last executing test programs:

24m14.118276145s ago: executing program 3 (id=369):
syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12010000db168920402000d92ca90102030109021200010000000009044c15bb1c9dcf00"], 0x0)
syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000000000/0x400000)=nil)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_io_uring_setup(0x873, &(0x7f00000000c0)={0x0, 0x369e, 0x100, 0x2000006, 0x3ce}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r10, 0x0, 0x0)
syz_usb_control_io(r10, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x2000c8c7})
io_uring_enter(r6, 0x3d16, 0x0, 0x0, 0x0, 0x0)
r11 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000100)={0x3, 0x1000000})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r12, 0x117, 0x5, 0x0, 0x9)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x203, 0x0)

24m10.880627694s ago: executing program 3 (id=373):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000200)="3a85429c498eb5954dae45976c5d7843330e", 0x12}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x24004000}, 0xc800)
getpgrp(0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x41, 0x800000000004}, &(0x7f0000000340)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, &(0x7f00000001c0))
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @p_u32=&(0x7f0000000080)=0x411b}})
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r3 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmctl$SHM_LOCK(r3, 0xb)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)

24m10.073346165s ago: executing program 3 (id=376):
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f00000002c0)={0x9a00000000000000, 0x5000, 0x5, 0x4, 0x2})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1) (async)
ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000280)={0x1a, 0x4, 0x7}) (async)
ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x80a0000, 0xfffffffffffffffd, 0x2, 0x2}) (async)
r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x100000d6}, &(0x7f0000000200)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x118, &(0x7f0000000000)=0x200ffb, 0x0, 0x4)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) (async)
r11 = accept4(r10, 0x0, 0x0, 0x800)
sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="f78d6c3bb8d23594655015697b5eb8a3", 0x10}], 0x1, 0x0, 0x0, 0x20000804}], 0x1, 0x2ede8ec33678cf20) (async)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r11, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_uring_enter(r7, 0x623, 0x4c1, 0x4, 0x0, 0x0)

24m9.487158301s ago: executing program 3 (id=377):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, &(0x7f0000000140))
ftruncate(0xffffffffffffffff, 0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x91)
ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x10, 0xb, 0x1, 0x52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x8, 0x7, 0xfffffc01, 0x6}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={<r5=>0x0, @remote, @multicast2}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r8=>0x0})
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x4048044}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xa}}}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6tnl0\x00', <r10=>0x0, 0x29, 0x81, 0x7, 0x75, 0x49, @mcast1, @mcast2, 0x40, 0x7, 0xd7, 0xf}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1010200}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000e893b0db28f32560fe332b9184aeb1c832a09c523b89802638d6aebfd1067fcb329ec7220465b6eb4a16ef3428dd18da", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0003030000000000000000000000ffffac1414aa8edd000020000100", @ANYRES32=0x0, @ANYBLOB="01020200e00000020000000000000000000000000000000020000100", @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000000000000000008edd000020000100", @ANYBLOB, @ANYRES32=r5, @ANYBLOB="01020300fe8000000000000000000000000000bb96dd0000200001", @ANYRES32=r8, @ANYBLOB="01030000fe88000000000000000000000000000186dd000020000100", @ANYRES32=r10, @ANYBLOB="00010400fe8000000000000000000000000000bb86dd0000"], 0xf8}, 0x1, 0x0, 0x0, 0xc800}, 0x40)
unshare(0x64000600)
socket$inet6(0xa, 0x80001, 0x0)

24m7.668681856s ago: executing program 3 (id=380):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
io_setup(0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0xa, 0x3, 0xff)
syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802)
syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x6a, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$packet(0x11, 0x2, 0x300)
socket$netlink(0x10, 0x3, 0x0)

24m7.571837423s ago: executing program 3 (id=381):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000010c0)={&(0x7f0000017000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f0000007000/0x4000)=nil, &(0x7f0000019000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
close(r1)
r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_create(r2, &(0x7f0000000140)=@access={'system_u:object_r:random_device_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x5}, 0x49)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100)={[], 0x11}, 0x0, 0x0)

23m52.273534231s ago: executing program 32 (id=381):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000010c0)={&(0x7f0000017000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f0000007000/0x4000)=nil, &(0x7f0000019000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
close(r1)
r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_create(r2, &(0x7f0000000140)=@access={'system_u:object_r:random_device_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x5}, 0x49)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100)={[], 0x11}, 0x0, 0x0)

10m54.385142412s ago: executing program 4 (id=2776):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r1 = socket(0x840000000002, 0x3, 0xff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f0000000040)=0x4, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@bridge_getvlan={0x28, 0x72, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x8040)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r7, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a70700000000030600000000000000000000721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000050000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000020000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

10m52.41586019s ago: executing program 4 (id=2783):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000680)=""/121, 0x79}], 0x2}, 0x3}], 0x2, 0x40016100, 0x0)
syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x3000000, 0x40200)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000000380))
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5})
r6 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r6, 0x0, 0x0, 0xfffffffffffffa53)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r6, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
socket$l2tp(0x2, 0x2, 0x73)
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000000b32bec3e0e69cfc32d66e6ede61da3ed84f5254c0405310000000000010902240001000000000904000001030003000921001009012207000905810308"], 0x0)

10m49.137602254s ago: executing program 4 (id=2790):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000200)="3a85429c498eb5954dae45976c5d7843330e", 0x12}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x24004000}, 0xc800)
getpgrp(0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x41, 0x800000000004}, &(0x7f0000000340)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, &(0x7f00000001c0))
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @p_u32=&(0x7f0000000080)=0x411b}})
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r3 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmctl$SHM_LOCK(r3, 0xb)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
shmctl$SHM_UNLOCK(r3, 0xc)

10m47.964963102s ago: executing program 4 (id=2794):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r1 = socket(0x840000000002, 0x3, 0xff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f0000000040)=0x4, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@bridge_getvlan={0x28, 0x72, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x8040)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r7, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a70700000000030600000000000000000000721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000050000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000020000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

10m46.192485637s ago: executing program 4 (id=2800):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x10})
socket$inet_tcp(0x2, 0x1, 0x0)
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000480)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2131890, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x101)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1, {<r3=>0x0}}, './file0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone3(&(0x7f00000016c0)={0xa4281200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'tunl0\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES64=r3], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', r5, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r6, r5, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)

10m45.353621444s ago: executing program 4 (id=2803):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
close(0x3)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x1, 0x89}, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000080)={0x0, 0xfffffff9, 0x9, '\x00', &(0x7f0000000000)=0x8})
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r1, 0x207a98, 0x363, 0xc, 0x0, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x13)
file_setattr(r6, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80000800, 0x10001, 0xb, 0x4, 0x3}, 0x18, 0x800)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010)

10m30.268812797s ago: executing program 33 (id=2803):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
close(0x3)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x1, 0x89}, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000080)={0x0, 0xfffffff9, 0x9, '\x00', &(0x7f0000000000)=0x8})
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r1, 0x207a98, 0x363, 0xc, 0x0, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x13)
file_setattr(r6, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80000800, 0x10001, 0xb, 0x4, 0x3}, 0x18, 0x800)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010)

1m49.385716247s ago: executing program 6 (id=4269):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmallocinfo\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
socket$rds(0x15, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, 0x0, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8)
r3 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r3)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)

1m46.275154918s ago: executing program 6 (id=4271):
setreuid(0xffffffffffffffff, 0xee00)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x5}}, 0x18)
r3 = getpgid(0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r3})
sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1)

1m46.029987267s ago: executing program 6 (id=4274):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x100000, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc})
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000200)={0x3, 0x6, 0x5})

1m42.292016553s ago: executing program 6 (id=4279):
mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x122064, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x480c0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000005c0)=&(0x7f0000000580))
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x3, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x9000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
fsetxattr$security_ima(r2, &(0x7f0000000040), 0x0, 0x0, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000140))
gettid()

1m41.63104346s ago: executing program 6 (id=4282):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "2f6311c99b8bd3eaea788826489b78a358f465e370952c5f938cbf6171bc8e2a138f93fa8372f460114f6163b17b9dfe3f7f0b6962fcd7c795c01e6cce0de530", 0x24}, 0x48, 0xffffffffffffffff)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00'})
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0xa, 0x1, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000340)="adcb37edf3e503bb9385e87fc51ec7c38c0d2d1428a3b86274c4a68cc3559c621e7f17ff81c50836938dc4f77002a4dc590ca55bae98ca7dbf8422b9eda057b3bde108d690373b3683eef7ee355f3de1a1671b68e4d90e78060a4264ced1ca9cfb09b3e81f58f6d734e8cfe95622a3e97d62ab62af370a4ac95bec66f29dc98a646f82daa5eae312cb3a86bf87e0b78ada5ac5664e180d585c6cb7d590ee8c20c2f9f2b641a732332deeaa9bb33797abeac45d7ed3b8465c2b878a6137c3468867f2652895ac8bef8e8086c8e5ec199c3e66bcb8cbf168eeb6639b5468bc", 0xde, 0xfffffffffffffffe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="01000401000001000000090000003c0003800800030000000000140002007663616e30000000000000000000002b116d"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e64, 0x2, @mcast1, 0xff7bfffd}}, {{0xa, 0x4e20, 0x4a3, @remote, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001"], 0x110)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000680)={&(0x7f0000000540), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="f1ffff00", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x48)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)

1m40.529999237s ago: executing program 6 (id=4287):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x107941, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
r2 = syz_open_dev$vbi(0x0, 0x3, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
unshare(0x2c060000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
unshare(0x22020600)
r4 = socket$unix(0x1, 0x1, 0x0)
listen(r4, 0x0)
sync_file_range(r2, 0x2, 0x56, 0x3)
socket$inet_tcp(0x2, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
pselect6(0x40, &(0x7f00000001c0)={0x7, 0x8000000000000001, 0x9d5, 0x1, 0x38000000000000, 0x4, 0x6, 0x7fffffffffffffff}, &(0x7f0000000280)={0x2c286030, 0xac0, 0x3ff, 0x102, 0xff, 0x1, 0x9, 0x1}, &(0x7f00000002c0)={0x180000000000, 0xfffffffffffffff9, 0x20, 0x96, 0x100, 0x1, 0x4, 0xba0}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0xea]}, 0x8})
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept$unix(r4, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1m38.777568606s ago: executing program 34 (id=4287):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x107941, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
r2 = syz_open_dev$vbi(0x0, 0x3, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
unshare(0x2c060000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
unshare(0x22020600)
r4 = socket$unix(0x1, 0x1, 0x0)
listen(r4, 0x0)
sync_file_range(r2, 0x2, 0x56, 0x3)
socket$inet_tcp(0x2, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
pselect6(0x40, &(0x7f00000001c0)={0x7, 0x8000000000000001, 0x9d5, 0x1, 0x38000000000000, 0x4, 0x6, 0x7fffffffffffffff}, &(0x7f0000000280)={0x2c286030, 0xac0, 0x3ff, 0x102, 0xff, 0x1, 0x9, 0x1}, &(0x7f00000002c0)={0x180000000000, 0xfffffffffffffff9, 0x20, 0x96, 0x100, 0x1, 0x4, 0xba0}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0xea]}, 0x8})
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept$unix(r4, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

14.673881262s ago: executing program 1 (id=4550):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = dup3(r2, r3, 0x0)
sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
socket$tipc(0x1e, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000040000000400000000000475000000", @ANYRES32], 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b29, &(0x7f0000000040)={'wlan1\x00'})
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x83, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xcd}, 0x1c)
ioctl(0xffffffffffffffff, 0x4000003, &(0x7f00000000c0))
ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x2)
getpeername(r0, 0x0, 0x0)

14.239591646s ago: executing program 1 (id=4551):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0xffffffffffffffff, &(0x7f0000000140)=0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000006840)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000380)="b0631e5a8df28c69b940ffcb6b659c7bfa96f62e678e61c022259fa4b0b196c90a02249c9d5d8e091b507e757ab33845773f60fa2e1ebf9f59180b8176630ea50df4fbc28f8f49055cd628658ec158a4c064c9bd6cef9de5bf324302aea42ed63e305f1c23de0b82c01644ed3c88a825a48e3a0b396cfa79339e73379a22a36995cfb40f9855c50335023505adcb5a5f229ee574aacee8fc39bce29561f88b1c8e9605e2d21550ce5d5cc0d59061e37d8e7698e3b8565bd0b606956d28b3cf424711b6c2c0086953f4634d5384f07621c20fa63de0219f3bec0b203cb80a1fd78362678877", 0xe5}, {&(0x7f00000026c0)="80c71b6b44887052c4f63787d822b2b38a613d6b13cff18b1857a8005dbde34c84cc1216a4376bc1f58a8578ec5647889302cff1f0119a287d5e259ce40df1a93899ad69e128ff45edaa40381f1123df2ecd3cce3b9a9ccc57d7865c403a8dbdc91012c3611d9ec8351e7cf487dde2f2c730caf992382c94f5c1875d548b2871e9e2e50400"/148, 0x94}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="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", 0x1000}], 0x4, 0x0, 0x0, 0x8040}}, {{&(0x7f0000002540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000025c0)="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", 0xff}, {&(0x7f00000001c0)="04da0eaceeba64c56ac84547b8b5de1fe6d8cb9c3860f327e799f6d049890a721cb56f28d32be1287d6bd2ecc27516432ae44bb759cfad37", 0x38}], 0x2, &(0x7f00000067c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x68, 0x4008805}}], 0x2, 0xd0001)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x88, @private=0xa010101, 0x4e24, 0x4, 'none\x00', 0x5, 0x100, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x7fffffff}}, 0x44)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100001cddc7e9d217f5beb6250802040256ec26010203010902120001080000000904"], 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000890)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil)
shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x5000)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3)

10.935701216s ago: executing program 1 (id=4562):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg(r0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r8, &(0x7f0000000040), 0xe09)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000514210604000000000000f6070001"], 0x20}, 0x1, 0x0, 0x0, 0x40085}, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}})
ioctl$KIOCSOUND(r8, 0x4b2f, 0x9)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390440bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x24000007}, 0x0)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4)
r10 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r10, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
close(r6)

8.341401843s ago: executing program 2 (id=4570):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r0, 0x0, 0x0, 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004'], 0x2a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x8)
ioctl$SIOCAX25OPTRT(r5, 0x89e7, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x8080)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r7, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40)

7.367061487s ago: executing program 2 (id=4572):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0x9, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xc1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0xffffffffffffffff, 0x9500, 0x3000, [0x9, 0x204, 0x5b, 0x8]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
r5 = syz_open_dev$hiddev(&(0x7f0000000000), 0x2, 0x111800)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000040)={0x2, 0x3, 0x8000})
getsockopt$inet_buf(r0, 0x118, 0x9, 0x0, &(0x7f0000000100))

6.682126033s ago: executing program 1 (id=4573):
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x308020, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000000c0)={0xc000003, 0xf, &(0x7f0000000180)=[0x138d, 0xa, 0xc, 0x7, 0xc0000080, 0xffffffff, 0x7, 0xffffffff, 0x8f0, 0xe, 0x4, 0x200006, 0x85, 0x8811, 0x10503], 0x1, 0x4000007})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x18b0, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x187c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x8}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x10}}, @TCA_MATCHALL_ACT={0x124c, 0x2, [@m_tunnel_key={0x103c, 0x1, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8241}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xfc, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}]}, {0xb5, 0x6, "07a94c42bfdc89c810e82ba3704abcef0f3d11e0cc18b65afa350b6b9eb1db51c9ed481c00b19e1c80d825b3ed357ddcbc5d59e4b1983d7974c781dc3ceaf827b5e615e5ae26b37c5cf65e25c8423c6f265f79569bc0b4180d39af66d968154270ec981ee13e5d5327fd6ba97c483e4de4a23ee41b287690539e709967c99c25b34d0ddff033088b54da8f26ef1750ec503b52bd221a55e8c1ec9e6e76e3bf2bf767b3dc96de7e12bbaa86eb123eccb89f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}, @m_bpf={0x110, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x81, 0x80, 0x8, 0x2}, {0x5, 0x1, 0xb, 0xffff}, {0x590, 0x3, 0x4, 0x3}, {0x7f, 0x2, 0x1, 0x3}]}]}, {0xc2, 0x6, "584abdb1e91aa41df0c7b87aa30107d6e0798c484d6da489751ef8217a85cc2a536417d68b5a95d167d8d3fc5f6992663a6bf5b337c9b0750d04d25b7adaac1b5350e49ecd71a9ddea5b1d8b5bc9de05506e85339040ec5863d3ce9844325be6dd1576f374958138c62ce74530902b3a9c48fca1c417aec03854a879e4c136ff0114d708b04af54bc7565b676dc02e1a6eb179a3360091f6fdb7a24dbefe22181dc505f32574df8c1cad0decbb17f9fc7f0aa851b6978ada78aa55b46c56"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x614, 0x2, [@m_mpls={0x160, 0x7, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x8000000, 0x8, 0xffffff00, 0x7}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x10000000, 0x2a, 0x10001}, 0x1}}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xe}]}, {0xeb, 0x6, "565e229f6797b3d62d05549a193e669fd5c0c92cbe0c7598550474ef490f563651d46596ab09f8407d0d3594c0a5550b135f521423610a744ce5b715edcb736cdb1bf5cc01d489cb3f22fe868226339a8152923274ad1573056d0158b1478e3575de9aac5a32fab92776725b2d4c7509ec3455db9f7f95accc2d14bbbaac28f40b5e83b4f845b453d6b09014cbd2d976a87b10aa6da61ace59cf62da5019fd7e4bc682c41836b52c7869a1aa176a64259bb2ba69910ad90ced6a0e8a04180588541c6900938a042240d787ee10cc35144ce24aeeb7512f5587edfac82af20373b4a074c560a490"}, {0xc, 0x7, {0x1, 0x36733c6aa2089896}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0xfc, 0x8, 0x0, 0x0, {{0xa}, {0x9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x98, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x38, 0x6, "3621ba5841a245ddd0f06627c0701e67b023279e58d16530256a472126835213ac621a71011f007c6a88f8b54fdfa24104a0a085"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x140, 0x1c, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ']\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xa, 0x3, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x2, 0x4, 0x9, 0x9}}, @TCA_DEF_DATA={0x12, 0x3, ',)#(\x00/:-^%#*$\x00'}]}, {0xcb, 0x6, "f2ced435c6eaa537b8d7dcc8e8200db1a9d19aa74aca7c77b92290791cd30b4033c6c5fff39f4502d6d5ed48f74a29c07c3d7bbf03c3a595b773cfdd661bf8c5050d70d7ca5aaaa97ce8a4b7ab311125cc05a6551deb95c4dee14b81c5718ea91e4067dbd628c33d77e543db96a8f87a32655c6aaefc11667af19fd123b3f7f1fa91d9bd72b2c073d7496d90c32ba594413f49e0e3ef1bf4dbd0f2167e884b92f0cfe52a2794b12316587319a09c5aa451294890aca8e3763bbdcbb3c59fb9d68b534bbfa6acf7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0xd4, 0x3, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x9, 0x4, 0x9, 0x6}}]}, {0x8e, 0x6, "670276f6fa8bf20c4368725d66a41748f82bf806c97d97a117050ffa01fc40b93ad8e3cbb291c8a6a0d92d649b919d446de0649a1597e10d0fb28b3e060ca6a64f32c7781b904292de6fcc7dc2dfefc4b0650ac7bf5f6adb25ecde8fcb89e591437110d8549a9368c7fdda7817048c420cb2c4f3c148dcf51aa2425bd4eec92145eb4f0caa2fd7a30cf2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x100, 0x14, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1800000}]}, {0xb9, 0x6, "ed4e6c23349661e562996930fc56b88d4f2c1cb9e0b62f35029571d6ee508017e590808c108f9f4b587a5507e1ba17af6c9216e1a9b1496acd04ed625472b6752292fb324e0cb96b9e780df649f007a61de6e494b2969a8b7382680900d1373a95cd63c079115ca8b8bbc30b5fca53c3399b17bf7aba75f9a988a9b192ea0e215b8f6aea647759c81403369abcb7add173bb7091fa1125f0685648ed1a5fae167c510c1b60925b6743dd4eecf2d53956dc856ffec4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0xa0, 0x20, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x101, 0x10000000, 0x3, 0x81}, 0x9}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x800}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x17, 0x6, "d29480b769431d692d6858f6612f42d0cc1785"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x18b0}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r7)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005)

