last executing test programs:

2m47.111989661s ago: executing program 0 (id=150):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x9f, 0x76, 0x31, 0x20, 0x7ca, 0xb800, 0xd927, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x66, 0x2, 0x90, 0x40, [{{0x9, 0x4, 0xe1, 0xc, 0x0, 0x3, 0x0, 0x0, 0x10}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x8000d, 0xfffffffc)
syz_open_dev$vim2m(&(0x7f0000000040), 0xd11, 0x2)
openat$null(0xffffffffffffff9c, 0x0, 0xc1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000780), 0x12)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
bind$x25(r1, &(0x7f0000000080), 0x12)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xc, 0x7}, 0x31)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={'ip6tnl0\x00', 0x47})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x4a5d4e986d543be1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x50)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x28, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0x3, 0x0, 0x0, @str='\x00'}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
clock_gettime(0x0, &(0x7f0000000100))

2m44.183700575s ago: executing program 0 (id=159):
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

2m41.772623962s ago: executing program 0 (id=168):
kexec_load(0x5, 0x0, 0x0, 0x3e0000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, 0x0, &(0x7f0000000000)=0xfffffffffffffdb3)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000100)=0x200000, 0x4)
ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000340)={0xce, 0x0, r3})
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func_proto, @ptr={0x1, 0x0, 0x0, 0x2, 0x3}, @float={0x1, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x1, 0x30, 0x3e, 0x0]}}, &(0x7f00000003c0)=""/169, 0x42, 0xa9, 0x1, 0x0, 0x10000, @value=r5}, 0x28)
readahead(r6, 0x5, 0x1)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r6, @ANYRES64=r3, @ANYBLOB="0a001800030357520303ed0500ae000000000000000000", @ANYRESHEX, @ANYBLOB="05000000001ffedbdf254400000008000300", @ANYBLOB="2f57ccd707ff4d6b9f81260e8a5f62b8c11245faa4d7e054553db8b60c8a34d49044b46c945b16af3728e770ce0ddc05fed040bcbeeeb33a6413a8619c5e02591c0a25abc72f7b17d53c7fb1c2343e587ba083da862fefbee08dda917a6f6740af3de071fa2a903bc85ed8395ca8b549a84074852e81a2828dccdd330006f1d9bce293ae7f19"], 0x74}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

2m41.010519372s ago: executing program 0 (id=172):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)
syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x69)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000008, 0x10, 0xffffffffffffffff, 0x400000)
read$watch_queue(r2, &(0x7f0000000300)=""/176, 0xb0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x100102, 0x50)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x2, 0xee01, 0x0, 0x0, 0x0, 0x43, 0x5}, 0xb38e, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3})
sendfile(r3, r3, 0x0, 0x6)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f00000003c0)=""/4096, &(0x7f0000000100)=0x1000)
syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
socket(0x10, 0x803, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

2m40.637079485s ago: executing program 0 (id=175):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000600000023000000fdffffff", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x2, 0x1, 0x1, 0x4, 0x3, 0x40}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400}, 0x8000004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='affs\x00', 0xc0800, &(0x7f0000000240)='/dev/cpu/#/msr\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB="2c00051464e50f3a445c89c463ec77136187a61df8d908696812d0ea550c1c7564ff72da960ad1d6bb56d7d2d4912f36ce75557a4d06"])
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f00000001c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000300)={r7, <r8=>0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r8, r9, 0x0, 0x1f5, 0x0, 0xfffffffd, {0x6, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x8005, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000002c0)={0x4, 0xe, 0x1})

2m39.180307323s ago: executing program 0 (id=180):
socket$packet(0x11, 0x3, 0x300)
socket(0x1e, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}]}, 0x5c}}, 0x0)
syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x498, 0x0, 0x1, 0x164}, &(0x7f0000000dc0), &(0x7f00000001c0))
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/82, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0xae, &(0x7f0000000340)=""/174}]})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x17})
r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x38)
r6 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r6, 0xab00, r7)
ioctl$NBD_DO_IT(r6, 0xab03)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

2m24.093623005s ago: executing program 32 (id=180):
socket$packet(0x11, 0x3, 0x300)
socket(0x1e, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}]}, 0x5c}}, 0x0)
syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x498, 0x0, 0x1, 0x164}, &(0x7f0000000dc0), &(0x7f00000001c0))
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/82, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0xae, &(0x7f0000000340)=""/174}]})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x17})
r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x38)
r6 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r6, 0xab00, r7)
ioctl$NBD_DO_IT(r6, 0xab03)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

14.287931975s ago: executing program 5 (id=681):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000400)={0x0, 0x12, 0x1, "98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5416, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0x3, &(0x7f0000006380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x9e}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @exit, @alu={0x7, 0x0, 0x8, 0x3, 0x3, 0x6, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0xfffffffffffffe7c, 0x10, &(0x7f00000002c0)={0x0, 0x3, 0x4, 0x80c}, 0x10}, 0x94)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x9, 0x3, &(0x7f0000000140)={0x9, "43a1897e5360070d6750bef5694e081a20000000000000000200"}})

11.047385066s ago: executing program 5 (id=690):
r0 = socket$l2tp(0x2, 0x2, 0x73)
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/image_size', 0x1ebe83, 0x1e9)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
socket(0x5, 0x4, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f0000000140), 0x0, 0x20000800, 0x0, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48})
openat$fb0(0xffffffffffffff9c, 0x0, 0x101800, 0x0)
r6 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0<uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfct\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xa5\xfa\xb9\xc8\x85\x16\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7\x0e\xe7v\xb2{\xaa\xfc)\xcb\xd4D\xf6#%I\xad\xaap\xddX\x14e\x11\xd8\xb3\xe9\xf2@\x97\xfa\x16\xe9\xb4l\x0e9\xf4\x9e\xefT\xfd\x9d\x18\xba\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00X\xc1\x9c\xd7\xed\xad*\xc6\xc9\xd6\xe6\xfe*t\x06\xeb]\vr-\x04{\x86\xcb\xbb4?\xa1\xb5S\xb8\x10pg\xbd\xce\x84\xe9\xfdZ\f\xeb\xd0c\x02\xdc\x90\t\x9fRAC8\xa8', 0x2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="5c00000014006b05c84e6e230675f811000000440002005817d30461bc24060000000000000082149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408040000e786a6d0bdd70000b6c0504bb9189ddd2746aff3f691647ea36ea08c7ea993e9bd1c1b78000000000004c1d2b91078f49d912389b6c4d0ee4912", 0x7b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80)
fcntl$addseals(r6, 0x409, 0xe)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
ppoll(&(0x7f0000000000)=[{r0}, {0xffffffffffffffff, 0x40}, {r0, 0x4000}, {r1, 0x300}], 0x4, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r7 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$selinux_context(r7, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f6, 0x0)

10.235951035s ago: executing program 2 (id=696):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000400)={0x0, 0x12, 0x1, "98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5416, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f00"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0x3, &(0x7f0000006380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x9e}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @exit, @alu={0x7, 0x0, 0x8, 0x3, 0x3, 0x6, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0xfffffffffffffe7c, 0x10, &(0x7f00000002c0)={0x0, 0x3, 0x4, 0x80c}, 0x10}, 0x94)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x9, 0x3, &(0x7f0000000140)={0x9, "43a1897e5360070d6750bef5694e081a20000000000000000200"}})

10.035352884s ago: executing program 1 (id=697):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c0002800400108004000f"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (fail_nth: 4)

9.722531498s ago: executing program 1 (id=698):
socket$l2tp(0x2, 0x2, 0x73)
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40000333}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0})
io_uring_enter(r0, 0x847ba, 0x300, 0xe, 0x0, 0x0)

9.566424485s ago: executing program 5 (id=699):
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='cmdline\x00')
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x71096000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314010000000000000000000900025b73797a30000000800800410073697700147ed37afd48950d7d4b762161003300766c616e3100"/68], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)
read$FUSE(r2, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x73)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc2dc}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'})
r8 = socket$nl_route(0x10, 0x3, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080))
socket(0x1a, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'bond0\x00'})

8.231685732s ago: executing program 2 (id=703):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8480, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xff, 0xec, 0x20, 0x789, 0x160, 0x2cd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x2, 0xe6, 0xfb, 0x6a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x18}}]}}]}}]}}, 0x0)
rt_sigprocmask(0x1, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000100)=@reiserfs_5={0x14, 0x5, {0x4, 0x8, 0x7, 0x10, 0xe55}}, 0x800)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/55, 0x37, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000080)={0x28, 0x1000000, 0x0, 0x0, 0x0})
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000000)={0xa, 0x0})
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="050f59000154100a6c717d5b82d6740559f85976d9e2ac071d5289a30590e656c80ca1a34853b9fcdec01a17186f000612dea26b42ec5513884b8f3b488049eab64d2be4c607cda79a8d28557616cf86a6"]})
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000540)='./file0\x00', 0xffffffffffffffff)

7.573056021s ago: executing program 1 (id=704):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)
syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x69)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000008, 0x10, 0xffffffffffffffff, 0x400000)
read$watch_queue(r2, &(0x7f0000000300)=""/176, 0xb0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x100102, 0x50)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x2, 0xee01, 0x0, 0x0, 0x0, 0x43, 0x5}, 0xb38e, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3})
sendfile(r3, r3, 0x0, 0x6)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f00000003c0)=""/4096, &(0x7f0000000100)=0x1000)
socket(0x10, 0x803, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1)
io_setup(0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

7.13822861s ago: executing program 1 (id=706):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8480, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xff, 0xec, 0x20, 0x789, 0x160, 0x2cd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x2, 0xe6, 0xfb, 0x6a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x18}}]}}]}}]}}, 0x0)
rt_sigprocmask(0x1, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000100)=@reiserfs_5={0x14, 0x5, {0x4, 0x8, 0x7, 0x10, 0xe55}}, 0x800)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/55, 0x37, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000080)={0x28, 0x1000000, 0x0, 0x0, 0x0})
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000000)={0xa, 0x0})
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="050f59000154100a6c717d5b82d6740559f85976d9e2ac071d5289a30590e656c80ca1a34853b9fcdec01a17186f000612dea26b42ec5513884b8f3b488049eab64d2be4c607cda79a8d28557616cf86a6"]})
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000540)='./file0\x00', 0xffffffffffffffff)

6.59213793s ago: executing program 4 (id=707):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24048090}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x20}}, 0x4000000)
r1 = syz_io_uring_setup(0x6806, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000))
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

6.249923539s ago: executing program 3 (id=708):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000000)={0xda44, 0x8725, 0x9, 0x100})
syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000080000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x2, 0x5, 0x2, 0x0, 0x2})
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x80007fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xce, 0x1, 0x6, 0x3}})
timer_create(0x4, &(0x7f0000000180)={0x0, 0x2d, 0x0, @tid=r1}, &(0x7f00000001c0))
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0c1d0500c900"], 0x8)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001200010a000000000800000007020000"], 0x14}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50)

5.238879993s ago: executing program 3 (id=709):
io_setup(0x3, 0x0)
r0 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x1246, 0x80, 0x1, 0x60})
r1 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0x6de6, 0x800, 0xfffffffe, 0xbfe00000}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", <r5=>0xffffffffffffffff})
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168", r5, <r7=>0xffffffffffffffff})
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400", <r9=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", <r10=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r10, <r11=>0xffffffffffffffff})
close(0x3)
ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r11})
io_uring_enter(r1, 0x47f6, 0x1000000, 0x2, 0x0, 0x300)
close_range(r0, 0xffffffffffffffff, 0x0)

5.161885596s ago: executing program 2 (id=710):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601030000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014002000000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x80800)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet(0x2, 0x4, 0xc)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6, @in6=@private2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8)
r3 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0)
ioctl$EVIOCSCLOCKID(r3, 0x40084504, &(0x7f0000ffcffc))

5.114040104s ago: executing program 4 (id=711):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x20, 0xb, 0xb, "c3925366257f56d2c20df0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000200), 0x0}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0xc}}, &(0x7f0000000100), 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2f8, 0x2a8, 0x2a8, 0x2f8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0xffffffff, 0xff, 'pim6reg0\x00', 'netdevsim0\x00', {}, {}, 0x2f, 0x2, 0x41}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@mcast2, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x0, 0x1}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x6, 0x5, 0x8, 0x2, 0x5], 0x6, 0x5}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

4.963471306s ago: executing program 3 (id=712):
landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, 0x0, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
shutdown(r4, 0x1)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)

4.811970819s ago: executing program 2 (id=713):
r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
pipe2$watch_queue(0x0, 0x80)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0xc0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x1, 0x32}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x0, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @empty, 0xff000000, 0xffffff00, 'veth1_to_batadv\x00', 'nr0\x00', {}, {0xff}, 0x5c, 0x1, 0x7f}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3ff, 0xa3b, 0x7, 'snmp\x00', {0xfffffffffffffffa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]})
shmctl$IPC_RMID(0x0, 0x0)
io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x1000, 0x0, 0x28b})
flock(r0, 0x2)
read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002240)=ANY=[@ANYRES16], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4008, 0x20c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.212053098s ago: executing program 5 (id=714):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@delsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x4d5}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}]}, 0x3c}}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), 0x95)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00"/216], 0x190)
syz_emit_ethernet(0x46, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xd5, 0x4, 0x40, 0x1ff}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
recvmmsg(r6, 0x0, 0x0, 0x122, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) (fail_nth: 3)

4.194415403s ago: executing program 1 (id=715):
r0 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setresuid(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x2, 0xfffffffe)
setsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000280)="e0480966d0459df4a8ff4cafa165775a6fd0ae1d813fbf679b783bdc2c05369d7568283cb1d41abd53af7f3f0d3485cd3d04c7b6239643d7b6de106a9d08ff6f50f139a3302bd4b15debc8de57009e9765fd33f611ac1077c42c6180777467a957ca5ec5941adb8da3bdec4db5d7658065499661faff140dc6cd30586fe81989c03f50ba90e84f69f47125aa391a378777826d1dbd2519957fa51387a3d4b611547c1f2e00", 0xa5)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6}, 0x10)
sendmsg$nl_route_sched(r6, 0x0, 0x20048054)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)

3.311791281s ago: executing program 3 (id=716):
io_setup(0x3, 0x0)
r0 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x1246, 0x80, 0x1, 0x60})
r1 = syz_io_uring_setup(0x1e25, 0x0, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x18e01, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000080)=0x1, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", <r6=>0xffffffffffffffff})
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168", r6, <r8=>0xffffffffffffffff})
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400", <r9=>0xffffffffffffffff})
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, 0x0)
r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000100)="8c", 0x1}, {&(0x7f0000000000)="91", 0x1}], 0x2)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r12=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2})
timer_settime(r12, 0x1, &(0x7f0000000500), 0x0)
ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", 0xffffffffffffffff, <r13=>0xffffffffffffffff})
close(0x3)
ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r13})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x9}, 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

3.203223788s ago: executing program 5 (id=717):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r2, 0x6, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80)
acct(&(0x7f0000000180)='./file1\x00')
acct(0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10})
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f000030a000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x2cc, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x8, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x29c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x6}}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_BASIC_POLICE={0x24, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_BASIC_ACT={0x260, 0x3, [@m_tunnel_key={0xcc, 0xf, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}]}, {0x3a, 0x6, "e55fa15b0676e00a9b9ea4fb92d15179da93faa8199989a09e79fed8b6b4af86c4d3dd924c74ca0b95768e2b5fc10c070dd5599a9d96"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x50, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x9ff, 0x5, 0x747, 0xb}}]}, {0xc, 0x6, "aa72702d77e3f4fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x140, 0x10, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x5, 0x4, 0x7, 0xc3ed}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x1, 0x3, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffff7f, 0x0, 0x2, 0x4, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x20000000, 0x179}}, @TCA_DEF_DATA={0x6, 0x3, ')\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0xa2, 0x6, "7260547954edc2452167c5e768d449cb703bef02e30d83861de410a2089fb5c29d97a6308c51c8ab335c44283a175719268edc35b48cd28e93326aaa636d12dcf20b829be2f00665a3dc3d6726874455dc857606c13ac68edff3468663df2b9340cc2e7ba025ca5961ec02616b640af41eeb67b49ec0f3234d4b2fc35ec19f1a7a8ca009277f0a2c324567aa2796fa21f12bd225143aacc287748ecc96ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
sendmsg$nl_route_sched(r3, 0x0, 0x0)

