last executing test programs:

2m39.043787616s ago: executing program 3 (id=2725):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb", 0x4f}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f21", 0x67}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m38.844763618s ago: executing program 3 (id=2727):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb", 0x4f}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee83", 0x80}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m38.791480714s ago: executing program 3 (id=2729):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x40004)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r4, 0x8)
landlock_restrict_self(r4, 0xc)
modify_ldt$write(0x1, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0)
bind$can_j1939(r5, 0x0, 0x0)
close(0x3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)

2m37.512014768s ago: executing program 3 (id=2735):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb", 0x4f}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc4647", 0x6e}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04a", 0x3c}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m26.983731455s ago: executing program 3 (id=2736):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x24, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x24}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810)

2m26.470497427s ago: executing program 3 (id=2790):
socket(0x11, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)
write$sndseq(r2, 0x0, 0x0)
sync()
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x200000a0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
getpid()

2m11.091896936s ago: executing program 32 (id=2790):
socket(0x11, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)
write$sndseq(r2, 0x0, 0x0)
sync()
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x200000a0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
getpid()

2m9.955755044s ago: executing program 2 (id=2893):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
personality(0x5400004)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0, {0xfffffff000000000}}, './file0\x00'})
mmap$snddsp(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3, 0x2010, r2, 0x6000)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, 0x0, 0x1, 0x0, 0x1000000000000})

2m9.394373293s ago: executing program 2 (id=2896):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb", 0x61}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="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", 0xff}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04a", 0x3c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m9.214015485s ago: executing program 2 (id=2897):
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000002243d42c3ed780f10100000085000000750000001801040020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="74c90c4b5c2a00000095870000000069530000000000000000000000000900"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x4, 0x0, 0x0)
acct(0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40458d1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x2, 0x3, 0x20, 0xffffffff, 0x1, 0xeff3, &(0x7f00000000c0)=[0xffffffff], 0x1, 0x0})

2m8.797620169s ago: executing program 2 (id=2898):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x7, {{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x88)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r4 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8})
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, 0x0, 0x1)
futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x72ed, &(0x7f0000000500)={0x0, 0x3709, 0x1000})
r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0)
mq_timedreceive(r5, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000000, &(0x7f0000000100)={0x77359400})

2m7.601549678s ago: executing program 2 (id=2901):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r2=>0x0})
setresgid(0xee00, 0xee01, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[], 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)
setpriority(0x0, 0x1, 0xa7a8)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x2, 0x80, 0xfffffffe, 0x0, 0x0, 0x0)

2m6.352308513s ago: executing program 2 (id=2905):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x144, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@local, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {0xfffffffffffffffe, 0x7}, {0x20000}, 0x0, 0x3, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'md5-generic\x00'}, 0x0, 0xc0}}, @tfcpad={0x8, 0x16, 0xfffffff0}]}, 0x144}}, 0x0)
syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa377, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa65d}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000001bc0)=""/20)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000ceb81cfcfe10003a000000761561b2c30fcc1be56d322bd2", @ANYRES32=0x0, @ANYBLOB="04005b0006006500b0000000"], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b001602000000000000000e0000"], 0x2c}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000005000000003a00000008000300", @ANYBLOB="05005b"], 0x24}}, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r9 = io_uring_setup(0x3454, &(0x7f0000000440)={0x0, 0x0, 0x40, 0x0, 0xa7})
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
io_uring_setup(0x40aa, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345})

2m4.217210476s ago: executing program 0 (id=2917):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb", 0x4f}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfa", 0x8e}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m4.117356251s ago: executing program 0 (id=2918):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bc", 0x4e}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa481753", 0x92}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b", 0x30}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m4.080349401s ago: executing program 0 (id=2919):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
socket(0x2, 0x3, 0xff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300050000000000"], 0x50}}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

2m2.959140277s ago: executing program 0 (id=2923):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$ttyS3(0xffffff9c, 0x0, 0x210100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042)
writev(r2, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe)
socket$xdp(0x2c, 0x3, 0x0)
userfaultfd(0x80000)

2m2.141294099s ago: executing program 0 (id=2926):
gettid()
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000100)={0x7, 0x4, 0x5, 0x3, 0x17, "da471cf3b035e5c2debfedbd7a72ab89d974c2"})

2m1.705504555s ago: executing program 0 (id=2932):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bc", 0x4e}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa481753", 0x92}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b", 0x30}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m1.473133863s ago: executing program 33 (id=2932):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bc", 0x4e}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa481753", 0x92}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b", 0x30}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1m51.369519119s ago: executing program 34 (id=2905):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x144, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@local, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {0xfffffffffffffffe, 0x7}, {0x20000}, 0x0, 0x3, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'md5-generic\x00'}, 0x0, 0xc0}}, @tfcpad={0x8, 0x16, 0xfffffff0}]}, 0x144}}, 0x0)
syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa377, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa65d}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000001bc0)=""/20)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000ceb81cfcfe10003a000000761561b2c30fcc1be56d322bd2", @ANYRES32=0x0, @ANYBLOB="04005b0006006500b0000000"], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b001602000000000000000e0000"], 0x2c}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000005000000003a00000008000300", @ANYBLOB="05005b"], 0x24}}, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r9 = io_uring_setup(0x3454, &(0x7f0000000440)={0x0, 0x0, 0x40, 0x0, 0xa7})
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
io_uring_setup(0x40aa, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345})

21.54325416s ago: executing program 1 (id=3292):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b9800000d00f326635fc2000640f30baf80c66b8c895238d6266cecefc0ced0f21040f20c06635000400200f22c066b9880900000f3266b9800000c00f326635000800000f30f3adbaf80c66b89235d98866efbafc0cb80000efba0dce5cc0bcc0bc0f07", 0x65}], 0x1, 0x7a, &(0x7f00000000c0)=[@dstype3={0x7, 0x4}, @cstype0={0x4, 0xd}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

21.203042991s ago: executing program 1 (id=3293):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x23}, @flat=@handle={0x73682a85, 0x1100, 0x1}, @fda={0x66646185, 0x3, 0x2, 0x1f}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

21.039598253s ago: executing program 1 (id=3295):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb", 0x61}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {0x0}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

20.832398797s ago: executing program 1 (id=3296):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$ttyS3(0xffffff9c, 0x0, 0x210100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, 0x0)
syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042)

20.251262147s ago: executing program 1 (id=3299):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xc}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (fail_nth: 1)

20.117397206s ago: executing program 1 (id=3300):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000180)={[{0x3e0, 0x1, 0x6, 0xb, 0xff, 0x0, 0xc0, 0xb1, 0x5, 0x9, 0x8, 0x0, 0x4}, {0x894, 0x7, 0x73, 0x2, 0x1, 0x4, 0x52, 0xbd, 0x3, 0x2, 0x7, 0x9, 0x3845}, {0x8, 0x1, 0x41, 0x7, 0x9c, 0x61, 0x0, 0xf2, 0xb, 0x0, 0x7f, 0x7f, 0x5}], 0x600000})
socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000140)=0x1)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)

19.728782299s ago: executing program 35 (id=3300):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000180)={[{0x3e0, 0x1, 0x6, 0xb, 0xff, 0x0, 0xc0, 0xb1, 0x5, 0x9, 0x8, 0x0, 0x4}, {0x894, 0x7, 0x73, 0x2, 0x1, 0x4, 0x52, 0xbd, 0x3, 0x2, 0x7, 0x9, 0x3845}, {0x8, 0x1, 0x41, 0x7, 0x9c, 0x61, 0x0, 0xf2, 0xb, 0x0, 0x7f, 0x7f, 0x5}], 0x600000})
socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000140)=0x1)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)

14.91118267s ago: executing program 5 (id=3317):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10049, '\x00', 0x0, @sk_reuseport}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x4008}, 0x4080)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x1005)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0)

