last executing test programs:

11m14.252854403s ago: executing program 4 (id=222):
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x0, 0x8})
sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2000c840)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x20000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4140}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000)
socket(0x1000000000000010, 0x80802, 0x0)
socket$packet(0x11, 0x2, 0x300)
r7 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0)
r8 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(0x3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x8280e0, &(0x7f00000004c0)=ANY=[@ANYBLOB='transdno=\x00\x00\n\x00\x00\x00', @ANYRESHEX=r8, @ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',\x00'])
add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x18, 0xfffffffffffffffe)
syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r9, 0x89e7, &(0x7f0000000300)={0x7e})

11m13.062177765s ago: executing program 4 (id=225):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000000c0), 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0xffffffffffffffff, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18)
sendmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb02251000000000000000046b3ee57a29337e0080000a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="ba0806f7974098b7201514a5e6f35395a8a7edcda4309e5a638a81366c5d0f119a231a5462c06cda314dbd3b5437fc61a3153d140a4d0c9c59cbe1a8b3bf5e564de1cad214b8431ae21aed41a2cde48a12f29c20d7a214c24d2bdbbc4421f6908b5ee9fe755168be5deb9e16613a8c215e2b44e8d06be4b6d0bf30868765fe1a1a05def3639bd2b89ede6975868d70fcac2de92e6661b6a33c3f3c0dee05295baca225b7e3e8985b217328cacfaa945e0221d3a76e1177a420c7daaa142ce546ca3ff6e8b91197f7a94e98d072e8d9b348591d9fca29dd6b9ec352d74edd1ce0c63ad64caaa1e30e24ac0305c5999b5545194ec572ba27fe4b543e3f7633b2d8d9639a30138f1efaade9f82fc877cf51130c8570f56fb41c0f5515cc9df80e2cd543be16799866ba259062726d99a5a6d7bda02334035b126c1ab323e2f820b050c9773a1098a1b9817f1a408dee2a2f7c91a5cebba6ace07171ce236ec47bce5dcd81bc685d4cb3bfcfbc24774aedf1f388df7db5aa5a572b086371a74d9f470da1f57ca8cb2ecb017c001f64723146442c217f3c91e2bbe4bc7610a1909048488fed84295b058272f42d812c7e5738a90f017bd49d5c849e42e18e1670a89fd20db5e1d6529c9cec7f44318e2a478f3b81375f72414e076646b6726de3e78438df63d631d0354d90e9de003320ffabb2c81576a6c5d2a769b83cb85c23a91ee49f607c8059932f3cbbf78a6d9edd2261101fb3176a6a4e2f9ac5f02144076c24ff2233104df6d53b553d19389eb4c48bc6eb88f3f950e9d27681502390eb01ccae9e9b730fdca1c55a7255b71a33191ac570ad056254e1a69ad5554b9380e53883883d0e535ecdf58516b416c15a24754b9a25ec06b8af3e40052881865b87150edd413e22858ba4e943b7a8a3ae435c4bb600c9b5678896e224b4dfc3c97e270fff363880acc4d6d2fd18de851ba33ae4afc4263e1e53ae4eb071a3230ee296930d76cd3d5bb96f3c5942c9a29207ca16f5854dba086d5c1c05cc968c4561941a749bfb44f9ede6d0bb3c00dedf93b1210eca37e873718ccdf7cc055d7bab4dd77ff95f3f20f41a92830c62f182ac3fb847ce8df7fdb3f616660bb752e4a86157f8d8c5ae61139cc76b38d9fbf84fc6429fed5deeb995998d2d8cf6547e7bff62129629d7087495d57b47e9bfe5301a1a7311569b0e28f5049ae88869f20c7cb4f6833d235c02cb9fca9ecc1be493f2bef37eadc3706e220b52b4ad24ee2f68346114be52c1dd3fa1b373c2272d3344b63111459934f1a6580d26b0c854fe0cd485c6996b6fe807b122b1a30af24610cdddbbdde5601d35a4f66cdd5a547870bca1182273f2dd236b7227bc9015026a7610c321279487c1d3ad009069eaa0a8c0939e507b8609ea5d3c6a3fc8d28a8eb599b12dddffdeaa5ce05ccd902627239ea537253d6be666b94f244a5c9525bb4f535496bbc3bf37fb20997d0b9054b9f59a1d202a94e9333a47f436fee2202999b76a1914b6c8595339d91bc07f302f2918d1bd933b497f778d61acf6ff304314d9b95cfc7e722dd28dd86a92ddcad07b96f46ae9ca4ae3ed8f0786668b531d9b680eeda7728b9d918febe3d387099314f104cba399acc360248a5262e97af554bd550e0e3c9353c1f1d603ad28f9e1e351a420223bfa4c18adc440e3e16ec47c818a28ed4c1683dd076e4424ef2bc9980aec0e3cb255a34b590c2e387ecac30be18e1fda22311e2993f4ae17172a1048b84ee5a7b33970058b55a43eac46eb5ec05d53b7031cec0e121b2e0947fa998eecd231daa2d5b1a875bee2e834610cd363cc7644911a34162bf247593e2cb8c8c62091f17532fb903eea3b10135b6aaf7ae7d82998f1063907de807b60763a9d34b3af13019d99148f3ab7fa5430523df350ba3105c717764392be28a24c08c20e38f87cf19904b0dff0c9ec3f1d83184923ec679dc06149f8465a6b0eedab15742ebd4fba0e5308c968e7db234d4c33024ff28439323af1ec1bded0dde9dd08ebe72c1782d269cf08db95e9dd431355f4a7402e4a31fee601362d32f05e23ba00bfae85f018b54d7cd38929b8e1e9bd16b7b07faad560f5ff07311d68e7fe25209fe1e0b862d2d19d551cdb4a5ce04159fde81a995a927d2b3b1ef83db81b71255ac8c2a00bce0fc0b525214f57c77749c9b791f8d779a71453183661a41dadec853f6922b485a73ee7835d5ba9a2c88be84826793706a991ce5326b0bb1cfe4dca625e32824e42a347a65305ee2cd44f6291aef2acf979705ccbdd2277cff875198d26176b81669a8eef544d5d9b5b16a4f4bb3b2895254a5dfc5a40f8121d366a4e8150d0fba93e2f443c8b378763808e42731814618de1e4", 0x69c}], 0x2}}], 0x1, 0x80b5)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)

11m10.829707506s ago: executing program 4 (id=230):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newchain={0x54, 0x64, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xe, 0x3}, {0x2, 0xfff2}, {0xffe0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x87}}, @TCA_CHAIN={0x8, 0xb, 0x31}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x10}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffff}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x7f}}}]}, 0x38}}, 0x200040d5)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg(r2, 0x0, 0x4048000)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000500)=0x4)
readv(r1, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1)

11m9.242325298s ago: executing program 4 (id=232):
mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0)
chroot(&(0x7f0000000040)='./file0/file0\x00')
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0)

11m9.120267261s ago: executing program 4 (id=234):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1)
close(0x3)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="22003300d0000800ffffffffffff080211000000ffffffffffff0040040400030ef90000"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r2, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r9, 0x3)
recvmsg(0xffffffffffffffff, 0x0, 0x40002182)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0xa, 0x4, 0x8000000, 0xdffffffa]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

11m8.570020133s ago: executing program 4 (id=236):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00')
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
sched_setscheduler(0x0, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000540)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r7 = socket$inet6(0xa, 0x80003, 0x6)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x200}, &(0x7f0000000200)=0x8)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010103, @in6=@private1, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x3, 0x4, 0x1, 0xa78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@remote, 0x2, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

11m7.865394908s ago: executing program 32 (id=236):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00')
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
sched_setscheduler(0x0, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000540)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r7 = socket$inet6(0xa, 0x80003, 0x6)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x200}, &(0x7f0000000200)=0x8)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010103, @in6=@private1, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x3, 0x4, 0x1, 0xa78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@remote, 0x2, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

3m18.713700023s ago: executing program 3 (id=1529):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000ae000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000f000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000180)=0x9, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x800, {0x0, 0x0, 0x0, 0x0, 0x23, 0x49222}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

3m18.009816089s ago: executing program 3 (id=1530):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_load(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75780188ea01004701e5900000000000000008adfec447a9c35a3fab3d7ae070403d79b277ddd09b7be4a4df83efcd0bb71007efb1fa3d81a35fd565f31d2c3f6878e5cc775355f1788ee9f1fa5e6eb01dc6cd473dc37ed2a00c21270858ab657ce26ce77160b6e7a08f4f9d785c236b84e1a4eba48746679bee6305ec3b26fed40305cc5ff2f1460588d0340000bb815cb40b4019cff12fa5d1030e5175d6002f289d77841d3c8e01435e4108b66fa2a00b01dc3449542427adbe7dc1b5987aed4aa8c3b6a48bc432a05e9e0fc53335b80000000000000000"], 0x9)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r6, 0x809, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008180}, 0x4004880)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3e9, 0x800, 0x70bd2d, 0x25dfdbfd, {0x21, 0x0, 0x1, r0, 0x6, 0x5, 0x8, 0x8, 0x0, 0x13, 0x5}}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

3m16.639089576s ago: executing program 3 (id=1533):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[], 0x60}, 0x1, 0x7}, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000280)={0xc, r1})
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80ae", 0x72}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985", 0x15}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r7)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r9)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)

3m15.462756125s ago: executing program 3 (id=1536):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f)
ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x0, 0x8})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2000c840)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x20000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4140}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000)
socket(0x1000000000000010, 0x80802, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(0x3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x8280e0, &(0x7f00000004c0)=ANY=[@ANYBLOB='transdno=\x00\x00\n\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',\x00'])
add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x18, 0xfffffffffffffffe)
syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000300)={0x7e})

3m14.622505242s ago: executing program 3 (id=1540):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, 0x0, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=<r5=>0x0)
bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67)

3m14.190920683s ago: executing program 3 (id=1545):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x5}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="84", 0x1}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

2m58.599244411s ago: executing program 33 (id=1545):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x5}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="84", 0x1}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

13.829824082s ago: executing program 6 (id=1978):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
socket(0x400000000010, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
io_setup(0x81, &(0x7f0000000400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x9, 0x0, 0x0, r0}])
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ca443, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
userfaultfd(0x80001)
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, 0x0, 0x1, 0x0, 0x0)

10.811859222s ago: executing program 1 (id=1985):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x8a103)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0035001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRESHEX=r6, @ANYRESHEX=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x12)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x6}, 0x8000, 0x3}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='erofs\x00', 0x401, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000500)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01144e", 0x18, 0x3a, 0x1, @empty, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @private1}}}}}}, 0x0)

10.264777764s ago: executing program 6 (id=1987):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r2 = socket$inet(0x2, 0x80001, 0x84)
futex(0x0, 0x83, 0x0, 0x0, 0x0, 0xffffff01)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
msgsnd(0x0, 0xfffffffffffffffd, 0x0, 0x800)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r0, @ANYBLOB="25509873c6dab385428f9e37f9274a71e3d4e05624954432bb6fb8ec9213d51c2abb77dc7f6e07ab8d5a648c09f76cb5450d1f5f219816bbfe35cb0bc9ecc53523e6ae2effdc03e7935d38fb1b81ed0af85ec59662d3f9c5661ac9282942aeb9f12111372d2d54b5da2ee96f9c229106f21427ba521a5db9737ae9e9cc7a7b0868978479eb9e2c", @ANYRES64], 0x18}, 0x1, 0x0, 0x0, 0x4048014}, 0x4000000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

9.254957032s ago: executing program 1 (id=1988):
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x0, 0x8})
sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2000c840)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x20000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4140}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x40000)
socket(0x1000000000000010, 0x80802, 0x0)
socket$packet(0x11, 0x2, 0x300)
r7 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0)
r8 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(0x3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x8280e0, &(0x7f00000004c0)=ANY=[@ANYBLOB='transdno=\x00\x00\n\x00\x00\x00', @ANYRESHEX=r8, @ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',\x00'])
add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x18, 0xfffffffffffffffe)
r9 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0xc4c85513, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'})
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r10, 0x89e7, &(0x7f0000000300)={0x7e})

7.64912799s ago: executing program 1 (id=1989):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x206700)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0)
socket(0x2b, 0x80801, 0x1)
r2 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r2, &(0x7f00000008c0)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
lseek(r2, 0x0, 0x4)
sendfile(r2, r2, &(0x7f00000001c0), 0x7fa)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0xff, 0x5, 0x5, 0x8000, 0x7fff, 0x1}, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0xffffffffffffffa4, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001b13090025bd7800fddbdf4c2654250f"], 0x14}}, 0x4000080)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000206010300000000000000000000000409d3c06f5bc836e2676e53e9421be3ae03bd08a162d92fb688a0d1f376754987d35468d1e4bd9137ac180000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8800)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x53, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)

7.541946291s ago: executing program 6 (id=1990):
r0 = getpid()
socket$nl_rdma(0x10, 0x3, 0x14)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20048880}, 0x400c0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x42054)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x1}]}}, 0x0, 0x2a}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRES32=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x52)

6.466314562s ago: executing program 6 (id=1992):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8)
r3 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r3, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac3(r3, &(0x7f0000000100)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="000e06"], 0x0}, 0x0)
syz_usb_control_io$uac3(r3, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x8, 0xfff7, 0x1, 0x3}, {0xa5, 0x0, 0xfff8, 0x7, 0x8001, 0x4}, 0xd860, 0x7c, 0x1c75}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x50c2c3d35d16a8e7}, @TCA_TBF_BURST={0x8, 0x6, 0x194b}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x240048e4}, 0x8000)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x130, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5146}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dcbb6b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x554}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ca7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68ae3b2a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61025317}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6dbe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30d}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe835}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79a41a96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x530c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c54277e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdfce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e23}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7da212cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e5c90b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53a3a692}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x78, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x998a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xac34c9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbdb2b52}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11bd3da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47e41a4f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x606581cd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1451}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x472cbd6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310ac586}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe84f816}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16f01dec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x476d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f53099c}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000015}, 0x4040848)
open_by_handle_at(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='\b'], 0x4f0280)
syz_emit_ethernet(0x4e, &(0x7f0000000b40)={@local, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0xfffc, 0x0, 0x0, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xb, 0x8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ssrr={0x89, 0x7, 0xd5, [@multicast1]}, @timestamp={0x44, 0x4, 0xdf}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="c19be2ea9f254d99c4311c30b92fd9e2ee91eea0db79ad91f53d3850b262462c827c47c322d069c0796798c009cc83738d6e4d42cbe50c39629e94981e82f7cbd3b40f31fdfa7b6994585e3c340ebf7dd7fcb2268932b1609606", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x0)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x7ff}, 0x3c)
rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x48)
rseq(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4, 0x8, 0xfffffffffffffffb}, 0x2}, 0x20, 0x0, 0x0)

6.328543603s ago: executing program 0 (id=1993):
r0 = syz_io_uring_setup(0x4b6, &(0x7f0000001700)={0x0, 0x20, 0x4000, 0x10, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000))
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1)
syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x13, 0x0, &(0x7f0000000100))
r4 = socket(0x23, 0x5, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
accept4$inet6(r4, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000180)={&(0x7f00000000c0)={&(0x7f0000000080)="4fb594522c57446c9fe77c3cbd46f91a68ad0b8126b7adee51dd1ac86c83a6b4904ec14d8057bf7dec9410488d7b7d00ad83f8561aaaeff40ad88891d05eb3f5", 0x40, 0x0, 0x0, 0x7}}, 0x1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000040))
r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001780)='f/\xa1\xc7\x18\x81\a\xdc\x91\x9ds\xda\xae\x8aW)O\x1b\x03\xc3\xf5&+\x02\xa7}\xbc\xd1Ki\x01\f\x01]\x0f\xe7\x82\x94\xdc\xb4\xc5\xb2\x99\t\x88\x89\xbd\x15\xc4\x16\x95\xfd\x81\xbc\xabiRw!@\x93\xfe\xaa\xc3G5=\x8c', 0x0, r6)
r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r9 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r8)
keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffe, r8, 0x0)