1.815493658s ago: executing program 2 (id=718):
r0 = syz_io_uring_setup(0x1efb, &(0x7f0000000140)={0x0, 0x729, 0x3010, 0x4, 0x1}, &(0x7f0000000100), &(0x7f0000000480))
r1 = epoll_create(0xaf2)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)=@userptr={0x4, 0x0, 0x4, 0x10, 0x6, {}, {0x1, 0x0, 0x3, 0x6, 0xd, 0x8, "abde1257"}, 0xfffffff7, 0x2, {&(0x7f0000000280)}, 0x8, 0x0, <r2=>0xffffffffffffffff})
epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x80000001, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="3abd11ec7b118f569cfcf7bb9ede5cabcf639b3023f16e310019fe6e8ceb0be2500f7b6686dd9f40fff521a39e21600e992c3f12ccb04fc204be36f895da6204255e07179e96b993325faf8b8bf8c46c9b4d2f8a83499d8c2a0d370e7bee19f5af", 0x61}, {&(0x7f0000000600)="c5276a5508d6b18e6ce855eea0ae0fa2f721e8091e6928864bfea597d8a0d47019e171386021c7d34c4bd539f55bec195f847c649886e0729837718b685e0db47fec9a1e15d91709733b1c26451f93faceff4cc2d5ebf123d71085c643e8d3694764dc08c186f83dc270dcdb99c5dd87be70621e26bf68aefcf0286e71f79831a93259b4bf3e", 0x86}, {&(0x7f00000000c0)="c19bfc5a5a726d971791538836e21d32b3accd7dbb53f7ec96cedddf565b2f2e", 0x20}, {&(0x7f0000001300)="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", 0x1000}], 0x4, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x90, 0x8000}}, {{&(0x7f0000000c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000c80)="ee3e0d808f42f5459c13fb5be0c1bf1f89528de58ae165f3478185af7075f2ee4847d94c5e971e327b69a34be4bebf7b547e47751f2cbafca5e948645ed0e933be70af8828ce5bf3839ca61ce74f9ca4af2314e49b3b2a44c321a5ec4daed9c9db8ca8475672197122306ab8bfeefa8b383b746a51c9b472953c95fbce0fe151", 0x80}, {&(0x7f000000a3c0)="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", 0x1000}, {&(0x7f0000000d00)="1805ed4a17dad7d7e3657acd5fc5a968c29e71b36369cbb29c4d9f5b4de3f6395434242c88c0b8603667de5b5deaea7084b2cbddb5b689b7fa1bb4a613a4720f9974b6b079ca0e82ca080f98f5eabf8ec2725afc059ffa5b85e95474f5352170d8a334a3788def724aebe37dfa7b303ec41492ca0d56d45fcb0e0881b45479e3f9", 0x81}, {&(0x7f0000000dc0)="15876e0eb966ed699308e9cedac1fe5cae2be30f35798ba012763d6146ce6a3760950c2ec3319a4667c8f1d3", 0x2c}, {&(0x7f000000b3c0)="564d7facf21384a30f8ada38c18352368d9f5502d6a78532e7df37f8df1012293d89e36085ec2fa8597ccde2be40ae5d1bdf596b29cbc347812da028504dc1647ab1bd7583e461d4f2cf144e6b5053b1220dcc549d909317e7cdf42cb059f3a2f9a25e1e6acf8fb1df1918e0394a07c98d8ae31382d001c350ee47343d79c8f103623baed36102aa0f9d40cd5ed6700df8581d9a86b8811d589fd770e8f7883dee1d0160a3ad6ee976fff2e716f2c5566a871d6e4261df7a0669add6bf4ab0a53bea45117a1594e6964940cf835d1b566034c3e3ce1ed759045295297acee67c8803544c7b71a4fe7ac6eedc49a62e4558be940e0d20fb6bb3870cb58980d2b7823fca4450923d0d152c8e09d2b3688790cbd4cadb9d93d10be2b91d4180d70c252685be3f043362b29b66d49115a56d41c3a17aabd67462c48fa38bf91180b73b8439377e66c6001206ada134028e88e4f2e41a942abb7d7e7f2be67c6214358db7cc03b9cd212f89cd85b99d41b42bc1d9ecbeb3a8ed057467a3881ff04b2c0ce1cd9042961e6d8fe32c703f2ca74f0605ed75b993ca2d722c68628c23716a00a2be2801ed5e27f03c9a5989ede5d255c9f4d94408273b483ca85aaab56479bad353d00a90013bc8e95fe72bf36edc2efba2a648e1f4f0448133b1533628f90c16be7bdeead27e6da8c4a5c2ee8597f65312d61684813df365857c9fbb012a4bf7b8ef93f6746f60e9a87c8d2db476300f2f3d8e3c75ba08905ccdcee7463395e6a03496e9a515855f5b9c16899b0321ac949378a5f29df5bb8434ae5213011c6da6b0b0246114743acd05d2c87bb718d09168faaf000c67daf8810913d8e5d5639ed72d18ceca0859b7ed6acf98a1d4e3baa3ab3e00090ec0c664c9b06af2b5a43a71abe2504782424a62c9cd4e670c654df75b05dea09b300b7cbe01902101c37a70591b67bdfc867ad4b2dfd49478ccf75cb9950545f5e4684ab27c8fde75b3e75ea9d3b90655611ce2a5b17ef1039ee7d5a00b5451290f1e9d61f4e5713f6aaa75074b8c048d854e9187c443205129b144335f082b1d4518ac9c4a2c74b4f8b3b584856ef83ce64c9c6e64126cb26965fb5173717bd80ebf68c73ed2ef607521a95323230b04495fe02be93da66859ca6e526d43a9671a89d56bfd06240776f910041da36c63e497cedbdc986cc0b07bb3d1ab8f159c81f05686a47ffdf6e315e1fa38bd1639f6e4ca34729a68b0a92e7974c1e9d9adc276f96d41dcbdc759a1f9a8dea0b3a4749458796e1dacb5561fe5481f4415d626ce4474498589ec469dcb5d2105f0a648d13f7f4d897513e5de0f9b1598e63c286cf736c715624b45d0b02adac48e137a9d068b67a751b862729b0797d92e6ef9e93cd3f0de8bd3d02e296cbf79e33456805ec90943eb772cdf6309d178fe30f6e8dab4f92f44c30f52b3319287f867b79ea19a811d813da9d1f7bdabc0b734e541f751d3ddcd3f0539708c52ae396538f6ea5c351b01eb021b698b4714678c37fab31653e34abd26d4a95925ebb1522cbf4bc4f194fd77194d1094865a97d1e8603789dc06e46379a00faa451af0fe44fe7e833a1baf0d2620a41e6ff3c6a796c4b2b27ba52f4f51ddc4631ad66f39085f8d830845fe6a5ced199e9a7b966e29a943aa8d703a195b07cf09a933b950a42ca00cef019d5a7dae977b5e2e6dcb9fc9da5257325ed8b2bc0b2769e0a13ff415d7c7cf69e94505e97bef2ae3d34fd9df67b6f65a5cf5f2d41d7d57de5b71b95bb3092257eaf021c7892e4a5f141340d23e5f5a2a45aff29d397e708f7584abcb9bba898da711ba6b0c4836d87cdcd001511e2a60933525087bcb77b2161851c8e6a8d0c5e16b27dbda7ce0a4d84983d557de41a75a6b957823b4174ca1eddac982785a7434746f6a0808615009f66bd95c96f06549f52bced195037e977e1e84cf9b9c48b84dc974f1821bc1f3febdadc5bc562a7b252ecf73c7417af70f0676ef9cf0220d8819bf3032a7c33e8ac2deca8a8a2d4c74636cf2374207de7b05f7851f43f930ea950fd87a99bed03a40fbb2458cedf8806f5ea9d039746764af6afe4cedc0e308072c31cc11438d63b6ed8219a48d3143e7ff915990dd8848e33158d6d4a30fb314d71c3cc26db5823ffdcffd8fab43318eec25ab343b065de580528ce8cf3e2a8d01384e1756cb9df1a30162cfebd9ede16a96e60dc5ebf77ad68db9c67b19f6a7c00f12a4a6210f028d9bd7875b99b299514799f5c4d82ec9e19f61222d1e864bf881f42d157c98d5b57e7ba79e3843c7239b9b9059b7c0950d73deb372a2f2c6238b7d56bab27dbf15d5a3796988be873901443055262bf5a809fad758157d41985abbdba9072f09ba8d437f3ae0335dc218551e58166b4a0ea3bb1f87a565c173017892d9d9c7dc3c816126275da98ba4b91e9489bd1438be7eed603cfb1ea1137d18c3ff1bfe28611c79f11d0f34e6cb8f4ba3807d96c243718b5ea2f78d30019e2cd5264bb1f126dce6470ebd6bbae4e1c6707cbd59afe009bffe2c06c0e0266883daa206a527bfd2aabf47a8f0e79829a22eb896bfb2c96bd1ccb930dfd65c59c0cae014c5d6e28d831323710ccac53e66f00017da6bb697bd2f724bba7a238092f80ad719010840f98b67dc10248577f284a29a2763707007094fb0f2afd36cd2730d3688c2e62b9e3f47a7c8fb42ee03306cd30445a6bea6685bd4b09961b5e1e8089ea9014d874ba232c4abf6644d72077d96e1f88b33e7b8b3ae4f9d66cb79a5274f8144a6a49321697cd134920904f62957f74babd81daadf74261e7c27d4df88887ac2fe7bd518db612aed14dbbe93ba0e227418fd0c9bfea628f416fd370fe10b40748ccefbb8ab165bf92238e034b3a151a977461fdf78f9527b935e7a8540b7fd54622595adf6ad751f89f6a1f74106b50f250cc06aa34faf1c18653ae6bc1b4cad34e20f5efdfc17df68b6e99e5229f8f72fb9622622d686e4e70201d3a58257d73ab3266973a3daa79fcfb4cdff68bc99539428c9c9926a125dd48e494f3f8ccb65d340f3e33c915d45ba79975f04b05f4f9ff119583d4e880a5492a9517bd591e17d4501010d6e01e0faaba5c137678ba0aea978c1b90fa477597a8783156c977607da86f0f7757338015bd35de8e58fb8855805c45c43f4bf105fbfa9a7170c214f5286329dfb601fc1572a05b47d23cbf8522e2d59a3c248d0b6679ae917dd015b7c467b3104eb0d6b1b90254c554e1748ee825e10d8cffb9bcaba0d7a7d8e2ad86d473d2284f734b1f3044255f0bcd35085d1a8154f889da2b9a0123f2f172b9ffede79d8357bac6408bb6352de901ec040b1568b2d187d958b10e9041b1ed4150170e38e916ac5ad737d91ff3237e1fab2536f3483000f22a956d3a48f7c6cfd547071ba7a033bff0347df0ff25536369ff924c313eeb706845aac25db93ecd3b2148a640814c7714593c12ce68b299fadb74dbc87918173f3b57dda386fcc9a391155d2dd951b69dd1d22ab79dd077e112936e3a648df0b746909e5abcbba56c49fac8c5785e3c340cb92adedbdcac7b7ae5be2365c1501a960c8afb5caaa179b85f2d84f0710bad734fe7ce2a310e91430f5cbcf6ab7871142e0a791fcf3ab6a57ff2f456bd8ff92f41105c6296748834cbb6340011e09907b8cbd17ee37a9686033d20263635b3573ae35b44715383afd84a2cc4c78e473eac6a4c76b5e1a79ebc8b2854f515dca3fb23bae9265f4f5796a360924c94032b3358e54945c76a8a901e5540cf6b01aeb5d89b4b4892c67f7bf21d7936875e6bf632cbc263745959df53ca27ca5a1a4d783a41c0a4c4efad5eb1048ef16c845eb151804213f5008205a276327603540f21d3a748b04f56303a3bfe43a69aab32d5cae77deb14871f466c841ec0259a3d46eb944fa6bac6f1cddfb1461da756d9247673fce3b10c8b9bbc9e41757c1a76b972f3b5679548f5c3e027dc7618b425b4a6b1459aaea6f04276b3e086b135a6e2bc53649814cb12eb34223057b37bf3c9b2812e778bacfb5eab7c360c27533963009e0e3e78ad796bad6954b341ac3d05dc612b6a3927fb62f888ed9b7947499371cf2deb44d9dd7fca08180eb1b17d7ba30c9d96ad23b329bee2d3dd5bc447509254b27e4e24850be506df1aeb0502d2b8da1e054870ae1cff59c84f77031491141bcdbe778f6eb2822551f1231b28ddc9ec2f1204dbfde637c7b0e9d8946d6ea4850e51cf1a37854de2772490a8c1497adb7e0885965d5be1dc21f396cf1923c4e04ad14504196b87ab7f8f287b44ff9494d31ce1ec0fa81e510dcd21f082ebe2ef3696ee8c71575435b658a4a772445cf9f07f1b265e42f1b9898313ea86507c3481cd8bb14a5e8ceb41e13e07c6354d691f19f45ec5eba0ac706c8bc0351ea89e6ddaf30682a982014d9626cd6fb46e5d48bfa830fca6e09dea6060b4fc24d4069229fb7c27481fef34561c9d75440c818e68a1ea49c06410c59807d0f29dd805a3021ed1ef795dcf04b476638d132211482d14d427b23c1b4d14ce423ff62dfd5b7188e848f849c4115686a5bf8edd8ad1bf56064be9ead72a67ddc7065c88a3028e515c729146ca0444ed03d7b653eddad5bc49ba55da8eb1d2264f5ea9d4b62400df05024f796b02a941f2b55bef9753bf2aaee37d25af75c9a965e38f31654997fc8f4ab0acad426a4180a1e47c25032b97708223cd86abc9bcb3c955eba5ba4fc55b608a313550143e46b05147ea2fa644ab07b6e29bab778b6b5ea1d99d1fd9d0f62c95acf6ca27c354e4ab8295821ed78e924f47c386c9b09d76e2b813c4ddf8adf4dcdecd03f314967992d6199140d0ebce9dfc0065e58bb38021a771299323b4c58de2a4688903fbaaa52ef68d3eaf0a309af593db2c17afd68db1205fb0ca8e3fc52b90de8ec10b581c5749678499745b4181276f9aadd039214e0b761689237605f1f2d5ec195b42a9592639bfa2047621841aa7601934547a1b066c18fa41559f5cb999acd739120773f2bb6c818d2201a941aa89bc6693d977ad45cb4e996165a277a098d4d243ad6b60775e73fa6582886d872b0ebeef56797a76d245def5c01644ab4c628dfd342159ae4fd612a752666328f6e3576a854182bb74aa5e068f52522ad3e2c05ae336aca9f1b5e09e4ae6aab3fc185640c79ab92c609b48d5e6750e2c3b6122d1d3dcb892d00446f0e686584027ed9ae6e5d767d71d022b4a4b893df193fd41e8cd9ab68b1df1f990763a6310f449390a43438cc1803521b3c29c3339f1e9876444eaf9e007e1c735206305f13f43bd202c22f9735300c0cc7b20b58d7c38132445b2cc7417f0d2f3ea26c78aedcd0bf91abefc385891918dd3f088df1dc3a657769b532370ed11f391baa9ce67ef172f3ff4cf644454da756bc5ba98312f6be57154496cabd18a834c3cccdf8e6feb2edc507deed8aae68bbc4c8ca2742ee66533444440332bf024d05ec826c18bb127d1fa456a8d44e86210bd790c7af9a8a35a1ca541e6139dcb2c3ed81bd439d65f9c588044a68100914ae83915057cca4abcfc9de4c3d12d7ca36d20c7d8ef3a78cd7996f8582b74d1222be67c8e6eadec2edff71e2bc819d22ce724b58d0f4be3c26aaa805c142e8f3d6cf48ae4592de49cd8c5ab990ec7710b9622fcfa8f606a1c58bfd7d8a5e6a403ed76f905d5bd400645b43a544edf6ec88b869b092fb844cbb6dc6fa7dcc650d68e9f409ed967b118113c2ad762d22c7377c", 0x1000}, {&(0x7f0000000ec0)="daa2408a6eb13fe0f1ce72f3289289f63473386895c540dc8a01bf69325553611689d237cda5fe5df4790753f12b8e8d9b29477f29a3d90dd21181fc6f3ecbbb873508049b06d3a74819f8189e8650dfa9db89bc4b5a1ec0a66ea0b6267f2c8d19d721af75260807f74f36d9", 0x6c}, {&(0x7f0000000f40)="0a68d83cafccfdec890f68329a87f5", 0xf}, {&(0x7f0000000f80)="c20c43773702a92d6fd82f8187d3a56dc7eaa2727d6de7ad2c7479544dd5fd5d9233db19b6bc879ce99347f01f8985d5a3f2a7f14ac463ca27975d820f0a33a99f57f5605264", 0x46}], 0x8, &(0x7f0000001080)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c}}], 0x58, 0x20004042}}], 0x2, 0x4004084)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="04080426c900a2"], 0x7)
prlimit64(0x0, 0x7, &(0x7f0000000100)={0x4, 0x8f}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SG_IO(r5, 0x2285, 0x0)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2b, 0xc, 0x9, 0x8, 0x63, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7801, 0x40, 0x0, 0x4}})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20044004)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f})

1.686790154s ago: executing program 4 (id=719):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r0, 0x5)
r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0xe0, 0x0, 0x0, 0x0)

1.272813465s ago: executing program 5 (id=720):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000600000023000000fdffffff", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x2, 0x1, 0x1, 0x4, 0x3, 0x40}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400}, 0x8000004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='affs\x00', 0xc0800, &(0x7f0000000240)='/dev/cpu/#/msr\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000010000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00051464e50f3a445c89c463ec77136187a61df8d908696812d0ea550c1c7564ff72da960ad1d6bb56d7d2d4912f36ce75557a4d06"])
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f00000001c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000300)={r7, <r8=>0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r8, r9, 0x0, 0x1f5, 0x0, 0xfffffffd, {0x6, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x8005, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000002c0)={0x4, 0xe, 0x1})

1.140497803s ago: executing program 4 (id=721):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x10, 0x1, 0xfe, 0x0, 0x0, 0x6}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5}, {0xd000, 0x2, 0x0, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x2, 0xfc, 0x0, 0x3}, {0x4000, 0xeeef0000, 0xc, 0x1, 0x3, 0x10, 0xc0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x8000000, 0x2000, 0xa, 0x0, 0x2, 0xfd, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0x7, 0x8000, 0xffff1000, [0x400000000000000, 0x10000000020, 0x2]})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x1000000, 0xdddd0000, 0x2, 0x5, 0x50})

1.013810642s ago: executing program 2 (id=722):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r1, &(0x7f00000002c0)=""/153, 0x99)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x8801}, 0x24000000)
lsm_get_self_attr(0x66, &(0x7f0000000440)={0x0, 0x0, 0x2b, 0xb, ""/11}, &(0x7f0000000480)=0x2b, 0x1)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1f}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

894.01009ms ago: executing program 3 (id=723):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
dup2(r1, r2)
pipe(&(0x7f0000000080))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="03e7d2f9f4ff1d4932b7895b5d64aef5bca7af429647ad8d7bf9569594c38ec6c712e309c6081b84de95d58f3b1233c705c5087382f2e156dc0d2920041f6de72d2633b1d5e8c2b72edb09ec5286f2f1ce", @ANYBLOB="170a29bd7000fedbdf25100000001400018006000100020000000800050003000000"], 0x28}}, 0xc114)
io_setup(0x2, &(0x7f0000000000))
geteuid()
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1, 0x2, 0x1ce}, 0x0, &(0x7f0000000300))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x5, 0x0, 0x0, 0x4)
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x8800)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x188}}, 0x4044804)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES16], 0x40}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

802.527661ms ago: executing program 1 (id=724):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
poll(&(0x7f0000000240)=[{r0, 0x2009}], 0x1, 0xffffffff)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000)
getsockopt$inet6_int(r1, 0x29, 0x31, 0x0, &(0x7f00000001c0))
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
open(&(0x7f00000000c0)='./file0\x00', 0x43d040, 0x98)
fcntl$setlease(r2, 0x400, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
socket$nl_rdma(0x10, 0x3, 0x14)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
kexec_load(0x8, 0x1, &(0x7f0000000500)=[{&(0x7f0000000480)="a3", 0x1, 0x0, 0x10000}], 0x3e0000)
connect$netrom(r7, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0)

802.199501ms ago: executing program 4 (id=725):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000000020104000000000000000002000000240002"], 0x8c}}, 0x0) (fail_nth: 4)

517.647593ms ago: executing program 4 (id=726):
socket$inet_tcp(0x2, 0x1, 0x0)
epoll_create1(0x0)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
socket$xdp(0x2c, 0x3, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000b00)={0x2020}, 0x2020)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0xfffffffffffffdb5, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r4, &(0x7f0000000680)=""/102392, 0x18ff8)
tkill(r1, 0xb)
getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe)