12.756966416s ago: executing program 5 (id=3320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a081)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffe7f)
sendmmsg$unix(r6, &(0x7f00000006c0)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002580)=[{&(0x7f0000000500)="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", 0xff}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000880)="e967a4b4e4f88f65f9fd37b2ba4c8716206b74a0edcedef0f6db999d724e1b64", 0x20}, {&(0x7f0000002500)="9606442113963526b616735cf450517a36841813fce3592adee3a70f7d638f0b6c34791a33673f5fa13c934857ce6d62bebe819079b77d6b692856cac43e2dcd92af8f3d3b3078c38fb35c048be2d80fad9c97ab395972", 0x57}], 0x4, &(0x7f0000002680), 0x0, 0x24004080}}, {{&(0x7f0000004200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004280)="6793af44ae101713167ad609c38d0c1ffa8a671cde8f92fd699893a2385faae9f3753360af138e9fe9678082382a", 0x2e}, {&(0x7f00000042c0)="4bdbf6ce520b965ca9d484ad5f0fac9e11a77db93ec7f9dd4891fb4b4e2b89b8224f3f91368bb52c2d05c0ac7de207dc31478fbc20a2e223a856196382125f46f39454a70e72cb602ed1fc2c7777f66b94026a0c29427ccd4f7d55a44e23218f151321953a9842638dfe7f90aa7fda370466e572c121a255c04758045fa8c37a38cef631534ce321c7355ff269049f8451b76bb0f05ff52ca7e333c7b4f72db5184b0cf452852684bfadb3474bc63fe8171ee855ba33b39b298761a565d45606c15c48fd8c", 0xc5}, {&(0x7f00000043c0)="315cbd99a12ae364a27d2ed15dbb2edcc8e5d4ab7da51414b9e1f5d63be383a9bddab37926d1bfa71c282de60bf1f835a700d853bf124e0c4ef846a8644ec33e03fca581f61f7e637c8be15a198cdb51b54c749852ac46f6710df99f347dc6acb5fc1c5f8665a7eb9248409cb9fd79909dda90f13f4fc517713909577b623ec7a11e6ef4bd987aff955e7627868b7fc440c7f323a278bbbcdf039dbe9c44c8568983ef9357cb10b52e3f331224d42b29609fc8d1a09edc159dd81472cb7fdb6584bf2d8f6a053b7ae4be8f5705107ec8c57efeb676dfea3c11ccc7a0ff2013c61717b5189d26052a3b2d2ade1dffdc7ef632a9e844", 0xf5}, {&(0x7f00000008c0)="8dcfaaa436afe60dab5c40f01d1588a5c06c2214a9e5fb27cd59c4d0c806734d6eb0a9418f742db10489822e052cceaf9301007b0c2bda829fb605c5aec5373363bdf99a11483a20353310aa348c33b7758aadf80d00632628475bb9e8ee3e2f9ee7f49640defc6cf2804fd0a3bc13119ff69724e1628feaecfe96df66a38d2640007b3ec8e9607634444485ee9284a318b7619c748d5e0e1879c5135d3fe3872f6f397cca2e56d86845ca64b9f14271773123391fcbfbc5c4211266f52dde011291bd5ee2d092feaa6bb038be924e9faa99bd79ba501346fb19079fec39a4aeb628101b65f0ec209e378f3abf288a1f8ca4159e8dd17e7e373f53bf16d12dce14577397ff95a8741c18e9fedad8c930d16b46377bb5bb40ab983cdf53765990da8ceae1836a64bbf3af5b5938d0d3674b209249393aa579dbd6c95846d63663bfd6c87750eb9555cedbb20e102b8f7b5401008bf96cf833607f3f47c1e2b60bf73a830879e4d9ed4cecd61c2af22a88664b59fa626cfd5f34b4bf3f37b00fd6cc20dd2fb573c32e86d2122aa27c3ef680dfbf357a18fefac8a6da5d299f349f79d257e2956aee5fc831ff0c04a9e5000000", 0x1b2}, {&(0x7f0000004500)="fcc25093e690293df2fe19414b33534a9389300a72e89ef4f05f9412c64e0aa57dd8f0ea9b503c23edf5221a5bb05a0a5c78ec5d343bfb", 0x37}, {&(0x7f0000004540)="9fbdd8bd18ca5cd06d3c24de36ec33a75b3a243f113b9ec54ef3e2355781da5e246575975390acfb775828ce998014d9a5b5bb0ab648944082bfbfaa6ba55f3253af27cf2fb76611244012ef9b29433b4bd1e81de51b4ca54824569931075dc6db8c2dc8331de72899c47552334e17cd635cbcdc86952110e885ce3dbee18433056dd0699dda01582f20", 0x8a}, {&(0x7f0000004600)="a87b0e5d2d953515ada283bc9e22afa2c94c2f0f38669ecad071ac99c1ab762d6c4b7f3f7bd8f1e37bed62436cbc033cbfb51a3d5dc265776062697d76c253671f67186973416c430c8cbd09a8984638edb72bcc0f729f80376c5abe8ffcdbed3e78421700c2b7ae00d225bb23b24f476ad805402e0ead35818f1b259fa580023b49f3a9881293f0cb668557cee18ab38cf2f504a338b10fc131d0210b8c835f3ae67cdc5236d253826c74e04c03a673ae95cdba", 0xb4}], 0x7, &(0x7f00000047c0)=[@rights={{0x2c, 0x1, 0x1, [r3, r5, r6, 0xffffffffffffffff, r5, r5, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r6, r5, r5]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0xf0, 0x440d0}}, {{&(0x7f00000048c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004a00)=[{&(0x7f0000004940)="890a6ea8428422fdcf920e8f3fc7543ad7010ae6f69ddcf6471352eb3e9667b33aee8dc497ccaf50fa02981fc6a3153a40cc288ede45aeaeb5d9b40bbe30846a2be3f9bd68f9c4c5e7a5e3a46ebc4d940a11722f76e9e0189c07b78c873fb9c00a56bcbbfdb470bdf553807a512ada0dc13afbb8e3558cfc0b6d52913286b3fbba8ea32eaf9fe5d9cc98a4", 0x8b}], 0x1, &(0x7f0000004b00)=[@rights={{0x2c, 0x1, 0x1, [r0, r6, r3, r3, r2, r6, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70, 0x4844}}, {{&(0x7f0000004b80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004c00)="7b4ff95fe64b467eb545c35ea7e0923121f37cb11897ca4945d3583c9714ab848bfb8523df2ccf119253191776f0eff678fa0aa4f6575d18dea9349ca37e2f675eb7672f35c34530", 0x48}, {&(0x7f0000004c80)="e58e06c9cb002ae6a449a446cfce96e95b0cdd625e6e6a6cba1d6d8f0223ae8d695d9d8142d2c22881f01e1eb94f1bdc104cf05822e0b273ca9945daa2f9e41e50158383bdbbfca7f82f3ddf3237819bb4a43adfd40815266cd8b1e8f9f3585e02d1f7587bc45f111288a0c42680fcf220f28eab81c0c9d6d67498ac0012530651076ffc914a4135ebae04627251db3be5676dc2ba22bc998679c05cca0249588af5a937ab3503fe04e21c44d745cfe4ab3b20e8bd6bcbf40b73d7a321955d7dcc2387fc7360d342877feec4c56cdeebbe5f5b17a0ff8d07550db6c7af44", 0xde}], 0x2, &(0x7f0000004f40)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000300000c65d0000dd010000000100e1ff", @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x40}}, {{&(0x7f0000005040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000005380)=[{&(0x7f00000050c0)="441f95725d700aba02f00c100cbfa1d71c509b6c925a2c113681677db1f4b0d3ff7e4cd3f75164363b15f04c931ec57ddb8d8072c4ecd9c239635184863a4c5bb4b30ccc4f9bbd18307e33e2eb4757d63055d7e8d91038d6ea98d150e8b03506fbc9774b07b323539ff217389a97a5ec045fc776796e23a3552ec2033e866d0b9f3d62b2595a1d8fa76a0cc78553e1e6bf5912da8a9eff1e3ca085f4b56a3b67", 0xa0}, {&(0x7f0000005180)="20e9e296d96bf22af611d78e8fd3d6eb46d7d3be04ffb18a7c8481dd7949c7d087d29637d88c0656d5fe709c1ad40d27d2203f90d085be15b3d7ac33bd093104fa805f88f390c9d2cc40532ea9a74dec20322313df751fbd5a434e0e78ddb9b25b68342d76737df88f065c0808dc650752de2965152ed9942ea5693d6efaa34c0fcd669c", 0x84}, {&(0x7f0000005240)="462ce990e06f325a96edd28459b944f2dc9f9009b92a71ced884defb0f946c824679c4d8", 0x24}, {&(0x7f0000005280)="12bb4101264beec108e9ada233723e5a546ce21b8b606df7e9957f3d5d08d4c09d9fd6338cd6a079a14063a6dadb1ec0f298b8ca18c75a26c822aa3682c4302975130365cc9444647176aae9bfdfb88e40d36bac3052d4aa5c75004bd6d7fd1588010d5d9838e5abd5bd2bb2a2d011f4ebe1effcc10b7f3800cd625b25c37d5bba4e687ce04d82c6993c8edad4e305d48db6125e73e1eb7ad87a9bd0ee9faabe6d5fe9e9619c3c3e54a329c01b82cab6181caab7ca4a1481f9b0e6d9bac6def1e8c7e9802e38", 0xc6}], 0x4, &(0x7f00000053c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000008200)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f000000e740)=[{&(0x7f000000e280)="25094e8efbd33d7bac", 0x9}, {&(0x7f000000e2c0)="f4a7a5f66c566124b1f04e30281adb40e51a79d265d37df93585462261bdd37f44e43ef14a3174ee20dcb68c851c837ceb2bebebf961457a7a9706f8a0eb39639b5a0f2fdbeac22a5d3c84a74f630a7e05ff65fa7f64", 0x56}, {&(0x7f000000e340)="31d64b7dca642767a0d90d43a4951d43914cc3e7d14d7dd880bc51792ccf51be20c14590f6ec69b309c3f5b27109aad33e0dba93bea7e89cd220f592da611b98a27da169bd02292aca7a860583b4fc121f8be0169d776159258373828e8915af4c550e8f9455634300f81d400988b1e73aed11aecbe4f8ea4ab5edf21d95f76fbf95e6cf", 0x84}, {&(0x7f000000e400)="6d57849674ed975810b70129c05024501d3057bf063dd816e20de6b00d03edccb53071b613eabb134ec0200682fd13e68c4195c3ed8d2484cbbdb34a0dc0805c1c435837f4d564b5df28af5ce7ac433d2b596f64a4d4e8e2cc8cdee4ceb41c5bb76847a146590c11220b3ff4c3a4e6f526e380bfe4b04a6780d43c19d1732b52e7deba02028a1b970f76a5928cafef663c867fb9696a345cae9994a0df7e9f8a54f9e80691784677d4cd8ffd2a", 0xad}, {&(0x7f000000e4c0)}, {&(0x7f000000e500)="3b0f5bf72e3d1c0e1b06d9e562c1660869658a1ec3d081fcc84c8eef976ea6229bec50532412032f7d7135365ff5f98b5d7ff1133dd93c172979ceba00d23b4116de5e1e74f3b9522fbacda0237f8a0802cc6cfb6a063918f518d0e1e62cfe5d18a1608b34460692a852324686df37de224d91438138bc977bc38ab40f81e8ec697da5742cae27b5f5a87d4eee2a2ef014dde5b295b93a34597b4dda7feecfc72b3b4c3e81a8033b1199db5740808d9524273d67d1e9f93b3aaa109203dfb1726dab95e708e56086eb33c0fada9dcbdaed1646d4fb57cf046434adb4106c60b01fd58084511d5598074f5f2f334b7b78caeadd5954386425", 0xf8}, {&(0x7f000000e600)="fb8ab640e5e168d6f2c00edac630e963ce99701fcfd426d285556bc1c45e7f1157eb61266087ce4492a3f4a7cd7a93b1b5573748b4663f816d97b65fc6174fbeb20fdfb24a05894e43d25d9a81a81f66386e099530f487e808f1b30073e6ee61b63df6", 0x63}, {&(0x7f000000e680)="dd2e88940d84da81b21afa0cb1a684629b565d9d53d2e6a945c9949fab62aa60b0d7a6f2cd8ecb271018eef81079062c7206575c679b3963c08c763838df1ce33273dd21544e2004ae33fb47d772653b19d3a44f38a92cfb61bd2c7570d74c9b61ff534adfcfaa483e98dd47335168855766a836c9056609e846a6871c328fc77a3aca9fb90b191225b509d153c598a5f53a356379cdb280b392", 0x9a}], 0x8, &(0x7f000000e840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}], 0x40, 0x4e090}}, {{&(0x7f000000e880)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f000000ec00)=[{&(0x7f000000e900)="25fbf15816094c2710a2b268b3d34170b2ef7b6fa1835057de7b28899837c02a52c4147f2fe5b845f6cb19c0335190e48b907a4a15b9cbf33161b0f5c340e1e84f2ddde45a6d4339d58f192745348b079ca407eb55cb527f2da7430bac4ffa9a2ca4808c06774b6ed2f3a75e301fbae52bcc92565d7efb0f863635d0b60c476dac2cd083d9ed649460ff34f7a01bf1d3f134bcde66b4de4b5c0ad31de822df075b06a5a91f1b52f30560dc9e64656b8dc1237dcd7552380149cfa9f5c056def5fb586c90d52f0c0f4385bbd09f7a3bfee3953bf9f8b2a189b959b6636d5681ecfb2ac71681", 0xe5}, {&(0x7f000000ea00)="099179ff47eea921b27090d4f1661d810fe2b5ec68ded6f712d5d58107d3209b8c17bf259e0485d829b79ee600e383e0d9c5f9e9b1683980f2208631cf689a9f16918a083be33c49799596711ab18dd8ab2f392356644618cc94822d4a899fb955e89ea69543dabf16d7c2ea6835eff654cf9ccacec997275ef9425abe3c749748c147ef6e57b0aa72d3974e1bd29f5b87c0ebb8d8374c2ceb8228f9f296e2bb9cfc6f6db0d2f079e0894e24d2faf212c85b460c6a06560aa79683f5", 0xbc}, {&(0x7f000000eac0)="4008887f44f535be4006ae508479ca64918ce3a80fefccebc2f4695946d3dc5b2148f056c528501e5830c5f8259bef4132c54d560e95371f303919f9b4c6aa32541c56b4431e4d7420c0bb50a82ecb4b3296c8446cfe2a1ae5979a855c22c0eff25067d732de47935b684bdbff29e26af245ef568841c76797c20559b8803a3cad63f2b6d7a1b3860af4d03db67cce0e318e5f9893d0f4bfba193fac365fb25da1f52777482527a49698e3da91ef6603", 0xb0}, {&(0x7f0000000680)="6042a49e2900ba0730d8f4b55dff9806384f9e103a4a16da691dcd2108665fe3e233216ef0dd984a11bbf0525bc54917f5cbe26dd75724d11b8db4a6fff9e7c2", 0x40}, {&(0x7f000000ebc0)="945313714bdf262e81026e8653c7", 0xe}], 0x5, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80, 0x4080}}], 0x7, 0x20004082)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TCXONC(r7, 0x540a, 0x0)
ioctl$TCXONC(r7, 0x540a, 0x1)
getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0)
socket(0x21, 0x4, 0x1074)
r8 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, 0x0)
setregid(0xffffffffffffffff, r9)
getgroups(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r10 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f00000003c0)='iocharseu\xe5U\xb7\x94:\x92\xf3{\x1b\x11\x96\xd6\xed\xc0\xadn\xcaFAA\xcb\xdam\xdax\x86\x927\x97\xa5X\x9e\x9a5I\xc4\xae\xd5,\x85\xd7\xd98\xcdU\nh\xd3\xefP\xc3\xb9[\xf9\xc4\xaf\xbaM\xb4m!u\xb9\xb6$a\xe2\xd2\'\xd4\xe9?\xf2\xea$\xad\x81\xeaU\x10k\x0f\t|$\xb5\x02\x03\v\xe0P\xab\xe4D\xe1v\x9f\xa9\x06\xebr\xf8\xbd\xe1T\xac\xff1\xf0tw\xc8\xfe\x88\x87\xbc~~\x18i~\xb75:m\x19\xd5X\xef\x98\x80W)H\xe9\xc9\xa2\xb0\x82\x9d\xac\xf0D\xc8\xa8O?O\xf1\xc2x9>\xdc\xd2\x8do\x94\xb6(\x04<\xbb]\x9a\x048\x95\xb6\xef\x11\xe7\xe0\xe9C\xe1\xdd\x03', &(0x7f00000001c0)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4  \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v\x00\x00\x00\x00\x00\x00', 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc10c5541, &(0x7f0000000040))
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'veth0_macvtap\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0x6, 0xfff, [0xfffffffd, 0x3, 0x5, 0x1, 0x3fe000, 0xfffffffb]}})

9.60556967s ago: executing program 5 (id=3328):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003)
r1 = dup2(r0, r0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)=0x5)
read$FUSE(r1, &(0x7f0000008400)={0x2020}, 0x2020)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x98)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_pidfd_open(0x0, 0x0)
setns(r4, 0x24020000)
bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9.594873188s ago: executing program 6 (id=3330):
r0 = socket(0x400000000010, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x6000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
syz_usb_connect(0x6, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x4)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000880)="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", &(0x7f0000000240)=@tcp6}, 0xffffffffffffffd6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x942, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
read$FUSE(0xffffffffffffffff, &(0x7f0000002c00)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000004c80)='syz0\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000004cc0)={0x86101800, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000400), {0x25}, &(0x7f0000000440)=""/113, 0x71, &(0x7f0000000500)=""/85, &(0x7f0000004c40)=[0xffffffffffffffff, r5, r6], 0x3, {r7}}, 0x58)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f00000001c0)='discard')
fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0xa, 0x1000}, {0x4, 0x130}], r1}, 0x18, 0x3)
write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0420070080000900", 0x33a)

7.090078396s ago: executing program 5 (id=3333):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb", 0x61}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="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", 0xff}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04a", 0x3c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6.317251177s ago: executing program 5 (id=3336):
sigaltstack(0x0, 0x0)
timer_create(0x8, 0x0, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000003680)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x800)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601e6ffffffffffffff0000000003140007800800114000000000050015000a0000000500010007000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x22004004}, 0x0) (fail_nth: 1)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[], 0x0)

6.164021718s ago: executing program 7 (id=3337):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002000000000000001a0200000500130001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050)
unshare(0x22020600)
r5 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip6_mr_cache\x00')
read$FUSE(r5, &(0x7f00000058c0)={0x2020}, 0x2020)
pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
open_tree(r6, &(0x7f0000000640)='\x00', 0x89901)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)

5.918019536s ago: executing program 4 (id=3338):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
write(r0, &(0x7f0000000180)="2cd889f0253e14f3d5", 0x9)
writev(r0, &(0x7f00000032c0)=[{&(0x7f0000001d00)="8050", 0x2}], 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40)
sigaltstack(0x0, 0x0)
timer_create(0x8, 0x0, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000003680)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x800)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601e6ffffffffffffff0000000003140007800800114000000000050015000a0000000500010007000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x22004004}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000046617210460d11208f820102030109021b00010000000009040000012247240009050503"], 0x0)

4.592693637s ago: executing program 6 (id=3339):
unshare(0x6a040000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x1000})
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

4.067466781s ago: executing program 7 (id=3340):
r0 = socket$pptp(0x18, 0x1, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket(0x15, 0x1, 0x1)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0xd, 0x4, 0x100, &(0x7f0000000440)="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"})
bind$pptp(r0, &(0x7f0000000400)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x82}}}, 0x1e)
bind$pptp(r0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x800000000000001, 0x84)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r3, 0xee01, 0x0)
keyctl$setperm(0x5, r3, 0x30925)

3.535008179s ago: executing program 6 (id=3341):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10049, '\x00', 0x0, @sk_reuseport}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x4008}, 0x4080)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x1005)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0)

3.487432118s ago: executing program 7 (id=3342):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket(0x15, 0x1, 0x1)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000240))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0xd, 0x4, 0x100, &(0x7f0000000440)="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"}) (fail_nth: 1)

2.637422346s ago: executing program 5 (id=3343):
syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850103030109022400010000100009040c0202c17f0c000905020227020200000905820200"], 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000029000000360000002b00000000000000b0"], 0xc8}, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r6, r5, 0x25, 0x8, @void}, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
r9 = dup2(r7, r8)
close_range(r9, 0xffffffffffffffff, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x44, 0x0, 0x0, 0x80000000}, {0x20, 0x0, 0x0, 0xfffffffd}, {0x3, 0xfd, 0x0, 0xefff}, {0x20, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x2, 0xb7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6c, 0x7b, 0xc}}]}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x6c, 0xf, 0x4, 0x10, 0x3}, 0x2d, &(0x7f0000000180)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "d3665266bee71c83a2d0f41e988c70c5"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "9d2d89a26dbac0b62089541403bccb76"}]}, 0x8, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3425}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x480a}}, {0x78, &(0x7f0000000540)=@string={0x78, 0x3, "50981fda0d21884562ea7a9096441d55128fb3ca511671e55ec09c28a075dbc2bccbdc1396cbeb9cb7e6dd667df6a3e524916b71ef8b034d8a6dfde2726260355e67def4742a95a7da30c34a5cc4fd28373d5c072fc960f1ffd73d1c1c2f924cd3a4c51d9f42399c4b64fac23aeb4526703750fadd84"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x40e}}]})
r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r11, 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r11, 0x5387, &(0x7f0000000300))
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)

2.479444971s ago: executing program 4 (id=3344):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd4}}, 0x4000010)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={0x0, 0xbb8}, 0x1, 0x0, 0x0, 0x50}, 0x4000)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
r2 = dup2(r1, r1)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000200)=0x5)
read$FUSE(r2, &(0x7f0000008400)={0x2020}, 0x2020)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = getpid()
ptrace$setregset(0x4205, r4, 0x3, &(0x7f0000000100)={&(0x7f0000000000)="ae9509827584013226555c55f7b9beae82d1d50e30dce3b9eeea64564448053f261c1004740df2728bef6d9463ac0f6f7d11b8c7930d2ee5b83e5d1eb4f57a9576e95dccfa951b99c25d613ff777622a454861cc58a6c2d56b5da52c2e58977b079543c65222b428bd9b94301beacaaeca403da5ad7938402b41daa72067a750688a0dd57bf9b3c0a9c7a9936b7b8995906d39389d09c9f887a0d312d4cc82adf735b69bed8d837f95ac5bad68421034e6af2d1d053a58a0dd295185c0fb450d66aef526401ee44c790d876afe4ae60e85", 0xd1})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
recvmmsg(r2, 0x0, 0x0, 0x10051, &(0x7f0000007ac0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.090854197s ago: executing program 6 (id=3345):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd4}}, 0x4000010)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={0x0, 0xbb8}, 0x1, 0x0, 0x0, 0x50}, 0x4000)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
r2 = dup2(r1, r1)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000200)=0x5)
read$FUSE(r2, &(0x7f0000008400)={0x2020}, 0x2020)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = getpid()
ptrace$setregset(0x4205, r4, 0x3, &(0x7f0000000100)={&(0x7f0000000000)="ae9509827584013226555c55f7b9beae82d1d50e30dce3b9eeea64564448053f261c1004740df2728bef6d9463ac0f6f7d11b8c7930d2ee5b83e5d1eb4f57a9576e95dccfa951b99c25d613ff777622a454861cc58a6c2d56b5da52c2e58977b079543c65222b428bd9b94301beacaaeca403da5ad7938402b41daa72067a750688a0dd57bf9b3c0a9c7a9936b7b8995906d39389d09c9f887a0d312d4cc82adf735b69bed8d837f95ac5bad68421034e6af2d1d053a58a0dd295185c0fb450d66aef526401ee44c790d876afe4ae60e85", 0xd1})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
recvmmsg(r2, 0x0, 0x0, 0x10051, &(0x7f0000007ac0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.949164475s ago: executing program 7 (id=3346):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000100)={0x8, 0x8, [0x7, 0x100]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xe)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(r3, 0x3)
accept4$bt_l2cap(r3, 0x0, 0x0, 0x800)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x80, 0x0, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4040000)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
dup(0xffffffffffffffff)

1.469288189s ago: executing program 4 (id=3347):
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="040404000000000000"], 0xd)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000d0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
write(r2, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
landlock_restrict_self(r1, 0x9)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80, 0x0)
syz_open_dev$media(&(0x7f0000000240), 0x100000000, 0x802)