6.005098402s ago: executing program 5 (id=1994):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, 0x0, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=<r6=>0x0)
bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r6, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67)
sendmmsg$sock(r3, &(0x7f0000003b80)=[{{&(0x7f0000000300)=@nfc={0x27, r6, 0x7, 0x3}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="d99e32424e73f074a7a7d819e5b56a601c8ec2de551581e96848c2781b239b266afce6721142f21e5752e0070d5e6dab28b27de0a30aea4b7696ad5ead7f14f89d80ba647509e6a06306a5a363d07713a6dc02e749f5c1dfe4660eaeddf760d8475d98723b8437aa45", 0x69}], 0x1, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x854e}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xc5}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}], 0xd8}}, {{&(0x7f0000000640)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000002100)=[{&(0x7f00000006c0)="fed38d06ca25413486cb2071bd0f1d", 0xf}, {&(0x7f0000000700)="6f63950bd5789e396987c302dcf26eaef64786d747bdca66973b5cf930c9374daa85db48a942f7f56aa2dbdce84cf418227dd203c47bc805c8178a329609d20abc653c95c45b56f79286bc9a96f6d2a5eef705cac6a0dcaf693218c222d4719df586b0601ff953613b0aeabc4373dcecdbc49ae82bd872be19dfd97b493633e8f73830c4ce249648b20bd2a6ffdd952cd13b3514651060deb46c3bd0214ee044228351b63ab9549aaa184495134350fd404a979bb31854ba08faf2ae505cb06fb675ec3b6f8b6d7a70e17042df6c248aca9eb192f8254fd38b", 0xd9}, {&(0x7f0000001040)="a5fbababc58ed7206e9b03a87410aada2b156a227fa4e6bfb96261721e09346e4f2aa914faaf773305ce66689ce1942aba9c2a402a824fc30ec234cc22a790a63389697d548a5444eefd5f9e3fb8e364013186b745bb3c39a9148ccc1a4ba909e6e453251daff48ea66915566c9f02f5efd187804cb79217c3c9df4931397cb5d830549ae0ff873e0707a2b1c11d4cf0f598506fb4d6c0b26bfa95e4a0b398819d6aed691252bfd294da911227e51cc67f8d6fe6e44d2119f0513dd3a9541ac9cf707c6c764a91e6a338488de5fb6cd9d6e0be97908b55d70662a84f2152a4f921c37c6d86db96b93ba7260664d39abb83840afb2a46e64bc50d88916f4114627039f6af8e21d85666db9011d43cb417ce734b060c82e55f62bfb059f787903339d64a051117c27bbeba49c1b14f4bbeb3e1b8613999811d9833a630d14670a4d8b3557c1df015b2991217c6b6269cf5c44309ef520c490313b5d7f03ea21e7e172cabd28c3c494c377ca292963f8cffffb204c5e22ccd7d847fd979eb78757b93293a0e434e93848571c027d008813a7f3fc88ff6d92f507655b1288c0ac78ee8ea03f24b91be0ca7831d13b6a377144aa33204f345e8c9a59e96f64fbdaa771c7720f6a37fe417ec954035d9731abba57fdaae84386d6557402dcf3d451a662d381bc9814dcec8b4f33e6dea097d7c6cdfdd5b460124cced239e5e3729a2be51cc3616cdd146c3e1f1dec3c783a725c34eed63eb5e432737abfe13628a776e6c681d634aa2960000000000000007a887f4df45f8c0681e2b2e71bfaeecbfd62b2d5299d27b79ee4223fe44e1633f95f4ab3e8f0b7e95115e44d7a69dd69437f96cb71a992c375e6d36347cd6fd5c80df894bb407fa8b73f64c765209ca455b45f94fe55a0de669a7e3423abf6a4a4188aa6964919212a246b93ee3cf60aeb5c3e9bc1d1a4b1e1d4ed5f3f1e0706fc9c06ea148ae87ca67213450375f5fad5ef89dc84fb4e8d38e32baf5039651b29a49a4f76cae3596a7e1cbdf716f5629f3ecf91abaae0c76746cf9f2efed8a3510ff7da7cfa0410039c34ad7de20838a1be65a49f0ad05d4b9a67f36c54453ef224cc1b21b64efea36151ec48718e14d76963fbb63ae7c45e65f7f38e30fcf634e4e2bffaeee9f799d8c59b0214d958c5c6c046165208e7aa3c55235d59348a7435a36287ddfb8c73efbcab56e86f5c6afcfea5acdb1e3d4fcecee56ace252ee62aa4572c39d7f8c9a1d1e8f2403663195572a8f5dcbc9764a2d3f0d27a15488f83cfd5a887fdc2a7f9d4e1314812f0e22f4dd268755a745abb45e80f4096b5673f8cdd80f29634e32d325c63294ffee86f56b402d85f7d402e4c4c6e776eb3d3d10fc63ab7c8165570e0b33e17c0ccd46c383b33abb42ba1c19a1f3b079f090a932b4891194dd5decca1e217ff9b5191efa0270f2605e4ea7bde05e8e829897d5be195e3d3595cf79583d758582efcb0c996db7569b4807d6cc55539efb339df3f670ee409b1be19c278d4f76282a35918669f481fbbd672e90cac69b2aca12f800005fa767455a68c763b16cfe3607f80f914df64e257ca830d98d7df12d1a89febc4e462cf40a0ba7ea01b9365ac05bcbc8a9bc6633a93dfb1d1880be3e0fb98a376f871e34e7a2799effbb14602bb4268e962c03f8ca6da39b92f477c0c502cd336c3206eab8a3f08c041dcb9da24fe0b0e7723b60c1bc6808a29d2ff080ce1041204828106aca4e5a16d0b1bb4682365fe1bdb863ea0d3a5146f34cc64d55f02de844cdcde401d65784c21028a65392efd1a35cb2faacc2be1002ef687ed98c9b4b1e7a2bc66fdb0e17bded2ff68f7287691226082401344e410bd7358a14b090d9658c32f0e9a2acc7c2f4252689ed112a9c4d12904e95197c3c015e3a340e2e3994c3fbf72b7868a9e71eb5e6f95285390cad3bff01e7fd28f6c0ee5854b9c2adb1e6395c92c7f560a65f3fa4b0c9b920fcc271db6a8be0cd11889aa90f86cb77985ce0d03596ab3f65164a9b7bbdeb9d901698d7acf4ae749204bba386eb4f0c75e5cb37c537590918e93e7094ed28001e15dbe6a5914639e770ba004d95537484f1c8fbdfdaf834a6046186d7f89f9eec119e5a98095b82b7253ab4838091e76199e3e3875b4e65c7225be9413217b53deb1278995f564c8e2d669c9f206bfefb06abe5ced289f0a401ddef7445cdc9d0154e2daa33a2f58ea92b6c068bd632e6948b60330d6830bd18a47b4d9863cb95a7464e098a955c41b384ce593e7622be7aaaff5a6cb79876f11a7c34377e2199f311a3b40bd6f62b7fb58aa412b1c36ea27cb5573e5c82abe58cfaf2c1711848f9ed0f28e71b935cd9fc329a20b8fabc17a40d02f7db57f63bbe2b30787b4c7355c40e61005d466a302843d7c41d9304d671019f10a61b73c80bb3b21738465a9b6174689ec5d6fb4504c76e513b6e2c1220e68e8f93ff6f413016cb163e0fdab89a06f6fdf379f2e5131b100f6827bd20f940d4370917961850efda1216bdeb5963508723ee42dd87e75eb7759f49bb27a3b569266374182bd0b67c4f08dd3a5bc8674ed67426209481acffb56615f1e180187b054972a74af0aea3666d93ea497e999b84535b7c8465f96c7b80a898628c4724610f576c6959d861480f197e717557c1187dba87df70f309cf839c9bc5ba807fc32394e35a7645fd2c7cc4e977c77eeaa57f685ae06fa0ab839ad7a57ae9d6b2d5afdd888100851fab4b5447cea7f2a31b7317585575f33a5eb1100f6e4cef87c9a94565201721965cfe294040d572e89c399cdb62215f6d75c5ea2c93f7f33b5dff6b353aeab490287137319ded8a726f5da4880aeb3f9c968dd66cba89d09da23d598f3d808ed8fbacf93e56f8a53582ac9b1b52bcd6db2a1e8ca3b7912887e12c072c1bf87c4be075bd5f960e4847af5f4ae4d32b1e4bcfc38dce0357a842460a1a2a811b59a59f5452278f3c1922d7880198e2ff732e344ece2dce2d06f4e9ea1a7ed86da72c8330be93abdb26a77aad9e85d306f9f9cc470a20295743294a0821bc65cee439d79954b2eaf265b421b8b23d0fc67cd1d45e625875d7fb8b52d53d80fe5bbd390f4e2f7fecc808000000f0910c4f59c396cd0acef2cd025f5bb4e90972d1a92ab8804b04201201fa5ebfd5c51aabbc3448206dccbdf52db1441fe481685d1320df8e0ee31aa320db56f15b45326d84d548222d4fd5abf0814dc753df46361bb818e2002c30c8ebd0fbe8a78ab7815753f58eb0d0af5797b6db9e1f6327056fee13707927042bf9c74db7284d31e266cd874fa2d07f7d9dd8daafcf8c15e9f6348adf9e4569094da635bffdff3e9c2b680ec7127320d010502bee1e19e8d1da8645f23a28901eb429e22cc7a26636251ccbcdece63760444c0aeec6c9558a824801aa8166e991a5199d7129b63e11cd9a9fed8a3533036e6afe9460fd2dbe6ae33f6749acd70e7380dfad52c1e6f8c738b9b7e7920c34ed54719f9e5aebe5b1a2d3b04c7b43498f1bdd153bc87966db79ad551c11bea191c41ef2a32f3b60a8e8b00d09e4943bdfd331ad79c4f1080897bbb63389cdf055f68a3479dd45b78d30209d69fcf7c84f0bf4651fa8543970796a29f26f781f50b47a404dc7a1d918b3521fcff1a6223f34ef777a81858773e4b4fe9c0d1ff86657c7b9ed6237e6738e3fbf8040be09f00d367f38d97754868dc2614b58cf39a6efe38f4f3b7fcc7527140705686bc60593fcc70a70d5bfac04a4d195f1bab9a69556e959e29ae2820592892d83f580a7f4ac54d299f573d6510c8e7984bd92d3ec24b79baad197b66deef1141a724c2645f2ff2c42fca1ed9e310e9417d9dd025c6af92c2a2f8d244b69784a926d32db670210247260e4de7ee9ded176d28772da24ffd1a1965ea0b212020806032355b27dd02fb3f6b8317c4613667ebc90c732a96e2e7820ae4118e6eb361f52c1529d277bc5852c9f7b23fe2a6c5bcaf928aac0de6e927afe6429fab62d12817a1aae74500568725d0e60d3bfec8ce7d3d38454d3f9e2de98a85372c2e2b6b040d4bd4823fe1fd0bcbbbcb06d0f56ecae8b3dd48a5e7e10920d9e6fc28d7c21ba0aa1d88a1906bdd6206bb5c5d8b5bf037ce1311c2b317645aec0741ef99a1cb481f44d7e368ac501b00a543159ac01925882a47be0e783eca86031aad4e28e0b3809ab21b7d947fd00c434006535ea8298523411191513d62732906b3625368e07e589329c926054aaef19555e82f3b27fe555c8d97afce22ddf286b44ba0778a00f4c4db50fb264f83fa09c373b0a718e5347ddcd5d72609b70e490bf3d8c2f10a6e0fb301470e7e7fbcfcd7d42543f15c43cc6d5b16bde424ed34ba6b0a45a1405c0fba7e8f95677127e16c7ecb3133e38a1188040c91b45bf6edda481c8c7a70531ce98ebebe730630aa54bb0a706365ff1c10044d75decdc5a1a69061e3bba80a2f433b3b8810c78c76232069c716e85e22652bbe0d58a738a84b77fd7fe376b59ac9eb0b8ea2962be102b1992830b49ad3be16d703990efc9d47518b6f19f8f01dc55573c09796ac17d03a31c35fa1c98fb5d37a6bc2414cc3a69d0fbf01699193e82efd5c0dacc04255cf1dfdd245dcee2143774e35a3d7846d953029ba72c3a2862cfeed234396ea1f0024ddb64c4c7e7f787a769d1e731b4b7a98730b78153731fc9fe5fffcd7e79a8991b8f8c7aa00c2660a2953350731a60eb752fa618d461383596495c2c2ca4c1793716343904929d3e469a098914861ccb1009c5bc09d0cb77f9fa988cd2d45b60118ff950746046b89a2cff164f40c59d71faa35edab7472de45280eb07c67534ff47e57a5e1187adb11daa062ef574b480b620e3d5e78fc418ef365e3277119e52ab838c3f538e7d49613d9b25a0c7db596740546cab5bb12a2cf6415dd82b61c6412e7419605b65ea4a0800000000000000d6d3a7b2011a0dc727dadaa5ef28d477d248b64570f93483814eeafebf79a661d172db056cda3824edae72d2f3dae65b1e4ba71a10e5bb963366e442847f0d86e510e67ec13e85a72e06e896e9a12c2483ec926c8933a025928f38b59fde27227415ad3d9e86b54c844ca6d29d549ef515fce0aedb3518c3288598715fc9f1d8268086baa150a23edaa9264bc2273d9e5d0d99d72d3dd8946b7c1c9212e8902136da4ba474b79f8128cfe4cd8319dc87bee024af69b30c26a15436ae771a8e144da57605fa8104292f291cf6e128c7bfefc1fb552858df5eaea43cd6f8da65f9b0b55ad73e796579c4484170506ee28fc631166df0320e1608505bc7df4a9d81c1d1684c1414e7f6c26f4b5f559596ccabb8f9f96de2ef983ab25f9124c7270ce32bf455f529e45de6405f161752fcb1aa7fadbc73dc13c914b683e8eaa9cb85ea2028fd724cef3500f5e3e7e5a0b408a27e0b43b568fba90200000000000000be9d2a155b5ef37af296b595a77ebc4c7f43f7c274136a0f8afd937f259ff045214f25437eca074cfd96278873aca4569ced687e4249b974250b5eddf54958f41fb080b9a02c9cd761e9f6c42b2d771c9cd7e67105164cd3d29bea44b8f949839f93415de4fffc6952cdf9f828af30c34e51381343401b0db243b039c1f1328d7bf992c6cd215377ea8079983709695f4a2515a18fd8a6658f1488060ec26885eda0e95e9ad4858f021017d1fbde9182fb20e3effac63191fcf164c013d64cb6af81a088bd85d126f76d2970307773aa98", 0xff7}, {&(0x7f0000002040)="d23f8a22f80ce026f270b93c06162a096d9d09090a728fae49b1ebfaf9038184635c96971f2d44dc0c42c68adc49300d5dc330238397a02f793c5d648b75e29b0e90e275c9dc94740e4ddf8dbe5a48649cad3857befcd086590bfb0e91c96a35293a603bb2e1d8ab0781338a66826c2abdc7f1e87b0ea2487f226edbe1b21c0aec41", 0x82}], 0x4, &(0x7f0000002140)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x99, 0x1, 0x25, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0x60}}, {{&(0x7f00000021c0)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000003240)="9c07fe02de66ca5a53305550b59a914714119d6991729252dcbab90f", 0x1c}, {&(0x7f0000003280)="b65db2d5fc2457bb0bf96caac122b05d39d47e6f482ca95605d638b31993c9c7e0f45c113224cec5478c849c214d8bfe6daf84aa497b73f7f3865b8b656710c5349ef96e0442192db75d111841cbd1028475a3fc4733d29546dfa6dd5a9249e0d895a99b90c3cd5d673d46bad6b8d9461899e8b8d4ff81dbcbbd854dd3ba", 0x7e}, {&(0x7f0000003300)="01d5cd73f2e026429e5b0b2027cb80fad992eef85cf632cc42d652d8456dd986c99e901b8c5a2e68a65ab4b393e24212d2378fc9fa1fbd7942ae5899cb553360578de4b11b5cc832fe43b85787a0bff94c6963170152f30381709f5302c439b6fa5b2bf1b18dbe554010a3d34ad3602e768efb85a5d58cb91d9b0868555d71843b8c2a838e493bcbd06227f31c6feec185302e", 0x93}, {&(0x7f00000033c0)="70af72bb03be049954bb2e71c8bc366e8866466a7684b001b5b5d0e0bd06814bca675ea68ec4ef78b6decb1444ddb8ccfb9324f088f52a48732fc122b175e1d5837d9d8524116ca03332cf65d621b417e228106ba0dbf8125914b0d0b81c158fa98f90951d407b2866699db087c394a51c3cccb0749b27579ca557d07e6cc2296d83486ab3f7389869b9375b8ab88b860a7239eeaf420c194c9568", 0x9b}, {&(0x7f0000003480)="0eb980d964f4e2efc5805b0dd2698ed90647ff566b06a76d2ae2e11ffb8da428086384aaa797d225a67c1c49c4e54c4adde5720290108d3a60b03381c715dbb08f3585af4e5808b42b2549c355dc94a12b8816f631a5734d81f5d97b5401dfcb8d06be467d3d0aee7e459d9f9c2cf84b418381e17c27c65794cd12c578b94dcc06c4408c35298931c70a1d51bccee29b6c4ca61d98b4f7435f81c0caf0687dd5504a1fd74eddff8ee8a9fed1e1961ed5cd9de07ce9", 0xb5}, {&(0x7f0000003540)="c1cada07b13fae03cb0b1cb960c48433a4c0f24e71c102ddebdbd735132cb76bcb799515ee47f902368b98a2975716dbacec8c3a9ec5d4c085f0e1cb9461ab7ec93b1ddf5d34", 0x46}, {&(0x7f00000035c0)="21cdea191748428becf1e13e04d912836c21bd201ecb9bc80c98f5f58b3d8e5be113bcdcb8da616cd675e2f5c80197082fa62206b2b7faf12677f5dcb2dda8400fb2b4d9e3e8d3a83a36fc1f5731680bbd9e2b0a030b9c976d371bfae4a58ec0e90159a48a3f3ea2b456310938b3fb275638bd893594918e3e3eea090043fa9e358702511b7bc91bce84", 0x8a}], 0x8, &(0x7f0000003700)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x90}}, {{&(0x7f00000037c0)=@pppoe={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, 'syzkaller0\x00'}}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003840)="79fbe47254726223d74935355976c32f2ec88428b54236dca2f0a6e38157612a3325b1ce311fbd93204d41241f1b4e5c4f3bb696086e7f50b972181ffc6eed45335658d56d49de56b9f24155e500a2b2f721efa12cfbb1533e5e46c32e7636a57d4ed133771de06d505301b9097bcdb37334c3c076b2ef8db9", 0x79}, {&(0x7f00000038c0)="5ae0af51676b692f4b81eca38925f5ecf4d09f456d0c40218b970320edf2d11cf37a0a8489beabd6bf406c604bf7692183d451bfad60bb5eab01df545c5a3b0eab8802d0564b20df10381712df56dc7a4f4f4b22fb543a35de7468d8a58d28f94dea8e7174597f1088f036692ced9e417b4c5afe36e57a12ded2932c43644f619b7707b0fa5cb187f21fc87bff459a18f2dbfd", 0x93}, {&(0x7f0000003980)="01a8b2e1a78cac08103f53aa339112c935d0ced3dbebd3e64f28a44c47caa80975fcee086d9a92ae35ea22f0fde47b250853778558c7960033e2fa04202cf3372264f226aa", 0x45}, {&(0x7f0000003a00)="970248337164b4d40ccb79620fde0aa92abf5944647e9e7f845dcc1ab538832bffee45431a938834bab4a14147503938742cb03a3de3f425f68bfd369b03eccbb1e1ded60ea41f8090ac4249b721eb88badeb5e87095c2171a8de97c1c253bad643f9665c919c04468ea05ce07920c564b6286a064b5aeff8b3092c511fbfbb3fe16b14b6ea253645ff7d30a7f6ce44225953168e57316031a6812e194c0a86b8f5397ac5592b1310cd04b9b5cc8c1d5f38e9f868007f4f4fae60ef471e4f6c961689dfffba16ec69fc6c2327e8089810c3879e78aebe59a3b2fd5928c7b081f87202da0a362b6b4280112dd42", 0xed}], 0x4, &(0x7f0000003b40)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffa95}}], 0x30}}], 0x4, 0x4)
unshare(0x8040480)
io_setup(0x6, &(0x7f0000003b80)=<r7=>0x0)
io_submit(r7, 0x2, &(0x7f0000000280)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x28, 0x800}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x3}])
write$ublk_bdev(0xffffffffffffffff, &(0x7f0000000800)="22209200c25158719a9d80713a4dfb63d5dc8c54f62e2096e1808806c60f21bda8f39cf680314be954eb8dede3944b91abcae96c793c666dba63183c4e8304de9df45bc13dfde9a64235f1cc20172fd7b27f699a21f09ff3e75191dcaf9485eb8ed62a6c5fb65e18103bed6f32c2d9daa97f42e0b8118c1328e86b03f26d90b8d12bf0b923fce39e16a256d75215d40b1e2607513ad243b0b7e821f7f6a8fb7e3b2b0b240eb17a5a230759fe4464abc31f0bfbb969a760026d879ed94730c706d3a60a", 0xc3)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/169, 0xa9, 0x2, 0x24}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

5.967474285s ago: executing program 1 (id=1995):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10)

5.719064849s ago: executing program 5 (id=1996):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff76b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.527760158s ago: executing program 5 (id=1997):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
socket(0x40000000015, 0x5, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, 0x0})
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x0, 0x9}, 0x28)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa4000000", @ANYRES32=r8], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94)
ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000f00)={{0x80000000, 0x0, 0x3a6c5abe2e6686bc, [0x8, 0x16]}, {0x80000000, 0x0, 0x2, [0x0, 0x8]}, 0x2, [0x100, 0x3]})

5.053661053s ago: executing program 2 (id=1998):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) (fail_nth: 2)

4.512881457s ago: executing program 2 (id=1999):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0xc9a}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfff}, {0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8090}, 0x40050)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x2)
ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
readv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/230, 0xe6}], 0x1)
write$ppp(r4, &(0x7f0000000380)='\nr', 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fe\xdc\x8b\x18rBl{\x82=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00', 0x0)
select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000100)={0x7fffffffffffffff})
close_range(r0, 0xffffffffffffffff, 0x0)

4.512211121s ago: executing program 5 (id=2000):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

4.406565603s ago: executing program 0 (id=2001):
syz_emit_ethernet(0x62, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x2c, 0x11, 0x0, @private1, @mcast2, {[], {0x4, 0xe22, 0x2c, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}, "7332e94143f7f31441bdcd491414ae38d7cd90b3d173b19dcef42633"}}}}}}}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0)
connect$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4)
sendmsg$inet(r0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x20}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000000)={'bridge0\x00', @broadcast})
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r3 = gettid()
r4 = syz_open_procfs(r3, &(0x7f00000001c0)='timerslack_ns\x00')
write$binfmt_format(r4, &(0x7f0000000180)='0\x00', 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x28d00, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setrlimit(0xf, &(0x7f00000001c0)={0x5, 0x3})
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6)
sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000640)={0x0, 0x2f, &(0x7f0000000600)={&(0x7f0000000100)={0x14, r7, 0x30b, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20020810)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, r6)

3.318511507s ago: executing program 0 (id=2002):
r0 = getpid()
socket$nl_rdma(0x10, 0x3, 0x14)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20048880}, 0x400c0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x42054)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x1}]}}, 0x0, 0x2a}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRES32=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x52)

2.705467771s ago: executing program 1 (id=2003):
syz_open_dev$dri(&(0x7f0000000440), 0x3fd, 0x8a40)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000000001050500000000000000000a000000100002800c000280050001000000000078c2331d4138cd320d0d042dd46f7ad6275753074669bc32e413d4daa2bce4fc0ab8c27eebf437ec73af366d1246bebd58d1bb17c6554c22bed9227eb49fc06abdb0205456a958af05135b760dbc9d82d54f580aeda960d5de3a4d5195bacf88bcc3ddb722628bded7ae9917b5d5d574af3195792e2587454d0ea48fa442e801b3b02c32d2a314b9bc7d6b9cc2a6499ec0f145a6cc903eff44a84ee9ba0c85249323d1a3566d6bff1e71b1ef55f6d64fc1f181fc62bff6cb656ec2549467f599e6c2ebe7316180f1a9b9d0072d9f0000000000"], 0x24}}, 0x0) (async)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) (async)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) (async)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x321}}}, 0x108)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async)
getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765", @ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r5, @ANYBLOB="57a5e14ee285c99ac85c4b8a36bffb1383d96ae980180dc5b55a0b86a453405987c3c1e583542f7cbd6f10136c92d9d7c073cbdc46541a6714b3f10dd2a8fd1487761b31b3c92476ab8404000000ce85833c458260d05d31e1cae81d028141f1cc0b3f1ead2ceafd861d421692b90aa549d9c6e4f17b2c24093a3dc9e596bd7102a2f9f2cd3fd7ba98b380036f233f9b9e2bc5ac436f0c4bacbfd6c451935958086af4ed31ecd474b116866dcaa8d2503e6e19cb20ef514ef7684e82000000000000000000"], 0x3c}}, 0x8000) (async)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async, rerun: 64)
r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') (rerun: 64)
preadv(r7, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x111, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x1, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)

