313662][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  557.324206][T12939] batadv_slave_1: entered promiscuous mode
[  557.364081][T12938] batadv_slave_1: left promiscuous mode
[  557.888984][ T5704] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  558.416098][   T30] audit: type=1400 audit(1784478182.775:1057): avc:  denied  { mounton } for  pid=12970 comm="syz.1.1876" path="/385/file0/file0" dev="ramfs" ino=39796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  558.439360][T12971] overlay: Unknown parameter 'dont_measure'
[  558.454319][ T5704] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  558.467277][ T5704] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  558.471142][   T30] audit: type=1400 audit(1784478182.835:1058): avc:  denied  { unmount } for  pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  558.507624][ T5704] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  558.591161][ T5704] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  558.600615][ T5704] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  558.608699][ T5704] usb 6-1: Manufacturer: syz
[  558.935060][ T5704] usb 6-1: config 0 descriptor??
[  558.971463][ T5704] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  559.229127][T12989] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1882'.
[  559.311544][T12989] batadv_slave_1: entered promiscuous mode
[  559.331254][ T5704] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  559.415230][T12988] batadv_slave_1: left promiscuous mode
[  559.549106][ T5704] usb 2-1: Using ep0 maxpacket: 8
[  559.621981][ T5704] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  559.688051][ T5704] usb 2-1: config 0 has no interface number 0
[  559.747645][ T5704] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  559.838887][ T5704] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  559.895688][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.068329][ T5704] usb 2-1: config 0 descriptor??
[  560.363488][T13006] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1884'.
[  560.665850][ T5704] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  560.737409][ T5704] usb 2-1: USB disconnect, device number 43
[  561.063083][T11215] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  561.308444][ T5704] usb 6-1: USB disconnect, device number 23
[  561.370292][T11215] usb 9-1: Using ep0 maxpacket: 8
[  561.377473][T11215] usb 9-1: config 3 has an invalid interface number: 45 but max is 0
[  561.388858][T11215] usb 9-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  561.399594][T11215] usb 9-1: config 3 has no interface number 0
[  561.417783][T11215] usb 9-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  561.440747][T11215] usb 9-1: config 3 interface 45 has no altsetting 0
[  561.485671][T11215] usb 9-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  561.496958][T11215] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.509722][T11215] usb 9-1: Product: syz
[  561.516497][T11215] usb 9-1: Manufacturer: syz
[  561.521803][T11215] usb 9-1: SerialNumber: syz
[  562.147022][T13034] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  562.185607][T11215] usb 9-1: USB disconnect, device number 9
[  562.214183][T13034] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  562.239613][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  562.483322][ T6808] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  562.519814][ T6808] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  562.536797][ T6808] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  562.557180][ T6808] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  562.620198][ T5711] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  562.766072][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  562.766086][   T30] audit: type=1400 audit(1784478187.125:1060): avc:  denied  { setopt } for  pid=13044 comm="syz.7.1894" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  562.801185][ T5711] usb 6-1: Using ep0 maxpacket: 32
[  562.803533][T13047] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1895'.