1.178467817s ago: executing program 4 (id=3348):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0xd, 0x4, 0x100, &(0x7f0000000440)="387ed7626d850509a2d6c1aa38f15cd0c234cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a750ecb3421143c5c4ded0f06affc524dcf3418272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955582efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284a3e90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def9122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a7e58b4f8c6a1c6b9b5ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef72c5d42cece59181fcb5bad8c24bd9f8f78dd85b82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2b046c6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd600000013139929cefec965c0c761785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829ed0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1aa1ab704782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c413923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29a814bd8fed1ab6d2846c73345962895d289ac718aacac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"})

1.057570214s ago: executing program 6 (id=3349):
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000b40)="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", 0x12d}], 0x1, 0x0, 0xf8, 0x4000005}}], 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x02\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')

1.024668981s ago: executing program 7 (id=3350):
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000b40)="10c517fd77a41c4eef9d99dac09f16599d3760c817aa12a5d1c0ca5908f0b1567090f87510c8124856cab233954cf9a55f4470b76a303b866e02c8436ebd82fceb6929680ce6c70b55b4dbf1ecfcf778abb9cd883e63ea4b020774db53fdef42ece50fbbab4c32a7208f639366e9f649cf222cab46e02a753617374744c0bc032e407a3e8d95051318d77e873c841e9280d57a7c9832de65bdf093adbb69a7a7377f659bd8cca5a3cd775aa499622bce4d1af0aa046a1bc6ad1d031060676e47cdcf5caafabbd501ca4848b6f0a622089bbb55396d2be9da0242a0d180485facee4a9d7eec5f2b8a33b7df0783d7235eb3b6062c1db504f80f477323a853c44c89397112e50b82bacb06578bfb59b9edf63b35b687959338e15a99360726bbc391c3f5e0ed3aef59523c71f433", 0x12d}], 0x1, 0x0, 0xf8, 0x4000005}}], 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2})
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000140)=0x5)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x0, 0x2})
munlockall()
mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x6)
mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000000)='jfs\x00', 0x400080, &(0x7f00000001c0)='disrArd')
socket$inet(0x2, 0x1, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x02\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')

749.384935ms ago: executing program 4 (id=3351):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

684.094438ms ago: executing program 6 (id=3352):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$sndctrl(0x0, 0x1, 0x80881)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000980), 0xc0000, 0x0)
lseek(r1, 0x8000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
openat(0xffffffffffffffff, 0x0, 0xc00080, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f00000002c0)=[{0x7, 0xa001, 0x0, 0x0}], 0x1})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x42182)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x80, 0x16, 0x2, 0x6, 0x6e, 0xf, &(0x7f0000000100)="57a4d3486af455e8fefff487d93899ff7c3e39524cf140eb5f5cc4e8b5fff9a902b9e0db83303ab7dd6bc8092747ccc85573fcc7ee7750efe126cb5d64c482a28a97e512ba258eee7843600e099976b00664f899162eb13e810077b313b2235afc276db2359698578e7366b53837"})
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
bind$bt_sco(r0, &(0x7f00000001c0), 0x37)

383.683333ms ago: executing program 7 (id=3353):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d40000001b00010027bd7000fedbdf2500000000000000000000000000000000e00000010000000000000000000000004e2400054e2300020a0020003a000000", @ANYRES16=r0, @ANYRES32=0x0, @ANYRESDEC=r0], 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d40000001b00010027bd7000fedbdf2500000000000000000000000000000000e00000010000000000000000000000004e2400054e2300020a0020003a000000", @ANYRES16=r0, @ANYRES32=0x0, @ANYRESDEC=r0], 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4)
statx(0xffffffffffffffff, 0x0, 0x100, 0xa709958182ce3d45, 0x0)
io_setup(0x8, &(0x7f0000000600)) (async)
io_setup(0x8, &(0x7f0000000600))
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
timerfd_create(0x7, 0x1000) (async)
r2 = timerfd_create(0x7, 0x1000)
timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}}, 0x0) (async)
timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}}, 0x0)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000300)=""/180, 0xb4}], 0x1)
syz_open_dev$evdev(0x0, 0x7, 0x200000)
inotify_init1(0x0) (async)
r3 = inotify_init1(0x0)
inotify_rm_watch(r3, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5}, 0x8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5}, 0x8)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
rmdir(0x0) (async)
rmdir(0x0)
r4 = epoll_create1(0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000003c0)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}})
ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x10) (async)
ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x10)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x37, 0x800000000004}, &(0x7f0000000340))
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x123880, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$kcm(0x10, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 4 (id=3354):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10049, '\x00', 0x0, @sk_reuseport}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x4008}, 0x4080)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x1005)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0)

kernel console output (not intermixed with test programs):