2.697251875s ago: executing program 2 (id=2004):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1)
close(0x3)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="22003300d0000800ffffffffffff080211000000ffffffffffff0040040400030ef90000"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r2, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r9, 0x3)
recvmsg(0xffffffffffffffff, 0x0, 0x40002182)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0xa, 0x4, 0x8000000, 0xdffffffa]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.195121601s ago: executing program 0 (id=2005):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc090}, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}}, 0x24}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x4, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0xf, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x7}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x7, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x2}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0xd, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x1, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x1, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0xd, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0xe628, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0x1ff, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x8, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x8, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x4, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0x7fff, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x7}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x7}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0xcc, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b8}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x4, 0x1, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x2a8b7572, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x801, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x3, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {0x0, 0x59165a6abcf115dd}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 7)

2.028801147s ago: executing program 6 (id=2006):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, 0x0, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=<r6=>0x0)
bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r6, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67)
sendmmsg$sock(r3, &(0x7f0000003b80)=[{{&(0x7f0000000300)=@nfc={0x27, r6, 0x7, 0x3}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="d99e32424e73f074a7a7d819e5b56a601c8ec2de551581e96848c2781b239b266afce6721142f21e5752e0070d5e6dab28b27de0a30aea4b7696ad5ead7f14f89d80ba647509e6a06306a5a363d07713a6dc02e749f5c1dfe4660eaeddf760d8475d98723b8437aa45", 0x69}], 0x1, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x854e}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xc5}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}], 0xd8}}, {{&(0x7f0000000640)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000002100)=[{&(0x7f00000006c0)="fed38d06ca25413486cb2071bd0f1d", 0xf}, {&(0x7f0000000700)="6f63950bd5789e396987c302dcf26eaef64786d747bdca66973b5cf930c9374daa85db48a942f7f56aa2dbdce84cf418227dd203c47bc805c8178a329609d20abc653c95c45b56f79286bc9a96f6d2a5eef705cac6a0dcaf693218c222d4719df586b0601ff953613b0aeabc4373dcecdbc49ae82bd872be19dfd97b493633e8f73830c4ce249648b20bd2a6ffdd952cd13b3514651060deb46c3bd0214ee044228351b63ab9549aaa184495134350fd404a979bb31854ba08faf2ae505cb06fb675ec3b6f8b6d7a70e17042df6c248aca9eb192f8254fd38b", 0xd9}, {&(0x7f0000001040)="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", 0xff7}, {&(0x7f0000002040)="d23f8a22f80ce026f270b93c06162a096d9d09090a728fae49b1ebfaf9038184635c96971f2d44dc0c42c68adc49300d5dc330238397a02f793c5d648b75e29b0e90e275c9dc94740e4ddf8dbe5a48649cad3857befcd086590bfb0e91c96a35293a603bb2e1d8ab0781338a66826c2abdc7f1e87b0ea2487f226edbe1b21c0aec41", 0x82}], 0x4, &(0x7f0000002140)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x99, 0x1, 0x25, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0x60}}, {{&(0x7f00000021c0)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000003240)="9c07fe02de66ca5a53305550b59a914714119d6991729252dcbab90f", 0x1c}, {&(0x7f0000003280)="b65db2d5fc2457bb0bf96caac122b05d39d47e6f482ca95605d638b31993c9c7e0f45c113224cec5478c849c214d8bfe6daf84aa497b73f7f3865b8b656710c5349ef96e0442192db75d111841cbd1028475a3fc4733d29546dfa6dd5a9249e0d895a99b90c3cd5d673d46bad6b8d9461899e8b8d4ff81dbcbbd854dd3ba", 0x7e}, {&(0x7f0000003300)="01d5cd73f2e026429e5b0b2027cb80fad992eef85cf632cc42d652d8456dd986c99e901b8c5a2e68a65ab4b393e24212d2378fc9fa1fbd7942ae5899cb553360578de4b11b5cc832fe43b85787a0bff94c6963170152f30381709f5302c439b6fa5b2bf1b18dbe554010a3d34ad3602e768efb85a5d58cb91d9b0868555d71843b8c2a838e493bcbd06227f31c6feec185302e", 0x93}, {&(0x7f00000033c0)="70af72bb03be049954bb2e71c8bc366e8866466a7684b001b5b5d0e0bd06814bca675ea68ec4ef78b6decb1444ddb8ccfb9324f088f52a48732fc122b175e1d5837d9d8524116ca03332cf65d621b417e228106ba0dbf8125914b0d0b81c158fa98f90951d407b2866699db087c394a51c3cccb0749b27579ca557d07e6cc2296d83486ab3f7389869b9375b8ab88b860a7239eeaf420c194c9568", 0x9b}, {&(0x7f0000003480)="0eb980d964f4e2efc5805b0dd2698ed90647ff566b06a76d2ae2e11ffb8da428086384aaa797d225a67c1c49c4e54c4adde5720290108d3a60b03381c715dbb08f3585af4e5808b42b2549c355dc94a12b8816f631a5734d81f5d97b5401dfcb8d06be467d3d0aee7e459d9f9c2cf84b418381e17c27c65794cd12c578b94dcc06c4408c35298931c70a1d51bccee29b6c4ca61d98b4f7435f81c0caf0687dd5504a1fd74eddff8ee8a9fed1e1961ed5cd9de07ce9", 0xb5}, {&(0x7f0000003540)="c1cada07b13fae03cb0b1cb960c48433a4c0f24e71c102ddebdbd735132cb76bcb799515ee47f902368b98a2975716dbacec8c3a9ec5d4c085f0e1cb9461ab7ec93b1ddf5d34", 0x46}, {&(0x7f00000035c0)="21cdea191748428becf1e13e04d912836c21bd201ecb9bc80c98f5f58b3d8e5be113bcdcb8da616cd675e2f5c80197082fa62206b2b7faf12677f5dcb2dda8400fb2b4d9e3e8d3a83a36fc1f5731680bbd9e2b0a030b9c976d371bfae4a58ec0e90159a48a3f3ea2b456310938b3fb275638bd893594918e3e3eea090043fa9e358702511b7bc91bce84", 0x8a}], 0x8, &(0x7f0000003700)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x90}}, {{&(0x7f00000037c0)=@pppoe={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, 'syzkaller0\x00'}}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003840)="79fbe47254726223d74935355976c32f2ec88428b54236dca2f0a6e38157612a3325b1ce311fbd93204d41241f1b4e5c4f3bb696086e7f50b972181ffc6eed45335658d56d49de56b9f24155e500a2b2f721efa12cfbb1533e5e46c32e7636a57d4ed133771de06d505301b9097bcdb37334c3c076b2ef8db9", 0x79}, {&(0x7f00000038c0)="5ae0af51676b692f4b81eca38925f5ecf4d09f456d0c40218b970320edf2d11cf37a0a8489beabd6bf406c604bf7692183d451bfad60bb5eab01df545c5a3b0eab8802d0564b20df10381712df56dc7a4f4f4b22fb543a35de7468d8a58d28f94dea8e7174597f1088f036692ced9e417b4c5afe36e57a12ded2932c43644f619b7707b0fa5cb187f21fc87bff459a18f2dbfd", 0x93}, {&(0x7f0000003980)="01a8b2e1a78cac08103f53aa339112c935d0ced3dbebd3e64f28a44c47caa80975fcee086d9a92ae35ea22f0fde47b250853778558c7960033e2fa04202cf3372264f226aa", 0x45}, {&(0x7f0000003a00)="970248337164b4d40ccb79620fde0aa92abf5944647e9e7f845dcc1ab538832bffee45431a938834bab4a14147503938742cb03a3de3f425f68bfd369b03eccbb1e1ded60ea41f8090ac4249b721eb88badeb5e87095c2171a8de97c1c253bad643f9665c919c04468ea05ce07920c564b6286a064b5aeff8b3092c511fbfbb3fe16b14b6ea253645ff7d30a7f6ce44225953168e57316031a6812e194c0a86b8f5397ac5592b1310cd04b9b5cc8c1d5f38e9f868007f4f4fae60ef471e4f6c961689dfffba16ec69fc6c2327e8089810c3879e78aebe59a3b2fd5928c7b081f87202da0a362b6b4280112dd42", 0xed}], 0x4, &(0x7f0000003b40)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffa95}}], 0x30}}], 0x4, 0x4)
unshare(0x8040480)
io_setup(0x6, &(0x7f0000003b80)=<r7=>0x0)
io_submit(r7, 0x2, &(0x7f0000000280)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x28, 0x800}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x3}])
write$ublk_bdev(0xffffffffffffffff, &(0x7f0000000800)="22209200c25158719a9d80713a4dfb63d5dc8c54f62e2096e1808806c60f21bda8f39cf680314be954eb8dede3944b91abcae96c793c666dba63183c4e8304de9df45bc13dfde9a64235f1cc20172fd7b27f699a21f09ff3e75191dcaf9485eb8ed62a6c5fb65e18103bed6f32c2d9daa97f42e0b8118c1328e86b03f26d90b8d12bf0b923fce39e16a256d75215d40b1e2607513ad243b0b7e821f7f6a8fb7e3b2b0b240eb17a5a230759fe4464abc31f0bfbb969a760026d879ed94730c706d3a60a", 0xc3)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/169, 0xa9, 0x2, 0x24}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

1.984438879s ago: executing program 2 (id=2007):
r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2, 0xfffff000}, 0x20)

1.965432715s ago: executing program 1 (id=2008):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x11, 0x3, 0x0)
setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b435", 0xc}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0", 0x22}], 0x2}, 0x44000)
socket(0x400000000010, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
personality(0xfe47fef9f5ff7379)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x1d719000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b909000000dbe9abb723517955", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.378027959s ago: executing program 2 (id=2009):
r0 = socket(0x2, 0xa, 0x300)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={<r1=>0x0, @in6={{0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x10, 0x8, 0x1, 0x1, 0x20, 0x3, 0x3}, &(0x7f0000000ac0)=0x9c)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x0, 0x1, 0x2, 0x401, 0xfe226735, 0xbfff, 0xe9, r3}, 0x20)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000b00)={<r4=>0x0, 0x48, "8cebcd1c79dcdd0b07280926ef3ca6aa688eb082d22b5b729a6fdc256d2f175e131a5d550126ab39fabbc5d7b4992e93923a9e2098c1243f22b60063b2a37adc39151cb0b929aa01"}, &(0x7f0000000b80)=0x50)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000bc0)={<r5=>0x0, 0xb3, "0b08c3a585f830982297d402ff1fe7a31e9bdec0d8a00740de7dd287c13d4f1786221c3c8f07b86b06b2adb78c4d89191b15c26c0159c457ba62e20fe15ad2d0939b1c3c25a0b697c328a310ad7404122806a8560736f1b202afaaf226e48fd1a7b4873350fe5135c5c12d2cf8a873c9d38e0da43f6199e16a4ce6f9af24363b4578beaa7ab57038de2e3077df2f7a473314c374f8fe92e3ce7b3cd7b45d93d48398dd637f17e1c3024a508e221dfdbe7d7bf9"}, &(0x7f0000000c80)=0xbb)
sendmsg$inet_sctp(r0, &(0x7f0000000e00)={&(0x7f0000000200)=@in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000300)="aef244e4fcbb410f2c11da39dc4f8f168ade058c6278ab8f04b60024cf302201c327485608f2e4f61332013a98e0b1acd0dd952fb271ba6f87e9a1c27e3d865491ccef0b570b83cacae8b8e76f685a474210fa04cdf66b1db10daf7da115da7b763c2c60c2074a3f3b6aa087f67e907b56cb7d6037e57386a2efbbe74ddc8402234d3558e69c3be67112638cf341caf5fad3e6566b064a3b3ac7fd2d92cb821b0ab9f0e5ba33b08e52e16c67227f0500467c66e864c2f5a63ab461a3baa638d586d1af7d90e7506033ca6b18d4f56e57b17b4d7c6376fb3db3af", 0xda}, {&(0x7f0000000480)="530c95131b9de4655b8ec4265250b5a7c3b38c0e04d3dd328109df7fb2b6ebd701347e5206849ff39a5646dbae82d15f821dd482ee904f95ecd1ab05ff0d83e043194002a09207da0058066c7866f6f5a8fee93b049866ff15be44b20ac2276ce7100557d840a459556d3b2a93fff10322bf1a18c44440e11fb8aceb65f211f7f689597ae72139ee3c7b8340df338105f4d77cf285e48fe892e1e5dd7365a66c431e6174f1fc7e35f80af72dc23d7a5d742f4bfd3503a2c742a70ea3803af300def905d81f627a74", 0xc8}, {&(0x7f0000000580)="aded0c99091c17a7491f738c2b2542e5ce6d88047828d9a5903913a87bec52b0f0f538cce9ebca46950a9b0cadd1cca5758e790340598940b23dd5b6b0c5f01c777956add891792db8f93f6a894b49669daaa4f8a34068dcb5ff07808910b1ecd219bbe39597c700d23cabe54a108e8b9bcae8fdf15555bf993c64c5a50bd678f2899b07ac049d183e430f6f446284513110e5de04e80ad278f7d709c10ddaefab688186fd56eb083d4a00cff36bfb2359176b0f855dfd6e0d5ca940fc222fe4bec59fce", 0xc4}, {&(0x7f0000000680)="1338807483b199cc7f394103", 0xc}, {&(0x7f00000006c0)="f59ba43adced82cd89f518deaefd861defef3e0a21aeeff06892e1ce85bcb8e4c9c117ed415bad", 0x27}, {&(0x7f0000000780)="f65c68a95c5b253c16d3242f70df9132d15c6baeafe4978de3757f369376647d506ff47f8209a330710d994b8eee72f49facdc86a96eeeee94cb6282a9e8b83eb8d91a6c440b4e8414999440bcfa002ae374a7e8785aac83e6a8dff99d3ada9b480a11c778a840af591ce76b437eb7eca0", 0x71}, {&(0x7f0000000800)="89cd6c4ed281ba3ccc9a70c15506e2bcf35fad073be7b8c73ca0498a28d2c1645bb999b034db2775cbd327aaa482c68ca2b87519d64cd50a8bcbec59a16253598832d53d0ec1eaf46a4ab2d7d2dce8cb92a3327f5d9eac3f2dcdcd34e3cc4880127ac70eb4ca874e830aa038f7a038f8abb011309f", 0x75}, {&(0x7f0000000880)="0340113c00db051ae5972247c77eae7b045d2c9326e1bf88de77ffe1855c2d237a66f7f8d7e96d609fe5b4a024370c136beb63d21204dd70a287618a13c80568c8755c41f1b51560c2a16a18216d8bcf4498e69fb7dd2639fad9b9ec23986e29c450f75cbef2cc1a4a3e1027a3761408b43ebfad18ef0db0048f01f6a35a340a1ee01fa909d10e8aef524ed0e86dc46357952ea7e1d901a761541402586e8d670d9940e64fce0923157c9f6044109e698c2cbcc0037e7f99f5d4e652aa7346b0c0143ac555497a69cc0a952a18decc5e1a3cb8bf735c45e9f04f32a7", 0xdc}], 0x8, &(0x7f0000000cc0)=[@authinfo={0x18}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8208, 0x3, 0x7, r1}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x80}}, @dstaddrv6={0x20, 0x84, 0x8, @private1}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x9, 0x8, 0x6, 0xfffffffa, 0x9, 0x9, 0xfcc8, r3}}, @sndinfo={0x20, 0x84, 0x2, {0xa76, 0x8203, 0x9, 0x5, r4}}, @prinfo={0x18, 0x84, 0x5, {0x30}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x1, 0x200, 0x6, 0x2, 0x1000, 0x3, 0x1, r5}}], 0x108, 0x20000800}, 0x24008084)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002800000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0)
getdents64(r8, &(0x7f0000000fc0)=""/224, 0x18)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getsadinfo={0x14, 0x23, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20008814)
connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4c, &(0x7f0000000080)={@random="a70b49c5294f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "00000000ffff"}}}}}}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r10 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="180000005a000d03"], 0x18}], 0x1}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051)
r11 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0x279})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r11, 0x2217, 0x7721, 0x16, 0x0, 0x0)

1.21207915s ago: executing program 6 (id=2010):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xffff, 0x0, 0xfffc, 0x0, 0x0, 0x80, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0xfff8000000000000, 0x0, 0x200000000, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x70bd25, 0x0, 0xa, 0x2, 0x40, 0x70}, [@algo_aead={0x4c, 0x12, {{'morus1280-sse2\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x800)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

1.014209037s ago: executing program 0 (id=2011):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000005280)={0xe, @pix={0x3, 0x9, 0x20385655, 0x3, 0x7, 0xffffff74, 0xc, 0x1, 0x0, 0x1, 0x2, 0x5}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=<r3=>0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
prlimit64(r3, 0xd, &(0x7f0000000280)={0x100000000, 0xf}, &(0x7f00000003c0))
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0)
r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_REGISTER(r5, 0x0, 0x0)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="30040000ec03100026bd7000fcdbdf25020000000200000025000000cfc2000072060000faffffffff0700000100000005000000040000000200000004000000020000000c000000020000000200000005000000ad0f0000c00000000002000001fcffff0600000008000000000000000d00000000000000a60000001000000009000000a248000000010000070000000500000000000000f7ffff9eab2e2fc81c987c0001000000d00b0000ffffffff180000000f00000006000000060000000000000001000000018000005a39e96103000000020000008f0000000700000005000000028c250008000000ff7f0000000000000500000004000000020000000004000009000000fdffffff08000000000000801e430000ff01000002000000ffff000000080000060f000000000000a9020000ffffff7f030000000100000000080000f6ce000009000000090000000101000000000080000000000200000008000000040000000100000002000000a703000000080000de000000ffff00000180000080070000f0000000000100000400000001070000080000000800000005000000d00d00007f000000ffffffff07000000e800000008000000000000000800000000000000060000000e00000005000000060000000000000036350000010000005106000000800000d90f000004000000020000000900000001000000090000000000000000000000050000400bbae25f354c52b1c93435d7880000010000ff0300000100000001000000ff03000003000000fffffffff7ffffffffffffff0500000001010000400000008800000000010000ebe70000cf020000090000000200000000000000aa040000010000000100000000010000050000000b000000ca03000003000000080000000000008002000000010000000900000007000000c308000009000000040000000700000002000000fdffffff04000000050000000800000005000000810000000000000008000000ff0f0000070000007d050000020000000700000006000000921b00000200000000040000020000009b0000000d0000000100001004000000010400006a090000f8ffffff05000000010000000700000006000000090000001000000012010000400000001000000086ee112609000000ffff0000010000000900000006000000810000000300000007000000080000000500000009000000f8ffffffff070000030000000800000028080000040000000b000000010000008b04000080000000090000008d0d0000ff0700002158000009000000ff0000000100000009000000030000008b08000000000000000100000400000004000000b20b000000001b0001000000050000000200000005000000000020009121cf2709000000010000000100000004000000ff000000ff0100000400000005000000ff010000da4900009b000000090000002f0000000800000001800000100000002321002f6465762f75736572696f00007811b43a4457e0f11c0482eea9169a8e3b75"], 0x430}, 0x1, 0x0, 0x0, 0x840}, 0x14)
pselect6(0x40, &(0x7f0000000440)={0x6, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x83f, 0x9, 0xfffffffffffffffd, 0x100000000000a, 0x80000006, 0x3fc}, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r8, 0x400455cb, 0x4000000)
bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000280), &(0x7f00000002c0)=0x8)

737.219905ms ago: executing program 2 (id=2012):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
socket$rxrpc(0x21, 0x2, 0x2)
r0 = inotify_init()
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000540)='\x00')
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r1 = userfaultfd(0x80000)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x145})
prlimit64(0x0, 0x4, &(0x7f0000000340)={0xfffffffffffffffe, 0x9}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x80000001}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4"], 0x310)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2d, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0xc3a6}}, {{0xa, 0xfffe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1)
ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000140)={0x10000, 0x3ff, 0x8, 0x6})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x10, 0xdc, 0x8, 0x63, @mcast1, @empty, 0x747, 0x10, 0x9a4}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

543.390106ms ago: executing program 5 (id=2013):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1203, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0xa, 0x7, 0x800004, 0xffdffff3, 0x7a2a}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000500))
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x11, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10003, 0x4, 0x7, 0xb}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4004010)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0})

69.504004ms ago: executing program 5 (id=2014):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e05411, &(0x7f0000000300))
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902)
ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000400))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000100)={<r6=>0xffffffffffffffff}, 0x800)
r7 = timerfd_create(0x0, 0x0)
timerfd_settime(r7, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x8, 0x5, 0x413, 0x69, 0x2, 0x6, 0x3, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x6})
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x800)
ioctl$PPPIOCSFLAGS1(r8, 0x4004743a, &(0x7f0000000300))
syz_usb_connect$cdc_ecm(0x5, 0x55, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x1, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x70, {{0x5}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x64, 0x2, 0x3f}, [@mdlm_detail={0x4, 0x24, 0x13, 0x77}, @mdlm_detail={0x4, 0x24, 0x13, 0x96}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xf8, 0x3a, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xfc, 0x8, 0x5}}}}}]}}]}}, 0x0)

