last executing test programs:

2m39.130946465s ago: executing program 0 (id=972):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff000000000000000085000000410000008500000008000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x68, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
fsopen(&(0x7f0000000000)='cgroup\x00', 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r7}]}, 0x34}, 0x1, 0x700000000000000, 0x0, 0xc000}, 0x4040)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)
sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800, 0x1, {0x0, r9}})
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)

2m37.855153309s ago: executing program 0 (id=975):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r6 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x2, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r11 = socket(0x10, 0x803, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0)
sendmsg$nl_route_sched(r11, 0x0, 0x800)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
socket$inet_tcp(0x2, 0x1, 0x0)

2m36.240761984s ago: executing program 0 (id=983):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006280)=[{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001c00)="e497beafbab9fd9f4b6559561bd148b53d221b5a1051b845167f67d4c209be96da8b776f8f6a0ca70443c5a4baf3fa5b903b7b774ca9157dede5de9b00bd9f00a0c2f1269e5b49909c04bfc62b7cd8ccf6d8cfa9d392237620378167a2a2efdbe5dde4fee2f7ea", 0x67}], 0x1, &(0x7f0000001c80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x51}, @op={0x18}], 0xa8, 0x40000}, {0x0, 0x0, &(0x7f00000022c0), 0x0, &(0x7f0000002300), 0x0, 0x880}, {0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002440)=[@assoc={0x18, 0x117, 0x4, 0x4eb}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xb232}, @op={0x18}, @iv={0x5f8, 0x117, 0x2, 0x5dd, "f66f13572fecc26eea6a7bc552c42e8561eb7e325bae907f2db3fd8c212147e694da3f0773d67c1621346b0f105c0ff8f89d37c7a2e171fd703cc8197a8d99103d3687a3e8a6e1557b86d54a2ec86b4e252dd415d8c9df07f4bd6cb216d764c13123a1a4f8e3476d8162362463637068f1e3f6413687263c0d415dbd526f4b186773003f271b6b690373ff5344b0ed3435d0a56bee67074ab49dae4549bc6ad6512340f879374d693b2879562ecf7c08cdfd8bcc37314ab8f45d336aa60f1bf691fb77972930133766662cfc7a0cc1367ce4bbe880fa23ce495603b43b88935c2d9dcb9006f13b4d6abdc9615a6caf6309679a426e3ac1b7f651710598b80f56346d4616bcdf86bd941ff79acf7af379b178ce3c4ca85b9b38097dd9b96288fb9c0ffd7f7e2c78bd67138242b557ddc5dc2cec457ff2f4d18f206be2156f9b3dc206f96abda1cedb2ef54c53ba80439107fab2a5df12c0fbfcedaebddd38ee26c7f627a14b2f238bfcac2f80f05f6644ca96f9a962c2063cd07cd05fd1bb3727905b7d1cf9e085b690c2cd65d34268baf9d02868f3fffb7076f4987c580037e3a0bea06250bba79575258b314ab04dab03a1d4dbdb0caab7a3b1c519817369ffe6b4a640da2dd9421e62a35193d83fc2974cf7de3e91596893acbeab87f88a8c8f6253065ab32e8efa2baed8d55009cd8493d3da5fa5396b30f0a05004beba5eea891dda4cf5fa11c620a8df66acc425ad56e0cceb0261199e2b373e153b74befe21da7420b4e65371f445df151b44710b616282ec2089e7bcf92fac2e41fbd6d6145c0aa2d1043fcb9ccb2449ed655e1953a337f5437d205ad6c1661b9f393a001b51e292a281ab6578b200810cbd50124629834fdbae513ef93950a23745fb1e0a9d6c7fdfd927703c8ce0bce0b42fc4c7221ffd6adef5f358db48f36c53a6f18074110ed55576f64b3ec645c34e5c1074d3782c2fc39c53e1d8a208ae727fcea445ccbf227a2c1adad6297df2dc5ae3dcf5ddc7016ae7847b20f5c1dff1a635988b1ffaa9fb5ddc9300035b742dc05c35ce426e61fde22ca970f89540265af0c58b4d11ad0f7494aa46ce2081c6875c7656540b97aeee6efa8b4fee82a2552124ee09fdff3ac880ca27b24bd771f1a2b9095b6e43822fa975a98167a878710ed6f16974286ef3a5865a8a18dda4043d7156ca456389fb903da164dc58449acb5f6a60177b01123f517191e00e19ebb2cf579d8aee3ebab4e3516c6309085a5f0fc5a7b0c7991664c03beea87ffd21270a4f1d5f74b16848db1fa250581d7736bd31e0c1cc460cea3fac95c836fd5ba0a4255423cfd05163a4081cff33ea165338151ea74fbbc0488261c8016ff23d16c84ea88ec65e4ba8ea3aa7e5b4196db561f9efbd4cb7faa952e1f3372a99ea775e007f1ff51a7152741059039358cd7efc971ffd15f67208b7dabba9e3ec2afbc4a06659bb65b32659c3c8428981ac3c03b63081e5dacd51114b1f272d443aa219032d9b5768ce753f76afaad5630054f6c0630e9dd27d5b584e7fd17075fc04e2b1510ead939ee445d75f48d33b8f8d5b4ba3c03f754f1b391c0810a07df1f0ac2c55637895a03d778f86cc55cd170c8d4378517141b0affac36687a77b13bbc292b1c739af550f946d6a2fa356d3368315f1ee63b37c0413ff6890b5b636cadaf527233feda0e3aba6c7350270fe76f286b8f6a57a36ca16a58928bd84fc5c7cbb64fa56a0f9b982d30300476a1148b335cd8767edcf8835caf68799e3de34d881f7599c42aa52859ad5608bd08b6bec6f0f54746c10bc903b551c52f069415274c44fc1b24953e15ae2691b63bace41915f89d4e7808dfc8340bb1fe4648931e07d31eccc5e4872070cfe19d47ad32d38fdd696b544617542d123d896c03523382ec40b80fe26cb50e4c0f8cb66c1902fc3ff1e2228482b14f7e00f5a9805e3af573b6e2ee349a7880b8ab3f59f16dfb52a549e41166b6529da5e3d476fd116e8b2bcd4a0eb25597b2b0f001989eaad2b06d9352d54dc6a1f8647d4a794448d4e5b55785e44b9a577dcc0d44f8196353b0da225512cf2543c87d64fee23cdce9011a634602f1a1c820893"}], 0x658, 0x4000000}, {0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f00000035c0)="e3e1fd036a6ebb88a3c8366b83372df55113e733445daaedb639409c6e963e396d532af54ac9d75c761b0eeb60939167d641fe7739", 0x35}], 0x1, &(0x7f0000003700)=[@iv={0x18}, @iv={0xa0, 0x117, 0x2, 0x8b, "1abae1e68b949b71c91cbdb33b21d0e49dbee9964c847a97dd508b14992f6f033af4d05854878c5fe1af0de696c75aca09208ab13414f2178016224c16948c5da95cf9c7c3ed6640ddcabbc421446c77db5a28741942bd87310e88dab1fe1b22586e62b636e9bf9fc60c15167df3a67a09015cabb19008a76f27cf42d3d4dc22604b49de2986d215d5928f"}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x95e}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xa}], 0x130, 0x80}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2004}, {0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000004a80)="4c1f8450bf79ef05b82687c4cf8d86b4618649f0d529fb53f3e48e6c21879880b65c6a50595f2918989e5349cf0f2798f22acfcddab0", 0x36}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000060c0)=[@iv={0x18}], 0x18}], 0x8, 0x4004041)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x0, 0x4}, 0x94)
open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x922c3)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000006480)={0x0, 0x5, 0x4, 0x6, 0xfde05c6118ecbe9d, [], [0x4, 0x58c, 0x8001, 0x9ab6c7e], [0x89de, 0x9, 0xfffffff8, 0xfffffffe], [0x5c98, 0x2, 0x8, 0x4]})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)="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", 0xfa}, {&(0x7f0000000680)="0df9b05a46b0fe194ccdc663e7d4fcf8ed8f46ee0910ae90aa12e7bffd6d9c5d2a2a3b29720fe613808342958af281f75b7044d4ac777280600cd2b49061476a83b696e6ea8161c9f34d46c1c458515e19d780aa25b32e1a4dee1601b1f60601dd98846870fbb8b0e63d1edc1237853d6e59270d4a370c9505cc3051056644cbc6d977bef96788e9a238123e47d9ec31588c57fb593eb1c92a43e005cabdada97b8dcbbde3cc7a0de67d14ed489632934a873dacf800edab09c1d9a71b7e203f", 0xc0}, {&(0x7f0000000740)="3651bdfc29089853eab66da2f6c949cba97c0741cf99cff6ff70a95aae487a7172293e7606f35e10cedc5fef25bc2573af49ca452f907dd0d24e8f6d7f6e775728e5d46ce7b9ba44d9174bcfb51db1e3ba00adb12ad810d6979778cf0a7e8777d0650bfeaf305e7fe7ebfa4826913077ad23ca41d23c5258371ca96bf750f36706488f79bad7766796fd84a9e95867c972b0b7caf7e73ce8ca2c9e3a418713305a60609ac88ded416713ff9126004b7b5b73016fae6e49ac6fb3c04cab", 0xbd}], 0x3, &(0x7f0000000800)}, 0x97361071ec75d806)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
socket$igmp(0x2, 0x3, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}}, 0x2004c010)

2m35.525668466s ago: executing program 0 (id=987):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0xa, @empty, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x1000000, 0x4}, 0x9c)

2m35.326749179s ago: executing program 0 (id=992):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x20000)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000600000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
sendto$inet6(r6, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0)
mmap(&(0x7f000039c000/0x6000)=nil, 0x6000, 0x4, 0xab9f1d0e47981691, r6, 0x2c9ab000)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r4)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x1, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x0, 0x0, 0x24})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x8, 0x4, 0x10, '\x00', 0xc1d})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

2m33.39386919s ago: executing program 0 (id=1001):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x8d)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x1, 0xf0, 0x3}, 0xfe}, 0x18)
sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x206c)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x2a010000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50)
r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, <r10=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r9}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r10}, &(0x7f0000000380), &(0x7f00000002c0)=r9}, 0x20)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0)

2m17.695026494s ago: executing program 32 (id=1001):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x8d)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x1, 0xf0, 0x3}, 0xfe}, 0x18)
sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x206c)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x2a010000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50)
r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, <r10=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r9}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r10}, &(0x7f0000000380), &(0x7f00000002c0)=r9}, 0x20)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0)

1m51.024981271s ago: executing program 3 (id=1171):
r0 = socket(0x11, 0x800000003, 0x0) (async, rerun: 32)
r1 = socket(0x10, 0x3, 0x0) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x7f, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x78, 0xa7, 0x8, 0x499, 0x49ee, 0xd3b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb2, 0x2, 0x0, 0xff, 0x28, 0xbd, 0x3}}]}}]}}, 0x0)

1m49.74762291s ago: executing program 3 (id=1177):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000006d80)=[{{&(0x7f0000000cc0)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, 0x1c, 0x0}}, {{&(0x7f0000001f80)={0xa, 0x4e23, 0x80000001, @empty, 0xfe0000}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003500)="a633", 0x2}], 0x1}}], 0x3, 0x4001)

1m49.635004207s ago: executing program 3 (id=1180):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x8a2f, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2000000000000000, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x10000}, {0x7, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@private0, 0x0, 0x4, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)

1m49.371439227s ago: executing program 3 (id=1182):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, 0x401c0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x44}}, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x18, 0x0, 0x1)
chdir(&(0x7f0000000100)='./file0\x00')
r5 = socket(0x2b, 0xa, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
getpeername$qrtr(r4, 0x0, &(0x7f0000000380))
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)={0x28, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)

1m48.863377541s ago: executing program 3 (id=1187):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
semget(0x2, 0x1, 0x602)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='wlan1\x00', 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

1m47.915763163s ago: executing program 3 (id=1191):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r0, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5, 0x7}, {}, @result={0xff, 0x6b79}}, {0x0, 0x0, 0x0, 0x0, @time, {0x4, 0x4}, {}, @result={0xc92c}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfffffffa, {}, {}, @control}, {0x8, 0x9, 0x0, 0x0, @time, {0x80}, {0x0, 0x3}, @raw8={"c36b471862abd6a2d90b94d0"}}], 0x70) (async)
r1 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x2e, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e20, 0x2, 'nq\x00', 0x10, 0x6, 0x7c}, 0x2c) (async)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) (async)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
clock_getres(0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async)
getrandom(0x0, 0x0, 0x2)
syz_open_procfs(r2, &(0x7f0000000040)='net/ip_vs\x00')

1m32.936176669s ago: executing program 33 (id=1191):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r0, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5, 0x7}, {}, @result={0xff, 0x6b79}}, {0x0, 0x0, 0x0, 0x0, @time, {0x4, 0x4}, {}, @result={0xc92c}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfffffffa, {}, {}, @control}, {0x8, 0x9, 0x0, 0x0, @time, {0x80}, {0x0, 0x3}, @raw8={"c36b471862abd6a2d90b94d0"}}], 0x70) (async)
r1 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x2e, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e20, 0x2, 'nq\x00', 0x10, 0x6, 0x7c}, 0x2c) (async)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) (async)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
clock_getres(0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async)
getrandom(0x0, 0x0, 0x2)
syz_open_procfs(r2, &(0x7f0000000040)='net/ip_vs\x00')

12.879328185s ago: executing program 5 (id=1564):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x51)
syz_usb_connect(0x2, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x93, 0xf6, 0xfe, 0x10, 0x108c, 0x159, 0xdb57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0x1c, 0xfa, 0x0, 0xf2, 0x78, 0x38, 0x2}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff000}, {0x6}]}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x7)

11.947742474s ago: executing program 6 (id=1570):
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'vxcan1\x00', {0x2, 0x4e24, @local}})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000a70000/0x3000)=nil, 0x3000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300)={&(0x7f00001d5000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/68, 0x44, 0x1, &(0x7f0000000380)=""/24, 0x18}, &(0x7f0000000340)=0x40)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000700)=[0xffffffffffffffff, r2, r0, r1, r2, r2], 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00')
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000440)={0x0, 0xaee4, 0x4000, 0x3, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000240)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r3, 0x2bb6, 0x3446, 0x25, 0x0, 0x26)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x4e14, 0x912a, 0x41, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000100)={0x3, 0x200, 0xc})
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040)
socket(0x10, 0x3, 0x0)

10.626772576s ago: executing program 1 (id=1574):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_procfs(0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e)
writev(0xffffffffffffffff, 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockname(r4, 0x0, &(0x7f00000000c0))
close_range(r3, 0xffffffffffffffff, 0x0)

10.262370885s ago: executing program 6 (id=1575):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000000d000)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3], [0x0, 0x8, 0x0, 0x0, 0x5]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r6=>0x0})
fsmount(0xffffffffffffffff, 0x1, 0x80)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6})
msgget(0x0, 0x200)
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000})
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
close_range(r4, r7, 0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41)
openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
timer_create(0x0, 0x0, 0x0)
getpgid(0x0)