0s ago: executing program 3 (id=727):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r2, 0x6, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80)
acct(&(0x7f0000000180)='./file1\x00')
acct(0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10})
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f000030a000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x2cc, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x8, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x29c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x6}}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_BASIC_POLICE={0x24, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_BASIC_ACT={0x260, 0x3, [@m_tunnel_key={0xcc, 0xf, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}]}, {0x3a, 0x6, "e55fa15b0676e00a9b9ea4fb92d15179da93faa8199989a09e79fed8b6b4af86c4d3dd924c74ca0b95768e2b5fc10c070dd5599a9d96"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x50, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x9ff, 0x5, 0x747, 0xb}}]}, {0xc, 0x6, "aa72702d77e3f4fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x140, 0x10, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x5, 0x4, 0x7, 0xc3ed}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x1, 0x3, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffff7f, 0x0, 0x2, 0x4, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x20000000, 0x179}}, @TCA_DEF_DATA={0x6, 0x3, ')\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0xa2, 0x6, "7260547954edc2452167c5e768d449cb703bef02e30d83861de410a2089fb5c29d97a6308c51c8ab335c44283a175719268edc35b48cd28e93326aaa636d12dcf20b829be2f00665a3dc3d6726874455dc857606c13ac68edff3468663df2b9340cc2e7ba025ca5961ec02616b640af41eeb67b49ec0f3234d4b2fc35ec19f1a7a8ca009277f0a2c324567aa2796fa21f12bd225143aacc287748ecc96ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
sendmsg$nl_route_sched(r3, 0x0, 0x0)

kernel console output (not intermixed with test programs):