0s ago: executing program 0 (id=2015):
r0 = getpid()
socket$nl_rdma(0x10, 0x3, 0x14)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x84}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20048880}, 0x400c0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x42054)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x1}]}}, 0x0, 0x2a}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRES32=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x52)

kernel console output (not intermixed with test programs):

] pim6reg: entered allmulticast mode
[  582.410634][T11303] team0: entered allmulticast mode
[  582.410661][T11303] team_slave_0: entered allmulticast mode
[  582.410674][T11303] team_slave_1: entered allmulticast mode
[  583.117153][T11315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=11315 comm=syz.1.1381
[  583.213820][T11321] PKCS7: Unknown OID: [4] 0.0.9.0(bad)
[  583.279189][T11321] PKCS7: Only support pkcs7_signedData type
[  583.605469][ T5619] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  583.800101][ T5619] usb 4-1: config 8 has an invalid interface number: 223 but max is 0
[  583.800135][ T5619] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  583.800194][ T5619] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  583.800265][ T5619] usb 4-1: config 8 has no interface number 0
[  583.800358][ T5619] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[  583.800418][ T5619] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  583.943297][ T5619] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  583.943359][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.943423][ T5619] usb 4-1: Product: syz
[  583.943488][ T5619] usb 4-1: Manufacturer: syz
[  583.943506][ T5619] usb 4-1: SerialNumber: syz
[  585.129620][ T5620] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  585.300589][ T5620] usb 3-1: config 247 has an invalid interface number: 53 but max is 0
[  585.300623][ T5620] usb 3-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config
[  585.300646][ T5620] usb 3-1: config 247 has no interface number 0
[  585.300688][ T5620] usb 3-1: config 247 interface 53 altsetting 6 endpoint 0x4 has invalid maxpacket 42051, setting to 64
[  585.300739][ T5620] usb 3-1: config 247 interface 53 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  585.300762][ T5620] usb 3-1: config 247 interface 53 has no altsetting 0
[  585.314249][ T5620] usb 3-1: New USB device found, idVendor=07aa, idProduct=0041, bcdDevice=1e.19
[  585.314281][ T5620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.314303][ T5620] usb 3-1: Product: syz
[  585.314319][ T5620] usb 3-1: Manufacturer: syz
[  585.314334][ T5620] usb 3-1: SerialNumber: syz
[  585.326976][   T29] audit: type=1400 audit(1783780270.529:880): avc:  denied  { getopt } for  pid=11334 comm="syz.1.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  585.388519][T11335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1389'.
[  585.462002][T11335] ip6gre1: entered promiscuous mode
[  585.462028][T11335] ip6gre1: entered allmulticast mode
[  585.812355][T11339] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1390'.
[  586.916861][T11353] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1395'.
[  587.207965][ T5619] usb 4-1: USB disconnect, device number 40
[  587.789128][ T5620] usb 3-1: USB disconnect, device number 41
[  588.116277][ T9936] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  588.277077][ T9936] usb 2-1: Using ep0 maxpacket: 32
[  588.291785][ T9936] usb 2-1: unable to get BOS descriptor or descriptor too short
[  588.316495][ T9936] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  588.334362][ T9936] usb 2-1: config 1 interface 0 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  588.350042][ T9936] usb 2-1: config 1 interface 0 has no altsetting 0
[  588.390953][ T9936] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  588.407848][ T9936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.420511][ T9936] usb 2-1: Product: syz
[  588.426507][ T9936] usb 2-1: Manufacturer: syz
[  588.437700][ T9936] usb 2-1: SerialNumber: syz
[  588.701786][ T9936] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  588.756256][ T9936] usb 2-1: USB disconnect, device number 39
[  591.790501][T11400] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  591.800020][T11400] overlayfs: failed to set xattr on upper
[  591.808647][T11400] overlayfs: ...falling back to redirect_dir=nofollow.
[  591.816348][T11400] overlayfs: ...falling back to index=off.
[  591.822821][T11400] overlayfs: ...falling back to uuid=null.
[  591.875691][T11397] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  591.924138][   T29] audit: type=1326 audit(1783780277.119:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.2.1408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ab539de59 code=0x0
[  592.253130][T11403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=125 sclass=netlink_route_socket pid=11403 comm=syz.1.1409
[  592.771423][T11417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29061 sclass=netlink_route_socket pid=11417 comm=syz.0.1413
[  595.745186][T10460] usb 1-1: new low-speed USB device number 36 using dummy_hcd
[  596.002574][T10460] usb 1-1: unable to get BOS descriptor or descriptor too short
[  596.050567][T11416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1411'.
[  596.074222][T10460] usb 1-1: config 1 has an invalid interface number: 28 but max is 1
[  596.225550][T10460] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  596.385759][T10460] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  596.468074][T10460] usb 1-1: config 1 has no interface number 2
[  596.522551][T10460] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  596.579716][T10460] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  596.616853][T10460] usb 1-1: config 1 interface 28 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  596.668233][T10460] usb 1-1: config 1 interface 28 has no altsetting 0
[  596.944908][T10460] usb 1-1: string descriptor 0 read error: -22
[  596.962375][T10460] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  596.986903][T10460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.024080][T10460] usb 1-1: selecting invalid altsetting 1
[  597.257712][   T29] audit: type=1400 audit(1783780282.449:882): avc:  denied  { accept } for  pid=11450 comm="syz.3.1422" lport=50441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  597.574296][T11451] NILFS (nullb0): couldn't find nilfs on the device
[  597.887163][T11439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.906745][T11439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.969111][T10460] cdc_ncm 1-1:1.0: bind() failure
[  598.070982][T10460] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  598.106591][T10460] cdc_ncm 1-1:1.1: bind() failure
[  598.175819][T10460] cdc_mbim 1-1:1.28: probe with driver cdc_mbim failed with error -71
[  598.367539][T10460] usb 1-1: USB disconnect, device number 36
[  599.022449][T11465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29061 sclass=netlink_route_socket pid=11465 comm=syz.1.1424
[  606.478644][T11472] lo speed is unknown, defaulting to 1000
[  607.893854][T11511] mmap: syz.3.1436 (11511): VmData 26624000 exceed data ulimit 128. Update limits or use boot option ignore_rlimit_data.
[  608.303284][T11512] fuse: Unknown parameter '0x0000000000000004[‹XÐZÄB�šoñ»Ø¾)c4äáóë"£›1ë0"Àֲä�^ââr'
[  609.974129][T11538] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1442'.
[  610.144696][ T5618] Bluetooth: hci1: unexpected event for opcode 0x1009
[  610.148798][T11543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  610.267491][T11543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  610.730583][   T29] audit: type=1400 audit(1783780295.929:883): avc:  denied  { map } for  pid=11548 comm="syz.0.1446" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  613.841812][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'.
[  613.934696][T11594] macsec2: entered promiscuous mode
[  613.940615][T11594] bridge0: entered promiscuous mode
[  615.005151][T10460] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  615.195266][T10460] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  615.207484][T10460] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  615.240779][T10460] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  615.250837][T10460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.260538][T10460] usb 1-1: Product: syz
[  615.269909][T10460] usb 1-1: Manufacturer: syz
[  615.274649][T10460] usb 1-1: SerialNumber: syz
[  616.730445][T11605] overlayfs: failed to resolve './file1': -2
[  616.836815][   T29] audit: type=1400 audit(1783780302.029:884): avc:  denied  { create } for  pid=11607 comm="syz.3.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  616.919207][   T29] audit: type=1400 audit(1783780302.079:885): avc:  denied  { bind } for  pid=11607 comm="syz.3.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  617.013943][T11613] random: crng reseeded on system resumption
[  617.645070][T10460] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  617.673599][T10460] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[  617.682757][T10460] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  617.692420][T10460] usb 1-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1
[  618.375410][ T5619] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  618.600179][T10460] usb 1-1: USB disconnect, device number 37
[  619.046680][ T5619] usb 2-1: too many configurations: 100, using maximum allowed: 8
[  619.056763][ T5619] usb 2-1: unable to read config index 0 descriptor/start: -61
[  619.065139][ T5619] usb 2-1: can't read configurations, error -61
[  619.129296][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  619.205870][ T5619] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  620.277219][ T5619] usb 2-1: too many configurations: 100, using maximum allowed: 8
[  620.286622][ T5619] usb 2-1: unable to read config index 0 descriptor/start: -61
[  620.295330][ T5619] usb 2-1: can't read configurations, error -61
[  620.303309][ T5619] usb usb2-port1: attempt power cycle
[  620.449006][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1465'.
[  620.463205][T11631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1463'.
[  620.530993][T11642] erofs (device loop2): cannot find valid erofs superblock
[  620.646256][ T5619] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  620.731939][ T5619] usb 2-1: too many configurations: 100, using maximum allowed: 8
[  620.802731][ T5619] usb 2-1: unable to read config index 0 descriptor/start: -61
[  620.846978][ T5619] usb 2-1: can't read configurations, error -61
[  621.015535][ T5619] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  621.071253][ T5619] usb 2-1: too many configurations: 100, using maximum allowed: 8
[  621.148542][ T5619] usb 2-1: unable to read config index 0 descriptor/start: -71
[  621.174813][ T5619] usb 2-1: can't read configurations, error -71
[  621.214209][ T5619] usb usb2-port1: unable to enumerate USB device
[  621.368370][T11654] overlay: Unknown parameter 'mask'
[  621.427297][T11656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1469'.
[  622.102798][T11662] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1470'.
[  622.262968][T11664] random: crng reseeded on system resumption
[  622.314741][T11664] Restarting kernel threads ...
[  622.323712][T11664] Done restarting kernel threads.
[  624.375926][T11677] orangefs_mount: mount request failed with -4
[  624.383088][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  624.389960][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  626.959592][   T29] audit: type=1326 audit(1783780312.159:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.3.1479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4932f9de59 code=0x0
[  627.335514][ T5619] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  627.505132][ T5619] usb 4-1: Using ep0 maxpacket: 32
[  627.528288][ T5619] usb 4-1: unable to get BOS descriptor or descriptor too short
[  627.564395][ T5619] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  627.603950][ T5619] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  627.641314][ T5619] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  627.662724][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.677981][ T5619] usb 4-1: Product: syz
[  627.682754][ T5619] usb 4-1: Manufacturer: syz
[  627.692350][ T5619] usb 4-1: SerialNumber: syz
[  627.901914][T11706] random: crng reseeded on system resumption
[  629.029650][ T5619] usb 4-1: unit 4 not found!
[  629.059522][ T5619] usb 4-1: unit 0 not found!
[  630.668453][T11729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29061 sclass=netlink_route_socket pid=11729 comm=syz.2.1490
[  630.730623][ T5619] usb 4-1: USB disconnect, device number 41
[  631.015500][  T189] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  631.118657][T11741] netlink: 'syz.3.1495': attribute type 21 has an invalid length.
[  631.192132][  T189] usb 2-1: unable to get BOS descriptor or descriptor too short
[  631.219390][  T189] usb 2-1: not running at top speed; connect to a high speed hub
[  631.251540][  T189] usb 2-1: config 128 has an invalid interface number: 220 but max is 0
[  631.288565][  T189] usb 2-1: config 128 has no interface number 0
[  631.301670][  T189] usb 2-1: config 128 interface 220 has no altsetting 0
[  631.333500][  T189] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=2a.ad
[  631.371333][  T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.401137][  T189] usb 2-1: Product: syz
[  631.428400][  T189] usb 2-1: Manufacturer: syz
[  631.461467][  T189] usb 2-1: SerialNumber: syz
[  631.921078][  T189] RobotFuzz Open Source InterFace, OSIF 2-1:128.220: failure sending bit rate
[  632.285750][T11744] tmpfs: Unknown parameter '0000000000000000000004600000000000000000000005&'
[  632.311952][  T189] RobotFuzz Open Source InterFace, OSIF 2-1:128.220: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71
[  632.395965][T11749] random: crng reseeded on system resumption
[  632.783165][  T189] usb 2-1: USB disconnect, device number 44
[  632.946337][T11751] Restarting kernel threads ...
[  632.972311][T11751] Done restarting kernel threads.
[  633.043980][T11762] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  635.249318][T11791] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1504'.
[  635.648536][T11798] netlink: 68 bytes leftover after parsing attributes in process `'.
[  635.746124][T11803] FAULT_INJECTION: forcing a failure.
[  635.746124][T11803] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  635.907792][T11803] CPU: 0 UID: 0 PID: 11803 Comm: syz.0.1510 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  635.907831][T11803] Tainted: [L]=SOFTLOCKUP
[  635.907839][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  635.907853][T11803] Call Trace:
[  635.907861][T11803]  <TASK>
[  635.907869][T11803]  dump_stack_lvl+0x100/0x190
[  635.907903][T11803]  should_fail_ex.cold+0x5/0xa
[  635.907932][T11803]  _copy_from_user+0x2e/0xd0
[  635.907959][T11803]  move_addr_to_kernel+0x65/0x170
[  635.907991][T11803]  copy_msghdr_from_user+0x3f0/0x4c0
[  635.908021][T11803]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  635.908065][T11803]  ___sys_sendmsg+0x106/0x1e0
[  635.908096][T11803]  ? __pfx____sys_sendmsg+0x10/0x10
[  635.908123][T11803]  ? __lock_acquire+0x49f/0x1a40
[  635.908156][T11803]  ? get_pid_task+0x106/0x250
[  635.908219][T11803]  __sys_sendmsg+0x160/0x210
[  635.908242][T11803]  ? __pfx___sys_sendmsg+0x10/0x10
[  635.908280][T11803]  do_syscall_64+0x115/0x870
[  635.908316][T11803]  ? clear_bhb_loop+0x40/0x90
[  635.908343][T11803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.908366][T11803] RIP: 0033:0x7f8bf879de59
[  635.908384][T11803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.908405][T11803] RSP: 002b:00007f8bf95aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  635.908426][T11803] RAX: ffffffffffffffda RBX: 00007f8bf8a25fa0 RCX: 00007f8bf879de59
[  635.908441][T11803] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003
[  635.908455][T11803] RBP: 00007f8bf95aa090 R08: 0000000000000000 R09: 0000000000000000
[  635.908468][T11803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  635.908481][T11803] R13: 00007f8bf8a26038 R14: 00007f8bf8a25fa0 R15: 00007ffd28efdd18
[  635.908511][T11803]  </TASK>
[  636.133978][T11809] fuse: Bad value for 'fd'
[  636.342584][T11814] random: crng reseeded on system resumption
[  636.407090][T11814] Restarting kernel threads ...
[  636.413022][T11814] Done restarting kernel threads.
[  637.284477][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'.
[  637.637826][T11825] SELinux:  truncated policydb string identifier
[  637.644559][T11825] SELinux: failed to load policy
[  638.900471][T11798] lo speed is unknown, defaulting to 1000
[  639.208943][T11852] FAULT_INJECTION: forcing a failure.
[  639.208943][T11852] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  639.248794][T11852] CPU: 1 UID: 0 PID: 11852 Comm: syz.0.1523 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  639.248832][T11852] Tainted: [L]=SOFTLOCKUP
[  639.248840][T11852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  639.248854][T11852] Call Trace:
[  639.248861][T11852]  <TASK>
[  639.248870][T11852]  dump_stack_lvl+0x100/0x190
[  639.248903][T11852]  should_fail_ex.cold+0x5/0xa
[  639.248927][T11852]  ? prepare_alloc_pages+0x16d/0x5f0
[  639.248961][T11852]  should_fail_alloc_page+0xeb/0x140
[  639.248989][T11852]  prepare_alloc_pages+0x1f0/0x5f0
[  639.249017][T11852]  ? unwind_get_return_address+0x59/0xa0
[  639.249058][T11852]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  639.249101][T11852]  ? stack_trace_save+0x8e/0xc0
[  639.249136][T11852]  ? __pfx_stack_trace_save+0x10/0x10
[  639.249171][T11852]  ? stack_depot_save_flags+0x27/0x9d0
[  639.249202][T11852]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  639.249238][T11852]  ? kasan_save_stack+0x3f/0x50
[  639.249261][T11852]  ? kasan_save_track+0x14/0x30
[  639.249283][T11852]  ? __kasan_kmalloc+0xaa/0xb0
[  639.249302][T11852]  ? __kmalloc_noprof+0x322/0x820
[  639.249322][T11852]  ? iovec_from_user+0x8d/0x140
[  639.249348][T11852]  ? __import_iovec+0x81/0x640
[  639.249372][T11852]  ? import_iovec+0x101/0x130
[  639.249395][T11852]  ? vfs_writev+0x197/0xdd0
[  639.249428][T11852]  ? do_writev+0x13e/0x340
[  639.249454][T11852]  ? do_syscall_64+0x115/0x870
[  639.249484][T11852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.249524][T11852]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  639.249556][T11852]  ? policy_nodemask+0xed/0x4f0
[  639.249585][T11852]  alloc_pages_mpol+0x1fb/0x540
[  639.249613][T11852]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  639.249642][T11852]  ? rcu_is_watching+0x12/0xc0
[  639.249677][T11852]  ? __pfx_vcs_write+0x10/0x10
[  639.249706][T11852]  alloc_pages_noprof+0x1a/0x160
[  639.249738][T11852]  get_free_pages_noprof+0x10/0xb0
[  639.249762][T11852]  vcs_write+0x11a/0xd70
[  639.249794][T11852]  ? lockdep_hardirqs_on+0x78/0x100
[  639.249825][T11852]  ? irqentry_exit+0x24d/0xa00
[  639.249861][T11852]  ? __pfx_vcs_write+0x10/0x10
[  639.249901][T11852]  ? __pfx_vcs_write+0x10/0x10
[  639.249929][T11852]  vfs_writev+0x5ed/0xdd0
[  639.249966][T11852]  ? __pfx_vfs_writev+0x10/0x10
[  639.249997][T11852]  ? rcu_read_lock_any_held+0x6a/0xa0
[  639.250036][T11852]  ? irqentry_exit+0x24d/0xa00
[  639.250085][T11852]  ? do_writev+0x13e/0x340
[  639.250113][T11852]  do_writev+0x13e/0x340
[  639.250142][T11852]  ? __pfx_do_writev+0x10/0x10
[  639.250179][T11852]  do_syscall_64+0x115/0x870
[  639.250210][T11852]  ? clear_bhb_loop+0x40/0x90
[  639.250236][T11852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.250259][T11852] RIP: 0033:0x7f8bf879de59
[  639.250279][T11852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  639.250300][T11852] RSP: 002b:00007f8bf9589028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  639.250323][T11852] RAX: ffffffffffffffda RBX: 00007f8bf8a26090 RCX: 00007f8bf879de59
[  639.250338][T11852] RDX: 000000000000000e RSI: 0000200000000c40 RDI: 0000000000000003
[  639.250351][T11852] RBP: 00007f8bf9589090 R08: 0000000000000000 R09: 0000000000000000
[  639.250365][T11852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  639.250378][T11852] R13: 00007f8bf8a26128 R14: 00007f8bf8a26090 R15: 00007ffd28efdd18
[  639.250407][T11852]  </TASK>
[  639.608982][T11858] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1522'.
[  639.965695][ T5619] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  640.227276][ T5619] usb 2-1: config 247 has an invalid interface number: 53 but max is 0
[  640.236003][ T5619] usb 2-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config
[  640.260612][ T5619] usb 2-1: config 247 has no interface number 0
[  640.300185][ T5619] usb 2-1: config 247 interface 53 altsetting 6 endpoint 0x4 has invalid maxpacket 42051, setting to 64
[  640.444306][ T5619] usb 2-1: config 247 interface 53 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  640.456987][ T5619] usb 2-1: config 247 interface 53 has no altsetting 0
[  640.466311][ T5619] usb 2-1: New USB device found, idVendor=07aa, idProduct=0041, bcdDevice=1e.19
[  640.479950][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.497483][ T5619] usb 2-1: Product: syz
[  640.520485][ T5619] usb 2-1: Manufacturer: syz
[  640.546208][ T5619] usb 2-1: SerialNumber: syz
[  642.157465][T11882] SELinux:  truncated policydb string identifier
[  642.163874][T11882] SELinux: failed to load policy
[  643.115150][T11878] lo speed is unknown, defaulting to 1000
[  643.485524][ T5619] usb 2-1: USB disconnect, device number 45
[  644.430012][T11912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=11912 comm=syz.2.1537
[  644.504826][   T29] audit: type=1400 audit(1783780329.629:887): avc:  denied  { create } for  pid=11902 comm="syz.2.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  644.524675][   T29] audit: type=1400 audit(1783780329.629:888): avc:  denied  { getopt } for  pid=11902 comm="syz.2.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  644.554040][   T29] audit: type=1400 audit(1783780329.629:889): avc:  denied  { map } for  pid=11902 comm="syz.2.1537" path="socket:[35361]" dev="sockfs" ino=35361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  645.971325][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1546'.
[  646.605075][T10460] usb 2-1: new full-speed USB device number 46 using dummy_hcd
[  646.712886][T11947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  646.755101][T10460] usb 2-1: device descriptor read/64, error -71
[  647.675727][T10460] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  648.085510][T10460] usb 2-1: device descriptor read/64, error -71
[  648.207308][T10460] usb usb2-port1: attempt power cycle
[  648.595144][T10460] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  648.665790][T10460] usb 2-1: device descriptor read/8, error -71
[  648.914321][   T29] audit: type=1400 audit(1783780334.109:890): avc:  denied  { set_context_mgr } for  pid=11972 comm="syz.0.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  648.915209][T10460] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  649.051414][T10460] usb 2-1: device descriptor read/8, error -71
[  649.199034][T10460] usb usb2-port1: unable to enumerate USB device
[  649.972179][T11984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1558'.
[  650.413398][T11984] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1558'.