[  562.807571][ T5711] usb 6-1: config 2 has an invalid interface number: 88 but max is 0
[  562.825016][ T5711] usb 6-1: config 2 has no interface number 0
[  562.835043][ T5711] usb 6-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  562.845158][ T5711] usb 6-1: config 2 interface 88 has no altsetting 0
[  562.855277][ T5711] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  562.864701][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  562.872705][ T5711] usb 6-1: Product: syz
[  562.876914][ T5711] usb 6-1: Manufacturer: syz
[  562.891758][ T5711] usb 6-1: SerialNumber: syz
[  562.918867][T13040] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  563.071972][T13051] batadv_slave_1: entered promiscuous mode
[  563.128703][T13046] batadv_slave_1: left promiscuous mode
[  563.181560][   T30] audit: type=1400 audit(1784478187.535:1061): avc:  denied  { create } for  pid=13053 comm="syz.6.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  563.219258][T13039] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  563.289364][   T30] audit: type=1400 audit(1784478187.645:1062): avc:  denied  { setopt } for  pid=13055 comm="syz.8.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  563.311525][   T24] usb 8-1: new low-speed USB device number 13 using dummy_hcd
[  563.382981][   T30] audit: type=1400 audit(1784478187.745:1063): avc:  denied  { shutdown } for  pid=13055 comm="syz.8.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  563.529816][   T24] usb 8-1: unable to get BOS descriptor or descriptor too short
[  563.554987][   T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  563.612324][   T24] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  563.646325][   T24] usb 8-1: string descriptor 0 read error: -22
[  563.654453][   T24] usb 8-1: New USB device found, idVendor=1235, idProduct=8208, bcdDevice= 0.40
[  563.716068][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.815064][   T24] usb 8-1: Focusrite Clarett USB Mixer Driver enabled (pid=0x8208); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  563.834465][   T24] usb 8-1: Error initialising Clarett USB Mixer Driver: -22
[  563.911564][  T805] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  563.936342][T13039] Bluetooth: MGMT ver 1.23
[  563.942355][   T24] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22
[  564.082252][  T805] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  564.107367][  T805] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  564.137581][  T805] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  564.162674][T13049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.172618][  T805] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  564.182611][  T805] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  564.191202][  T805] usb 7-1: Manufacturer: syz
[  564.201722][T13049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  564.212430][  T805] usb 7-1: config 0 descriptor??
[  564.241822][  T805] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  564.250762][   T24] usb 8-1: USB disconnect, device number 13
[  564.381795][   T30] audit: type=1400 audit(1784478188.745:1064): avc:  denied  { name_bind } for  pid=13072 comm="syz.8.1901" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  564.405961][   T30] audit: type=1400 audit(1784478188.745:1065): avc:  denied  { node_bind } for  pid=13072 comm="syz.8.1901" saddr=::ffff:172.20.20.187 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  564.523041][T13078] siw: device registration error -23
[  566.164076][T13094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1905'.
[  568.137382][ T5704] usb 7-1: USB disconnect, device number 21
[  568.845710][T13100] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1909'.
[  568.908073][ T5711] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110
[  569.159147][ T5711] asix 6-1:2.88: probe with driver asix failed with error -110
[  569.695199][T13103] batadv_slave_1: entered promiscuous mode
[  569.798555][   T30] audit: type=1800 audit(1784478194.025:1066): pid=13092 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1906" name="bus" dev="ramfs" ino=40695 res=0 errno=0
[  569.971471][T13099] batadv_slave_1: left promiscuous mode
[  570.600133][  T805] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  570.768356][  T805] usb 9-1: config 0 interface 0 has no altsetting 0
[  570.779478][  T805] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  570.796945][  T805] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.906187][  T805] usb 9-1: config 0 descriptor??
[  571.550823][  T805] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x1
[  571.579483][  T805] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x5
[  571.582629][ T5711] usb 6-1: USB disconnect, device number 24
[  571.608900][  T805] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x6
[  571.629114][  T805] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x0
[  571.639800][  T805] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x0
[  571.660671][  T805] hid-led 0003:0FC5:B080.000F: item fetching failed at offset 38/40
[  571.676763][  T805] hid-led 0003:0FC5:B080.000F: probe with driver hid-led failed with error -22
[  571.727215][T13105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  571.756779][T13105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.927966][   T30] audit: type=1400 audit(1784478196.285:1067): avc:  denied  { write } for  pid=13121 comm="syz.5.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  571.958230][   T30] audit: type=1400 audit(1784478196.285:1068): avc:  denied  { read } for  pid=13121 comm="syz.5.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  572.349614][T13131] FAULT_INJECTION: forcing a failure.