9.835385356s ago: executing program 1 (id=1576):
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'macvlan0\x00'}}, 0x1e)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1)
sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x4000000000000000)
bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x76b307c2, 0x1, [0x2, 0x6, 0x6, 0x5, 0x1000], [0x400, 0x79, 0x2, 0x0, 0x7, 0xbb, 0x0, 0x7, 0xffffffffffffff43, 0x7, 0x2, 0xbe, 0x7, 0x4, 0x4, 0x54773815, 0x80000000, 0x74501604, 0x8, 0x10001, 0xfff, 0x1, 0x43b, 0x3, 0x1, 0x100, 0x7fffffff, 0x1, 0x0, 0x2, 0x9, 0x8, 0x14, 0x3, 0xd, 0xa, 0xe33a, 0x9, 0x3ff, 0xffffffff, 0x8000000000000001, 0x7, 0xf0, 0x9d2, 0xfffffffffffff800, 0x8001, 0xffffffff, 0x2, 0xffffffffffffff4b, 0x100, 0x2b77459d, 0x0, 0x7, 0x100, 0x0, 0x7, 0x0, 0x7, 0x5, 0xb0a, 0x8000000000000000, 0x8, 0x6, 0x1a26, 0xadb, 0x2, 0x2, 0x9, 0x3, 0x5446, 0x9, 0x6, 0x0, 0x4, 0x0, 0xb53, 0x6, 0x400, 0x6, 0xffffffffffffffff, 0xfff, 0x8, 0x2, 0x5, 0x7fffffffffffffff, 0xfffffffffffffffb, 0x8, 0x8000000000000000, 0x7fffffffffffffff, 0x0, 0x9, 0x8, 0x500000, 0x3, 0x3, 0x8, 0x883, 0x7fff, 0x10, 0x4, 0x4, 0x80000001, 0x3, 0x9, 0xffffffff, 0x8, 0x8, 0x0, 0x3, 0xfe00000000000, 0x6, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x4, 0xbc3, 0x6e, 0x840, 0x35, 0x7]})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r2, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, 0x0)

9.83478496s ago: executing program 5 (id=1577):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setrlimit(0x2, &(0x7f0000001480)={0xb5ba, 0x3})
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3}, 0x94)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24008080)
mount_setattr(r0, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001440)={0x100002, 0xf1, 0x40000, {r0}}, 0x20)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e60, 0x22, @mcast2, 0xd}, 0x1c)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
socket$inet6(0xa, 0x3, 0x3a)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8800)

9.115074118s ago: executing program 1 (id=1579):
syz_open_dev$usbfs(0x0, 0x204, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000380)=""/75, 0x4b}, {&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000640)=""/232, 0xe8}, {&(0x7f0000000740)=""/234, 0xea}], 0x5, &(0x7f0000000400)=""/60, 0x3c}}], 0x1, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000309000/0x2000)=nil, 0x2000, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
dup(0xffffffffffffffff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0xc9e43)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r1, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec1c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200"}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000000e40)={{0x2, 0x0, 0x7b}, '\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"})
syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
pselect6(0xffffffffffffffbc, &(0x7f0000000180)={0x1f, 0xfffffffffffffffe, 0x3ff, 0xfffffffffffffffc, 0x9, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0xa, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340))

8.646055461s ago: executing program 1 (id=1581):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(r3, 0x0, 0xc000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05a300a6ff00000000000d00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x10000000)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
preadv(r5, &(0x7f0000000200), 0x0, 0x8, 0x6)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)=[0x5], 0x0, 0xfffffffffffffffe, 0x1, 0x1}}, 0x40)
r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000)
r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0x1, 0x93cf, 0x34324241, 0x0, 0x1, [{0x6, 0x5}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x0, 0x4}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2, 0x2}})
ioctl$SG_GET_ACCESS_COUNT(r7, 0x2289, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000180)=""/185, &(0x7f0000000240)=0xb9)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.687765401s ago: executing program 2 (id=1582):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket(0x2a, 0x2, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

7.563678803s ago: executing program 2 (id=1583):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x10000, @loopback, 0x1}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000040)=0x2, 0x4)
add_key(&(0x7f0000000c80)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000900)="b745cdd59e1221eaf983a85f46bfb7d36a6e62601fadb01af23db97bb0652852a9e0d4d5bcf03c927a81b34b7c4554656c1ee0ce81f672b1ed69d3ba077e78d8c54f78f61990bc7b566708ecffcecb0474a9c18cd055a836ad4d27cfe9d3844d7af9ef39356f19a4d17255f1916d241f1b08c0f4be561c2c57b4cfebc2b2bf54a60f9a12603ccc1e4f8f4a349c14883275cc4a6408cfee", 0x97}], 0x1, 0x4000001, 0x0)
sendfile(r2, r4, 0x0, 0x8000fb00)

7.20093424s ago: executing program 6 (id=1584):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000591b58000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c1000ffffffa6224e0000", 0x58}], 0x1)

6.935613509s ago: executing program 1 (id=1586):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0)
setfsgid(0xee00)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf250800010000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
fchdir(0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000000)={{0x8, 0x3, 0x81, 0x3, 'syz0\x00', 0x5}, 0x3, 0x20000000, 0x8, r2, 0x4, 0x8, 'syz1\x00', &(0x7f0000000180)=[':#,\x00', ',[\a\x00\x00\x00\x00\x00\x00\x00&]]\x00', '\x00', ':#,\x00'], 0x17})
syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

6.335942361s ago: executing program 5 (id=1587):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000200)=0x14)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x2b, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)

6.190893606s ago: executing program 6 (id=1588):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000})
r3 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0xed}, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{0x0}], 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3})
io_uring_enter(r3, 0x749d, 0x4, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x8}]}}]}, 0x3c}}, 0x4000010)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0)

5.366974078s ago: executing program 6 (id=1591):
r0 = socket(0x2b, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x894b, 0x0)
socket(0x2, 0x3, 0xff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndpcmc(0x0, 0x80000000000542, 0x450000)
r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000140)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
creat(0x0, 0xd931d3864d39dcca)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x3)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000)
syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0)
r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000240)={&(0x7f0000000200)=[{0x7, 0x1000, 0x1, &(0x7f00000000c0)="ac"}], 0x1})

4.323693927s ago: executing program 2 (id=1592):
syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x24a080, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000001c0)=@l={0x92, 0x0, 0xd0})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0)
setns(0xffffffffffffffff, 0x40000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r1}, 0x18)
prlimit64(0x0, 0xa, 0x0, 0x0)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
setsockopt$inet_mreqn(r6, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)

3.444964425s ago: executing program 1 (id=1593):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='adfs\x00', 0x221000d, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008855}, 0x40000c0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0xb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ct={0x70, 0x2, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "72ec14468837bc1fb5862404c0e344b2"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_ZONE={0x6, 0x4, 0xfcb9}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0x101, 0x3, 0xb9b, 0xffff2791}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x5}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x30)
openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x141440, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00w~', @ANYRES16=0x0, @ANYBLOB="010002000020fedbdf252500", @ANYRES32=0x0, @ANYBLOB="08002600161700000a0006005050505050500000080035000000000005000800"], 0x40}, 0x1, 0x0, 0x0, 0x20040040}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0)
recvmsg$unix(r3, 0x0, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)

3.335378374s ago: executing program 2 (id=1594):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x200a}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}, 0x1, 0x0, 0x0, 0x500}, 0x0)

3.276001337s ago: executing program 2 (id=1595):
r0 = socket(0x2b, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x894b, 0x0)
socket(0x2, 0x3, 0xff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndpcmc(0x0, 0x80000000000542, 0x450000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
creat(0x0, 0xd931d3864d39dcca)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x3)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000)
syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0)
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000240)={&(0x7f0000000200)=[{0x7, 0x1000, 0x1, &(0x7f00000000c0)="ac"}], 0x1})

3.275303847s ago: executing program 4 (id=1596):
syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x600000, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0)

3.091791928s ago: executing program 5 (id=1597):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x1, 0xb, 0x9, 0x2, 0x4, "3bc9a3558fc50251a1a8a1000000ddff00", 0x3, 0xcb})

2.694032237s ago: executing program 4 (id=1598):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mbind(&(0x7f0000000000/0x1000)=nil, 0xffffffffffffe000, 0x0, &(0x7f0000000000), 0x1b2, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xfffdfffffffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc19, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0xffffffffffffff15, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x1, 0x10000, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8000000000, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]})

2.536926682s ago: executing program 4 (id=1599):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="ac", 0xfffd, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback={0xf803000000000000}, 0xc5f}, 0x1c)

2.435707226s ago: executing program 4 (id=1600):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r1=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000380)={r1}, &(0x7f0000000340)=0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x37, 0x6, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000909000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$igmp6(0xa, 0x3, 0x2)

2.233214074s ago: executing program 6 (id=1601):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r1=>r0, {<r2=>0xee00, 0xffffffffffffffff}}, './file0\x00'})
bind$packet(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320300000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r6 = getpid()
ptrace$peekuser(0x3, r6, 0xff)
syz_open_procfs(r6, &(0x7f0000000400)='net/nf_conntrack\x00')
r7 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x194d020, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000c0a010100000000000000000ae0ff050900020073797a31000000000900010073797a3100000000200003801c0000800c000180060001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000005ed5bd462af98778b75fdd5426c12d887374d311c1cd6187455ea70ed523a62289ec7e9b4615f5ae533e84e1f89a55d518b8bad8aa9d38bebb49168f1c0c079a2f8ed4369fe5097179bd46d2dd29ae251020b01912fcb2c462cf00ed6ed81d4cbf2ee857b1aedd123d05b80600000000000000ff0089a2901dcafcf2162f5f46d335b38528eccb0c90f5702e3e6dc9e7b9213116f0182e1afd411814df9d0686d9bf55b8e8d5137debf471667535888593be35be50c5641c", @ANYRES8=r2, @ANYRESHEX=r0, @ANYBLOB="008000003000000000000035db992b5ed86a760000e300b1ec3aed000000000000000000"], 0x48)

2.004391581s ago: executing program 5 (id=1602):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB='&\x00\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x3, 0x1}, &(0x7f0000000180)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r0, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0)

1.906205879s ago: executing program 5 (id=1603):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0)
setfsgid(0xee00)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf250800010000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
fchdir(0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000000)={{0x8, 0x3, 0x81, 0x3, 'syz0\x00', 0x5}, 0x3, 0x20000000, 0x8, r2, 0x4, 0x8, 'syz1\x00', &(0x7f0000000180)=[':#,\x00', ',[\a\x00\x00\x00\x00\x00\x00\x00&]]\x00', '\x00', ':#,\x00'], 0x17})
syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

823.6477ms ago: executing program 4 (id=1604):
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x20, 0x8000)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000001200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1030, 0x2c, 0x107, 0x70bd29, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x1014, 0x2, 0x0, 0x1, [@nested={0x1010, 0xd9, 0x0, 0x1, [@nested={0x100c, 0x8e, 0x0, 0x1, [@nested={0x1008, 0xe9, 0x0, 0x1, [@nested={0x1004, 0xa2, 0x0, 0x1, [@generic="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"]}]}]}]}]}]}, 0x1030}, 0x1, 0x0, 0x0, 0x8000}, 0xc010)

736.129688ms ago: executing program 4 (id=1605):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf250800010000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
fchdir(0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000000)={{0x8, 0x3, 0x81, 0x3, 'syz0\x00', 0x5}, 0x3, 0x20000000, 0x8, r2, 0x4, 0x8, 'syz1\x00', &(0x7f0000000180)=[':#,\x00', ',[\a\x00\x00\x00\x00\x00\x00\x00&]]\x00', '\x00', ':#,\x00'], 0x17})
syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

0s ago: executing program 2 (id=1606):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x3f00, 0x61, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

kernel console output (not intermixed with test programs):