[  650.431255][T11984] overlay: Unknown parameter '/'
[  653.179038][   T29] audit: type=1326 audit(1783780338.379:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.1.1564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c5759de59 code=0x0
[  653.228657][T12003] evm: overlay not supported
[  654.069895][T12021] No such timeout policy "syz1"
[  656.077966][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1571'.
[  656.088184][T12028] SELinux:  truncated policydb string identifier
[  656.094602][T12028] SELinux: failed to load policy
[  656.498173][T12030] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1571'.
[  656.509270][T12030] overlay: Unknown parameter '/'
[  656.516573][ T9936] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  656.809738][ T9936] usb 3-1: Using ep0 maxpacket: 8
[  657.003672][ T9936] usb 3-1: unable to get BOS descriptor or descriptor too short
[  657.042786][ T9936] usb 3-1: config 4 interface 0 has no altsetting 0
[  657.071775][ T9936] usb 3-1: string descriptor 0 read error: -22
[  657.104901][ T9936] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  657.141197][ T9936] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  657.388730][ T9936] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  657.789016][ T9936] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  657.803368][ T9936] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  657.814132][ T9936] usb 3-1: media controller created
[  657.848258][ T9936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  658.086916][ T9936] zl10353_read_register: readreg error (reg=127, ret==0)
[  658.229549][ T9936] usb 3-1: USB disconnect, device number 42
[  659.274539][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'.
[  659.484676][T12067] FAULT_INJECTION: forcing a failure.
[  659.484676][T12067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  659.500404][T12067] CPU: 1 UID: 0 PID: 12067 Comm: syz.5.1582 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  659.500437][T12067] Tainted: [L]=SOFTLOCKUP
[  659.500444][T12067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  659.500456][T12067] Call Trace:
[  659.500462][T12067]  <TASK>
[  659.500470][T12067]  dump_stack_lvl+0x100/0x190
[  659.500500][T12067]  should_fail_ex.cold+0x5/0xa
[  659.500530][T12067]  _copy_from_iter+0x1f4/0x1690
[  659.500557][T12067]  ? __asan_memset+0x23/0x50
[  659.500590][T12067]  ? __pfx__copy_from_iter+0x10/0x10
[  659.500614][T12067]  ? __pfx___alloc_skb+0x10/0x10
[  659.500647][T12067]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  659.500688][T12067]  netlink_sendmsg+0x808/0xda0
[  659.500724][T12067]  ? __pfx_netlink_sendmsg+0x10/0x10
[  659.500755][T12067]  ? __might_fault+0x20/0x140
[  659.500795][T12067]  ____sys_sendmsg+0xa4d/0xbe0
[  659.500820][T12067]  ? __pfx_netlink_sendmsg+0x10/0x10
[  659.500853][T12067]  ? __pfx_____sys_sendmsg+0x10/0x10
[  659.500894][T12067]  ___sys_sendmsg+0x190/0x1e0
[  659.500926][T12067]  ? __pfx____sys_sendmsg+0x10/0x10
[  659.500952][T12067]  ? __lock_acquire+0x49f/0x1a40
[  659.500977][T12067]  ? get_pid_task+0x106/0x250
[  659.501041][T12067]  __sys_sendmsg+0x160/0x210
[  659.501064][T12067]  ? __pfx___sys_sendmsg+0x10/0x10
[  659.501099][T12067]  do_syscall_64+0x115/0x870
[  659.501131][T12067]  ? clear_bhb_loop+0x40/0x90
[  659.501159][T12067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.501183][T12067] RIP: 0033:0x7f937f99de59
[  659.501202][T12067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  659.501223][T12067] RSP: 002b:00007f9380940028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  659.501245][T12067] RAX: ffffffffffffffda RBX: 00007f937fc25fa0 RCX: 00007f937f99de59
[  659.501260][T12067] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  659.501273][T12067] RBP: 00007f9380940090 R08: 0000000000000000 R09: 0000000000000000
[  659.501286][T12067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  659.501300][T12067] R13: 00007f937fc26038 R14: 00007f937fc25fa0 R15: 00007ffca951a048
[  659.501330][T12067]  </TASK>
[  659.942715][T12070] SELinux:  truncated policydb string identifier
[  659.949220][T12070] SELinux: failed to load policy
[  659.963995][T12070] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  659.975758][T12070] batman_adv: batadv0: Adding interface: gretap1
[  659.982111][T12070] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  660.008184][T12070] batman_adv: batadv0: Interface activated: gretap1
[  661.957664][T10755] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  661.995640][T10755] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  662.007929][T10755] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  662.018059][T10755] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  662.025743][T10755] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  662.241695][T12103] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  662.304274][T12103] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  662.503728][T12103] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  662.517498][T12103] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  662.536697][T12103] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  662.554855][T12103] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  662.570622][T12103] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  662.583768][T12103] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  662.593451][T12103] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
[  663.828070][T12111] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1593'.
[  664.075318][T10755] Bluetooth: hci5: command tx timeout
[  665.867362][T12123] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1594'.
[  666.200541][T12134] : entered promiscuous mode
[  666.260468][T10755] Bluetooth: hci5: command tx timeout
[  666.916812][T12137] SELinux:  truncated policydb string identifier
[  666.923257][T12137] SELinux: failed to load policy
[  667.117926][T12137] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  667.138286][T12137] batman_adv: batadv0: Adding interface: gretap1
[  667.144709][T12137] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.170570][T12137] batman_adv: batadv0: Interface activated: gretap1
[  667.380828][   T29] audit: type=1400 audit(1783780352.579:892): avc:  denied  { setopt } for  pid=12138 comm="syz.5.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  667.594132][T12141] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1599'.
[  667.878894][T12151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  668.315608][T10755] Bluetooth: hci5: command tx timeout
[  668.345654][T10460] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  668.565915][T12093] lo speed is unknown, defaulting to 1000
[  668.647150][T10460] usb 6-1: config 247 has an invalid interface number: 53 but max is 0
[  668.670335][T10460] usb 6-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config
[  668.711240][T12160] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1604'.
[  668.714353][T10460] usb 6-1: config 247 has no interface number 0
[  668.773717][T10460] usb 6-1: config 247 interface 53 altsetting 6 endpoint 0x4 has invalid maxpacket 42051, setting to 64
[  668.789717][ T5620] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  668.823690][T10460] usb 6-1: config 247 interface 53 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  668.840014][T10460] usb 6-1: config 247 interface 53 has no altsetting 0
[  668.861714][T10460] usb 6-1: New USB device found, idVendor=07aa, idProduct=0041, bcdDevice=1e.19
[  668.876035][T10460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.891486][T10460] usb 6-1: Product: syz
[  668.896722][T10460] usb 6-1: Manufacturer: syz
[  668.911641][T10460] usb 6-1: SerialNumber: syz
[  668.965567][ T5620] usb 1-1: Using ep0 maxpacket: 32
[  668.999113][ T5620] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  669.015966][ T5620] usb 1-1: config 0 has no interface number 0
[  669.042480][ T5620] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  669.055073][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.065524][ T5620] usb 1-1: Product: syz
[  669.076124][ T5620] usb 1-1: Manufacturer: syz
[  669.087960][ T5620] usb 1-1: SerialNumber: syz
[  669.107972][ T5620] usb 1-1: config 0 descriptor??
[  670.377218][  T189] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  670.444985][T10755] Bluetooth: hci5: command tx timeout
[  670.542942][T12093] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.553824][T12093] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.562248][T12093] bridge_slave_0: entered allmulticast mode
[  670.570950][T12093] bridge_slave_0: entered promiscuous mode
[  670.581767][T12093] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.590016][T12093] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.610154][ T5620] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  670.621893][T12093] bridge_slave_1: entered allmulticast mode
[  670.629592][T12093] bridge_slave_1: entered promiscuous mode
[  670.636037][ T5620] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  670.668176][T12093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  670.680187][T12093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  670.716225][T12093] team0: Port device team_slave_0 added
[  670.724304][T12093] team0: Port device team_slave_1 added
[  670.748927][T12093] batman_adv: batadv0: Adding interface: batadv_slave_0
[  670.756544][T12093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  670.783526][T12093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  670.795844][T12093] batman_adv: batadv0: Adding interface: batadv_slave_1
[  670.802922][T12093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  670.830827][T12093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  670.871430][T12093] hsr_slave_0: entered promiscuous mode
[  670.878257][T12093] hsr_slave_1: entered promiscuous mode
[  670.929653][ T5620] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  670.959609][ T5620] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32
[  671.038408][  T189] usb 3-1: Using ep0 maxpacket: 32
[  671.112382][T12093] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  671.125817][T12093] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  671.134468][T12093] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  671.151467][T12093] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  671.160103][T12093] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  671.172362][T12093] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  671.180729][T12093] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  671.193538][T12093] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  671.219053][T12093] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.226219][T12093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  671.233675][T12093] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.240770][T12093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  671.309737][T12093] 8021q: adding VLAN 0 to HW filter on device bond0
[  671.328861][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.336978][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.353295][T12093] 8021q: adding VLAN 0 to HW filter on device team0
[  671.479726][  T189] usb 3-1: unable to get BOS descriptor or descriptor too short
[  671.508935][  T189] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 103, changing to 7
[  671.545544][T10460] usb 6-1: USB disconnect, device number 32
[  671.566799][  T189] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  671.580710][ T9841] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.587825][ T9841] bridge0: port 1(bridge_slave_0) entered forwarding state
[  671.600884][  T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.609059][  T189] usb 3-1: Product: syz
[  671.614751][  T189] usb 3-1: Manufacturer: syz
[  671.626292][ T9841] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.633449][ T9841] bridge0: port 2(bridge_slave_1) entered forwarding state
[  671.646769][  T189] usb 3-1: SerialNumber: syz
[  671.698331][T12190] netlink: 'syz.1.1611': attribute type 2 has an invalid length.
[  671.732007][T12093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  671.742375][T12093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  671.782401][T12190] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  671.909503][T12193] SELinux:  truncated policydb string identifier
[  671.916018][T12193] SELinux: failed to load policy
[  672.299351][  T189] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  672.307441][  T189] usb 3-1: 2:1 : bogus bTerminalLink 7
[  672.337207][  T189] usb 3-1: unit 5 not found!
[  672.342738][  T189] usb 3-1: unit 3 not found!
[  672.377478][  T189] usb 3-1: unit 0 not found!
[  672.388358][ T9936] usb 1-1: USB disconnect, device number 38
[  672.544441][  T189] usb 3-1: USB disconnect, device number 43
[  672.909128][T12093] 8021q: adding VLAN 0 to HW filter on device batadv0
[  673.177949][T12215] serio: Serial port ptm0
[  673.613563][   T29] audit: type=1400 audit(1783780358.789:893): avc:  denied  { write } for  pid=12213 comm="syz.5.1614" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  673.842323][T12221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1615'.
[  673.860299][T12221] overlay: Unknown parameter '/'
[  674.941657][T12093] veth0_vlan: entered promiscuous mode
[  674.968701][T12093] veth1_vlan: entered promiscuous mode
[  675.024102][T12093] veth0_macvtap: entered promiscuous mode
[  675.042526][T12093] veth1_macvtap: entered promiscuous mode
[  675.071725][T12093] batman_adv: batadv0: Interface activated: batadv_slave_0
[  675.112372][T12093] batman_adv: batadv0: Interface activated: batadv_slave_1
[  675.166900][ T1014] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  675.229407][ T3260] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  675.239238][ T3260] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  675.266334][ T3260] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  675.273408][T12235] overlayfs: failed to resolve './file2': -2
[  675.330170][T12232] netlink: 'syz.1.1618': attribute type 3 has an invalid length.
[  675.731759][   T29] audit: type=1400 audit(1783780360.929:894): avc:  denied  { setattr } for  pid=12231 comm="syz.1.1618" name="tun" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  675.759356][T12232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  675.938891][T12235] netlink: 'syz.5.1619': attribute type 49 has an invalid length.
[  676.054278][ T9841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  676.080997][ T9841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  676.136248][T10460] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  676.149372][ T6661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  676.179888][ T6661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  676.205561][ T5805] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  676.347473][T12243] random: crng reseeded on system resumption
[  676.558645][T12243] Restarting kernel threads ...
[  676.564734][T12243] Done restarting kernel threads.
[  676.635282][ T5805] usb 6-1: Using ep0 maxpacket: 8
[  676.896109][T10460] usb 3-1: Using ep0 maxpacket: 32
[  677.619664][ T5805] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 7
[  677.633375][T10460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  677.645362][ T5805] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  677.657815][T10460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  677.667988][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.677857][T10460] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  677.688535][ T5805] usb 6-1: Product: syz
[  677.711636][T12246] random: crng reseeded on system resumption
[  677.737421][ T5805] usb 6-1: Manufacturer: syz
[  677.752186][T10460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.770771][ T5805] usb 6-1: SerialNumber: syz
[  677.807049][T12246] Restarting kernel threads ...
[  677.812422][T12246] Done restarting kernel threads.
[  677.903358][T10460] usb 3-1: config 0 descriptor??
[  678.018479][T10460] hub 3-1:0.0: USB hub found
[  678.217942][T10460] hub 3-1:0.0: 1 port detected
[  678.309642][T10755] Bluetooth: hci5: unexpected event 0x2f length: 763 > 260
[  678.309662][ T5805] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  678.331286][ T5805] usb 6-1: found format II with max.bitrate = 1025, frame size=32767
[  678.352619][ T5805] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  678.515169][ T5717] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  678.626110][T12254] syzkaller0: entered promiscuous mode
[  678.631636][T12254] syzkaller0: entered allmulticast mode
[  678.831441][T10460] usb 3-1: USB disconnect, device number 44
[  678.849690][T12263] xt_hashlimit: size too large, truncated to 1048576
[  678.857605][ T5805] usb 6-1: USB disconnect, device number 33
[  678.882087][   T29] audit: type=1400 audit(1783780364.059:895): avc:  denied  { getopt } for  pid=12255 comm="syz.6.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  679.016033][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  679.040309][   T29] audit: type=1400 audit(1783780364.059:896): avc:  denied  { write } for  pid=12255 comm="syz.6.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  679.172787][   T29] audit: type=1400 audit(1783780364.339:897): avc:  denied  { write } for  pid=12257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  679.265773][   T29] audit: type=1400 audit(1783780364.449:898): avc:  denied  { write } for  pid=12275 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  679.594380][   T29] audit: type=1400 audit(1783780364.779:899): avc:  denied  { write } for  pid=12277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  679.657230][ T5717] usb 2-1: config 247 has an invalid interface number: 53 but max is 0
[  679.665539][ T5717] usb 2-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config
[  679.675809][ T5717] usb 2-1: config 247 has no interface number 0
[  679.682102][ T5717] usb 2-1: config 247 interface 53 altsetting 6 endpoint 0x4 has invalid maxpacket 42051, setting to 64
[  679.683637][   T29] audit: type=1400 audit(1783780364.829:900): avc:  denied  { write } for  pid=12290 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  679.693226][ T5717] usb 2-1: config 247 interface 53 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  679.693251][ T5717] usb 2-1: config 247 interface 53 has no altsetting 0
[  680.274745][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'.
[  680.327025][T12302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1630'.
[  680.398380][T12303] netlink: 'syz.2.1630': attribute type 2 has an invalid length.
[  680.406172][T12303] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1630'.
[  681.801021][ T5717] usb 2-1: New USB device found, idVendor=07aa, idProduct=0041, bcdDevice=1e.19
[  681.851473][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.908104][ T5717] usb 2-1: Product: syz
[  681.951822][ T5717] usb 2-1: can't set config #247, error -71
[  682.266044][ T5717] usb 2-1: USB disconnect, device number 50
[  682.655609][  T991] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  683.205520][T10755] Bluetooth: hci0: command 0x0406 tx timeout
[  683.227649][  T991] usb 1-1: Using ep0 maxpacket: 16
[  683.607232][  T991] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  683.645154][  T991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.685855][  T991] usb 1-1: Product: syz
[  683.696974][  T991] usb 1-1: Manufacturer: syz
[  683.712519][  T991] usb 1-1: SerialNumber: syz
[  683.757974][  T991] r8152-cfgselector 1-1: Unknown version 0x0000
[  683.765982][  T991] r8152-cfgselector 1-1: config 0 descriptor??
[  684.068861][  T991] r8152-cfgselector 1-1: USB disconnect, device number 39
[  686.272676][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  686.384419][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  687.481267][T12343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1632'.
[  687.493707][T12343] overlay: Unknown parameter '/'
[  687.514541][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1641'.
[  687.741313][   T29] audit: type=1400 audit(1783780372.919:901): avc:  denied  { write } for  pid=12353 comm="syz.0.1643" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  687.852365][T12358] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12358 comm=syz.0.1643
[  688.324574][  T991] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  688.421318][T12355] cgroup: fork rejected by pids controller in /syz0
[  688.531907][  T991] usb 7-1: config 247 has an invalid interface number: 53 but max is 0
[  688.566570][  T991] usb 7-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config
[  688.576971][  T991] usb 7-1: config 247 has no interface number 0
[  688.588892][  T991] usb 7-1: config 247 interface 53 altsetting 6 endpoint 0x4 has invalid maxpacket 42051, setting to 64
[  688.600069][  T991] usb 7-1: config 247 interface 53 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  688.611024][  T991] usb 7-1: config 247 interface 53 has no altsetting 0
[  689.412398][  T991] usb 7-1: New USB device found, idVendor=07aa, idProduct=0041, bcdDevice=1e.19
[  689.984768][  T991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.203290][  T991] usb 7-1: Product: syz
[  690.209669][  T991] usb 7-1: Manufacturer: syz
[  690.215887][  T991] usb 7-1: SerialNumber: syz
[  692.767913][  T991] usb 7-1: USB disconnect, device number 2
[  692.931993][T12409] IPv6: NLM_F_REPLACE set, but no existing node found!
[  693.023380][   T29] audit: type=1400 audit(1783780378.209:902): avc:  denied  { write } for  pid=12407 comm="syz.6.1656" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  693.131534][   T29] audit: type=1400 audit(1783780378.219:903): avc:  denied  { remove_name } for  pid=12407 comm="syz.6.1656" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  693.203620][   T29] audit: type=1400 audit(1783780378.219:904): avc:  denied  { unlink } for  pid=12407 comm="syz.6.1656" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  693.564252][T12413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  694.645011][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  696.518617][T12422] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1659'.
[  696.552002][T12422] overlay: Unknown parameter '/'
[  696.678917][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  696.701921][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  696.714959][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  696.728667][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  696.740643][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  697.692979][T12442] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1663'.
[  697.703603][T12442] overlay: Unknown parameter '/'
[  697.962390][   T29] audit: type=1400 audit(1783780383.159:905): avc:  denied  { compute_member } for  pid=12459 comm="syz.1.1668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  698.016581][ T9937] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  698.107558][ T5842] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  698.153412][T12430] lo speed is unknown, defaulting to 1000
[  698.241938][ T6503] batman_adv: batadv0: Interface deactivated: gretap1
[  698.295094][ T5717] usb 3-1: new full-speed USB device number 45 using dummy_hcd
[  698.318462][ T5842] usb 7-1: config 247 has an invalid interface number: 53 but max is 0
[  698.327438][ T9937] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  698.333268][ T5842] usb 7-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config