5.913055363s ago: executing program 7 (id=4576):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000025c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002580)={&(0x7f0000002400)={0x114, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000214010028bd70003c30a89397f5cc", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x16a2)

5.54117595s ago: executing program 5 (id=4577):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x80, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc)
socket(0x10, 0x803, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e27, 0xfbf, @loopback}, 0x1c)
listen(r3, 0x3ffc)
mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
close(0x4)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000), 0x4)

5.534518246s ago: executing program 7 (id=4578):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='!,\x00')
mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
flistxattr(r3, 0x0, 0xffffffffffffffb1)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x20000040, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00'], 0x1})
write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x1, 0x41, "0062aa7d82000800030000000000f7ffff00"})
r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0xc})
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000016000000b50e00007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00cc01000200"/28], 0x50)

5.42165689s ago: executing program 5 (id=4579):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) (async)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)

5.420373053s ago: executing program 1 (id=4580):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1)
ioctl$FIBMAP(r4, 0x2272, &(0x7f0000000040)=0x85)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x4d, 0x0, 0xde, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe)
shutdown(r5, 0x0)
recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=r5, @ANYRES64=r2, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYRES16=0x0], 0x0)
getsockname$packet(r6, 0x0, &(0x7f0000000200))
r7 = getpgrp(0x0)
r8 = syz_pidfd_open(r7, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x54}}]}, 0x30}}, 0x4000010)
setns(r8, 0x34020000)
sendmmsg$unix(r6, &(0x7f00000060c0), 0x0, 0x55)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10000000}}, './file0\x00'})

5.357764739s ago: executing program 5 (id=4581):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0x7ffffffb}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)

4.343136753s ago: executing program 7 (id=4583):
mkdir(&(0x7f0000000000)='./file0\x00', 0x11a)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='omfs\x00', 0x0, 0x0)
r0 = inotify_init1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x8)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x100000}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0x68}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x71})
r5 = socket$inet6(0xa, 0x80002, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]})
getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc)
setreuid(0x0, 0xee00)
setxattr$trusted_overlay_origin(0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x2)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)
inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x24000408)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8923, &(0x7f0000000040)={'wlan1\x00', 0x103})

4.159103987s ago: executing program 2 (id=4584):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='!,\x00')
mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
flistxattr(r3, 0x0, 0xffffffffffffffb1)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x20000040, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00'], 0x1})
write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x1, 0x41, "0062aa7d82000800030000000000f7ffff00"})
r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0xc})
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000016000000b50e00007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00cc01000200"/28], 0x50)

2.861650739s ago: executing program 5 (id=4586):
r0 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
recvmsg$can_bcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f000000e0c0), 0x10010)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', 0x0)

2.088038683s ago: executing program 1 (id=4587):
syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000280)=[{0x1900, 0xc001, 0x0, 0x0}, {0x1000, 0x8001, 0x2000, &(0x7f0000000000)="2a86333fa21e41d55562889632e9ff52"}, {0x4, 0x0, 0x0, 0x0}], 0x3})

2.072451751s ago: executing program 5 (id=4588):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket(0xa, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, 0x0, &(0x7f0000000100)=0x98)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', <r4=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', <r5=>0x0, 0x7, 0x710, 0xffffffff, 0x7, {{0x13, 0x4, 0x3, 0x20, 0x4c, 0x68, 0x0, 0x9e, 0x2f, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0xb, 0x9a, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @timestamp_addr={0x44, 0xc, 0xa, 0x1, 0xc, [{@broadcast, 0x1}]}, @noop, @timestamp={0x44, 0x8, 0xa3, 0x0, 0x3, [0x3]}, @lsrr={0x83, 0xf, 0xee, [@empty, @local, @multicast1]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}})
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={<r6=>0x0, @local, @local}, &(0x7f0000000340)=0xc)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000003c0)={@dev, <r7=>0x0}, &(0x7f0000000400)=0x14)
getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000640)={0x38c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfff4, 0x7f, 0x6, 0x73}, {0x3, 0x8, 0x0, 0x3}, {0xabfb, 0x1, 0xff, 0x1}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x38c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendfile(r3, r3, 0x0, 0x200000)

2.016192623s ago: executing program 0 (id=4589):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0)
memfd_create(0x0, 0x0)
msgget(0x2, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x3)
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
socket$inet(0x2, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x16, 0x0, &(0x7f0000000040))
recvmmsg(r3, &(0x7f0000000a00)=[{{&(0x7f0000000180)=@sco={0x1f, @none}, 0x80, &(0x7f0000000440), 0x0, &(0x7f00000004c0)=""/174, 0xae}, 0x8}, {{&(0x7f0000000600)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000680)=""/123, 0x7b}, {&(0x7f0000000000)=""/19, 0x13}], 0x2, &(0x7f0000000580)=""/38, 0x26}}, {{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000000880)=""/210, 0xd2}], 0x2, &(0x7f0000000ac0)=""/43, 0x2b}, 0x2}], 0x3, 0x40000000, 0x0)
syz_open_dev$MSR(&(0x7f00000000c0), 0x2, 0x0)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.451101541s ago: executing program 0 (id=4590):
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x308020, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000000c0)={0xc000003, 0xf, &(0x7f0000000180)=[0x138d, 0xa, 0xc, 0x7, 0xc0000080, 0xffffffff, 0x7, 0xffffffff, 0x8f0, 0xe, 0x4, 0x200006, 0x85, 0x8811, 0x10503], 0x1, 0x4000007})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x18b0, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x187c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x8}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x10}}, @TCA_MATCHALL_ACT={0x124c, 0x2, [@m_tunnel_key={0x103c, 0x1, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8241}]}, {0x1004, 0x6, "97bcb477c041153c3981e564c404bffe16454e14bf3d315c1c25f3beeabc713626e31201d464a52ebdba9773aec171c8799b31b8c5e959d102a67545be94a0ee9ed2feb3ed5b31ce529d7d2787b312fe71ac7702cd374e478f720474bc742765da593228466e41702125fa888dfe48f2dea83b434e7be1886b738dd21b0644187bb271b1c62f4e9f91e0964a11df2ff4a6736ddf9da00c9cd39ba794c3d6ecd2d0a956dafd90867a6d716b75ae78ac57f1d1129dca2038a1e65e78c66d04e8df11462d1e6ba31d03703fb22958340b08ccb1ecaf521e0bcef720d097d587fb9328082c0c72d80ed24e0fd8adf3fbd088e63ff9a115938bfbafd18e46e336c8a8c5c4f6ecd17a52a5bc8c782760b53a8682e98c7042e4d0a6a875f8d7220337d13d485806718c9e768ee57ffc11c3837ecdb7cd967b8eb4577865c518dc0969bc23f10fc54ea4b6736f5603f1247d03e001ed5db3b5fc9f43f023a3559f32a705f240b6fd741e1f3907e673eb2fdd443540294e8fc17f20f406066bc0d3b248ce1893abb3204a0c9f6a63a70706f39933b779a1883372c89325cd7ffcbd41d7af6c7fa9f25924ef97c77381728c244f6fa4dede4131d771946727ccf81aaf9887fc49273657f75c9ab68d2feaed2ae9668a8d2aaac31b71189c87f739fddc16ab9c812f5eac6b12a3d64f9f2ff44ad04d009963bf6ee55bf6a812d44c4cb13cf67ffa12aa3bdd5b7e67d160b3a6aa93c694f6f9ac139ebd8d7384cb32aca6c48c73430e1e1bc5acf864aac8dcd311186e9737ee0f9c608547700d671fd8726333f57e5fccb651739900942f5ac5bcaef28bd77bbcc26045d11f2a1b56db63f99a9cb6651df4cb38d8c4d58768595f30be4b4055753ba67b3c5ffaa45da8a1146a19532a22f367aeddaf9d7a1982457bc169494b709d791c0f46dfa8659ba7e23806b62d8fe464411a31a2f507afd03f485be482762aa86c7f0acce83de6b48929c9d60725af724892ba62b05af662a27730378c76b13880c80e445f4af032426519fc3ef1da11bb03f933d208192cd0bc1e0a61ccfeb908e63e7de36205e11da0f75673614ff55fc968138882c4f9082dc89197ddca737f42dce098ceb78f89a40dc114654f31a12ecc26ae2466b8ae913e60f3613c2694a31835419d63cfa44077c34460e7ab32d35748bb5a1aa8fa4973ef1f7460414c236a8eda12908e6574b682c44c371405015d97517b0c15ea7c832926a701c571e14ebdadaa6c91306e07a347c601d91c0a21def7b6212c1fe122e6e9a6b0a8be274374b55722ec019eb3790f991554ed8b654ad1cde29f87e3266369e38b84a8313dd4f7953a57d5318912e2f69449e273657db7181b2ae9ca531765c8a5d0664e992523840d3f30ba0adbebadc1bed8ea2bb54b663d8965fadfba847164a2a5e0d0782f8f4af0db3d3bc7fcbbf1ee51d05abfef70875451c27fd598a538c089c7f0350ba2325d800476f0c8eed4270e35cf0bca86f8a1f61431376cd780c1493db5c460ab007d634b126dbe9fcd4fca6af2b86436e8341da4dada83b34542a2dae62b95070b579f7a4385995a52bbc0b4f4cb4181bd2454f96ab02ed8eaf4a2798529cafe22d1a25ebf9247426dadbdd68b179981bb84ffc8a6f5b2e42787208c1788fdcf28855f156081b29ff72442bebc72ce7b13d1de8d762e35d1f95a250cb581a1ac30dc3a249a8b815eaec45c6c07c53d51f46a162171de871d9d0f86416e0adb60b93094021d7e3a592f53ae16eb143ea6c988009a04564c8827decd1ecad41be70d1fc26cb00d4a69d6a5bcd683c680df6089393722be3d27635d6d5b9c43fdd624117e1a9986fa481780534329a0900205d4d4b13c03667a2754ef1c7a2f56bab83a061010702946e93cc4427187cd79d8d13981567339bd59d63609e8d61a6a1706d514fb4e3bd3a8a50c0aed6fae5a001484670cdb6263cdd1fd9d958d99f91147c961bb7f157e098b236f9f334d31b6d062e0beb3f384680251d50bccb4fd505fc5768cea569a8f595b78d5d3e3187822ced3047ff612e14447ad4d97845f097946950f3a7a6de6ff5c83a407fdadc21b58be4dc03283231fa5ab29b46fa9e325d91dc5b8a589f6b919a72065c0fd8cd912b7e90624eb02ed7af18aa16b6192cb26b31313ef61dc146933689ba1fe879503e8d019f0d6ed7ed7faab7a5bba3736bac34904b5d17045d0d3d8545b18010edbd132ff4f9f187eceec694d259d42368fdf8d28b02839ff3e1ad2c59594441e35e6cb95e18de88f1c95bba117176ab40f7548522e2aabaaa691c8d847a1bf68c854ea94f37493326cfc3ff912e0b88119fb57d4ca368adc07cda96014929a085bfa992757963f52c9d83300df4dae191c744d7c53c1d3336c438d70039d316e04a0510f9d9bdd313442a36bdaee70179c12589eda48cea2f93c788e1841835d73b1453d1265618878e2ac6f051f7f647918509402a030e0f531c2c3352b2ee2ed7f13789ccc111646312f1e35e882ecef72389ca61b0f44ac3663591c7f3371589ce249e5e9bc02201fb40948d2dbc1b99e7452779e9a4aeadec0e9cc50254d572ca2d12152e1f6873fddb4b515489610f84f6c587ef3c794ba01a8f3ee2642d19335d9b1d706061e09eeedada3b4068be5f315feb732a5669f5b3b8077a0a3eb313386799288190543d4c6ae6bb33d8361dbe5dc0af4e776969dcffc17b58c3256febe4ff18a79f981fcff1bcccda1186b6ac26e41d204953b600179b81fe89b72e8873aac970a3c551aa8da1aa4068300ee8de24641e93b22b152c6db03f47fa8eebb01a81acc3f8eca12882a884cbf2e315bbc1cf085f71816faa0bbefe14538cc44186ba282b601fe76c0868bf459796a69122c266c8f1b041237ad0b51bff4f22eaf886057f1f9cee7b826f87a0668d75cb6cbe91885c526b1b70aed337f065fa6d59bbe40f514932f92af75fe6b1ce5485a170cfb9ea7a49eb142ef5b4dfaff73585a6c6eb81e5c6c0a85ba4cf6e5a7253b8eeb703a86a490ec3538b8ef5bffe3ebec360a9f121ab7f6b8ad5b673535e958ead759ecde9730dfb0798e0fb5602a84f589c3d4dfe4c26d3e4e446bbf7eaee788f1c994cb4792935feb0288e3014c4f57d1ef9950dc7718e36c2e5de4c417b2e5563d9b052d614a9a836c5b6d95e1017678aee57b1cc3337e5d1cefd67db8f18c842299e8eedea42233e347585688f1fb6fba5d2b18f5474fd50b5692b51f05ec9e0fc544710114f2f59094aa890705ef5d5aae3287df01a7c5a7631892cc777d2b59936987e6293c846b2b4ca6eac2185461fb32342bd0366f674cd09b6247067cb472b7d7c85ac192627e7e9482146b2e522dcec6da86332edecd8596a68f689f18a51c7878eb3df712e9d82e8c0ef7900c8fef90ec62c7f6f15663ad7781853621e95ffbe7071b0504870907563b3ae15f98ca924c4628468a875e22b9a878bc1d7ed587d7b193811fd8a1992f86ed8e10d282b9f535486676e77bf8000482fd378ff58c5defb987585f916a3ea93afe5b8170cbdccdfdd707ce365271ecf55eee44834a19dae80b8f72ee95ccaa7c067da495e80aaa71c44c4fb21bc5c9c40004f5be2c92ae6738707d3f1aefcb9df7db64e0ed4c1cb8f8789082376c4e46d8987d5f854dbb049c445052d3947491496ae85d7c0f11b188439a5ca86206b39d4b7a112cd5e7c018b59f1815b4cde98833b5702e984ee6b5ecdce8e8a7ae3bd8bd6e31e1fe879184eed3bfb4452ff0bf90117304309fe4b8fe7ac135e558f81016d2b5a047f750fb76f8b50a831240c62b357c8f8e977d1971216c51616e473580063d68438e3583938486d27b1415e6753cda42915d6cdf78047fc6d4be725dc9977712a52a6d0056d2e65ee4ec3a8c9c49a9ad82159c14ee8e957ac3298193eb3a18a0aa8c468ce6bc2f60d76675b932ce2946b758292c774ff19d7c549c469a48eb287c6a96734d3051ff6a1c9ab39955d23545751a9595544256ccd422db92e0924238e6a02553e6256438e2c7f4be149a23b8cb18218c1bcd0bc520f8b4e353d73b20324595d09cf0e5995d756dfb7793077425bdcc6e4755381ba16cf84e782771428a4476499665f0ed960b9687f0f511e2a64d39e806658c2bc25a4a53fa995a2d6c2350e34a20abf8feac5a0b4907e1717e66b84747941751898ff438e20d44ea4f2ae098efb6ee66cd9d99624ecd17ef77bd1450191a2d62e3b32d8b91b5532ecf547ec951330cd5cb4e7fedb82763756c215f56ba805de06a225c75fc4591b49e1ba19cf795ecb6fd0be02cb5cc65e6d2d2d11345dfe9094f239337075600f84bda480518e821236ae3ac191d02e05dc4d00c5bc8285103ed19d2438fe13025fffc72f527bf810007d37e5c03ab6e0f36bea7f4893997502e41b639415eb3fea1d6a8937ab19ab542267658783ce1e691f791e482b7b6af5e5d7a63b9a425b5db5d2d49ae624404b898475d2e65748dfb83bc06ccced13e346ea413e77542cce74292893bdaf900bd0cc432b076a96cdef566ea40f282b2ab9cf8d41d75dcc831961b57605c48e53b11c2aaa810a693d00516bc80d75d9da1a65a07942fcb9f80fcabe710cd605c52a2433ffe95e5f2128752f98a871964cddc6551a2596f5ac56797580bc4037020304e92f18cd42832b88cc20949f75afd338be7691e10f41c55665599185afd1e3698d0124ae75e642b524c85debddf95c8ad43902fa70bcbc527df42270d3e3e79b61cec3c6445c114eb008aa282ab829bbeb874a356fb56c2a56424ea10fec6e873846287160b27ce4ef885172def5288c0bf44a1b84b7d0544c1368122d24a12f7cf36efea9bcf71f3828c052e1926932b28ef709e5b2d21d6a22c3007b405292db8ad0a2e0ee508cfae57469f1af971ef180aec96dcb174c603db258ce02819986f6824ea0285fe0563ad9978ea51335f3ad11a5330d7464fac2270c5f3a8372d4bfda61171ecb9e5b24d9cf823b69cf53ed959c35215626b9d1a367f181127e7ae5884caeec17dafdfec23168cff1469309f3677245212507c78f7afc4f79796d9b5800d87b131a67f70c67a3eb14bc22a856578b7b2e2f4a38091b3882e15b5656bf4a5142c2b1be15f9f0777619aefb3627ef1026163b0e29576587fb663c77384da8a29ce27d5ea430df360215a207bda638061e66fd366e1a73b97d2ffa2ddc125fe7d1c8a600dea87850fec1c5587b16614e99842661a410e0636eca4ef2ed45e80d419d51660dbc48136f6bb626e176108cfe58e9c495ff2fce2406fca6854ecd328d4425949ba91d5eb3ea27c51148edac660b347b4c6f19d308299908ea046a84fb3944d1b7bf4aef9624d4b14c03f73f9b47f43208c479db52f7bcfa6b482c5a2487c4cab909de82ab409fc0424354cfc85ddd5103c3508519ec1be124145ca472969ced054d694516b529f2a08811f8d835d18b74cd123cde0f48bc1bf6b588a3e05dc7f2b99f68165936658beda4e6b7bc48327a6621028a8af2ce13f36a723bbee25b92c8cd156b2424b309194cea77e347d6e029e0b1196ba2b32c5c2c1e48d38bc58449e86d1607f42320d6830ca424469a234f7c5c489a33942c315acd6fe8343f1bdc3b988d1aa5c64d22a59d696be393a4becc2471e6940c5f62e6d2f9d338622618de14e6b012f0e090d37502e19048fcbdd631ffd3671b341fe29aa375335d4b9f40ac3c3aec180fe3ea1d5708a367a4b82a9b4228f05f91fee4e5801832d9b662c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xfc, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}]}, {0xb5, 0x6, "07a94c42bfdc89c810e82ba3704abcef0f3d11e0cc18b65afa350b6b9eb1db51c9ed481c00b19e1c80d825b3ed357ddcbc5d59e4b1983d7974c781dc3ceaf827b5e615e5ae26b37c5cf65e25c8423c6f265f79569bc0b4180d39af66d968154270ec981ee13e5d5327fd6ba97c483e4de4a23ee41b287690539e709967c99c25b34d0ddff033088b54da8f26ef1750ec503b52bd221a55e8c1ec9e6e76e3bf2bf767b3dc96de7e12bbaa86eb123eccb89f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}, @m_bpf={0x110, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x81, 0x80, 0x8, 0x2}, {0x5, 0x1, 0xb, 0xffff}, {0x590, 0x3, 0x4, 0x3}, {0x7f, 0x2, 0x1, 0x3}]}]}, {0xc2, 0x6, "584abdb1e91aa41df0c7b87aa30107d6e0798c484d6da489751ef8217a85cc2a536417d68b5a95d167d8d3fc5f6992663a6bf5b337c9b0750d04d25b7adaac1b5350e49ecd71a9ddea5b1d8b5bc9de05506e85339040ec5863d3ce9844325be6dd1576f374958138c62ce74530902b3a9c48fca1c417aec03854a879e4c136ff0114d708b04af54bc7565b676dc02e1a6eb179a3360091f6fdb7a24dbefe22181dc505f32574df8c1cad0decbb17f9fc7f0aa851b6978ada78aa55b46c56"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x614, 0x2, [@m_mpls={0x160, 0x7, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x8000000, 0x8, 0xffffff00, 0x7}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x10000000, 0x2a, 0x10001}, 0x1}}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xe}]}, {0xeb, 0x6, "565e229f6797b3d62d05549a193e669fd5c0c92cbe0c7598550474ef490f563651d46596ab09f8407d0d3594c0a5550b135f521423610a744ce5b715edcb736cdb1bf5cc01d489cb3f22fe868226339a8152923274ad1573056d0158b1478e3575de9aac5a32fab92776725b2d4c7509ec3455db9f7f95accc2d14bbbaac28f40b5e83b4f845b453d6b09014cbd2d976a87b10aa6da61ace59cf62da5019fd7e4bc682c41836b52c7869a1aa176a64259bb2ba69910ad90ced6a0e8a04180588541c6900938a042240d787ee10cc35144ce24aeeb7512f5587edfac82af20373b4a074c560a490"}, {0xc, 0x7, {0x1, 0x36733c6aa2089896}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0xfc, 0x8, 0x0, 0x0, {{0xa}, {0x9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x98, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x38, 0x6, "3621ba5841a245ddd0f06627c0701e67b023279e58d16530256a472126835213ac621a71011f007c6a88f8b54fdfa24104a0a085"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x140, 0x1c, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ']\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xa, 0x3, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x2, 0x4, 0x9, 0x9}}, @TCA_DEF_DATA={0x12, 0x3, ',)#(\x00/:-^%#*$\x00'}]}, {0xcb, 0x6, "f2ced435c6eaa537b8d7dcc8e8200db1a9d19aa74aca7c77b92290791cd30b4033c6c5fff39f4502d6d5ed48f74a29c07c3d7bbf03c3a595b773cfdd661bf8c5050d70d7ca5aaaa97ce8a4b7ab311125cc05a6551deb95c4dee14b81c5718ea91e4067dbd628c33d77e543db96a8f87a32655c6aaefc11667af19fd123b3f7f1fa91d9bd72b2c073d7496d90c32ba594413f49e0e3ef1bf4dbd0f2167e884b92f0cfe52a2794b12316587319a09c5aa451294890aca8e3763bbdcbb3c59fb9d68b534bbfa6acf7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0xd4, 0x3, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x9, 0x4, 0x9, 0x6}}]}, {0x8e, 0x6, "670276f6fa8bf20c4368725d66a41748f82bf806c97d97a117050ffa01fc40b93ad8e3cbb291c8a6a0d92d649b919d446de0649a1597e10d0fb28b3e060ca6a64f32c7781b904292de6fcc7dc2dfefc4b0650ac7bf5f6adb25ecde8fcb89e591437110d8549a9368c7fdda7817048c420cb2c4f3c148dcf51aa2425bd4eec92145eb4f0caa2fd7a30cf2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x100, 0x14, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1800000}]}, {0xb9, 0x6, "ed4e6c23349661e562996930fc56b88d4f2c1cb9e0b62f35029571d6ee508017e590808c108f9f4b587a5507e1ba17af6c9216e1a9b1496acd04ed625472b6752292fb324e0cb96b9e780df649f007a61de6e494b2969a8b7382680900d1373a95cd63c079115ca8b8bbc30b5fca53c3399b17bf7aba75f9a988a9b192ea0e215b8f6aea647759c81403369abcb7add173bb7091fa1125f0685648ed1a5fae167c510c1b60925b6743dd4eecf2d53956dc856ffec4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0xa0, 0x20, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x101, 0x10000000, 0x3, 0x81}, 0x9}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x800}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x17, 0x6, "d29480b769431d692d6858f6612f42d0cc1785"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x18b0}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r7)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005)