[  572.349614][T13131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  572.370630][T13131] CPU: 1 UID: 0 PID: 13131 Comm: syz.1.1916 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  572.370657][T13131] Tainted: [L]=SOFTLOCKUP
[  572.370663][T13131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  572.370673][T13131] Call Trace:
[  572.370678][T13131]  <TASK>
[  572.370685][T13131]  dump_stack_lvl+0x100/0x190
[  572.370709][T13131]  should_fail_ex.cold+0x5/0xa
[  572.370732][T13131]  _copy_from_user+0x2e/0xd0
[  572.370757][T13131]  copy_msghdr_from_user+0x9f/0x4c0
[  572.370783][T13131]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  572.370820][T13131]  ___sys_sendmsg+0x106/0x1e0
[  572.370846][T13131]  ? __pfx____sys_sendmsg+0x10/0x10
[  572.370869][T13131]  ? __lock_acquire+0x49f/0x1a40
[  572.370890][T13131]  ? get_pid_task+0x106/0x250
[  572.370941][T13131]  __sys_sendmsg+0x160/0x210
[  572.370962][T13131]  ? __pfx___sys_sendmsg+0x10/0x10
[  572.370999][T13131]  do_syscall_64+0x115/0x870
[  572.371017][T13131]  ? clear_bhb_loop+0x40/0x90
[  572.371039][T13131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.371057][T13131] RIP: 0033:0x7fef3219de99
[  572.371072][T13131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  572.371088][T13131] RSP: 002b:00007fef303f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  572.371105][T13131] RAX: ffffffffffffffda RBX: 00007fef32425fa0 RCX: 00007fef3219de99
[  572.371116][T13131] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  572.371126][T13131] RBP: 00007fef303f6090 R08: 0000000000000000 R09: 0000000000000000
[  572.371137][T13131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  572.371147][T13131] R13: 00007fef32426038 R14: 00007fef32425fa0 R15: 00007fff0aa193a8
[  572.371171][T13131]  </TASK>
[  572.582764][   T24] usb 9-1: USB disconnect, device number 10
[  573.185036][T13141] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1919'.
[  573.476973][T13145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1921'.
[  573.835237][ T5711] IPVS: starting estimator thread 0...
[  573.863769][T13145] batadv_slave_1: entered promiscuous mode
[  573.872387][T13144] batadv_slave_1: left promiscuous mode
[  573.879082][   T30] audit: type=1400 audit(1784478198.215:1069): avc:  denied  { mount } for  pid=13149 comm="syz.7.1922" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  573.910351][ T5704] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  573.940316][T13154] IPVS: using max 78 ests per chain, 187200 per kthread
[  574.072563][ T5704] usb 7-1: config 0 has no interfaces?
[  574.078144][ T5704] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  574.170198][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1924'.
[  574.333083][   T30] audit: type=1400 audit(1784478198.625:1070): avc:  denied  { ioctl } for  pid=13158 comm="syz.7.1924" path="socket:[41989]" dev="sockfs" ino=41989 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  574.461464][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.528391][ T5704] usb 7-1: config 0 descriptor??
[  574.600945][ T1714] block nbd0: Possible stuck request ffff8880281063c0: control (read@0,4096B). Runtime 270 seconds
[  574.670580][  T805] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  574.754218][ T5704] usb 7-1: USB disconnect, device number 22
[  574.795904][T13178] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1926'.
[  574.822244][  T805] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  574.841976][  T805] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  574.871381][  T805] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  574.906697][  T805] usb 6-1: config 0 interface 0 has no altsetting 0
[  574.926202][  T805] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  574.952424][  T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.984934][  T805] usb 6-1: config 0 descriptor??
[  575.408544][  T805] holtek 0003:1241:5015.0010: ignoring exceeding usage max
[  575.445507][  T805] holtek 0003:1241:5015.0010: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0
[  575.457717][  T805] holtek 0003:1241:5015.0010: no inputs found
[  575.704004][  T805] usb 6-1: USB disconnect, device number 25
[  576.227551][T13205] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1934'.