[  698.350643][ T9937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.393528][ T9937] usb 6-1: config 0 descriptor??
[  698.398853][ T5842] usb 7-1: config 247 has no interface number 0
[  698.398908][ T5842] usb 7-1: config 247 interface 53 altsetting 6 endpoint 0x4 has invalid maxpacket 42051, setting to 64
[  698.398941][ T5842] usb 7-1: config 247 interface 53 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  698.398968][ T5842] usb 7-1: config 247 interface 53 has no altsetting 0
[  698.401117][ T5842] usb 7-1: New USB device found, idVendor=07aa, idProduct=0041, bcdDevice=1e.19
[  698.485325][ T6503] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  698.493447][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.519905][ T6503] ip6gretap1 (unregistering): left allmulticast mode
[  698.542737][ T5842] usb 7-1: Product: syz
[  698.547553][ T5842] usb 7-1: Manufacturer: syz
[  698.552347][ T5842] usb 7-1: SerialNumber: syz
[  698.655439][ T9937] cp210x 6-1:0.0: cp210x converter detected
[  698.921945][ T5618] Bluetooth: hci1: command tx timeout
[  698.943993][ T9937] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121
[  698.951603][ T9937] cp210x 6-1:0.0: querying part number failed
[  698.960718][ T9937] usb 6-1: cp210x converter now attached to ttyUSB0
[  698.967953][ T6503] batman_adv: batadv0: Removing interface: gretap1
[  699.023140][ T6503] batman_adv: batadv0: Removing interface: geneve2
[  699.025868][   T29] audit: type=1400 audit(1783780384.199:906): avc:  denied  { write } for  pid=12464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  699.566841][ T6503] bond0 (unregistering): Released all slaves
[  699.604662][T12482] No control pipe specified
[  699.620771][ T6503] bond1 (unregistering): Released all slaves
[  699.676333][ T6503] bond2 (unregistering): Released all slaves
[  699.752236][   T29] audit: type=1400 audit(1783780384.899:907): avc:  denied  { write } for  pid=12484 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  699.812718][T12487] xt_SECMARK: invalid mode: 2
[  699.952158][ T5717] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  699.974696][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.020605][ T5717] usb 3-1: Product: syz
[  700.063827][ T5717] usb 3-1: Manufacturer: syz
[  700.094249][ T5717] usb 3-1: SerialNumber: syz
[  700.137695][ T5717] usb 3-1: config 0 descriptor??
[  700.138045][ T6503] tipc: Disabling bearer <udp:s>
[  700.195022][ T6503] tipc: Left network mode
[  700.200669][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5
[  700.544452][ T5717] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  700.670860][T12502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29061 sclass=netlink_route_socket pid=12502 comm=syz.1.1670
[  700.790225][T12456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  700.800771][T12456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  700.835480][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'.
[  700.854752][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'.
[  700.863973][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1665'.
[  700.977447][ T5842] usb 7-1: USB disconnect, device number 3
[  700.998504][ T5618] Bluetooth: hci1: command tx timeout
[  701.125800][T12430] bridge0: port 1(bridge_slave_0) entered blocking state
[  701.153602][  T991] usb 6-1: USB disconnect, device number 34
[  701.195880][T12430] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.244222][T12430] bridge_slave_0: entered allmulticast mode
[  701.332790][T12430] bridge_slave_0: entered promiscuous mode
[  701.404061][T12430] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.472538][T12430] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.566527][T12430] bridge_slave_1: entered allmulticast mode
[  701.641634][T12430] bridge_slave_1: entered promiscuous mode
[  701.974601][T12520] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1672'.
[  701.988882][T12520] overlay: Unknown parameter '/'
[  702.193058][  T991] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  702.201395][  T991] cp210x 6-1:0.0: device disconnected
[  702.211862][   T29] audit: type=1400 audit(1783780387.379:908): avc:  denied  { write } for  pid=12495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  702.243490][T12430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  703.056234][ T5618] Bluetooth: hci1: command tx timeout
[  703.107789][ T5717] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  703.119790][ T5717] usb 3-1: USB disconnect, device number 45
[  703.158865][   T29] audit: type=1400 audit(1783780388.309:909): avc:  denied  { write } for  pid=12531 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  703.292718][ T6503] hsr_slave_0: left promiscuous mode
[  703.341903][ T6503] hsr_slave_1: left promiscuous mode
[  703.455151][ T6503] virt_wifi0: left promiscuous mode
[  704.201918][T12430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  704.220695][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6
[  704.623901][T12559] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1682'.
[  704.651580][T12430] team0: Port device team_slave_0 added
[  704.662732][T12430] team0: Port device team_slave_1 added
[  704.775525][ T5805] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  704.842437][T12430] batman_adv: batadv0: Adding interface: batadv_slave_0
[  704.866253][T12430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  704.962565][ T5805] usb 2-1: Using ep0 maxpacket: 16
[  704.996744][T12430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  705.009885][ T5805] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  705.043084][ T5805] usb 2-1: config 0 has no interface number 0
[  705.089792][ T5805] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  705.122021][T12430] batman_adv: batadv0: Adding interface: batadv_slave_1
[  705.125517][ T5618] Bluetooth: hci1: command tx timeout
[  705.164566][ T5805] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  705.189541][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  705.210951][T12430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  705.212676][ T5805] usb 2-1: Product: syz
[  705.296057][T12430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  705.366041][ T5805] usb 2-1: SerialNumber: syz
[  705.409619][ T5805] usb 2-1: config 0 descriptor??
[  705.423453][ T5805] cm109 2-1:0.8: invalid payload size 40, expected 4
[  705.482942][ T5805] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input24
[  706.365916][T12556] trusted_key: encrypted_key: master key parameter is missing
[  706.730387][T12576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  706.757105][T12430] hsr_slave_0: entered promiscuous mode
[  706.869214][T12576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  706.885470][T12430] hsr_slave_1: entered promiscuous mode
[  706.943769][T12430] debugfs: 'hsr0' already exists in 'hsr'
[  706.999433][T12430] Cannot create hsr debugfs directory
[  707.023287][    C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71
[  707.030503][    C1] cm109_urb_ctl_callback: 66 callbacks suppressed
[  707.030526][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  707.044040][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  707.051885][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  707.059049][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  707.066156][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  707.073285][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  707.080448][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  707.087589][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  707.094720][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  707.102380][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  707.132505][   T29] audit: type=1400 audit(1783780392.309:910): avc:  denied  { write } for  pid=12562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  707.140296][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  707.201788][ T5842] usb 2-1: USB disconnect, device number 51
[  707.239030][ T5842] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  707.426746][   T29] audit: type=1400 audit(1783780392.579:911): avc:  denied  { write } for  pid=12581 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  707.558638][ T6503] IPVS: stop unused estimator thread 0...
[  707.580897][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7
[  707.825062][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1685'.
[  710.186360][T12608] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  711.056148][   T29] audit: type=1400 audit(1783780396.239:912): avc:  denied  { write } for  pid=12614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  711.271419][   T29] audit: type=1400 audit(1783780396.249:913): avc:  denied  { create } for  pid=12630 comm="syz.2.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  711.506697][   T29] audit: type=1400 audit(1783780396.709:914): avc:  denied  { write } for  pid=12650 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  712.203054][T12654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1699'.
[  712.214500][T12654] overlay: Unknown parameter '/'
[  712.468459][T12659] netlink: 798 bytes leftover after parsing attributes in process `syz.2.1700'.
[  712.885182][   T29] audit: type=1400 audit(1783780398.039:915): avc:  denied  { bpf } for  pid=12661 comm="syz.1.1701" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  712.982024][  T991] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  713.097480][   T29] audit: type=1400 audit(1783780398.129:916): avc:  denied  { perfmon } for  pid=12661 comm="syz.1.1701" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  713.417298][  T991] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0xB has invalid maxpacket 12336, setting to 64
[  713.846728][  T991] usb 3-1: config 0 interface 0 has no altsetting 0
[  713.875540][T12430] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  713.909894][T12430] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  713.933313][T12430] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  713.954214][T12430] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  713.962854][T12430] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  713.976682][T12430] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  714.028032][T12430] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  714.064163][T12430] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  714.354951][   T29] audit: type=1400 audit(1783780399.519:917): avc:  denied  { write } for  pid=12665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  714.386450][T12430] 8021q: adding VLAN 0 to HW filter on device bond0
[  714.439269][T12430] 8021q: adding VLAN 0 to HW filter on device team0
[  714.452010][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  714.459194][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  714.566601][   T29] audit: type=1400 audit(1783780399.729:918): avc:  denied  { write } for  pid=12695 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  714.601245][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  714.608452][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  714.860312][  T991] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  714.869404][  T991] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  714.877595][  T991] usb 3-1: Product: syz
[  714.881771][  T991] usb 3-1: Manufacturer: syz
[  714.904371][  T991] usb 3-1: config 0 descriptor??
[  714.992736][  T991] usb 3-1: can't set config #0, error -71
[  715.047550][  T991] usb 3-1: USB disconnect, device number 46
[  716.896271][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1711'.
[  716.907773][T12719] overlay: Unknown parameter '/'
[  718.822894][T12737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1713'.
[  719.920368][   T29] audit: type=1400 audit(1783780405.119:919): avc:  denied  { write } for  pid=12697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  720.483429][   T29] audit: type=1400 audit(1783780405.679:920): avc:  denied  { write } for  pid=12757 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  720.736809][T12430] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.874112][T12765] 9p: Bad value for 'wfdno'
[  721.040374][T12430] veth0_vlan: entered promiscuous mode
[  721.103123][T12430] veth1_vlan: entered promiscuous mode
[  721.274478][T12430] veth0_macvtap: entered promiscuous mode
[  721.331285][T12430] veth1_macvtap: entered promiscuous mode
[  721.459099][   T29] audit: type=1400 audit(1783780406.609:921): avc:  denied  { create } for  pid=12772 comm="syz.5.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  721.656451][   T29] audit: type=1400 audit(1783780406.629:922): avc:  denied  { write } for  pid=12772 comm="syz.5.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  721.765755][  T189] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  722.305817][  T189] usb 7-1: config 2 interface 0 altsetting 178 has an endpoint descriptor with address 0x1F, changing to 0xF
[  722.357306][  T189] usb 7-1: config 2 interface 0 altsetting 178 endpoint 0xF has an invalid bInterval 249, changing to 11
[  722.403389][  T189] usb 7-1: config 2 interface 0 altsetting 178 endpoint 0xF has invalid maxpacket 59391, setting to 1024
[  722.432860][  T189] usb 7-1: config 2 interface 0 has no altsetting 0
[  722.456777][T12430] batman_adv: batadv0: Interface activated: batadv_slave_0
[  722.494587][  T189] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  722.518394][  T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.531398][T12430] batman_adv: batadv0: Interface activated: batadv_slave_1
[  722.542209][  T189] usb 7-1: Product: syz
[  722.551754][  T189] usb 7-1: Manufacturer: syz
[  722.561286][  T189] usb 7-1: SerialNumber: syz
[  722.580523][  T150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  722.593860][T12767] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  722.642774][  T150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  722.680063][  T150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  722.692774][  T150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  723.257351][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  723.282013][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  723.362086][T12767] SELinux:  invalid class
[  723.379040][ T8580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  723.416307][ T8580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  723.850221][T12787] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1724'.
[  723.961392][T12767] SELinux: failed to load policy
[  724.066417][   T29] audit: type=1400 audit(1783780409.269:923): avc:  denied  { write } for  pid=12763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  724.600828][  T189] ims_pcu 7-1:2.0: Control endpoint is not INTERRUPT IN
[  724.620513][  T189] ims_pcu 7-1:2.0: probe with driver ims_pcu failed with error -22
[  724.802263][  T189] usb 7-1: USB disconnect, device number 4
[  724.990226][   T29] audit: type=1400 audit(1783780410.179:924): avc:  denied  { write } for  pid=12796 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  725.306430][T12812] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1729'.
[  725.753578][   T29] audit: type=1400 audit(1783780410.949:925): avc:  denied  { block_suspend } for  pid=12802 comm="syz.0.1655" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  726.335871][T12829] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1732'.
[  728.938616][T12842] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1735'.
[  729.081528][T12851] netlink: 'syz.0.1737': attribute type 10 has an invalid length.
[  729.160116][T12852] netlink: 'syz.0.1737': attribute type 10 has an invalid length.
[  729.229842][   T29] audit: type=1400 audit(1783780414.429:926): avc:  denied  { write } for  pid=12814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  729.298304][T12852] macvlan1: entered promiscuous mode
[  729.321739][T12852] macvlan1: entered allmulticast mode
[  729.358181][T12852] veth1_vlan: entered allmulticast mode
[  729.391413][T12852] bond0: (slave macvlan1): Enslaving as an active interface with an up link
[  729.461401][T12851] veth1_vlan: left allmulticast mode
[  729.783939][   T29] audit: type=1400 audit(1783780414.979:927): avc:  denied  { getopt } for  pid=12865 comm="syz.0.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  729.850612][   T29] audit: type=1400 audit(1783780415.019:928): avc:  denied  { write } for  pid=12862 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  730.025617][ T5842] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  730.099061][T12872] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  730.215499][ T5842] usb 1-1: Using ep0 maxpacket: 16
[  730.279862][ T5842] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  730.330884][ T5842] usb 1-1: config 0 has no interface number 0
[  730.372909][ T5842] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  730.424392][ T5842] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  730.480904][ T5842] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  730.519117][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.545879][ T5842] usb 1-1: Product: syz
[  730.560378][ T5842] usb 1-1: Manufacturer: syz
[  730.579010][ T5842] usb 1-1: SerialNumber: syz
[  730.602576][ T5842] usb 1-1: config 0 descriptor??
[  730.626958][T12866] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  730.656721][T12866] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  730.666889][ T5716] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  731.023223][T12866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  731.035126][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'.
[  731.044711][T12866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  731.054721][T12866] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  731.061999][T12866] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  731.075549][   T29] audit: type=1400 audit(1783780416.259:929): avc:  denied  { ioctl } for  pid=12870 comm="syz.1.1740" path="socket:[38881]" dev="sockfs" ino=38881 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  731.114993][   T29] audit: type=1400 audit(1783780416.259:930): avc:  denied  { name_connect } for  pid=12870 comm="syz.1.1740" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  731.337581][ T5842] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  731.543521][ T5716] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  731.555070][ T5842] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  731.555107][ T5842] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  731.555314][ T5842] asix 1-1:0.34: probe with driver asix failed with error -61
[  732.214500][ T5716] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  732.232394][ T5716] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  732.242486][ T5716] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.270331][ T5716] usb 7-1: config 0 descriptor??
[  733.405291][ T5716] usbhid 7-1:0.0: can't add hid device: -71
[  734.108084][   T29] audit: type=1400 audit(1783780419.309:931): avc:  denied  { append } for  pid=12903 comm="syz.5.1749" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  734.438350][ T5716] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  734.468451][ T5716] usb 7-1: USB disconnect, device number 5
[  734.484909][   T29] audit: type=1400 audit(1783780419.339:932): avc:  denied  { map } for  pid=12903 comm="syz.5.1749" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  734.508781][   T29] audit: type=1400 audit(1783780419.339:933): avc:  denied  { execute } for  pid=12903 comm="syz.5.1749" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  734.592066][T10460] usb 1-1: USB disconnect, device number 40
[  735.161324][ T5618] Bluetooth: hci1: Malformed LE Event: 0x0d
[  735.178912][   T29] audit: type=1400 audit(1783780420.349:934): avc:  denied  { ioctl } for  pid=12909 comm="syz.2.1750" path="socket:[40114]" dev="sockfs" ino=40114 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  735.353647][T12924] random: crng reseeded on system resumption
[  736.511948][   T29] audit: type=1400 audit(1783780421.699:935): avc:  denied  { write } for  pid=12917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  736.845259][   T29] audit: type=1400 audit(1783780422.039:936): avc:  denied  { write } for  pid=12950 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  737.246453][T12955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1758'.
[  737.431785][   T29] audit: type=1326 audit(1783780422.629:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.5.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937f99de59 code=0x7ffc0000
[  737.549631][   T29] audit: type=1326 audit(1783780422.679:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.5.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f937f99de59 code=0x7ffc0000
[  737.582649][   T29] audit: type=1326 audit(1783780422.679:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.5.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937f99de59 code=0x7ffc0000
[  737.644390][   T29] audit: type=1326 audit(1783780422.689:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.5.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937f99de59 code=0x7ffc0000
[  737.681360][   T29] audit: type=1326 audit(1783780422.689:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.5.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f937f99de59 code=0x7ffc0000
[  737.710700][   T29] audit: type=1326 audit(1783780422.689:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.5.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937f99de59 code=0x7ffc0000
[  737.737580][   T29] audit: type=1326 audit(1783780422.689:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.5.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937f99de59 code=0x7ffc0000
[  737.741367][T12964] PM: Enabling pm_trace changes system date and time during resume.
[  737.741367][T12964] PM: Correct system time has to be restored manually after resume.
[  737.764063][   T29] audit: type=1326 audit(1783780422.689:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.5.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f937f99de59 code=0x7ffc0000
[  740.143252][T12999] random: crng reseeded on system resumption
[  740.180821][T12999] Restarting kernel threads ...
[  740.186696][T12999] Done restarting kernel threads.
[  740.640724][T13010] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13010 comm=syz.2.1766
[  741.485923][T13019] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1771'.
[  741.540417][ T5805] IPVS: starting estimator thread 0...
[  741.646253][T13022] IPVS: using max 36 ests per chain, 86400 per kthread
[  741.658634][T13014] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1770'.
[  741.702112][T13024] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1772'.
[  741.815142][ T5805] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[  742.115490][ T5805] usb 7-1: device descriptor read/64, error -71
[  742.837267][ T9937] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  742.995470][ T9937] usb 6-1: Using ep0 maxpacket: 8
[  743.026396][ T9937] usb 6-1: unable to get BOS descriptor or descriptor too short
[  743.054262][ T9937] usb 6-1: config 0 has an invalid interface number: 122 but max is 0
[  743.068092][ T9937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  743.084363][ T9937] usb 6-1: config 0 has no interface number 0
[  743.093773][ T9937] usb 6-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024