1.449147058s ago: executing program 7 (id=4591):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80800, 0x20)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x95ff, 0x200)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x1, 0x100, "77ec2a93c306452f54509949be7ed29b71c63e5a3b105fecfbd48a34f5a3432c", 0x3, 0xc66c, 0x100, 0x57, 0x440})
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/67, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0xb6, &(0x7f0000000340)=""/182}]})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x17})

1.269319882s ago: executing program 2 (id=4592):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x11, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', <r1=>0x0, 0x29, 0x5, 0x9, 0x3c8d6a7e, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8000, 0x700, 0x0, 0x8000}})
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@can={0x1d, r1}, 0x80, 0x0}, 0x4048005)

1.221317546s ago: executing program 7 (id=4593):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048040)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x2b, 0x6, 0x0, 0x20, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x7808, 0x7, 0xffff}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES8, @ANYBLOB="1000000000000000280512800b0001009c42a8686c3f7330180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000006680), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r5=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2dd8ae57aff35d47cfce9e48f7b6d84e8945fd7385e10c0979a35fa132aecaed3554206c0079719557ee04acda7fe6136d13093741c35cc17856a77f44b169cc2072cbde67d4111f250e765d95", @ANYBLOB="e88301d83f7a7783a41eaa9184c27fd96c04ecf9175bc10e68e32680022553b6d29de953b60500c654cf78cee81ea7f4dd7c0cff94eb41a57bd465fb2e666304a27802d00de7e7fd7ae8f439421f4df106b1fb2dc3fd6cea67bb43bc35099f4e6b34e0852bafcca39c53aa77b30578e9ec374af6189addf9536d3b196fb6babe72", @ANYBLOB="8f4b2454a6b216c2f8dd5bc8cde9928dd78df64052de2fdb11fae82d45e376874885672339f405881abcc44d0b9e707c6db33a8c4de8e5b1d63b65ece4b72e78d1ee747606b3873547eb9dbcc312e36c654217320c353302c332d737de42ed8f090ae21e6857d17a2183845c9ad95819ed1457fbe1e503186bba1dea63d4d5ee551bff8d8774ccdcefa85f7b5b7c60ed9264e82f40b0bf224e2ec35b28cc0007e6c443e21c", @ANYBLOB="8edc6923f2aa5cd657a8e735b8", @ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x2151}, 0x2004c040)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000007c0)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="110026bd7000ffdbdf251800000008000300", @ANYRES32=r9, @ANYBLOB="c7bba285421d53153964f339aa26a4f607c1864eb8c606daac1262b84bed360b5d75498e21052e3673d44626a06287646383ae817c613c05e8816489e1558c53455505922f41274198739feaee1f0628602b5977f34574b5b638b97942ca0879cf5d2a3a0cddd22f0005ccfe000c26c516ebfd6d7694e258ea6b615cf56bfc73aab305e2270d98e98f"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r12=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r12, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000300"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r13 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012abd7000fedbdf251f00000008000300", @ANYRES32=r5, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=r9, @ANYBLOB="111dae39", @ANYRES32=r9, @ANYBLOB="0c00060003000000000000000c000600020000000200000008000300", @ANYRES32=r12, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8005)
r14 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r14, 0x1, 0x0)
process_vm_readv(r14, &(0x7f0000000d80)=[{&(0x7f0000001e40)=""/42, 0x2a}], 0x1, &(0x7f0000001f80)=[{&(0x7f0000001e80)=""/247, 0xf7}], 0x1, 0x0)

1.218178796s ago: executing program 0 (id=4594):
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68)
fallocate(r0, 0x0, 0x0, 0x1001ed)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
fallocate(r0, 0x3, 0xf00, 0x10000)
r3 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r3, 0x114, 0x271b, &(0x7f0000000100)=""/102400, &(0x7f00000000c0)=0x19000)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4)

1.112159253s ago: executing program 2 (id=4595):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r0, 0x0, 0x0, 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040))
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x8)
ioctl$SIOCAX25OPTRT(r5, 0x89e7, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x8080)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r7, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40)

413.969911ms ago: executing program 0 (id=4596):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xe7ff, 0x1, 0x4})

333.166415ms ago: executing program 7 (id=4597):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='!,\x00')
mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
flistxattr(r3, 0x0, 0xffffffffffffffb1)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x20000040, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00'], 0x1})
write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x1, 0x41, "0062aa7d82000800030000000000f7ffff00"})
r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0xc})
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000016000000b50e00007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00cc01000200"/28], 0x50)

299.576062ms ago: executing program 0 (id=4598):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="00f0ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

253.993447ms ago: executing program 5 (id=4599):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x1ff, 0x0, 0x0, 0x10001, 0x4, 0x2, 0x5, 0x8}}}}]}, 0x58}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0xa6ff, r6, {0xe, 0xfff2}, {0xa6, 0xfff1}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800)

205.406278ms ago: executing program 2 (id=4600):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1411, 0x115, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x40081}, 0x20000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000012c0)={0x0, &(0x7f0000000700)=[{}, {}, {}, {}], 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r5})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000340)=""/142, 0x29, 0x8e, 0x1}, 0x28)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0)
io_uring_enter(0xffffffffffffffff, 0x1d2d, 0x8890, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000280)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3dbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d58fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c095b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b288c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c343d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df00", 0x1000}}, 0x1006)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c40"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

0s ago: executing program 0 (id=4601):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r1 = io_uring_setup(0x3104, &(0x7f00000000c0)={0x0, 0x48c7, 0x8, 0x2, 0x1000168})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setstatus(r2, 0x4, 0x42400)
write$binfmt_misc(r2, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xb, 0x2, 0x1, 0x0, ')+[+\xa0[\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
r4 = userfaultfd(0x1)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000009800)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0xfffffff8, 0x80000001, 0x40, 0x0, 0x8], 0x0, 0x0}, 0x78)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
rmdir(&(0x7f00000000c0)='./cgroup\x00')
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

kernel console output (not intermixed with test programs):