[  576.292082][T13206] batadv_slave_1: entered promiscuous mode
[  576.337642][T13204] batadv_slave_1: left promiscuous mode
[  576.340033][ T5704] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  576.343367][ T5734] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  576.435922][   T30] audit: type=1400 audit(1784478200.795:1071): avc:  denied  { ioctl } for  pid=13209 comm="syz.8.1936" path="socket:[42065]" dev="sockfs" ino=42065 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  576.512121][ T5704] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  576.553683][ T5734] usb 8-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  576.574418][ T5734] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  576.608699][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1938'.
[  576.815123][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.835137][ T5734] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  576.862693][ T5704] usb 2-1: config 0 descriptor??
[  576.876685][ T5734] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  576.938096][ T5734] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  576.960362][ T5734] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.968378][ T5734] usb 8-1: Product: syz
[  576.972895][ T5734] usb 8-1: Manufacturer: syz
[  576.977794][ T5734] usb 8-1: SerialNumber: syz
[  577.004143][ T5734] usb 8-1: config 0 descriptor??
[  577.028667][ T5734] adutux 8-1:0.0: interrupt endpoints not found
[  577.583854][   T30] audit: type=1400 audit(1784478201.945:1072): avc:  denied  { map } for  pid=13189 comm="syz.7.1930" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  577.932323][ T5704] ath6kl: Failed to submit usb control message: -71
[  577.939700][ T5704] ath6kl: unable to send the bmi data to the device: -71
[  577.947957][ T5704] ath6kl: Unable to send get target info: -71
[  577.963950][ T5704] ath6kl: Failed to init ath6kl core: -71
[  577.977149][ T5704] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  578.001892][ T5704] usb 2-1: USB disconnect, device number 44
[  578.847155][T13240] syzkaller0: entered promiscuous mode
[  578.868304][T13240] syzkaller0: entered allmulticast mode
[  578.965882][ T5704] usb 8-1: USB disconnect, device number 14
[  579.101036][ T5711] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  579.262241][ T5711] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  579.305826][ T5711] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  579.375790][ T5711] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  579.403328][ T5711] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  579.436256][ T5711] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  579.530401][ T5711] usb 2-1: Manufacturer: syz
[  579.578598][ T5704] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  579.632853][ T5711] usb 2-1: config 0 descriptor??
[  579.648946][ T5711] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  579.680799][T11324] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  579.783050][ T5704] usb 9-1: config 0 has no interfaces?
[  579.790050][ T5704] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  579.790083][   T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  579.799188][ T5704] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.840550][T11324] usb 6-1: Using ep0 maxpacket: 8
[  579.852847][ T5704] usb 9-1: config 0 descriptor??
[  579.861564][T11324] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  579.872849][T11324] usb 6-1: config 179 has no interface number 0
[  579.887094][T11324] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  579.900569][T11324] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  579.912788][T11324] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  579.926090][T11324] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  579.938014][T11324] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  579.951781][T11324] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  579.961450][T11324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.986239][   T24] usb 8-1: Using ep0 maxpacket: 8
[  579.993177][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  580.016497][   T24] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  580.030516][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.067857][   T24] usb 8-1: config 0 descriptor??
[  580.068368][T13267] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  580.091676][T11324] xpad 6-1:179.65: probe with driver xpad failed with error -5
[  580.174937][T11324] usb 9-1: USB disconnect, device number 11
[  580.299218][ T5704] usb 6-1: USB disconnect, device number 26
[  580.415259][   T24] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  580.599061][T13276] lo speed is unknown, defaulting to 1000
[  581.052035][   T30] audit: type=1400 audit(1784478205.415:1073): avc:  denied  { create } for  pid=13270 comm="syz.7.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  581.600984][ T5711] usb 8-1: USB disconnect, device number 15
[  581.675253][ T5704] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[  581.718527][T13286] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.725829][T13286] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.769341][T13286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  581.779427][T13286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.827900][ T6138] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.831674][ T5704] usb 7-1: device descriptor read/64, error -71
[  581.846467][ T6138] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.858901][ T6138] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.869144][ T6138] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.926635][T13293] syzkaller0: entered promiscuous mode
[  581.932435][ T5734] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  581.940580][T13293] syzkaller0: entered allmulticast mode
[  582.090034][ T5734] usb 6-1: Using ep0 maxpacket: 8
[  582.096348][ T5734] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  582.101133][ T5704] usb 7-1: new full-speed USB device number 24 using dummy_hcd
[  582.104891][ T5734] usb 6-1: config 0 has no interface number 0
[  582.118469][ T5711] usb 2-1: USB disconnect, device number 45
[  582.144383][ T5734] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  582.167757][ T5734] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  582.177477][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.195983][ T5734] usb 6-1: config 0 descriptor??