 1261.584696][T16810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1261.608987][T16810] team0: Port device team_slave_0 added
[ 1261.616485][T16810] team0: Port device team_slave_1 added
[ 1261.636369][T16810] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1261.643636][T16810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1261.670145][T16810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1261.683460][T16810] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1261.690541][T16810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1261.717875][T16810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1261.747879][    C0] usb 7-1: yurex_control_callback - control failed: -71
[ 1261.748129][T13643] usb 7-1: USB disconnect, device number 9
[ 1261.763883][T16810] hsr_slave_0: entered promiscuous mode
[ 1261.772761][T16810] hsr_slave_1: entered promiscuous mode
[ 1261.779264][T16810] debugfs: 'hsr0' already exists in 'hsr'
[ 1261.786149][T16810] Cannot create hsr debugfs directory
[ 1261.786206][T13643] yurex 7-1:0.50: USB YUREX #0 now disconnected
[ 1261.882880][T16810] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1261.894076][T16810] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1261.914703][T11484] usb 6-1: USB disconnect, device number 10
[ 1261.949489][T16810] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1261.959487][T16810] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1262.078930][T16810] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1262.089027][T12627] gspca_sunplus: reg_r err -71
[ 1262.096259][T12627] sunplus 8-1:0.0: probe with driver sunplus failed with error -71
[ 1262.096312][T16810] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1262.122284][T12627] usb 8-1: USB disconnect, device number 3
[ 1262.239686][T16810] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1262.258185][T16810] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1262.647403][T15727] Bluetooth: hci7: Opcode 0x1003 failed: -110
[ 1262.881913][T15727] Bluetooth: hci8: command tx timeout
[ 1264.971652][T15727] Bluetooth: hci8: command tx timeout
[ 1265.396414][T16855] FAULT_INJECTION: forcing a failure.
[ 1265.396414][T16855] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1265.414391][T16855] CPU: 0 UID: 0 PID: 16855 Comm: syz.1.3046 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1265.414421][T16855] Tainted: [L]=SOFTLOCKUP
[ 1265.414427][T16855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1265.414437][T16855] Call Trace:
[ 1265.414443][T16855]  <TASK>
[ 1265.414449][T16855]  dump_stack_lvl+0x100/0x190
[ 1265.414479][T16855]  should_fail_ex.cold+0x5/0xa
[ 1265.414504][T16855]  _copy_from_user+0x2e/0xd0
[ 1265.414530][T16855]  copy_msghdr_from_user+0x9f/0x4f0
[ 1265.414555][T16855]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1265.414588][T16855]  ___sys_sendmsg+0x106/0x1e0
[ 1265.414611][T16855]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1265.414663][T16855]  __sys_sendmsg+0x170/0x220
[ 1265.414690][T16855]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1265.414727][T16855]  ? rcu_is_watching+0x12/0xc0
[ 1265.414757][T16855]  do_syscall_64+0x10b/0xf80
[ 1265.414776][T16855]  ? clear_bhb_loop+0x40/0x90
[ 1265.414798][T16855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1265.414816][T16855] RIP: 0033:0x7fde9739cdd9
[ 1265.414832][T16855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1265.414849][T16855] RSP: 002b:00007fde98344028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1265.414867][T16855] RAX: ffffffffffffffda RBX: 00007fde97615fa0 RCX: 00007fde9739cdd9
[ 1265.414879][T16855] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 1265.414889][T16855] RBP: 00007fde98344090 R08: 0000000000000000 R09: 0000000000000000
[ 1265.414899][T16855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1265.414909][T16855] R13: 00007fde97616038 R14: 00007fde97615fa0 R15: 00007ffe771b7218
[ 1265.414934][T16855]  </TASK>
[ 1265.644852][T16810] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1265.718893][T16810] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1265.726878][T16810] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1265.836350][T16810] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1265.848833][T16810] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1265.872115][T16810] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1265.892438][T16810] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1265.915802][T16810] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1265.986200][   T30] kauditd_printk_skb: 59 callbacks suppressed
[ 1265.986217][   T30] audit: type=1400 audit(1777473107.134:729): avc:  denied  { create } for  pid=16869 comm="syz.5.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1266.001766][T16872] FAULT_INJECTION: forcing a failure.
[ 1266.001766][T16872] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1266.075647][T16872] CPU: 0 UID: 0 PID: 16872 Comm: syz.1.3052 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1266.075673][T16872] Tainted: [L]=SOFTLOCKUP
[ 1266.075679][T16872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1266.075688][T16872] Call Trace:
[ 1266.075693][T16872]  <TASK>
[ 1266.075699][T16872]  dump_stack_lvl+0x100/0x190
[ 1266.075720][T16872]  should_fail_ex.cold+0x5/0xa
[ 1266.075741][T16872]  _copy_from_user+0x2e/0xd0
[ 1266.075766][T16872]  copy_msghdr_from_user+0x9f/0x4f0
[ 1266.075787][T16872]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1266.075818][T16872]  ___sys_sendmsg+0x106/0x1e0
[ 1266.075839][T16872]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1266.075886][T16872]  __sys_sendmsg+0x170/0x220
[ 1266.075911][T16872]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1266.075946][T16872]  ? rcu_is_watching+0x12/0xc0
[ 1266.075976][T16872]  do_syscall_64+0x10b/0xf80
[ 1266.075992][T16872]  ? clear_bhb_loop+0x40/0x90
[ 1266.076011][T16872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1266.076029][T16872] RIP: 0033:0x7fde9739cdd9
[ 1266.076041][T16872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1266.076056][T16872] RSP: 002b:00007fde98344028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1266.076073][T16872] RAX: ffffffffffffffda RBX: 00007fde97615fa0 RCX: 00007fde9739cdd9
[ 1266.076083][T16872] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000003
[ 1266.076093][T16872] RBP: 00007fde98344090 R08: 0000000000000000 R09: 0000000000000000
[ 1266.076102][T16872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1266.076112][T16872] R13: 00007fde97616038 R14: 00007fde97615fa0 R15: 00007ffe771b7218
[ 1266.076135][T16872]  </TASK>
[ 1266.273900][T16810] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1266.289257][T16810] 8021q: adding VLAN 0 to HW filter on device team0
[ 1266.313173][T16810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1266.323794][T16810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1266.345230][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1266.352420][ T5804] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1266.390961][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1266.398163][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1267.214431][T15727] Bluetooth: hci8: command tx timeout
[ 1267.552774][T16889] netlink: 172 bytes leftover after parsing attributes in process `syz.6.3055'.
[ 1268.281841][T11484] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1268.323683][T13643] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1268.376644][T16810] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1268.430460][T16905] random: crng reseeded on system resumption
[ 1268.442172][T11484] usb 2-1: Using ep0 maxpacket: 8
[ 1268.476591][T11484] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[ 1268.521613][T13643] usb 6-1: Using ep0 maxpacket: 8
[ 1268.625490][T16911] netlink: 798 bytes leftover after parsing attributes in process `syz.7.3059'.
[ 1269.281768][T15727] Bluetooth: hci8: command tx timeout
[ 1269.785360][T13643] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[ 1269.849798][T11484] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1269.862422][T13643] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1269.891689][T11484] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1269.902397][T13643] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1269.912536][T11484] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1269.924037][T13643] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1269.935952][T11484] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1269.946424][T13643] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1269.956764][T11484] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1269.970706][T13643] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1269.985453][T11484] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1270.000699][T13643] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1270.030460][T11484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1270.054144][T13643] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1270.293429][   T30] audit: type=1400 audit(1777473111.444:730): avc:  denied  { create } for  pid=16893 comm="syz.1.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1270.316633][T11484] usb 2-1: GET_CAPABILITIES returned 0
[ 1270.334700][T11484] usbtmc 2-1:16.0: can't read capabilities
[ 1270.341031][T13643] usb 6-1: GET_CAPABILITIES returned 0
[ 1270.346858][   T30] audit: type=1400 audit(1777473111.464:731): avc:  denied  { setopt } for  pid=16893 comm="syz.1.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1270.366559][T13643] usbtmc 6-1:16.0: can't read capabilities
[ 1270.428797][T16810] veth0_vlan: entered promiscuous mode
[ 1270.448969][T16810] veth1_vlan: entered promiscuous mode
[ 1270.506849][T16810] veth0_macvtap: entered promiscuous mode
[ 1270.524223][T16894] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32
[ 1270.543349][T16896] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32
[ 1270.554080][T16810] veth1_macvtap: entered promiscuous mode
[ 1270.572761][T13643] usb 2-1: USB disconnect, device number 45
[ 1270.574185][T16810] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1270.586481][ T5627] usb 6-1: USB disconnect, device number 11
[ 1270.607017][T16810] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1270.623676][ T5810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1270.642749][T16920] FAULT_INJECTION: forcing a failure.
[ 1270.642749][T16920] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1270.656018][ T5810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1270.676895][T16920] CPU: 0 UID: 0 PID: 16920 Comm: syz.6.3060 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1270.676923][T16920] Tainted: [L]=SOFTLOCKUP
[ 1270.676928][T16920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1270.676939][T16920] Call Trace:
[ 1270.676944][T16920]  <TASK>
[ 1270.676951][T16920]  dump_stack_lvl+0x100/0x190
[ 1270.676975][T16920]  should_fail_ex.cold+0x5/0xa
[ 1270.677000][T16920]  _copy_from_user+0x2e/0xd0
[ 1270.677025][T16920]  copy_msghdr_from_user+0x9f/0x4f0
[ 1270.677046][T16920]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1270.677077][T16920]  ___sys_sendmsg+0x106/0x1e0
[ 1270.677100][T16920]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1270.677150][T16920]  __sys_sendmsg+0x170/0x220
[ 1270.677176][T16920]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1270.677213][T16920]  ? rcu_is_watching+0x12/0xc0
[ 1270.677243][T16920]  do_syscall_64+0x10b/0xf80
[ 1270.677261][T16920]  ? clear_bhb_loop+0x40/0x90
[ 1270.677281][T16920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1270.677297][T16920] RIP: 0033:0x7ff9b939cdd9
[ 1270.677311][T16920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1270.677326][T16920] RSP: 002b:00007ff9ba23e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1270.677342][T16920] RAX: ffffffffffffffda RBX: 00007ff9b9615fa0 RCX: 00007ff9b939cdd9
[ 1270.677353][T16920] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000004
[ 1270.677362][T16920] RBP: 00007ff9ba23e090 R08: 0000000000000000 R09: 0000000000000000
[ 1270.677371][T16920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1270.677381][T16920] R13: 00007ff9b9616038 R14: 00007ff9b9615fa0 R15: 00007ffe80d833e8
[ 1270.677406][T16920]  </TASK>
[ 1270.899255][ T5810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1270.909777][ T5810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1270.946310][T12527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1270.954172][T12527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1270.962587][ T5810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1270.972312][ T5810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1271.169662][T16931] FAULT_INJECTION: forcing a failure.
[ 1271.169662][T16931] name failslab, interval 1, probability 0, space 0, times 0
[ 1271.291543][T16931] CPU: 1 UID: 0 PID: 16931 Comm: syz.1.3063 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1271.291573][T16931] Tainted: [L]=SOFTLOCKUP
[ 1271.291579][T16931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1271.291588][T16931] Call Trace:
[ 1271.291594][T16931]  <TASK>
[ 1271.291600][T16931]  dump_stack_lvl+0x100/0x190
[ 1271.291625][T16931]  should_fail_ex.cold+0x5/0xa
[ 1271.291648][T16931]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 1271.291671][T16931]  should_failslab+0xc2/0x120
[ 1271.291689][T16931]  __kmalloc_noprof+0xe0/0x850
[ 1271.291713][T16931]  ? kfree+0x1dd/0x6c0
[ 1271.291738][T16931]  tomoyo_realpath_from_path+0xb6/0x690
[ 1271.291766][T16931]  tomoyo_path_number_perm+0x23c/0x580
[ 1271.291784][T16931]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1271.291805][T16931]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1271.291849][T16931]  ? find_held_lock+0x2b/0x80
[ 1271.291865][T16931]  ? __fget_files+0x215/0x3d0
[ 1271.291884][T16931]  ? hook_file_ioctl_common+0x149/0x410
[ 1271.291908][T16931]  ? __fget_files+0x215/0x3d0
[ 1271.291933][T16931]  ? __fget_files+0x21f/0x3d0
[ 1271.291958][T16931]  security_file_ioctl+0xd3/0x230
[ 1271.291979][T16931]  __x64_sys_ioctl+0xb7/0x210
[ 1271.292003][T16931]  do_syscall_64+0x10b/0xf80
[ 1271.292021][T16931]  ? clear_bhb_loop+0x40/0x90
[ 1271.292042][T16931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1271.292059][T16931] RIP: 0033:0x7fde9739cdd9
[ 1271.292074][T16931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1271.292090][T16931] RSP: 002b:00007fde98344028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1271.292107][T16931] RAX: ffffffffffffffda RBX: 00007fde97615fa0 RCX: 00007fde9739cdd9
[ 1271.292117][T16931] RDX: 0000200000000940 RSI: 00000000c040565f RDI: 0000000000000003
[ 1271.292128][T16931] RBP: 00007fde98344090 R08: 0000000000000000 R09: 0000000000000000
[ 1271.292138][T16931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1271.292147][T16931] R13: 00007fde97616038 R14: 00007fde97615fa0 R15: 00007ffe771b7218
[ 1271.292171][T16931]  </TASK>
[ 1271.292195][T16931] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1271.595912][T16942] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3067'.
[ 1272.157722][ T5782] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1272.321737][ T5782] usb 2-1: Using ep0 maxpacket: 8
[ 1272.335138][ T5782] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[ 1272.435754][ T5782] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1272.467510][ T5782] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1272.478099][ T5782] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1272.495114][ T5782] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1272.507435][ T5782] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1272.555784][ T5782] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1272.596254][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1272.757445][T16936] SELinux: security_context_str_to_sid (3) failed with errno=-22
[ 1272.866363][ T5782] usb 2-1: usb_control_msg returned -32
[ 1272.880895][ T5782] usbtmc 2-1:16.0: can't read capabilities
[ 1272.911672][T11484] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1273.081527][T11484] usb 8-1: Using ep0 maxpacket: 32
[ 1273.094424][T11484] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1273.106263][T11484] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1273.118020][T11484] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1273.130136][T11484] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1273.152169][T11484] usb 8-1: config 0 descriptor??
[ 1273.178386][T11484] hub 8-1:0.0: USB hub found
[ 1273.324666][T16966] random: crng reseeded on system resumption
[ 1273.331529][    C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1273.348728][T16964] usbtmc 2-1:16.0: Unable to send data, error -71
[ 1273.357337][T16964] usbtmc 2-1:16.0: usb_control_msg returned -32
[ 1273.376304][ T5789] usb 2-1: USB disconnect, device number 46
[ 1273.385901][T11484] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1273.786660][T16959] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3072'.
[ 1273.844406][T11484] hid-generic 0003:046D:C31C.000E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.7-1/input0
[ 1275.869882][T16980] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3077'.
[ 1276.814864][T16989] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1276.821572][   T30] audit: type=1400 audit(1777473117.594:732): avc:  denied  { bind } for  pid=16986 comm="syz.4.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1276.896091][T16989] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1277.812116][ T5627] usb 8-1: USB disconnect, device number 4
[ 1277.818129][ T5928] block nbd4: Possible stuck request ffff888028b85400: control (read@0,1024B). Runtime 180 seconds
[ 1277.829093][ T5928] block nbd4: Possible stuck request ffff888028b855c0: control (read@1024,1024B). Runtime 180 seconds
[ 1277.841046][ T5928] block nbd4: Possible stuck request ffff888028b85780: control (read@2048,1024B). Runtime 180 seconds
[ 1277.852726][ T5928] block nbd4: Possible stuck request ffff888028b85940: control (read@3072,1024B). Runtime 180 seconds
[ 1278.080422][T16994] ubi16: attaching mtd0
[ 1278.378826][T16994] ubi16: scanning is finished
[ 1278.388358][T16994] ubi16: empty MTD device detected
[ 1278.543962][T16993] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3081'.
[ 1278.553149][T16993] nbd: must specify at least one socket
[ 1278.629550][T16995] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size.
[ 1279.369550][T17004] SELinux: security_context_str_to_sid (3) failed with errno=-22
[ 1279.836937][T16994] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4
[ 1280.201651][ T5782] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1280.411676][ T5782] usb 5-1: Using ep0 maxpacket: 32
[ 1280.803008][ T5782] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1280.836002][ T5782] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1280.864475][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1280.873378][ T5782] usb 5-1: Product: syz
[ 1280.877610][ T5782] usb 5-1: Manufacturer: syz
[ 1280.886812][ T5782] usb 5-1: SerialNumber: syz
[ 1280.899295][ T5782] usb 5-1: config 0 descriptor??
[ 1280.913972][ T5782] gs_usb 5-1:0.0: Required endpoints not found
[ 1281.207428][T17028] SELinux: security_context_str_to_sid (3) failed with errno=-22