][ T7621] netlink: 'syz.2.456': attribute type 1 has an invalid length.
[  199.744929][ T7621] 8021q: adding VLAN 0 to HW filter on device bond1
[  199.795384][ T7621] vlan2: entered promiscuous mode
[  199.800479][ T7621] bond1: entered promiscuous mode
[  199.804692][ T7624] netlink: 'syz.3.457': attribute type 1 has an invalid length.
[  199.835419][ T7621] vlan2: entered allmulticast mode
[  199.855111][ T7621] bond1: entered allmulticast mode
[  199.885914][ T7624] 8021q: adding VLAN 0 to HW filter on device bond1
[  199.907235][ T7621] bond1: (slave bridge3): making interface the new active one
[  199.914953][ T7621] bridge3: entered promiscuous mode
[  199.921619][ T7621] bridge3: entered allmulticast mode
[  199.928431][ T7624] FAULT_INJECTION: forcing a failure.
[  199.928431][ T7624] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.943829][ T7621] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  199.973980][ T7624] CPU: 1 UID: 0 PID: 7624 Comm: syz.3.457 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  199.974011][ T7624] Tainted: [L]=SOFTLOCKUP
[  199.974017][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  199.974027][ T7624] Call Trace:
[  199.974034][ T7624]  <TASK>
[  199.974040][ T7624]  dump_stack_lvl+0x100/0x190
[  199.974076][ T7624]  should_fail_ex.cold+0x5/0xa
[  199.974100][ T7624]  _copy_from_iter+0x1f4/0x1690
[  199.974130][ T7624]  ? __asan_memset+0x23/0x50
[  199.974154][ T7624]  ? __pfx__copy_from_iter+0x10/0x10
[  199.974177][ T7624]  ? __pfx___alloc_skb+0x10/0x10
[  199.974214][ T7624]  netlink_sendmsg+0x808/0xda0
[  199.974240][ T7624]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.974258][ T7624]  ? __might_fault+0xa0/0x140
[  199.974290][ T7624]  ____sys_sendmsg+0xa54/0xc30
[  199.974315][ T7624]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.974349][ T7624]  ___sys_sendmsg+0x190/0x1e0
[  199.974374][ T7624]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.974427][ T7624]  __sys_sendmsg+0x170/0x220
[  199.974444][ T7624]  ? __pfx___sys_sendmsg+0x10/0x10
[  199.974476][ T7624]  do_syscall_64+0x106/0xf80
[  199.974495][ T7624]  ? clear_bhb_loop+0x40/0x90
[  199.974517][ T7624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.974535][ T7624] RIP: 0033:0x7f5bf7b9c799
[  199.974551][ T7624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  199.974568][ T7624] RSP: 002b:00007f5bf5df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.974586][ T7624] RAX: ffffffffffffffda RBX: 00007f5bf7e15fa0 RCX: 00007f5bf7b9c799
[  199.974598][ T7624] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000007
[  199.974608][ T7624] RBP: 00007f5bf5df6090 R08: 0000000000000000 R09: 0000000000000000
[  199.974618][ T7624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.974628][ T7624] R13: 00007f5bf7e16038 R14: 00007f5bf7e15fa0 R15: 00007ffc7b46f2d8
[  199.974652][ T7624]  </TASK>
[  200.214036][ T7627] vlan2: entered promiscuous mode
[  200.219868][ T7627] bond1: entered promiscuous mode
[  200.332033][ T7627] vlan2: entered allmulticast mode
[  200.337519][ T7627] bond1: entered allmulticast mode
[  200.753572][   T24] usb 2-1: USB disconnect, device number 22
[  200.817095][ T7638] netlink: 'syz.3.461': attribute type 21 has an invalid length.
[  200.847703][ T7638] netlink: 'syz.3.461': attribute type 1 has an invalid length.
[  200.861354][ T7638] netlink: 144 bytes leftover after parsing attributes in process `syz.3.461'.
[  201.040216][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.465'.
[  201.049465][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.465'.
[  201.059401][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.465'.
[  201.068329][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.465'.
[  201.080547][   T30] audit: type=1326 audit(1772183816.523:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ed19c799 code=0x7ffc0000
[  201.114435][   T30] audit: type=1326 audit(1772183816.523:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ed19c799 code=0x7ffc0000
[  201.139782][ T7648] cgroup: Unknown subsys name 'euid>00000000000000000000'
[  201.175334][ T5882] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  201.203383][ T5961] Process accounting resumed
[  201.230518][   T30] audit: type=1326 audit(1772183816.523:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f16ed19c799 code=0x7ffc0000
[  201.271156][   T30] audit: type=1326 audit(1772183816.673:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ed19c799 code=0x7ffc0000
[  201.295957][   T30] audit: type=1326 audit(1772183816.673:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ed19c799 code=0x7ffc0000
[  201.374511][ T5882] usb 5-1: Using ep0 maxpacket: 32
[  201.381092][ T5882] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  201.392760][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.403598][ T5882] usb 5-1: config 0 descriptor??
[  201.485221][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'.
[  201.613530][ T5882] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  201.626845][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  201.636828][ T5882] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  201.646301][ T5882] usb 5-1: media controller created
[  201.665874][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  201.771438][ T7668] FAULT_INJECTION: forcing a failure.
[  201.771438][ T7668] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  201.804803][ T7668] CPU: 0 UID: 0 PID: 7668 Comm: syz.3.468 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  201.804833][ T7668] Tainted: [L]=SOFTLOCKUP
[  201.804839][ T7668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  201.804850][ T7668] Call Trace:
[  201.804855][ T7668]  <TASK>
[  201.804870][ T7668]  dump_stack_lvl+0x100/0x190
[  201.804904][ T7668]  should_fail_ex.cold+0x5/0xa
[  201.804927][ T7668]  _copy_from_user+0x2e/0xd0
[  201.804952][ T7668]  br_dev_read_uargs+0x141/0x3d0
[  201.804970][ T7668]  ? finish_task_switch.isra.0+0x205/0xb80
[  201.804995][ T7668]  ? __pfx_br_dev_read_uargs+0x10/0x10
[  201.805021][ T7668]  ? finish_task_switch.isra.0+0x205/0xb80
[  201.805045][ T7668]  ? rcu_is_watching+0x12/0xc0
[  201.805069][ T7668]  br_dev_siocdevprivate+0xeb/0x1650
[  201.805086][ T7668]  ? __lock_acquire+0x4a5/0x2630
[  201.805112][ T7668]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  201.805142][ T7668]  ? do_raw_spin_lock+0x128/0x260
[  201.805167][ T7668]  ? mark_held_locks+0x40/0x70
[  201.805196][ T7668]  ? netdev_name_node_lookup+0x107/0x150
[  201.805220][ T7668]  ? __mutex_lock+0x26a/0x1b90
[  201.805242][ T7668]  dev_ifsioc+0xc60/0x1f20
[  201.805266][ T7668]  ? __pfx_dev_ifsioc+0x10/0x10
[  201.805282][ T7668]  ? __pfx___mutex_lock+0x10/0x10
[  201.805299][ T7668]  ? dev_load+0x8e/0x240
[  201.805314][ T7668]  ? dev_load+0x8e/0x240
[  201.805333][ T7668]  dev_ioctl+0x70e/0x10e0
[  201.805351][ T7668]  sock_ioctl+0x494/0x6b0
[  201.805367][ T7668]  ? __pfx_sock_ioctl+0x10/0x10
[  201.805380][ T7668]  ? hook_file_ioctl_common+0x146/0x410
[  201.805400][ T7668]  ? selinux_file_ioctl+0x139/0x290
[  201.805412][ T7668]  ? selinux_file_ioctl+0xb4/0x290
[  201.805425][ T7668]  ? __pfx_sock_ioctl+0x10/0x10
[  201.805440][ T7668]  __x64_sys_ioctl+0x18e/0x210
[  201.805458][ T7668]  do_syscall_64+0x106/0xf80
[  201.805469][ T7668]  ? clear_bhb_loop+0x40/0x90
[  201.805483][ T7668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.805494][ T7668] RIP: 0033:0x7f5bf7b9c799
[  201.805504][ T7668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.805514][ T7668] RSP: 002b:00007f5bf5df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  201.805525][ T7668] RAX: ffffffffffffffda RBX: 00007f5bf7e15fa0 RCX: 00007f5bf7b9c799
[  201.805532][ T7668] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000003
[  201.805539][ T7668] RBP: 00007f5bf5df6090 R08: 0000000000000000 R09: 0000000000000000
[  201.805545][ T7668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.805551][ T7668] R13: 00007f5bf7e16038 R14: 00007f5bf7e15fa0 R15: 00007ffc7b46f2d8
[  201.805565][ T7668]  </TASK>
[  202.358386][ T5882] az6027: usb out operation failed. (-71)
[  202.373424][ T5882] az6027: usb out operation failed. (-71)
[  202.380173][ T5882] stb0899_attach: Driver disabled by Kconfig
[  202.387955][ T5882] az6027: no front-end attached
[  202.387955][ T5882] 
[  202.395974][ T5882] az6027: usb out operation failed. (-71)
[  202.401722][ T5882] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  202.415327][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20
[  202.465791][ T5882] dvb-usb: schedule remote query interval to 400 msecs.
[  202.472754][ T5882] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  202.484571][   T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  202.505653][ T5882] usb 5-1: USB disconnect, device number 26
[  202.585586][ T5848] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  202.825536][ T7681] FAULT_INJECTION: forcing a failure.
[  202.825536][ T7681] name failslab, interval 1, probability 0, space 0, times 0
[  202.838524][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.3.472 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  202.838552][ T7681] Tainted: [L]=SOFTLOCKUP
[  202.838558][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  202.838568][ T7681] Call Trace:
[  202.838574][ T7681]  <TASK>
[  202.838580][ T7681]  dump_stack_lvl+0x100/0x190
[  202.838611][ T7681]  should_fail_ex.cold+0x5/0xa
[  202.838635][ T7681]  ? tomoyo_encode2+0xfb/0x3c0
[  202.838654][ T7681]  should_failslab+0xc2/0x120
[  202.838680][ T7681]  __kmalloc_noprof+0xe0/0x850
[  202.838701][ T7681]  ? d_absolute_path+0x136/0x1b0
[  202.838728][ T7681]  tomoyo_encode2+0xfb/0x3c0
[  202.838752][ T7681]  tomoyo_encode+0x29/0x50
[  202.838772][ T7681]  tomoyo_realpath_from_path+0x18c/0x690
[  202.838799][ T7681]  tomoyo_path_number_perm+0x23c/0x580
[  202.838826][ T7681]  ? tomoyo_path_number_perm+0x22e/0x580
[  202.838855][ T7681]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  202.838906][ T7681]  ? find_held_lock+0x2b/0x80
[  202.838929][ T7681]  ? __fget_files+0x215/0x3d0
[  202.838944][ T7681]  ? hook_file_ioctl_common+0x146/0x410
[  202.838972][ T7681]  ? __fget_files+0x21f/0x3d0
[  202.838993][ T7681]  security_file_ioctl+0xd3/0x230
[  202.839013][ T7681]  __x64_sys_ioctl+0xb7/0x210
[  202.839039][ T7681]  do_syscall_64+0x106/0xf80
[  202.839056][ T7681]  ? clear_bhb_loop+0x40/0x90
[  202.839078][ T7681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.839096][ T7681] RIP: 0033:0x7f5bf7b9c799
[  202.839111][ T7681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.839132][ T7681] RSP: 002b:00007f5bf5dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  202.839149][ T7681] RAX: ffffffffffffffda RBX: 00007f5bf7e16090 RCX: 00007f5bf7b9c799
[  202.839160][ T7681] RDX: 0000200000000180 RSI: 000000004018620d RDI: 0000000000000007
[  202.839170][ T7681] RBP: 00007f5bf5dd5090 R08: 0000000000000000 R09: 0000000000000000
[  202.839180][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.839189][ T7681] R13: 00007f5bf7e16128 R14: 00007f5bf7e16090 R15: 00007ffc7b46f2d8
[  202.839214][ T7681]  </TASK>
[  202.839282][ T7681] ERROR: Out of memory at tomoyo_realpath_from_path.
[  203.134757][   T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  203.143835][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.163058][ T5882] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  203.482807][   T24] usb 3-1: Product: syz
[  203.494531][   T24] usb 3-1: Manufacturer: syz
[  203.502556][ T5848] usb 2-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e
[  203.512734][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.521075][   T24] usb 3-1: SerialNumber: syz
[  203.549768][ T5848] usb 2-1: Product: syz
[  203.555368][ T5848] usb 2-1: Manufacturer: syz
[  203.575778][ T5848] usb 2-1: SerialNumber: syz
[  203.584431][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'.
[  203.586607][ T5848] usb 2-1: config 0 descriptor??
[  203.631756][ T5848] f81232 2-1:0.0: f81232 converter detected
[  203.662552][ T5848] usb 2-1: f81232 converter now attached to ttyUSB0
[  203.803510][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  203.830047][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  203.893374][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  203.949313][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  203.964801][ T5848] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  203.989985][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  204.024289][   T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  204.063138][   T24] usb 3-1: USB disconnect, device number 23
[  204.137286][ T5848] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[  204.167106][ T5848] usb 4-1: config 0 interface 0 has no altsetting 0
[  204.181966][ T7697] netlink: 56 bytes leftover after parsing attributes in process `syz.5.478'.
[  204.185179][ T5848] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  204.200445][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  204.214104][ T5848] usb 4-1: Product: syz
[  204.227687][ T5848] usb 4-1: Manufacturer: syz
[  204.238088][ T5848] usb 4-1: SerialNumber: syz
[  204.254576][ T5916] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  204.255079][ T5848] usb 4-1: config 0 descriptor??
[  204.369786][ T5848] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  204.424518][ T5916] usb 5-1: Using ep0 maxpacket: 16
[  204.446509][ T5916] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  204.470564][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  204.499094][ T5916] usb 5-1: config 0 has no interface number 0
[  204.507061][ T5916] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.530684][ T5916] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  204.559783][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.585522][ T5916] usb 5-1: config 0 descriptor??
[  204.586115][   T24] usb 4-1: USB disconnect, device number 23
[  204.672671][ T7703] netlink: 'syz.5.480': attribute type 1 has an invalid length.
[  204.900313][ T7707] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  204.958865][ T7708] netlink: 'syz.2.481': attribute type 3 has an invalid length.
[  204.976018][ T7707] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  205.296658][ T5916] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  205.347131][   T30] audit: type=1400 audit(1772183820.773:414): avc:  denied  { create } for  pid=7702 comm="syz.5.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  205.364616][ T5916] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  205.374224][ T5916] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  205.405614][ T5848] usb 2-1: USB disconnect, device number 23
[  205.427392][ T5848] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0
[  205.435786][   T30] audit: type=1400 audit(1772183820.773:415): avc:  denied  { write } for  pid=7702 comm="syz.5.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  205.444885][ T5848] f81232 2-1:0.0: device disconnected
[  205.472924][ T5916] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  205.544973][ T5916] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  205.581971][ T5916] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input2
[  205.582607][ T7703] bond1: (slave gretap1): making interface the new active one
[  205.946047][ T7717] 9pnet_fd: p9_fd_create_unix (7717): problem connecting socket: éq‰Y’3aK: -91
[  205.955271][   T30] audit: type=1400 audit(1772183821.393:416): avc:  denied  { mounton } for  pid=7716 comm="syz.3.483" path=2F3130362FE91F7189591E9233614B dev="tmpfs" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  206.042704][ T7703] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  206.099827][ T5916] usb 5-1: USB disconnect, device number 27
[  206.321234][ T7722] set match dimension is over the limit!
[  206.726542][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'.
[  207.154522][ T5916] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  207.164237][ T7739] FAULT_INJECTION: forcing a failure.
[  207.164237][ T7739] name fail_iommufd, interval 1, probability 0, space 0, times 1
[  207.191841][ T7739] CPU: 0 UID: 0 PID: 7739 Comm: syz.1.491 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  207.191868][ T7739] Tainted: [L]=SOFTLOCKUP
[  207.191874][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  207.191884][ T7739] Call Trace:
[  207.191889][ T7739]  <TASK>
[  207.191896][ T7739]  dump_stack_lvl+0x100/0x190
[  207.191929][ T7739]  should_fail_ex.cold+0x5/0xa
[  207.191953][ T7739]  iommufd_get_object+0x7a/0x470
[  207.191982][ T7739]  ? __pfx_iommufd_get_object+0x10/0x10
[  207.192016][ T7739]  iommufd_ioas_map+0x222/0x6c0
[  207.192039][ T7739]  ? __might_fault+0xc5/0x140
[  207.192062][ T7739]  ? __pfx_iommufd_ioas_map+0x10/0x10
[  207.192094][ T7739]  iommufd_fops_ioctl+0x358/0x520
[  207.192123][ T7739]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  207.192152][ T7739]  ? __fget_files+0x215/0x3d0
[  207.192168][ T7739]  ? hook_file_ioctl_common+0x146/0x410
[  207.192197][ T7739]  ? selinux_file_ioctl+0x139/0x290
[  207.192217][ T7739]  ? selinux_file_ioctl+0xb4/0x290
[  207.192237][ T7739]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  207.192266][ T7739]  __x64_sys_ioctl+0x18e/0x210
[  207.192292][ T7739]  do_syscall_64+0x106/0xf80
[  207.192309][ T7739]  ? clear_bhb_loop+0x40/0x90
[  207.192330][ T7739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.192347][ T7739] RIP: 0033:0x7f51a039c799
[  207.192362][ T7739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  207.192377][ T7739] RSP: 002b:00007f51a12f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  207.192395][ T7739] RAX: ffffffffffffffda RBX: 00007f51a0615fa0 RCX: 00007f51a039c799
[  207.192406][ T7739] RDX: 0000200000000100 RSI: 0000000000003b85 RDI: 0000000000000003
[  207.192416][ T7739] RBP: 00007f51a12f6090 R08: 0000000000000000 R09: 0000000000000000
[  207.192426][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.192436][ T7739] R13: 00007f51a0616038 R14: 00007f51a0615fa0 R15: 00007fff71ec0778
[  207.192459][ T7739]  </TASK>
[  207.457157][ T7741] syzkaller0: entered promiscuous mode
[  207.462674][ T7741] syzkaller0: entered allmulticast mode
[  207.701609][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.723944][ T5916] usb 5-1: config 0 has no interfaces?
[  207.725063][ T7743] ntfs3(loop3): try to read out of volume at offset 0x0
[  207.736485][ T5916] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  207.754968][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.769742][ T5916] usb 5-1: config 0 descriptor??
[  207.805468][ T7747] syzkaller1: entered promiscuous mode
[  207.813075][ T7747] syzkaller1: entered allmulticast mode
[  207.842697][ T7748] input: syz0 as /devices/virtual/input/input21
[  207.852395][   T30] audit: type=1400 audit(1772183823.303:417): avc:  denied  { read } for  pid=5161 comm="acpid" name="event4" dev="devtmpfs" ino=3193 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  207.908690][   T30] audit: type=1400 audit(1772183823.303:418): avc:  denied  { open } for  pid=5161 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3193 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  207.948329][   T30] audit: type=1400 audit(1772183823.303:419): avc:  denied  { ioctl } for  pid=5161 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3193 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  208.034704][ T5848] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  208.110514][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.134551][   T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  208.136848][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.156555][ T7752] fuse: Unknown parameter 'grou00000000000000000000'
[  208.194508][ T5848] usb 2-1: Using ep0 maxpacket: 32
[  208.208878][ T5848] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  208.222032][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.232619][ T5894] usb 5-1: USB disconnect, device number 28
[  208.251428][ T5848] usb 2-1: config 0 descriptor??
[  208.285956][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.296572][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  208.306723][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  208.317154][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  208.331076][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  208.341376][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.366882][   T24] usb 6-1: config 0 descriptor??
[  208.377496][   T24] hdpvr 6-1:0.0: Could not find bulk-in endpoint
[  208.384307][   T24] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12
[  208.471979][ T5848] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  208.491213][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  208.501791][ T5848] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  208.509483][ T5848] usb 2-1: media controller created
[  208.562959][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  209.136088][ T5141] block nbd0: Possible stuck request ffff888027d68000: control (read@0,4096B). Runtime 90 seconds
[  209.157180][ T7764] set match dimension is over the limit!
[  209.178246][ T5916] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  209.203206][ T5848] az6027: usb out operation failed. (-71)
[  209.277202][ T5848] az6027: usb out operation failed. (-71)
[  209.284691][ T5848] stb0899_attach: Driver disabled by Kconfig
[  209.290683][ T5848] az6027: no front-end attached
[  209.290683][ T5848] 
[  209.304788][ T5848] az6027: usb out operation failed. (-71)
[  209.383021][ T5848] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  209.394512][ T5916] usb 4-1: Using ep0 maxpacket: 8
[  209.401591][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.412036][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  209.431733][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  209.431918][ T5848] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22
[  209.444545][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  209.466716][ T5916] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  209.476096][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.505418][ T5916] usb 4-1: config 0 descriptor??
[  209.521023][ T5848] dvb-usb: schedule remote query interval to 400 msecs.
[  209.546667][ T5848] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  209.569120][ T5916] hso 4-1:0.0: Can't find BULK IN endpoint
[  209.587071][ T5848] usb 2-1: USB disconnect, device number 24
[  209.721882][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'.
[  209.799269][ T7769] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  210.131523][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'.
[  210.149806][ T5848] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  210.413750][ T7765] [U] 
[  210.642670][ T7778] set match dimension is over the limit!
[  210.929951][ T7783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.504'.
[  210.940299][ T7783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.504'.
[  210.951593][ T7783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.504'.
[  210.960456][ T7783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.504'.
[  210.984028][   T30] audit: type=1326 audit(1772183826.423:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a039c799 code=0x7ffc0000
[  211.029258][ T7784] cgroup: Unknown subsys name 'euid>00000000000000000000'
[  211.075678][    T9] usb 6-1: USB disconnect, device number 13
[  211.125117][ T5916] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  211.275718][   T30] audit: type=1326 audit(1772183826.423:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a039c799 code=0x7ffc0000
[  211.373129][   T30] audit: type=1326 audit(1772183826.423:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f51a039c799 code=0x7ffc0000
[  211.390218][ T5916] usb 5-1: config 0 has an invalid interface number: 133 but max is 0
[  211.428491][ T5916] usb 5-1: config 0 has no interface number 0
[  211.439311][   T30] audit: type=1326 audit(1772183826.563:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a039c799 code=0x7ffc0000