[  582.214898][ T5734] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  582.284661][ T5704] usb 7-1: device descriptor read/64, error -71
[  582.494647][ T5704] usb usb7-port1: attempt power cycle
[  582.870132][ T5704] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[  582.911242][ T5704] usb 7-1: device descriptor read/8, error -71
[  582.970054][ T5734] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  583.121619][ T5734] usb 8-1: config 24 has too many interfaces: 158, using maximum allowed: 32
[  583.130972][ T5734] usb 8-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config
[  583.142388][ T5734] usb 8-1: config 24 has 1 interface, different from the descriptor's value: 158
[  583.155589][ T5734] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40
[  583.160056][ T5704] usb 7-1: new full-speed USB device number 26 using dummy_hcd
[  583.173296][ T5734] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.185388][ T5734] usb 8-1: Product: syz
[  583.189599][ T5734] usb 8-1: Manufacturer: syz
[  583.194473][ T5734] usb 8-1: SerialNumber: syz
[  583.208368][ T5704] usb 7-1: device descriptor read/8, error -71
[  583.320513][ T5704] usb usb7-port1: unable to enumerate USB device
[  583.420153][ T5734] usb 8-1: 0:1 : does not exist
[  583.432550][ T5734] usb 8-1: unit 2: unexpected type 0x03
[  583.438687][ T5734] usb 8-1: unit 80 not found!
[  583.444299][ T5734] usb 8-1: unit 0 not found!
[  583.503828][ T5734] usb 8-1: USB disconnect, device number 16
[  583.535731][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:24.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  583.565101][  T805] usb 6-1: USB disconnect, device number 27
[  584.030311][ T5704] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  585.166532][ T5704] usb 2-1: config 24 has too many interfaces: 158, using maximum allowed: 32
[  585.180016][ T5704] usb 2-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config
[  585.205732][ T5704] usb 2-1: config 24 has 1 interface, different from the descriptor's value: 158
[  585.226273][ T5704] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40
[  585.236074][T11324] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  585.253953][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.265851][ T5704] usb 2-1: Product: syz
[  585.281245][ T5704] usb 2-1: Manufacturer: syz
[  585.291891][ T5704] usb 2-1: SerialNumber: syz
[  585.440795][T11324] usb 6-1: Using ep0 maxpacket: 8
[  585.460145][  T805] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  585.461472][T11324] usb 6-1: config 3 has an invalid interface number: 45 but max is 0
[  585.501312][T11324] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  585.501455][ T5734] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  585.523421][T11324] usb 6-1: config 3 has no interface number 0
[  585.531620][T11324] usb 6-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  585.656981][T11324] usb 6-1: config 3 interface 45 has no altsetting 0
[  585.670037][ T5704] usb 2-1: 0:1 : does not exist
[  585.681908][  T805] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  585.694496][ T5704] usb 2-1: unit 2: unexpected type 0x03
[  585.694797][  T805] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  585.701703][ T5704] usb 2-1: unit 80 not found!
[  585.714070][  T805] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  585.751351][T11324] usb 6-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  585.751697][  T805] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  585.787304][  T805] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  585.788585][T11324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.804879][ T5704] usb 2-1: unit 0 not found!