[ 1281.215466][ T5928] block nbd0: Possible stuck request ffff888028965080: control (read@0,1024B). Runtime 90 seconds
[ 1281.228225][ T5928] block nbd0: Possible stuck request ffff888028965240: control (read@1024,1024B). Runtime 90 seconds
[ 1281.228378][T17037] netlink: 'syz.4.3090': attribute type 10 has an invalid length.
[ 1281.276711][T17038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1281.286880][T17038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1281.300091][ T5928] block nbd0: Possible stuck request ffff888028965400: control (read@2048,1024B). Runtime 90 seconds
[ 1281.311232][ T5928] block nbd0: Possible stuck request ffff8880289655c0: control (read@3072,1024B). Runtime 90 seconds
[ 1281.454612][ T5782] usb 5-1: USB disconnect, device number 39
[ 1281.681563][T12222] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1281.881585][T12222] usb 6-1: Using ep0 maxpacket: 8
[ 1281.948125][T12222] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[ 1281.969177][T12222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1281.996295][T12627] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[ 1282.386382][T12222] usb 6-1: Product: syz
[ 1282.415721][T12222] usb 6-1: Manufacturer: syz
[ 1282.425437][T12222] usb 6-1: SerialNumber: syz
[ 1282.506442][T14530] IPVS: starting estimator thread 0...
[ 1282.513932][T17055] FAULT_INJECTION: forcing a failure.
[ 1282.513932][T17055] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1282.527343][T17055] CPU: 0 UID: 0 PID: 17055 Comm: syz.6.3098 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1282.527371][T17055] Tainted: [L]=SOFTLOCKUP
[ 1282.527382][T17055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1282.527391][T17055] Call Trace:
[ 1282.527398][T17055]  <TASK>
[ 1282.527406][T17055]  dump_stack_lvl+0x100/0x190
[ 1282.527432][T17055]  should_fail_ex.cold+0x5/0xa
[ 1282.527458][T17055]  _copy_from_user+0x2e/0xd0
[ 1282.527486][T17055]  do_ip_vs_set_ctl+0x53c/0xc90
[ 1282.527516][T17055]  ? __pfx_do_ip_vs_set_ctl+0x10/0x10
[ 1282.527541][T17055]  ? trace_contention_end+0x122/0x170
[ 1282.527573][T17055]  ? nf_sockopt_find.isra.0+0x222/0x290
[ 1282.527603][T17055]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[ 1282.527648][T17055]  ? nf_setsockopt+0x8d/0xf0
[ 1282.527671][T17055]  nf_setsockopt+0x8d/0xf0
[ 1282.527697][T17055]  ip_setsockopt+0xcb/0xf0
[ 1282.527725][T17055]  sctp_setsockopt+0x161/0xb370
[ 1282.527751][T17055]  ? __pfx_sctp_setsockopt+0x10/0x10
[ 1282.527769][T17055]  ? __fget_files+0x215/0x3d0
[ 1282.527795][T17055]  ? selinux_socket_setsockopt+0x6a/0x80
[ 1282.527815][T17055]  ? sock_common_setsockopt+0x2e/0xf0
[ 1282.527835][T17055]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1282.527856][T17055]  do_sock_setsockopt+0xf3/0x1d0
[ 1282.527878][T17055]  __sys_setsockopt+0x195/0x220
[ 1282.527910][T17055]  __x64_sys_setsockopt+0xbd/0x160
[ 1282.527935][T17055]  ? do_syscall_64+0x90/0xf80
[ 1282.527954][T17055]  ? lockdep_hardirqs_on+0x78/0x100
[ 1282.527974][T17055]  do_syscall_64+0x10b/0xf80
[ 1282.527993][T17055]  ? clear_bhb_loop+0x40/0x90
[ 1282.528016][T17055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1282.528034][T17055] RIP: 0033:0x7ff9b939cdd9
[ 1282.528049][T17055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1282.528067][T17055] RSP: 002b:00007ff9ba23e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1282.528085][T17055] RAX: ffffffffffffffda RBX: 00007ff9b9615fa0 RCX: 00007ff9b939cdd9
[ 1282.528097][T17055] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000005
[ 1282.528108][T17055] RBP: 00007ff9ba23e090 R08: 0000000000000000 R09: 0000000000000000
[ 1282.528119][T17055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1282.528130][T17055] R13: 00007ff9b9616038 R14: 00007ff9b9615fa0 R15: 00007ffe80d833e8
[ 1282.528156][T17055]  </TASK>
[ 1282.776092][T12627] usb 2-1: not running at top speed; connect to a high speed hub
[ 1282.785146][T12627] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1282.837475][T12627] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[ 1282.849797][T17056] IPVS: using max 46 ests per chain, 110400 per kthread
[ 1282.886890][T17043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1282.899040][T17043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1282.907351][T12627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1282.915408][T12627] usb 2-1: Product: syz
[ 1282.919689][T12627] usb 2-1: Manufacturer: syz
[ 1282.924630][T12627] usb 2-1: SerialNumber: syz
[ 1283.102620][T17064] netlink: 798 bytes leftover after parsing attributes in process `syz.6.3099'.
[ 1283.460678][T12222] mxuport 6-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[ 1283.562138][T12627] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1283.647469][T12222] mxuport 6-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[ 1283.774453][T12222] mxuport 6-1:254.0: probe with driver mxuport failed with error -71
[ 1283.868851][T12627] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[ 1284.200149][T12222] usb 6-1: USB disconnect, device number 12
[ 1284.516397][T12627] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1284.865391][T12627] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[ 1285.276635][T12627] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1286.017730][T12627] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[ 1286.032900][T12627] usb 2-1: USB disconnect, device number 47
[ 1286.068079][ T5669] udevd[5669]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1286.523330][T12627] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1286.850146][T17076] jfs: Unknown parameter 'disrArd'
[ 1286.877540][T17076] SELinux: security_context_str_to_sid (3) failed with errno=-22
[ 1286.932619][T12627] usb 2-1: Using ep0 maxpacket: 32
[ 1286.948813][T12627] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1286.971554][T12627] usb 2-1: config 0 has no interface number 0
[ 1286.983167][T12627] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1287.013644][T12627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1287.023067][T12627] usb 2-1: Product: syz
[ 1287.027302][T12627] usb 2-1: Manufacturer: syz
[ 1287.033683][T12627] usb 2-1: SerialNumber: syz
[ 1287.062625][T12627] usb 2-1: config 0 descriptor??
[ 1287.117624][T17100] random: crng reseeded on system resumption
[ 1287.151583][T14530] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1287.164453][T17102] FAULT_INJECTION: forcing a failure.
[ 1287.164453][T17102] name failslab, interval 1, probability 0, space 0, times 0
[ 1287.177425][T17102] CPU: 1 UID: 0 PID: 17102 Comm: syz.5.3112 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1287.177452][T17102] Tainted: [L]=SOFTLOCKUP
[ 1287.177459][T17102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1287.177469][T17102] Call Trace:
[ 1287.177475][T17102]  <TASK>
[ 1287.177482][T17102]  dump_stack_lvl+0x100/0x190
[ 1287.177509][T17102]  should_fail_ex.cold+0x5/0xa
[ 1287.177534][T17102]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 1287.177557][T17102]  should_failslab+0xc2/0x120
[ 1287.177577][T17102]  __kmalloc_noprof+0xe0/0x850
[ 1287.177601][T17102]  ? kfree+0x1dd/0x6c0
[ 1287.177626][T17102]  tomoyo_realpath_from_path+0xb6/0x690
[ 1287.177654][T17102]  tomoyo_path_number_perm+0x23c/0x580
[ 1287.177673][T17102]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1287.177695][T17102]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1287.177740][T17102]  ? find_held_lock+0x2b/0x80
[ 1287.177757][T17102]  ? __fget_files+0x215/0x3d0
[ 1287.177777][T17102]  ? hook_file_ioctl_common+0x149/0x410
[ 1287.177800][T17102]  ? __fget_files+0x215/0x3d0
[ 1287.177827][T17102]  ? __fget_files+0x21f/0x3d0
[ 1287.177853][T17102]  security_file_ioctl+0xd3/0x230
[ 1287.177875][T17102]  __x64_sys_ioctl+0xb7/0x210
[ 1287.177895][T17102]  do_syscall_64+0x10b/0xf80
[ 1287.177914][T17102]  ? clear_bhb_loop+0x40/0x90
[ 1287.177934][T17102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.177952][T17102] RIP: 0033:0x7f4ee599cdd9
[ 1287.177967][T17102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1287.177984][T17102] RSP: 002b:00007f4ee686a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1287.178001][T17102] RAX: ffffffffffffffda RBX: 00007f4ee5c15fa0 RCX: 00007f4ee599cdd9
[ 1287.178011][T17102] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1287.178021][T17102] RBP: 00007f4ee686a090 R08: 0000000000000000 R09: 0000000000000000
[ 1287.178030][T17102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1287.178040][T17102] R13: 00007f4ee5c16038 R14: 00007f4ee5c15fa0 R15: 00007ffdce99ec68
[ 1287.178066][T17102]  </TASK>
[ 1287.178073][T17102] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1287.331648][T14530] usb 5-1: Using ep0 maxpacket: 32
[ 1287.401545][ T5789] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1287.408034][T14530] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1287.421424][T14530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1287.463700][T14530] usb 5-1: config 0 descriptor??
[ 1287.488198][T14530] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1287.556007][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1287.567029][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1287.576985][ T5789] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1287.586172][ T5789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1287.614056][ T5789] usb 7-1: config 0 descriptor??
[ 1287.813473][T12627] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[ 1287.827039][T12627] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1287.839556][T12627] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1287.858648][T12627] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[ 1287.905077][T12627] usb 2-1: USB disconnect, device number 48
[ 1288.055467][ T5789] hid-steam 0003:28DE:1142.000F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[ 1288.103018][T14530] gspca_sunplus: reg_r err -71
[ 1288.107983][T14530] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[ 1288.131742][ T5789] hid-steam 0003:28DE:1142.000F: Steam wireless receiver connected
[ 1288.141393][T14530] usb 5-1: USB disconnect, device number 40
[ 1288.176525][ T5789] hid-steam 0003:28DE:1142.0010: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[ 1288.212246][ T5782] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1288.371558][ T5782] usb 6-1: Using ep0 maxpacket: 32
[ 1288.383210][ T5782] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1288.396056][ T5782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1288.424459][ T5782] usb 6-1: config 0 descriptor??
[ 1288.440022][ T5782] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1289.167826][ T5782] gspca_sunplus: reg_w_riv err -110
[ 1289.179586][ T5782] sunplus 6-1:0.0: probe with driver sunplus failed with error -110
[ 1289.250085][T17121] SELinux: security_context_str_to_sid (3) failed with errno=-22
[ 1289.379424][   T30] audit: type=1400 audit(1777473130.524:733): avc:  denied  { block_suspend } for  pid=17126 comm="syz.4.3120" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1289.735670][   T30] audit: type=1400 audit(1777473130.844:734): avc:  denied  { create } for  pid=17137 comm="syz.7.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1289.833478][   T30] audit: type=1400 audit(1777473130.884:735): avc:  denied  { connect } for  pid=17137 comm="syz.7.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1289.922208][ T5768] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1289.987952][ T5789] usb 7-1: USB disconnect, device number 10
[ 1290.048221][ T5789] hid-steam 0003:28DE:1142.000F: Steam wireless receiver disconnected
[ 1290.132839][ T5768] usb 5-1: Using ep0 maxpacket: 32
[ 1290.167918][ T5768] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 137, changing to 11
[ 1290.212131][ T5768] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1290.340731][ T5768] usb 5-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.40
[ 1290.360366][ T5768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1290.371130][ T5768] usb 5-1: Product: syz
[ 1290.376899][ T5768] usb 5-1: Manufacturer: syz
[ 1290.388675][ T5768] usb 5-1: SerialNumber: syz
[ 1290.427740][T17152] comedi comedi1: multiq3: a I/O base address must be specified
[ 1290.692511][   T30] audit: type=1400 audit(1777473131.834:736): avc:  denied  { ioctl } for  pid=17134 comm="syz.4.3123" path="socket:[83555]" dev="sockfs" ino=83555 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1291.132496][T17135] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer.
[ 1291.243724][T11484] usb 6-1: USB disconnect, device number 13
[ 1291.635488][T17159] loop6: detected capacity change from 0 to 8
[ 1291.786684][T17160] loop6: detected capacity change from 8 to 0
[ 1292.613330][T12222] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1292.812270][T12222] usb 2-1: too many configurations: 51, using maximum allowed: 8
[ 1292.844380][T12222] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1292.858971][T12222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1292.877462][T12222] usb 2-1: Product: syz
[ 1292.889989][T12222] usb 2-1: Manufacturer: syz
[ 1292.896599][T12222] usb 2-1: SerialNumber: syz
[ 1292.931535][T11484] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1293.101717][T11484] usb 8-1: Using ep0 maxpacket: 32
[ 1293.113131][T11484] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1293.125785][T11484] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1293.139128][T11484] usb 8-1: config 0 descriptor??
[ 1293.148772][T11484] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1293.161586][T12222] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1293.191648][T12222] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 1293.211660][T12222] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1293.256525][T12222] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[ 1293.296119][T12222] usb 2-1: USB disconnect, device number 49
[ 1293.333329][T15727] Bluetooth: hci1: connection err: -111
[ 1293.404090][   T30] audit: type=1400 audit(1777473134.554:737): avc:  denied  { read open } for  pid=17187 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1293.517425][   T30] audit: type=1400 audit(1777473134.554:738): avc:  denied  { getattr } for  pid=17187 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1293.556250][   T30] audit: type=1400 audit(1777473134.594:739): avc:  denied  { open } for  pid=17184 comm="syz.5.3135" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1293.598313][   T30] audit: type=1400 audit(1777473134.604:740): avc:  denied  { ioctl } for  pid=17184 comm="syz.5.3135" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1293.631318][ T5768] usbhid 5-1:1.0: can't add hid device: -71
[ 1293.637769][ T5768] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[ 1293.687808][ T5768] usb 5-1: USB disconnect, device number 41
[ 1293.757710][T11484] gspca_sunplus: reg_r err -71
[ 1293.763194][T11484] sunplus 8-1:0.0: probe with driver sunplus failed with error -71
[ 1293.779239][T11484] usb 8-1: USB disconnect, device number 5
[ 1293.785825][   T30] audit: type=1400 audit(1777473134.914:741): avc:  denied  { mount } for  pid=17199 comm="syz.6.3138" name="/" dev="ramfs" ino=84590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1293.853311][   T30] audit: type=1400 audit(1777473134.984:742): avc:  denied  { add_name } for  pid=17186 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1294.474214][T17185] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1294.505105][T17185] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1294.554678][   T30] kauditd_printk_skb: 9 callbacks suppressed
[ 1294.554694][   T30] audit: type=1400 audit(1777473135.704:752): avc:  denied  { append } for  pid=17224 comm="syz.4.3145" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1294.628071][   T30] audit: type=1400 audit(1777473135.754:753): avc:  denied  { getopt } for  pid=17224 comm="syz.4.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1294.650819][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 1294.657235][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 1294.685204][T14530] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1294.744533][T11484] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[ 1294.875310][T14530] usb 2-1: Using ep0 maxpacket: 32
[ 1294.911874][T14530] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 137, changing to 11
[ 1294.926442][T14530] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1294.988993][T14530] usb 2-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.40
[ 1294.998780][T14530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1295.018112][T14530] usb 2-1: Product: syz
[ 1295.022561][T14530] usb 2-1: Manufacturer: syz
[ 1295.024149][T11484] usb 8-1: not running at top speed; connect to a high speed hub
[ 1295.027256][T14530] usb 2-1: SerialNumber: syz
[ 1295.073782][T11484] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 495, setting to 64
[ 1295.119990][T11484] usb 8-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1295.274384][T11484] usb 8-1: config 1 interface 0 has no altsetting 0
[ 1295.324579][T11484] usb 8-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.40
[ 1295.376588][T11484] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1295.449164][T11484] usb 8-1: Product: syz
[ 1295.474133][T11484] usb 8-1: Manufacturer: syz
[ 1295.518867][T11484] usb 8-1: SerialNumber: syz
[ 1295.875293][T17222] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1296.140992][T11484] usbhid 8-1:1.0: can't add hid device: -71
[ 1296.150975][T11484] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[ 1296.163627][T11484] usb 8-1: USB disconnect, device number 6
[ 1296.377950][T15727] Bluetooth: hci6: unknown advertising packet type: 0x75
[ 1296.378018][T15727] Bluetooth: hci6: unknown advertising packet type: 0x70
[ 1296.395227][T15727] Bluetooth: hci6: Dropping invalid advertising data
[ 1296.410281][T15727] Bluetooth: hci6: unknown advertising packet type: 0x40
[ 1296.410305][T15727] Bluetooth: hci6: Malformed LE Event: 0x02
[ 1297.847469][T14530] usbhid 2-1:1.0: can't add hid device: -71
[ 1297.857862][T14530] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[ 1297.880638][T14530] usb 2-1: USB disconnect, device number 50
[ 1298.334841][T17241] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3146'.
[ 1298.345252][T17258] batman_adv: batadv0: Adding interface: dummy0
[ 1298.352984][T17258] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1298.378546][T17258] batman_adv: batadv0: Interface activated: dummy0
[ 1298.399236][T17263] batadv0: mtu less than device minimum
[ 1298.407312][T17263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1298.420053][T17263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1298.431525][T17263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1298.442661][T17263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1298.453961][T17263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1298.465245][T17263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1298.476057][T17263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1298.487317][T17263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1298.498251][T17263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1298.630853][   T30] audit: type=1400 audit(1777473139.774:754): avc:  denied  { name_bind } for  pid=17278 comm="syz.4.3149" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[ 1298.661128][T17279] raw_sendmsg: syz.4.3149 forgot to set AF_INET. Fix it!