[  211.486593][ T5916] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  211.508389][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.553895][   T30] audit: type=1326 audit(1772183826.563:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a039c799 code=0x7ffc0000
[  211.566511][ T5916] usb 5-1: Product: syz
[  211.619856][ T7795] syzkaller1: entered promiscuous mode
[  211.625491][ T7795] syzkaller1: entered allmulticast mode
[  211.651285][ T5916] usb 5-1: Manufacturer: syz
[  211.669000][ T5916] usb 5-1: SerialNumber: syz
[  211.691288][ T5916] usb 5-1: config 0 descriptor??
[  211.784520][ T5882] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  211.959667][    T9] usb 4-1: USB disconnect, device number 24
[  211.995534][ T5882] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[  212.006725][ T5882] usb 2-1: config 0 has no interface number 0
[  212.020133][ T5882] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  212.033760][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.571425][ T7805] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  212.618112][ T7805] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  212.767420][ T7805] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  212.775721][ T7805] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  212.789320][ T7805] overlayfs: d_ino too big (48, ino=9223372036854776074, xinobits=3)
[  212.800598][ T7805] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  212.813303][ T7805] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  212.920650][ T7805] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  212.929540][ T7805] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  212.938231][ T7805] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  212.946696][ T7805] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3)
[  212.955503][ T7805] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3)
[  213.187133][ T5882] usb 2-1: Product: syz
[  213.191886][ T5882] usb 2-1: Manufacturer: syz
[  213.198272][ T5882] usb 2-1: SerialNumber: syz
[  213.200020][   T30] audit: type=1400 audit(1772183827.993:425): avc:  denied  { mount } for  pid=7803 comm="syz.5.510" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  213.206109][ T5882] usb 2-1: config 0 descriptor??
[  213.233956][ T5916] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected
[  213.245708][ T5916] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81
[  213.253758][ T5916] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1
[  213.294665][   T30] audit: type=1400 audit(1772183828.003:426): avc:  denied  { mounton } for  pid=7803 comm="syz.5.510" path="/48/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  213.312995][ T5916] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2
[  213.365931][ T5916] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  213.385516][   T30] audit: type=1400 audit(1772183828.693:427): avc:  denied  { unmount } for  pid=6845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  213.582326][ T7811] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  213.860564][ T7816] netlink: 'syz.2.513': attribute type 2 has an invalid length.
[  213.904155][ T7816] !: entered promiscuous mode
[  214.240918][ T5882] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[  214.254037][ T5882] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[  214.264039][ T5882] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[  214.272224][ T5882] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[  214.283494][ T5882] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB1
[  214.770845][ T5848] usb 5-1: USB disconnect, device number 29
[  214.778736][ T5848] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  214.921348][ T7832] vlan0: entered promiscuous mode
[  215.190383][ T5848] keyspan 5-1:0.133: device disconnected
[  215.300372][ T7836] FAULT_INJECTION: forcing a failure.
[  215.300372][ T7836] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  215.313992][ T7836] CPU: 1 UID: 0 PID: 7836 Comm: syz.3.517 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  215.314017][ T7836] Tainted: [L]=SOFTLOCKUP
[  215.314022][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  215.314031][ T7836] Call Trace:
[  215.314043][ T7836]  <TASK>
[  215.314049][ T7836]  dump_stack_lvl+0x100/0x190
[  215.314073][ T7836]  should_fail_ex.cold+0x5/0xa
[  215.314088][ T7836]  _copy_from_iter+0x1f4/0x1690
[  215.314105][ T7836]  ? __asan_memset+0x23/0x50
[  215.314120][ T7836]  ? __pfx__copy_from_iter+0x10/0x10
[  215.314135][ T7836]  ? __pfx___alloc_skb+0x10/0x10
[  215.314159][ T7836]  netlink_sendmsg+0x808/0xda0
[  215.314174][ T7836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  215.314186][ T7836]  ? __might_fault+0xa0/0x140
[  215.314205][ T7836]  ____sys_sendmsg+0xa54/0xc30
[  215.314220][ T7836]  ? __pfx_____sys_sendmsg+0x10/0x10
[  215.314240][ T7836]  ___sys_sendmsg+0x190/0x1e0
[  215.314255][ T7836]  ? __pfx____sys_sendmsg+0x10/0x10
[  215.314286][ T7836]  __sys_sendmsg+0x170/0x220
[  215.314297][ T7836]  ? __pfx___sys_sendmsg+0x10/0x10
[  215.314316][ T7836]  do_syscall_64+0x106/0xf80
[  215.314327][ T7836]  ? clear_bhb_loop+0x40/0x90
[  215.314340][ T7836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.314351][ T7836] RIP: 0033:0x7f5bf7b9c799
[  215.314361][ T7836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.314371][ T7836] RSP: 002b:00007f5bf5df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  215.314382][ T7836] RAX: ffffffffffffffda RBX: 00007f5bf7e15fa0 RCX: 00007f5bf7b9c799
[  215.314389][ T7836] RDX: 0000000000000090 RSI: 0000200000000240 RDI: 0000000000000005
[  215.314395][ T7836] RBP: 00007f5bf5df6090 R08: 0000000000000000 R09: 0000000000000000
[  215.314401][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.314407][ T7836] R13: 00007f5bf7e16038 R14: 00007f5bf7e15fa0 R15: 00007ffc7b46f2d8
[  215.314421][ T7836]  </TASK>
[  215.600554][ T5894] usb 2-1: USB disconnect, device number 25
[  215.626049][ T5894] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1
[  215.636290][ T5894] keyspan 2-1:0.133: device disconnected
[  215.914518][ T5848] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  216.451317][ T7844] syzkaller1: entered promiscuous mode
[  216.459338][ T7844] syzkaller1: entered allmulticast mode
[  216.702914][ T7854] FAULT_INJECTION: forcing a failure.
[  216.702914][ T7854] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  216.716425][ T7854] CPU: 1 UID: 0 PID: 7854 Comm: syz.1.521 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  216.716452][ T7854] Tainted: [L]=SOFTLOCKUP
[  216.716458][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  216.716468][ T7854] Call Trace:
[  216.716474][ T7854]  <TASK>
[  216.716480][ T7854]  dump_stack_lvl+0x100/0x190
[  216.716512][ T7854]  should_fail_ex.cold+0x5/0xa
[  216.716535][ T7854]  _copy_to_user+0x32/0xd0
[  216.716560][ T7854]  do_ipv6_getsockopt+0x2c79/0x3370
[  216.716587][ T7854]  ? __pfx_do_ipv6_getsockopt+0x10/0x10
[  216.716613][ T7854]  ? __pfx___schedule+0x10/0x10
[  216.716639][ T7854]  ? avc_has_perm+0x100/0x1e0
[  216.716663][ T7854]  ? preempt_schedule_irq+0x7b/0x90
[  216.716683][ T7854]  ? irqentry_exit+0x180/0x670
[  216.716699][ T7854]  ? lockdep_hardirqs_on+0x78/0x100
[  216.716716][ T7854]  ? irqentry_exit+0x180/0x670
[  216.716748][ T7854]  ? ipv6_getsockopt+0x12f/0x2a0
[  216.716772][ T7854]  ipv6_getsockopt+0x12f/0x2a0
[  216.716796][ T7854]  ? __pfx_ipv6_getsockopt+0x10/0x10
[  216.716815][ T7854]  ? __might_fault+0xc5/0x140
[  216.716845][ T7854]  udpv6_getsockopt+0x61/0xb0
[  216.716870][ T7854]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  216.716891][ T7854]  do_sock_getsockopt+0x259/0x3d0
[  216.716913][ T7854]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  216.716946][ T7854]  __sys_getsockopt+0x148/0x260
[  216.716980][ T7854]  ? __x64_sys_getsockopt+0xbd/0x160
[  216.717005][ T7854]  __x64_sys_getsockopt+0xbd/0x160
[  216.717030][ T7854]  ? do_syscall_64+0x95/0xf80
[  216.717047][ T7854]  ? lockdep_hardirqs_on+0x78/0x100
[  216.717064][ T7854]  do_syscall_64+0x106/0xf80
[  216.717079][ T7854]  ? clear_bhb_loop+0x40/0x90
[  216.717102][ T7854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.717119][ T7854] RIP: 0033:0x7f51a039c799
[  216.717134][ T7854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.717150][ T7854] RSP: 002b:00007f51a12b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  216.717168][ T7854] RAX: ffffffffffffffda RBX: 00007f51a0616180 RCX: 00007f51a039c799
[  216.717179][ T7854] RDX: 000000000000003d RSI: 0000000000000029 RDI: 000000000000000a
[  216.717189][ T7854] RBP: 00007f51a12b4090 R08: 0000200000000140 R09: 0000000000000000
[  216.717200][ T7854] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  216.717210][ T7854] R13: 00007f51a0616218 R14: 00007f51a0616180 R15: 00007fff71ec0778
[  216.717234][ T7854]  </TASK>
[  217.014892][ T5848] usb 5-1: Using ep0 maxpacket: 8
[  217.022549][ T5848] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  217.031267][ T5848] usb 5-1: config 0 has no interface number 0
[  217.037717][ T5848] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  217.048918][ T5848] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  217.060538][ T5848] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  217.071548][ T5848] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  217.084609][ T5848] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  217.093688][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.105409][ T5848] usb 5-1: config 0 descriptor??
[  217.117438][ T5848] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  217.494329][ T5848] usb 5-1: USB disconnect, device number 30
[  217.564415][ T5848] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  217.574542][    T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  217.811972][ T7868] set match dimension is over the limit!
[  217.955661][ T7871] vlan3: entered promiscuous mode
[  217.960748][ T7871] ip6gretap0: entered promiscuous mode
[  218.241535][   T30] audit: type=1400 audit(1772183833.373:428): avc:  denied  { connect } for  pid=7865 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  218.313593][    T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  218.325146][    T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  218.337013][    T9] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  218.362790][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  218.374240][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  218.383685][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.393220][    T9] usb 3-1: Product: à Š
[  218.399144][    T9] usb 3-1: Manufacturer: 癄Ⴘ�쳺䳉丣િ꡵⬪䒮�踫⺼ᚋﷺ�냊鯓쬸紦ꋉ痞႖椧�㕦Ӌ랤뵙탮퉶뢔뜆�ɩ龻钀跢ꭨ⊓갌괣⫈ꕗ஄ஜ䤶咡펪�惮ꨩ���ͭ䟫拲覨�툄�檳쭲�ѽ桵ᮨ��䞅ᇵ쨾੷䣮Ϩ欙뫇빥◕惇
[  218.439049][    T9] usb 3-1: SerialNumber: syz
[  218.679117][    T9] usb 3-1: 0:12 : does not exist
[  218.730412][    T9] usb 3-1: USB disconnect, device number 24
[  218.813062][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  219.348787][ T7898] FAULT_INJECTION: forcing a failure.
[  219.348787][ T7898] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  219.361976][ T7898] CPU: 0 UID: 0 PID: 7898 Comm: syz.1.536 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  219.362004][ T7898] Tainted: [L]=SOFTLOCKUP
[  219.362010][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  219.362021][ T7898] Call Trace:
[  219.362028][ T7898]  <TASK>
[  219.362036][ T7898]  dump_stack_lvl+0x100/0x190
[  219.362069][ T7898]  should_fail_ex.cold+0x5/0xa
[  219.362091][ T7898]  _copy_from_user+0x2e/0xd0
[  219.362115][ T7898]  copy_mount_options+0x76/0x190
[  219.362139][ T7898]  __x64_sys_mount+0x1ab/0x310
[  219.362156][ T7898]  ? __pfx___x64_sys_mount+0x10/0x10
[  219.362172][ T7898]  ? trace_csd_function_exit+0x73/0x210
[  219.362197][ T7898]  do_syscall_64+0x106/0xf80
[  219.362211][ T7898]  ? clear_bhb_loop+0x40/0x90
[  219.362228][ T7898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.362242][ T7898] RIP: 0033:0x7f51a039c799
[  219.362254][ T7898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.362267][ T7898] RSP: 002b:00007f51a12b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  219.362281][ T7898] RAX: ffffffffffffffda RBX: 00007f51a0616180 RCX: 00007f51a039c799
[  219.362290][ T7898] RDX: 00002000000020c0 RSI: 0000200000000180 RDI: 0000000000000000
[  219.362299][ T7898] RBP: 00007f51a12b4090 R08: 00002000000002c0 R09: 0000000000000000
[  219.362307][ T7898] R10: 0000000002000413 R11: 0000000000000246 R12: 0000000000000001
[  219.362316][ T7898] R13: 00007f51a0616218 R14: 00007f51a0616180 R15: 00007fff71ec0778
[  219.362335][ T7898]  </TASK>
[  219.644985][ T5848] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  219.908775][ T5848] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.024507][ T5848] usb 6-1: config 0 has no interfaces?
[  220.030035][ T5848] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  220.068968][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.248947][ T5848] usb 6-1: config 0 descriptor??
[  220.310206][ T7908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.539'.
[  220.345585][ T7912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.538'.
[  220.462538][ T7891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.477664][ T7891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.509646][    T9] usb 6-1: USB disconnect, device number 14
[  221.109414][ T7930] set match dimension is over the limit!
[  221.118373][ T5894] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  221.336088][ T7936] process 'syz.1.542' launched './file2' with NULL argv: empty string added
[  221.367067][   T30] audit: type=1400 audit(1772183836.783:429): avc:  denied  { execute } for  pid=7921 comm="syz.1.542" name="file2" dev="tmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  221.376383][ T5894] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  221.865664][ T5894] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  221.880664][   T30] audit: type=1400 audit(1772183836.813:430): avc:  denied  { execute_no_trans } for  pid=7921 comm="syz.1.542" path="/106/file2" dev="tmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  221.966199][ T5894] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  222.022185][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.061084][ T7919] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  222.070140][ T5894] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  222.385770][ T5894] usb 3-1: USB disconnect, device number 25
[  222.843556][ T5848] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  223.014539][ T5848] usb 6-1: Using ep0 maxpacket: 32
[  223.030554][ T5848] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  223.042103][ T5848] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  223.061396][ T5848] usb 6-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[  223.072891][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.144919][ T5848] usb 6-1: Product: syz
[  223.162272][ T5848] usb 6-1: Manufacturer: syz
[  223.175704][ T5848] usb 6-1: SerialNumber: syz
[  223.287367][ T5848] usb 6-1: config 0 descriptor??
[  223.302106][ T5848] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22
[  223.343149][ T7960] set match dimension is over the limit!
[  223.644526][    T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  223.855803][    T9] usb 3-1: Using ep0 maxpacket: 16
[  223.864545][    T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  223.909004][    T9] usb 3-1: config 0 has no interface number 0
[  223.930384][    T9] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.951809][    T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  223.986357][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.125390][   T30] audit: type=1400 audit(1772183839.543:431): avc:  denied  { mount } for  pid=7941 comm="syz.5.546" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  224.158627][    T9] usb 3-1: config 0 descriptor??
[  224.175648][   T30] audit: type=1400 audit(1772183839.543:432): avc:  denied  { search } for  pid=7941 comm="syz.5.546" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  224.472047][   T30] audit: type=1400 audit(1772183839.543:433): avc:  denied  { search } for  pid=7941 comm="syz.5.546" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  224.531596][   T30] audit: type=1400 audit(1772183839.543:434): avc:  denied  { read open } for  pid=7941 comm="syz.5.546" path="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  224.894036][    T9] usbhid 3-1:0.2: can't add hid device: -71
[  224.900001][    T9] usbhid 3-1:0.2: probe with driver usbhid failed with error -71
[  224.910377][    T9] usb 3-1: USB disconnect, device number 26
[  224.947194][ T7971] FAULT_INJECTION: forcing a failure.
[  224.947194][ T7971] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  224.982935][ T7971] CPU: 1 UID: 0 PID: 7971 Comm: syz.4.554 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  224.982959][ T7971] Tainted: [L]=SOFTLOCKUP
[  224.982962][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  224.982969][ T7971] Call Trace:
[  224.982973][ T7971]  <TASK>
[  224.982977][ T7971]  dump_stack_lvl+0x100/0x190
[  224.983005][ T7971]  should_fail_ex.cold+0x5/0xa
[  224.983020][ T7971]  _copy_from_iter+0x1f4/0x1690
[  224.983038][ T7971]  ? __asan_memset+0x23/0x50
[  224.983053][ T7971]  ? __pfx__copy_from_iter+0x10/0x10
[  224.983068][ T7971]  ? __pfx___alloc_skb+0x10/0x10
[  224.983091][ T7971]  netlink_sendmsg+0x808/0xda0
[  224.983106][ T7971]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.983118][ T7971]  ? __might_fault+0xa0/0x140
[  224.983137][ T7971]  ____sys_sendmsg+0xa54/0xc30
[  224.983152][ T7971]  ? __pfx_____sys_sendmsg+0x10/0x10
[  224.983172][ T7971]  ___sys_sendmsg+0x190/0x1e0
[  224.983188][ T7971]  ? __pfx____sys_sendmsg+0x10/0x10
[  224.983218][ T7971]  __sys_sendmsg+0x170/0x220
[  224.983230][ T7971]  ? __pfx___sys_sendmsg+0x10/0x10
[  224.983249][ T7971]  do_syscall_64+0x106/0xf80
[  224.983261][ T7971]  ? clear_bhb_loop+0x40/0x90
[  224.983275][ T7971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.983287][ T7971] RIP: 0033:0x7f373179c799
[  224.983297][ T7971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.983308][ T7971] RSP: 002b:00007f37326f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  224.983319][ T7971] RAX: ffffffffffffffda RBX: 00007f3731a15fa0 RCX: 00007f373179c799
[  224.983326][ T7971] RDX: 000000000004cc00 RSI: 00002000000003c0 RDI: 0000000000000004
[  224.983332][ T7971] RBP: 00007f37326f2090 R08: 0000000000000000 R09: 0000000000000000
[  224.983338][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.983345][ T7971] R13: 00007f3731a16038 R14: 00007f3731a15fa0 R15: 00007ffdbdf2cef8
[  224.983359][ T7971]  </TASK>
[  225.179560][ T5894] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  225.384483][ T5894] usb 4-1: Using ep0 maxpacket: 32
[  225.390862][ T5848] usb 6-1: USB disconnect, device number 15
[  225.397643][ T5894] usb 4-1: config 0 has an invalid interface number: 191 but max is 0
[  225.417180][ T5894] usb 4-1: config 0 has no interface number 0
[  225.424533][ T5894] usb 4-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  225.437192][ T5894] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  225.446519][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.454702][ T5894] usb 4-1: Product: syz
[  225.465134][ T5894] usb 4-1: Manufacturer: syz
[  225.469711][ T5894] usb 4-1: SerialNumber: syz
[  225.485768][ T5894] usb 4-1: config 0 descriptor??
[  225.491381][ T7969] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  225.665507][ T5882] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  225.775501][ T7969] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  225.814878][ T7982] FAULT_INJECTION: forcing a failure.
[  225.814878][ T7982] name failslab, interval 1, probability 0, space 0, times 0
[  225.874077][ T7982] CPU: 1 UID: 0 PID: 7982 Comm: syz.1.558 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  225.874110][ T7982] Tainted: [L]=SOFTLOCKUP
[  225.874116][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  225.874126][ T7982] Call Trace:
[  225.874132][ T7982]  <TASK>
[  225.874139][ T7982]  dump_stack_lvl+0x100/0x190
[  225.874172][ T7982]  should_fail_ex.cold+0x5/0xa
[  225.874196][ T7982]  should_failslab+0xc2/0x120
[  225.874223][ T7982]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  225.874246][ T7982]  ? skb_clone+0x190/0x400
[  225.874268][ T7982]  skb_clone+0x190/0x400
[  225.874286][ T7982]  netlink_deliver_tap+0xaed/0xcc0
[  225.874310][ T7982]  netlink_unicast+0x650/0x870
[  225.874334][ T7982]  ? __pfx_netlink_unicast+0x10/0x10
[  225.874363][ T7982]  netlink_sendmsg+0x8b0/0xda0
[  225.874387][ T7982]  ? __pfx_netlink_sendmsg+0x10/0x10
[  225.874417][ T7982]  sock_write_iter+0x566/0x610
[  225.874438][ T7982]  ? __pfx_sock_write_iter+0x10/0x10
[  225.874467][ T7982]  ? __pfx_file_has_perm+0x10/0x10
[  225.874496][ T7982]  do_iter_readv_writev+0x6ee/0x920
[  225.874520][ T7982]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  225.874541][ T7982]  ? selinux_file_permission+0x8f/0x6d0
[  225.874563][ T7982]  ? bpf_lsm_file_permission+0x9/0x10
[  225.874586][ T7982]  ? security_file_permission+0x76/0x210
[  225.874606][ T7982]  ? rw_verify_area+0xce/0x6d0
[  225.874629][ T7982]  vfs_writev+0x360/0xe10
[  225.874656][ T7982]  ? __pfx_vfs_writev+0x10/0x10
[  225.874679][ T7982]  ? find_held_lock+0x2b/0x80
[  225.874715][ T7982]  ? __fget_files+0x21f/0x3d0
[  225.874738][ T7982]  ? do_writev+0x28a/0x340
[  225.874760][ T7982]  do_writev+0x28a/0x340
[  225.874784][ T7982]  ? __pfx_do_writev+0x10/0x10
[  225.874815][ T7982]  do_syscall_64+0x106/0xf80
[  225.874832][ T7982]  ? clear_bhb_loop+0x40/0x90
[  225.874854][ T7982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.874872][ T7982] RIP: 0033:0x7f51a039c799
[  225.874888][ T7982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.874905][ T7982] RSP: 002b:00007f51a12f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  225.874923][ T7982] RAX: ffffffffffffffda RBX: 00007f51a0615fa0 RCX: 00007f51a039c799
[  225.874934][ T7982] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004
[  225.874944][ T7982] RBP: 00007f51a12f6090 R08: 0000000000000000 R09: 0000000000000000
[  225.874955][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.874965][ T7982] R13: 00007f51a0616038 R14: 00007f51a0615fa0 R15: 00007fff71ec0778
[  225.874997][ T7982]  </TASK>
[  226.777390][ T5882] usb 5-1: Using ep0 maxpacket: 16
[  226.784422][ T5882] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  226.792448][ T5882] usb 5-1: config 0 has no interface number 0
[  226.830181][ T5882] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  227.031443][ T5882] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  227.213143][ T7982] netlink: 'syz.1.558': attribute type 4 has an invalid length.
[  227.222122][ T5882] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  227.398179][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  227.420742][ T5894] asix 4-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  227.431300][ T5882] usb 5-1: Product: syz
[  227.441037][ T5882] usb 5-1: SerialNumber: syz
[  227.469956][ T7993] fuse: Bad value for 'fd'
[  227.492584][ T5882] usb 5-1: config 0 descriptor??
[  227.493093][ T5894] asix 4-1:0.191: probe with driver asix failed with error -71
[  227.556994][ T5882] cm109 5-1:0.8: invalid payload size 0, expected 4
[  227.596756][ T5882] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input23
[  227.625366][ T5894] usb 4-1: USB disconnect, device number 25
[  227.643104][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.560'.
[  227.652632][   T30] audit: type=1400 audit(1772183843.083:435): avc:  denied  { ioctl } for  pid=7992 comm="syz.5.560" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  227.693128][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.560'.
[  227.709338][ T7997] netlink: 'syz.5.560': attribute type 14 has an invalid length.
[  227.791967][ T7997] netlink: 'syz.5.560': attribute type 12 has an invalid length.
[  227.806306][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  228.097987][ T8000] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  228.097987][ T8000]    program syz.1.561 not setting count and/or reply_len properly