[  585.805345][  T805] usb 7-1: Manufacturer: syz
[  585.867113][ T5734] usb 9-1: config 0 has no interfaces?
[  585.868922][T11324] usb 6-1: Product: syz
[  585.874772][  T805] usb 7-1: config 0 descriptor??
[  585.882422][ T5734] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  585.894033][ T5734] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.896803][  T805] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  585.920842][T11324] usb 6-1: Manufacturer: syz
[  585.924282][ T5734] usb 9-1: config 0 descriptor??
[  585.947919][T11324] usb 6-1: SerialNumber: syz
[  585.971208][ T5704] usb 2-1: USB disconnect, device number 46
[  586.260485][T11324] usb 6-1: USB disconnect, device number 28
[  586.305085][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  586.750360][ T5809] block nbd2: Possible stuck request ffff8880281fbb40: control (read@0,1024B). Runtime 240 seconds
[  586.854082][  T805] usb 9-1: USB disconnect, device number 12
[  586.952741][T13373] syzkaller0: entered promiscuous mode
[  586.959516][T13373] syzkaller0: entered allmulticast mode
[  587.200061][ T5734] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  587.260019][ T5704] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  587.350274][ T5734] usb 8-1: Using ep0 maxpacket: 8
[  587.359826][ T5734] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  587.378084][ T5734] usb 8-1: config 0 has no interface number 0
[  587.397017][ T5734] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  587.434636][ T5734] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  587.440443][ T5704] usb 6-1: Using ep0 maxpacket: 8
[  587.693197][ T5704] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  587.706121][ T5704] usb 6-1: config 0 has no interface number 0
[  587.706161][ T5734] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.712403][ T5704] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  587.712442][ T5704] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  587.712464][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.770709][ T5734] usb 8-1: config 0 descriptor??
[  587.802743][ T5704] usb 6-1: config 0 descriptor??
[  587.809815][ T5734] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  587.849607][ T5704] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[  588.739025][ T5734] usb 7-1: USB disconnect, device number 27
[  589.253231][ T5704] usb 6-1: USB disconnect, device number 29
[  589.282903][  T188] usb 8-1: USB disconnect, device number 17
[  589.310268][   T31] INFO: task syz.4.1518:11398 blocked for more than 143 seconds.
[  589.318095][   T31]       Tainted: G             L      syzkaller #0
[  589.329317][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  589.378442][   T31] task:syz.4.1518      state:D stack:27256 pid:11398 tgid:11397 ppid:5614   task_flags:0x400140 flags:0x00080006
[  589.479300][   T31] Call Trace:
[  589.507974][   T31]  <TASK>
[  589.529819][   T31]  __schedule+0x125c/0x6730
[  589.576861][   T31]  ? __pfx___schedule+0x10/0x10
[  589.616449][   T31]  ? find_held_lock+0x2b/0x80
[  589.634523][   T31]  ? schedule+0x225/0x2c0
[  589.651134][   T31]  schedule+0xdd/0x2c0
[  589.699188][   T31]  schedule_preempt_disabled+0x13/0x30
[  589.737630][   T31]  __mutex_lock+0xccc/0x1bd0
[  589.799350][   T31]  ? sync_bdevs+0x153/0x480
[  589.839238][   T31]  ? __lock_acquire+0x49f/0x1a40
[  589.911882][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  589.978835][   T31]  ? iput.part.0+0x1a0/0x1050
[  590.053964][   T31]  ? sync_bdevs+0xc7/0x480
[  590.113366][   T31]  ? sync_bdevs+0x153/0x480
[  590.167717][   T31]  sync_bdevs+0x153/0x480
[  590.230591][   T31]  ksys_sync+0xb0/0xf0
[  590.283218][   T31]  ? __pfx_ksys_sync+0x10/0x10