[ 1298.829863][T17282] SELinux: security_context_str_to_sid (3) failed with errno=-22
[ 1298.837353][T17185] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1298.859432][T17185] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1298.937204][T17185] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1298.952276][T17185] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1299.394537][ T5768] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[ 1299.480981][T17185] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1299.498422][T17185] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[ 1299.532712][T17185] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1299.540040][T17185] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1299.548155][T11484] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1299.593248][ T5768] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1299.602577][T14530] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1299.607858][ T5768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1299.629442][ T5768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1299.656141][ T5768] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1299.673478][T17185] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[ 1299.683512][T17185] Bluetooth: hci8: Error when powering off device on rfkill (-4)
[ 1299.684711][ T5768] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1299.705137][ T5768] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1299.713488][T11484] usb 5-1: Using ep0 maxpacket: 32
[ 1299.719071][ T5768] usb 2-1: Manufacturer: syz
[ 1299.731119][T11484] usb 5-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40
[ 1299.741163][ T5768] usb 2-1: config 0 descriptor??
[ 1299.746258][T11484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1299.755320][T11484] usb 5-1: Product: Ⰺ
[ 1299.759589][T11484] usb 5-1: Manufacturer: ⧄椸쏽爡⚦΁暁뚏镛肌䢽뭩⹴⚪퀂賞⒐쨦媴䲘Ꝛ噡懊纜⸍산튈뢚삓㘻귚乡ꔁ젦婤ུٔ熹縯뱠鄚蕔옣䴎䃣ꄴ
[ 1299.771653][T14530] usb 8-1: Using ep0 maxpacket: 32
[ 1299.782763][T11484] usb 5-1: SerialNumber: 凒뛞妪ﺏ頺듕⚡귃퓔ᐒꞻ㻆멊쫣㽩쿹듋≼ꃠ뤔ᮨﻵꝵ簞趡畏⥻谩鮷ā╺ꪟ෿᏾놥콞ߐ蘗䉅᷋࡫ᗕ˩䳁ᬼ灀맩肦橺糠뻘箚႙跆⢸
[ 1299.803220][T14530] usb 8-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40
[ 1299.803246][T14530] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1299.803266][T14530] usb 8-1: Product: Ⰺ
[ 1299.803279][T14530] usb 8-1: Manufacturer: ⧄椸쏽爡⚦΁暁뚏镛肌䢽뭩⹴⚪퀂賞⒐쨦媴䲘Ꝛ噡懊纜⸍산튈뢚삓㘻귚乡ꔁ젦婤ུٔ熹縯뱠鄚蕔옣䴎䃣ꄴ
[ 1299.803303][T14530] usb 8-1: SerialNumber: 凒뛞妪ﺏ頺듕⚡귃퓔ᐒꞻ㻆멊쫣㽩쿹듋≼ꃠ뤔ᮨﻵꝵ簞趡畏⥻谩鮷ā╺ꪟ෿᏾놥콞ߐ蘗䉅᷋࡫ᗕ˩䳁ᬼ灀맩肦橺糠뻘箚႙跆⢸
[ 1300.073424][T14530] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1300.151686][ T5768] rc_core: IR keymap rc-hauppauge not found
[ 1300.160129][ T5768] Registered IR keymap rc-empty
[ 1300.167991][ T5768] mceusb 2-1:0.0: Error: mce write urb status = -71
[ 1300.194198][ T5768] mceusb 2-1:0.0: Error: mce write urb status = -71
[ 1300.242105][ T5768] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1300.267834][ T5768] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input43
[ 1300.294614][T17303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1300.317263][T17301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1300.317576][T17303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1300.337569][   T30] audit: type=1400 audit(1777473141.484:755): avc:  denied  { read } for  pid=4965 comm="acpid" name="event4" dev="devtmpfs" ino=3405 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1300.351017][T17301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1300.360639][ T5768] mceusb 2-1:0.0: Error: mce write urb status = -71
[ 1300.376987][   T30] audit: type=1400 audit(1777473141.484:756): avc:  denied  { open } for  pid=4965 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3405 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1300.411692][ T5768] mceusb 2-1:0.0: Error: mce write urb status = -71
[ 1300.426759][   T30] audit: type=1400 audit(1777473141.484:757): avc:  denied  { ioctl } for  pid=4965 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3405 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1300.453008][ T5768] mceusb 2-1:0.0: Error: mce write urb status = -71
[ 1300.466812][T17303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1300.478339][T17303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1300.488589][ T5768] mceusb 2-1:0.0: Error: mce write urb status = -71
[ 1300.509389][T17301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1300.524541][ T5768] mceusb 2-1:0.0: Error: mce write urb status = -71
[ 1300.535319][T17303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1300.538015][T17301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1300.547220][T17303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1300.565836][ T5768] mceusb 2-1:0.0: Error: mce write urb status = -71
[ 1300.568054][T17301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1300.592068][ T5768] mceusb 2-1:0.0: Error: mce write urb status = -71
[ 1300.599101][T17301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1300.613642][ T5789] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1300.626929][ T5768] mceusb 2-1:0.0: Error: mce write urb status = -71
[ 1300.670285][T14530] usb 8-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[ 1300.682047][ T5768] mceusb 2-1:0.0: Error: mce write urb status = -71
[ 1300.682363][T14530] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1300.695719][T14530] usb 8-1: 2:1 : invalid channels 0
[ 1300.723904][ T5768] mceusb 2-1:0.0: Error: mce write urb status = -71
[ 1300.763228][ T5768] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1300.795077][ T5768] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1300.814660][ T5768] usb 2-1: USB disconnect, device number 51
[ 1300.832455][ T5789] usb 7-1: Using ep0 maxpacket: 32
[ 1300.846347][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11
[ 1300.882992][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024
[ 1300.917365][ T5789] usb 7-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[ 1300.934055][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1300.953991][ T5789] usb 7-1: Product: syz
[ 1300.967241][T11484] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1300.978607][ T5789] usb 7-1: Manufacturer: syz
[ 1300.995942][ T5789] usb 7-1: SerialNumber: syz
[ 1301.006796][T14530] usb 8-1: USB disconnect, device number 7
[ 1301.011804][T11484] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[ 1301.030186][ T5789] usb 7-1: config 0 descriptor??
[ 1301.039338][T11484] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1301.054069][T17317] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22
[ 1301.083713][T11484] usb 5-1: 2:1 : invalid channels 0
[ 1301.228916][T11484] usb 5-1: USB disconnect, device number 42
[ 1301.367979][T17332] sctp: [Deprecated]: syz.6.3157 (pid 17332) Use of int in max_burst socket option.
[ 1301.367979][T17332] Use struct sctp_assoc_value instead
[ 1301.711030][ T5789] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input44
[ 1301.799457][ T5789] usb 7-1: USB disconnect, device number 11
[ 1301.805563][    C1] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[ 1301.901114][ T5669] udevd[5669]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1302.000318][   T30] audit: type=1400 audit(1777473143.144:758): avc:  denied  { write } for  pid=17342 comm="syz.1.3164" name="mouse0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1302.173407][T15727] block nbd1: Receive control failed (result -32)
[ 1302.180227][T11621] block nbd1: Receive control failed (result -32)
[ 1302.207694][T14375] block nbd1: NBD_DISCONNECT
[ 1302.247223][T14375] block nbd1: Send disconnect failed -32
[ 1302.316785][T14375] block nbd1: Send disconnect failed -32
[ 1302.354949][T17353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3167'.
[ 1302.370776][T14375] block nbd1: shutting down sockets
[ 1302.484124][T17357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3167'.
[ 1302.531980][ T5789] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1302.729552][   T30] audit: type=1400 audit(1777473143.704:759): avc:  denied  { create } for  pid=17355 comm="syz.6.3169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1302.757584][T17345] jfs: Unknown parameter 'disrArd'
[ 1302.788474][T17353] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3167'.
[ 1302.815648][T17345] SELinux: security_context_str_to_sid (3) failed with errno=-22
[ 1302.842639][T17363] netlink: 'syz.1.3170': attribute type 1 has an invalid length.
[ 1302.866405][T17363] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3170'.
[ 1302.944594][ T5789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1302.965231][ T5789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1302.988655][ T5789] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1302.997961][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1303.031794][T17365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'.
[ 1303.048892][ T5789] usb 6-1: config 0 descriptor??
[ 1303.144618][T17368] wg1: entered promiscuous mode
[ 1303.173144][T17368] wg1: entered allmulticast mode
[ 1303.200483][   T30] audit: type=1400 audit(1777473144.344:760): avc:  denied  { connect } for  pid=17369 comm="syz.6.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1303.286826][T17374] random: crng reseeded on system resumption
[ 1303.359012][T17377] hsr0: entered promiscuous mode
[ 1303.385779][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3174'.
[ 1303.398186][T17377] hsr_slave_0: left promiscuous mode
[ 1303.409002][T17379] FAULT_INJECTION: forcing a failure.
[ 1303.409002][T17379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1303.424305][T17377] hsr_slave_1: left promiscuous mode
[ 1303.437084][T17379] CPU: 0 UID: 0 PID: 17379 Comm: syz.6.3175 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1303.437114][T17379] Tainted: [L]=SOFTLOCKUP
[ 1303.437124][T17379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1303.437134][T17379] Call Trace:
[ 1303.437139][T17379]  <TASK>
[ 1303.437145][T17379]  dump_stack_lvl+0x100/0x190
[ 1303.437163][T17379]  should_fail_ex.cold+0x5/0xa
[ 1303.437179][T17379]  _copy_from_user+0x2e/0xd0
[ 1303.437201][T17379]  __sys_bpf+0x243/0x4b90
[ 1303.437232][T17379]  ? __pfx___sys_bpf+0x10/0x10
[ 1303.437255][T17379]  ? proc_fail_nth_write+0x9f/0x220
[ 1303.437272][T17379]  ? find_held_lock+0x2b/0x80
[ 1303.437285][T17379]  ? find_held_lock+0x2b/0x80
[ 1303.437295][T17379]  ? ksys_write+0x190/0x250
[ 1303.437306][T17379]  ? ksys_write+0x190/0x250
[ 1303.437320][T17379]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[ 1303.437334][T17379]  ? kernel_write+0x5e3/0x6c0
[ 1303.437352][T17379]  ? __fget_files+0x215/0x3d0
[ 1303.437385][T17379]  ? fput+0x79/0x100
[ 1303.437405][T17379]  ? ksys_write+0x1ac/0x250
[ 1303.437420][T17379]  ? __pfx_ksys_write+0x10/0x10
[ 1303.437434][T17379]  __x64_sys_bpf+0x7b/0xc0
[ 1303.437444][T17379]  ? lockdep_hardirqs_on+0x78/0x100
[ 1303.437455][T17379]  do_syscall_64+0x10b/0xf80
[ 1303.437467][T17379]  ? clear_bhb_loop+0x40/0x90
[ 1303.437481][T17379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1303.437497][T17379] RIP: 0033:0x7ff9b939cdd9
[ 1303.437514][T17379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1303.437529][T17379] RSP: 002b:00007ff9ba23e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1303.437544][T17379] RAX: ffffffffffffffda RBX: 00007ff9b9615fa0 RCX: 00007ff9b939cdd9
[ 1303.437555][T17379] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 0000000000000000
[ 1303.437565][T17379] RBP: 00007ff9ba23e090 R08: 0000000000000000 R09: 0000000000000000
[ 1303.437575][T17379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1303.437584][T17379] R13: 00007ff9b9616038 R14: 00007ff9b9615fa0 R15: 00007ffe80d833e8
[ 1303.437608][T17379]  </TASK>
[ 1303.835634][ T5789] usbhid 6-1:0.0: can't add hid device: -71
[ 1303.902831][ T5789] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1303.963950][ T5789] usb 6-1: USB disconnect, device number 14
[ 1304.517331][T17396] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3182'.
[ 1304.661178][T17401] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3182'.
[ 1304.922932][   T30] audit: type=1400 audit(1777473145.894:761): avc:  denied  { read } for  pid=17394 comm="syz.6.3182" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1305.093010][T17406] netlink: 798 bytes leftover after parsing attributes in process `syz.5.3183'.
[ 1305.904410][   T30] audit: type=1400 audit(1777473146.104:762): avc:  denied  { write } for  pid=17397 comm="syz.1.3180" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1306.961188][T17417] random: crng reseeded on system resumption
[ 1307.112793][T14530] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1307.262351][T14530] usb 5-1: device descriptor read/64, error -71
[ 1307.334407][   T30] audit: type=1400 audit(1777473148.484:763): avc:  denied  { name_bind } for  pid=17430 comm="syz.7.3192" src=19998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[ 1307.557634][T17434] FAULT_INJECTION: forcing a failure.
[ 1307.557634][T17434] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1307.570744][T17434] CPU: 1 UID: 0 PID: 17434 Comm: syz.7.3192 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1307.570771][T17434] Tainted: [L]=SOFTLOCKUP
[ 1307.570777][T17434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1307.570788][T17434] Call Trace:
[ 1307.570795][T17434]  <TASK>
[ 1307.570802][T17434]  dump_stack_lvl+0x100/0x190
[ 1307.570829][T17434]  should_fail_ex.cold+0x5/0xa
[ 1307.570855][T17434]  _copy_from_user+0x2e/0xd0
[ 1307.570882][T17434]  csum_and_copy_from_iter_full+0x21a/0x1fd0
[ 1307.570911][T17434]  ? irqentry_exit+0x246/0x790
[ 1307.570931][T17434]  ? lockdep_hardirqs_on+0x78/0x100
[ 1307.570951][T17434]  ? irqentry_exit+0x246/0x790
[ 1307.570971][T17434]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[ 1307.571007][T17434]  ip_generic_getfrag+0x172/0x270
[ 1307.571034][T17434]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 1307.571054][T17434]  ? rcu_is_watching+0x12/0xc0
[ 1307.571082][T17434]  ? trace_sched_exit_tp+0x11c/0x160
[ 1307.571108][T17434]  __ip_append_data+0x970/0x4410
[ 1307.571134][T17434]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 1307.571155][T17434]  ? __lock_acquire+0x4a5/0x2630
[ 1307.571184][T17434]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[ 1307.571206][T17434]  ? __pfx___ip_append_data+0x10/0x10
[ 1307.571229][T17434]  ? do_raw_spin_lock+0x128/0x260
[ 1307.571258][T17434]  ip_append_data+0x10f/0x1a0
[ 1307.571282][T17434]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 1307.571305][T17434]  udp_sendmsg+0x9e8/0x2720
[ 1307.571331][T17434]  ? __schedule+0x10fb/0x6820
[ 1307.571350][T17434]  ? __pfx_udp_sendmsg+0x10/0x10
[ 1307.571387][T17434]  ? preempt_schedule_irq+0x7b/0x90
[ 1307.571406][T17434]  ? rcu_is_watching+0x12/0xc0
[ 1307.571437][T17434]  ? irqentry_exit+0x246/0x790
[ 1307.571455][T17434]  ? lockdep_hardirqs_on+0x78/0x100
[ 1307.571483][T17434]  ? __pfx_udp_sendmsg+0x10/0x10
[ 1307.571503][T17434]  inet_sendmsg+0x105/0x140
[ 1307.571529][T17434]  sock_write_iter+0x4ea/0x5a0
[ 1307.571549][T17434]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1307.571572][T17434]  ? __pfx_sock_write_iter+0x10/0x10
[ 1307.571591][T17434]  ? lockdep_hardirqs_on+0x78/0x100
[ 1307.571629][T17434]  vfs_write+0x6ac/0x1070
[ 1307.571651][T17434]  ? __pfx_sock_write_iter+0x10/0x10
[ 1307.571673][T17434]  ? __pfx_vfs_write+0x10/0x10
[ 1307.571690][T17434]  ? find_held_lock+0x2b/0x80
[ 1307.571726][T17434]  ksys_write+0x1f8/0x250
[ 1307.571745][T17434]  ? __pfx_ksys_write+0x10/0x10
[ 1307.571762][T17434]  ? rcu_is_watching+0x12/0xc0
[ 1307.571787][T17434]  ? exit_to_user_mode_loop+0xdd/0x4a0
[ 1307.571812][T17434]  ? rcu_is_watching+0x12/0xc0
[ 1307.571842][T17434]  do_syscall_64+0x10b/0xf80
[ 1307.571861][T17434]  ? clear_bhb_loop+0x40/0x90
[ 1307.571884][T17434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1307.571903][T17434] RIP: 0033:0x7fe99559cdd9
[ 1307.571919][T17434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1307.571936][T17434] RSP: 002b:00007fe9963db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1307.571954][T17434] RAX: ffffffffffffffda RBX: 00007fe995816180 RCX: 00007fe99559cdd9
[ 1307.571966][T17434] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000004
[ 1307.571977][T17434] RBP: 00007fe9963db090 R08: 0000000000000000 R09: 0000000000000000
[ 1307.571987][T17434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1307.571997][T17434] R13: 00007fe995816218 R14: 00007fe995816180 R15: 00007ffee45da108
[ 1307.572030][T17434]  </TASK>
[ 1308.174739][ T5789] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1308.416186][T14530] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1308.428970][   T30] audit: type=1400 audit(1777473148.694:764): avc:  denied  { setopt } for  pid=17430 comm="syz.7.3192" lport=37674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1308.486944][ T5928] block nbd4: Possible stuck request ffff888028b85400: control (read@0,1024B). Runtime 210 seconds
[ 1308.499850][ T5928] block nbd4: Possible stuck request ffff888028b855c0: control (read@1024,1024B). Runtime 210 seconds
[ 1308.513498][ T5928] block nbd4: Possible stuck request ffff888028b85780: control (read@2048,1024B). Runtime 210 seconds
[ 1308.527249][ T5928] block nbd4: Possible stuck request ffff888028b85940: control (read@3072,1024B). Runtime 210 seconds
[ 1308.593042][T14530] usb 5-1: device descriptor read/64, error -71
[ 1308.634335][ T5789] usb 2-1: Using ep0 maxpacket: 32
[ 1308.643828][ T5789] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1308.654096][ T5789] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1308.664010][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1308.689613][ T5789] usb 2-1: config 0 descriptor??
[ 1308.712757][T14530] usb usb5-port1: attempt power cycle
[ 1308.991548][ T5768] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1309.067152][T17449] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3198'.
[ 1309.232499][ T5768] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1309.267555][ T5768] usb 8-1: config 0 has no interface number 0
[ 1309.284474][ T5768] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1309.303896][ T5768] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1309.321601][ T5768] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1309.331284][ T5768] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1309.418338][ T5768] usb 8-1: config 0 descriptor??
[ 1310.302069][T14530] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1310.346183][ T5768] prodikeys 0003:041E:2801.0011: collection stack underflow
[ 1310.377542][ T5768] prodikeys 0003:041E:2801.0011: item 0 1 0 12 parsing failed
[ 1310.394788][ T5768] prodikeys 0003:041E:2801.0011: hid parse failed
[ 1310.417608][ T5768] prodikeys 0003:041E:2801.0011: probe with driver prodikeys failed with error -22
[ 1310.533303][T14530] usb 5-1: device not accepting address 45, error -71
[ 1310.732439][   T30] audit: type=1400 audit(1777473151.854:765): avc:  denied  { name_bind } for  pid=17458 comm="syz.5.3202" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[ 1310.775307][ T5768] usb 8-1: USB disconnect, device number 8
[ 1311.115875][ T5768] usb 2-1: USB disconnect, device number 52