00
[  341.338230][T10249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  341.338239][T10249] R13: 00007f38b15e6038 R14: 00007f38b15e5fa0 R15: 00007ffdc867ca68
[  341.338263][T10249]  </TASK>
[  341.339063][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  341.479238][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1189'.
[  341.645892][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'.
[  341.874016][ T5885] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  342.361790][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.372009][ T5885] usb 2-1: config 0 descriptor??
[  342.460742][T10267] comedi comedi3: comedi_test: 20263 microvolt, 100000 microsecond waveform attached
[  342.534671][T10269] nvme_fabrics: missing parameter 'transport=%s'
[  342.548155][T10269] nvme_fabrics: missing parameter 'nqn=%s'
[  342.577726][T10274] overlayfs: statfs failed on './file0'
[  342.918591][ T5885] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x2
[  343.301554][ T5885] plantronics 0003:047F:FFFF.000A: unexpected long global item
[  343.322955][ T5885] plantronics 0003:047F:FFFF.000A: parse failed
[  343.343216][ T5885] plantronics 0003:047F:FFFF.000A: probe with driver plantronics failed with error -22
[  343.370684][ T5885] usb 2-1: USB disconnect, device number 23
[  343.887456][T10295] loop6: detected capacity change from 0 to 524287999
[  343.896071][T10295] buffer_io_error: 6 callbacks suppressed
[  343.896097][T10295] Buffer I/O error on dev loop6, logical block 0, async page read
[  343.910031][T10295] Buffer I/O error on dev loop6, logical block 0, async page read
[  343.918194][T10295] Buffer I/O error on dev loop6, logical block 0, async page read
[  343.926354][T10295] Buffer I/O error on dev loop6, logical block 0, async page read
[  343.934515][T10295] Buffer I/O error on dev loop6, logical block 0, async page read
[  343.942696][T10295] Buffer I/O error on dev loop6, logical block 0, async page read
[  343.950935][T10295] Buffer I/O error on dev loop6, logical block 0, async page read
[  343.959582][T10295] Buffer I/O error on dev loop6, logical block 0, async page read
[  343.967878][T10295] ldm_validate_partition_table(): Disk read failed.
[  343.974650][T10295] Buffer I/O error on dev loop6, logical block 0, async page read
[  343.982830][T10295] Buffer I/O error on dev loop6, logical block 0, async page read
[  344.011709][T10295] Dev loop6: unable to read RDB block 0
[  344.018757][T10295]  loop6: unable to read partition table
[  344.025069][T10295] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  344.781876][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  344.781887][   T30] audit: type=1400 audit(1762605673.384:843): avc:  denied  { append } for  pid=10290 comm="syz.4.1200" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  345.874101][   T30] audit: type=1400 audit(1762605673.544:844): avc:  denied  { write } for  pid=10290 comm="syz.4.1200" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  345.924558][   T30] audit: type=1400 audit(1762605673.744:845): avc:  denied  { write } for  pid=10290 comm="syz.4.1200" name="tcp" dev="proc" ino=4026533152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  346.153293][T10288] lo speed is unknown, defaulting to 1000
[  347.673448][ T5878] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  347.997512][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  348.026458][ T5878] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  348.035670][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.047923][ T5878] usb 2-1: config 0 descriptor??
[  348.058441][ T5878] ttusbir 2-1:0.0: cannot find expected altsetting
[  348.183704][   T30] audit: type=1400 audit(1762605677.694:846): avc:  denied  { write } for  pid=10324 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  348.186541][T10326] tipc: Started in network mode
[  348.208313][T10326] tipc: Node identity 3aa071ac169, cluster identity 4711
[  348.216226][T10326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.228180][T10326] syzkaller0: entered promiscuous mode
[  348.233748][T10326] syzkaller0: entered allmulticast mode
[  348.255014][T10326] tipc: Resetting bearer <eth:syzkaller0>
[  348.265338][ T5892] usb 2-1: USB disconnect, device number 24
[  348.273110][T10324] tipc: Resetting bearer <eth:syzkaller0>
[  348.293119][T10324] tipc: Disabling bearer <eth:syzkaller0>
[  348.329354][   T30] audit: type=1400 audit(1762605677.834:847): avc:  denied  { create } for  pid=10328 comm="syz.4.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  348.350371][   T30] audit: type=1400 audit(1762605677.834:848): avc:  denied  { bind } for  pid=10328 comm="syz.4.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  348.373822][   T30] audit: type=1400 audit(1762605677.834:849): avc:  denied  { create } for  pid=10328 comm="syz.4.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  348.394076][   T30] audit: type=1400 audit(1762605677.834:850): avc:  denied  { write } for  pid=10328 comm="syz.4.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  348.418517][   T30] audit: type=1400 audit(1762605677.834:851): avc:  denied  { write } for  pid=10328 comm="syz.4.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  348.438059][ T5935] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  348.488056][   T30] audit: type=1400 audit(1762605677.994:852): avc:  denied  { read } for  pid=10334 comm="syz.2.1213" path="socket:[26938]" dev="sockfs" ino=26938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  348.632936][ T5935] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  348.657508][ T5935] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  348.660072][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1211'.
[  348.695461][ T2844] block nbd0: Possible stuck request ffff888026287000: control (read@0,1024B). Runtime 90 seconds
[  348.707814][ T2844] block nbd0: Possible stuck request ffff8880262871c0: control (read@1024,1024B). Runtime 90 seconds
[  348.720338][ T2844] block nbd0: Possible stuck request ffff888026287380: control (read@2048,1024B). Runtime 90 seconds
[  348.757118][ T2844] block nbd0: Possible stuck request ffff888026287540: control (read@3072,1024B). Runtime 90 seconds
[  348.893609][ T5935] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  348.912264][ T5935] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  348.921709][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  348.929858][ T5935] usb 6-1: Product: syz
[  348.934066][ T5935] usb 6-1: Manufacturer: syz
[  348.938653][ T5935] usb 6-1: SerialNumber: syz
[  349.133708][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  349.384461][ T5935] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  349.434504][T10341] lo speed is unknown, defaulting to 1000
[  349.572507][   T10] usb 5-1: device descriptor read/64, error -71
[  349.591103][ T5807] usb 6-1: USB disconnect, device number 2
[  349.599535][ T5807] usblp0: removed
[  350.239396][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  350.239408][   T30] audit: type=1400 audit(1762605679.744:866): avc:  denied  { create } for  pid=10351 comm="syz.2.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  350.277909][   T30] audit: type=1400 audit(1762605679.784:867): avc:  denied  { name_connect } for  pid=10351 comm="syz.2.1217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  350.358145][   T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  350.379100][   T30] audit: type=1400 audit(1762605679.874:868): avc:  denied  { listen } for  pid=10351 comm="syz.2.1217" lport=48656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  350.404083][   T30] audit: type=1400 audit(1762605679.904:869): avc:  denied  { accept } for  pid=10351 comm="syz.2.1217" lport=48656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  350.463431][   T30] audit: type=1400 audit(1762605679.944:870): avc:  denied  { bind } for  pid=10357 comm="syz.1.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  350.778351][T10360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.788704][T10360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.823466][   T10] usb 5-1: device descriptor read/64, error -71
[  350.871928][   T30] audit: type=1400 audit(1762605679.944:871): avc:  denied  { name_bind } for  pid=10357 comm="syz.1.1218" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  350.928214][   T30] audit: type=1400 audit(1762605679.944:872): avc:  denied  { node_bind } for  pid=10357 comm="syz.1.1218" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  350.950233][   T10] usb usb5-port1: attempt power cycle
[  351.039068][T10360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.049413][T10360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.139368][T10360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.149642][T10360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.221132][   T30] audit: type=1400 audit(1762605680.034:873): avc:  denied  { read write } for  pid=10359 comm="syz.1.1219" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  351.254876][   T30] audit: type=1400 audit(1762605680.034:874): avc:  denied  { open } for  pid=10359 comm="syz.1.1219" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  351.303162][T10360] bond0: (slave netdevsim0): Releasing backup interface
[  351.419746][   T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  351.470518][   T10] usb 5-1: device descriptor read/8, error -71
[  351.496936][   T30] audit: type=1400 audit(1762605680.574:875): avc:  denied  { bind } for  pid=10364 comm="syz.5.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  351.530392][T10360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.541036][T10360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.664278][ T8767] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  351.674715][ T8767] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  351.682881][ T8767] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  351.733448][ T8767] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  351.769700][ T8767] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  351.780993][ T8767] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  351.820967][ T8767] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  351.839414][ T8767] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  352.510832][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1223'.
[  352.544737][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1223'.
[  352.883926][T10388] rdma_rxe: rxe_newlink: failed to add veth1_to_team
[  353.133475][ T5892] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  353.344792][ T5892] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  353.354488][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.362475][ T5892] usb 6-1: Product: syz
[  353.390228][ T5892] usb 6-1: Manufacturer: syz
[  353.401413][ T5892] usb 6-1: SerialNumber: syz
[  353.417887][ T5892] usb 6-1: config 0 descriptor??
[  353.438088][ T5892] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  353.850630][ T5892] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  353.956786][ T5892] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  354.488997][T10398] netlink: 'syz.4.1228': attribute type 29 has an invalid length.
[  354.497006][T10398] netlink: 'syz.4.1228': attribute type 3 has an invalid length.
[  354.505083][T10398] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1228'.
[  355.405726][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  355.405741][   T30] audit: type=1400 audit(1762605684.914:883): avc:  denied  { remount } for  pid=10416 comm="syz.1.1234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  355.415013][T10419] openvswitch: netlink: Flow actions attr not present in new flow.
[  355.485728][T10421] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1236'.
[  355.696216][ T5892] usb 6-1: USB disconnect, device number 3
[  355.747195][T10433] FAULT_INJECTION: forcing a failure.
[  355.747195][T10433] name failslab, interval 1, probability 0, space 0, times 0
[  355.807735][   T30] audit: type=1400 audit(1762605685.304:884): avc:  denied  { write } for  pid=10422 comm="syz.1.1237" path="socket:[27239]" dev="sockfs" ino=27239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  355.843656][T10433] CPU: 1 UID: 0 PID: 10433 Comm: syz.5.1241 Not tainted syzkaller #0 PREEMPT(full) 
[  355.843680][T10433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  355.843691][T10433] Call Trace:
[  355.843697][T10433]  <TASK>
[  355.843704][T10433]  dump_stack_lvl+0x16c/0x1f0
[  355.843740][T10433]  should_fail_ex+0x512/0x640
[  355.843761][T10433]  ? __kmalloc_cache_noprof+0x5f/0x780
[  355.843788][T10433]  should_failslab+0xc2/0x120
[  355.843809][T10433]  __kmalloc_cache_noprof+0x72/0x780
[  355.843833][T10433]  ? hash_netportnet_create+0x36b/0x1250
[  355.843851][T10433]  ? find_held_lock+0x2b/0x80
[  355.843875][T10433]  ? hash_netportnet_create+0x36b/0x1250
[  355.843891][T10433]  hash_netportnet_create+0x36b/0x1250
[  355.843912][T10433]  ? __pfx_hash_netportnet_create+0x10/0x10
[  355.843931][T10433]  ip_set_create+0x7e4/0x14d0
[  355.843957][T10433]  ? __pfx_ip_set_create+0x10/0x10
[  355.844005][T10433]  nfnetlink_rcv_msg+0x9fc/0x1200
[  355.844034][T10433]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  355.844057][T10433]  ? find_held_lock+0x2b/0x80
[  355.844100][T10433]  ? avc_has_perm_noaudit+0x149/0x3b0
[  355.844132][T10433]  netlink_rcv_skb+0x158/0x420
[  355.844157][T10433]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  355.844177][T10433]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  355.844214][T10433]  ? ns_capable+0xd7/0x110
[  355.844237][T10433]  nfnetlink_rcv+0x1b3/0x430
[  355.844255][T10433]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  355.844281][T10433]  netlink_unicast+0x5aa/0x870
[  355.844310][T10433]  ? __pfx_netlink_unicast+0x10/0x10
[  355.844347][T10433]  netlink_sendmsg+0x8c8/0xdd0
[  355.844376][T10433]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.844411][T10433]  ____sys_sendmsg+0xa98/0xc70
[  355.844429][T10433]  ? copy_msghdr_from_user+0x10a/0x160
[  355.844451][T10433]  ? __pfx_____sys_sendmsg+0x10/0x10
[  355.844479][T10433]  ___sys_sendmsg+0x134/0x1d0
[  355.844503][T10433]  ? __pfx____sys_sendmsg+0x10/0x10
[  355.844523][T10433]  ? __lock_acquire+0x622/0x1c90
[  355.844582][T10433]  __sys_sendmsg+0x16d/0x220
[  355.844605][T10433]  ? __pfx___sys_sendmsg+0x10/0x10
[  355.844645][T10433]  do_syscall_64+0xcd/0xfa0
[  355.844663][T10433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.844680][T10433] RIP: 0033:0x7f8d93b8f6c9
[  355.844694][T10433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.844710][T10433] RSP: 002b:00007f8d94aff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.844731][T10433] RAX: ffffffffffffffda RBX: 00007f8d93de5fa0 RCX: 00007f8d93b8f6c9
[  355.844741][T10433] RDX: 0000000000008042 RSI: 0000200000000240 RDI: 0000000000000003
[  355.844752][T10433] RBP: 00007f8d94aff090 R08: 0000000000000000 R09: 0000000000000000
[  355.844761][T10433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.844771][T10433] R13: 00007f8d93de6038 R14: 00007f8d93de5fa0 R15: 00007ffed94b8088
[  355.844796][T10433]  </TASK>
[  356.183501][T10436] x_tables: ip6_tables: mh match: only valid for protocol 135
[  356.199855][T10436] xt_nfacct: accounting object `syz1' does not exist
[  356.258135][   T30] audit: type=1400 audit(1762605685.304:885): avc:  denied  { connect } for  pid=10422 comm="syz.1.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  356.362768][   T30] audit: type=1400 audit(1762605685.354:886): avc:  denied  { kexec_image_load } for  pid=10424 comm="syz.4.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  356.382842][   T30] audit: type=1400 audit(1762605685.684:887): avc:  denied  { write } for  pid=10428 comm="syz.2.1240" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  356.406193][   T30] audit: type=1400 audit(1762605685.784:888): avc:  denied  { create } for  pid=10424 comm="syz.4.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  356.437370][   T30] audit: type=1400 audit(1762605685.794:889): avc:  denied  { ioctl } for  pid=10424 comm="syz.4.1238" path="socket:[27706]" dev="sockfs" ino=27706 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  356.475656][   T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  356.533488][   T30] audit: type=1400 audit(1762605685.824:890): avc:  denied  { sys_module } for  pid=10424 comm="syz.4.1238" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  356.624212][T10448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1244'.
[  356.710852][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  356.715068][T10452] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  356.824205][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[  356.859638][   T30] audit: type=1400 audit(1762605686.354:891): avc:  denied  { create } for  pid=10447 comm="syz.1.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  356.926823][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  356.933563][   T30] audit: type=1400 audit(1762605686.354:892): avc:  denied  { write } for  pid=10447 comm="syz.1.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  356.976096][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  357.089039][T10460] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1245'.
[  357.651489][T10459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1247'.
[  357.734126][   T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  357.743141][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.769788][   T10] usb 3-1: Product: syz
[  357.781942][T10465] netlink: 'syz.1.1248': attribute type 1 has an invalid length.
[  357.789862][   T10] usb 3-1: Manufacturer: syz
[  357.800692][   T10] usb 3-1: SerialNumber: syz
[  357.809387][   T10] usb 3-1: config 0 descriptor??
[  357.817660][T10436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  357.826293][   T10] usb 3-1: ucan: probing device on interface #0
[  357.843587][   T10] usb 3-1: ucan: invalid endpoint configuration
[  357.856795][   T10] usb 3-1: ucan: probe failed; try to update the device firmware
[  357.866583][T10465] 8021q: adding VLAN 0 to HW filter on device bond1
[  358.076065][T10465] dummy0: entered promiscuous mode
[  358.101045][T10465] bond1: (slave dummy0): making interface the new active one