[  590.335904][   T31]  ? __secure_computing+0x201/0x2e0
[  590.410821][   T31]  __do_sys_sync+0xe/0x20
[  590.473438][   T31]  do_syscall_64+0x115/0x870
[  590.545715][   T31]  ? clear_bhb_loop+0x40/0x90
[  590.623949][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.675525][   T31] RIP: 0033:0x7f201179de99
[  590.715374][   T31] RSP: 002b:00007f2012606028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  590.774960][   T31] RAX: ffffffffffffffda RBX: 00007f2011a25fa0 RCX: 00007f201179de99
[  590.828537][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  590.855404][   T31] RBP: 00007f2011a25fa0 R08: 0000000000000000 R09: 0000000000000000
[  590.864372][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  590.895482][   T31] R13: 00007f2011a26038 R14: 00007f2011a25fa0 R15: 00007ffc770ec5b8
[  590.923884][   T31]  </TASK>
[  590.945060][   T31] 
[  590.945060][   T31] Showing all locks held in the system:
[  590.959211][   T31] 1 lock held by khungtaskd/31:
[  590.976497][   T31]  #0: ffffffff8ebe6180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  591.010557][   T31] 3 locks held by kworker/1:1H/1714:
[  591.035086][   T31] 2 locks held by getty/5365:
[  591.064842][   T31]  #0: ffff888036f4f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  591.136977][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  591.247902][   T31] 1 lock held by udevd/5620:
[  591.289416][   T31]  #0: ffff888027bf4350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  591.357012][   T31] 1 lock held by udevd/5627:
[  591.376677][   T31]  #0: ffff8880280d4350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  591.395595][   T31] 2 locks held by kworker/u8:11/6138:
[  591.400982][   T31] 2 locks held by kworker/u8:12/6800:
[  591.406332][   T31]  #0: ffff88801f386940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[  591.419355][   T31]  #1: ffffc9001c037d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[  591.434832][   T31] 2 locks held by kworker/u8:15/6808:
[  591.440810][   T31] 1 lock held by syz.4.1518/11398:
[  591.445935][   T31]  #0: ffff8880280d4350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[  591.460038][   T31] 2 locks held by syz.2.1526/11478:
[  591.466753][   T31]  #0: ffff8880266e20d8 (&type->s_umount_key#71/1){+.+.}-{4:4}, at: sget_fc+0x3c8/0x1d80
[  591.483282][   T31]  #1: ffff8880280d4350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40
[  591.501413][   T31] 2 locks held by syz.6.1984/13403:
[  591.511507][   T31] 
[  591.514964][   T31] =============================================
[  591.514964][   T31] 
[  591.540292][   T31] NMI backtrace for cpu 0
[  591.540303][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  591.540318][   T31] Tainted: [L]=SOFTLOCKUP
[  591.540322][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  591.540328][   T31] Call Trace:
[  591.540332][   T31]  <TASK>
[  591.540337][   T31]  dump_stack_lvl+0x100/0x190
[  591.540353][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  591.540368][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  591.540382][   T31]  nmi_trigger_cpumask_backtrace+0x21c/0x2a0
[  591.540399][   T31]  sys_info+0x141/0x190
[  591.540411][   T31]  watchdog+0xcb1/0x1030
[  591.540424][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  591.540441][   T31]  ? __pfx_watchdog+0x10/0x10
[  591.540452][   T31]  ? __kthread_parkme+0x18c/0x230
[  591.540468][   T31]  ? kthread+0x13a/0x450
[  591.540482][   T31]  ? __pfx_watchdog+0x10/0x10
[  591.540493][   T31]  kthread+0x370/0x450
[  591.540508][   T31]  ? __pfx_kthread+0x10/0x10
[  591.540524][   T31]  ret_from_fork+0x72b/0xd50
[  591.540539][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  591.540552][   T31]  ? __switch_to+0x800/0x10f0