[  228.118726][   T30] audit: type=1400 audit(1772183843.563:436): avc:  denied  { connect } for  pid=7973 comm="syz.4.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  228.118997][ T5894] usb 5-1: USB disconnect, device number 31
[  228.423158][ T5894] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  228.566792][ T8009] fuse: Bad value for 'rootmode'
[  228.935685][   T30] audit: type=1400 audit(1772183844.383:437): avc:  denied  { read write } for  pid=8011 comm="syz.4.564" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  228.991740][   T30] audit: type=1400 audit(1772183844.413:438): avc:  denied  { open } for  pid=8011 comm="syz.4.564" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  229.194017][ T8015] fuse: Invalid rootmode
[  229.225563][ T5882] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  229.416576][ T5882] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.426490][ T5882] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  229.440054][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0
[  229.458879][ T5882] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00
[  229.472575][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.499069][ T5882] usb 5-1: config 0 descriptor??
[  229.624653][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  229.774538][    T9] usb 2-1: Using ep0 maxpacket: 16
[  229.781840][    T9] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  229.792678][    T9] usb 2-1: config 0 has no interface number 0
[  229.799104][    T9] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.811774][    T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  229.822028][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.835026][    T9] usb 2-1: config 0 descriptor??
[  229.922516][ T5882] hid_mf 0003:0079:1843.000A: hidraw0: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.4-1/input0
[  229.949771][ T5882] hid_mf 0003:0079:1843.000A: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  230.127062][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.139850][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.167746][ T5811] Bluetooth: hci4: command 0x0406 tx timeout
[  230.339077][ T5882] usb 5-1: USB disconnect, device number 32
[  230.533421][ T8036] netlink: 'syz.2.571': attribute type 3 has an invalid length.
[  230.542816][    T9] usbhid 2-1:0.2: can't add hid device: -71
[  230.557171][    T9] usbhid 2-1:0.2: probe with driver usbhid failed with error -71
[  230.569543][    T9] usb 2-1: USB disconnect, device number 26
[  230.584557][ T7115] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  230.744548][ T7115] usb 4-1: Using ep0 maxpacket: 8
[  230.752339][ T7115] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  230.760918][ T7115] usb 4-1: config 0 has no interface number 0
[  230.768706][ T7115] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  230.779869][ T7115] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  230.791735][ T7115] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  230.803058][ T7115] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  230.816929][ T7115] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  230.835670][ T7115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.854038][ T7115] usb 4-1: config 0 descriptor??
[  230.887435][ T7115] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  230.974766][ T5894] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  231.131628][ T7115] usb 4-1: USB disconnect, device number 26
[  231.137597][    C0] ldusb 4-1:0.55: usb_submit_urb failed (-19)
[  231.144557][ T8031] ldusb 4-1:0.55: Couldn't submit interrupt_out_urb -19
[  231.150253][ T5894] usb 6-1: Using ep0 maxpacket: 32
[  231.157413][ T7115] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  231.168492][ T5894] usb 6-1: config 0 has an invalid interface number: 191 but max is 0
[  231.183456][ T5894] usb 6-1: config 0 has no interface number 0
[  231.189957][ T5894] usb 6-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  231.201542][ T8043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.574'.
[  231.210447][ T8043] netlink: 90 bytes leftover after parsing attributes in process `syz.1.574'.
[  231.221331][ T8043] netlink: 90 bytes leftover after parsing attributes in process `syz.1.574'.
[  231.236326][ T5894] usb 6-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  231.253188][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.301186][ T5894] usb 6-1: Product: syz
[  231.306036][ T5894] usb 6-1: Manufacturer: syz
[  231.311134][ T5894] usb 6-1: SerialNumber: syz
[  231.318720][ T5894] usb 6-1: config 0 descriptor??
[  231.325068][ T8038] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  231.556516][ T8038] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  231.566258][ T8049] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  231.566258][ T8049]    program syz.1.576 not setting count and/or reply_len properly
[  232.110799][ T5894] asix 6-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  232.239605][ T5894] asix 6-1:0.191: probe with driver asix failed with error -71
[  232.258199][ T5894] usb 6-1: USB disconnect, device number 16
[  232.808321][ T8067] fuse: Bad value for 'rootmode'
[  233.654708][ T8080] No control pipe specified
[  233.664559][ T5848] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  233.672192][ T5894] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  233.855900][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.869534][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.880462][ T5848] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  233.898936][ T5894] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.943755][ T5894] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  233.959250][ T5848] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  233.984850][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0
[  233.991562][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.028561][ T5894] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00
[  234.039986][ T5848] usb 6-1: config 0 descriptor??
[  234.064529][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.102009][ T5894] usb 5-1: config 0 descriptor??
[  234.246559][    T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  234.584470][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.584509][    T9] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  234.584531][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.597813][ T5894] hid_mf 0003:0079:1843.000B: hidraw0: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.4-1/input0
[  234.635519][ T5894] hid_mf 0003:0079:1843.000B: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  234.639678][ T8093] set match dimension is over the limit!
[  234.668791][    T9] usb 2-1: config 0 descriptor??
[  234.818280][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.355122][ T5848] usbhid 6-1:0.0: can't add hid device: -71
[  235.361129][ T5848] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  235.376796][ T5848] usb 6-1: USB disconnect, device number 17
[  235.409428][    T9] razer 0003:1532:010E.000C: hidraw1: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0
[  235.619315][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.863403][    T9] usb 5-1: USB disconnect, device number 33
[  235.956156][   T30] audit: type=1400 audit(1772183851.393:439): avc:  denied  { write } for  pid=8084 comm="syz.1.586" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  236.036439][ T8102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.181454][ T8102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.213372][ T5916] usb 2-1: USB disconnect, device number 27
[  236.588809][   T30] audit: type=1400 audit(1772183852.033:440): avc:  denied  { create } for  pid=8103 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  236.707132][   T30] audit: type=1400 audit(1772183852.063:441): avc:  denied  { read } for  pid=8103 comm="syz.5.589" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  236.815308][   T30] audit: type=1400 audit(1772183852.063:442): avc:  denied  { open } for  pid=8103 comm="syz.5.589" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  237.115693][ T8113] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  237.115693][ T8113]    program syz.2.591 not setting count and/or reply_len properly
[  237.209885][ T8121] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  237.230394][   T30] audit: type=1400 audit(1772183852.063:443): avc:  denied  { ioctl } for  pid=8103 comm="syz.5.589" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  238.130114][   T30] audit: type=1400 audit(1772183853.573:444): avc:  denied  { mount } for  pid=8130 comm="syz.2.595" name="/" dev="autofs" ino=18412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  238.172797][   T30] audit: type=1400 audit(1772183853.603:445): avc:  denied  { unmount } for  pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  238.343826][ T8136] netlink: 'syz.4.597': attribute type 3 has an invalid length.
[  238.504523][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  238.655526][    T9] usb 3-1: Using ep0 maxpacket: 8
[  238.667740][    T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  238.678288][    T9] usb 3-1: config 0 has no interface number 0
[  238.690107][ T8146] FAULT_INJECTION: forcing a failure.
[  238.690107][ T8146] name failslab, interval 1, probability 0, space 0, times 0
[  238.702975][    T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  238.715101][    T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  238.728247][ T8146] CPU: 0 UID: 0 PID: 8146 Comm: syz.1.601 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  238.728270][ T8146] Tainted: [L]=SOFTLOCKUP
[  238.728274][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  238.728281][ T8146] Call Trace:
[  238.728285][ T8146]  <TASK>
[  238.728289][ T8146]  dump_stack_lvl+0x100/0x190
[  238.728311][ T8146]  should_fail_ex.cold+0x5/0xa
[  238.728325][ T8146]  ? tomoyo_realpath_from_path+0xb6/0x690
[  238.728338][ T8146]  should_failslab+0xc2/0x120
[  238.728357][ T8146]  __kmalloc_noprof+0xe0/0x850
[  238.728375][ T8146]  tomoyo_realpath_from_path+0xb6/0x690
[  238.728395][ T8146]  tomoyo_path_number_perm+0x23c/0x580
[  238.728413][ T8146]  ? tomoyo_path_number_perm+0x22e/0x580
[  238.728432][ T8146]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  238.728465][ T8146]  ? find_held_lock+0x2b/0x80
[  238.728479][ T8146]  ? __fget_files+0x215/0x3d0
[  238.728489][ T8146]  ? hook_file_ioctl_common+0x146/0x410
[  238.728507][ T8146]  ? __fget_files+0x21f/0x3d0
[  238.728520][ T8146]  security_file_ioctl+0xd3/0x230
[  238.728533][ T8146]  __x64_sys_ioctl+0xb7/0x210
[  238.728550][ T8146]  do_syscall_64+0x106/0xf80
[  238.728561][ T8146]  ? clear_bhb_loop+0x40/0x90
[  238.728575][ T8146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.728586][ T8146] RIP: 0033:0x7f51a039c799
[  238.728596][ T8146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.728606][ T8146] RSP: 002b:00007f51a12f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  238.728617][ T8146] RAX: ffffffffffffffda RBX: 00007f51a0615fa0 RCX: 00007f51a039c799
[  238.728624][ T8146] RDX: 00002000000005c0 RSI: 0000000000002285 RDI: 0000000000000003
[  238.728630][ T8146] RBP: 00007f51a12f6090 R08: 0000000000000000 R09: 0000000000000000
[  238.728637][ T8146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.728643][ T8146] R13: 00007f51a0616038 R14: 00007f51a0615fa0 R15: 00007fff71ec0778
[  238.728658][ T8146]  </TASK>
[  238.728673][ T8146] ERROR: Out of memory at tomoyo_realpath_from_path.
[  238.934736][    T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  238.952057][    T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  238.974510][    T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  238.994511][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.027107][    T9] usb 3-1: config 0 descriptor??
[  239.051323][    T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  239.206548][ T5812] Bluetooth: hci2: command 0x0406 tx timeout
[  239.214521][ T5141] block nbd0: Possible stuck request ffff888027d68000: control (read@0,4096B). Runtime 120 seconds
[  239.296753][   T30] audit: type=1400 audit(1772183854.743:446): avc:  denied  { ioctl } for  pid=8132 comm="syz.2.596" path="socket:[19285]" dev="sockfs" ino=19285 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  239.401754][ T8155] set match dimension is over the limit!
[  240.583426][ T8162] FAULT_INJECTION: forcing a failure.
[  240.583426][ T8162] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  240.613516][ T8162] CPU: 0 UID: 0 PID: 8162 Comm: syz.4.605 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  240.613546][ T8162] Tainted: [L]=SOFTLOCKUP
[  240.613552][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  240.613562][ T8162] Call Trace:
[  240.613573][ T8162]  <TASK>
[  240.613581][ T8162]  dump_stack_lvl+0x100/0x190
[  240.613613][ T8162]  should_fail_ex.cold+0x5/0xa
[  240.613631][ T8162]  ? prepare_alloc_pages+0x16d/0x5f0
[  240.613650][ T8162]  should_fail_alloc_page+0xeb/0x140
[  240.613678][ T8162]  prepare_alloc_pages+0x1f0/0x5f0
[  240.613700][ T8162]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  240.613726][ T8162]  ? ima_match_policy+0x8b8/0x2340
[  240.613749][ T8162]  ? ima_match_policy+0x8b8/0x2340
[  240.613775][ T8162]  ? __lock_acquire+0x4a5/0x2630
[  240.613807][ T8162]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  240.613840][ T8162]  ? process_measurement+0x4c8/0x2350
[  240.613859][ T8162]  ? process_measurement+0x4c8/0x2350
[  240.613882][ T8162]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  240.613908][ T8162]  ? policy_nodemask+0xed/0x4f0
[  240.613937][ T8162]  alloc_pages_mpol+0x1fb/0x550
[  240.613965][ T8162]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  240.613992][ T8162]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  240.614020][ T8162]  ? __pfx_filemap_map_pages+0x10/0x10
[  240.614042][ T8162]  alloc_pages_noprof+0x131/0x390
[  240.614071][ T8162]  pte_alloc_one+0x1e/0x3e0
[  240.614094][ T8162]  __do_fault+0x359/0x550
[  240.614123][ T8162]  ? __pfx_filemap_map_pages+0x10/0x10
[  240.614144][ T8162]  do_fault+0x2db/0x1950
[  240.614160][ T8162]  ? __lock_acquire+0x4a5/0x2630
[  240.614189][ T8162]  __handle_mm_fault+0x180f/0x2b60
[  240.614218][ T8162]  ? __pfx___handle_mm_fault+0x10/0x10
[  240.614237][ T8162]  ? find_held_lock+0x2b/0x80
[  240.614257][ T8162]  ? mtree_load+0x311/0xa40
[  240.614275][ T8162]  ? mtree_load+0x311/0xa40
[  240.614312][ T8162]  handle_mm_fault+0x36d/0xa20
[  240.614337][ T8162]  __get_user_pages+0xf9c/0x34d0
[  240.614365][ T8162]  ? __pfx___get_user_pages+0x10/0x10
[  240.614390][ T8162]  faultin_page_range+0x1f1/0x9e0
[  240.614414][ T8162]  madvise_do_behavior+0x354/0x510
[  240.614437][ T8162]  ? __pfx_madvise_do_behavior+0x10/0x10
[  240.614471][ T8162]  do_madvise+0x195/0x240
[  240.614488][ T8162]  ? __pfx_do_madvise+0x10/0x10
[  240.614505][ T8162]  ? __mutex_unlock_slowpath+0x15c/0x790
[  240.614542][ T8162]  ? ksys_write+0x1ac/0x250
[  240.614572][ T8162]  ? __pfx_ksys_write+0x10/0x10
[  240.614602][ T8162]  __x64_sys_madvise+0xa9/0x110
[  240.614619][ T8162]  ? lockdep_hardirqs_on+0x78/0x100
[  240.614636][ T8162]  do_syscall_64+0x106/0xf80
[  240.614653][ T8162]  ? clear_bhb_loop+0x40/0x90
[  240.614675][ T8162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.614693][ T8162] RIP: 0033:0x7f373179c799
[  240.614709][ T8162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.614726][ T8162] RSP: 002b:00007f37326f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  240.614743][ T8162] RAX: ffffffffffffffda RBX: 00007f3731a15fa0 RCX: 00007f373179c799
[  240.614755][ T8162] RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000200000000000
[  240.614765][ T8162] RBP: 00007f37326f2090 R08: 0000000000000000 R09: 0000000000000000
[  240.614776][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  240.614785][ T8162] R13: 00007f3731a16038 R14: 00007f3731a15fa0 R15: 00007ffdbdf2cef8
[  240.614810][ T8162]  </TASK>
[  241.838937][ T8172] xt_connbytes: Forcing CT accounting to be enabled
[  241.845768][ T8172] set match dimension is over the limit!
[  242.078592][   T30] audit: type=1400 audit(1772183857.523:447): avc:  denied  { setopt } for  pid=8173 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  242.100291][   T30] audit: type=1400 audit(1772183857.553:448): avc:  denied  { ioctl } for  pid=8173 comm="syz.4.608" path="socket:[19392]" dev="sockfs" ino=19392 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  242.210117][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'.
[  242.276899][   T30] audit: type=1400 audit(1772183857.553:449): avc:  denied  { write } for  pid=8173 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  242.834768][ T8188] CUSE: info not properly terminated
[  243.014540][    T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  243.133533][ T8190] FAULT_INJECTION: forcing a failure.
[  243.133533][ T8190] name failslab, interval 1, probability 0, space 0, times 0
[  243.154610][ T8190] CPU: 0 UID: 0 PID: 8190 Comm: syz.1.612 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  243.154638][ T8190] Tainted: [L]=SOFTLOCKUP
[  243.154644][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  243.154654][ T8190] Call Trace:
[  243.154660][ T8190]  <TASK>
[  243.154667][ T8190]  dump_stack_lvl+0x100/0x190
[  243.154703][ T8190]  should_fail_ex.cold+0x5/0xa
[  243.154726][ T8190]  ? tomoyo_realpath_from_path+0xb6/0x690
[  243.154745][ T8190]  should_failslab+0xc2/0x120
[  243.154771][ T8190]  __kmalloc_noprof+0xe0/0x850
[  243.154798][ T8190]  tomoyo_realpath_from_path+0xb6/0x690
[  243.154830][ T8190]  tomoyo_path_number_perm+0x23c/0x580
[  243.154856][ T8190]  ? tomoyo_path_number_perm+0x22e/0x580
[  243.154884][ T8190]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  243.154921][ T8190]  ? rcu_read_lock_any_held+0x6a/0xa0
[  243.154958][ T8190]  ? __x64_sys_close_range+0x2d9/0x5d0
[  243.154977][ T8190]  ? hook_file_ioctl_common+0x146/0x410
[  243.155012][ T8190]  security_file_ioctl+0xd3/0x230
[  243.155032][ T8190]  __x64_sys_ioctl+0xb7/0x210
[  243.155058][ T8190]  do_syscall_64+0x106/0xf80
[  243.155082][ T8190]  ? clear_bhb_loop+0x40/0x90
[  243.155109][ T8190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.155127][ T8190] RIP: 0033:0x7f51a039c799
[  243.155141][ T8190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.155157][ T8190] RSP: 002b:00007f51a12f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  243.155173][ T8190] RAX: ffffffffffffffda RBX: 00007f51a0615fa0 RCX: 00007f51a039c799
[  243.155184][ T8190] RDX: 0000200000000100 RSI: 000000004020ae76 RDI: 0000000000000004
[  243.155194][ T8190] RBP: 00007f51a12f6090 R08: 0000000000000000 R09: 0000000000000000
[  243.155204][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.155213][ T8190] R13: 00007f51a0616038 R14: 00007f51a0615fa0 R15: 00007fff71ec0778
[  243.155247][ T8190]  </TASK>
[  243.155294][ T8190] ERROR: Out of memory at tomoyo_realpath_from_path.
[  243.374527][    T9] usb 5-1: Using ep0 maxpacket: 16
[  243.387488][    T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  243.395614][    T9] usb 5-1: config 0 has no interface number 0
[  243.401713][    T9] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.412664][    T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  243.423905][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.435437][    T9] usb 5-1: config 0 descriptor??
[  243.983759][ T8198] warning: `syz.1.614' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  244.028408][ T8198] FAT-fs (nullb0): bogus number of reserved sectors
[  244.035207][ T8198] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  244.737488][    T9] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  244.744596][    T9] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  244.751599][    T9] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  244.758694][    T9] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  245.152135][    T9] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  245.170353][    T9] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input2
[  245.271835][    T9] usb 5-1: USB disconnect, device number 34
[  245.684826][   T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  245.929664][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  246.012408][   T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  246.212442][   T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  246.393099][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  246.410641][ T8216] netlink: 408 bytes leftover after parsing attributes in process `syz.4.620'.
[  246.429951][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  246.454859][   T24] usb 2-1: Product: syz
[  246.461377][   T24] usb 2-1: Manufacturer: syz
[  246.469162][   T24] usb 2-1: SerialNumber: syz
[  246.664587][ T5848] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  246.697494][   T24] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  246.826269][ T5848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.877052][ T5848] usb 5-1: config 0 has no interfaces?
[  246.887441][    T9] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  246.910804][   T30] audit: type=1400 audit(1772183862.353:450): avc:  denied  { getopt } for  pid=8208 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  246.911403][ T5848] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  246.941444][   T24] usb 2-1: USB disconnect, device number 28
[  246.955997][   T24] usblp1: removed
[  247.029182][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.071799][ T5848] usb 5-1: config 0 descriptor??
[  247.075810][    T9] usb 6-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[  247.088082][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  247.099885][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  247.109251][    T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  247.194502][    T9] usb 6-1: Product: syz
[  247.199038][    T9] usb 6-1: Manufacturer: syz
[  247.228268][    T9] usb 6-1: SerialNumber: syz
[  247.286796][    T9] usb 6-1: config 0 descriptor??
[  247.381232][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.392869][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.631117][   T24] usb 5-1: USB disconnect, device number 35
[  247.723746][    T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[  247.740173][    T9] usb 6-1: USB disconnect, device number 18
[  247.773936][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  247.884992][ T8225] CUSE: info not properly terminated
[  249.204679][ T8241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'.
[  249.213563][ T8241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'.
[  249.330930][ T8244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'.
[  249.339930][ T8244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'.
[  249.417501][ T8244] cgroup: Unknown subsys name 'euid>00000000000000000000'
[  249.424570][    T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  249.456474][   T30] audit: type=1326 audit(1772183864.803:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.3.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf7b9c799 code=0x7ffc0000
[  249.507444][   T30] audit: type=1326 audit(1772183864.803:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.3.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf7b9c799 code=0x7ffc0000
[  249.611958][   T30] audit: type=1326 audit(1772183864.803:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.3.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5bf7b9c799 code=0x7ffc0000
[  249.641223][   T30] audit: type=1326 audit(1772183864.993:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.3.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf7b9c799 code=0x7ffc0000
[  249.664862][   T30] audit: type=1326 audit(1772183864.993:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.3.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf7b9c799 code=0x7ffc0000
[  249.689090][    T9] usb 5-1: Using ep0 maxpacket: 32