[  358.130825][T10465] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  358.159040][ T5824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  358.168412][ T5824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  358.176568][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  358.184509][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  358.193072][ T5824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  358.672913][T10468] lo speed is unknown, defaulting to 1000
[  358.817090][T10476] syzkaller1: entered promiscuous mode
[  358.822650][T10476] syzkaller1: entered allmulticast mode
[  359.152367][ T5807] usb 3-1: USB disconnect, device number 18
[  359.871579][T10490] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.879210][T10490] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.928511][T10490] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  359.940547][T10490] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  360.002795][T10468] chnl_net:caif_netlink_parms(): no params data found
[  360.012562][ T3562] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.083513][ T5807] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  360.101414][ T3562] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.120029][ T3562] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.191110][ T3562] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.254101][ T5807] usb 3-1: Using ep0 maxpacket: 8
[  360.256135][ T5812] Bluetooth: hci6: command tx timeout
[  360.265432][ T5807] usb 3-1: too many configurations: 65, using maximum allowed: 8
[  360.274996][T10468] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.282187][T10468] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.289360][T10468] bridge_slave_0: entered allmulticast mode
[  360.296685][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.304171][T10496] netlink: 'syz.1.1255': attribute type 10 has an invalid length.
[  360.307904][T10468] bridge_slave_0: entered promiscuous mode
[  360.320454][ T5807] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  360.331608][T10468] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.343867][T10468] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.351247][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.361297][T10468] bridge_slave_1: entered allmulticast mode
[  360.362506][T10468] bridge_slave_1: entered promiscuous mode
[  360.368307][ T5807] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  360.383339][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.403163][ T5807] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  360.414732][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.433460][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  360.435558][ T5807] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  360.452138][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.453704][T10506] openvswitch: netlink: Flow actions attr not present in new flow.
[  360.464910][T10468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.483702][ T5807] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  360.487554][T10468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.502343][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.513004][ T5807] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  360.524611][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.543773][ T5807] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  360.556010][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.566643][ T5807] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  360.575781][ T5807] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c0e, bcdDevice=90.00
[  360.584941][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.594984][ T5807] usb 3-1: config 0 descriptor??
[  360.595032][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.614348][T10468] team0: Port device team_slave_0 added
[  360.621205][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.632239][T10468] team0: Port device team_slave_1 added
[  360.637989][   T24] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  360.648627][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.659299][   T24] usb 6-1: config 0 descriptor??
[  360.670823][T10468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.677960][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  360.704005][T10468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  360.715581][T10468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  360.722509][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  360.748666][T10468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  360.785024][T10468] hsr_slave_0: entered promiscuous mode
[  360.791154][T10468] hsr_slave_1: entered promiscuous mode
[  360.797235][T10468] debugfs: 'hsr0' already exists in 'hsr'
[  360.802949][T10468] Cannot create hsr debugfs directory
[  360.803447][ T5935] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  360.949635][T10468] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  360.959326][T10468] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  360.968599][T10468] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  360.982670][T10468] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  360.991484][ T5935] usb 5-1: unable to get BOS descriptor or descriptor too short
[  361.007120][ T5935] usb 5-1: config 0 has an invalid interface number: 23 but max is 0
[  361.027960][ T5935] usb 5-1: config 0 has no interface number 0
[  361.081794][ T5935] usb 5-1: config 0 interface 23 has no altsetting 0
[  361.100231][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  361.100243][   T30] audit: type=1400 audit(1762605690.604:907): avc:  denied  { map } for  pid=10510 comm="syz.1.1259" path="socket:[27548]" dev="sockfs" ino=27548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  361.146202][ T5935] usb 5-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice= d.09
[  361.163492][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.173154][ T5935] usb 5-1: Product: syz
[  361.178429][ T5935] usb 5-1: Manufacturer: syz
[  361.183108][ T5935] usb 5-1: SerialNumber: syz
[  361.189453][ T5935] usb 5-1: config 0 descriptor??
[  361.345574][T10501] sctp: [Deprecated]: syz.5.1256 (pid 10501) Use of struct sctp_assoc_value in delayed_ack socket option.
[  361.345574][T10501] Use struct sctp_sack_info instead
[  361.362266][   T30] audit: type=1400 audit(1762605690.854:908): avc:  denied  { getopt } for  pid=10500 comm="syz.5.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  361.396671][T10468] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.460751][   T30] audit: type=1400 audit(1762605690.904:909): avc:  denied  { name_bind } for  pid=10507 comm="syz.4.1258" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  361.463030][T10468] 8021q: adding VLAN 0 to HW filter on device team0
[  361.493901][ T5935] safe_serial 5-1:0.23: safe_serial converter detected
[  361.506292][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.511624][ T5935] usb 5-1: safe_serial converter now attached to ttyUSB0
[  361.513408][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.522397][ T5935] usb 5-1: USB disconnect, device number 24
[  361.538028][ T5935] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0
[  361.547367][ T5935] safe_serial 5-1:0.23: device disconnected
[  361.558803][ T8767] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.565853][ T8767] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.586768][   T24] uclogic 0003:256C:006D.000B: failed retrieving Huion firmware version: -71
[  361.595734][   T24] uclogic 0003:256C:006D.000B: failed probing parameters: -71
[  361.603253][   T24] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71
[  361.619092][   T24] usb 6-1: USB disconnect, device number 4
[  361.896709][T10468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.076232][T10468] veth0_vlan: entered promiscuous mode
[  362.099754][T10468] veth1_vlan: entered promiscuous mode
[  362.131224][T10468] veth0_macvtap: entered promiscuous mode
[  362.141942][T10468] veth1_macvtap: entered promiscuous mode
[  362.173481][   T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  362.275250][T10468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.288726][T10468] batman_adv: batadv0: Interface activated: batadv_slave_1
[  362.303520][ T4861] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  362.347836][ T5812] Bluetooth: hci6: command tx timeout
[  362.437518][   T30] audit: type=1400 audit(1762605691.914:910): avc:  denied  { execute_no_trans } for  pid=10536 comm="syz.5.1262" path="/37/file0" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  362.779662][ T5935] usb 3-1: USB disconnect, device number 19
[  362.790004][ T4861] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  362.799784][ T4861] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  362.819304][ T4861] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  362.856694][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  362.879551][   T30] audit: type=1400 audit(1762605692.384:911): avc:  denied  { connect } for  pid=10545 comm="syz.2.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  362.881422][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  362.937491][ T8767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.948120][   T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  362.948879][   T30] audit: type=1400 audit(1762605692.414:912): avc:  denied  { ioctl } for  pid=10545 comm="syz.2.1264" path="socket:[28124]" dev="sockfs" ino=28124 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  362.959897][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  362.990181][   T24] usb 2-1: SerialNumber: syz
[  362.996669][ T8767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.084651][T10549] overlayfs: failed to resolve './bus': -2
[  363.113083][   T30] audit: type=1400 audit(1762605692.414:913): avc:  denied  { write } for  pid=10545 comm="syz.2.1264" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  363.176237][T10551] fuse: Bad value for 'group_id'
[  363.181200][T10551] fuse: Bad value for 'group_id'
[  363.188813][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1265'.
[  363.197863][T10551] openvswitch: netlink: Flow actions attr not present in new flow.
[  363.561638][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.686612][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.713454][   T30] audit: type=1400 audit(1762605693.214:914): avc:  denied  { mounton } for  pid=10468 comm="syz-executor" path="/root/syzkaller.RW4QrK/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  363.771380][   T24] usb 2-1: 0:2 : does not exist
[  363.801548][   T30] audit: type=1400 audit(1762605693.214:915): avc:  denied  { mount } for  pid=10468 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  363.833609][   T24] usb 2-1: USB disconnect, device number 25
[  363.861574][   T30] audit: type=1400 audit(1762605693.214:916): avc:  denied  { mounton } for  pid=10468 comm="syz-executor" path="/root/syzkaller.RW4QrK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  363.913452][ T1205] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  364.082910][ T1205] usb 6-1: Using ep0 maxpacket: 32
[  364.090445][ T1205] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.101787][ T1205] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 8
[  364.126524][ T1205] usb 6-1: config 1 interface 0 has no altsetting 0
[  364.158349][ T1205] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  364.169077][ T1205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.197346][T10567] netlink: 'syz.6.1269': attribute type 1 has an invalid length.
[  364.239189][ T1205] usb 6-1: Product: syz
[  364.413893][ T5812] Bluetooth: hci6: command tx timeout
[  364.456026][ T1205] usb 6-1: Manufacturer: ࡃ
[  364.460627][ T1205] usb 6-1: SerialNumber: syz
[  364.517834][T10552] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  364.692908][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'.
[  364.701860][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1276'.
[  364.917104][T10581] batman_adv: batadv0: Adding interface: gretap1
[  365.095854][T10581] batman_adv: batadv0: Interface activated: gretap1
[  365.474905][ T1205] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  365.487371][ T1205] usb 6-1: USB disconnect, device number 5
[  365.861755][T10603] FAULT_INJECTION: forcing a failure.
[  365.861755][T10603] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  365.921053][T10603] CPU: 0 UID: 0 PID: 10603 Comm: syz.4.1284 Not tainted syzkaller #0 PREEMPT(full) 
[  365.921077][T10603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  365.921087][T10603] Call Trace:
[  365.921093][T10603]  <TASK>
[  365.921100][T10603]  dump_stack_lvl+0x16c/0x1f0
[  365.921133][T10603]  should_fail_ex+0x512/0x640
[  365.921158][T10603]  should_fail_alloc_page+0xe7/0x130
[  365.921181][T10603]  prepare_alloc_pages+0x3c2/0x610
[  365.921201][T10603]  ? rcu_is_watching+0x12/0xc0
[  365.921227][T10603]  __alloc_frozen_pages_noprof+0x18b/0x2470
[  365.921267][T10603]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  365.921304][T10603]  ? rcu_is_watching+0x12/0xc0
[  365.921325][T10603]  ? trace_kmalloc+0x2b/0xd0
[  365.921341][T10603]  ? __kmalloc_node_track_caller_noprof+0x362/0x8a0
[  365.921359][T10603]  ? __alloc_skb+0x166/0x380
[  365.921379][T10603]  ? rcu_is_watching+0x1/0xc0
[  365.921399][T10603]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  365.921424][T10603]  ? policy_nodemask+0xea/0x4e0
[  365.921447][T10603]  alloc_pages_mpol+0x1fb/0x550
[  365.921468][T10603]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  365.921486][T10603]  ? __pfx___alloc_skb+0x10/0x10
[  365.921513][T10603]  alloc_pages_noprof+0x131/0x390
[  365.921534][T10603]  alloc_skb_with_frags+0x24a/0x860
[  365.921566][T10603]  sock_alloc_send_pskb+0x7f9/0x980
[  365.921594][T10603]  ? _copy_from_iter+0x15d/0x1720
[  365.921622][T10603]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  365.921644][T10603]  ? _parse_integer_limit+0x17f/0x1d0
[  365.921675][T10603]  ? iov_iter_advance+0x7d/0x6c0
[  365.921699][T10603]  tun_get_user+0x7e2/0x3cc0
[  365.921735][T10603]  ? __pfx_tun_get_user+0x10/0x10
[  365.921760][T10603]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  365.921791][T10603]  ? find_held_lock+0x2b/0x80
[  365.921814][T10603]  ? tun_get+0x191/0x370
[  365.921841][T10603]  tun_chr_write_iter+0xdc/0x210
[  365.921867][T10603]  vfs_write+0x7d3/0x11d0
[  365.921885][T10603]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  365.921912][T10603]  ? __pfx_vfs_write+0x10/0x10
[  365.921927][T10603]  ? find_held_lock+0x2b/0x80
[  365.921964][T10603]  ksys_write+0x12a/0x250
[  365.921980][T10603]  ? __pfx_ksys_write+0x10/0x10
[  365.922004][T10603]  do_syscall_64+0xcd/0xfa0
[  365.922022][T10603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.922039][T10603] RIP: 0033:0x7f199a18f6c9
[  365.922054][T10603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  365.922069][T10603] RSP: 002b:00007f199afe0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  365.922085][T10603] RAX: ffffffffffffffda RBX: 00007f199a3e5fa0 RCX: 00007f199a18f6c9
[  365.922096][T10603] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003
[  365.922107][T10603] RBP: 00007f199afe0090 R08: 0000000000000000 R09: 0000000000000000
[  365.922116][T10603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.922126][T10603] R13: 00007f199a3e6038 R14: 00007f199a3e5fa0 R15: 00007ffda1643a48
[  365.922151][T10603]  </TASK>
[  366.306474][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  366.306518][   T30] audit: type=1400 audit(1762605695.814:922): avc:  denied  { ioctl } for  pid=10610 comm="syz.5.1287" path="socket:[28952]" dev="sockfs" ino=28952 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  366.397148][   T30] audit: type=1400 audit(1762605695.814:923): avc:  denied  { read } for  pid=10610 comm="syz.5.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  366.476132][T10620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1288'.
[  366.493653][ T5812] Bluetooth: hci6: command tx timeout
[  366.531182][T10618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1288'.
[  366.561025][   T30] audit: type=1326 audit(1762605696.064:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  366.584378][    C1] vkms_vblank_simulate: vblank timer overrun
[  366.633209][   T30] audit: type=1326 audit(1762605696.104:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  366.716140][   T30] audit: type=1326 audit(1762605696.114:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  366.741793][   T30] audit: type=1326 audit(1762605696.114:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  366.765157][    C1] vkms_vblank_simulate: vblank timer overrun
[  366.772245][   T30] audit: type=1326 audit(1762605696.114:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  366.795601][    C1] vkms_vblank_simulate: vblank timer overrun
[  366.805806][   T30] audit: type=1326 audit(1762605696.124:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  366.829153][    C1] vkms_vblank_simulate: vblank timer overrun
[  366.863444][ T5885] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  366.987204][   T30] audit: type=1326 audit(1762605696.124:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  367.011466][   T30] audit: type=1326 audit(1762605696.124:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  367.046970][ T5885] usb 7-1: Using ep0 maxpacket: 8
[  367.059800][ T5885] usb 7-1: unable to get BOS descriptor or descriptor too short
[  367.528864][   T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  367.541400][ T5885] usb 7-1: config 7 has an invalid interface number: 67 but max is 0
[  367.551818][ T5885] usb 7-1: config 7 has no interface number 0
[  367.566939][ T5885] usb 7-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  367.576517][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.585690][ T5885] usb 7-1: Product: syz
[  367.589905][ T5885] usb 7-1: Manufacturer: syz
[  367.594590][ T5885] usb 7-1: SerialNumber: syz
[  367.683448][   T10] usb 5-1: Using ep0 maxpacket: 8
[  367.772378][   T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  367.830295][   T10] usb 5-1: config 179 has no interface number 0
[  367.861755][T10645] vlan2: entered promiscuous mode
[  367.866971][T10645] bridge0: entered promiscuous mode
[  367.873719][T10645] vlan2: entered allmulticast mode
[  367.879198][T10645] bridge0: entered allmulticast mode
[  367.920830][ T5885] usbhid 7-1:7.67: couldn't find an input interrupt endpoint
[  367.929800][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  367.969967][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  367.993755][ T5885] usb 7-1: USB disconnect, device number 2