[ 1311.416852][ T5928] block nbd0: Possible stuck request ffff888028965080: control (read@0,1024B). Runtime 120 seconds
[ 1311.427797][ T5928] block nbd0: Possible stuck request ffff888028965240: control (read@1024,1024B). Runtime 120 seconds
[ 1311.455816][ T5928] block nbd0: Possible stuck request ffff888028965400: control (read@2048,1024B). Runtime 120 seconds
[ 1311.467515][ T5928] block nbd0: Possible stuck request ffff8880289655c0: control (read@3072,1024B). Runtime 120 seconds
[ 1311.784988][T14530] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1311.839359][T14530] usb 5-1: Using ep0 maxpacket: 32
[ 1311.888243][T14530] usb 5-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40
[ 1311.918974][T14530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1311.955111][T14530] usb 5-1: Product: Ⰺ
[ 1311.974987][T14530] usb 5-1: Manufacturer: ⧄椸쏽爡⚦΁暁뚏镛肌䢽뭩⹴⚪퀂賞⒐쨦媴䲘Ꝛ噡懊纜⸍산튈뢚삓㘻귚乡ꔁ젦婤ུٔ熹縯뱠鄚蕔옣䴎䃣ꄴ
[ 1312.029190][T14530] usb 5-1: SerialNumber: 凒뛞妪ﺏ頺듕⚡귃퓔ᐒꞻ㻆멊쫣㽩쿹듋≼ꃠ뤔ᮨﻵꝵ簞趡畏⥻谩鮷ā╺ꪟ෿᏾놥콞ߐ蘗䉅᷋࡫ᗕ˩䳁ᬼ灀맩肦橺糠뻘箚႙跆⢸
[ 1312.185004][T17486] random: crng reseeded on system resumption
[ 1312.251546][T16641] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1312.320521][   T30] audit: type=1400 audit(1777473153.464:766): avc:  denied  { bind } for  pid=17493 comm="syz.6.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1312.372885][   T30] audit: type=1400 audit(1777473153.524:767): avc:  denied  { map } for  pid=17495 comm="syz.6.3215" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1312.475685][   T30] audit: type=1400 audit(1777473153.524:768): avc:  denied  { execute } for  pid=17495 comm="syz.6.3215" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1312.516575][T14530] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1312.519338][T17453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1312.531813][ T5768] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1312.547012][T17453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1312.635678][T17453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1312.702829][ T5768] usb 2-1: Using ep0 maxpacket: 8
[ 1312.715014][ T5768] usb 2-1: config 49 has an invalid descriptor of length 54, skipping remainder of the config
[ 1312.737326][T17453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1312.982243][ T5768] usb 2-1: config 49 has 0 interfaces, different from the descriptor's value: 1
[ 1312.995684][T16641] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1313.000607][T17453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1313.009266][T16641] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1313.014614][ T5768] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1313.024163][T16641] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1313.043310][T17453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1313.051388][ T5768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1313.066471][T16641] usb 6-1: config 0 descriptor??
[ 1313.082326][T16641] pwc: Askey VC010 type 2 USB webcam detected.
[ 1313.090296][T14530] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[ 1313.102408][T14530] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1313.108545][T14530] usb 5-1: 2:1 : invalid channels 0
[ 1313.150937][T14530] usb 5-1: USB disconnect, device number 46
[ 1313.240506][ T5669] udevd[5669]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1313.302071][T17489] syz_tun: entered allmulticast mode
[ 1313.326892][   T30] audit: type=1400 audit(1777473154.474:769): avc:  denied  { write } for  pid=17488 comm="syz.1.3213" path="socket:[85425]" dev="sockfs" ino=85425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1313.363940][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3213'.
[ 1313.399602][T17489] syz_tun (unregistering): left allmulticast mode
[ 1313.430299][T17502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1313.452249][T17502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1313.490865][T16641] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1313.545423][ T5768] usb 2-1: string descriptor 0 read error: -71
[ 1313.565620][ T5768] usb 2-1: USB disconnect, device number 53
[ 1313.698841][T16641] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1313.706008][T16641] pwc: recv_control_msg error -32 req 04 val 1000
[ 1313.714061][T16641] pwc: recv_control_msg error -32 req 04 val 1300
[ 1313.721297][T16641] pwc: recv_control_msg error -32 req 04 val 1400
[ 1313.728776][T16641] pwc: recv_control_msg error -32 req 02 val 2000
[ 1313.736026][T16641] pwc: recv_control_msg error -32 req 02 val 2100
[ 1313.743303][T16641] pwc: recv_control_msg error -32 req 04 val 1500
[ 1313.785436][   T30] audit: type=1400 audit(1777473154.934:770): avc:  denied  { map } for  pid=17503 comm="syz.4.3216" path="socket:[85429]" dev="sockfs" ino=85429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[ 1313.890971][T17505] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1313.952026][T16641] pwc: recv_control_msg error -71 req 02 val 2400
[ 1313.961334][T16641] pwc: recv_control_msg error -71 req 02 val 2600
[ 1313.970146][T16641] pwc: recv_control_msg error -71 req 02 val 2900
[ 1313.980201][T16641] pwc: recv_control_msg error -71 req 02 val 2800
[ 1313.990047][T16641] pwc: recv_control_msg error -71 req 04 val 1100
[ 1313.998843][T16641] pwc: recv_control_msg error -71 req 04 val 1200
[ 1314.028408][T16641] pwc: Registered as video103.
[ 1314.039012][T16641] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46
[ 1314.078921][T16641] usb 6-1: USB disconnect, device number 15
[ 1314.508018][T17510] random: crng reseeded on system resumption
[ 1314.697233][   T30] audit: type=1400 audit(1777473155.844:771): avc:  denied  { mounton } for  pid=17517 comm="syz.5.3221" path="/61/file0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[ 1314.824403][T17523] SELinux: security_context_str_to_sid (3) failed with errno=-22
[ 1314.889359][   T30] audit: type=1400 audit(1777473156.034:772): avc:  denied  { create } for  pid=17526 comm="syz.4.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1317.321611][ T5768] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1317.482016][ T5768] usb 5-1: device descriptor read/64, error -71
[ 1317.763800][ T5768] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1317.942088][ T5768] usb 5-1: device descriptor read/64, error -71
[ 1317.988454][T17542] jfs: Unknown parameter 'disrArd'
[ 1318.010453][T17542] SELinux: security_context_str_to_sid (3) failed with errno=-22
[ 1318.061814][ T5768] usb usb5-port1: attempt power cycle
[ 1318.421679][ T5768] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1318.485296][ T5768] usb 5-1: device descriptor read/8, error -71
[ 1318.761974][ T5768] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1318.791578][T16641] usb 2-1: new full-speed USB device number 54 using dummy_hcd
[ 1318.814906][ T5768] usb 5-1: device descriptor read/8, error -71
[ 1318.932850][ T5768] usb usb5-port1: unable to enumerate USB device
[ 1318.951918][ T5789] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1318.962776][T16641] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1318.989796][T16641] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1318.999245][T16641] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1319.015771][T16641] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1319.025785][T16641] usb 2-1: Product: syz
[ 1319.030011][T16641] usb 2-1: Manufacturer: syz
[ 1319.040981][T16641] usb 2-1: SerialNumber: syz
[ 1319.058450][T16641] usb 2-1: config 0 descriptor??
[ 1319.076393][T16641] usb 2-1: selecting invalid altsetting 0
[ 1319.177305][ T5789] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1319.189159][ T5789] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1319.200655][ T5789] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1319.213760][ T5789] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1319.226268][ T5789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1319.251021][T17564] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 1319.814412][T16641] usb 2-1: USB disconnect, device number 54
[ 1322.064899][ T5768] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1322.223128][ T5768] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1322.239537][T17607] SELinux: security_context_str_to_sid (3) failed with errno=-22
[ 1322.247516][ T5768] usb 6-1: config 0 has no interface number 0
[ 1322.274002][ T5768] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1322.310490][ T5768] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1322.347639][ T5768] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1322.360537][ T5768] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1322.387268][ T5768] usb 6-1: config 0 descriptor??
[ 1322.391825][T14530] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1322.561944][T14530] usb 5-1: Using ep0 maxpacket: 32
[ 1322.591045][T14530] usb 5-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40
[ 1322.607943][T14530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1322.629134][T14530] usb 5-1: Product: Ⰺ
[ 1322.636166][T14530] usb 5-1: Manufacturer: ⧄椸쏽爡⚦΁暁뚏镛肌䢽뭩⹴⚪퀂賞⒐쨦媴䲘Ꝛ噡懊纜⸍산튈뢚삓㘻귚乡ꔁ젦婤ུٔ熹縯뱠鄚蕔옣䴎䃣ꄴ
[ 1322.679677][T14530] usb 5-1: SerialNumber: 凒뛞妪ﺏ頺듕⚡귃퓔ᐒꞻ㻆멊쫣㽩쿹듋≼ꃠ뤔ᮨﻵꝵ簞趡畏⥻谩鮷ā╺ꪟ෿᏾놥콞ߐ蘗䉅᷋࡫ᗕ˩䳁ᬼ灀맩肦橺糠뻘箚႙跆⢸
[ 1322.820945][ T5768] prodikeys 0003:041E:2801.0012: collection stack underflow
[ 1322.829112][ T5768] prodikeys 0003:041E:2801.0012: item 0 1 0 12 parsing failed
[ 1322.837588][ T5768] prodikeys 0003:041E:2801.0012: hid parse failed
[ 1322.844708][ T5768] prodikeys 0003:041E:2801.0012: probe with driver prodikeys failed with error -22
[ 1322.923938][T14530] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1322.931708][T13643] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1322.944234][ T5789] aiptek 7-1:17.0: Aiptek using 400 ms programming speed
[ 1322.954953][ T5789] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input47
[ 1322.981268][ T5789] usb 7-1: USB disconnect, device number 12
[ 1322.987296][    C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1323.021531][T11484] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 1323.081516][T13643] usb 8-1: Using ep0 maxpacket: 32
[ 1323.088700][T13643] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1323.104103][T13643] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1323.110752][T13643] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1323.120542][T13643] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1323.129918][T17606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1323.142092][T17606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1323.153130][T13643] usb 8-1: config 0 descriptor??
[ 1323.166864][T17606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1323.172915][T12627] usb 6-1: USB disconnect, device number 16
[ 1323.178596][T17606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1323.193341][T11484] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1323.206372][T11484] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1323.221246][T17606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1323.231899][T17606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1323.243569][T11484] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1323.244457][T14530] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[ 1323.252822][T11484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1323.266449][T14530] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1323.269725][T11484] usb 2-1: Product: Г
[ 1323.276565][T14530] usb 5-1: 2:1 : invalid channels 0
[ 1323.287993][T11484] usb 2-1: Manufacturer: Ⰱ
[ 1323.293711][T11484] usb 2-1: SerialNumber:  
[ 1323.323853][T14530] usb 5-1: USB disconnect, device number 51
[ 1323.358508][ T5669] udevd[5669]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1323.534557][T11484] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1323.679242][T17624] FAULT_INJECTION: forcing a failure.
[ 1323.679242][T17624] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1323.693795][T17624] CPU: 0 UID: 0 PID: 17624 Comm: syz.6.3254 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1323.693828][T17624] Tainted: [L]=SOFTLOCKUP
[ 1323.693834][T17624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1323.693844][T17624] Call Trace:
[ 1323.693851][T17624]  <TASK>
[ 1323.693858][T17624]  dump_stack_lvl+0x100/0x190
[ 1323.693884][T17624]  should_fail_ex.cold+0x5/0xa
[ 1323.693908][T17624]  _copy_from_user+0x2e/0xd0
[ 1323.693926][T17624]  __sys_bpf+0x243/0x4b90
[ 1323.693946][T17624]  ? __pfx___sys_bpf+0x10/0x10
[ 1323.693962][T17624]  ? proc_fail_nth_write+0x9f/0x220
[ 1323.693976][T17624]  ? find_held_lock+0x2b/0x80
[ 1323.693998][T17624]  ? find_held_lock+0x2b/0x80
[ 1323.694013][T17624]  ? ksys_write+0x190/0x250
[ 1323.694031][T17624]  ? ksys_write+0x190/0x250
[ 1323.694052][T17624]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[ 1323.694067][T17624]  ? kernel_write+0x5e3/0x6c0
[ 1323.694077][T17624]  ? __fget_files+0x215/0x3d0
[ 1323.694098][T17624]  ? fput+0x79/0x100
[ 1323.694111][T17624]  ? ksys_write+0x1ac/0x250
[ 1323.694127][T17624]  ? __pfx_ksys_write+0x10/0x10
[ 1323.694150][T17624]  __x64_sys_bpf+0x7b/0xc0
[ 1323.694165][T17624]  ? lockdep_hardirqs_on+0x78/0x100
[ 1323.694184][T17624]  do_syscall_64+0x10b/0xf80
[ 1323.694201][T17624]  ? clear_bhb_loop+0x40/0x90
[ 1323.694214][T17624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1323.694225][T17624] RIP: 0033:0x7ff9b939cdd9
[ 1323.694235][T17624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1323.694246][T17624] RSP: 002b:00007ff9ba23e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1323.694257][T17624] RAX: ffffffffffffffda RBX: 00007ff9b9615fa0 RCX: 00007ff9b939cdd9
[ 1323.694267][T17624] RDX: 00000000000000ac RSI: 0000200000002300 RDI: 000000000000000a
[ 1323.694278][T17624] RBP: 00007ff9ba23e090 R08: 0000000000000000 R09: 0000000000000000
[ 1323.694289][T17624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1323.694298][T17624] R13: 00007ff9b9616038 R14: 00007ff9b9615fa0 R15: 00007ffe80d833e8
[ 1323.694322][T17624]  </TASK>
[ 1323.731856][T11484] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1323.950437][T11484] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[ 1323.958487][T13643] corsair-psu 0003:1B1C:1C09.0013: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.7-1/input0
[ 1324.149725][   T30] audit: type=1400 audit(1777473165.294:773): avc:  denied  { create } for  pid=17616 comm="syz.7.3248" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1324.171839][   T30] audit: type=1400 audit(1777473165.294:774): avc:  denied  { write } for  pid=17616 comm="syz.7.3248" name="file0" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1324.209628][T13643] corsair-psu 0003:1B1C:1C09.0013: unable to initialize device (-95)
[ 1324.223399][T11484] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[ 1324.234242][ T5789] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1324.244906][T13643] corsair-psu 0003:1B1C:1C09.0013: probe with driver corsair-psu failed with error -95
[ 1324.301877][T12627] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1324.315633][   T30] audit: type=1400 audit(1777473165.294:775): avc:  denied  { open } for  pid=17616 comm="syz.7.3248" path="/47/file0" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1324.324086][T17636] jfs: Unknown parameter 'disrArd'
[ 1324.360481][T11484] usb 2-1: USB disconnect, device number 55
[ 1324.386424][T17635] SELinux: security_context_str_to_sid (3) failed with errno=-22
[ 1324.442009][ T5789] usb 7-1: Using ep0 maxpacket: 32
[ 1324.452449][T14530] usb 8-1: USB disconnect, device number 9
[ 1324.456085][ T5789] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 137, changing to 11
[ 1324.489694][ T5789] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1324.491573][T12627] usb 6-1: Using ep0 maxpacket: 32
[ 1324.502479][ T5669] udevd[5669]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1324.523957][ T5789] usb 7-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.40
[ 1324.534991][T12627] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1324.536749][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1324.546112][T12627] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1324.555881][ T5789] usb 7-1: Product: syz
[ 1324.565179][ T5789] usb 7-1: Manufacturer: syz
[ 1324.570902][ T5789] usb 7-1: SerialNumber: syz
[ 1324.580732][T17638] FAULT_INJECTION: forcing a failure.
[ 1324.580732][T17638] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1324.596096][T12627] usb 6-1: config 0 descriptor??
[ 1324.601409][T17638] CPU: 0 UID: 0 PID: 17638 Comm: syz.4.3259 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1324.601433][T17638] Tainted: [L]=SOFTLOCKUP
[ 1324.601439][T17638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1324.601449][T17638] Call Trace:
[ 1324.601455][T17638]  <TASK>
[ 1324.601462][T17638]  dump_stack_lvl+0x100/0x190
[ 1324.601487][T17638]  should_fail_ex.cold+0x5/0xa
[ 1324.601532][T17638]  _copy_from_user+0x2e/0xd0
[ 1324.601557][T17638]  copy_msghdr_from_user+0x9f/0x4f0
[ 1324.601579][T17638]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1324.601604][T17638]  ? do_raw_spin_lock+0x128/0x260
[ 1324.601635][T17638]  ___sys_sendmsg+0x106/0x1e0
[ 1324.601657][T17638]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1324.601677][T17638]  ? debug_object_assert_init+0x1c4/0x300
[ 1324.601712][T17638]  ? find_held_lock+0x2b/0x80
[ 1324.601744][T17638]  __sys_sendmmsg+0x205/0x430
[ 1324.601771][T17638]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1324.601805][T17638]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1324.601838][T17638]  ? xfd_validate_state+0x129/0x190
[ 1324.601867][T17638]  __x64_sys_sendmmsg+0x9c/0x100
[ 1324.601891][T17638]  ? lockdep_hardirqs_on+0x78/0x100
[ 1324.601910][T17638]  do_syscall_64+0x10b/0xf80
[ 1324.601927][T17638]  ? clear_bhb_loop+0x40/0x90
[ 1324.601949][T17638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1324.601967][T17638] RIP: 0033:0x7ff39a19cdd9
[ 1324.601982][T17638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1324.601997][T17638] RSP: 002b:00007ff39afd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1324.602013][T17638] RAX: ffffffffffffffda RBX: 00007ff39a415fa0 RCX: 00007ff39a19cdd9
[ 1324.602024][T17638] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000012
[ 1324.602035][T17638] RBP: 00007ff39afd4090 R08: 0000000000000000 R09: 0000000000000000
[ 1324.602045][T17638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1324.602055][T17638] R13: 00007ff39a416038 R14: 00007ff39a415fa0 R15: 00007ffe6ff89eb8
[ 1324.602079][T17638]  </TASK>
[ 1324.815131][T12627] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1325.233259][   T30] audit: type=1400 audit(1777473166.384:776): avc:  denied  { unlink } for  pid=16550 comm="syz-executor" name="file0" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1325.296132][T17653] hugetlbfs: syz.4.3264 (17653): Using mlock ulimits for SHM_HUGETLB is obsolete
[ 1325.298808][   T30] audit: type=1400 audit(1777473166.424:777): avc:  denied  { setopt } for  pid=17649 comm="syz.1.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1325.387232][   T30] audit: type=1400 audit(1777473166.454:778): avc:  denied  { listen } for  pid=17654 comm="syz.7.3265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1325.427410][T12627] gspca_sunplus: reg_r err -71
[ 1325.435978][T12627] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[ 1325.468611][T12627] usb 6-1: USB disconnect, device number 17