ip6gretap1): failed to get link speed/duplex
[ 1493.259120][ T7197] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1493.272372][ T7197] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1493.724797][   T29] audit: type=1400 audit(1771952353.644:4018): avc:  denied  { read } for  pid=25240 comm="syz.0.4197" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1494.195801][   T29] audit: type=1400 audit(1771952353.644:4019): avc:  denied  { open } for  pid=25240 comm="syz.0.4197" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1494.220329][   T29] audit: type=1400 audit(1771952353.654:4020): avc:  denied  { map } for  pid=25240 comm="syz.0.4197" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1495.175067][   T29] audit: type=1400 audit(1771952353.654:4021): avc:  denied  { execute } for  pid=25240 comm="syz.0.4197" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1495.254183][T25257] netlink: 'syz.5.4201': attribute type 3 has an invalid length.
[ 1495.295378][   T24] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 1495.331496][   T29] audit: type=1400 audit(1771952355.435:4022): avc:  denied  { getopt } for  pid=25259 comm="syz.5.4202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1496.400956][   T24] usb 7-1: Using ep0 maxpacket: 32
[ 1497.520317][   T24] usb 7-1: unable to read config index 0 descriptor/all
[ 1497.534512][   T24] usb 7-1: can't read configurations, error -71
[ 1497.821709][ T7197] net_ratelimit: 25 callbacks suppressed
[ 1497.821752][ T7197] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1497.955715][ T7197] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1498.063847][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1498.071616][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1498.233230][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1498.249379][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1498.284269][T25286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4209'.
[ 1498.416420][T25286] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20004
[ 1498.490371][T25286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4209'.
[ 1498.582833][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1498.608985][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1498.667094][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1498.810538][T17336] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1499.066176][   T29] audit: type=1400 audit(1771952359.177:4023): avc:  denied  { create } for  pid=25278 comm="syz.6.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 1499.190284][   T29] audit: type=1400 audit(1771952359.287:4024): avc:  denied  { sys_admin } for  pid=25278 comm="syz.6.4208" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 1499.995445][   T29] audit: type=1400 audit(1771952360.027:4025): avc:  denied  { create } for  pid=25298 comm="syz.0.4211" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1500.649252][T25319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25319 comm=syz.5.4205
[ 1500.718246][T25319] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4205'.
[ 1500.971907][ T1211] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1501.242670][ T1211] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1501.328280][ T1211] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1501.351254][ T1211] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[ 1501.361633][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1501.552699][ T1211] usb 3-1: Product: м
[ 1501.556931][ T1211] usb 3-1: Manufacturer: ဇ
[ 1501.576150][ T1211] usb 3-1: SerialNumber: syz
[ 1501.651816][T25357] siw: device registration error -23
[ 1502.011207][ T1211] usbhid 3-1:1.0: can't add hid device: -71
[ 1502.030715][ T1211] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[ 1502.322290][   T29] audit: type=1400 audit(1771952362.418:4026): avc:  denied  { mounton } for  pid=25362 comm="syz.1.4214" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1502.510437][   T29] audit: type=1400 audit(1771952362.448:4027): avc:  denied  { mount } for  pid=25362 comm="syz.1.4214" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1502.524322][ T1211] usb 3-1: USB disconnect, device number 78
[ 1503.092986][  T792] net_ratelimit: 61 callbacks suppressed
[ 1503.093003][  T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1503.106732][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1503.242721][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1503.427069][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1503.528384][ T1000] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1503.686108][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1503.701111][ T1000] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1504.744820][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1504.760048][T25343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1504.770603][T25343] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1505.942817][T25400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4220'.
[ 1506.817446][T25410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25410 comm=syz.2.4223
[ 1506.874548][T25410] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4223'.
[ 1507.103466][T25411] buffer_io_error: 384 callbacks suppressed
[ 1507.103500][T25411] Buffer I/O error on dev loop9, logical block 1, async page read
[ 1507.119290][    C1] blk_print_req_error: 4 callbacks suppressed
[ 1507.119301][    C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3
[ 1507.135941][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1507.143924][T25411] Buffer I/O error on dev loop9, logical block 1, async page read
[ 1507.162632][    C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3
[ 1507.173271][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1507.239372][T25411] Buffer I/O error on dev loop9, logical block 1, async page read
[ 1507.239509][    C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3
[ 1507.257904][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1507.384806][T25416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25416 comm=syz.6.4221
[ 1507.546261][T25411] Buffer I/O error on dev loop9, logical block 1, async page read
[ 1507.554674][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3
[ 1507.565306][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1507.573838][   T29] audit: type=1400 audit(1771952367.291:4028): avc:  denied  { unlink } for  pid=19253 comm="syz-executor" name="file0" dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1507.712038][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3
[ 1507.722783][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1507.786850][T25420] siw: device registration error -23
[ 1508.136422][ T1211] net_ratelimit: 29 callbacks suppressed
[ 1508.136434][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1508.159871][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1508.174336][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1508.181191][T25411] Buffer I/O error on dev loop9, logical block 1, async page read
[ 1508.219828][    C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3
[ 1508.232030][T25411] ldm_validate_partition_table(): Disk read failed.
[ 1508.233741][    C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3
[ 1508.267542][    C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3
[ 1508.281908][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3
[ 1508.288685][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1508.300921][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1508.301003][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3
[ 1509.286603][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1509.305828][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1509.340720][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1509.376863][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1509.379678][T25411] Dev loop9: unable to read RDB block 0
[ 1509.398358][T25411]  loop9: unable to read partition table
[ 1509.568423][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1509.586700][T25411] loop9: partition table beyond EOD, truncated
[ 1513.146229][T25465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4232'.
[ 1513.155219][T25465] net_ratelimit: 38 callbacks suppressed
[ 1513.155254][T25465] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1513.231520][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1513.434950][   T29] audit: type=1800 audit(1771952373.344:4029): pid=25465 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.4232" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[ 1513.466183][ T1000] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1513.576250][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1513.586466][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1513.736864][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1513.756815][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1513.800501][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1514.221845][  T329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1514.243545][  T329] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1514.326402][T25475] siw: device registration error -23
[ 1517.567431][T25503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25503 comm=syz.0.4236
[ 1517.594167][T25503] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4236'.
[ 1518.050621][T25516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4244'.
[ 1518.067136][T25516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4244'.
[ 1518.184953][T20150] net_ratelimit: 27 callbacks suppressed
[ 1518.184971][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1518.213928][ T5915] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1518.223930][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1518.323218][T25518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.336035][T25518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.353789][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1518.366567][T25518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.374998][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1518.418058][ T5915] usb 6-1: Using ep0 maxpacket: 32
[ 1518.433355][ T5915] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 1518.442621][ T5915] usb 6-1: config 0 has no interface number 0
[ 1518.453311][ T5915] usb 6-1: config 0 interface 89 has no altsetting 0
[ 1518.465291][ T5915] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 1518.476155][T25518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.487657][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1518.500375][T25518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.520827][ T5915] usb 6-1: Product: syz
[ 1518.532205][ T5915] usb 6-1: Manufacturer: syz
[ 1518.536970][  T329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1518.550802][ T5915] usb 6-1: SerialNumber: syz
[ 1518.564911][ T5915] usb 6-1: config 0 descriptor??
[ 1518.621736][ T5915] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1518.712763][ T5915] em28xx 6-1:0.89: Video interface 89 found: bulk
[ 1518.878041][   T29] audit: type=1400 audit(1771952378.996:4030): avc:  denied  { mount } for  pid=25528 comm="syz.0.4248" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1
[ 1519.734517][   T29] audit: type=1400 audit(1771952379.076:4031): avc:  denied  { lock } for  pid=25528 comm="syz.0.4248" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1519.956289][   T29] audit: type=1400 audit(1771952379.577:4032): avc:  denied  { setopt } for  pid=25505 comm="syz.5.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1520.094041][   T29] audit: type=1400 audit(1771952380.037:4033): avc:  denied  { bind } for  pid=25505 comm="syz.5.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1520.566208][ T5915] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[ 1520.708573][   T29] audit: type=1400 audit(1771952380.777:4034): avc:  denied  { write } for  pid=25549 comm="syz.2.4250" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1521.522550][T25556] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1521.522550][T25556]    program syz.2.4250 not setting count and/or reply_len properly
[ 1521.712352][   T29] audit: type=1400 audit(1771952381.628:4035): avc:  denied  { ioctl } for  pid=25549 comm="syz.2.4250" path="/dev/sg0" dev="devtmpfs" ino=773 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1522.259826][T25560] siw: device registration error -23
[ 1522.807733][T25567] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=25567 comm=syz.0.4253
[ 1522.841960][   T29] audit: type=1400 audit(1771952381.788:4036): avc:  denied  { mount } for  pid=25553 comm="syz.1.4252" name="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 1522.866784][   T29] audit: type=1400 audit(1771952381.798:4037): avc:  denied  { search } for  pid=25553 comm="syz.1.4252" name="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1522.871659][ T5874] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1522.910912][T25568] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1523.028697][ T5915] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 1523.040909][ T5915] em28xx 6-1:0.89: board has no eeprom
[ 1523.084045][ T5874] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[ 1523.094789][ T5874] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1523.101670][ T5915] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[ 1523.107738][ T5874] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1523.129579][ T5874] usb 7-1: config 220 has no interface number 2
[ 1523.133994][ T5915] em28xx 6-1:0.89: analog set to bulk mode.
[ 1523.143838][ T5874] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1523.148994][ T1211] em28xx 6-1:0.89: Registering V4L2 extension
[ 1523.168832][ T5874] usb 7-1: config 220 interface 0 has no altsetting 0
[ 1523.180617][ T5915] usb 6-1: USB disconnect, device number 85
[ 1523.184236][ T5874] usb 7-1: config 220 interface 76 has no altsetting 0
[ 1523.199856][ T5874] usb 7-1: config 220 interface 1 has no altsetting 0
[ 1523.219461][ T5915] em28xx 6-1:0.89: Disconnecting em28xx
[ 1523.237624][ T5874] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1523.247990][T20150] net_ratelimit: 61 callbacks suppressed
[ 1523.248002][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1523.270546][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1523.281243][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1523.288079][ T5874] usb 7-1: Product: syz
[ 1523.298979][ T5874] usb 7-1: Manufacturer: syz
[ 1523.299101][ T1211] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[ 1523.303747][ T5874] usb 7-1: SerialNumber: syz
[ 1523.315584][ T1211] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[ 1523.322906][ T1211] em28xx 6-1:0.89: No AC97 audio processor
[ 1523.339025][ T1211] usb 6-1: Decoder not found
[ 1523.344059][ T1211] em28xx 6-1:0.89: failed to create media graph
[ 1523.350458][ T1211] em28xx 6-1:0.89: V4L2 device video103 deregistered
[ 1523.365175][ T1211] em28xx 6-1:0.89: Registering snapshot button...
[ 1523.375357][ T1211] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input39
[ 1523.392640][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1523.400404][   T29] audit: type=1400 audit(1771952383.509:4038): avc:  denied  { read } for  pid=5163 comm="acpid" name="event4" dev="devtmpfs" ino=3945 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1523.425416][ T1211] em28xx 6-1:0.89: Remote control support is not available for this card.
[ 1523.434161][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1523.441970][ T5915] em28xx 6-1:0.89: Closing input extension
[ 1523.449241][   T29] audit: type=1400 audit(1771952383.509:4039): avc:  denied  { open } for  pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3945 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1523.473647][ T5915] em28xx 6-1:0.89: Deregistering snapshot button
[ 1523.512959][ T5915] em28xx 6-1:0.89: Freeing device
[ 1523.551965][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1523.577459][ T1000] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1523.592434][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1523.730344][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1524.001726][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1524.086038][ T5915] usb 6-1: new full-speed USB device number 86 using dummy_hcd
[ 1524.239470][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1524.912584][   T86] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1524.941996][ T5915] usb 6-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config
[ 1524.961237][ T5915] usb 6-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1524.974288][   T29] kauditd_printk_skb: 1 callbacks suppressed
[ 1524.974303][   T29] audit: type=1400 audit(1771952385.079:4041): avc:  denied  { connect } for  pid=25621 comm="syz.1.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1525.005841][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1525.013240][ T5915] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[ 1525.040596][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1525.086592][   T86] usb 3-1: Using ep0 maxpacket: 16
[ 1525.092761][ T5915] usb 6-1: config 0 descriptor??
[ 1525.102334][   T86] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1525.116491][ T5915] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1525.127498][   T86] usb 3-1: config 1 has no interface number 1
[ 1525.140763][   T86] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1525.155801][   T86] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1525.175241][   T86] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1525.196797][   T86] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1525.221947][   T86] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1525.238912][   T86] usb 3-1: Product: syz
[ 1525.244044][   T86] usb 3-1: Manufacturer: syz
[ 1525.248697][   T86] usb 3-1: SerialNumber: syz
[ 1525.299663][   T29] audit: type=1400 audit(1771952385.410:4042): avc:  denied  { ioctl } for  pid=25628 comm="syz.0.4261" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1525.326886][   T29] audit: type=1400 audit(1771952385.420:4043): avc:  denied  { map } for  pid=25628 comm="syz.0.4261" path="socket:[82034]" dev="sockfs" ino=82034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1525.475466][T25587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1525.483890][   T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1525.504349][T25587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1525.506930][   T86] usb 3-1: failed to enable PITCH for EP 0x82
[ 1525.533249][   T86] usb 3-1: 2:1: cannot set freq 11994917 to ep 0x82
[ 1525.541525][T25587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4257'.
[ 1525.590073][T25587] vlan2: entered allmulticast mode
[ 1525.596524][T25587] team0: entered allmulticast mode
[ 1525.603020][T25587] team_slave_0: entered allmulticast mode
[ 1525.610798][T25587] team_slave_1: entered allmulticast mode
[ 1525.624865][   T10] usb 2-1: device descriptor read/64, error -71
[ 1525.715940][T25652] 9p: Bad value for 'rfdno'
[ 1525.991146][   T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1527.125126][   T10] usb 2-1: device descriptor read/64, error -71
[ 1527.135189][T17727] usb 6-1: USB disconnect, device number 86
[ 1527.173568][T25669] binder: 25660:25669 ioctl c0306201 2000000003c0 returned -14
[ 1527.179735][   T86] usb 3-1: USB disconnect, device number 79
[ 1527.283319][   T10] usb usb2-port1: attempt power cycle
[ 1528.511405][   T24] net_ratelimit: 38 callbacks suppressed
[ 1528.511425][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1528.519141][ T5874] usb 7-1: selecting invalid altsetting 0
[ 1528.534498][T25343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1528.547577][   T29] audit: type=1400 audit(1771952387.881:4044): avc:  denied  { name_bind } for  pid=25696 comm="syz.2.4267" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[ 1528.555440][ T5874] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1528.576108][ T5874] uvcvideo 7-1:220.0: No valid video chain found.
[ 1528.595924][ T5874] usb 7-1: selecting invalid altsetting 0
[ 1528.601710][ T5874] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[ 1528.653055][T25343] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1528.789119][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1528.796885][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1528.837000][   T24] usb 7-1: USB disconnect, device number 36
[ 1528.955098][T25343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1528.963267][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1528.978333][T25343] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1529.349179][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1529.364618][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1529.561019][   T10] usb 6-1: new full-speed USB device number 87 using dummy_hcd
[ 1529.707851][T25728] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4268'.
[ 1529.727375][T25728] ipvlan2: entered promiscuous mode
[ 1530.533034][   T29] audit: type=1400 audit(1771952389.842:4045): avc:  denied  { bind } for  pid=25723 comm="syz.2.4268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1530.758385][   T10] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1531.752239][   T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1531.780127][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1531.799904][   T10] usb 6-1: Product: syz
[ 1531.804155][   T10] usb 6-1: Manufacturer: syz
[ 1531.809780][   T10] usb 6-1: SerialNumber: syz
[ 1532.030114][   T29] audit: type=1400 audit(1771952392.083:4046): avc:  denied  { unmount } for  pid=17197 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1532.071931][T25735] Bluetooth: MGMT ver 1.23
[ 1532.547067][   T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1532.547469][T25752] netlink: 'syz.6.4274': attribute type 1 has an invalid length.
[ 1532.717243][   T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 1532.721917][T25752] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1532.755042][   T10] usb 6-1: USB disconnect, device number 87
[ 1532.804129][   T24] usb 2-1: Using ep0 maxpacket: 16
[ 1532.859161][   T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1532.871366][   T24] usb 2-1: config 1 has no interface number 1
[ 1532.891973][   T24] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1532.927373][   T10] usblp0: removed
[ 1532.928117][T25755] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1532.942320][T25755] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1532.952810][T25796] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[ 1532.981593][   T24] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1532.995726][T25755] bond1: (slave vxcan3): Error -95 calling set_mac_address