[  368.018098][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  368.064992][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  368.083453][   T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  368.144335][   T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  368.155316][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.188504][T10637] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  368.213434][T10654] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  368.223475][ T5935] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  368.429181][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short
[  368.435589][ T5885] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input12
[  368.442170][ T5935] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  368.587018][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'.
[  368.596089][T10656] bridge_slave_1: left allmulticast mode
[  368.601827][T10656] bridge_slave_1: left promiscuous mode
[  368.608050][T10656] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.629901][ T5885] usb 5-1: USB disconnect, device number 25
[  368.635816][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  368.635841][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  368.677593][ T5935] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  368.753795][ T5935] usb 3-1: config 1 interface 0 has no altsetting 1
[  368.762678][ T5935] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  368.772893][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.781051][ T5935] usb 3-1: Product: syz
[  368.798462][ T5935] usb 3-1: Manufacturer: syz
[  368.802326][T10656] bridge_slave_0: left allmulticast mode
[  368.809467][T10656] bridge_slave_0: left promiscuous mode
[  368.812724][ T5935] usb 3-1: SerialNumber: syz
[  368.828019][ T5935] smsusb:smsusb_probe: board id=8, interface number 0
[  368.865507][T10656] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.105178][ T5935] smsusb:smsusb_probe: Device initialized with return code -19
[  369.564080][T10662] bridge_slave_0: left allmulticast mode
[  369.603432][T10662] bridge_slave_0: left promiscuous mode
[  369.609279][T10662] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.616914][ T5935] usb 3-1: USB disconnect, device number 20
[  369.683847][T10662] bridge_slave_1: left allmulticast mode
[  369.692158][T10662] bridge_slave_1: left promiscuous mode
[  369.719334][T10662] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.850808][T10662] bond0: (slave bond_slave_0): Releasing backup interface
[  369.866187][T10662] bond0: (slave bond_slave_1): Releasing backup interface
[  369.877609][T10662] team0: Port device team_slave_0 removed
[  369.886633][T10662] team0: Port device team_slave_1 removed
[  369.892703][T10662] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.900430][T10662] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.908183][T10662] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  370.707919][T10687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1307'.
[  370.761837][T10686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1307'.
[  370.853449][   T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  371.044062][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  371.120886][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  371.191685][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  371.233178][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  371.270072][   T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  371.358622][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.385945][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  371.385956][   T30] audit: type=1400 audit(1762605700.894:950): avc:  denied  { mount } for  pid=10701 comm="syz.6.1313" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  371.414148][    C1] vkms_vblank_simulate: vblank timer overrun
[  371.443963][   T24] usb 3-1: Product: syz
[  371.448148][   T24] usb 3-1: Manufacturer: syz
[  371.452738][   T24] usb 3-1: SerialNumber: syz
[  371.471660][   T24] usb 3-1: config 0 descriptor??
[  371.476897][   T30] audit: type=1400 audit(1762605700.924:951): avc:  denied  { sys_admin } for  pid=10701 comm="syz.6.1313" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  371.497810][    C1] vkms_vblank_simulate: vblank timer overrun
[  371.524897][   T30] audit: type=1400 audit(1762605701.034:952): avc:  denied  { create } for  pid=10710 comm="syz.4.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  371.545139][    C1] vkms_vblank_simulate: vblank timer overrun
[  371.633429][ T5807] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  371.745352][   T24] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  371.814698][ T5807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.124597][T10721] rdma_rxe: rxe_newlink: failed to add veth1_to_team
[  372.139322][ T5807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  372.149143][ T5807] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  372.418768][   T30] audit: type=1400 audit(1762605701.924:953): avc:  denied  { create } for  pid=10679 comm="syz.2.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  372.444892][ T5807] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  372.454108][ T5807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.463345][   T30] audit: type=1400 audit(1762605701.954:954): avc:  denied  { write } for  pid=10679 comm="syz.2.1306" path="socket:[29162]" dev="sockfs" ino=29162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  372.472913][ T5807] usb 6-1: config 0 descriptor??
[  372.758771][ T5885] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  372.932505][ T5885] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  372.943785][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.951815][ T5885] usb 2-1: Product: syz
[  373.138394][ T5885] usb 2-1: Manufacturer: syz
[  373.163650][ T5885] usb 2-1: SerialNumber: syz
[  373.267135][ T5807] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  373.280170][ T5885] usb 2-1: config 0 descriptor??
[  373.323110][ T5885] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  373.545086][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.557546][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.373126][   T10] usb 3-1: USB disconnect, device number 21
[  374.400790][ T5885] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  374.403949][ T5935] usb 6-1: USB disconnect, device number 6
[  374.419622][ T5885] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  374.915705][ T5935] usb 2-1: USB disconnect, device number 26
[  375.154398][T10749] rdma_rxe: rxe_newlink: failed to add veth1_to_team
[  375.781526][T10751] FAULT_INJECTION: forcing a failure.
[  375.781526][T10751] name failslab, interval 1, probability 0, space 0, times 0
[  375.863474][T10751] CPU: 1 UID: 0 PID: 10751 Comm: syz.2.1324 Not tainted syzkaller #0 PREEMPT(full) 
[  375.863499][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  375.863509][T10751] Call Trace:
[  375.863515][T10751]  <TASK>
[  375.863522][T10751]  dump_stack_lvl+0x16c/0x1f0
[  375.863554][T10751]  should_fail_ex+0x512/0x640
[  375.863573][T10751]  ? __kmalloc_noprof+0xca/0x880
[  375.863599][T10751]  should_failslab+0xc2/0x120
[  375.863620][T10751]  __kmalloc_noprof+0xdd/0x880
[  375.863642][T10751]  ? rds_sendmsg+0x1ada/0x31f0
[  375.863659][T10751]  ? rds_rdma_extra_size+0xab/0x380
[  375.863685][T10751]  ? rds_rdma_extra_size+0xab/0x380
[  375.863706][T10751]  ? krealloc_node_align_noprof+0x215/0x470
[  375.863721][T10751]  rds_rdma_extra_size+0xab/0x380
[  375.863747][T10751]  rds_sendmsg+0x19e4/0x31f0
[  375.863773][T10751]  ? __pfx_rds_sendmsg+0x10/0x10
[  375.863791][T10751]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[  375.863819][T10751]  ? ____sys_sendmsg+0xa98/0xc70
[  375.863832][T10751]  ____sys_sendmsg+0xa98/0xc70
[  375.863846][T10751]  ? __pfx_____sys_sendmsg+0x10/0x10
[  375.863868][T10751]  ___sys_sendmsg+0x134/0x1d0
[  375.863886][T10751]  ? __pfx____sys_sendmsg+0x10/0x10
[  375.863901][T10751]  ? __lock_acquire+0x622/0x1c90
[  375.863947][T10751]  __sys_sendmsg+0x16d/0x220
[  375.863965][T10751]  ? __pfx___sys_sendmsg+0x10/0x10
[  375.863995][T10751]  do_syscall_64+0xcd/0xfa0
[  375.864008][T10751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.864022][T10751] RIP: 0033:0x7f38b138f6c9
[  375.864033][T10751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.864047][T10751] RSP: 002b:00007f38b217a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  375.864061][T10751] RAX: ffffffffffffffda RBX: 00007f38b15e5fa0 RCX: 00007f38b138f6c9
[  375.864069][T10751] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003
[  375.864078][T10751] RBP: 00007f38b217a090 R08: 0000000000000000 R09: 0000000000000000
[  375.864086][T10751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.864094][T10751] R13: 00007f38b15e6038 R14: 00007f38b15e5fa0 R15: 00007ffdc867ca68
[  375.864114][T10751]  </TASK>
[  376.253660][ T5935] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  376.283407][   T30] audit: type=1400 audit(1762605705.784:955): avc:  denied  { setopt } for  pid=10752 comm="syz.2.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  376.306189][T10753] sd 0:0:1:0: device reset
[  376.346536][   T30] audit: type=1400 audit(1762605705.814:956): avc:  denied  { read } for  pid=10752 comm="syz.2.1326" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  376.369974][    C0] vkms_vblank_simulate: vblank timer overrun
[  376.411470][   T30] audit: type=1400 audit(1762605705.914:957): avc:  denied  { bind } for  pid=10754 comm="syz.4.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  376.432005][ T5935] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  376.484224][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.492300][ T5935] usb 2-1: Product: syz
[  376.513783][ T5935] usb 2-1: Manufacturer: syz
[  376.524047][ T5935] usb 2-1: SerialNumber: syz
[  376.551305][ T5935] usb 2-1: config 0 descriptor??
[  376.565623][ T5935] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  376.569163][T10765] overlay: Unknown parameter 'default_permissions:/'
[  376.625494][ T5935] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  376.645631][   T30] audit: type=1400 audit(1762605706.074:958): avc:  denied  { bind } for  pid=10754 comm="syz.4.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  376.647122][ T5935] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  376.906940][T10756] kernel read not supported for file /ns¿áÈEà€r‘7kjœLÎZ™øQ%#-ÓÒèÜáýÞïò§Ò«—Âe'ü… (pid: 10756 comm: syz.4.1328)
[  376.928706][   T30] audit: type=1800 audit(1762605706.434:959): pid=10756 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1328" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="mqueue" ino=29707 res=0 errno=0
[  377.900397][   T30] audit: type=1400 audit(1762605707.164:960): avc:  denied  { setopt } for  pid=10788 comm="syz.2.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  377.981298][ T5935] usb 2-1: USB disconnect, device number 27
[  378.096915][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  378.103202][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  378.586986][T10787] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  378.593974][   T30] audit: type=1400 audit(1762605707.174:961): avc:  denied  { bind } for  pid=10788 comm="syz.2.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  378.627642][T10795] binder: 10784:10795 ioctl 4018620d 0 returned -22
[  378.725801][T10787] VFS: Can't find a romfs filesystem on dev nullb0.
[  378.725801][T10787] 
[  378.757337][   T30] audit: type=1400 audit(1762605707.184:962): avc:  denied  { setopt } for  pid=10788 comm="syz.2.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  378.784723][ T2844] block nbd0: Possible stuck request ffff888026287000: control (read@0,1024B). Runtime 120 seconds
[  378.796919][ T2844] block nbd0: Possible stuck request ffff8880262871c0: control (read@1024,1024B). Runtime 120 seconds
[  378.808117][ T2844] block nbd0: Possible stuck request ffff888026287380: control (read@2048,1024B). Runtime 120 seconds
[  378.893726][ T2844] block nbd0: Possible stuck request ffff888026287540: control (read@3072,1024B). Runtime 120 seconds
[  378.928457][T10797] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  378.935182][T10797] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  378.960802][T10797] vhci_hcd vhci_hcd.0: Device attached
[  379.036029][T10800] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14)
[  379.040777][T10785] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  379.042618][T10800] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  379.062418][T10805] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(17)
[  379.069002][T10805] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  379.087078][T10805] vhci_hcd vhci_hcd.0: Device attached
[  379.113521][T10800] vhci_hcd vhci_hcd.0: Device attached
[  379.193507][ T5885] vhci_hcd: vhci_device speed not set
[  379.209227][T10808] vhci_hcd: connection closed
[  379.210779][T10802] vhci_hcd: connection closed
[  379.217185][T10801] vhci_hcd: connection closed
[  379.222306][T10815] xt_NFQUEUE: number of total queues is 0
[  379.236074][   T12] vhci_hcd: stop threads
[  379.240679][   T12] vhci_hcd: release socket
[  379.245709][   T12] vhci_hcd: disconnect device
[  379.261629][   T12] vhci_hcd: stop threads
[  379.266023][ T5885] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  379.289787][T10804] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  379.289796][   T12] vhci_hcd: release socket
[  379.548529][   T12] vhci_hcd: disconnect device
[  379.572716][   T12] vhci_hcd: stop threads
[  379.607212][   T12] vhci_hcd: release socket
[  379.625938][   T12] vhci_hcd: disconnect device
[  379.636707][   T30] audit: type=1326 audit(1762605709.144:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  379.722344][   T30] audit: type=1326 audit(1762605709.164:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  379.837219][   T30] audit: type=1326 audit(1762605709.184:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38b13915e7 code=0x7ffc0000
[  379.886974][   T30] audit: type=1326 audit(1762605709.184:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f38b139155c code=0x7ffc0000
[  379.916152][T10826] FAULT_INJECTION: forcing a failure.
[  379.916152][T10826] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  379.942994][T10826] CPU: 1 UID: 0 PID: 10826 Comm: syz.6.1342 Not tainted syzkaller #0 PREEMPT(full) 
[  379.943018][T10826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  379.943027][T10826] Call Trace:
[  379.943033][T10826]  <TASK>
[  379.943039][T10826]  dump_stack_lvl+0x16c/0x1f0
[  379.943060][T10826]  should_fail_ex+0x512/0x640
[  379.943074][T10826]  _copy_from_iter+0x29f/0x1720
[  379.943089][T10826]  ? __alloc_skb+0x200/0x380
[  379.943103][T10826]  ? __pfx__copy_from_iter+0x10/0x10
[  379.943115][T10826]  ? netlink_autobind.isra.0+0x158/0x370
[  379.943136][T10826]  netlink_sendmsg+0x820/0xdd0
[  379.943153][T10826]  ? __pfx_netlink_sendmsg+0x10/0x10
[  379.943173][T10826]  ____sys_sendmsg+0xa98/0xc70
[  379.943183][T10826]  ? copy_msghdr_from_user+0x10a/0x160
[  379.943197][T10826]  ? __pfx_____sys_sendmsg+0x10/0x10
[  379.943213][T10826]  ___sys_sendmsg+0x134/0x1d0
[  379.943227][T10826]  ? __pfx____sys_sendmsg+0x10/0x10
[  379.943239][T10826]  ? __lock_acquire+0x622/0x1c90
[  379.943277][T10826]  __sys_sendmsg+0x16d/0x220
[  379.943291][T10826]  ? __pfx___sys_sendmsg+0x10/0x10
[  379.943313][T10826]  do_syscall_64+0xcd/0xfa0
[  379.943323][T10826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.943334][T10826] RIP: 0033:0x7f523718f6c9
[  379.943343][T10826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  379.943353][T10826] RSP: 002b:00007f5237f68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  379.943368][T10826] RAX: ffffffffffffffda RBX: 00007f52373e5fa0 RCX: 00007f523718f6c9
[  379.943378][T10826] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004
[  379.943389][T10826] RBP: 00007f5237f68090 R08: 0000000000000000 R09: 0000000000000000
[  379.943399][T10826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  379.943409][T10826] R13: 00007f52373e6038 R14: 00007f52373e5fa0 R15: 00007ffe34429f68
[  379.943434][T10826]  </TASK>
[  380.105127][ T5807] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  380.563575][ T5807] usb 3-1: Using ep0 maxpacket: 16
[  380.570869][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  380.586443][ T5807] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  380.607465][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.621213][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1347'.
[  380.638896][ T5807] usb 3-1: Product: syz
[  380.650777][ T5807] usb 3-1: Manufacturer: syz
[  380.667995][ T5807] usb 3-1: SerialNumber: syz
[  380.671039][T10838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1347'.
[  380.682345][ T5807] usb 3-1: config 0 descriptor??
[  380.750018][ T5807] hub 3-1:0.0: bad descriptor, ignoring hub
[  380.846691][ T5807] hub 3-1:0.0: probe with driver hub failed with error -5
[  381.039203][ T5807] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14
[  381.088697][ T5807] input: failed to attach handler mousedev to device input14, error: -5
[  381.424912][   T30] kauditd_printk_skb: 72 callbacks suppressed
[  381.424927][   T30] audit: type=1400 audit(1762605710.934:1039): avc:  denied  { call } for  pid=10854 comm="syz.1.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  381.523315][ T5807] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  381.563476][   T30] audit: type=1400 audit(1762605710.934:1040): avc:  denied  { transfer } for  pid=10854 comm="syz.1.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  381.672783][   T30] audit: type=1326 audit(1762605711.084:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  381.687502][ T5807] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  381.729700][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.749960][ T5807] usb 5-1: Product: syz
[  381.762818][ T5807] usb 5-1: Manufacturer: syz
[  381.772382][ T5807] usb 5-1: SerialNumber: syz
[  381.772391][   T30] audit: type=1326 audit(1762605711.084:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  381.779915][ T5807] usb 5-1: config 0 descriptor??
[  381.800487][    C1] vkms_vblank_simulate: vblank timer overrun
[  382.074866][ T5807] usb 5-1: f81604_read: reg: 105 failed: -EPIPE
[  382.082609][ T5807] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPIPE
[  382.090265][ T5807] f81604 5-1:0.0: probe with driver f81604 failed with error -32
[  382.192903][   T30] audit: type=1400 audit(1762605711.694:1043): avc:  denied  { bind } for  pid=10879 comm="syz.4.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  382.469729][ T5807] usb 5-1: USB disconnect, device number 26
[  382.660709][T10885] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  382.671202][T10885] SELinux: failed to load policy
[  382.690069][   T30] audit: type=1400 audit(1762605712.164:1044): avc:  denied  { load_policy } for  pid=10883 comm="syz.6.1356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  382.728831][T10885] input: syz1 as /devices/virtual/input/input15
[  382.809764][   T30] audit: type=1400 audit(1762605712.224:1045): avc:  denied  { ioctl } for  pid=10883 comm="syz.6.1356" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  382.856838][   T30] audit: type=1400 audit(1762605712.254:1046): avc:  denied  { create } for  pid=10886 comm="syz.4.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  382.910266][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'.
[  382.943998][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'.
[  382.961309][   T30] audit: type=1326 audit(1762605712.464:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc758f6c9 code=0x7ffc0000
[  382.984762][    C1] vkms_vblank_simulate: vblank timer overrun
[  383.053609][   T30] audit: type=1326 audit(1762605712.464:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f6fc758f6c9 code=0x7ffc0000
[  383.093635][   T43] usb 3-1: reset high-speed USB device number 22 using dummy_hcd
[  383.111800][   T43] usb 3-1: device reset changed ep0 maxpacket size!
[  383.160240][   T43] usb 3-1: USB disconnect, device number 22
[  383.184671][ T5935] libceph: connect (1)[c::]:6789 error -101
[  383.204213][ T5935] libceph: mon0 (1)[c::]:6789 connect error
[  383.285951][T10912] ceph: No mds server is up or the cluster is laggy
[  383.827473][ T5935] libceph: connect (1)[c::]:6789 error -101
[  383.924011][ T5935] libceph: mon0 (1)[c::]:6789 connect error
[  384.143468][   T43] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  384.295619][   T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  384.306170][   T43] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  384.343988][   T43] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  384.399527][   T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  384.410635][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  384.414302][ T5885] vhci_hcd: vhci_device speed not set
[  384.424334][   T43] usb 3-1: Product: syz
[  384.609928][   T43] usb 3-1: Manufacturer: syz
[  384.614582][   T43] usb 3-1: SerialNumber: syz
[  385.070310][   T43] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  385.071784][T10926] siw: device registration error -23
[  386.406018][T10938] can: request_module (can-proto-0) failed.
[  386.446536][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  386.446550][   T30] audit: type=1326 audit(1762605715.954:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199a18f6c9 code=0x7ffc0000
[  386.483388][   T30] audit: type=1326 audit(1762605715.984:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199a18f6c9 code=0x7ffc0000
[  386.568391][   T30] audit: type=1400 audit(1762605716.074:1063): avc:  denied  { setattr } for  pid=10949 comm="syz.5.1374" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  386.608583][   T30] audit: type=1400 audit(1762605716.084:1064): avc:  denied  { create } for  pid=10949 comm="syz.5.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  386.647919][   T30] audit: type=1400 audit(1762605716.084:1065): avc:  denied  { getopt } for  pid=10949 comm="syz.5.1374" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  387.748131][ T5807] usb 3-1: USB disconnect, device number 23
[  387.757484][ T5807] usblp0: removed
[  388.089404][T10972] netlink: 'syz.4.1381': attribute type 12 has an invalid length.
[  388.098267][T10972] netlink: 'syz.4.1381': attribute type 29 has an invalid length.
[  388.106594][T10972] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1381'.
[  388.115786][T10972] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1381'.
[  389.204002][ T5885] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  389.279367][T10980] overlayfs: conflicting lowerdir path
[  389.495008][ T5885] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  390.057346][ T5885] usb 2-1: config 179 has no interface number 0
[  390.213452][ T5885] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  390.224903][ T5885] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[  390.236932][ T5885] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  390.249055][ T5885] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  390.263946][ T5885] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  390.303414][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  390.313433][ T5885] usb 2-1: Product: syz
[  390.319391][T10976] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  390.597062][ T5885] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input16
[  390.701719][T11000] netlink: 'syz.6.1388': attribute type 12 has an invalid length.
[  390.709619][T11000] netlink: 'syz.6.1388': attribute type 29 has an invalid length.
[  390.717464][T11000] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1388'.
[  390.726594][T11000] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1388'.
[  391.213352][T11006] syz2: rxe_newlink: already configured on veth1_to_team
[  391.616291][ T5807] usb 2-1: USB disconnect, device number 28
[  391.622220][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  391.622243][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  391.693833][ T5885] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  391.794432][T11008] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1390'.
[  391.809191][T11008] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1390'.
[  391.850703][T11008] fuse: Unknown parameter 'fd0x0000000000000010'
[  391.957087][ T5885] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  391.981433][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.998112][ T5885] usb 5-1: Product: syz
[  392.009696][ T5885] usb 5-1: Manufacturer: syz
[  392.015993][ T5885] usb 5-1: SerialNumber: syz
[  392.028042][ T5885] usb 5-1: config 0 descriptor??
[  392.040890][ T5885] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  392.051789][ T5935] IPVS: starting estimator thread 0...
[  392.053408][ T5885] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  392.174696][T11018] IPVS: using max 39 ests per chain, 93600 per kthread
[  392.256025][T11005] dvb-usb: bulk message failed: -22 (7/0)
[  392.268011][   T30] audit: type=1326 audit(1762605721.774:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11014 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  392.373539][ T5935] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  392.467505][   T30] audit: type=1326 audit(1762605721.774:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11014 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  392.514423][T11026] netlink: 'syz.5.1397': attribute type 1 has an invalid length.
[  392.548268][   T30] audit: type=1326 audit(1762605721.794:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11014 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  392.552084][T11026] 8021q: adding VLAN 0 to HW filter on device bond1
[  392.613439][ T5935] usb 2-1: Using ep0 maxpacket: 8
[  392.644305][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1397'.
[  392.665872][ T5935] usb 2-1: config 0 has an invalid interface number: 124 but max is 0
[  392.672080][T11026] vlan2: entered promiscuous mode
[  392.683428][ T5935] usb 2-1: config 0 has no interface number 0
[  392.684580][T11026] bond1: entered promiscuous mode
[  392.690276][ T5935] usb 2-1: config 0 interface 124 has no altsetting 0
[  392.702805][   T30] audit: type=1326 audit(1762605721.794:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11014 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  392.729406][T11029] dummy0: entered promiscuous mode
[  392.744075][   T30] audit: type=1326 audit(1762605721.804:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11014 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  392.752391][T11029] bond1: (slave dummy0): making interface the new active one
[  392.800002][T11029] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  392.820711][ T5935] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=39.a1
[  392.836204][T11032] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  392.843874][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.851773][T11032] SELinux: failed to load policy
[  392.858953][   T30] audit: type=1326 audit(1762605721.814:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11014 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  392.893896][   T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  392.941119][ T5935] usb 2-1: Product: syz
[  392.983809][ T5935] usb 2-1: Manufacturer: syz
[  392.988391][T11032] bond2: Removing last arp target with arp_interval on
[  393.000308][T11032] bond2: entered promiscuous mode
[  393.005436][T11032] bond2: entered allmulticast mode
[  393.014659][T11032] 8021q: adding VLAN 0 to HW filter on device bond2
[  393.055959][   T30] audit: type=1326 audit(1762605721.814:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11014 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  393.095841][   T30] audit: type=1326 audit(1762605721.824:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11014 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  393.100053][ T5935] usb 2-1: SerialNumber: syz
[  393.126036][   T30] audit: type=1400 audit(1762605722.024:1074): avc:  denied  { bind } for  pid=11025 comm="syz.2.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  393.149875][   T24] usb 7-1: config 160 has an invalid interface number: 200 but max is 0
[  393.198778][   T24] usb 7-1: config 160 has no interface number 0
[  393.244896][   T24] usb 7-1: config 160 interface 200 has no altsetting 0
[  393.259403][ T5935] usb 2-1: config 0 descriptor??
[  393.296974][ T5935] imon 2-1:0.124: unable to register, err -19
[  393.303414][   T30] audit: type=1400 audit(1762605722.024:1075): avc:  denied  { connect } for  pid=11025 comm="syz.2.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  393.327937][   T24] usb 7-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  393.340059][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.348231][   T24] usb 7-1: Product: syz
[  393.352374][   T24] usb 7-1: Manufacturer: syz
[  393.357103][   T24] usb 7-1: SerialNumber: syz
[  393.626804][T11041] netlink: 'syz.1.1392': attribute type 6 has an invalid length.
[  393.873775][ T5885] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  393.887782][ T5878] usb 2-1: USB disconnect, device number 29
[  393.900600][ T5885] usb 5-1: USB disconnect, device number 27
[  393.952344][   T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  393.995706][   T24] usb 7-1: MIDIStreaming interface descriptor not found
[  394.318217][   T24] usb 7-1: USB disconnect, device number 3
[  395.211122][T11056] netlink: 'syz.4.1401': attribute type 7 has an invalid length.
[  395.967758][T11070] vxcan2: entered promiscuous mode
[  395.972896][T11070] vxcan2: entered allmulticast mode
[  396.230171][T11072] netlink: 'syz.1.1409': attribute type 1 has an invalid length.
[  396.635638][T11078] xt_CT: You must specify a L4 protocol and not use inversions on it
[  397.597922][T11084] syzkaller1: entered promiscuous mode
[  397.606694][T11084] syzkaller1: entered allmulticast mode
[  397.647461][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  397.647475][   T30] audit: type=1326 audit(1762605727.154:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  397.708695][   T30] audit: type=1326 audit(1762605727.154:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  397.733528][ T5878] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  397.785889][   T30] audit: type=1326 audit(1762605727.154:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  397.915412][   T30] audit: type=1326 audit(1762605727.154:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  397.938858][    C0] vkms_vblank_simulate: vblank timer overrun
[  397.944672][ T5878] usb 5-1: Using ep0 maxpacket: 32
[  397.956350][   T30] audit: type=1326 audit(1762605727.154:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  397.957630][ T5878] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[  397.987412][   T30] audit: type=1326 audit(1762605727.154:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  398.015384][T11093] loop6: detected capacity change from 0 to 524287999
[  398.022550][T11093] buffer_io_error: 6 callbacks suppressed
[  398.022562][T11093] Buffer I/O error on dev loop6, logical block 0, async page read
[  398.037279][T11093] Buffer I/O error on dev loop6, logical block 0, async page read
[  398.045240][T11093] Buffer I/O error on dev loop6, logical block 0, async page read
[  398.053109][T11093] Buffer I/O error on dev loop6, logical block 0, async page read
[  398.061003][T11093] Buffer I/O error on dev loop6, logical block 0, async page read
[  398.068903][T11093] Buffer I/O error on dev loop6, logical block 0, async page read
[  398.076851][T11093] Buffer I/O error on dev loop6, logical block 0, async page read
[  398.084739][T11093] Buffer I/O error on dev loop6, logical block 0, async page read
[  398.092583][T11093] ldm_validate_partition_table(): Disk read failed.
[  398.099234][T11093] Buffer I/O error on dev loop6, logical block 0, async page read
[  398.107150][T11093] Buffer I/O error on dev loop6, logical block 0, async page read
[  398.115124][T11093] Dev loop6: unable to read RDB block 0
[  398.121582][T11093]  loop6: unable to read partition table
[  398.128130][T11093] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  398.236414][ T5878] usb 5-1: config 0 interface 0 has no altsetting 0
[  398.243306][ T5878] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  398.255733][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.266804][ T5878] usb 5-1: config 0 descriptor??
[  398.279929][   T30] audit: type=1400 audit(1762605727.784:1088): avc:  denied  { ioctl } for  pid=11089 comm="syz.1.1416" path="socket:[30966]" dev="sockfs" ino=30966 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  398.305811][    C0] vkms_vblank_simulate: vblank timer overrun
[  398.379179][T11101] siw: device registration error -23
[  398.777985][T11091] NILFS (loop1): device size too small
[  398.791006][   T30] audit: type=1400 audit(1762605728.294:1089): avc:  denied  { read } for  pid=11089 comm="syz.1.1416" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  398.985116][   T30] audit: type=1400 audit(1762605728.294:1090): avc:  denied  { open } for  pid=11089 comm="syz.1.1416" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  399.109760][T11106] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1418'.
[  399.524049][   T30] audit: type=1400 audit(1762605728.294:1091): avc:  denied  { map } for  pid=11089 comm="syz.1.1416" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  400.161227][   T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  400.170662][   T10] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  400.492917][ T5878] usbhid 5-1:0.0: can't add hid device: -71
[  400.529946][ T5878] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  400.768700][ T5878] usb 5-1: USB disconnect, device number 28
[  401.724229][T11141] rdma_rxe: rxe_newlink: failed to add veth1_to_team
[  402.423440][ T5892] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  402.467648][T11148] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1433'.
[  402.476762][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1433'.
[  403.217413][T11155] netlink: 'syz.4.1434': attribute type 12 has an invalid length.
[  403.225624][T11155] netlink: 'syz.4.1434': attribute type 29 has an invalid length.
[  403.233516][T11155] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1434'.
[  403.242698][T11155] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1434'.
[  403.256519][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'.
[  403.266734][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1435'.
[  403.311809][ T5892] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  403.320933][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.429945][ T5892] usb 2-1: Product: syz
[  403.435231][ T5892] usb 2-1: Manufacturer: syz
[  403.439894][ T5892] usb 2-1: SerialNumber: syz
[  403.464201][ T5892] usb 2-1: config 0 descriptor??
[  404.239422][ T5892] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  404.295023][ T5892] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  404.330507][ T5892] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  404.443678][T11170] netlink: 'syz.5.1437': attribute type 1 has an invalid length.
[  404.674498][T11168] team0: No ports can be present during mode change
[  404.737937][ T5892] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  404.748976][ T5892] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  404.759631][ T5878] usb 2-1: USB disconnect, device number 30
[  404.819624][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  404.819636][   T30] audit: type=1326 audit(1762605734.324:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  405.562225][   T30] audit: type=1400 audit(1762605734.334:1095): avc:  denied  { setopt } for  pid=11178 comm="syz.4.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  405.583476][   T30] audit: type=1326 audit(1762605734.364:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d93b8df10 code=0x7ffc0000
[  405.714312][   T30] audit: type=1326 audit(1762605734.364:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  405.738012][   T30] audit: type=1326 audit(1762605734.364:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  405.808001][   T30] audit: type=1326 audit(1762605734.364:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  405.913874][ T5878] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  405.949011][   T30] audit: type=1326 audit(1762605734.364:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  405.992385][   T30] audit: type=1326 audit(1762605734.364:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  406.964183][   T30] audit: type=1326 audit(1762605734.364:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  407.013239][   T30] audit: type=1326 audit(1762605734.364:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  407.103572][ T5878] usb 2-1: device descriptor read/64, error -71