[  743.109039][ T9937] usb 6-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85
[  743.115607][ T5805] usb 7-1: new low-speed USB device number 7 using dummy_hcd
[  743.122546][ T9937] usb 6-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid wMaxPacketSize 0
[  743.143131][ T9937] usb 6-1: config 0 interface 122 altsetting 187 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  743.160272][ T9937] usb 6-1: config 0 interface 122 has no altsetting 0
[  743.216263][ T9937] usb 6-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a
[  743.253329][ T9937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.279453][ T9937] usb 6-1: Product: syz
[  743.295141][ T5805] usb 7-1: device descriptor read/64, error -71
[  743.315034][ T9937] usb 6-1: Manufacturer: syz
[  743.327359][ T9937] usb 6-1: SerialNumber: syz
[  743.359926][ T9937] usb 6-1: config 0 descriptor??
[  743.545395][T13027] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  743.552796][ T5805] usb usb7-port1: attempt power cycle
[  744.419747][ T9937] pl2303 6-1:0.122: required endpoints missing
[  744.501034][ T9937] usb 6-1: USB disconnect, device number 35
[  744.834037][T13049] random: crng reseeded on system resumption
[  744.885726][T13049] Restarting kernel threads ...
[  744.891085][T13049] Done restarting kernel threads.
[  745.722434][   T29] kauditd_printk_skb: 28 callbacks suppressed
[  745.722450][   T29] audit: type=1400 audit(1783780430.919:973): avc:  denied  { read } for  pid=13053 comm="syz.0.1782" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  745.893739][   T29] audit: type=1400 audit(1783780430.919:974): avc:  denied  { open } for  pid=13053 comm="syz.0.1782" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  746.008032][   T29] audit: type=1400 audit(1783780430.989:975): avc:  denied  { ioctl } for  pid=13053 comm="syz.0.1782" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  746.268479][   T29] audit: type=1400 audit(1783780431.049:976): avc:  denied  { read } for  pid=13053 comm="syz.0.1782" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  746.305238][T13068] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1785'.
[  746.317024][T13069] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1787'.
[  746.352017][T13064] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1785'.
[  747.179167][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  747.188110][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  747.253708][T13073] /dev/nullb0: Can't open blockdev
[  747.387830][T13064] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR
[  748.086273][ T5842] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  748.185818][T13092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29061 sclass=netlink_route_socket pid=13092 comm=syz.0.1791
[  748.196940][T13088] fuse: Bad value for 'group_id'
[  748.215435][T13088] fuse: Bad value for 'group_id'
[  748.336790][ T5842] usb 2-1: config 1 has an invalid descriptor of length 167, skipping remainder of the config
[  748.456206][ T5842] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  748.472135][ T5842] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[  748.483467][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.491594][ T5842] usb 2-1: Product: syz
[  748.496338][ T5842] usb 2-1: Manufacturer: syz
[  748.502323][ T5842] usb 2-1: SerialNumber: syz
[  748.825469][T13099] random: crng reseeded on system resumption
[  750.335944][ T5842] usb 2-1: USB disconnect, device number 52
[  750.385492][ T5805] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  750.573390][ T5805] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  751.212429][ T5805] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  751.270264][ T5805] usb 7-1: config 0 interface 0 has no altsetting 0
[  751.484465][ T5805] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  751.526673][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  751.567154][ T5805] usb 7-1: Product: syz
[  751.586716][ T5805] usb 7-1: Manufacturer: syz
[  751.610052][ T5805] usb 7-1: SerialNumber: syz
[  751.646592][ T5805] usb 7-1: config 0 descriptor??
[  751.701975][ T5805] usb 7-1: selecting invalid altsetting 0
[  752.006696][T13123] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1800'.
[  752.933623][T13103] snd-usb-audio 7-1:0.0: Runtime PM usage count underflow!
[  752.993753][ T9937] usb 7-1: USB disconnect, device number 9
[  753.139488][T13128] netlink: 'syz.2.1801': attribute type 1 has an invalid length.
[  758.108007][ T5842] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  759.370525][T13173] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1811'.
[  759.636830][   T29] audit: type=1400 audit(1783780444.839:977): avc:  denied  { append } for  pid=13176 comm="syz.5.1813" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  759.667961][T13178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29061 sclass=netlink_route_socket pid=13178 comm=syz.6.1812
[  760.005434][T10460] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  760.193957][T13191] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1816'.
[  760.358082][T10460] usb 6-1: Using ep0 maxpacket: 16
[  760.376247][T10460] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  760.392053][T10460] usb 6-1: config 0 has no interface number 0
[  760.413920][T10460] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  760.464537][T10460] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  760.516274][T10460] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  760.558040][T10460] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  760.724115][T10460] usb 6-1: Product: syz
[  760.729436][T10460] usb 6-1: SerialNumber: syz
[  760.768337][T10460] usb 6-1: config 0 descriptor??
[  760.795167][T10460] cm109 6-1:0.8: invalid payload size 0, expected 4
[  761.799690][T10460] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input25
[  761.829696][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  762.073995][T13207] rdma_op ffff88805089b1f0 conn xmit_rdma 0000000000000000
[  762.996310][T13233] kAFS: Can only specify source 'none' with -o dyn
[  763.732980][    C0] cm109_urb_ctl_callback: 174 callbacks suppressed
[  763.733007][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  763.733374][ T5805] usb 6-1: USB disconnect, device number 36
[  763.739581][    C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  763.854612][ T5805] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  764.382551][T13250] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1829'.
[  765.917675][   T29] audit: type=1400 audit(1783780450.819:978): avc:  denied  { write } for  pid=13257 comm="syz.5.1833" lport=57287 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  765.942239][   T29] audit: type=1400 audit(1783780450.829:979): avc:  denied  { setopt } for  pid=13257 comm="syz.5.1833" lport=57287 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  767.967035][T13280] FAULT_INJECTION: forcing a failure.
[  767.967035][T13280] name failslab, interval 1, probability 0, space 0, times 0
[  768.023651][T13280] CPU: 1 UID: 0 PID: 13280 Comm: syz.6.1838 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  768.023689][T13280] Tainted: [L]=SOFTLOCKUP
[  768.023697][T13280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  768.023711][T13280] Call Trace:
[  768.023718][T13280]  <TASK>
[  768.023728][T13280]  dump_stack_lvl+0x100/0x190
[  768.023764][T13280]  should_fail_ex.cold+0x5/0xa
[  768.023793][T13280]  should_failslab+0xc2/0x120
[  768.023827][T13280]  __kmalloc_noprof+0xfc/0x820
[  768.023849][T13280]  ? is_bpf_text_address+0x8a/0x1a0
[  768.023879][T13280]  ? bpf_test_init.isra.0+0x88/0x100
[  768.023912][T13280]  bpf_test_init.isra.0+0x88/0x100
[  768.023943][T13280]  bpf_prog_test_run_skb+0x497/0x3540
[  768.023982][T13280]  ? find_held_lock+0x2b/0x80
[  768.024016][T13280]  ? __fget_files+0x171/0x3d0
[  768.024058][T13280]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  768.024093][T13280]  ? fput+0x79/0x100
[  768.024119][T13280]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  768.024150][T13280]  __sys_bpf+0x2a12/0x4e80
[  768.024193][T13280]  ? __pfx___sys_bpf+0x10/0x10
[  768.024227][T13280]  ? find_held_lock+0x2b/0x80
[  768.024259][T13280]  ? get_pid_task+0xfc/0x250
[  768.024290][T13280]  ? get_pid_task+0xfc/0x250
[  768.024331][T13280]  ? find_held_lock+0x2b/0x80
[  768.024369][T13280]  ? rcu_read_lock_any_held+0x6a/0xa0
[  768.024402][T13280]  ? find_held_lock+0x2b/0x80
[  768.024433][T13280]  ? ksys_write+0x190/0x250
[  768.024464][T13280]  ? ksys_write+0x190/0x250
[  768.024516][T13280]  ? fput+0x79/0x100
[  768.024544][T13280]  ? __x64_sys_bpf+0xce/0x140
[  768.024577][T13280]  __x64_sys_bpf+0xce/0x140
[  768.024612][T13280]  ? do_syscall_64+0x90/0x870
[  768.024647][T13280]  do_syscall_64+0x115/0x870
[  768.024679][T13280]  ? clear_bhb_loop+0x40/0x90
[  768.024706][T13280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.024730][T13280] RIP: 0033:0x7fda1ad9de59
[  768.024750][T13280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  768.024771][T13280] RSP: 002b:00007fda1bc46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  768.024793][T13280] RAX: ffffffffffffffda RBX: 00007fda1b025fa0 RCX: 00007fda1ad9de59
[  768.024812][T13280] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a
[  768.024826][T13280] RBP: 00007fda1bc46090 R08: 0000000000000000 R09: 0000000000000000
[  768.024840][T13280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  768.024854][T13280] R13: 00007fda1b026038 R14: 00007fda1b025fa0 R15: 00007ffe09df7f58
[  768.024881][T13280]  </TASK>
[  770.747370][  T991] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  770.846171][ T5724] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  770.908839][  T991] usb 3-1: Using ep0 maxpacket: 32
[  770.923620][  T991] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  770.959774][  T991] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  770.992915][   T29] audit: type=1326 audit(1783780456.159:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13305 comm="syz.5.1846" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f937f99de59 code=0x0
[  770.998470][  T991] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  771.045460][  T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.057456][  T991] usb 3-1: Product: syz
[  771.061658][  T991] usb 3-1: Manufacturer: syz
[  771.069939][  T991] usb 3-1: SerialNumber: syz
[  771.210846][T13306] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[  771.267888][ T5724] usb 7-1: Using ep0 maxpacket: 32
[  771.352679][   T29] audit: type=1400 audit(1783780456.529:981): avc:  denied  { create } for  pid=13303 comm="syz.1.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  771.654176][ T5724] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  771.677665][  T991] snd-ua101 3-1:1.1: sample format descriptor not found
[  771.743625][ T5724] usb 7-1: config 0 has no interface number 0
[  771.757668][  T991] snd-ua101 3-1:1.0: invalid num_altsetting
[  771.813405][ T5724] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  771.839745][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.890044][ T5724] usb 7-1: Product: syz
[  771.910602][ T5724] usb 7-1: Manufacturer: syz
[  771.916764][ T5724] usb 7-1: SerialNumber: syz
[  771.934971][ T5724] usb 7-1: config 0 descriptor??
[  772.781664][  T991] usb 3-1: USB disconnect, device number 48
[  774.747544][ T5724] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  774.761102][ T5724] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  775.157141][ T5724] usb 7-1: USB disconnect, device number 10
[  777.412316][T13330] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1851'.
[  778.353479][T13310] lo speed is unknown, defaulting to 1000
[  778.890064][T13352] netlink: 'syz.2.1856': attribute type 1 has an invalid length.
[  778.891365][T13353] netlink: 'syz.2.1856': attribute type 1 has an invalid length.
[  779.538649][T13364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13364 comm=syz.1.1855
[  781.707993][T13370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1860'.
[  783.801242][   T29] audit: type=1326 audit(1783780468.999:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.0.1863" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9de59 code=0x0
[  785.038076][T10755] Bluetooth: hci5: command 0x0406 tx timeout
[  786.377381][   T29] audit: type=1400 audit(1783780471.579:983): avc:  denied  { read } for  pid=13382 comm="syz.0.1863" lport=41391 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  786.457243][T13367] lo speed is unknown, defaulting to 1000
[  786.509725][T13404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29061 sclass=netlink_route_socket pid=13404 comm=syz.6.1866
[  787.486281][T13407] lo speed is unknown, defaulting to 1000
[  789.842891][ T5724] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  790.049021][ T5724] usb 7-1: Using ep0 maxpacket: 16
[  790.100701][ T5724] usb 7-1: config 251 has an invalid interface number: 202 but max is 0
[  790.122580][ T5724] usb 7-1: config 251 has no interface number 0
[  790.143889][ T5724] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  790.183303][ T5724] usb 7-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  790.225019][ T5724] usb 7-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  790.276561][ T5724] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  790.331623][ T5724] usb 7-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  790.382273][ T5724] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 52, changing to 7
[  790.415077][ T5724] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[  790.451849][ T5724] usb 7-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  790.484999][ T5724] usb 7-1: config 251 interface 202 has no altsetting 0
[  790.512756][ T5724] usb 7-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  790.532060][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  790.586092][ T5724] usb 7-1: Product: syz
[  790.590571][ T5724] usb 7-1: SerialNumber: syz
[  790.720739][T13418] tmpfs: Cannot enable quota on remount
[  791.040259][T13420] program syz.0.1872 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  792.052191][T13428] fuse: Bad value for 'fd'
[  792.223437][T13433] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1876'.
[  792.544611][ T5724] cxacru 7-1:251.202: cxacru_bind: interface has incorrect endpoints
[  793.427267][ T5724] cxacru 7-1:251.202: usbatm_usb_probe: bind failed: -19!
[  793.495938][ T5724] usb 7-1: USB disconnect, device number 11
[  794.155385][T13450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29061 sclass=netlink_route_socket pid=13450 comm=syz.0.1880
[  794.834498][T13451] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1881'.
[  797.820770][T13490] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1891'.
[  797.961965][T13495] FAULT_INJECTION: forcing a failure.
[  797.961965][T13495] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  797.986790][T13495] CPU: 0 UID: 0 PID: 13495 Comm: syz.5.1892 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  797.986824][T13495] Tainted: [L]=SOFTLOCKUP
[  797.986831][T13495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  797.986842][T13495] Call Trace:
[  797.986848][T13495]  <TASK>
[  797.986855][T13495]  dump_stack_lvl+0x100/0x190
[  797.986884][T13495]  should_fail_ex.cold+0x5/0xa
[  797.986910][T13495]  _copy_from_user+0x2e/0xd0
[  797.986936][T13495]  kstrtouint_from_user+0xd6/0x1d0
[  797.986964][T13495]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  797.986991][T13495]  ? __lock_acquire+0x49f/0x1a40
[  797.987027][T13495]  proc_fail_nth_write+0x83/0x220
[  797.987057][T13495]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  797.987093][T13495]  vfs_write+0x2aa/0x1050
[  797.987123][T13495]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  797.987162][T13495]  ? __pfx_vfs_write+0x10/0x10
[  797.987188][T13495]  ? __fget_files+0x215/0x3d0
[  797.987223][T13495]  ? __fget_files+0x21f/0x3d0
[  797.987261][T13495]  ksys_write+0x12a/0x250
[  797.987287][T13495]  ? __pfx_ksys_write+0x10/0x10
[  797.987320][T13495]  do_syscall_64+0x115/0x870
[  797.987350][T13495]  ? clear_bhb_loop+0x40/0x90
[  797.987375][T13495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.987395][T13495] RIP: 0033:0x7f937f95e68e
[  797.987415][T13495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  797.987435][T13495] RSP: 002b:00007f93808fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  797.987458][T13495] RAX: ffffffffffffffda RBX: 00007f93808fe6c0 RCX: 00007f937f95e68e
[  797.987473][T13495] RDX: 0000000000000001 RSI: 00007f93808fe0a0 RDI: 0000000000000006
[  797.987485][T13495] RBP: 00007f93808fe090 R08: 0000000000000000 R09: 0000000000000000
[  797.987498][T13495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  797.987509][T13495] R13: 00007f937fc26218 R14: 00007f937fc26180 R15: 00007ffca951a048
[  797.987536][T13495]  </TASK>
[  798.929361][T13434] lo speed is unknown, defaulting to 1000
[  799.208701][T13506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29061 sclass=netlink_route_socket pid=13506 comm=syz.1.1895
[  799.514707][T13510] fuse: Bad value for 'rootmode'
[  799.668858][T13493] lo speed is unknown, defaulting to 1000
[  799.865566][T11226] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  799.904269][T13514] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1898'.
[  800.035075][T11226] usb 1-1: Using ep0 maxpacket: 16
[  800.051402][T11226] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  800.103827][T11226] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  800.154367][T11226] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  800.185015][T11226] usb 1-1: config 1 interface 1 has no altsetting 0
[  800.283265][T11226] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40
[  800.410110][T11226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.473847][T11226] usb 1-1: Product: syz
[  800.546192][T11226] usb 1-1: Manufacturer: syz
[  800.602488][T11226] usb 1-1: SerialNumber: syz
[  801.080263][T13510] netlink: 'syz.0.1896': attribute type 1 has an invalid length.
[  801.132568][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1896'.
[  801.378431][T13510] 8021q: adding VLAN 0 to HW filter on device bond1
[  801.541421][T11226] usb 1-1: selecting invalid altsetting 0
[  801.705602][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1902'.
[  801.728288][T13535] erofs (device loop1): cannot find valid erofs superblock
[  801.784683][T11226] usb 1-1: USB disconnect, device number 41
[  801.884810][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  801.917678][   T29] audit: type=1400 audit(1783780487.119:984): avc:  denied  { ioctl } for  pid=13537 comm="syz.6.1903" path="socket:[41706]" dev="sockfs" ino=41706 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  802.300391][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1905'.
[  802.315521][T13549] erofs (device loop2): cannot find valid erofs superblock
[  803.970540][T13566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29061 sclass=netlink_route_socket pid=13566 comm=syz.0.1910
[  805.641102][T13581] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1914'.
[  806.586189][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'.
[  806.597782][T13594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1918'.
[  806.610706][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'.
[  806.634525][T13594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1918'.
[  806.842273][  T189] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  807.157334][T13592] netlink: 'syz.0.1917': attribute type 1 has an invalid length.
[  807.194515][  T189] usb 1-1: unable to read config index 0 descriptor/start: -71
[  807.218721][  T189] usb 1-1: can't read configurations, error -71
[  807.581951][T13611] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  807.589613][T13611] UDF-fs: Scanning with blocksize 512 failed
[  807.601926][T13611] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  807.609511][T13611] UDF-fs: Scanning with blocksize 1024 failed
[  807.621256][T13611] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  807.628808][T13611] UDF-fs: Scanning with blocksize 2048 failed
[  807.635298][T13611] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  807.642794][T13611] UDF-fs: Scanning with blocksize 4096 failed
[  807.775598][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1922'.
[  807.872727][T13612] erofs (device loop5): cannot find valid erofs superblock
[  808.568664][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  808.575377][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  808.936692][T13629] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1927'.
[  809.557551][T13640] ubi: mtd0 is already attached to ubi0
[  810.195059][ T5620] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  810.376744][ T5620] usb 7-1: too many configurations: 151, using maximum allowed: 8
[  810.442482][ T5620] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  810.481825][ T5620] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  810.504025][ T5620] usb 7-1: Product: syz
[  810.517366][ T5620] usb 7-1: Manufacturer: syz
[  810.540474][ T5620] usb 7-1: SerialNumber: syz
[  810.570002][ T5620] usb 7-1: config 0 descriptor??
[  810.725712][T11226] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  810.830262][  T189] usb 7-1: USB disconnect, device number 12
[  810.885501][T11226] usb 6-1: device descriptor read/64, error -71
[  811.149046][T11226] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  811.305040][T11226] usb 6-1: device descriptor read/64, error -71
[  811.418656][T11226] usb usb6-port1: attempt power cycle
[  811.927828][T11226] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  811.966541][T11226] usb 6-1: device descriptor read/8, error -71
[  812.787424][T11226] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  812.817546][T11226] usb 6-1: device descriptor read/8, error -71
[  813.043911][   T29] audit: type=1400 audit(1783780498.239:985): avc:  granted  { setsecparam } for  pid=13667 comm="syz.0.1939" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  813.079554][T11226] usb usb6-port1: unable to enumerate USB device
[  814.647273][T13685] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6746] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[13685]
[  814.667103][T13685] ufs: You didn't specify the type of your ufs filesystem
[  814.667103][T13685] 
[  814.667103][T13685] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  814.667103][T13685] 
[  814.667103][T13685] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  814.699188][T13685] ufs: ufstype=old is supported read-only
[  816.142495][   T29] audit: type=1400 audit(1783780501.339:986): avc:  denied  { setattr } for  pid=13690 comm="syz.0.1944" name="NETLINK" dev="sockfs" ino=43361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  816.282811][   T29] audit: type=1400 audit(1783780501.429:987): avc:  denied  { map } for  pid=13690 comm="syz.0.1944" path="socket:[43362]" dev="sockfs" ino=43362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  816.639911][T13686] lo speed is unknown, defaulting to 1000
[  817.214754][T13717] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1949'.
[  818.016506][T13725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  818.447449][   T29] audit: type=1400 audit(1783780503.649:988): avc:  denied  { wake_alarm } for  pid=13734 comm="syz.2.1954" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  818.676076][T13737] FAULT_INJECTION: forcing a failure.