[ 1533.014148][   T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1533.057562][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1533.156716][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1534.081395][   T24] usb 2-1: Product: syz
[ 1534.097034][   T24] usb 2-1: Manufacturer: syz
[ 1534.102139][   T24] usb 2-1: SerialNumber: syz
[ 1534.196574][T20150] net_ratelimit: 52 callbacks suppressed
[ 1534.196595][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1534.545724][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1535.055999][T16332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1535.746909][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1535.755976][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1535.850405][   T24] usb 2-1: can't set config #1, error -71
[ 1535.865324][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1535.866404][   T24] usb 2-1: USB disconnect, device number 67
[ 1535.902880][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1536.007326][  T329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1536.007427][  T329] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1536.114899][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1536.313263][T25835] lo speed is unknown, defaulting to 1000
[ 1536.355629][   T29] audit: type=1400 audit(1771952396.405:4047): avc:  denied  { remount } for  pid=25834 comm="syz.6.4279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1536.395618][T25848] overlayfs: failed to resolve './file0': -2
[ 1536.716567][T25868] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4280'.
[ 1536.767850][T25868] ipvlan2: entered promiscuous mode
[ 1537.638780][T25892] FAULT_INJECTION: forcing a failure.
[ 1537.638780][T25892] name failslab, interval 1, probability 0, space 0, times 0
[ 1537.714038][T25892] CPU: 1 UID: 0 PID: 25892 Comm: syz.5.4285 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1537.714070][T25892] Tainted: [L]=SOFTLOCKUP
[ 1537.714076][T25892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1537.714087][T25892] Call Trace:
[ 1537.714093][T25892]  <TASK>
[ 1537.714101][T25892]  dump_stack_lvl+0x100/0x190
[ 1537.714135][T25892]  should_fail_ex.cold+0x5/0xa
[ 1537.714160][T25892]  should_failslab+0xc2/0x120
[ 1537.714189][T25892]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1537.714213][T25892]  ? radix_tree_node_alloc.constprop.0+0x66/0x340
[ 1537.714247][T25892]  radix_tree_node_alloc.constprop.0+0x66/0x340
[ 1537.714285][T25892]  idr_get_free+0x52e/0xa00
[ 1537.714323][T25892]  idr_alloc_u32+0x1ac/0x320
[ 1537.714355][T25892]  ? __pfx_idr_alloc_u32+0x10/0x10
[ 1537.714400][T25892]  tcf_idr_check_alloc+0x136/0x7a0
[ 1537.714425][T25892]  ? find_held_lock+0x2b/0x80
[ 1537.714448][T25892]  ? __pfx_tcf_idr_check_alloc+0x10/0x10
[ 1537.714473][T25892]  ? __nla_parse+0x40/0x60
[ 1537.714496][T25892]  tunnel_key_init+0x22d/0x1af0
[ 1537.714514][T25892]  ? tcf_action_init_1+0x27e/0x6c0
[ 1537.714536][T25892]  ? tcf_action_init+0x43f/0xa60
[ 1537.714557][T25892]  ? tcf_action_add+0xed/0x5c0
[ 1537.714580][T25892]  ? tc_ctl_action+0x2e3/0x470
[ 1537.714601][T25892]  ? rtnetlink_rcv_msg+0x3c9/0xe90
[ 1537.714619][T25892]  ? netlink_rcv_skb+0x159/0x420
[ 1537.714638][T25892]  ? netlink_unicast+0x5aa/0x870
[ 1537.714655][T25892]  ? netlink_sendmsg+0x8b0/0xda0
[ 1537.714673][T25892]  ? ____sys_sendmsg+0xa54/0xc30
[ 1537.714693][T25892]  ? ___sys_sendmsg+0x190/0x1e0
[ 1537.714714][T25892]  ? __sys_sendmsg+0x170/0x220
[ 1537.714735][T25892]  ? __pfx_tunnel_key_init+0x10/0x10
[ 1537.714774][T25892]  ? tcf_action_init_1+0x2d8/0x6c0
[ 1537.714799][T25892]  ? __asan_memcpy+0x3c/0x60
[ 1537.714825][T25892]  ? tcf_action_init_1+0x466/0x6c0
[ 1537.714847][T25892]  tcf_action_init_1+0x466/0x6c0
[ 1537.714879][T25892]  ? __pfx_tcf_action_init_1+0x10/0x10
[ 1537.714902][T25892]  ? tc_action_load_ops+0x1f5/0x3e0
[ 1537.714940][T25892]  ? __nla_parse+0x40/0x60
[ 1537.714961][T25892]  tcf_action_init+0x43f/0xa60
[ 1537.714995][T25892]  ? __pfx_tcf_action_init+0x10/0x10
[ 1537.715040][T25892]  ? __kernel_text_address+0xd/0x30
[ 1537.715060][T25892]  ? unwind_get_return_address+0x59/0xa0
[ 1537.715083][T25892]  ? arch_stack_walk+0xa6/0xf0
[ 1537.715129][T25892]  ? __lock_acquire+0x4a5/0x2630
[ 1537.715161][T25892]  tcf_action_add+0xed/0x5c0
[ 1537.715190][T25892]  ? __pfx_tcf_action_add+0x10/0x10
[ 1537.715254][T25892]  ? __nla_parse+0x40/0x60
[ 1537.715276][T25892]  tc_ctl_action+0x2e3/0x470
[ 1537.715302][T25892]  ? __pfx_tc_ctl_action+0x10/0x10
[ 1537.715336][T25892]  ? __pfx_tc_ctl_action+0x10/0x10
[ 1537.715362][T25892]  rtnetlink_rcv_msg+0x3c9/0xe90
[ 1537.715383][T25892]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1537.715409][T25892]  ? ref_tracker_free+0x37e/0x6c0
[ 1537.715440][T25892]  netlink_rcv_skb+0x159/0x420
[ 1537.715460][T25892]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1537.715481][T25892]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1537.715510][T25892]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1537.715535][T25892]  netlink_unicast+0x5aa/0x870
[ 1537.715559][T25892]  ? __pfx_netlink_unicast+0x10/0x10
[ 1537.715590][T25892]  netlink_sendmsg+0x8b0/0xda0
[ 1537.715615][T25892]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1537.715632][T25892]  ? __might_fault+0x20/0x140
[ 1537.715665][T25892]  ____sys_sendmsg+0xa54/0xc30
[ 1537.715691][T25892]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1537.715726][T25892]  ___sys_sendmsg+0x190/0x1e0
[ 1537.715752][T25892]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1537.715808][T25892]  __sys_sendmsg+0x170/0x220
[ 1537.715827][T25892]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1537.715862][T25892]  do_syscall_64+0x106/0xf80
[ 1537.715885][T25892]  ? clear_bhb_loop+0x40/0x90
[ 1537.715908][T25892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1537.715926][T25892] RIP: 0033:0x7f945599c629
[ 1537.715943][T25892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1537.715960][T25892] RSP: 002b:00007f9456808028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1537.715978][T25892] RAX: ffffffffffffffda RBX: 00007f9455c15fa0 RCX: 00007f945599c629
[ 1537.715990][T25892] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[ 1537.716000][T25892] RBP: 00007f9456808090 R08: 0000000000000000 R09: 0000000000000000
[ 1537.716011][T25892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1537.716021][T25892] R13: 00007f9455c16038 R14: 00007f9455c15fa0 R15: 00007ffef69ac6f8
[ 1537.716047][T25892]  </TASK>
[ 1539.057794][T25902] netlink: 166436 bytes leftover after parsing attributes in process `syz.0.4288'.
[ 1539.205710][  T329] net_ratelimit: 64 callbacks suppressed
[ 1539.205745][  T329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1539.413962][  T329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1539.433220][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1539.473149][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1539.510539][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1539.537959][   T29] audit: type=1400 audit(1771952399.617:4048): avc:  denied  { write } for  pid=25893 comm="syz.2.4286" name="file0" dev="tmpfs" ino=2683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1540.501518][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1540.572560][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1540.592598][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1540.611105][   T29] audit: type=1400 audit(1771952399.617:4049): avc:  denied  { open } for  pid=25893 comm="syz.2.4286" path="/507/file0" dev="tmpfs" ino=2683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1540.741031][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1540.826503][T25915] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4291'.
[ 1541.286899][T17727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1541.332578][   T29] audit: type=1400 audit(1771952399.617:4050): avc:  denied  { ioctl } for  pid=25893 comm="syz.2.4286" path="/507/file0" dev="tmpfs" ino=2683 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1541.342940][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1541.372677][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1541.381107][T20150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1541.392909][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1541.399951][T20150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1541.411451][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1541.420256][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1541.448543][   T29] audit: type=1400 audit(1771952401.558:4051): avc:  denied  { mounton } for  pid=25911 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 1541.494890][T25915] ipvlan2: entered promiscuous mode
[ 1541.540180][T25920] overlayfs: failed to resolve './file0': -2
[ 1541.614297][T20150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1541.649536][T20150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1541.708606][T25911] lo speed is unknown, defaulting to 1000
[ 1541.761349][   T29] audit: type=1400 audit(1771952401.878:4052): avc:  denied  { connect } for  pid=25928 comm="syz.0.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1541.812724][T20150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1541.831999][T20150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1541.923235][T20150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1541.951970][T20150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1541.982563][ T5874] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1542.123738][ T5874] usb 2-1: device descriptor read/64, error -71
[ 1542.198659][T25911] chnl_net:caif_netlink_parms(): no params data found
[ 1542.375290][   T29] audit: type=1400 audit(1771952402.488:4053): avc:  denied  { mount } for  pid=26023 comm="syz.5.4296" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1542.402730][ T5874] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1542.788182][   T29] audit: type=1400 audit(1771952402.868:4054): avc:  denied  { listen } for  pid=26023 comm="syz.5.4296" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1542.871622][ T5874] usb 2-1: device descriptor read/64, error -71
[ 1542.985738][ T5874] usb usb2-port1: attempt power cycle
[ 1543.081441][   T29] audit: type=1400 audit(1771952403.209:4055): avc:  denied  { bind } for  pid=26041 comm="syz.5.4298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1543.341844][ T5874] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1543.362362][T20150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1543.378109][T20150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1543.388184][ T5874] usb 2-1: device descriptor read/8, error -71
[ 1543.402978][T20150] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 1543.419462][T20150] bond0 (unregistering): Released all slaves
[ 1543.433834][T20150] bond1 (unregistering): Released all slaves
[ 1543.477010][T26046] all: renamed from bridge_slave_1 (while UP)
[ 1543.502112][ T5823] Bluetooth: hci3: command tx timeout
[ 1543.573172][T26055] bond1: entered allmulticast mode
[ 1543.690543][T20150] tipc: Disabling bearer <udp:syz2>
[ 1543.748303][T20150] tipc: Left network mode
[ 1543.753244][ T5874] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1543.799470][T26113] netlink: 166436 bytes leftover after parsing attributes in process `syz.2.4300'.
[ 1544.222590][   T13] net_ratelimit: 90 callbacks suppressed
[ 1544.222608][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1544.286528][ T5874] usb 2-1: device descriptor read/8, error -71
[ 1544.411451][T16332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1544.428765][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1544.451200][ T5874] usb usb2-port1: unable to enumerate USB device
[ 1544.467753][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1544.547120][T25911] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1544.548569][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1544.575348][T26135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4302'.
[ 1544.591549][T25911] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1544.598731][T25911] bridge_slave_0: entered allmulticast mode
[ 1544.617769][T25911] bridge_slave_0: entered promiscuous mode
[ 1544.634217][T25911] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1544.660483][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1544.660572][T25911] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1544.682746][T26138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4302'.
[ 1544.692733][T25911] bridge_slave_1: entered allmulticast mode
[ 1544.720510][T25911] bridge_slave_1: entered promiscuous mode
[ 1544.759585][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1544.775615][T26141] overlayfs: failed to resolve './file0': -2
[ 1544.809088][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1544.850738][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1544.871933][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1545.086876][T25911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1545.099376][T25911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1545.168637][T26176] sg_write: data in/out 476/14 bytes for SCSI command 0x0-- guessing data in;
[ 1545.168637][T26176]    program syz.1.4305 not setting count and/or reply_len properly
[ 1545.363887][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1545.581409][ T5823] Bluetooth: hci3: command tx timeout
[ 1547.088231][   T29] audit: type=1400 audit(1771952407.211:4056): avc:  denied  { bind } for  pid=26186 comm="syz.5.4308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1547.264509][   T29] audit: type=1400 audit(1771952407.211:4057): avc:  denied  { map } for  pid=26186 comm="syz.5.4308" path="socket:[81905]" dev="sockfs" ino=81905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1547.313544][T20150] hsr_slave_0: left promiscuous mode
[ 1547.319810][T20150] hsr_slave_1: left promiscuous mode
[ 1547.344122][T20150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1547.546069][T20150] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1547.594268][T20150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1547.669506][ T5823] Bluetooth: hci3: command tx timeout
[ 1547.685096][   T29] audit: type=1400 audit(1771952407.811:4058): avc:  denied  { create } for  pid=26223 comm="syz.1.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[ 1547.718991][T26229] FAULT_INJECTION: forcing a failure.
[ 1547.718991][T26229] name failslab, interval 1, probability 0, space 0, times 0
[ 1547.737896][T20150] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1547.790025][T20150] veth1_macvtap: left promiscuous mode
[ 1547.795556][T20150] veth0_macvtap: left promiscuous mode
[ 1547.801434][T26229] CPU: 1 UID: 0 PID: 26229 Comm: syz.5.4314 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1547.801460][T26229] Tainted: [L]=SOFTLOCKUP
[ 1547.801467][T26229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1547.801477][T26229] Call Trace:
[ 1547.801483][T26229]  <TASK>
[ 1547.801490][T26229]  dump_stack_lvl+0x100/0x190
[ 1547.801522][T26229]  should_fail_ex.cold+0x5/0xa
[ 1547.801545][T26229]  should_failslab+0xc2/0x120
[ 1547.801572][T26229]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1547.801595][T26229]  ? sock_alloc_inode+0x25/0x1c0
[ 1547.801618][T26229]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1547.801639][T26229]  sock_alloc_inode+0x25/0x1c0
[ 1547.801658][T26229]  alloc_inode+0x68/0x250
[ 1547.801681][T26229]  sock_alloc+0x44/0x280
[ 1547.801701][T26229]  do_accept+0xf9/0x530
[ 1547.801725][T26229]  ? do_raw_spin_lock+0x128/0x260
[ 1547.801745][T26229]  ? __pfx_do_accept+0x10/0x10
[ 1547.801792][T26229]  __sys_accept4+0x108/0x200
[ 1547.801817][T26229]  ? __pfx___sys_accept4+0x10/0x10
[ 1547.801843][T26229]  ? __pfx_ksys_write+0x10/0x10
[ 1547.801874][T26229]  __x64_sys_accept4+0x96/0x100
[ 1547.801898][T26229]  ? lockdep_hardirqs_on+0x78/0x100
[ 1547.801916][T26229]  do_syscall_64+0x106/0xf80
[ 1547.801933][T26229]  ? clear_bhb_loop+0x40/0x90
[ 1547.801956][T26229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1547.801974][T26229] RIP: 0033:0x7f945599c629
[ 1547.801989][T26229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1547.802006][T26229] RSP: 002b:00007f9456808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 1547.802023][T26229] RAX: ffffffffffffffda RBX: 00007f9455c15fa0 RCX: 00007f945599c629
[ 1547.802035][T26229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1547.802045][T26229] RBP: 00007f9456808090 R08: 0000000000000000 R09: 0000000000000000
[ 1547.802055][T26229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1547.802066][T26229] R13: 00007f9455c16038 R14: 00007f9455c15fa0 R15: 00007ffef69ac6f8
[ 1547.802091][T26229]  </TASK>
[ 1547.999021][T26230] netlink: 166436 bytes leftover after parsing attributes in process `syz.2.4312'.
[ 1548.175336][T20150] veth1_vlan: left promiscuous mode
[ 1548.287273][T20150] veth0_vlan: left promiscuous mode
[ 1548.404895][   T29] audit: type=1400 audit(1771952408.531:4059): avc:  denied  { map } for  pid=26235 comm="syz.0.4315" path="/proc/795/net/rt6_stats" dev="proc" ino=4026533352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[ 1549.826920][ T5823] Bluetooth: hci3: command tx timeout
[ 1549.830536][ T1000] net_ratelimit: 81 callbacks suppressed
[ 1549.830550][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1549.833075][   T86] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1550.803158][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1550.826500][T26256] tmpfs: Bad value for 'mpol'
[ 1550.831034][   T29] audit: type=1400 audit(1771952410.952:4060): avc:  denied  { mounton } for  pid=26255 comm="syz.0.4319" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 1550.880165][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1550.882011][T16332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1550.896511][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1550.913380][T20150] pimreg (unregistering): left allmulticast mode
[ 1550.987353][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1550.997544][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1551.007375][  T105] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1551.019184][   T29] audit: type=1400 audit(1771952410.992:4061): avc:  denied  { ioctl } for  pid=26236 comm="syz.1.4316" path="socket:[82706]" dev="sockfs" ino=82706 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1551.125897][  T105] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1551.495094][T20150] team0 (unregistering): Port device team_slave_1 removed
[ 1551.549095][T20150] team0 (unregistering): Port device team_slave_0 removed
[ 1551.929025][T25911] team0: Port device team_slave_0 added
[ 1551.953888][T26258] mac80211_hwsim hwsim23 
: renamed from wlan1 (while UP)
[ 1552.001301][T26260] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1552.046259][T25911] team0: Port device team_slave_1 added
[ 1552.148274][T25911] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1552.721998][T25911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1553.084164][T25911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1553.107991][T25911] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1553.116970][T25911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1553.143642][T25911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1553.671040][T26319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4321'.
[ 1553.778279][T26294] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1553.998036][T25911] hsr_slave_0: entered promiscuous mode
[ 1554.006812][T25911] hsr_slave_1: entered promiscuous mode
[ 1554.026263][T25911] debugfs: 'hsr0' already exists in 'hsr'
[ 1554.032003][T25911] Cannot create hsr debugfs directory
[ 1554.116699][T26383] netlink: 166436 bytes leftover after parsing attributes in process `syz.2.4326'.
[ 1554.500322][T20150] IPVS: stop unused estimator thread 0...
[ 1554.718650][T26412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26412 comm=syz.5.4327
[ 1554.875392][  T105] net_ratelimit: 95 callbacks suppressed
[ 1554.875455][  T105] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1555.018134][  T105] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1555.135941][  T105] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1555.403168][   T29] audit: type=1400 audit(1771952415.535:4062): avc:  denied  { read } for  pid=26416 comm="syz.2.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1555.495782][   T86] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1555.575452][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1555.611846][T17336] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1555.646238][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1555.665094][  T105] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1555.672855][  T105] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1556.124755][  T105] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1556.151944][T25911] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1556.356148][T25911] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1556.537824][T25911] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1556.559795][   T29] audit: type=1400 audit(1771952416.635:4063): avc:  denied  { connect } for  pid=26495 comm="syz.2.4331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1556.594959][T25911] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1557.466856][T26506] random: crng reseeded on system resumption
[ 1557.495794][T26503] random: crng reseeded on system resumption
[ 1557.692402][T25911] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1557.884221][T25911] 8021q: adding VLAN 0 to HW filter on device team0
[ 1557.926189][T16332] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0
[ 1557.942146][T25341] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1557.949313][T25341] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1558.025632][T26538] siw: device registration error -23
[ 1558.572115][T16332] hid-generic 0000:0000:0000.0045: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1558.666846][T25341] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1558.673975][T25341] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1558.826389][T25911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1558.878384][T25911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1559.940247][T20150] net_ratelimit: 66 callbacks suppressed