[  407.179602][T11200] netlink: 'syz.6.1448': attribute type 12 has an invalid length.
[  407.189436][T11200] netlink: 'syz.6.1448': attribute type 29 has an invalid length.
[  407.197316][T11200] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1448'.
[  407.206374][T11200] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1448'.
[  408.213554][ T5878] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  408.501678][T11210] loop6: detected capacity change from 0 to 524287999
[  408.508879][T11210] buffer_io_error: 6 callbacks suppressed
[  408.508891][T11210] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.522495][T11210] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.530382][T11210] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.538272][T11210] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.546156][T11210] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.554075][T11210] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.561939][T11210] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.569827][T11210] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.578713][T11210] ldm_validate_partition_table(): Disk read failed.
[  408.585354][T11210] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.593213][T11210] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.605878][T11210] Dev loop6: unable to read RDB block 0
[  408.611742][T11210]  loop6: unable to read partition table
[  408.617537][T11210] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  409.053901][ T2844] block nbd0: Possible stuck request ffff888026287000: control (read@0,1024B). Runtime 150 seconds
[  409.064639][ T2844] block nbd0: Possible stuck request ffff8880262871c0: control (read@1024,1024B). Runtime 150 seconds
[  409.080121][ T2844] block nbd0: Possible stuck request ffff888026287380: control (read@2048,1024B). Runtime 150 seconds
[  409.091907][ T2844] block nbd0: Possible stuck request ffff888026287540: control (read@3072,1024B). Runtime 150 seconds
[  409.332136][T11221] Dead loop on virtual device ip6_vti0, fix it urgently!
[  409.483452][   T10] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  409.585041][T11234] netlink: 'syz.6.1459': attribute type 1 has an invalid length.
[  410.313435][   T10] usb 6-1: Invalid ep0 maxpacket: 64
[  410.395362][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  410.395373][   T30] audit: type=1400 audit(1762605739.474:1131): avc:  denied  { connect } for  pid=11235 comm="syz.4.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  410.454567][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1459'.
[  410.470724][T11239] bridge0: entered promiscuous mode
[  410.476014][T11239] bridge0: entered allmulticast mode
[  410.488411][T11240] ip6erspan0: entered promiscuous mode
[  410.604945][T11244] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address
[  410.630061][T11244] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  410.718518][   T10] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[  410.737055][   T30] audit: type=1400 audit(1762605740.134:1132): avc:  denied  { mounton } for  pid=11248 comm="syz.1.1461" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  410.776105][T11244] bond1: (slave xfrm1): making interface the new active one
[  411.249105][T11244] bond1: (slave xfrm1): Enslaving as an active interface with an up link
[  411.263267][T11246] bond1 (unregistering): (slave xfrm1): Releasing backup interface
[  411.285206][T11257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  411.301287][T11257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1449'.
[  411.339779][   T10] usb 6-1: Invalid ep0 maxpacket: 64
[  411.345299][   T10] usb usb6-port1: attempt power cycle
[  411.353119][T11246] bond1 (unregistering): Released all slaves
[  411.370869][T11257] 
: renamed from bridge_slave_0 (while UP)
[  411.430590][   T30] audit: type=1400 audit(1762605740.934:1133): avc:  denied  { write } for  pid=11258 comm="syz.4.1464" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  411.580208][   T30] audit: type=1400 audit(1762605741.084:1134): avc:  denied  { shutdown } for  pid=11262 comm="syz.4.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  411.733485][   T10] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  412.336726][   T10] usb 6-1: device descriptor read/8, error -71
[  412.355056][ T5812] Bluetooth: hci6: unexpected event for opcode 0x080d
[  412.365546][ T5812] Bluetooth: hci6: unexpected cc 0x080d length: 1 < 3
[  412.372299][ T5812] Bluetooth: hci6: unexpected event for opcode 0x080d
[  412.851974][T11273] autofs: Unknown parameter 'contention_end'
[  413.180396][T11285] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  413.182353][T11285] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  413.911338][   T30] audit: type=1400 audit(1762605742.804:1135): avc:  denied  { create } for  pid=11276 comm="syz.6.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  413.943569][   T30] audit: type=1400 audit(1762605742.804:1136): avc:  denied  { write } for  pid=11276 comm="syz.6.1472" path="socket:[31310]" dev="sockfs" ino=31310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  414.994564][T11300] xt_NFQUEUE: number of total queues is 0
[  415.208077][T11306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1477'.
[  416.084959][T11312] overlay: filesystem on ./file0 not supported as upperdir
[  416.095579][   T30] audit: type=1400 audit(1762605745.584:1137): avc:  denied  { setopt } for  pid=11310 comm="syz.4.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  416.244098][T11322] tipc: Enabled bearer <ib:vlan0>, priority 10
[  416.528202][   T30] audit: type=1400 audit(1762605746.034:1138): avc:  denied  { write } for  pid=11332 comm="syz.5.1481" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  416.553618][T11333] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1481'.
[  416.554673][   T30] audit: type=1400 audit(1762605746.034:1139): avc:  denied  { open } for  pid=11332 comm="syz.5.1481" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  416.781605][T11341] netlink: 'syz.4.1490': attribute type 29 has an invalid length.
[  416.789598][T11341] netlink: 'syz.4.1490': attribute type 3 has an invalid length.
[  416.798408][T11341] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1490'.
[  417.072481][T11344] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  417.107881][T11344] exFAT-fs (nullb0): invalid boot record signature
[  417.230276][T11344] exFAT-fs (nullb0): failed to read boot sector
[  417.276242][T11344] exFAT-fs (nullb0): failed to recognize exfat type
[  417.393095][ T5899] tipc: Node number set to 741372332
[  417.458008][T11350] loop6: detected capacity change from 0 to 524287999
[  417.465221][T11350] buffer_io_error: 6 callbacks suppressed
[  417.465233][T11350] Buffer I/O error on dev loop6, logical block 0, async page read
[  417.478831][T11350] Buffer I/O error on dev loop6, logical block 0, async page read
[  417.487628][T11350] Buffer I/O error on dev loop6, logical block 0, async page read
[  417.495554][T11350] Buffer I/O error on dev loop6, logical block 0, async page read
[  417.503589][T11350] Buffer I/O error on dev loop6, logical block 0, async page read
[  417.511477][T11350] Buffer I/O error on dev loop6, logical block 0, async page read
[  417.519373][T11350] Buffer I/O error on dev loop6, logical block 0, async page read
[  417.527255][T11350] Buffer I/O error on dev loop6, logical block 0, async page read
[  417.535166][T11350] ldm_validate_partition_table(): Disk read failed.
[  417.541801][T11350] Buffer I/O error on dev loop6, logical block 0, async page read
[  417.549878][T11350] Buffer I/O error on dev loop6, logical block 0, async page read
[  417.558551][T11350] Dev loop6: unable to read RDB block 0
[  417.564571][T11350]  loop6: unable to read partition table
[  417.570330][T11350] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  419.790801][   T30] audit: type=1400 audit(1762605749.294:1140): avc:  denied  { append } for  pid=11372 comm="syz.4.1498" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  419.852341][   T30] audit: type=1400 audit(1762605749.334:1141): avc:  denied  { map } for  pid=11372 comm="syz.4.1498" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  419.912503][   T30] audit: type=1400 audit(1762605749.334:1142): avc:  denied  { execute } for  pid=11372 comm="syz.4.1498" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  419.969747][T11379] FAULT_INJECTION: forcing a failure.
[  419.969747][T11379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  420.138584][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1499'.
[  420.213520][T11379] CPU: 1 UID: 0 PID: 11379 Comm: syz.2.1500 Not tainted syzkaller #0 PREEMPT(full) 
[  420.213544][T11379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  420.213554][T11379] Call Trace:
[  420.213560][T11379]  <TASK>
[  420.213567][T11379]  dump_stack_lvl+0x16c/0x1f0
[  420.213599][T11379]  should_fail_ex+0x512/0x640
[  420.213623][T11379]  _copy_from_iter+0x29f/0x1720
[  420.213647][T11379]  ? __asan_memset+0x23/0x50
[  420.213674][T11379]  ? __pfx__copy_from_iter+0x10/0x10
[  420.213695][T11379]  ? __alloc_skb+0x200/0x380
[  420.213717][T11379]  ? __pfx___alloc_skb+0x10/0x10
[  420.213736][T11379]  ? __pfx___mutex_lock+0x10/0x10
[  420.213760][T11379]  skb_copy_datagram_from_iter+0x124/0x740
[  420.213790][T11379]  tun_get_user+0x1850/0x3cc0
[  420.213826][T11379]  ? __pfx_tun_get_user+0x10/0x10
[  420.213851][T11379]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  420.213882][T11379]  ? find_held_lock+0x2b/0x80
[  420.213911][T11379]  ? tun_get+0x191/0x370
[  420.213938][T11379]  tun_chr_write_iter+0xdc/0x210
[  420.213965][T11379]  vfs_write+0x7d3/0x11d0
[  420.213982][T11379]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  420.214009][T11379]  ? __pfx_vfs_write+0x10/0x10
[  420.214023][T11379]  ? find_held_lock+0x2b/0x80
[  420.214059][T11379]  ksys_write+0x12a/0x250
[  420.214076][T11379]  ? __pfx_ksys_write+0x10/0x10
[  420.214100][T11379]  do_syscall_64+0xcd/0xfa0
[  420.214118][T11379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.214135][T11379] RIP: 0033:0x7f38b138f6c9
[  420.214149][T11379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  420.214167][T11379] RSP: 002b:00007f38b217a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  420.214184][T11379] RAX: ffffffffffffffda RBX: 00007f38b15e5fa0 RCX: 00007f38b138f6c9
[  420.214195][T11379] RDX: 0000000000000072 RSI: 0000200000000100 RDI: 0000000000000003
[  420.214205][T11379] RBP: 00007f38b217a090 R08: 0000000000000000 R09: 0000000000000000
[  420.214215][T11379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  420.214224][T11379] R13: 00007f38b15e6038 R14: 00007f38b15e5fa0 R15: 00007ffdc867ca68
[  420.214249][T11379]  </TASK>
[  423.150492][   T30] audit: type=1400 audit(1762605752.644:1143): avc:  denied  { connect } for  pid=11401 comm="syz.6.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  423.438948][   T30] audit: type=1400 audit(1762605752.944:1144): avc:  denied  { setopt } for  pid=11408 comm="syz.5.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  423.460217][   T30] audit: type=1400 audit(1762605752.974:1145): avc:  denied  { write } for  pid=11408 comm="syz.5.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  423.598906][   T30] audit: type=1400 audit(1762605753.064:1146): avc:  denied  { mount } for  pid=11408 comm="syz.5.1509" name="/" dev="configfs" ino=1128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  423.827569][T11424] Cannot find add_set index 128 as target
[  423.841733][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1514'.
[  423.850824][T11424] bridge_slave_0: default FDB implementation only supports local addresses
[  423.963539][ T5892] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  424.019759][T11402] lo speed is unknown, defaulting to 1000
[  424.121999][ T5892] usb 2-1: Using ep0 maxpacket: 32
[  424.192059][ T5892] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  424.199385][   T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  424.208780][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.258976][ T5892] usb 2-1: config 0 descriptor??
[  424.443434][   T10] usb 5-1: Using ep0 maxpacket: 16
[  424.450118][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.461124][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  424.480712][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  424.490200][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.507747][   T10] usb 5-1: config 0 descriptor??
[  424.803522][   T30] audit: type=1400 audit(1762605754.274:1147): avc:  denied  { shutdown } for  pid=11417 comm="syz.1.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  424.939443][ T5892] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  424.962613][ T5892] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  424.981876][   T30] audit: type=1400 audit(1762605754.284:1148): avc:  denied  { accept } for  pid=11417 comm="syz.1.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  425.063474][ T5892] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  425.112533][   T30] audit: type=1400 audit(1762605754.564:1149): avc:  denied  { firmware_load } for  pid=5892 comm="kworker/1:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  425.138817][   T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  425.302184][   T10] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max
[  425.394944][   T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  425.411995][   T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  425.419277][   T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  425.448672][   T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  425.489666][   T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  425.533482][   T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  425.953449][   T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  425.973438][   T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  426.001469][   T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  426.654972][   T30] audit: type=1400 audit(1762605756.164:1150): avc:  denied  { ioctl } for  pid=11442 comm="syz.1.1517" path="socket:[31628]" dev="sockfs" ino=31628 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  426.704848][   T10] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  426.721995][   T10] microsoft 0003:045E:07DA.000F: no inputs found
[  426.732882][   T10] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway
[  426.786073][   T10] usb 5-1: USB disconnect, device number 29
[  427.381874][T11463] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  427.763179][   T30] audit: type=1400 audit(1762605756.914:1151): avc:  denied  { create } for  pid=11458 comm="syz.1.1524" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1
[  427.785723][   T30] audit: type=1400 audit(1762605756.914:1152): avc:  denied  { link } for  pid=11458 comm="syz.1.1524" name="file1" dev="ramfs" ino=31653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1
[  428.280911][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  428.280926][   T30] audit: type=1326 audit(1762605757.784:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  428.331841][   T30] audit: type=1326 audit(1762605757.814:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  428.381932][   T30] audit: type=1326 audit(1762605757.814:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  428.752440][   T30] audit: type=1326 audit(1762605757.824:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  429.170035][   T30] audit: type=1326 audit(1762605757.824:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  429.211254][   T30] audit: type=1326 audit(1762605757.824:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  429.878706][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1539'.
[  430.623735][   T10] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  431.469820][T11533] netlink: 'syz.6.1545': attribute type 1 has an invalid length.
[  431.704205][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'.
[  431.742027][   T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  431.800124][T11536] loop6: detected capacity change from 0 to 524287999
[  431.854011][   T10] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  431.872762][   T10] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  431.904414][T10468] buffer_io_error: 6 callbacks suppressed
[  431.904426][T10468] Buffer I/O error on dev loop6, logical block 0, async page read
[  431.918710][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  431.932972][   T10] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  431.942249][T10468] Buffer I/O error on dev loop6, logical block 0, async page read
[  431.942345][T10468] Buffer I/O error on dev loop6, logical block 0, async page read
[  431.942430][T10468] Buffer I/O error on dev loop6, logical block 0, async page read
[  431.942514][T10468] Buffer I/O error on dev loop6, logical block 0, async page read
[  431.942614][T10468] Buffer I/O error on dev loop6, logical block 0, async page read
[  431.942777][T10468] Buffer I/O error on dev loop6, logical block 0, async page read
[  431.942855][T10468] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.010064][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.026524][   T10] usb 6-1: config 0 descriptor??
[  432.033871][T10468] ldm_validate_partition_table(): Disk read failed.
[  432.043263][T10468] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.051315][T10468] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.063311][T10468] Dev loop6: unable to read RDB block 0
[  432.070106][T10468]  loop6: unable to read partition table
[  432.082340][T11536] ldm_validate_partition_table(): Disk read failed.
[  432.089285][T11536] Dev loop6: unable to read RDB block 0
[  432.095354][T11536]  loop6: unable to read partition table
[  432.119788][T11536] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  432.376153][T11554] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1548'.
[  433.160234][   T10] hid-alps 0003:044E:120C.0010: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.5-1/input0
[  433.384886][   T10] usb 6-1: USB disconnect, device number 11
[  434.811232][T11570] wg1: entered promiscuous mode
[  434.816321][T11570] wg1: entered allmulticast mode