[  249.698049][    T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  249.708674][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.720341][    T9] usb 5-1: config 0 descriptor??
[  250.034917][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  250.043984][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  250.056595][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  250.063756][    T9] usb 5-1: media controller created
[  250.105187][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'.
[  250.114242][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  250.117806][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  250.166494][   T30] audit: type=1326 audit(1772183865.593:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="syz.5.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d0d9c799 code=0x7ffc0000
[  250.195742][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  250.614616][   T30] audit: type=1326 audit(1772183865.603:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="syz.5.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d0d9c799 code=0x7ffc0000
[  250.641554][   T30] audit: type=1326 audit(1772183865.603:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="syz.5.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06d0d9c799 code=0x7ffc0000
[  250.665070][   T30] audit: type=1326 audit(1772183865.603:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="syz.5.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d0d9c799 code=0x7ffc0000
[  250.688536][   T30] audit: type=1326 audit(1772183865.603:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="syz.5.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d0d9c799 code=0x7ffc0000
[  250.740943][    T9] az6027: usb out operation failed. (-71)
[  250.761207][    T9] az6027: usb out operation failed. (-71)
[  250.774939][    T9] stb0899_attach: Driver disabled by Kconfig
[  250.785181][    T9] az6027: no front-end attached
[  250.785181][    T9] 
[  250.802719][    T9] az6027: usb out operation failed. (-71)
[  250.812508][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  250.841093][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24
[  250.873067][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[  250.896077][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.634'.
[  250.944497][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  250.971984][    T9] usb 5-1: USB disconnect, device number 36
[  251.004024][ T5916] usb 3-1: USB disconnect, device number 27
[  251.021025][ T5916] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  251.118151][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  251.465122][ T5916] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  251.535457][    T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  251.736223][ T5916] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[  251.753431][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0
[  251.782971][ T5916] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  251.799869][    T9] usb 4-1: Using ep0 maxpacket: 32
[  251.805107][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  251.944541][    T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  251.957742][ T5916] usb 3-1: Product: syz
[  251.964076][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.974396][ T5916] usb 3-1: Manufacturer: syz
[  251.980731][ T5916] usb 3-1: SerialNumber: syz
[  251.994836][    T9] usb 4-1: config 0 descriptor??
[  252.004881][ T5916] usb 3-1: config 0 descriptor??
[  252.047790][ T8284] syzkaller0: entered promiscuous mode
[  252.062653][ T8284] syzkaller0: entered allmulticast mode
[  252.134105][ T5916] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  252.231331][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  252.269418][ T5916] usb 3-1: USB disconnect, device number 28
[  252.275634][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  252.317114][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  252.348710][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  252.361510][    T9] usb 4-1: media controller created
[  252.409563][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  252.870452][ T8292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.642'.
[  252.879352][ T8292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.642'.
[  253.000352][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.642'.
[  253.009533][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.642'.
[  253.029867][ T8292] cgroup: Unknown subsys name 'euid>00000000000000000000'
[  253.078739][    T9] az6027: usb out operation failed. (-71)
[  253.157796][    T9] az6027: usb out operation failed. (-71)
[  253.186424][    T9] stb0899_attach: Driver disabled by Kconfig
[  253.192466][    T9] az6027: no front-end attached
[  253.192466][    T9] 
[  253.257020][    T9] az6027: usb out operation failed. (-71)
[  253.303296][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  253.337062][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25
[  253.386487][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[  253.393518][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  253.433879][    T9] usb 4-1: USB disconnect, device number 27
[  253.445957][   T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  253.654556][   T24] usb 2-1: Using ep0 maxpacket: 8
[  253.661011][   T24] usb 2-1: too many configurations: 102, using maximum allowed: 8
[  253.678847][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  253.693285][   T24] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  253.706341][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.715386][   T24] usb 2-1: Product: syz
[  253.725108][   T24] usb 2-1: Manufacturer: syz
[  253.740543][   T24] usb 2-1: SerialNumber: syz
[  253.757726][   T24] usb 2-1: config 0 descriptor??
[  253.781041][   T24] gspca_main: 047d:5003 too many config
[  254.061972][ T8302] netlink: 'syz.1.645': attribute type 20 has an invalid length.
[  254.076852][ T5882] usb 2-1: USB disconnect, device number 29
[  254.272266][ T8323] set match dimension is over the limit!
[  254.519603][ T8326] netlink: 'syz.2.651': attribute type 3 has an invalid length.
[  254.902411][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  254.902422][   T30] audit: type=1400 audit(1772183870.343:474): avc:  denied  { write } for  pid=8327 comm="syz.5.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  254.954928][ T8329] __nla_validate_parse: 3 callbacks suppressed
[  254.954939][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.652'.
[  255.102734][ T8335] CUSE: info not properly terminated
[  255.542702][ T8339] netlink: 'syz.1.654': attribute type 3 has an invalid length.
[  255.594546][  T793] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  255.742168][ T8349] set match dimension is over the limit!
[  255.850640][ T8351] set match dimension is over the limit!
[  255.893924][  T793] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  255.903036][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.911388][  T793] usb 3-1: Product: syz
[  255.914936][ T8347] syzkaller1: entered allmulticast mode
[  256.066505][  T793] usb 3-1: Manufacturer: syz
[  256.078520][  T793] usb 3-1: SerialNumber: syz
[  256.359276][  T793] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  256.452184][ T5848] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  256.672477][ T5882] usb 3-1: USB disconnect, device number 29
[  257.375327][ T5811] Bluetooth: hci5: command 0x0406 tx timeout
[  257.524512][ T5848] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  257.544615][ T5848] ath9k_htc: Failed to initialize the device
[  257.596525][ T5882] usb 3-1: ath9k_htc: USB layer deinitialized
[  257.959284][ T8367] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  257.959284][ T8367]    program syz.3.660 not setting count and/or reply_len properly
[  257.982587][   T30] audit: type=1400 audit(1772183873.423:475): avc:  denied  { module_request } for  pid=8359 comm="syz.3.660" kmod="netdev-syztnl0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  258.077518][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.663'.
[  258.092625][ T8373] fuse: Unknown parameter 'grou00000000000000000000'
[  258.272394][ T5882] libceph: connect (1)[c::]:6789 error -22
[  258.281438][ T5882] libceph: mon0 (1)[c::]:6789 connect error
[  258.306268][ T5882] libceph: connect (1)[c::]:6789 error -22
[  258.314939][ T5882] libceph: mon0 (1)[c::]:6789 connect error
[  258.419295][ T8377] ceph: No mds server is up or the cluster is laggy
[  258.507666][ T5848] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  258.664599][ T5894] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  258.696631][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  258.717163][ T5848] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  258.729209][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  258.745800][ T5848] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  258.756623][ T5848] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  258.768543][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.815700][ T5894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  258.826464][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  258.835848][ T5848] usb 2-1: config 0 descriptor??
[  258.878311][ T5894] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  258.894914][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.913527][ T5894] usb 4-1: Product: syz
[  258.918083][ T5894] usb 4-1: Manufacturer: syz
[  258.924572][ T5894] usb 4-1: SerialNumber: syz
[  259.376585][ T5848] hdpvr 2-1:0.0: firmware version 0x8 dated 
[  259.641202][ T5882] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  259.891194][ T5882] usb 3-1: Using ep0 maxpacket: 32
[  259.896904][ T8403] set match dimension is over the limit!
[  259.922866][ T5882] usb 3-1: config 0 has an invalid interface number: 191 but max is 0
[  259.942187][ T5882] usb 3-1: config 0 has no interface number 0
[  259.944076][ T5848] hdpvr 2-1:0.0: Could not setup controls
[  259.978354][ T5882] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  259.994410][ T5848] hdpvr 2-1:0.0: registering videodev failed
[  260.014186][ T5882] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  260.064811][ T5848] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71
[  260.072521][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.107646][ T5882] usb 3-1: Product: syz
[  260.107897][ T5848] usb 2-1: USB disconnect, device number 30
[  260.150473][ T5882] usb 3-1: Manufacturer: syz
[  260.166920][ T5882] usb 3-1: SerialNumber: syz
[  260.185154][ T5882] usb 3-1: config 0 descriptor??
[  260.191684][ T8392] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  260.695651][ T8392] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  261.347259][ T5882] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  261.522280][ T8415] netlink: 300 bytes leftover after parsing attributes in process `syz.1.673'.
[  261.655845][ T5882] asix 3-1:0.191: probe with driver asix failed with error -71
[  261.778565][ T5882] usb 3-1: USB disconnect, device number 30
[  261.887856][ T8419] FAULT_INJECTION: forcing a failure.
[  261.887856][ T8419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  261.948778][ T8419] CPU: 0 UID: 0 PID: 8419 Comm: syz.3.674 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  261.948805][ T8419] Tainted: [L]=SOFTLOCKUP
[  261.948809][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  261.948818][ T8419] Call Trace:
[  261.948823][ T8419]  <TASK>
[  261.948834][ T8419]  dump_stack_lvl+0x100/0x190
[  261.948865][ T8419]  should_fail_ex.cold+0x5/0xa
[  261.948888][ T8419]  _copy_from_iter+0x1f4/0x1690
[  261.948915][ T8419]  ? __asan_memset+0x23/0x50
[  261.948937][ T8419]  ? __pfx__copy_from_iter+0x10/0x10
[  261.948959][ T8419]  ? __pfx___alloc_skb+0x10/0x10
[  261.948994][ T8419]  netlink_sendmsg+0x808/0xda0
[  261.949019][ T8419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.949036][ T8419]  ? __might_fault+0xa0/0x140
[  261.949070][ T8419]  ____sys_sendmsg+0xa54/0xc30
[  261.949092][ T8419]  ? __pfx_____sys_sendmsg+0x10/0x10
[  261.949116][ T8419]  ___sys_sendmsg+0x190/0x1e0
[  261.949132][ T8419]  ? __pfx____sys_sendmsg+0x10/0x10
[  261.949170][ T8419]  __sys_sendmsg+0x170/0x220
[  261.949188][ T8419]  ? __pfx___sys_sendmsg+0x10/0x10
[  261.949219][ T8419]  do_syscall_64+0x106/0xf80
[  261.949235][ T8419]  ? clear_bhb_loop+0x40/0x90
[  261.949255][ T8419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.949267][ T8419] RIP: 0033:0x7f5bf7b9c799
[  261.949278][ T8419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  261.949288][ T8419] RSP: 002b:00007f5bf5df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  261.949299][ T8419] RAX: ffffffffffffffda RBX: 00007f5bf7e15fa0 RCX: 00007f5bf7b9c799
[  261.949307][ T8419] RDX: 0000000020044100 RSI: 00002000000000c0 RDI: 0000000000000003
[  261.949313][ T8419] RBP: 00007f5bf5df6090 R08: 0000000000000000 R09: 0000000000000000
[  261.949320][ T8419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.949326][ T8419] R13: 00007f5bf7e16038 R14: 00007f5bf7e15fa0 R15: 00007ffc7b46f2d8
[  261.949340][ T8419]  </TASK>
[  262.110267][ T5894] usb 4-1: cannot find UAC_HEADER
[  262.254548][   T30] audit: type=1400 audit(1772183877.663:476): avc:  denied  { mounton } for  pid=8420 comm="syz.2.676" path="/130/file0" dev="tmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  262.422967][ T5894] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  262.441662][ T5894] usb 4-1: USB disconnect, device number 28
[  262.507933][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  262.714617][ T5882] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  262.733969][ T5848] Process accounting resumed
[  262.888621][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  262.900371][ T5882] usb 3-1: config 0 has no interfaces?
[  262.968185][ T5848] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  262.976751][ T5894] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  262.980020][ T5882] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  262.997940][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.010206][ T5882] usb 3-1: config 0 descriptor??
[  263.137132][   T30] audit: type=1400 audit(1772183878.583:477): avc:  denied  { write } for  pid=8441 comm="syz.4.683" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  263.246153][   T30] audit: type=1400 audit(1772183878.613:478): avc:  denied  { connect } for  pid=8441 comm="syz.4.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  263.266356][ T5848] usb 6-1: Using ep0 maxpacket: 32
[  263.272123][ T5894] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[  263.283101][ T5894] usb 4-1: config 0 interface 0 has no altsetting 0
[  263.290848][   T30] audit: type=1400 audit(1772183878.613:479): avc:  denied  { ioctl } for  pid=8441 comm="syz.4.683" path="socket:[20357]" dev="sockfs" ino=20357 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  263.349868][ T5894] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  263.360128][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  263.373919][ T5848] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  263.385390][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.282482][ T5894] usb 4-1: Product: syz
[  264.295047][ T5894] usb 4-1: Manufacturer: syz
[  264.305868][ T5848] usb 6-1: config 0 descriptor??
[  264.311159][ T5894] usb 4-1: SerialNumber: syz
[  264.431903][ T8444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.456128][ T8444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.471329][ T5894] usb 4-1: config 0 descriptor??
[  264.536719][ T5848] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  264.539533][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  264.544989][ T5848] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  264.545033][ T5848] usb 6-1: media controller created
[  264.563321][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  264.604087][ T5894] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  264.667743][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  265.032021][ T5961] usb 4-1: USB disconnect, device number 29
[  265.117099][ T5848] az6027: usb out operation failed. (-71)
[  265.163578][   T30] audit: type=1400 audit(1772183880.603:480): avc:  denied  { read write } for  pid=8448 comm="syz.4.685" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  265.172300][ T5848] az6027: usb out operation failed. (-71)
[  265.198054][ T5848] stb0899_attach: Driver disabled by Kconfig
[  265.204833][ T5848] az6027: no front-end attached
[  265.204833][ T5848] 
[  265.212854][ T5848] az6027: usb out operation failed. (-71)
[  265.219396][ T5848] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  265.229700][   T30] audit: type=1400 audit(1772183880.603:481): avc:  denied  { open } for  pid=8448 comm="syz.4.685" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  265.239402][ T5848] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26
[  265.289892][   T30] audit: type=1800 audit(1772183880.733:482): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.686" name="file1" dev="tmpfs" ino=783 res=0 errno=0
[  265.323442][ T5848] dvb-usb: schedule remote query interval to 400 msecs.
[  265.331605][ T5848] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  265.383602][ T5848] usb 6-1: USB disconnect, device number 19
[  265.485367][ T8456] netlink: 44 bytes leftover after parsing attributes in process `syz.4.687'.
[  265.565573][ T5848] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  265.772388][ T8464] binder_alloc: binder_alloc_mmap_handler: 8463 200000ffd000-200001000000 already mapped failed -16
[  265.784985][   T30] audit: type=1400 audit(1772183881.213:483): avc:  denied  { map } for  pid=8463 comm="syz.4.689" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  265.848319][ T8461] netlink: 'syz.3.688': attribute type 1 has an invalid length.
[  265.856047][ T8461] netlink: 'syz.3.688': attribute type 4 has an invalid length.
[  265.864156][ T8461] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.688'.
[  265.876178][ T8464] binder_alloc: binder_alloc_mmap_handler: 8463 200000ffd000-200001000000 already mapped failed -16
[  265.954647][   T30] audit: type=1400 audit(1772183881.393:484): avc:  denied  { create } for  pid=8465 comm="syz.5.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  265.989189][ T8464] binder_alloc: binder_alloc_mmap_handler: 8463 200000ffd000-200001000000 already mapped failed -16
[  266.018780][ T8464] binder_alloc: binder_alloc_mmap_handler: 8463 200000ffd000-200001000000 already mapped failed -16
[  266.254647][   T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  266.273155][ T8477] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  266.273155][ T8477]    program syz.1.692 not setting count and/or reply_len properly
[  266.395475][ T5848] usb 3-1: USB disconnect, device number 31
[  266.444614][   T10] usb 4-1: Using ep0 maxpacket: 32
[  266.465187][   T10] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  266.492568][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.512354][   T10] usb 4-1: Product: syz
[  266.520870][   T10] usb 4-1: Manufacturer: syz
[  266.533149][   T10] usb 4-1: SerialNumber: syz
[  266.537881][    T9] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  266.556795][   T10] usb 4-1: config 0 descriptor??
[  266.575305][   T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  266.592135][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  266.609710][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  266.630279][   T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  266.644136][   T10] usb 4-1: media controller created
[  266.671186][   T30] audit: type=1400 audit(1772183882.113:485): avc:  denied  { ioctl } for  pid=8489 comm="syz.1.695" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  266.720152][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  266.737847][    T9] usb 5-1: config 2 has an invalid interface number: 229 but max is 0
[  266.746331][    T9] usb 5-1: config 2 has no interface number 0
[  266.752415][    T9] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d0.be
[  266.777030][   T10] usb 4-1: selecting invalid altsetting 7
[  266.783248][ T8470] dvb-usb: bulk message failed: -22 (3/0)
[  266.790606][   T10] cxusb: set interface failed
[  266.798614][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.806703][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  266.874557][ T5848] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  266.885127][    T9] peak_usb 5-1:2.229 can0: sending cmd f=0x6 n=0x1 failure: -22
[  266.893918][   T10] DVB: Unable to find symbol lgdt330x_attach()
[  266.908568][   T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  266.917106][ T8493] FAULT_INJECTION: forcing a failure.
[  266.917106][ T8493] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  266.917486][    T9] peak_usb 5-1:2.229: unable to read PCAN-USB serial number (err -22)
[  266.959291][ T8493] CPU: 1 UID: 0 PID: 8493 Comm: syz.1.697 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  266.959319][ T8493] Tainted: [L]=SOFTLOCKUP
[  266.959325][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  266.959334][ T8493] Call Trace:
[  266.959339][ T8493]  <TASK>
[  266.959346][ T8493]  dump_stack_lvl+0x100/0x190
[  266.959377][ T8493]  should_fail_ex.cold+0x5/0xa
[  266.959399][ T8493]  _copy_from_iter+0x1f4/0x1690
[  266.959425][ T8493]  ? __asan_memset+0x23/0x50
[  266.959446][ T8493]  ? __pfx__copy_from_iter+0x10/0x10
[  266.959468][ T8493]  ? __pfx___alloc_skb+0x10/0x10
[  266.959501][ T8493]  netlink_sendmsg+0x808/0xda0
[  266.959525][ T8493]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.959542][ T8493]  ? __might_fault+0xa0/0x140
[  266.959572][ T8493]  ____sys_sendmsg+0xa54/0xc30
[  266.959595][ T8493]  ? __pfx_____sys_sendmsg+0x10/0x10
[  266.959633][ T8493]  ___sys_sendmsg+0x190/0x1e0
[  266.959656][ T8493]  ? __pfx____sys_sendmsg+0x10/0x10
[  266.959709][ T8493]  __sys_sendmsg+0x170/0x220
[  266.959728][ T8493]  ? __pfx___sys_sendmsg+0x10/0x10
[  266.959761][ T8493]  do_syscall_64+0x106/0xf80
[  266.959778][ T8493]  ? clear_bhb_loop+0x40/0x90
[  266.959798][ T8493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.959815][ T8493] RIP: 0033:0x7f51a039c799
[  266.959830][ T8493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.959845][ T8493] RSP: 002b:00007f51a12f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  266.959862][ T8493] RAX: ffffffffffffffda RBX: 00007f51a0615fa0 RCX: 00007f51a039c799
[  266.959874][ T8493] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003
[  266.959883][ T8493] RBP: 00007f51a12f6090 R08: 0000000000000000 R09: 0000000000000000
[  266.959893][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.959902][ T8493] R13: 00007f51a0616038 R14: 00007f51a0615fa0 R15: 00007fff71ec0778
[  266.959924][ T8493]  </TASK>
[  267.014469][   T10] rc_core: IR keymap rc-dvico-portable not found
[  267.114497][ T5848] usb 3-1: Using ep0 maxpacket: 32
[  267.206303][ T5848] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  267.217715][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.245468][    T9] peak_usb 5-1:2.229: probe with driver peak_usb failed with error -22
[  267.251549][ T5848] usb 3-1: config 0 descriptor??
[  267.349013][   T10] Registered IR keymap rc-empty
[  267.396520][   T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  267.438189][   T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input27
[  267.470383][ T5848] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  267.491878][   T10] dvb-usb: schedule remote query interval to 100 msecs.
[  267.518374][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  267.539185][   T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  267.558463][ T5848] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  267.575618][ T5848] usb 3-1: media controller created
[  267.606248][   T10] usb 4-1: USB disconnect, device number 30
[  267.649120][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  267.985075][ T8488] dvb-usb: bulk message failed: -22 (5/0)