[ 1559.940266][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1560.053572][T16332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1560.085868][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1560.108064][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1560.296138][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1560.619497][   T29] audit: type=1400 audit(1771952420.757:4064): avc:  denied  { write } for  pid=26523 comm="syz.0.4336" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1560.647122][T25341] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1560.670641][T25911] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1560.773375][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1560.868795][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1560.912417][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1560.944874][T25341] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1560.995367][   T29] audit: type=1400 audit(1771952421.128:4065): avc:  denied  { read } for  pid=26577 comm="syz.5.4343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1561.370887][   T29] audit: type=1400 audit(1771952421.498:4066): avc:  denied  { connect } for  pid=26600 comm="syz.5.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1561.484885][T26611] FAULT_INJECTION: forcing a failure.
[ 1561.484885][T26611] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1561.512603][T26611] CPU: 1 UID: 0 PID: 26611 Comm: syz.2.4348 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1561.512631][T26611] Tainted: [L]=SOFTLOCKUP
[ 1561.512637][T26611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1561.512648][T26611] Call Trace:
[ 1561.512654][T26611]  <TASK>
[ 1561.512662][T26611]  dump_stack_lvl+0x100/0x190
[ 1561.512693][T26611]  should_fail_ex.cold+0x5/0xa
[ 1561.512716][T26611]  _copy_from_user+0x2e/0xd0
[ 1561.512740][T26611]  copy_msghdr_from_user+0x9f/0x4f0
[ 1561.512772][T26611]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1561.512806][T26611]  ___sys_sendmsg+0x106/0x1e0
[ 1561.512830][T26611]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1561.512880][T26611]  __sys_sendmsg+0x170/0x220
[ 1561.512898][T26611]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1561.512932][T26611]  do_syscall_64+0x106/0xf80
[ 1561.512949][T26611]  ? clear_bhb_loop+0x40/0x90
[ 1561.512971][T26611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1561.512988][T26611] RIP: 0033:0x7f545eb9c629
[ 1561.513003][T26611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1561.513018][T26611] RSP: 002b:00007f545f9f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1561.513033][T26611] RAX: ffffffffffffffda RBX: 00007f545ee15fa0 RCX: 00007f545eb9c629
[ 1561.513044][T26611] RDX: 0000000000000080 RSI: 00002000000010c0 RDI: 0000000000000004
[ 1561.513055][T26611] RBP: 00007f545f9f0090 R08: 0000000000000000 R09: 0000000000000000
[ 1561.513065][T26611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1561.513074][T26611] R13: 00007f545ee16038 R14: 00007f545ee15fa0 R15: 00007ffdff267c78
[ 1561.513098][T26611]  </TASK>
[ 1561.564723][T25911] veth0_vlan: entered promiscuous mode
[ 1561.740728][T25911] veth1_vlan: entered promiscuous mode
[ 1562.670378][T25911] veth0_macvtap: entered promiscuous mode
[ 1562.703240][T25911] veth1_macvtap: entered promiscuous mode
[ 1563.773186][T25911] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1563.879831][T25911] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1563.915619][T26631] xt_socket: unknown flags 0x4
[ 1563.941282][ T1000] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1563.953432][ T1000] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1564.110402][ T1000] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1564.151620][ T1000] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1564.268049][T20150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1564.298930][T20150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1564.401363][T20150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1564.422009][T20150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1564.456995][   T29] audit: type=1400 audit(1771952424.589:4067): avc:  denied  { mounton } for  pid=25911 comm="syz-executor" path="/root/syzkaller.McFPTA/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 1564.556180][   T29] audit: type=1400 audit(1771952424.619:4068): avc:  denied  { mount } for  pid=25911 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1564.667321][   T29] audit: type=1400 audit(1771952424.619:4069): avc:  denied  { mounton } for  pid=25911 comm="syz-executor" path="/root/syzkaller.McFPTA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=84317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 1564.704402][   T29] audit: type=1400 audit(1771952424.639:4070): avc:  denied  { mounton } for  pid=25911 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 1564.732150][   T29] audit: type=1400 audit(1771952424.639:4071): avc:  denied  { mount } for  pid=25911 comm="syz-executor" name="/" dev="gadgetfs" ino=7021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 1564.756660][   T29] audit: type=1400 audit(1771952424.639:4072): avc:  denied  { mounton } for  pid=25911 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[ 1564.825073][T26656] netlink: 'syz.7.4289': attribute type 1 has an invalid length.
[ 1564.880356][T12341] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1565.897493][T12341] usb 2-1: device descriptor read/64, error -71
[ 1565.898316][ T5915] net_ratelimit: 53 callbacks suppressed
[ 1565.898329][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1565.917480][T16332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1565.919139][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1565.965396][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1566.483655][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1566.513030][   T29] audit: type=1400 audit(1771952426.310:4073): avc:  denied  { node_bind } for  pid=26646 comm="syz.5.4356" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[ 1566.764565][T12341] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1566.773382][T16332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1566.775805][ T1000] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1566.910232][T12341] usb 2-1: device descriptor read/64, error -71
[ 1566.934720][T17336] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1566.936653][  T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1566.949273][T17336] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1567.097504][T12341] usb usb2-port1: attempt power cycle
[ 1567.229451][  T792] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1567.430889][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1567.454711][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1567.476851][  T792] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1567.490073][  T792] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1567.508494][  T792] usb 3-1: Manufacturer: syz
[ 1567.520734][  T792] usb 3-1: config 0 descriptor??
[ 1567.650017][T12341] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1567.735582][   T29] audit: type=1400 audit(1771952427.871:4074): avc:  denied  { name_connect } for  pid=26675 comm="syz.2.4359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[ 1567.773331][   T29] audit: type=1400 audit(1771952427.871:4075): avc:  denied  { accept } for  pid=26675 comm="syz.2.4359" lport=38057 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1567.827698][   T29] audit: type=1400 audit(1771952427.871:4076): avc:  denied  { setopt } for  pid=26675 comm="syz.2.4359" lport=38057 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 1567.868943][T12341] usb 2-1: device not accepting address 74, error -71
[ 1567.888040][   T29] audit: type=1400 audit(1771952427.871:4077): avc:  denied  { write } for  pid=26675 comm="syz.2.4359" lport=38057 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 1567.954914][   T29] audit: type=1400 audit(1771952427.961:4078): avc:  denied  { create } for  pid=26692 comm="syz.0.4360" name="#35" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1567.989905][   T29] audit: type=1400 audit(1771952427.961:4079): avc:  denied  { link } for  pid=26692 comm="syz.0.4360" name="#35" dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1568.030951][   T29] audit: type=1400 audit(1771952427.961:4080): avc:  denied  { rename } for  pid=26692 comm="syz.0.4360" name="#36" dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1568.351068][T26703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4365'.
[ 1568.352941][T26704] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1568.531843][   T29] audit: type=1400 audit(1771952428.651:4081): avc:  denied  { ioctl } for  pid=26700 comm="syz.0.4364" path="socket:[84388]" dev="sockfs" ino=84388 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1568.680297][T26706] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4365'.
[ 1568.877719][   T29] audit: type=1400 audit(1771952429.011:4082): avc:  denied  { listen } for  pid=26707 comm="syz.1.4366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1568.929924][ T5823] Bluetooth: hci4: SCO packet for unknown connection handle 0
[ 1569.129430][  T792] uclogic 0003:256C:006D.0046: failed retrieving Huion firmware version: -71
[ 1569.139794][T26719] fuse: Unknown parameter 'fd0xffffffffffffffff'
[ 1569.167420][  T792] uclogic 0003:256C:006D.0046: failed probing parameters: -71
[ 1569.192112][  T792] uclogic 0003:256C:006D.0046: probe with driver uclogic failed with error -71
[ 1569.223456][  T792] usb 3-1: USB disconnect, device number 80
[ 1569.673121][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888038141400: rx timeout, send abort
[ 1569.765313][T26750] overlay: ./file1 is not a directory
[ 1569.770847][  T792] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 1569.960036][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1569.970885][  T792] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1569.991514][  T792] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00
[ 1570.020801][  T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1570.049126][  T792] usb 6-1: config 0 descriptor??
[ 1570.082345][   T86] Process accounting resumed
[ 1570.173860][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888038141c00: rx timeout, send abort
[ 1570.182870][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888038141400: abort rx timeout. Force session deactivation
[ 1570.264930][T26762] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4374'.
[ 1570.289176][T26762] block nbd1: Unsupported socket: should be TCP or UNIX.
[ 1570.352876][T26762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1570.363764][T26762] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1570.381422][T26762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1570.391426][T26762] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1570.565326][  T792] logitech 0003:046D:C295.0047: item fetching failed at offset 2/5
[ 1570.579654][  T792] logitech 0003:046D:C295.0047: parse failed
[ 1570.601165][  T792] logitech 0003:046D:C295.0047: probe with driver logitech failed with error -22
[ 1570.681953][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888038141c00: abort rx timeout. Force session deactivation
[ 1571.028116][T17336] net_ratelimit: 77 callbacks suppressed
[ 1571.028135][T17336] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1571.046597][T17727] usb 6-1: USB disconnect, device number 88
[ 1571.086615][T17336] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1571.094596][   T86] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1571.223146][T26795] xt_socket: unknown flags 0x4
[ 1571.237257][T17336] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1571.251473][T17336] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1571.411641][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1571.427227][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1571.561505][T26800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4379'.
[ 1571.575161][T26800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4379'.
[ 1571.636043][T17336] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1571.677517][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1571.685247][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1571.693318][   T29] kauditd_printk_skb: 11 callbacks suppressed
[ 1571.693332][   T29] audit: type=1400 audit(1771952431.833:4094): avc:  denied  { read } for  pid=26801 comm="syz.7.4380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1571.704273][T26803] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1572.205547][T26811] tipc: Started in network mode
[ 1572.230046][T26811] tipc: Node identity 02bceb38147d, cluster identity 4711
[ 1572.366967][T26811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1572.386301][   T29] audit: type=1400 audit(1771952432.513:4095): avc:  denied  { lock } for  pid=26814 comm="syz.2.4382" path="socket:[84465]" dev="sockfs" ino=84465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1572.422718][T26816] syzkaller0: entered promiscuous mode
[ 1572.973166][T26816] syzkaller0: entered allmulticast mode
[ 1573.003791][T26811] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4380'.
[ 1573.044523][   T29] audit: type=1400 audit(1771952432.633:4096): avc:  denied  { write } for  pid=26814 comm="syz.2.4382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1573.073564][T26803] tipc: Resetting bearer <eth:syzkaller0>
[ 1573.121526][T26801] tipc: Resetting bearer <eth:syzkaller0>
[ 1573.187767][T26801] tipc: Disabling bearer <eth:syzkaller0>
[ 1573.536179][  T792] usb 6-1: new full-speed USB device number 89 using dummy_hcd
[ 1573.716024][  T792] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1573.726552][  T792] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[ 1573.735701][  T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1573.843773][  T792] usb 6-1: config 0 descriptor??
[ 1573.848844][T17727] IPVS: starting estimator thread 0...
[ 1573.867549][T26843] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4386'.
[ 1574.095999][T26842] IPVS: using max 46 ests per chain, 110400 per kthread
[ 1574.415727][  T792] hkems 0003:2006:0118.0048: unknown global tag 0xc
[ 1574.428132][  T792] hkems 0003:2006:0118.0048: item 0 1 1 12 parsing failed
[ 1574.445332][  T792] hkems 0003:2006:0118.0048: parse failed
[ 1574.454710][  T792] hkems 0003:2006:0118.0048: probe with driver hkems failed with error -22
[ 1574.750041][   T29] audit: type=1400 audit(1771952434.874:4097): avc:  denied  { unmount } for  pid=12941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1574.828702][T26827] netlink: 'syz.5.4383': attribute type 10 has an invalid length.
[ 1574.883963][T26827] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1574.944900][T17727] usb 6-1: USB disconnect, device number 89
[ 1574.976248][T26832] random: crng reseeded on system resumption
[ 1575.045317][   T86] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1575.280102][   T86] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1576.042234][T17727] net_ratelimit: 56 callbacks suppressed
[ 1576.042254][T17727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1576.105763][T17336] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1576.113674][   T29] audit: type=1400 audit(1771952436.235:4098): avc:  denied  { setattr } for  pid=26890 comm="syz.5.4391" name="" dev="pipefs" ino=83942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 1576.140063][T17336] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1576.714005][   T86] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1576.733650][  T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1576.748300][   T86] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[ 1576.757555][   T86] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1576.765602][   T86] usb 8-1: Product: syz
[ 1576.769834][   T86] usb 8-1: Manufacturer: syz
[ 1576.795603][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1576.803356][ T1000] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1576.824415][   T86] usb 8-1: SerialNumber: syz
[ 1576.841168][   T86] usb 8-1: config 0 descriptor??
[ 1577.052397][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1577.087556][ T1000] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1577.323507][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1577.347112][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1577.819013][   T29] audit: type=1400 audit(1771952437.796:4099): avc:  denied  { watch } for  pid=26869 comm="syz.7.4389" path="/9/file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1577.893874][T26936] xt_socket: unknown flags 0x4
[ 1578.153034][   T10] usb 8-1: USB disconnect, device number 2
[ 1579.359191][   T29] audit: type=1400 audit(1771952439.507:4100): avc:  denied  { ioctl } for  pid=26964 comm="syz.5.4402" path="socket:[84653]" dev="sockfs" ino=84653 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1579.552227][T26976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'.
[ 1580.473675][   T29] audit: type=1400 audit(1771952440.567:4101): avc:  denied  { execute } for  pid=26990 comm="syz.1.4407" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1580.684558][T26999] overlayfs: workdir and upperdir must reside under the same mount
[ 1581.009304][T27001] netlink: 'syz.2.4409': attribute type 16 has an invalid length.
[ 1581.017180][T27001] netlink: 'syz.2.4409': attribute type 17 has an invalid length.
[ 1581.076567][   T12] net_ratelimit: 56 callbacks suppressed
[ 1581.076581][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1581.110558][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1581.256482][   T29] audit: type=1400 audit(1771952441.398:4102): avc:  denied  { getopt } for  pid=27014 comm="syz.0.4411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1581.262171][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1581.409117][T25341] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1581.973233][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1581.980992][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1582.042588][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1582.086496][T27052] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4)
[ 1582.093274][T27052] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1582.103873][T27052] vhci_hcd vhci_hcd.0: Device attached
[ 1582.119759][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1582.128182][T12341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1582.137108][   T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1582.153756][ T1000] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1582.271991][T16332] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1582.321689][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1582.328593][   T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[ 1582.337003][   T10] usb 3-1: config 0 has no interface number 0
[ 1582.344058][T12341] usb 47-1: new low-speed USB device number 2 using vhci_hcd
[ 1582.351492][   T10] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1582.361382][   T10] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1582.371551][ T5861] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1582.381267][   T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1582.390455][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1582.398636][   T10] usb 3-1: Product: syz
[ 1582.403528][   T10] usb 3-1: Manufacturer: syz
[ 1582.408260][   T10] usb 3-1: SerialNumber: syz
[ 1582.422934][   T10] usb 3-1: config 0 descriptor??
[ 1582.431892][T16332] usb 2-1: Using ep0 maxpacket: 8
[ 1582.438053][   T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1582.438093][T27065] binder: 27064:27065 ioctl 4018620d 0 returned -22
[ 1582.448814][T16332] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1582.463203][T16332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1582.485671][T16332] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1582.492984][T16332] pvrusb2: **********
[ 1582.496953][T16332] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1582.507419][T16332] pvrusb2: Important functionality might not be entirely working.
[ 1582.511539][   T24] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 1582.515535][T16332] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1582.531654][   T29] audit: type=1400 audit(1771952442.648:4103): avc:  denied  { bind } for  pid=27064 comm="syz.5.4417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1582.536931][T16332] pvrusb2: **********
[ 1582.558711][ T5861] usb 8-1: config 0 has no interfaces?
[ 1582.564879][ T5861] usb 8-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[ 1582.574670][ T5861] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1582.592675][ T5861] usb 8-1: config 0 descriptor??
[ 1582.631667][   T10] usb 3-1: qt2_setup_urbs - submit read urb failed -90
[ 1582.638890][   T10] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90
[ 1582.706489][ T2339] pvrusb2: Invalid write control endpoint
[ 1582.775750][ T2339] pvrusb2: Invalid write control endpoint
[ 1582.783039][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1582.796681][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1582.821553][T16332] usb 8-1: USB disconnect, device number 3
[ 1582.829476][T27053] vhci_hcd: cannot find a urb of seqnum 2571884352 max seqnum 1
[ 1582.837669][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1582.862307][   T10] usb 3-1: USB disconnect, device number 81
[ 1582.873317][ T1000] vhci_hcd vhci_hcd.7: stop threads
[ 1582.879216][ T1000] vhci_hcd vhci_hcd.7: release socket
[ 1582.884716][ T2339] pvrusb2: Device being rendered inoperable
[ 1582.907791][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1582.915989][ T1000] vhci_hcd vhci_hcd.7: disconnect device
[ 1582.926673][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1582.945013][ T2339] pvrusb2: Attached sub-driver cx25840
[ 1582.950753][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1582.961538][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1582.994912][T27045] pvrusb2: Attempted to execute control transfer when device not ok
[ 1583.018821][   T29] audit: type=1400 audit(1771952443.159:4104): avc:  denied  { remount } for  pid=27044 comm="syz.1.4415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 1583.076879][   T29] audit: type=1400 audit(1771952443.189:4105): avc:  denied  { read append } for  pid=27044 comm="syz.1.4415" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1583.104031][   T29] audit: type=1400 audit(1771952443.189:4106): avc:  denied  { open } for  pid=27044 comm="syz.1.4415" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1583.609804][T16332] usb 2-1: USB disconnect, device number 76