[  435.543381][   T30] audit: type=1400 audit(1762605765.044:1160): avc:  denied  { firmware_load } for  pid=11567 comm="syz.5.1554" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  435.586487][ T5935] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  435.775225][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short
[  435.810430][ T5935] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  435.845857][ T5935] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  436.083320][T11588] FAULT_INJECTION: forcing a failure.
[  436.083320][T11588] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  436.097063][T11588] CPU: 1 UID: 0 PID: 11588 Comm: syz.6.1562 Not tainted syzkaller #0 PREEMPT(full) 
[  436.097086][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  436.097096][T11588] Call Trace:
[  436.097102][T11588]  <TASK>
[  436.097108][T11588]  dump_stack_lvl+0x16c/0x1f0
[  436.097140][T11588]  should_fail_ex+0x512/0x640
[  436.097163][T11588]  _copy_from_user+0x2e/0xd0
[  436.097186][T11588]  move_addr_to_kernel+0x65/0x170
[  436.097206][T11588]  __sys_sendto+0x1be/0x520
[  436.097227][T11588]  ? __pfx___sys_sendto+0x10/0x10
[  436.097267][T11588]  ? find_held_lock+0x2b/0x80
[  436.097290][T11588]  ? syscall_trace_enter+0x1cb/0x240
[  436.097313][T11588]  __x64_sys_sendto+0xe0/0x1c0
[  436.097332][T11588]  ? syscall_trace_enter+0xee/0x240
[  436.097352][T11588]  do_syscall_64+0xcd/0xfa0
[  436.097369][T11588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.097387][T11588] RIP: 0033:0x7f523719155c
[  436.097402][T11588] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  436.097418][T11588] RSP: 002b:00007f52353f4e90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  436.097434][T11588] RAX: ffffffffffffffda RBX: 00007f52353f4fa0 RCX: 00007f523719155c
[  436.097445][T11588] RDX: 0000000000000028 RSI: 00007f52353f4ff0 RDI: 0000000000000005
[  436.097455][T11588] RBP: 0000000000000000 R08: 00007f52353f4ee4 R09: 000000000000000c
[  436.097465][T11588] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  436.097475][T11588] R13: 00007f52353f4f38 R14: 00007f52353f4ff0 R15: 0000000000000000
[  436.097500][T11588]  </TASK>
[  436.263918][ T5935] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  436.278094][ T5935] usb 3-1: config 1 interface 0 has no altsetting 0
[  436.297218][   T30] audit: type=1326 audit(1762605765.704:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  436.323529][   T30] audit: type=1326 audit(1762605765.704:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  436.347528][ T5935] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  436.356588][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.364553][ T5935] usb 3-1: Product: syz
[  436.368691][ T5935] usb 3-1: Manufacturer: syz
[  436.373248][ T5935] usb 3-1: SerialNumber: syz
[  436.378522][   T30] audit: type=1326 audit(1762605765.714:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  436.402884][   T30] audit: type=1326 audit(1762605765.714:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  436.432798][   T30] audit: type=1326 audit(1762605765.714:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  436.473716][   T30] audit: type=1326 audit(1762605765.714:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  436.503747][ T5822] Bluetooth: hci5: command 0x0406 tx timeout
[  436.593419][   T30] audit: type=1326 audit(1762605765.714:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  436.642435][ T5935] smsusb:smsusb_probe: board id=8, interface number 0
[  436.653515][ T5935] smsusb:smsusb_probe: Device initialized with return code -19
[  436.731917][   T30] audit: type=1326 audit(1762605765.714:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d93b8f6c9 code=0x7ffc0000
[  436.851599][ T5935] usb 3-1: USB disconnect, device number 24
[  436.916076][T11598] netlink: 'syz.6.1565': attribute type 12 has an invalid length.
[  436.923916][T11598] netlink: 'syz.6.1565': attribute type 29 has an invalid length.
[  436.931693][T11598] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1565'.
[  436.941246][T11598] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1565'.
[  437.193784][   T24] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  437.499805][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  437.529666][   T24] usb 6-1: not running at top speed; connect to a high speed hub
[  437.552374][   T24] usb 6-1: config 129 has an invalid interface number: 28 but max is 0
[  437.574550][   T24] usb 6-1: config 129 has no interface number 0
[  437.580812][   T24] usb 6-1: config 129 interface 28 has no altsetting 0
[  437.629995][   T24] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57
[  437.659685][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.693861][   T24] usb 6-1: Product: syz
[  437.698029][   T24] usb 6-1: Manufacturer: syz
[  437.717564][   T24] usb 6-1: SerialNumber: syz
[  438.846530][   T30] audit: type=1326 audit(1762605768.294:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11606 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b138f6c9 code=0x7ffc0000
[  438.914184][   T24] etas_es58x 6-1:129.28: Starting syz syz (Serial Number syz)
[  438.996761][   T24] usb 6-1: USB disconnect, device number 12
[  439.036258][T11622] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  439.043639][T11622] batman_adv: batadv0: Removing interface: batadv_slave_0
[  439.114301][T11622] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  439.121673][T11622] batman_adv: batadv0: Removing interface: batadv_slave_1
[  439.310735][T11625] team0: Mode changed to "loadbalance"
[  439.577719][T11630] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  439.608540][ T2844] block nbd0: Possible stuck request ffff888026287000: control (read@0,1024B). Runtime 180 seconds
[  439.623609][ T2844] block nbd0: Possible stuck request ffff8880262871c0: control (read@1024,1024B). Runtime 180 seconds
[  439.663464][ T2844] block nbd0: Possible stuck request ffff888026287380: control (read@2048,1024B). Runtime 180 seconds
[  439.701286][ T2844] block nbd0: Possible stuck request ffff888026287540: control (read@3072,1024B). Runtime 180 seconds
[  439.733300][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  439.739805][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  439.973490][ T5885] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  440.335919][ T5885] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  440.345155][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.353153][ T5885] usb 7-1: Product: syz
[  440.357394][ T5885] usb 7-1: Manufacturer: syz
[  440.420978][ T5885] usb 7-1: SerialNumber: syz
[  440.429734][ T5885] usb 7-1: config 0 descriptor??
[  440.438408][ T5885] gspca_main: sunplus-2.14.0 probing 055f:c230
[  440.487337][T11641] netlink: 'syz.2.1578': attribute type 7 has an invalid length.
[  440.666315][T11643] loop6: detected capacity change from 0 to 524287999
[  440.673391][T11643] buffer_io_error: 22 callbacks suppressed
[  440.673401][T11643] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.687078][T11643] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.693410][ T5899] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  440.694951][T11643] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.710238][T11643] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.718154][T11643] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.726857][T11643] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.734930][T11643] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.742798][T11643] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.750671][T11643] ldm_validate_partition_table(): Disk read failed.
[  440.757289][T11643] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.765171][T11643] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.773088][T11643] Dev loop6: unable to read RDB block 0
[  440.778883][T11643]  loop6: unable to read partition table
[  440.784621][T11643] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  440.806085][ T5885] gspca_sunplus: reg_r err -71
[  440.823232][ T5885] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  440.841078][ T5885] usb 7-1: USB disconnect, device number 4
[  441.035305][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.064365][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.794021][ T5899] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  441.842881][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.854103][ T5899] usb 6-1: config 0 descriptor??
[  441.982006][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  441.982054][   T30] audit: type=1400 audit(1762605771.484:1178): avc:  denied  { write } for  pid=11660 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  442.451254][   T30] audit: type=1400 audit(1762605771.674:1179): avc:  denied  { setopt } for  pid=11665 comm="syz.2.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  442.482594][   T30] audit: type=1400 audit(1762605771.674:1180): avc:  denied  { write } for  pid=11665 comm="syz.2.1583" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  443.279658][ T5899] usbhid 6-1:0.0: can't add hid device: -71
[  443.286279][ T5899] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  443.309105][ T5899] usb 6-1: USB disconnect, device number 13
[  443.770944][T11692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1586'.
[  444.567267][T11704] rdma_rxe: rxe_newlink: failed to add veth1_to_team
[  444.833494][   T10] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  445.279333][   T10] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  445.318748][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.384244][   T10] usb 7-1: Product: syz
[  445.408589][   T10] usb 7-1: Manufacturer: syz
[  445.423385][   T10] usb 7-1: SerialNumber: syz
[  445.438486][T11706] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  445.440678][   T10] usb 7-1: config 0 descriptor??
[  445.594244][   T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  446.181328][   T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  446.233072][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  446.574345][T11718] rdma_rxe: rxe_newlink: failed to add veth1_to_team
[  446.823590][   T10] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  446.986915][   T10] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  446.986940][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.986959][   T10] usb 3-1: Product: syz
[  446.986973][   T10] usb 3-1: Manufacturer: syz
[  446.986987][   T10] usb 3-1: SerialNumber: syz
[  446.988952][   T10] usb 3-1: config 0 descriptor??
[  447.028322][   T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  447.039164][   T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  447.046017][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  447.394682][   T10] usb 7-1: USB disconnect, device number 5
[  448.687120][T11744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1603'.
[  448.852844][   T30] audit: type=1400 audit(1762605778.354:1181): avc:  denied  { remount } for  pid=11734 comm="syz.6.1601" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  448.874639][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1601'.
[  449.141142][T11755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1605'.
[  449.620468][   T31] INFO: task syz.0.1001:9598 blocked for more than 144 seconds.
[  449.913918][   T43] usb 3-1: USB disconnect, device number 25
[  449.932915][   T31]       Not tainted syzkaller #0
[  449.938019][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  449.947507][   T31] task:syz.0.1001      state:D stack:26296 pid:9598  tgid:9597  ppid:5809   task_flags:0x400140 flags:0x00080002
[  449.959712][   T31] Call Trace:
[  449.963078][   T31]  <TASK>
[  449.966239][   T31]  __schedule+0x1190/0x5de0
[  449.970857][   T31]  ? check_path.constprop.0+0x24/0x50
[  449.976340][   T31]  ? __lock_acquire+0x622/0x1c90
[  449.981386][   T31]  ? __pfx___schedule+0x10/0x10
[  449.986374][   T31]  ? find_held_lock+0x2b/0x80
[  449.991150][   T31]  ? schedule+0x2d7/0x3a0
[  450.000251][   T31]  ? bdev_open+0xa2/0xe40
[  450.008747][   T31]  schedule+0xe7/0x3a0
[  450.012939][   T31]  schedule_preempt_disabled+0x13/0x30
[  450.030165][   T31]  __mutex_lock+0x818/0x1060
[  450.038304][   T31]  ? bdev_open+0xa2/0xe40
[  450.046910][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  450.053825][   T31]  ? __pfx_bd_prepare_to_claim+0x10/0x10
[  450.059802][   T31]  ? bdev_open+0xa2/0xe40
[  450.064261][   T31]  bdev_open+0xa2/0xe40
[  450.068534][   T31]  ? iput+0x35/0x40
[  450.072474][   T31]  bdev_file_open_by_dev+0x182/0x210
[  450.077892][   T31]  setup_bdev_super+0x39b/0x730
[  450.082877][   T31]  get_tree_bdev_flags+0x363/0x620
[  450.088684][   T31]  ? __pfx_vfat_fill_super+0x10/0x10
[  450.094130][   T31]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  450.099878][   T31]  ? bpf_lsm_capable+0x9/0x10
[  450.104728][   T31]  ? security_capable+0x7e/0x260
[  450.109785][   T31]  vfs_get_tree+0x8e/0x340
[  450.125603][   T31]  path_mount+0x7b9/0x23a0
[  450.134519][   T31]  ? __pfx_path_mount+0x10/0x10
[  450.147236][   T31]  ? putname+0x154/0x1a0
[  450.155960][   T31]  ? putname+0x154/0x1a0
[  450.164757][   T31]  ? putname+0x154/0x1a0
[  450.172366][   T31]  ? __x64_sys_mount+0x293/0x310
[  450.182875][   T31]  __x64_sys_mount+0x293/0x310
[  450.192120][   T31]  ? __pfx___x64_sys_mount+0x10/0x10
[  450.202018][   T31]  do_syscall_64+0xcd/0xfa0
[  450.211159][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.223007][   T31] RIP: 0033:0x7f248678f6c9
[  450.227550][   T31] RSP: 002b:00007f2487677038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  450.236107][   T31] RAX: ffffffffffffffda RBX: 00007f24869e5fa0 RCX: 00007f248678f6c9
[  450.244230][   T31] RDX: 0000200000000140 RSI: 0000200000000000 RDI: 00002000000000c0
[  450.254944][   T31] RBP: 00007f2486811f91 R08: 0000000000000000 R09: 0000000000000000
[  450.263041][   T31] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000000
[  450.271240][   T31] R13: 00007f24869e6038 R14: 00007f24869e5fa0 R15: 00007ffc80280db8
[  450.279363][   T31]  </TASK>
[  450.282591][   T31] 
[  450.282591][   T31] Showing all locks held in the system:
[  450.299863][   T31] 1 lock held by khungtaskd/31:
[  450.309306][   T31]  #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  450.319413][   T31] 2 locks held by getty/5574:
[  450.324434][   T31]  #0: ffff88803584b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  450.334479][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  450.344807][   T31] 1 lock held by udevd/5828:
[  450.349525][   T31]  #0: ffff888142f3d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  450.360477][   T31] 6 locks held by kworker/1:4/5892:
[  450.365804][   T31]  #0: ffff8880202e2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  450.376652][   T31]  #1: ffffc90004597d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  450.388021][   T31]  #2: ffff888144b4b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0
[  450.396947][   T31]  #3: ffff888031d64198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0
[  450.406291][   T31]  #4: ffff888031d63160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0
[  450.415920][   T31]  #5: ffffffff8e2772d0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xa9/0x250
[  450.426278][   T31] 2 locks held by syz.0.1001/9598:
[  450.431363][   T31]  #0: ffff88801d7360e0 (&type->s_umount_key#81/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60
[  450.441572][   T31]  #1: ffff888142f3d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40
[  450.450853][   T31] 
[  450.453777][   T31] =============================================
[  450.453777][   T31] 
[  450.462165][   T31] NMI backtrace for cpu 0
[  450.462174][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  450.462186][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  450.462191][   T31] Call Trace:
[  450.462195][   T31]  <TASK>
[  450.462199][   T31]  dump_stack_lvl+0x116/0x1f0
[  450.462217][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  450.462230][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  450.462246][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  450.462264][   T31]  watchdog+0xf3f/0x1170
[  450.462280][   T31]  ? rcu_is_watching+0x12/0xc0
[  450.462294][   T31]  ? __pfx_watchdog+0x10/0x10
[  450.462305][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  450.462322][   T31]  ? __kthread_parkme+0x19e/0x250
[  450.462338][   T31]  ? __pfx_watchdog+0x10/0x10
[  450.462350][   T31]  kthread+0x3c5/0x780
[  450.462360][   T31]  ? __pfx_kthread+0x10/0x10
[  450.462371][   T31]  ? rcu_is_watching+0x12/0xc0
[  450.462384][   T31]  ? __pfx_kthread+0x10/0x10
[  450.462394][   T31]  ret_from_fork+0x675/0x7d0
[  450.462403][   T31]  ? __pfx_kthread+0x10/0x10
[  450.462412][   T31]  ret_from_fork_asm+0x1a/0x30
[  450.462433][   T31]  </TASK>
[  450.462437][   T31] Sending NMI from CPU 0 to CPUs 1:
[  450.582750][    C1] NMI backtrace for cpu 1
[  450.582760][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  450.582776][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  450.582783][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  450.582805][    C1] Code: c7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 76 29 00 fb f4 <e9> 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  450.582818][    C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6
[  450.582829][    C1] RAX: 0000000001e0464d RBX: 0000000000000001 RCX: ffffffff8b60b2a9
[  450.582838][    C1] RDX: 0000000000000000 RSI: ffffffff8da2b6dd RDI: ffffffff8bf07040
[  450.582846][    C1] RBP: ffffed1003adc490 R08: 0000000000000001 R09: ffffed10170a6655
[  450.582855][    C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001
[  450.582863][    C1] R13: ffff88801d6e2480 R14: ffffffff90820cd0 R15: 0000000000000000
[  450.582871][    C1] FS:  0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000
[  450.582885][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  450.582894][    C1] CR2: 0000001b2fb23ffc CR3: 000000000e182000 CR4: 00000000003526f0
[  450.582903][    C1] Call Trace:
[  450.582907][    C1]  <TASK>
[  450.582912][    C1]  default_idle+0x13/0x20
[  450.582925][    C1]  default_idle_call+0x6c/0xb0
[  450.582939][    C1]  do_idle+0x38d/0x500
[  450.582956][    C1]  ? __pfx_do_idle+0x10/0x10
[  450.582972][    C1]  ? trace_sched_exit_tp+0x2f/0x120
[  450.582990][    C1]  cpu_startup_entry+0x4f/0x60
[  450.583005][    C1]  start_secondary+0x21d/0x2b0
[  450.583024][    C1]  ? __pfx_start_secondary+0x10/0x10
[  450.583043][    C1]  common_startup_64+0x13e/0x148
[  450.583062][    C1]  </TASK>