[  268.016007][ T5848] az6027: usb out operation failed. (-71)
[  268.023247][   T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  268.024827][ T5961] usb 5-1: USB disconnect, device number 37
[  268.083457][ T5848] az6027: usb out operation failed. (-71)
[  268.110819][ T5848] stb0899_attach: Driver disabled by Kconfig
[  268.138892][ T5848] az6027: no front-end attached
[  268.138892][ T5848] 
[  268.165936][ T5848] az6027: usb out operation failed. (-71)
[  268.175844][ T5848] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  268.205640][ T5848] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28
[  268.248693][ T5848] dvb-usb: schedule remote query interval to 400 msecs.
[  268.280576][ T5848] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  268.323041][ T5848] usb 3-1: USB disconnect, device number 32
[  268.375201][   T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  268.416929][ T5848] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  268.485075][ T5961] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  268.554526][   T10] usb 4-1: Using ep0 maxpacket: 8
[  268.646592][   T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  268.664518][   T10] usb 4-1: config 0 has no interface number 0
[  268.691056][   T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  268.730823][   T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  268.775027][ T5961] usb 5-1: Using ep0 maxpacket: 8
[  268.778208][   T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  268.793046][   T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  268.806592][ T5961] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  268.806900][   T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  268.824549][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.847710][ T5961] usb 5-1: config 0 has no interface number 0
[  268.850947][   T10] usb 4-1: config 0 descriptor??
[  268.853818][ T5961] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  268.908004][   T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  268.924955][ T5961] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  268.974536][ T5961] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  269.001938][ T5961] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  269.044492][ T5961] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  269.073739][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.092636][ T5961] usb 5-1: config 0 descriptor??
[  269.097700][ T5848] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  269.130519][ T5961] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  269.178995][    T9] usb 4-1: USB disconnect, device number 31
[  269.191062][    T9] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  269.285183][ T5848] usb 3-1: Using ep0 maxpacket: 32
[  269.304874][ T5848] usb 3-1: config 0 has an invalid interface number: 191 but max is 0
[  269.313194][ T5848] usb 3-1: config 0 has no interface number 0
[  269.320114][ T5848] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  269.330189][ T5141] block nbd0: Possible stuck request ffff888027d68000: control (read@0,4096B). Runtime 150 seconds
[  269.343246][ T5848] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  269.353430][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.362034][ T5848] usb 3-1: Product: syz
[  269.366415][ T5848] usb 3-1: Manufacturer: syz
[  269.371003][ T5848] usb 3-1: SerialNumber: syz
[  269.378208][ T5848] usb 3-1: config 0 descriptor??
[  269.383872][ T8525] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  269.503238][   T10] usb 5-1: USB disconnect, device number 38
[  269.520298][   T10] ldusb 5-1:0.55: LD USB Device #1 now disconnected
[  269.598827][ T8525] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  269.889314][ T8547] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  269.889314][ T8547]    program syz.3.705 not setting count and/or reply_len properly
[  270.055016][ T5961] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  270.253124][ T5961] usb 2-1: Using ep0 maxpacket: 32
[  270.282259][ T5961] usb 2-1: config 0 has an invalid interface number: 191 but max is 0
[  270.302103][ T5961] usb 2-1: config 0 has no interface number 0
[  270.316453][ T5961] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  270.345134][ T5961] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  270.364045][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.383965][ T5961] usb 2-1: Product: syz
[  270.394800][ T5961] usb 2-1: Manufacturer: syz
[  270.404860][ T5961] usb 2-1: SerialNumber: syz
[  270.420463][ T5961] usb 2-1: config 0 descriptor??
[  270.434469][ T8546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  270.479866][ T5848] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  270.496372][ T5848] asix 3-1:0.191: probe with driver asix failed with error -71
[  270.508646][ T5848] usb 3-1: USB disconnect, device number 33
[  270.657796][ T8546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  271.814408][ T5961] asix 2-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  271.884572][ T5961] asix 2-1:0.191: probe with driver asix failed with error -71
[  271.921376][ T5961] usb 2-1: USB disconnect, device number 31
[  272.147848][   T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  272.522394][ T8579] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  272.552947][   T10] usb 5-1: Using ep0 maxpacket: 32
[  272.565310][   T10] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  272.652968][   T10] usb 5-1: config 0 has no interface number 0
[  272.707033][   T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  272.738809][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.863715][   T10] usb 5-1: Product: syz
[  273.562091][   T10] usb 5-1: Manufacturer: syz
[  273.666415][   T10] usb 5-1: SerialNumber: syz
[  273.687585][   T10] usb 5-1: config 0 descriptor??
[  273.705368][   T10] radio-si470x 5-1:0.35: could not find interrupt in endpoint
[  273.712905][   T10] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5
[  273.719959][ T8588] veth0: entered promiscuous mode
[  273.953784][   T10] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  274.085270][    T9] Process accounting resumed
[  274.167912][ T8569] xt_CT: You must specify a L4 protocol and not use inversions on it
[  274.184646][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  274.184659][   T30] audit: type=1326 audit(1772183889.603:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373179c799 code=0x7ffc0000
[  274.214698][   T10] radio-raremono 5-1:0.35: V4L2 device registered as radio48
[  274.215706][ T8584] veth0: left promiscuous mode
[  274.244578][ T5961] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  274.345766][   T30] audit: type=1326 audit(1772183889.603:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f373179c799 code=0x7ffc0000
[  274.441615][ T5848] usb 5-1: USB disconnect, device number 39
[  274.447855][ T5848] radio-raremono 5-1:0.35: Thanko's Raremono disconnected
[  274.489048][   T30] audit: type=1326 audit(1772183889.603:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373179c799 code=0x7ffc0000
[  274.525132][ T5961] usb 4-1: Using ep0 maxpacket: 8
[  274.575999][ T5961] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  274.593977][ T5961] usb 4-1: config 0 has no interface number 0
[  274.609372][ T5961] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  274.636152][   T30] audit: type=1326 audit(1772183889.603:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373179c799 code=0x7ffc0000
[  274.670352][ T5961] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  274.700550][ T5961] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  274.716725][   T30] audit: type=1326 audit(1772183889.603:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f373179c799 code=0x7ffc0000
[  274.778758][ T5961] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  274.809173][ T5961] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  274.824604][   T30] audit: type=1326 audit(1772183889.603:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373179c799 code=0x7ffc0000
[  274.853122][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.892325][ T5961] usb 4-1: config 0 descriptor??
[  274.956328][ T5961] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  275.014504][   T30] audit: type=1326 audit(1772183889.603:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373179c799 code=0x7ffc0000
[  275.084830][   T30] audit: type=1326 audit(1772183889.613:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f373179c799 code=0x7ffc0000
[  275.154570][   T30] audit: type=1326 audit(1772183889.623:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373179c799 code=0x7ffc0000
[  275.262843][   T30] audit: type=1326 audit(1772183889.623:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373179c799 code=0x7ffc0000
[  275.354720][ T5961] usb 4-1: USB disconnect, device number 32
[  275.456651][ T8604] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  275.456651][ T8604]    program syz.2.718 not setting count and/or reply_len properly
[  275.485959][ T5961] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  275.812463][ T8610] fuse: Unknown parameter 'user_id00000000000000000000'
[  276.129575][ T8621] FAULT_INJECTION: forcing a failure.
[  276.129575][ T8621] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  276.143633][ T8621] CPU: 0 UID: 0 PID: 8621 Comm: syz.4.725 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  276.143662][ T8621] Tainted: [L]=SOFTLOCKUP
[  276.143668][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  276.143678][ T8621] Call Trace:
[  276.143683][ T8621]  <TASK>
[  276.143690][ T8621]  dump_stack_lvl+0x100/0x190
[  276.143720][ T8621]  should_fail_ex.cold+0x5/0xa
[  276.143743][ T8621]  _copy_from_iter+0x1f4/0x1690
[  276.143770][ T8621]  ? __asan_memset+0x23/0x50
[  276.143792][ T8621]  ? __pfx__copy_from_iter+0x10/0x10
[  276.143814][ T8621]  ? __pfx___alloc_skb+0x10/0x10
[  276.143849][ T8621]  netlink_sendmsg+0x808/0xda0
[  276.143868][ T8621]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.143880][ T8621]  ? __might_fault+0xa0/0x140
[  276.143899][ T8621]  ____sys_sendmsg+0xa54/0xc30
[  276.143915][ T8621]  ? __pfx_____sys_sendmsg+0x10/0x10
[  276.143935][ T8621]  ___sys_sendmsg+0x190/0x1e0
[  276.143951][ T8621]  ? __pfx____sys_sendmsg+0x10/0x10
[  276.143983][ T8621]  __sys_sendmsg+0x170/0x220
[  276.143993][ T8621]  ? __pfx___sys_sendmsg+0x10/0x10
[  276.144013][ T8621]  do_syscall_64+0x106/0xf80
[  276.144024][ T8621]  ? clear_bhb_loop+0x40/0x90
[  276.144037][ T8621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.144048][ T8621] RIP: 0033:0x7f373179c799
[  276.144058][ T8621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  276.144068][ T8621] RSP: 002b:00007f37326f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.144079][ T8621] RAX: ffffffffffffffda RBX: 00007f3731a15fa0 RCX: 00007f373179c799
[  276.144086][ T8621] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  276.144093][ T8621] RBP: 00007f37326f2090 R08: 0000000000000000 R09: 0000000000000000
[  276.144099][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.144105][ T8621] R13: 00007f3731a16038 R14: 00007f3731a15fa0 R15: 00007ffdbdf2cef8
[  276.144119][ T8621]  </TASK>
[  276.699181][ T5848] libceph: connect (1)[c::]:6789 error -22
[  276.705214][ T5848] libceph: mon0 (1)[c::]:6789 connect error
[  276.750539][ T8624] ceph: No mds server is up or the cluster is laggy
[  276.974895][   T31] INFO: task syz.0.180:6646 blocked for more than 143 seconds.
[  276.983316][   T31]       Tainted: G             L      syzkaller #0
[  276.998731][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  277.016080][   T31] task:syz.0.180       state:D stack:25704 pid:6646  tgid:6646  ppid:5801   task_flags:0x400040 flags:0x00080002
[  277.114587][ T5848] Process accounting resumed
[  277.286027][   T31] Call Trace:
[  277.291436][   T31]  <TASK>
[  277.295777][   T31]  __schedule+0xfee/0x60e0
[  277.301222][   T31]  ? __lock_acquire+0x4a5/0x2630
[  277.309942][   T31]  ? stack_depot_save_flags+0x27/0x9d0
[  277.326234][   T31]  ? __pfx___schedule+0x10/0x10
[  277.332863][   T31]  ? find_held_lock+0x2b/0x80
[  277.358744][   T31]  ? schedule+0x2bf/0x390
[  277.389432][   T31]  schedule+0xdd/0x390
[  277.394168][   T31]  schedule_preempt_disabled+0x13/0x30
[  277.405894][   T31]  __mutex_lock+0xc9a/0x1b90
[  277.410626][   T31]  ? bdev_release+0x15a/0x6d0
[  277.417591][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  277.463303][   T31]  ? find_held_lock+0x2b/0x80
[  277.473997][   T31]  ? do_raw_spin_unlock+0x145/0x1e0
[  277.484622][   T31]  ? bdev_release+0x15a/0x6d0
[  277.648341][   T31]  bdev_release+0x15a/0x6d0
[  277.653100][   T31]  ? __pfx_blkdev_release+0x10/0x10
[  277.675514][   T31]  blkdev_release+0x15/0x20
[  277.680086][   T31]  __fput+0x3ff/0xb40
[  277.684216][   T31]  task_work_run+0x150/0x240
[  277.697296][   T31]  ? __pfx_task_work_run+0x10/0x10
[  277.702445][   T31]  exit_to_user_mode_loop+0x100/0x4a0
[  277.708240][   T31]  do_syscall_64+0x67c/0xf80
[  277.712907][   T31]  ? clear_bhb_loop+0x40/0x90
[  277.718448][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.724410][   T31] RIP: 0033:0x7f490b59c799
[  277.735164][   T31] RSP: 002b:00007ffdf200c498 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  277.747203][   T31] RAX: 0000000000000000 RBX: 00007f490b817da0 RCX: 00007f490b59c799
[  277.756602][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  277.791618][   T31] RBP: 00007f490b817da0 R08: 0000000000000006 R09: 0000000000000000
[  277.802851][   T31] R10: 00007f490b817cb0 R11: 0000000000000246 R12: 000000000001cf06
[  277.824535][   T31] R13: 00007f490b81636c R14: 000000000001cd98 R15: 00007f490b816360
[  277.839871][   T31]  </TASK>
[  277.844059][   T31] INFO: task syz.0.180:6654 blocked for more than 144 seconds.
[  277.862838][   T31]       Tainted: G             L      syzkaller #0
[  277.869826][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  277.880737][   T31] task:syz.0.180       state:D stack:28184 pid:6654  tgid:6646  ppid:5801   task_flags:0x400140 flags:0x00080002
[  278.004539][   T31] Call Trace:
[  278.080189][   T31]  <TASK>
[  278.083172][   T31]  __schedule+0xfee/0x60e0
[  278.087924][   T31]  ? __lock_acquire+0x4a5/0x2630
[  278.092894][   T31]  ? __pfx___schedule+0x10/0x10
[  278.100105][   T31]  ? find_held_lock+0x2b/0x80
[  278.104904][   T31]  ? schedule+0x2bf/0x390
[  278.109297][   T31]  schedule+0xdd/0x390
[  278.113463][   T31]  schedule_preempt_disabled+0x13/0x30
[  278.119366][   T31]  __mutex_lock+0xc9a/0x1b90
[  278.124309][   T31]  ? bdev_release+0x15a/0x6d0
[  278.129191][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  278.134274][   T31]  ? find_held_lock+0x2b/0x80
[  278.139591][   T31]  ? do_raw_spin_unlock+0x145/0x1e0
[  278.144959][   T31]  ? bdev_release+0x15a/0x6d0
[  278.149728][   T31]  bdev_release+0x15a/0x6d0
[  278.155204][   T31]  ? __pfx_blkdev_release+0x10/0x10
[  278.160496][   T31]  blkdev_release+0x15/0x20
[  278.166029][   T31]  __fput+0x3ff/0xb40
[  278.170046][   T31]  task_work_run+0x150/0x240
[  278.175933][   T31]  ? __pfx_task_work_run+0x10/0x10
[  278.181073][   T31]  exit_to_user_mode_loop+0x100/0x4a0
[  278.186735][   T31]  do_syscall_64+0x67c/0xf80
[  278.191348][   T31]  ? clear_bhb_loop+0x40/0x90
[  278.196281][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.202204][   T31] RIP: 0033:0x7f490b59c799
[  278.209257][   T31] RSP: 002b:00007f490c387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  278.217896][   T31] RAX: 0000000000000000 RBX: 00007f490b816270 RCX: 00007f490b59c799
[  278.226581][   T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 000000000000000b
[  278.236159][   T31] RBP: 00007f490b632bd9 R08: 0000000000000000 R09: 0000000000000000
[  278.244147][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  278.254193][   T31] R13: 00007f490b816308 R14: 00007f490b816270 R15: 00007ffdf200c338
[  278.262730][   T31]  </TASK>
[  278.266259][   T31] 
[  278.266259][   T31] Showing all locks held in the system:
[  278.274252][   T31] 1 lock held by pool_workqueue_/3:
[  278.280578][   T31] 1 lock held by khungtaskd/31:
[  278.285668][   T31]  #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  278.314112][   T31] 2 locks held by getty/5563:
[  278.381810][   T31]  #0: ffff88803920a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  278.402322][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[  278.418315][   T31] 1 lock held by syz-executor/5788:
[  278.427632][   T31]  #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[  278.442081][   T31] 1 lock held by udevd/6270:
[  278.454139][   T31]  #0: ffff888027ca9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  278.464610][   T31] 1 lock held by syz.0.180/6646:
[  278.469673][   T31]  #0: ffff888027ca9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0
[  278.479721][   T31] 1 lock held by syz.0.180/6654:
[  278.484755][   T31]  #0: ffff888027ca9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0
[  278.494615][   T31] 1 lock held by syz.3.727/8636:
[  278.499644][   T31] 1 lock held by syz.3.727/8637:
[  278.504662][   T31] 
[  278.507187][   T31] =============================================
[  278.507187][   T31] 
[  278.524613][   T31] NMI backtrace for cpu 0
[  278.524630][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  278.524653][   T31] Tainted: [L]=SOFTLOCKUP
[  278.524658][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  278.524667][   T31] Call Trace:
[  278.524672][   T31]  <TASK>
[  278.524678][   T31]  dump_stack_lvl+0x100/0x190
[  278.524708][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  278.524726][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  278.524753][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  278.524778][   T31]  sys_info+0x141/0x190
[  278.524796][   T31]  watchdog+0xd25/0x1050
[  278.524825][   T31]  ? __pfx_watchdog+0x10/0x10
[  278.524847][   T31]  ? __kthread_parkme+0x18c/0x230
[  278.524872][   T31]  ? kthread+0x13a/0x450
[  278.524887][   T31]  ? __pfx_watchdog+0x10/0x10
[  278.524907][   T31]  kthread+0x370/0x450
[  278.524921][   T31]  ? __pfx_kthread+0x10/0x10
[  278.524937][   T31]  ret_from_fork+0x754/0xd80
[  278.524954][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  278.524974][   T31]  ? __switch_to+0x7b4/0x1120
[  278.524993][   T31]  ? __pfx_kthread+0x10/0x10
[  278.525010][   T31]  ret_from_fork_asm+0x1a/0x30
[  278.525041][   T31]  </TASK>
[  278.525047][   T31] Sending NMI from CPU 0 to CPUs 1:
[  278.650979][    C1] NMI backtrace for cpu 1
[  278.650995][    C1] CPU: 1 UID: 0 PID: 8636 Comm: syz.3.727 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  278.651014][    C1] Tainted: [L]=SOFTLOCKUP
[  278.651018][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  278.651026][    C1] RIP: 0010:mark_lock+0x52/0xa20
[  278.651049][    C1] Code: 89 d3 83 fa 08 74 6d 41 be 01 00 00 00 89 d9 41 d3 e6 4d 63 f6 41 0f b7 44 24 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 fe d0 2f 14 <73> 5b 48 8d 04 80 48 8d 04 80 48 8d 04 c5 a0 6b 14 96 4c 89 f1 48
[  278.651061][    C1] RSP: 0018:ffffc9001b61f670 EFLAGS: 00000007
[  278.651073][    C1] RAX: 0000000000000641 RBX: 0000000000000002 RCX: 0000000000000002
[  278.651081][    C1] RDX: 0000000000000002 RSI: ffff88807b5a0b18 RDI: ffff88807b5a0000
[  278.651089][    C1] RBP: ffffc9001b61f708 R08: 0000000000000000 R09: 0000000000000000
[  278.651097][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807b5a0b18
[  278.651105][    C1] R13: ffff88807b5a0000 R14: 0000000000000004 R15: ffffc9001b61f8d8
[  278.651113][    C1] FS:  00007f5bf5dd56c0(0000) GS:ffff888124447000(0000) knlGS:0000000000000000
[  278.651127][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  278.651136][    C1] CR2: 0000200000261030 CR3: 0000000084da5000 CR4: 00000000003526f0
[  278.651145][    C1] Call Trace:
[  278.651149][    C1]  <TASK>
[  278.651156][    C1]  ? do_raw_spin_lock+0x128/0x260
[  278.651172][    C1]  mark_held_locks+0x40/0x70
[  278.651190][    C1]  lockdep_hardirqs_on_prepare+0xb4/0x1b0
[  278.651209][    C1]  trace_hardirqs_on+0x36/0x40
[  278.651228][    C1]  _raw_spin_unlock_irqrestore+0x52/0x80
[  278.651248][    C1]  __skb_try_recv_datagram+0x16a/0x500
[  278.651268][    C1]  ? __pfx_sk_busy_loop_end+0x10/0x10
[  278.651285][    C1]  ? __pfx___skb_try_recv_datagram+0x10/0x10
[  278.651310][    C1]  __unix_dgram_recvmsg+0x1bc/0xc30
[  278.651333][    C1]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[  278.651349][    C1]  ? __lock_acquire+0x4a5/0x2630
[  278.651368][    C1]  ? irqentry_exit+0x180/0x670
[  278.651382][    C1]  ? iovec_from_user+0xda/0x140
[  278.651405][    C1]  unix_dgram_recvmsg+0xd0/0x110
[  278.651421][    C1]  ____sys_recvmsg+0x5f7/0x6b0
[  278.651438][    C1]  ? __pfx_____sys_recvmsg+0x10/0x10
[  278.651455][    C1]  ? ___sys_recvmsg+0x177/0x1a0
[  278.651470][    C1]  ? kfree+0x2ec/0x6b0
[  278.651483][    C1]  ? irqentry_exit+0x180/0x670
[  278.651496][    C1]  ___sys_recvmsg+0x16a/0x1a0
[  278.651511][    C1]  ? __pfx____sys_recvmsg+0x10/0x10
[  278.651536][    C1]  ? __pfx___might_resched+0x10/0x10
[  278.651556][    C1]  do_recvmmsg+0x301/0x760
[  278.651573][    C1]  ? __pfx_do_recvmmsg+0x10/0x10
[  278.651588][    C1]  ? __lock_acquire+0x4a5/0x2630
[  278.651607][    C1]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  278.651624][    C1]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  278.651642][    C1]  ? kcov_ioctl+0x16a/0x720
[  278.651658][    C1]  ? rcu_is_watching+0x12/0xc0
[  278.651673][    C1]  __x64_sys_recvmmsg+0x22a/0x280
[  278.651687][    C1]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  278.651699][    C1]  ? kcov_ioctl+0x16a/0x720
[  278.651717][    C1]  do_syscall_64+0x106/0xf80
[  278.651730][    C1]  ? clear_bhb_loop+0x40/0x90
[  278.651748][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.651761][    C1] RIP: 0033:0x7f5bf7b9c799
[  278.651771][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  278.651783][    C1] RSP: 002b:00007f5bf5dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  278.651795][    C1] RAX: ffffffffffffffda RBX: 00007f5bf7e16090 RCX: 00007f5bf7b9c799
[  278.651803][    C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  278.651811][    C1] RBP: 00007f5bf7c32bd9 R08: 0000000000000000 R09: 0000000000000000
[  278.651819][    C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  278.651827][    C1] R13: 00007f5bf7e16128 R14: 00007f5bf7e16090 R15: 00007ffc7b46f2d8
[  278.651841][    C1]  </TASK>
[  279.037177][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  279.044029][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  279.054707][   T31] Tainted: [L]=SOFTLOCKUP
[  279.059014][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  279.069059][   T31] Call Trace:
[  279.072329][   T31]  <TASK>
[  279.075258][   T31]  dump_stack_lvl+0x100/0x190
[  279.079948][   T31]  vpanic+0x552/0x970
[  279.083923][   T31]  ? __pfx_vpanic+0x10/0x10
[  279.088415][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  279.094562][   T31]  panic+0xd1/0xe0
[  279.098274][   T31]  ? __pfx_panic+0x10/0x10
[  279.102679][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  279.108817][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  279.114956][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  279.121092][   T31]  ? watchdog.cold+0x198/0x1ca
[  279.125838][   T31]  ? watchdog+0xd35/0x1050
[  279.130243][   T31]  watchdog.cold+0x1a9/0x1ca
[  279.134822][   T31]  ? __pfx_watchdog+0x10/0x10
[  279.139485][   T31]  ? __kthread_parkme+0x18c/0x230
[  279.144504][   T31]  ? kthread+0x13a/0x450
[  279.148735][   T31]  ? __pfx_watchdog+0x10/0x10
[  279.153393][   T31]  kthread+0x370/0x450
[  279.157440][   T31]  ? __pfx_kthread+0x10/0x10
[  279.162010][   T31]  ret_from_fork+0x754/0xd80
[  279.166581][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  279.171673][   T31]  ? __switch_to+0x7b4/0x1120
[  279.176337][   T31]  ? __pfx_kthread+0x10/0x10
[  279.180909][   T31]  ret_from_fork_asm+0x1a/0x30
[  279.185666][   T31]  </TASK>
[  279.188959][   T31] Kernel Offset: disabled
[  279.193258][   T31] Rebooting in 86400 seconds..