[ 1584.400688][T16332] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1585.225560][T16332] usb 2-1: Using ep0 maxpacket: 32
[ 1585.247781][T16332] usb 2-1: config 0 has an invalid interface number: 109 but max is 0
[ 1585.379584][T16332] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[ 1585.394055][T16332] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[ 1585.519768][T16332] usb 2-1: config 0 has no interface number 0
[ 1585.527087][T16332] usb 2-1: too many endpoints for config 0 interface 109 altsetting 138: 245, using maximum allowed: 30
[ 1585.540296][T16332] usb 2-1: config 0 interface 109 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 245
[ 1585.938426][T16332] usb 2-1: config 0 interface 109 has no altsetting 0
[ 1585.951799][T16332] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1585.962556][T16332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1585.970627][T16332] usb 2-1: Product: syz
[ 1585.974785][T16332] usb 2-1: Manufacturer: syz
[ 1585.979382][T16332] usb 2-1: SerialNumber: syz
[ 1586.019998][T16332] usb 2-1: config 0 descriptor??
[ 1586.142327][T27183] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4428'.
[ 1586.171849][T17336] net_ratelimit: 65 callbacks suppressed
[ 1586.171865][T17336] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1586.195784][T17336] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1586.247677][T16332] usb 2-1: USB disconnect, device number 77
[ 1586.281378][   T86] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1586.312226][T17336] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1586.325263][T17336] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1586.443590][T27203] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4429'.
[ 1586.932576][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1586.953880][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1587.089488][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1587.124019][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1587.923570][T12341] vhci_hcd vhci_hcd.7: vhci_device speed not set
[ 1587.949276][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1588.604807][T27232] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4434'.
[ 1589.422117][T27232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4434'.
[ 1589.945759][T27236] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1589.999830][T27236] team0: Port device batadv1 added
[ 1590.117039][T27247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4438'.
[ 1590.151047][T27247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4438'.
[ 1590.157747][   T29] audit: type=1400 audit(1771952450.302:4107): avc:  denied  { write } for  pid=27246 comm="syz.0.4438" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1590.285668][   T29] audit: type=1400 audit(1771952450.432:4108): avc:  denied  { write } for  pid=27250 comm="syz.7.4439" path="socket:[85443]" dev="sockfs" ino=85443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1590.329341][T27251] lo speed is unknown, defaulting to 1000
[ 1591.197056][   T12] net_ratelimit: 41 callbacks suppressed
[ 1591.197077][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1591.248057][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1591.387500][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1591.567442][   T86] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1591.575601][T12341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1591.622428][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1591.774051][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1591.785178][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1591.905666][T27299] siw: device registration error -23
[ 1591.918986][T27299] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[ 1592.287746][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1592.624268][T27307] CUSE: info not properly terminated
[ 1592.782644][   T29] audit: type=1400 audit(1771952452.643:4109): avc:  denied  { setopt } for  pid=27301 comm="syz.5.4444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1593.150162][T27305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4445'.
[ 1593.186511][   T29] audit: type=1400 audit(1771952452.753:4110): avc:  denied  { execute_no_trans } for  pid=27301 comm="syz.5.4444" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1593.543905][   T29] audit: type=1400 audit(1771952453.644:4111): avc:  denied  { mounton } for  pid=27250 comm="syz.7.4439" path="/syzcgroup/cpu/syz7/cgroup.procs" dev="cgroup" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[ 1595.125674][T12341] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1595.777443][T12341] usb 3-1: Using ep0 maxpacket: 32
[ 1595.791465][   T29] audit: type=1400 audit(1771952455.945:4112): avc:  denied  { unmount } for  pid=17866 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 1595.850622][T12341] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1595.969220][T27348] ceph: No mds server is up or the cluster is laggy
[ 1595.989429][T12341] usb 3-1: config 0 has an invalid interface number: 36 but max is 0
[ 1596.065553][T12341] usb 3-1: config 0 has an invalid interface number: 5 but max is 0
[ 1596.138721][   T86] libceph: connect (1)[c::]:6789 error -101
[ 1596.168878][T12341] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 1596.171171][   T86] libceph: mon0 (1)[c::]:6789 connect error
[ 1596.267348][ T5874] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0
[ 1596.275350][T12341] usb 3-1: config 0 has no interface number 0
[ 1596.281497][T12341] usb 3-1: config 0 has no interface number 1
[ 1596.293514][ T5874] hid-generic 0000:0000:0000.0049: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1596.310988][ T1000] net_ratelimit: 62 callbacks suppressed
[ 1596.311005][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1596.315725][T12341] usb 3-1: config 0 interface 36 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 1596.327298][ T1000] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1596.818223][T12341] usb 3-1: too many endpoints for config 0 interface 5 altsetting 156: 226, using maximum allowed: 30
[ 1596.825210][   T86] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1596.829660][T12341] usb 3-1: config 0 interface 5 altsetting 156 has 0 endpoint descriptors, different from the interface descriptor's value: 226
[ 1596.851809][T12341] usb 3-1: config 0 interface 36 has no altsetting 0
[ 1596.858612][T12341] usb 3-1: config 0 interface 5 has no altsetting 0
[ 1596.869902][T12341] usb 3-1: string descriptor 0 read error: -22
[ 1596.876728][T12341] usb 3-1: New USB device found, idVendor=1604, idProduct=0ab3, bcdDevice= 0.00
[ 1596.892590][T12341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1596.927124][T12341] usb 3-1: config 0 descriptor??
[ 1597.004685][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1597.236581][   T29] audit: type=1400 audit(1771952457.366:4113): avc:  denied  { write } for  pid=27328 comm="syz.2.4450" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1597.269831][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1597.404123][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1597.421188][   T29] audit: type=1400 audit(1771952457.366:4114): avc:  denied  { open } for  pid=27328 comm="syz.2.4450" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1597.436277][T27362] fido_id[27362]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1597.460993][   T29] audit: type=1400 audit(1771952457.366:4115): avc:  denied  { ioctl } for  pid=27328 comm="syz.2.4450" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1597.475562][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1597.876989][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1598.029247][   T86] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1598.046418][ T1000] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1598.081400][T27329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4450'.
[ 1598.227000][T27400] FAULT_INJECTION: forcing a failure.
[ 1598.227000][T27400] name failslab, interval 1, probability 0, space 0, times 0
[ 1598.273006][T27400] CPU: 1 UID: 0 PID: 27400 Comm: syz.0.4461 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1598.273033][T27400] Tainted: [L]=SOFTLOCKUP
[ 1598.273039][T27400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1598.273049][T27400] Call Trace:
[ 1598.273055][T27400]  <TASK>
[ 1598.273061][T27400]  dump_stack_lvl+0x100/0x190
[ 1598.273092][T27400]  should_fail_ex.cold+0x5/0xa
[ 1598.273114][T27400]  should_failslab+0xc2/0x120
[ 1598.273140][T27400]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1598.273158][T27400]  ? ovl_init_fs_context+0x52/0x5f0
[ 1598.273182][T27400]  ovl_init_fs_context+0x52/0x5f0
[ 1598.273204][T27400]  alloc_fs_context+0x60c/0xf40
[ 1598.273228][T27400]  path_mount+0xdbd/0x23d0
[ 1598.273251][T27400]  ? __pfx_path_mount+0x10/0x10
[ 1598.273269][T27400]  ? lockdep_hardirqs_on+0x78/0x100
[ 1598.273288][T27400]  ? putname+0xb1/0x110
[ 1598.273302][T27400]  ? kmem_cache_free+0x124/0x6a0
[ 1598.273327][T27400]  ? __x64_sys_mount+0x293/0x310
[ 1598.273343][T27400]  __x64_sys_mount+0x293/0x310
[ 1598.273360][T27400]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1598.273383][T27400]  do_syscall_64+0x106/0xf80
[ 1598.273397][T27400]  ? clear_bhb_loop+0x40/0x90
[ 1598.273416][T27400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1598.273437][T27400] RIP: 0033:0x7fb15679c629
[ 1598.273452][T27400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1598.273466][T27400] RSP: 002b:00007fb1549f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1598.273481][T27400] RAX: ffffffffffffffda RBX: 00007fb156a15fa0 RCX: 00007fb15679c629
[ 1598.273490][T27400] RDX: 0000200000000080 RSI: 0000200000000240 RDI: 0000000000000000
[ 1598.273500][T27400] RBP: 00007fb1549f6090 R08: 0000200000000140 R09: 0000000000000000
[ 1598.273509][T27400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1598.273518][T27400] R13: 00007fb156a16038 R14: 00007fb156a15fa0 R15: 00007ffc33047278
[ 1598.273539][T27400]  </TASK>
[ 1598.334064][ T5874] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1598.592203][T27404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4463'.
[ 1598.626031][T27103] usb 3-1: USB disconnect, device number 82
[ 1598.640790][ T5874] usb 8-1: Using ep0 maxpacket: 32
[ 1598.804793][ T5874] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[ 1598.812987][ T5874] usb 8-1: config 0 has no interface number 0
[ 1599.039081][ T5874] usb 8-1: config 0 interface 184 has no altsetting 0
[ 1599.041750][   T86] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0
[ 1599.048319][ T5874] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1599.068904][   T86] hid-generic 0000:0000:0000.004A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1599.093493][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1599.112171][ T5874] usb 8-1: Product: syz
[ 1599.122405][ T5874] usb 8-1: Manufacturer: syz
[ 1599.132378][ T5874] usb 8-1: SerialNumber: syz
[ 1599.148222][ T5874] usb 8-1: config 0 descriptor??
[ 1599.182282][T27429] hub 9-0:1.0: USB hub found
[ 1599.210220][T27429] hub 9-0:1.0: 1 port detected
[ 1599.281335][   T29] audit: type=1400 audit(1771952459.437:4116): avc:  denied  { listen } for  pid=27408 comm="syz.0.4464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1599.559287][T27444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4468'.
[ 1600.277407][T27419] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1600.741842][   T29] audit: type=1326 audit(1771952460.887:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27391 comm="syz.7.4459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e71d9c629 code=0x0
[ 1600.830048][   T29] audit: type=1326 audit(1771952460.957:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27391 comm="syz.7.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e71d9c629 code=0x7ffc0000
[ 1600.872543][   T29] audit: type=1326 audit(1771952460.957:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27391 comm="syz.7.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e71d9c629 code=0x7ffc0000
[ 1600.993897][   T29] audit: type=1326 audit(1771952460.967:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27391 comm="syz.7.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e71d9c629 code=0x7ffc0000
[ 1601.097035][   T29] audit: type=1326 audit(1771952460.967:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27391 comm="syz.7.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e71d9c629 code=0x7ffc0000
[ 1601.262981][   T29] audit: type=1326 audit(1771952460.967:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27391 comm="syz.7.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4e71d9c629 code=0x7ffc0000
[ 1601.287871][   T29] audit: type=1326 audit(1771952460.967:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27391 comm="syz.7.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e71d9c392 code=0x7ffc0000
[ 1601.407091][T25341] net_ratelimit: 49 callbacks suppressed
[ 1601.407107][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1601.444504][T27476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27476 comm=syz.2.4471
[ 1601.452988][T25341] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1601.465091][ T5874] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61
[ 1601.465118][ T5874] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1601.467705][T27476] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4471'.
[ 1601.489348][   T29] audit: type=1326 audit(1771952460.967:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27391 comm="syz.7.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e71d9c392 code=0x7ffc0000
[ 1601.702111][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1601.709970][T25341] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1601.804386][ T5874] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1601.833558][ T5874] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[ 1601.865216][   T29] audit: type=1326 audit(1771952460.967:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27391 comm="syz.7.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e71d9c629 code=0x7ffc0000
[ 1601.889129][ T5874] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1601.889175][ T5874] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[ 1601.911277][   T29] audit: type=1326 audit(1771952460.967:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27391 comm="syz.7.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e71d9c629 code=0x7ffc0000
[ 1601.945044][ T5874] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -32
[ 1601.987575][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1602.006939][T25341] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1602.010379][   T29] audit: type=1326 audit(1771952460.977:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27391 comm="syz.7.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e71d9c629 code=0x7ffc0000
[ 1602.147201][T27478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4474'.
[ 1602.245959][T25343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1602.311708][T25343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1602.345920][T27487] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4474'.
[ 1602.355117][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1602.363206][  T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1602.888584][T26664] usb 8-1: USB disconnect, device number 4
[ 1603.643488][T27478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1603.699089][T27478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1604.861724][T27478] mac80211_hwsim hwsim22 wlan0: left promiscuous mode
[ 1604.900103][T27478] batman_adv: batadv0: Interface deactivated: macsec1
[ 1605.028179][T25343] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1605.090600][T25343] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1605.118344][T25343] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1605.201808][T25343] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1605.372506][   T48] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1605.411788][   T48] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1605.426029][   T48] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1605.436405][   T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1606.073696][T27577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4492'.
[ 1606.087179][   T29] kauditd_printk_skb: 117 callbacks suppressed
[ 1606.087195][   T29] audit: type=1400 audit(1771952466.240:4245): avc:  denied  { setopt } for  pid=27571 comm="syz.7.4491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1606.229422][T27587] tmpfs: Cannot change global quota limit on remount
[ 1606.402223][T27595] kvm: user requested TSC rate below hardware speed
[ 1606.566568][T20150] net_ratelimit: 82 callbacks suppressed
[ 1606.566586][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1606.629593][T27534] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1606.653328][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1606.769797][T25343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1606.779040][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1606.811888][T25343] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1607.316812][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1607.429609][T27534] usb 8-1: Using ep0 maxpacket: 16
[ 1607.488884][T27534] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1607.507577][T27534] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1607.523012][T27534] usb 8-1: Product: syz
[ 1607.527286][T27534] usb 8-1: Manufacturer: syz
[ 1607.599749][T27534] usb 8-1: SerialNumber: syz
[ 1607.677468][T27534] usb 8-1: config 0 descriptor??
[ 1607.679763][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1607.709912][T27534] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1607.967034][  T329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1607.976975][  T329] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1608.141071][T17336] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1608.162956][T17336] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1608.289052][T27534] ssu100 8-1:0.0: probe with driver ssu100 failed with error -110
[ 1608.697861][T27591] netlink: 'syz.7.4494': attribute type 16 has an invalid length.
[ 1608.705928][T27591] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4494'.
[ 1608.874197][T27534] usb 8-1: USB disconnect, device number 5
[ 1610.380524][T27660] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4505'.
[ 1610.687975][T27534] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1610.770708][ T5823] Bluetooth: hci3: link tx timeout
[ 1610.776950][ T5823] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1610.843471][ T5817] Bluetooth: hci3: link tx timeout
[ 1610.849508][ T5817] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1610.875979][ T5817] Bluetooth: hci3: link tx timeout
[ 1610.893179][T27534] usb 2-1: device descriptor read/64, error -71
[ 1610.893232][ T5817] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1610.911667][ T5817] Bluetooth: hci3: link tx timeout
[ 1610.918141][ T5817] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1611.187236][T27534] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1611.256996][   T29] audit: type=1400 audit(1771952471.413:4246): avc:  denied  { mount } for  pid=27677 comm="syz.2.4510" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[ 1611.347116][T27534] usb 2-1: device descriptor read/64, error -71
[ 1611.365981][T27690] input: syz0 as /devices/virtual/input/input40
[ 1611.392853][   T29] audit: type=1400 audit(1771952471.553:4247): avc:  denied  { append } for  pid=27689 comm="syz.2.4512" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1611.419683][T27690] loop7: detected capacity change from 0 to 524255232
[ 1611.457754][T27534] usb usb2-port1: attempt power cycle
[ 1611.478567][T16332] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 1611.578491][  T329] net_ratelimit: 46 callbacks suppressed
[ 1611.578511][  T329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1611.609830][  T329] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1611.637217][T16332] usb 6-1: Using ep0 maxpacket: 16
[ 1611.644361][T16332] usb 6-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30
[ 1611.663338][T16332] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1611.684964][T16332] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1611.726529][T16332] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1611.734858][T16332] usb 6-1: New USB device found, idVendor=e77d, idProduct=0f2d, bcdDevice= 0.0a
[ 1611.744356][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1611.752400][T25341] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1611.784535][T16332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1611.806602][T16332] usb 6-1: config 0 descriptor??
[ 1611.817021][T27534] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1611.820281][T16332] usbhid 6-1:0.0: can't add hid device: -22
[ 1611.849952][T16332] usbhid 6-1:0.0: probe with driver usbhid failed with error -22
[ 1611.878241][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1612.011319][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1612.203750][  T329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1612.216973][  T329] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1612.250777][   T29] audit: type=1400 audit(1771952472.403:4248): avc:  denied  { execute } for  pid=27710 comm="syz.0.4515" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=86723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 1612.392483][T27534] usb 2-1: device descriptor read/8, error -71
[ 1612.445616][   T29] audit: type=1326 audit(1771952472.603:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27682 comm="syz.5.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945599c629 code=0x7ffc0000
[ 1612.446793][T27684] cgroup: Unknown subsys name 'uid>18446744073709551615'
[ 1612.518632][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1612.565651][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1612.642404][   T29] audit: type=1326 audit(1771952472.603:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27682 comm="syz.5.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f945599c629 code=0x7ffc0000
[ 1612.647057][T27534] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1612.825262][   T29] audit: type=1326 audit(1771952472.603:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27682 comm="syz.5.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945599c629 code=0x7ffc0000
[ 1612.939553][ T5817] Bluetooth: hci3: command 0x0406 tx timeout