[  818.676076][T13737] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  818.683705][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1953'.
[  818.690942][T13737] CPU: 1 UID: 0 PID: 13737 Comm: syz.2.1954 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  818.690982][T13737] Tainted: [L]=SOFTLOCKUP
[  818.690990][T13737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  818.691004][T13737] Call Trace:
[  818.691011][T13737]  <TASK>
[  818.691019][T13737]  dump_stack_lvl+0x100/0x190
[  818.691055][T13737]  should_fail_ex.cold+0x5/0xa
[  818.691092][T13737]  _copy_to_iter+0x5a4/0x1720
[  818.691127][T13737]  ? __pfx__copy_to_iter+0x10/0x10
[  818.691153][T13737]  ? __pfx_timerfd_show+0x10/0x10
[  818.691184][T13737]  ? fput+0x79/0x100
[  818.691203][T13737]  ? __pfx_timerfd_show+0x10/0x10
[  818.691231][T13737]  ? seq_show+0x590/0x870
[  818.691262][T13737]  seq_read_iter+0xdab/0x1270
[  818.691305][T13737]  seq_read+0x344/0x4d0
[  818.691334][T13737]  ? __pfx_seq_read+0x10/0x10
[  818.691362][T13737]  ? lock_acquire+0x1b9/0x370
[  818.691391][T13737]  ? avc_policy_seqno+0x9/0x20
[  818.691410][T13737]  ? selinux_file_permission+0x8f/0x6d0
[  818.691448][T13737]  ? rw_verify_area+0xce/0x6d0
[  818.691475][T13737]  ? __pfx_seq_read+0x10/0x10
[  818.691507][T13737]  vfs_read+0x1e4/0xb40
[  818.691539][T13737]  ? __pfx_vfs_read+0x10/0x10
[  818.691564][T13737]  ? __fget_files+0x215/0x3d0
[  818.691603][T13737]  ? __fget_files+0x21f/0x3d0
[  818.691642][T13737]  ksys_read+0x12a/0x250
[  818.691666][T13737]  ? __pfx_ksys_read+0x10/0x10
[  818.691700][T13737]  do_syscall_64+0x115/0x870
[  818.691734][T13737]  ? clear_bhb_loop+0x40/0x90
[  818.691762][T13737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.691785][T13737] RIP: 0033:0x7f8ab539de59
[  818.691807][T13737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  818.691828][T13737] RSP: 002b:00007f8ab61b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  818.691849][T13737] RAX: ffffffffffffffda RBX: 00007f8ab5626090 RCX: 00007f8ab539de59
[  818.691863][T13737] RDX: 0000000000001f8c RSI: 0000200000000400 RDI: 0000000000000004
[  818.691877][T13737] RBP: 00007f8ab61b0090 R08: 0000000000000000 R09: 0000000000000000
[  818.691890][T13737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  818.691902][T13737] R13: 00007f8ab5626128 R14: 00007f8ab5626090 R15: 00007fffc27a47c8
[  818.691931][T13737]  </TASK>
[  819.245713][T10460] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  819.427693][T10460] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  819.514593][T10460] usb 3-1: config 0 has no interfaces?
[  819.567237][T10460] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  819.657397][T10460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.721970][T10460] usb 3-1: config 0 descriptor??
[  819.846382][T13743] random: crng reseeded on system resumption
[  820.654354][T10460] usb 3-1: USB disconnect, device number 49
[  820.897483][T10755] Bluetooth: hci1: command 0x0406 tx timeout
[  820.956931][ T5619] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  821.115651][ T5619] usb 2-1: Using ep0 maxpacket: 8
[  821.122580][ T5619] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  821.136903][ T5619] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  821.148144][ T5619] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  821.172378][ T5619] usb 2-1: Product: syz
[  821.188717][ T5619] usb 2-1: Manufacturer: syz
[  821.218955][ T5619] usb 2-1: SerialNumber: syz
[  821.268400][ T5724] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  821.457167][ T5724] usb 3-1: Using ep0 maxpacket: 32
[  821.475831][ T5724] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  821.486901][ T5619] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  821.501029][ T5724] usb 3-1: config 0 has no interface number 0
[  821.512425][ T5619] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  821.523141][ T5724] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  821.560061][ T5619] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2
[  821.587377][ T5724] usb 3-1: config 0 interface 184 has no altsetting 0
[  821.620265][ T5724] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  821.648522][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.675087][ T5724] usb 3-1: Product: syz
[  821.692243][ T5619] usb 2-1: palm_os_3_probe - error -71 getting bytes available request
[  821.714267][ T5619] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  821.740079][ T5724] usb 3-1: Manufacturer: syz
[  821.759670][ T5724] usb 3-1: SerialNumber: syz
[  822.128933][ T5724] usb 3-1: config 0 descriptor??
[  822.166495][ T5724] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  822.188028][ T5724] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[  822.233239][ T5619] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  822.299034][ T5619] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  822.373023][ T5619] usb 2-1: USB disconnect, device number 53
[  822.407318][ T5619] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  822.471006][T13788] 9pnet_fd: Insufficient options for proto=fd
[  822.514584][ T5619] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  822.580645][ T5619] visor 2-1:1.0: device disconnected
[  823.071051][T13799] FAULT_INJECTION: forcing a failure.
[  823.071051][T13799] name failslab, interval 1, probability 0, space 0, times 0
[  823.087475][T13799] CPU: 0 UID: 0 PID: 13799 Comm: syz.2.1963 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  823.087509][T13799] Tainted: [L]=SOFTLOCKUP
[  823.087517][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  823.087529][T13799] Call Trace:
[  823.087535][T13799]  <TASK>
[  823.087541][T13799]  dump_stack_lvl+0x100/0x190
[  823.087569][T13799]  should_fail_ex.cold+0x5/0xa
[  823.087595][T13799]  should_failslab+0xc2/0x120
[  823.087621][T13799]  __kmalloc_noprof+0xfc/0x820
[  823.087641][T13799]  ? rcu_is_watching+0x12/0xc0
[  823.087672][T13799]  ? tomoyo_realpath_from_path+0xb6/0x690
[  823.087706][T13799]  tomoyo_realpath_from_path+0xb6/0x690
[  823.087743][T13799]  tomoyo_path_number_perm+0x23c/0x580
[  823.087769][T13799]  ? tomoyo_path_number_perm+0x22e/0x580
[  823.087802][T13799]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  823.087856][T13799]  ? find_held_lock+0x2b/0x80
[  823.087885][T13799]  ? __fget_files+0x215/0x3d0
[  823.087915][T13799]  ? hook_file_ioctl_common+0x140/0x440
[  823.087934][T13799]  ? __fget_files+0x215/0x3d0
[  823.087968][T13799]  ? __fget_files+0x21f/0x3d0
[  823.088003][T13799]  security_file_ioctl+0xd3/0x230
[  823.088033][T13799]  __x64_sys_ioctl+0xb7/0x210
[  823.088064][T13799]  do_syscall_64+0x115/0x870
[  823.088095][T13799]  ? clear_bhb_loop+0x40/0x90
[  823.088121][T13799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.088144][T13799] RIP: 0033:0x7f8ab539de59
[  823.088163][T13799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  823.088184][T13799] RSP: 002b:00007f8ab618f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  823.088206][T13799] RAX: ffffffffffffffda RBX: 00007f8ab5626180 RCX: 00007f8ab539de59
[  823.088221][T13799] RDX: 0000200000000040 RSI: 000000004080aea2 RDI: 0000000000000005
[  823.088234][T13799] RBP: 00007f8ab618f090 R08: 0000000000000000 R09: 0000000000000000
[  823.088248][T13799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  823.088261][T13799] R13: 00007f8ab5626218 R14: 00007f8ab5626180 R15: 00007fffc27a47c8
[  823.088290][T13799]  </TASK>
[  823.088389][T13799] ERROR: Out of memory at tomoyo_realpath_from_path.
[  823.544706][T13803] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1970'.
[  823.925392][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1972'.
[  823.948964][T13811] erofs (device loop0): cannot find valid erofs superblock
[  823.963533][T13811] 9p: Bad value for 'rfdno'
[  824.731941][ T5724] usb 3-1: USB disconnect, device number 50
[  829.001575][ T9937] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  829.176380][   T29] audit: type=1400 audit(1783780514.379:989): avc:  denied  { unmount } for  pid=6746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  829.423862][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1985'.
[  829.441761][T13878] erofs (device loop1): cannot find valid erofs superblock
[  829.453226][T13878] 9p: Bad value for 'rfdno'
[  833.162515][ T9937] usb 1-1: unable to get BOS descriptor or descriptor too short
[  833.198922][ T9937] usb 1-1: unable to read config index 0 descriptor/start: -71
[  833.233663][ T9937] usb 1-1: can't read configurations, error -71
[  833.585091][ T5619] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  833.773943][ T5619] usb 7-1: Using ep0 maxpacket: 16
[  833.804491][ T5619] usb 7-1: unable to get BOS descriptor or descriptor too short
[  833.833469][ T5619] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  833.872109][T10460] usb 2-1: new low-speed USB device number 54 using dummy_hcd
[  833.883753][ T5619] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  833.899146][ T5619] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  833.941312][ T5619] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  833.951314][ T5619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.960751][ T5619] usb 7-1: Product: syz
[  833.965563][ T5619] usb 7-1: Manufacturer: syz
[  833.970300][ T5619] usb 7-1: SerialNumber: syz
[  834.035118][T10460] usb 2-1: device descriptor read/64, error -71
[  834.068407][   T29] audit: type=1400 audit(1783780519.269:990): avc:  denied  { accept } for  pid=13907 comm="syz.0.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  834.200642][ T5619] usb 7-1: Audio class v2/v3 interfaces need an interface association
[  834.236816][ T5619] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  834.275114][T10460] usb 2-1: new low-speed USB device number 55 using dummy_hcd
[  834.435044][T10460] usb 2-1: device descriptor read/64, error -71
[  834.538104][T13931] FAULT_INJECTION: forcing a failure.
[  834.538104][T13931] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  834.560412][T10460] usb usb2-port1: attempt power cycle
[  834.572170][T13931] CPU: 1 UID: 0 PID: 13931 Comm: syz.2.1998 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  834.572205][T13931] Tainted: [L]=SOFTLOCKUP
[  834.572212][T13931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  834.572225][T13931] Call Trace:
[  834.572232][T13931]  <TASK>
[  834.572245][T13931]  dump_stack_lvl+0x100/0x190
[  834.572278][T13931]  should_fail_ex.cold+0x5/0xa
[  834.572304][T13931]  _copy_from_user+0x2e/0xd0
[  834.572331][T13931]  do_ip_getsockopt+0x42a/0x2510
[  834.572354][T13931]  ? kernel_text_address+0x41/0x100
[  834.572379][T13931]  ? __pfx_do_ip_getsockopt+0x10/0x10
[  834.572405][T13931]  ? find_held_lock+0x2b/0x80
[  834.572436][T13931]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  834.572458][T13931]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  834.572484][T13931]  ? avc_has_perm_noaudit+0x145/0x3b0
[  834.572509][T13931]  ? __lock_acquire+0x49f/0x1a40
[  834.572536][T13931]  ? __pfx_avc_has_perm+0x10/0x10
[  834.572565][T13931]  ? find_held_lock+0x2b/0x80
[  834.572600][T13931]  ip_getsockopt+0xa1/0x1e0
[  834.572624][T13931]  ? __pfx_ip_getsockopt+0x10/0x10
[  834.572647][T13931]  ? _copy_from_user+0x59/0xd0
[  834.572678][T13931]  ? copy_from_sockptr_offset.constprop.0+0xe2/0x150
[  834.572712][T13931]  tcp_getsockopt+0xa1/0x110
[  834.572739][T13931]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  834.572769][T13931]  do_sock_getsockopt+0x50a/0x6e0
[  834.572795][T13931]  ? __lock_acquire+0x49f/0x1a40
[  834.572823][T13931]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  834.572850][T13931]  ? rcu_read_lock_any_held+0x6a/0xa0
[  834.572890][T13931]  ? find_held_lock+0x2b/0x80
[  834.572928][T13931]  ? __fget_files+0x21f/0x3d0
[  834.572968][T13931]  __sys_getsockopt+0x148/0x260
[  834.573010][T13931]  ? __x64_sys_getsockopt+0xbd/0x160
[  834.573030][T13931]  __x64_sys_getsockopt+0xbd/0x160
[  834.573050][T13931]  ? do_syscall_64+0x90/0x870
[  834.573081][T13931]  ? lockdep_hardirqs_on+0x78/0x100
[  834.573110][T13931]  do_syscall_64+0x115/0x870
[  834.573139][T13931]  ? clear_bhb_loop+0x40/0x90
[  834.573163][T13931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.573180][T13931] RIP: 0033:0x7f8ab539de59
[  834.573198][T13931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  834.573218][T13931] RSP: 002b:00007f8ab61d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  834.573240][T13931] RAX: ffffffffffffffda RBX: 00007f8ab5625fa0 RCX: 00007f8ab539de59
[  834.573256][T13931] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003
[  834.573269][T13931] RBP: 00007f8ab61d1090 R08: 0000200000695ffc R09: 0000000000000000
[  834.573283][T13931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  834.573296][T13931] R13: 00007f8ab5626038 R14: 00007f8ab5625fa0 R15: 00007fffc27a47c8
[  834.573326][T13931]  </TASK>
[  835.366036][T10460] usb 2-1: new low-speed USB device number 56 using dummy_hcd
[  835.398428][T10460] usb 2-1: device descriptor read/8, error -71
[  835.705023][T10460] usb 2-1: new low-speed USB device number 57 using dummy_hcd
[  835.815949][T13909] syzkaller0: entered promiscuous mode
[  835.822218][T10460] usb 2-1: device descriptor read/8, error -71
[  835.890141][T13909] syzkaller0: entered allmulticast mode
[  835.977727][T10460] usb usb2-port1: unable to enumerate USB device
[  836.076699][T13935] CIFS: VFS: UNC: missing share name
[  836.082120][T13935] CIFS: VFS: Malformed UNC in devname
[  836.658222][  T189] usb 7-1: USB disconnect, device number 13
[  837.502635][T13967] FAULT_INJECTION: forcing a failure.
[  837.502635][T13967] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  837.587749][T13967] CPU: 0 UID: 0 PID: 13967 Comm: syz.0.2005 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  837.587787][T13967] Tainted: [L]=SOFTLOCKUP
[  837.587794][T13967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  837.587807][T13967] Call Trace:
[  837.587814][T13967]  <TASK>
[  837.587822][T13967]  dump_stack_lvl+0x100/0x190
[  837.587853][T13967]  should_fail_ex.cold+0x5/0xa
[  837.587881][T13967]  _copy_to_user+0x32/0xd0
[  837.587910][T13967]  simple_read_from_buffer+0xcb/0x170
[  837.587946][T13967]  proc_fail_nth_read+0x1af/0x230
[  837.587977][T13967]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  837.588009][T13967]  ? rw_verify_area+0xce/0x6d0
[  837.588036][T13967]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  837.588067][T13967]  vfs_read+0x1e4/0xb40
[  837.588098][T13967]  ? __pfx_vfs_read+0x10/0x10
[  837.588127][T13967]  ? __fget_files+0x215/0x3d0
[  837.588165][T13967]  ? __fget_files+0x21f/0x3d0
[  837.588206][T13967]  ksys_read+0x12a/0x250
[  837.588233][T13967]  ? __pfx_ksys_read+0x10/0x10
[  837.588271][T13967]  do_syscall_64+0x115/0x870
[  837.588301][T13967]  ? clear_bhb_loop+0x40/0x90
[  837.588329][T13967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.588352][T13967] RIP: 0033:0x7f2a52f5e68e
[  837.588370][T13967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  837.588390][T13967] RSP: 002b:00007f2a53ed0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  837.588413][T13967] RAX: ffffffffffffffda RBX: 00007f2a53ed16c0 RCX: 00007f2a52f5e68e
[  837.588434][T13967] RDX: 000000000000000f RSI: 00007f2a53ed10a0 RDI: 0000000000000006
[  837.588446][T13967] RBP: 00007f2a53ed1090 R08: 0000000000000000 R09: 0000000000000000
[  837.588458][T13967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  837.588470][T13967] R13: 00007f2a53226038 R14: 00007f2a53225fa0 R15: 00007ffdf39cc988
[  837.588499][T13967]  </TASK>
[  838.375504][T13980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2009'.
[  839.119276][T13988] misc userio: Invalid payload size
[  839.176623][T13988] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2011'.
[  869.997028][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  870.003401][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  945.254854][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  945.261833][    C1] rcu: 	0-...!: (2 ticks this GP) idle=efcc/0/0x1 softirq=73930/73932 fqs=169
[  945.272471][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=86293, q=196 ncpus=2)
[  945.280230][    C1] Sending NMI from CPU 1 to CPUs 0:
[  945.280271][    C0] NMI backtrace for cpu 0
[  945.280289][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  945.280317][    C0] Tainted: [L]=SOFTLOCKUP
[  945.280323][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  945.280336][    C0] RIP: 0010:lock_acquire+0x166/0x370
[  945.280364][    C0] Code: bd 00 00 00 65 8b 05 c9 34 7e 12 85 c0 0f 85 ae 00 00 00 65 48 8b 05 01 ee 7d 12 8b 90 9c 0b 00 00 85 d2 0f 85 98 00 00 00 9c <8f> 04 24 fa 48 c7 c7 65 95 29 8e e8 3a c9 d3 09 45 89 e8 44 89 e1
[  945.280383][    C0] RSP: 0018:ffffc90000007e08 EFLAGS: 00000046
[  945.280399][    C0] RAX: ffffffff8e891480 RBX: 0000000000000000 RCX: 0000000000000001
[  945.280411][    C0] RDX: 0000000000000000 RSI: ffffffff8bbc03e6 RDI: ffffed1017085083
[  945.280423][    C0] RBP: ffff8880b8428418 R08: 0000000000000001 R09: 0000000000000000
[  945.280435][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[  945.280446][    C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[  945.280457][    C0] FS:  0000000000000000(0000) GS:ffff888123deb000(0000) knlGS:0000000000000000
[  945.280475][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  945.280487][    C0] CR2: 00007f2a52feb540 CR3: 000000002718c000 CR4: 00000000003526f0
[  945.280499][    C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[  945.280511][    C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  945.280524][    C0] Call Trace:
[  945.280531][    C0]  <IRQ>
[  945.280545][    C0]  _raw_spin_lock_irq+0x36/0x50
[  945.280570][    C0]  ? __hrtimer_run_queues+0x1b7/0x9c0
[  945.280597][    C0]  __hrtimer_run_queues+0x1b7/0x9c0
[  945.280628][    C0]  hrtimer_interrupt+0x3e5/0x940
[  945.280663][    C0]  __sysvec_apic_timer_interrupt+0x109/0x470
[  945.280692][    C0]  sysvec_apic_timer_interrupt+0x9e/0xc0
[  945.280718][    C0]  </IRQ>
[  945.280724][    C0]  <TASK>
[  945.280730][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  945.280753][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  945.280785][    C0] Code: a6 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 79 12 00 fb f4 <e9> bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  945.280802][    C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000246
[  945.280816][    C0] RAX: 00000000037ce05f RBX: ffffffff8e891480 RCX: ffffffff8bb922d5
[  945.280829][    C0] RDX: 0000000000000000 RSI: ffffffff8e1a3122 RDI: ffffffff8c400c80
[  945.280842][    C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d
[  945.280854][    C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000
[  945.280865][    C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000
[  945.280881][    C0]  ? ct_kernel_exit+0x125/0x180
[  945.280910][    C0]  default_idle+0x9/0x10
[  945.280926][    C0]  default_idle_call+0x6c/0xb0
[  945.280943][    C0]  do_idle+0x3a7/0x5b0
[  945.280968][    C0]  ? __pfx_do_idle+0x10/0x10
[  945.280990][    C0]  ? finish_task_switch.isra.0+0x14c/0x10c0
[  945.281019][    C0]  cpu_startup_entry+0x4f/0x60
[  945.281044][    C0]  rest_init+0x251/0x260
[  945.281062][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  945.281086][    C0]  start_kernel+0x48e/0x490
[  945.281116][    C0]  x86_64_start_reservations+0x24/0x30
[  945.281146][    C0]  x86_64_start_kernel+0x12b/0x130
[  945.281176][    C0]  common_startup_64+0x13e/0x158
[  945.281210][    C0]  </TASK>
[  945.281266][    C1] rcu: rcu_preempt kthread starved for 10164 jiffies! g86293 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  945.623085][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  945.633047][    C1] rcu: RCU grace-period kthread stack dump:
[  945.638918][    C1] task:rcu_preempt     state:R  running task     stack:28824 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  945.652449][    C1] Call Trace:
[  945.655719][    C1]  <TASK>
[  945.658649][    C1]  __schedule+0x125c/0x6730
[  945.663178][    C1]  ? __pfx___schedule+0x10/0x10
[  945.668026][    C1]  ? find_held_lock+0x2b/0x80
[  945.672706][    C1]  ? schedule+0x225/0x2c0
[  945.677043][    C1]  schedule+0xdd/0x2c0
[  945.681111][    C1]  schedule_timeout+0x127/0x280
[  945.685959][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  945.691329][    C1]  ? __pfx_process_timeout+0x10/0x10
[  945.696628][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  945.702434][    C1]  ? prepare_to_swait_event+0xdf/0x4a0
[  945.707896][    C1]  rcu_gp_fqs_loop+0x1a9/0x900
[  945.712657][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  945.717942][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  945.722877][    C1]  ? rcu_is_watching+0x12/0xc0
[  945.727640][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  945.733451][    C1]  rcu_gp_kthread+0x179/0x230
[  945.738124][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  945.743317][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  945.749129][    C1]  ? __kthread_parkme+0x18c/0x230
[  945.754160][    C1]  ? kthread+0x13a/0x450
[  945.758407][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  945.763602][    C1]  kthread+0x370/0x450
[  945.767674][    C1]  ? __pfx_kthread+0x10/0x10
[  945.772272][    C1]  ret_from_fork+0x72b/0xd50
[  945.776868][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  945.781985][    C1]  ? __switch_to+0x800/0x10f0
[  945.786670][    C1]  ? __pfx_kthread+0x10/0x10
[  945.791272][    C1]  ret_from_fork_asm+0x1a/0x30
[  945.796056][    C1]  </TASK>
[  945.799065][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  945.805378][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  945.815873][    C1] Tainted: [L]=SOFTLOCKUP
[  945.820187][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  945.830248][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  945.835906][    C1] Code: a6 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 79 12 00 fb f4 <e9> bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  945.855525][    C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242
[  945.861586][    C1] RAX: 0000000003f9c9a7 RBX: ffff88801ea82540 RCX: ffffffff8bb922d5
[  945.869551][    C1] RDX: 0000000000000000 RSI: ffffffff8e1a3122 RDI: ffffffff8c400c80
[  945.877513][    C1] RBP: ffffed1003d504a8 R08: 0000000000000001 R09: ffffed10170a678d
[  945.885473][    C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000
[  945.893432][    C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000
[  945.901400][    C1] FS:  0000000000000000(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000
[  945.910322][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  945.916898][    C1] CR2: 00007f93808dcff8 CR3: 0000000076285000 CR4: 00000000003526f0
[  945.924860][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[  945.932822][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  945.940787][    C1] Call Trace:
[  945.944061][    C1]  <TASK>
[  945.946980][    C1]  default_idle+0x9/0x10
[  945.951219][    C1]  default_idle_call+0x6c/0xb0
[  945.955976][    C1]  do_idle+0x3a7/0x5b0
[  945.960048][    C1]  ? __pfx_do_idle+0x10/0x10
[  945.964635][    C1]  ? finish_task_switch.isra.0+0x14c/0x10c0
[  945.970534][    C1]  cpu_startup_entry+0x4f/0x60
[  945.975300][    C1]  start_secondary+0x21d/0x2d0
[  945.980063][    C1]  ? __pfx_start_secondary+0x10/0x10
[  945.985355][    C1]  common_startup_64+0x13e/0x158
[  945.990316][    C1]  </TASK>