[  591.540562][   T31]  ? __pfx_kthread+0x10/0x10
[  591.540580][   T31]  ret_from_fork_asm+0x1a/0x30
[  591.540614][   T31]  </TASK>
[  591.540620][   T31] Sending NMI from CPU 0 to CPUs 1:
[  591.675229][    C1] NMI backtrace for cpu 1
[  591.675244][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  591.675263][    C1] Tainted: [L]=SOFTLOCKUP
[  591.675268][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  591.675276][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  591.675300][    C1] Code: f6 8c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 a9 11 00 fb f4 <e9> bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  591.675313][    C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246
[  591.675325][    C1] RAX: 0000000002f592cf RBX: ffff88801eaca540 RCX: ffffffff8bb9f2d5
[  591.675334][    C1] RDX: 0000000000000000 RSI: ffffffff8e1a4788 RDI: ffffffff8c401280
[  591.675342][    C1] RBP: ffffed1003d594a8 R08: 0000000000000001 R09: ffffed10170a678d
[  591.675351][    C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000
[  591.675362][    C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000
[  591.675370][    C1] FS:  0000000000000000(0000) GS:ffff888123ee7000(0000) knlGS:0000000000000000
[  591.675384][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  591.675393][    C1] CR2: 000020000000f000 CR3: 0000000078c13000 CR4: 00000000003526f0
[  591.675403][    C1] Call Trace:
[  591.675407][    C1]  <TASK>
[  591.675412][    C1]  default_idle+0x9/0x10
[  591.675426][    C1]  default_idle_call+0x6c/0xb0
[  591.675446][    C1]  do_idle+0x3a7/0x5b0
[  591.675464][    C1]  ? __pfx_do_idle+0x10/0x10
[  591.675480][    C1]  ? finish_task_switch.isra.0+0x14c/0x10c0
[  591.675500][    C1]  cpu_startup_entry+0x4f/0x60
[  591.675517][    C1]  start_secondary+0x21d/0x2d0
[  591.675533][    C1]  ? __pfx_start_secondary+0x10/0x10
[  591.675551][    C1]  common_startup_64+0x13e/0x158
[  591.675575][    C1]  </TASK>
[  591.862683][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  591.869534][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  591.880214][   T31] Tainted: [L]=SOFTLOCKUP
[  591.884511][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  591.894535][   T31] Call Trace:
[  591.897787][   T31]  <TASK>
[  591.900691][   T31]  dump_stack_lvl+0x100/0x190
[  591.905343][   T31]  vpanic+0x552/0x970
[  591.909306][   T31]  ? __pfx_vpanic+0x10/0x10
[  591.913781][   T31]  ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0
[  591.919914][   T31]  panic+0xd1/0xe0
[  591.923612][   T31]  ? __pfx_panic+0x10/0x10
[  591.928016][   T31]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0
[  591.934147][   T31]  ? nmi_trigger_cpumask_backtrace+0x260/0x2a0
[  591.940284][   T31]  ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0
[  591.946420][   T31]  ? watchdog.cold+0x1ec/0x234
[  591.951155][   T31]  ? watchdog+0xcc1/0x1030
[  591.955553][   T31]  watchdog.cold+0x1fd/0x234
[  591.960121][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  591.965912][   T31]  ? __pfx_watchdog+0x10/0x10
[  591.970561][   T31]  ? __kthread_parkme+0x18c/0x230
[  591.975569][   T31]  ? kthread+0x13a/0x450
[  591.979805][   T31]  ? __pfx_watchdog+0x10/0x10
[  591.984479][   T31]  kthread+0x370/0x450
[  591.988554][   T31]  ? __pfx_kthread+0x10/0x10
[  591.993151][   T31]  ret_from_fork+0x72b/0xd50
[  591.997744][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  592.002855][   T31]  ? __switch_to+0x800/0x10f0
[  592.007518][   T31]  ? __pfx_kthread+0x10/0x10
[  592.012095][   T31]  ret_from_fork_asm+0x1a/0x30
[  592.016840][   T31]  </TASK>
[  592.020031][   T31] Kernel Offset: disabled
[  592.024327][   T31] Rebooting in 86400 seconds..