[ 1612.953903][   T29] audit: type=1326 audit(1771952472.603:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27682 comm="syz.5.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f945599c629 code=0x7ffc0000
[ 1612.956938][T27534] usb 2-1: device not accepting address 81, error -71
[ 1613.397755][   T29] audit: type=1326 audit(1771952472.603:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27682 comm="syz.5.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945599c629 code=0x7ffc0000
[ 1613.558412][   T29] audit: type=1326 audit(1771952472.603:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27682 comm="syz.5.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f945599c629 code=0x7ffc0000
[ 1613.584252][T27534] usb usb2-port1: unable to enumerate USB device
[ 1613.598726][   T29] audit: type=1326 audit(1771952472.753:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27682 comm="syz.5.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945599c629 code=0x7ffc0000
[ 1613.774771][T27733] fuse: Bad value for 'fd'
[ 1614.619166][   T24] usb 6-1: USB disconnect, device number 91
[ 1615.457053][T27765] FAULT_INJECTION: forcing a failure.
[ 1615.457053][T27765] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1615.470228][T27765] CPU: 1 UID: 0 PID: 27765 Comm: syz.5.4523 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1615.470255][T27765] Tainted: [L]=SOFTLOCKUP
[ 1615.470261][T27765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1615.470273][T27765] Call Trace:
[ 1615.470280][T27765]  <TASK>
[ 1615.470287][T27765]  dump_stack_lvl+0x100/0x190
[ 1615.470319][T27765]  should_fail_ex.cold+0x5/0xa
[ 1615.470343][T27765]  _copy_from_user+0x2e/0xd0
[ 1615.470367][T27765]  copy_msghdr_from_user+0x9f/0x4f0
[ 1615.470392][T27765]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1615.470428][T27765]  ___sys_sendmsg+0x106/0x1e0
[ 1615.470452][T27765]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1615.470505][T27765]  __sys_sendmsg+0x170/0x220
[ 1615.470523][T27765]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1615.470549][T27765]  ? rcu_is_watching+0x12/0xc0
[ 1615.470576][T27765]  do_syscall_64+0x106/0xf80
[ 1615.470594][T27765]  ? clear_bhb_loop+0x40/0x90
[ 1615.470616][T27765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1615.470634][T27765] RIP: 0033:0x7f945599c629
[ 1615.470649][T27765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1615.470666][T27765] RSP: 002b:00007f94567bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1615.470684][T27765] RAX: ffffffffffffffda RBX: 00007f9455c16180 RCX: 00007f945599c629
[ 1615.470696][T27765] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1615.470707][T27765] RBP: 00007f94567bd090 R08: 0000000000000000 R09: 0000000000000000
[ 1615.470717][T27765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1615.470727][T27765] R13: 00007f9455c16218 R14: 00007f9455c16180 R15: 00007ffef69ac6f8
[ 1615.470752][T27765]  </TASK>
[ 1617.789067][  T329] net_ratelimit: 50 callbacks suppressed
[ 1617.789086][  T329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1617.815700][  T329] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1617.944061][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1618.043756][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1618.475700][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1618.560944][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1618.703736][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1618.733815][T20150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1618.741576][T20150] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1618.855500][T17336] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1619.077514][T27806] netlink: 'syz.0.4534': attribute type 1 has an invalid length.
[ 1619.835427][T27516] usb 8-1: new low-speed USB device number 6 using dummy_hcd
[ 1620.144998][T27516] usb 8-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1620.203435][T27516] usb 8-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1620.423334][T27516] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1620.890414][T27516] usb 8-1: string descriptor 0 read error: -71
[ 1620.906804][T27516] hub 8-1:32.0: bad descriptor, ignoring hub
[ 1620.930940][   T29] kauditd_printk_skb: 2 callbacks suppressed
[ 1620.930955][   T29] audit: type=1400 audit(1771952481.087:4258): avc:  denied  { ioctl } for  pid=27837 comm="syz.5.4538" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1620.986834][T27516] hub 8-1:32.0: probe with driver hub failed with error -5
[ 1621.203147][T27516] usb 8-1: USB disconnect, device number 6
[ 1621.846424][T27876] netlink: 'syz.1.4542': attribute type 5 has an invalid length.
[ 1621.948713][T27879] fuse: Bad value for 'fd'
[ 1622.243320][   T29] audit: type=1400 audit(1771952482.408:4259): avc:  denied  { read } for  pid=27883 comm="syz.1.4546" lport=57230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1622.331756][T27516] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 1622.471623][T27516] usb 3-1: device descriptor read/64, error -71
[ 1622.530340][T27900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4547'.
[ 1622.545079][T27900] netlink: 'syz.7.4547': attribute type 3 has an invalid length.
[ 1622.741708][T27516] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 1622.855821][   T48] net_ratelimit: 57 callbacks suppressed
[ 1622.855835][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1622.871528][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1622.892641][T27516] usb 3-1: device descriptor read/64, error -71
[ 1622.993971][T17336] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1623.002091][T17336] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1623.013804][T27516] usb usb3-port1: attempt power cycle
[ 1623.116438][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1623.157662][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1623.281183][T25343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1623.289162][T25343] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1623.382413][T27516] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 1623.413045][T27516] usb 3-1: device descriptor read/8, error -71
[ 1623.501212][T25341] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1623.509066][T25341] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1623.651228][T27516] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 1623.683704][T27516] usb 3-1: device descriptor read/8, error -71
[ 1623.802800][T27516] usb usb3-port1: unable to enumerate USB device
[ 1624.570852][T16332] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1624.571453][T27516] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1624.740748][T27516] usb 2-1: device descriptor read/64, error -71
[ 1624.810407][T16332] usb 8-1: Using ep0 maxpacket: 32
[ 1624.818805][T16332] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 1624.829061][T16332] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1624.837361][T16332] usb 8-1: Product: syz
[ 1624.841923][T16332] usb 8-1: Manufacturer: syz
[ 1624.846529][T16332] usb 8-1: SerialNumber: syz
[ 1624.876470][T16332] usb 8-1: config 0 descriptor??
[ 1624.894037][T16332] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 1624.910742][T16332] dvb-usb: bulk message failed: -22 (4/0)
[ 1624.920428][T16332] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1624.940901][T16332] dvb-usb: bulk message failed: -22 (5/0)
[ 1624.946670][T16332] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1624.973587][T16332] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1624.990775][T27516] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1624.994389][T16332] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 1625.027186][T16332] usb 8-1: media controller created
[ 1625.039545][T27882] Process accounting resumed
[ 1625.049403][T16332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1625.101625][T16332] usb 8-1: selecting invalid altsetting 3
[ 1625.112207][T16332] ttusb2: set interface to alts=3 failed
[ 1625.140412][T27516] usb 2-1: device descriptor read/64, error -71
[ 1625.186132][T27942] program syz.0.4554 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1625.243910][   T29] audit: type=1400 audit(1771952485.340:4260): avc:  denied  { append } for  pid=27938 comm="syz.0.4554" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1625.463248][T27516] usb usb2-port1: attempt power cycle
[ 1625.464550][T27955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4555'.
[ 1625.711872][T16332] DVB: Unable to find symbol tda10086_attach()
[ 1625.724346][T16332] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 1625.755463][T16332] dvb-usb: bulk message failed: -22 (4/0)
[ 1625.764940][T16332] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1625.796106][T16332] dvb-usb: bulk message failed: -22 (5/0)
[ 1625.806116][T16332] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1625.837626][T16332] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 1625.857974][T16332] usb 8-1: USB disconnect, device number 7
[ 1625.859913][T27516] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1626.027966][T27516] usb 2-1: device descriptor read/8, error -71
[ 1626.057970][T16332] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 1626.629472][T27516] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1626.661064][T27516] usb 2-1: device descriptor read/8, error -71
[ 1626.793997][T27516] usb usb2-port1: unable to enumerate USB device
[ 1626.878353][T27976] program syz.7.4557 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1627.286481][T27988] syzkaller0: entered promiscuous mode
[ 1627.292329][T27988] syzkaller0: entered allmulticast mode
[ 1627.484644][T27998] netlink: 'syz.1.4562': attribute type 1 has an invalid length.
[ 1627.496359][T27998] loop5: detected capacity change from 0 to 7
[ 1627.510308][T26485] Dev loop5: unable to read RDB block 7
[ 1627.515883][T26485]  loop5: AHDI p1 p2 p3
[ 1627.575995][T28003] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4564'.
[ 1628.023399][T26485] loop5: partition table partially beyond EOD, truncated
[ 1628.031095][T26485] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1628.037866][T26485] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1628.047009][T25343] net_ratelimit: 57 callbacks suppressed
[ 1628.047030][T25343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1628.104260][T25343] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1628.157151][T27998] Dev loop5: unable to read RDB block 7
[ 1628.247700][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1628.467637][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1628.468564][T27516] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1628.481052][T27998]  loop5: AHDI p1 p2 p3
[ 1628.525708][T28012] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4562'.
[ 1628.537460][T27998] loop5: partition table partially beyond EOD, truncated
[ 1628.579457][T25343] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1628.604798][T25343] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1628.626622][T27998] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1629.054575][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1629.101506][T27516] usb 6-1: Using ep0 maxpacket: 16
[ 1629.117256][T27516] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1629.248210][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1629.258532][T27516] usb 6-1: config 1 has no interface number 1
[ 1629.275908][T27516] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1629.320703][T27516] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1629.346749][T27516] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1629.354364][T28026] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4567'.
[ 1629.475042][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1629.483343][T27998] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1629.493548][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1629.512426][T28021] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd7": -EINTR
[ 1629.559479][T27516] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1629.624980][T27516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1629.799007][T27516] usb 6-1: Product: syz
[ 1629.867849][T27516] usb 6-1: Manufacturer: syz
[ 1629.882601][T27516] usb 6-1: SerialNumber: syz
[ 1630.627948][T27516] usb 6-1: failed to enable PITCH for EP 0x82
[ 1630.634491][T27516] usb 6-1: 2:1: cannot set freq 11994917 to ep 0x82
[ 1630.904824][T27516] usb 6-1: USB disconnect, device number 92
[ 1631.187233][T27492] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[ 1631.399686][T26654] udevd[26654]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1631.561666][T27492] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1631.675640][T27492] usb 3-1: config 0 has no interfaces?
[ 1631.700062][T27492] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1631.737299][T27492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1631.750631][T28080] syzkaller0: entered promiscuous mode
[ 1631.759264][T28080] syzkaller0: entered allmulticast mode
[ 1631.766373][T27492] usb 3-1: config 0 descriptor??
[ 1632.620049][T28100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28100 comm=syz.7.4576
[ 1632.642917][T28100] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4576'.
[ 1632.681334][T27492] usb 3-1: USB disconnect, device number 87
[ 1632.774527][T28115] 9pnet_fd: p9_fd_create_tcp (28115): problem connecting socket to 127.0.0.1
[ 1632.818249][   T29] audit: type=1400 audit(1771952492.983:4261): avc:  denied  { setopt } for  pid=28119 comm="syz.5.4579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1633.132456][   T29] audit: type=1400 audit(1771952493.103:4262): avc:  denied  { getopt } for  pid=28053 comm="syz.2.4572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1633.196934][   T48] net_ratelimit: 47 callbacks suppressed
[ 1633.196952][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1633.332035][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1633.776549][T27497] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1633.919281][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1633.927444][T27497] usb 2-1: device descriptor read/64, error -71
[ 1633.955912][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1634.086392][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1634.095769][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1634.155671][T28146] trusted_key: encrypted_key: insufficient parameters specified
[ 1634.205761][T27497] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1634.245910][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1634.479410][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1634.625175][T27497] usb 2-1: device descriptor read/64, error -71
[ 1634.665999][  T329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1634.682980][  T329] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1634.740818][T27497] usb usb2-port1: attempt power cycle
[ 1634.748580][T28150] mac80211_hwsim hwsim30 
: renamed from wlan1 (while UP)
[ 1635.135749][T27497] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1635.184185][T27497] usb 2-1: device descriptor read/8, error -71
[ 1636.155670][T27497] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1636.436774][T27497] usb 2-1: device not accepting address 89, error -71
[ 1636.565980][T27497] usb usb2-port1: unable to enumerate USB device
[ 1636.842967][T28178] syzkaller0: entered promiscuous mode
[ 1636.854675][T28178] syzkaller0: entered allmulticast mode
[ 1636.934940][T27497] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1637.032690][T28189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4593'.
[ 1637.044253][T28189] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4593'.
[ 1637.076454][T28189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4593'.
[ 1637.094687][T28189] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4593'.
[ 1637.107695][T27497] usb 2-1: Using ep0 maxpacket: 32
[ 1637.114470][T27497] usb 2-1: config 0 has an invalid interface number: 76 but max is 0
[ 1637.132928][T27497] usb 2-1: config 0 has no interface number 0
[ 1637.257105][   T29] audit: type=1400 audit(1771952497.416:4263): avc:  denied  { getopt } for  pid=28195 comm="syz.0.4594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1637.279383][T27497] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[ 1637.298652][T28189] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4593'.
[ 1637.316368][T27497] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1637.334853][T27497] usb 2-1: Product: syz
[ 1637.341294][T27497] usb 2-1: Manufacturer: syz
[ 1637.398639][T28208] trusted_key: encrypted_key: insufficient parameters specified
[ 1637.795816][T27497] usb 2-1: SerialNumber: syz
[ 1637.838754][T27497] usb 2-1: config 0 descriptor??
[ 1637.852611][T28189] ptrace attach of "./syz-executor exec"[28211] was attempted by "./syz-executor exec"[28189]
[ 1637.867575][T27497] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[ 1637.880096][T27497] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1637.886865][T27497] dvb-usb: bulk message failed: -22 (2/0)
[ 1637.909342][T27497] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1637.969917][T27497] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[ 1638.062846][T27497] usb 2-1: media controller created
[ 1638.084804][T27497] dvb-usb: bulk message failed: -22 (6/0)
[ 1638.090559][T27497] dw2102: i2c transfer failed.
[ 1638.100770][T27497] dvb-usb: bulk message failed: -22 (6/0)
[ 1638.106677][T27497] dw2102: i2c transfer failed.
[ 1638.111545][T27497] dvb-usb: bulk message failed: -22 (6/0)
[ 1638.117496][T27497] dw2102: i2c transfer failed.
[ 1638.122354][T27497] dvb-usb: bulk message failed: -22 (6/0)
[ 1638.214029][   T12] net_ratelimit: 43 callbacks suppressed
[ 1638.214048][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1638.233922][T27497] dw2102: i2c transfer failed.
[ 1638.726028][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1638.754189][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1638.775190][T28166] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI
[ 1638.787294][T28166] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[ 1638.795696][T28166] CPU: 0 UID: 0 PID: 28166 Comm: syz.1.4587 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1638.806628][T28166] Tainted: [L]=SOFTLOCKUP
[ 1638.810940][T28166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1638.820987][T28166] RIP: 0010:su3000_i2c_transfer+0x607/0xd90
[ 1638.826876][T28166] Code: 63 08 fa 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 23 06 00 00 48 8b 5b 08 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 20 38 d0 7f 08 84 c0 0f 85 f4 05 00 00 48 8b 44 24 10
[ 1638.846465][T28166] RSP: 0018:ffffc90012eafc10 EFLAGS: 00010246
[ 1638.852510][T28166] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffffc90015275000
[ 1638.860457][T28166] RDX: 0000000000000000 RSI: ffffffff88003b80 RDI: ffff88802a665e08
[ 1638.868404][T28166] RBP: 0000000000001900 R08: 0000000000000003 R09: 0000000000001a00
[ 1638.876354][T28166] R10: 0000000000001900 R11: 0000000000000000 R12: dffffc0000000000
[ 1638.884311][T28166] R13: ffff8880329bb602 R14: 0000000000000000 R15: ffff8880329bb600
[ 1638.892276][T28166] FS:  00007f101f27a6c0(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000
[ 1638.901193][T28166] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1638.907757][T28166] CR2: 0000001b2f723ffc CR3: 000000008e9ae000 CR4: 00000000003526f0
[ 1638.915717][T28166] Call Trace:
[ 1638.918987][T28166]  <TASK>
[ 1638.921909][T28166]  ? mark_held_locks+0x40/0x70
[ 1638.926672][T28166]  __i2c_transfer+0x5d9/0x17f0
[ 1638.931428][T28166]  ? __pfx___i2c_transfer+0x10/0x10
[ 1638.936611][T28166]  i2c_transfer+0x15f/0x380
[ 1638.941102][T28166]  i2cdev_ioctl_rdwr+0x3ec/0x700
[ 1638.946115][T28166]  i2cdev_ioctl+0x19d/0x830
[ 1638.950604][T28166]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1638.955617][T28166]  ? selinux_file_ioctl+0x139/0x290
[ 1638.960798][T28166]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1638.965803][T28166]  __x64_sys_ioctl+0x18e/0x210
[ 1638.970549][T28166]  do_syscall_64+0x106/0xf80
[ 1638.975127][T28166]  ? clear_bhb_loop+0x40/0x90
[ 1638.979789][T28166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1638.985664][T28166] RIP: 0033:0x7f101e39c629
[ 1638.990056][T28166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1639.009645][T28166] RSP: 002b:00007f101f27a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1639.018037][T28166] RAX: ffffffffffffffda RBX: 00007f101e615fa0 RCX: 00007f101e39c629
[ 1639.025987][T28166] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004
[ 1639.033938][T28166] RBP: 00007f101e432b39 R08: 0000000000000000 R09: 0000000000000000
[ 1639.041882][T28166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1639.049831][T28166] R13: 00007f101e616038 R14: 00007f101e615fa0 R15: 00007ffc7d70b2b8
[ 1639.057783][T28166]  </TASK>
[ 1639.060777][T28166] Modules linked in:
[ 1639.065310][T28166] ---[ end trace 0000000000000000 ]---
[ 1639.075391][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1639.083250][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1639.091163][T28166] RIP: 0010:su3000_i2c_transfer+0x607/0xd90
[ 1639.099915][T28166] Code: 63 08 fa 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 23 06 00 00 48 8b 5b 08 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 20 38 d0 7f 08 84 c0 0f 85 f4 05 00 00 48 8b 44 24 10
[ 1639.153567][T28166] RSP: 0018:ffffc90012eafc10 EFLAGS: 00010246
[ 1639.170429][T28166] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffffc90015275000
[ 1639.183692][   T29] audit: type=1400 audit(1771952499.307:4264): avc:  denied  { append } for  pid=28236 comm="syz.0.4601" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1639.208054][  T329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1639.231193][  T329] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1639.231412][T28166] RDX: 0000000000000000 RSI: ffffffff88003b80 RDI: ffff88802a665e08
[ 1639.280330][T28166] RBP: 0000000000001900 R08: 0000000000000003 R09: 0000000000001a00
[ 1639.295986][T28166] R10: 0000000000001900 R11: 0000000000000000 R12: dffffc0000000000
[ 1639.309221][T28166] R13: ffff8880329bb602 R14: 0000000000000000 R15: ffff8880329bb600
[ 1639.326823][T28166] FS:  00007f101f27a6c0(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000
[ 1639.338151][T28166] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1639.347476][T28166] CR2: 00007f94559e9d40 CR3: 000000008e9ae000 CR4: 00000000003526f0
[ 1639.356409][T28166] Kernel panic - not syncing: Fatal exception
[ 1639.362723][T28166] Kernel Offset: disabled
[ 1639.367025][T28166] Rebooting in 86400 seconds..