[ 1325.588325][T16641] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1325.771619][T16641] usb 2-1: Using ep0 maxpacket: 16
[ 1325.778912][T16641] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[ 1325.787464][T16641] usb 2-1: config 0 has no interface number 0
[ 1325.794217][T16641] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1325.804502][T16641] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1325.827044][T16641] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1325.836541][T16641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1325.860233][T16641] usb 2-1: Product: syz
[ 1325.864663][T16641] usb 2-1: Manufacturer: syz
[ 1325.873863][T16641] usb 2-1: SerialNumber: syz
[ 1325.888664][T16641] usb 2-1: config 0 descriptor??
[ 1325.903990][T17656] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1325.911338][T17656] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1326.150016][T17656] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1326.218165][T17656] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1326.260767][T17663] FAULT_INJECTION: forcing a failure.
[ 1326.260767][T17663] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1326.291577][T17663] CPU: 1 UID: 0 PID: 17663 Comm: syz.7.3267 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1326.291612][T17663] Tainted: [L]=SOFTLOCKUP
[ 1326.291619][T17663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1326.291629][T17663] Call Trace:
[ 1326.291635][T17663]  <TASK>
[ 1326.291642][T17663]  dump_stack_lvl+0x100/0x190
[ 1326.291669][T17663]  should_fail_ex.cold+0x5/0xa
[ 1326.291696][T17663]  _copy_from_user+0x2e/0xd0
[ 1326.291723][T17663]  __sys_bpf+0x243/0x4b90
[ 1326.291755][T17663]  ? __pfx___sys_bpf+0x10/0x10
[ 1326.291780][T17663]  ? proc_fail_nth_write+0x9f/0x220
[ 1326.291800][T17663]  ? find_held_lock+0x2b/0x80
[ 1326.291822][T17663]  ? find_held_lock+0x2b/0x80
[ 1326.291837][T17663]  ? ksys_write+0x190/0x250
[ 1326.291856][T17663]  ? ksys_write+0x190/0x250
[ 1326.291879][T17663]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[ 1326.291900][T17663]  ? kernel_write+0x5e3/0x6c0
[ 1326.291918][T17663]  ? __fget_files+0x215/0x3d0
[ 1326.291964][T17663]  __x64_sys_bpf+0x7b/0xc0
[ 1326.291982][T17663]  do_syscall_64+0x10b/0xf80
[ 1326.292002][T17663]  ? clear_bhb_loop+0x40/0x90
[ 1326.292026][T17663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1326.292044][T17663] RIP: 0033:0x7fe99559cdd9
[ 1326.292061][T17663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1326.292078][T17663] RSP: 002b:00007fe99641d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1326.292097][T17663] RAX: ffffffffffffffda RBX: 00007fe995815fa0 RCX: 00007fe99559cdd9
[ 1326.292107][T17663] RDX: 000000000000004c RSI: 0000200000000080 RDI: 000000000000000a
[ 1326.292118][T17663] RBP: 00007fe99641d090 R08: 0000000000000000 R09: 0000000000000000
[ 1326.292128][T17663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1326.292138][T17663] R13: 00007fe995816038 R14: 00007fe995815fa0 R15: 00007ffee45da108
[ 1326.292164][T17663]  </TASK>
[ 1326.508882][T16641] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1326.613274][   T30] audit: type=1400 audit(1777473167.744:779): avc:  denied  { listen } for  pid=17665 comm="syz.5.3269" lport=48769 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1326.689675][T17670] 9p: Bad value for 'rfdno'
[ 1326.715661][T17672] FAULT_INJECTION: forcing a failure.
[ 1326.715661][T17672] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1326.729883][   T30] audit: type=1400 audit(1777473167.744:780): avc:  denied  { accept } for  pid=17665 comm="syz.5.3269" lport=48769 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1326.758670][T17672] CPU: 1 UID: 0 PID: 17672 Comm: syz.4.3271 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1326.758704][T17672] Tainted: [L]=SOFTLOCKUP
[ 1326.758711][T17672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1326.758722][T17672] Call Trace:
[ 1326.758728][T17672]  <TASK>
[ 1326.758735][T17672]  dump_stack_lvl+0x100/0x190
[ 1326.758764][T17672]  should_fail_ex.cold+0x5/0xa
[ 1326.758790][T17672]  _copy_from_user+0x2e/0xd0
[ 1326.758816][T17672]  copy_msghdr_from_user+0x9f/0x4f0
[ 1326.758841][T17672]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1326.758875][T17672]  ___sys_sendmsg+0x106/0x1e0
[ 1326.758898][T17672]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1326.758953][T17672]  __sys_sendmsg+0x170/0x220
[ 1326.758981][T17672]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1326.759018][T17672]  ? rcu_is_watching+0x12/0xc0
[ 1326.759050][T17672]  do_syscall_64+0x10b/0xf80
[ 1326.759070][T17672]  ? clear_bhb_loop+0x40/0x90
[ 1326.759093][T17672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1326.759111][T17672] RIP: 0033:0x7ff39a19cdd9
[ 1326.759128][T17672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1326.759144][T17672] RSP: 002b:00007ff39afd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1326.759162][T17672] RAX: ffffffffffffffda RBX: 00007ff39a415fa0 RCX: 00007ff39a19cdd9
[ 1326.759174][T17672] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004
[ 1326.759186][T17672] RBP: 00007ff39afd4090 R08: 0000000000000000 R09: 0000000000000000
[ 1326.759197][T17672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1326.759208][T17672] R13: 00007ff39a416038 R14: 00007ff39a415fa0 R15: 00007ffe6ff89eb8
[ 1326.759234][T17672]  </TASK>
[ 1326.950306][T16641] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1326.982271][T16641] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[ 1326.993264][   T30] audit: type=1400 audit(1777473168.144:781): avc:  denied  { getopt } for  pid=17668 comm="syz.7.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1327.007926][T16641] asix 2-1:0.34: probe with driver asix failed with error -61
[ 1327.132747][ T5789] usbhid 7-1:1.0: can't add hid device: -71
[ 1327.139031][ T5789] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[ 1327.167857][ T5789] usb 7-1: USB disconnect, device number 13
[ 1327.998820][   T30] audit: type=1400 audit(1777473169.144:782): avc:  denied  { map } for  pid=17680 comm="syz.4.3274" path="socket:[86819]" dev="sockfs" ino=86819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[ 1328.171724][ T5789] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1328.202494][T16641] usb 2-1: USB disconnect, device number 56
[ 1328.225566][T17701] FAULT_INJECTION: forcing a failure.
[ 1328.225566][T17701] name failslab, interval 1, probability 0, space 0, times 0
[ 1328.238480][T17701] CPU: 1 UID: 0 PID: 17701 Comm: syz.6.3280 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1328.238506][T17701] Tainted: [L]=SOFTLOCKUP
[ 1328.238512][T17701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1328.238521][T17701] Call Trace:
[ 1328.238528][T17701]  <TASK>
[ 1328.238535][T17701]  dump_stack_lvl+0x100/0x190
[ 1328.238560][T17701]  should_fail_ex.cold+0x5/0xa
[ 1328.238585][T17701]  should_failslab+0xc2/0x120
[ 1328.238603][T17701]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1328.238627][T17701]  ? locks_get_lock_context+0x94/0x620
[ 1328.238649][T17701]  ? avc_has_perm_noaudit+0x11e/0x3b0
[ 1328.238679][T17701]  locks_get_lock_context+0x94/0x620
[ 1328.238699][T17701]  ? avc_has_perm_noaudit+0x145/0x3b0
[ 1328.238726][T17701]  flock_lock_inode+0xb2/0x11c0
[ 1328.238751][T17701]  ? avc_has_perm+0x135/0x1e0
[ 1328.238781][T17701]  ? __pfx_flock_lock_inode+0x10/0x10
[ 1328.238812][T17701]  ? __pfx___might_resched+0x10/0x10
[ 1328.238843][T17701]  locks_lock_inode_wait+0x119/0x490
[ 1328.238871][T17701]  ? __pfx_locks_lock_inode_wait+0x10/0x10
[ 1328.238896][T17701]  ? __pfx___file_has_perm+0x10/0x10
[ 1328.238920][T17701]  ? lockdep_init_map_type+0x5c/0x250
[ 1328.238948][T17701]  fuse_file_flock+0xf1/0x1d0
[ 1328.238970][T17701]  ? __pfx_fuse_file_flock+0x10/0x10
[ 1328.238989][T17701]  __do_sys_flock+0x2dd/0x4d0
[ 1328.239013][T17701]  ? __pfx___do_sys_flock+0x10/0x10
[ 1328.239036][T17701]  ? kernel_write+0x5e3/0x6c0
[ 1328.239070][T17701]  ? ksys_write+0x1ac/0x250
[ 1328.239092][T17701]  ? rcu_is_watching+0x12/0xc0
[ 1328.239122][T17701]  do_syscall_64+0x10b/0xf80
[ 1328.239142][T17701]  ? clear_bhb_loop+0x40/0x90
[ 1328.239164][T17701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1328.239182][T17701] RIP: 0033:0x7ff9b939cdd9
[ 1328.239198][T17701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1328.239215][T17701] RSP: 002b:00007ff9ba23e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[ 1328.239232][T17701] RAX: ffffffffffffffda RBX: 00007ff9b9615fa0 RCX: 00007ff9b939cdd9
[ 1328.239242][T17701] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 1328.239252][T17701] RBP: 00007ff9ba23e090 R08: 0000000000000000 R09: 0000000000000000
[ 1328.239262][T17701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1328.239272][T17701] R13: 00007ff9b9616038 R14: 00007ff9b9615fa0 R15: 00007ffe80d833e8
[ 1328.239298][T17701]  </TASK>
[ 1328.571522][ T5789] usb 8-1: Using ep0 maxpacket: 8
[ 1328.603203][ T5789] usb 8-1: config 0 has an invalid interface number: 8 but max is 0
[ 1328.611302][ T5789] usb 8-1: config 0 has no interface number 0
[ 1328.618790][ T5789] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1328.630726][ T5789] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1328.640076][ T5789] usb 8-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0
[ 1328.648395][ T5789] usb 8-1: Product: syz
[ 1328.724292][T17706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3281'.
[ 1329.062447][ T5789] usb 8-1: config 0 descriptor??
[ 1329.082240][ T5789] iowarrior 8-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0
[ 1329.298790][ T5789] usb 8-1: USB disconnect, device number 10
[ 1329.991556][T12627] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[ 1330.052078][T17725] FAULT_INJECTION: forcing a failure.
[ 1330.052078][T17725] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1330.066404][T17725] CPU: 0 UID: 0 PID: 17725 Comm: syz.7.3287 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1330.066440][T17725] Tainted: [L]=SOFTLOCKUP
[ 1330.066447][T17725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1330.066472][T17725] Call Trace:
[ 1330.066479][T17725]  <TASK>
[ 1330.066496][T17725]  dump_stack_lvl+0x100/0x190
[ 1330.066537][T17725]  should_fail_ex.cold+0x5/0xa
[ 1330.066566][T17725]  _copy_to_user+0x32/0xd0
[ 1330.066597][T17725]  simple_read_from_buffer+0xcb/0x170
[ 1330.066625][T17725]  proc_fail_nth_read+0x1af/0x230
[ 1330.066648][T17725]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1330.066668][T17725]  ? rw_verify_area+0xce/0x6d0
[ 1330.066699][T17725]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1330.066727][T17725]  vfs_read+0x1e4/0xb30
[ 1330.066751][T17725]  ? __pfx_vfs_read+0x10/0x10
[ 1330.066769][T17725]  ? __fget_files+0x215/0x3d0
[ 1330.066800][T17725]  ? __fget_files+0x21f/0x3d0
[ 1330.066831][T17725]  ksys_read+0x12a/0x250
[ 1330.066852][T17725]  ? __pfx_ksys_read+0x10/0x10
[ 1330.066874][T17725]  ? rcu_is_watching+0x12/0xc0
[ 1330.066908][T17725]  do_syscall_64+0x10b/0xf80
[ 1330.066930][T17725]  ? clear_bhb_loop+0x40/0x90
[ 1330.066956][T17725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1330.066982][T17725] RIP: 0033:0x7fe99555d60e
[ 1330.067001][T17725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1330.067017][T17725] RSP: 002b:00007fe9963fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1330.067037][T17725] RAX: ffffffffffffffda RBX: 00007fe9963fc6c0 RCX: 00007fe99555d60e
[ 1330.067049][T17725] RDX: 000000000000000f RSI: 00007fe9963fc0a0 RDI: 0000000000000005
[ 1330.067059][T17725] RBP: 00007fe9963fc090 R08: 0000000000000000 R09: 0000000000000000
[ 1330.067070][T17725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1330.067081][T17725] R13: 00007fe995816128 R14: 00007fe995816090 R15: 00007ffee45da108
[ 1330.067108][T17725]  </TASK>
[ 1330.552416][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1330.552432][   T30] audit: type=1400 audit(1777473171.704:784): avc:  denied  { name_bind } for  pid=17730 comm="syz.1.3289" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1330.657352][T12627] usb 6-1: config 150 has an invalid interface number: 204 but max is 2
[ 1330.665977][T12627] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[ 1330.685226][T12627] usb 6-1: config 150 has no interface number 0
[ 1330.704771][T12627] usb 6-1: config 150 interface 204 has no altsetting 0
[ 1330.732839][T12627] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[ 1330.742423][T12627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1330.764620][   T30] audit: type=1400 audit(1777473171.904:785): avc:  denied  { append } for  pid=17735 comm="syz.1.3292" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1330.788704][T12627] usb 6-1: Product: syz
[ 1330.793080][T12627] usb 6-1: Manufacturer: syz
[ 1330.804344][T12627] usb 6-1: SerialNumber: syz
[ 1331.059682][   T30] audit: type=1400 audit(1777473172.204:786): avc:  denied  { set_context_mgr } for  pid=17740 comm="syz.1.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1331.083095][T12627] xr_serial 6-1:150.204: skipping garbage
[ 1331.089344][T12627] xr_serial 6-1:150.204: xr_serial converter detected
[ 1331.107348][   T30] audit: type=1400 audit(1777473172.254:787): avc:  denied  { call } for  pid=17740 comm="syz.1.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1331.935841][T12627] xr_serial ttyUSB0: Failed to set reg 0x0e: -71
[ 1331.944640][T12627] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[ 1331.995070][T12627] usb 6-1: USB disconnect, device number 18
[ 1332.014771][T17750] netlink: 976 bytes leftover after parsing attributes in process `syz.6.3297'.
[ 1332.030127][T12627] xr_serial 6-1:150.204: device disconnected
[ 1332.328462][T12523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1332.642829][T12523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1332.694393][T17769] netlink: 798 bytes leftover after parsing attributes in process `syz.4.3305'.
[ 1332.801907][T16641] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1333.012555][T16641] usb 7-1: Using ep0 maxpacket: 8
[ 1333.068857][T16641] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[ 1333.115287][T16641] usb 7-1: config 0 has no interface number 0
[ 1333.161052][T16641] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1333.217834][   T30] audit: type=1400 audit(1777473174.354:788): avc:  denied  { ioctl } for  pid=17771 comm="syz.7.3307" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x64c0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1333.261942][T16641] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1333.359441][T16641] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1333.486160][T16641] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1333.663668][T16641] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1333.792417][T16641] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1333.929678][T16641] usb 7-1: config 0 descriptor??
[ 1334.235328][T16641] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1334.411736][ T5782] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1334.469486][T16641] usb 7-1: USB disconnect, device number 14
[ 1334.694687][ T5782] usb 8-1: Using ep0 maxpacket: 16
[ 1334.803369][ T5782] usb 8-1: config 0 has no interfaces?
[ 1334.843350][T16641] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[ 1334.877767][ T5782] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1334.933230][T12523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1334.979540][ T5782] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1335.068202][ T5782] usb 8-1: config 0 descriptor??
[ 1335.126356][T15727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1335.133571][T12222] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1335.174268][T12523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1335.190088][T15727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1335.201768][T15727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1335.209477][T15727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1335.217401][T15727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1335.252104][T11621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1335.260038][T11621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1335.273099][T11621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1335.284658][T11621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1335.294003][T11621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1335.304388][T12222] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1335.350938][T12222] usb 6-1: config 3 has an invalid interface number: 19 but max is 0
[ 1335.388276][T12222] usb 6-1: config 3 has an invalid interface number: 4 but max is 0
[ 1335.407579][T12222] usb 6-1: config 3 has 2 interfaces, different from the descriptor's value: 1
[ 1335.430943][T12222] usb 6-1: config 3 has no interface number 0
[ 1335.459981][   T30] audit: type=1400 audit(1777473176.604:789): avc:  denied  { read } for  pid=5275 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[ 1335.482245][T12222] usb 6-1: config 3 has no interface number 1
[ 1335.507443][T12222] usb 6-1: config 3 interface 19 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[ 1335.551141][T12222] usb 6-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30
[ 1335.595587][T12222] usb 6-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32
[ 1335.655749][T12222] usb 6-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0
[ 1335.713370][T12222] usb 6-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0
[ 1335.749363][T12222] usb 6-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175
[ 1335.780039][T12222] usb 6-1: config 3 interface 19 has no altsetting 0
[ 1335.790260][T12222] usb 6-1: config 3 interface 4 has no altsetting 0
[ 1335.799874][T12222] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5
[ 1335.809532][T12222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1335.817927][T12222] usb 6-1: Product: syz
[ 1335.823762][T12222] usb 6-1: Manufacturer: syz
[ 1335.828471][T12222] usb 6-1: SerialNumber: syz
[ 1336.088464][T12222] pl2303 6-1:3.19: required endpoints missing
[ 1336.118688][T12222] pl2303 6-1:3.4: required interrupt-in endpoint missing
[ 1336.149376][T12222] usb 6-1: USB disconnect, device number 19
[ 1336.388277][T12523] bond0 (unregistering): Released all slaves
[ 1336.413791][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1337.295216][T12523] hsr_slave_0: left promiscuous mode
[ 1337.317681][T12523] hsr_slave_1: left promiscuous mode
[ 1337.363227][T11621] Bluetooth: hci0: command tx timeout
[ 1337.373017][T12523] veth1_macvtap: left promiscuous mode
[ 1337.381015][T12523] veth0_macvtap: left promiscuous mode
[ 1337.393247][T12523] veth1_vlan: left promiscuous mode
[ 1337.398758][T12523] veth0_vlan: left promiscuous mode
[ 1338.509356][T12627] usb 8-1: USB disconnect, device number 11
[ 1338.897886][ T5928] block nbd4: Possible stuck request ffff888028b85400: control (read@0,1024B). Runtime 240 seconds
[ 1338.908904][ T5928] block nbd4: Possible stuck request ffff888028b855c0: control (read@1024,1024B). Runtime 240 seconds
[ 1338.920028][ T5928] block nbd4: Possible stuck request ffff888028b85780: control (read@2048,1024B). Runtime 240 seconds
[ 1338.931234][ T5928] block nbd4: Possible stuck request ffff888028b85940: control (read@3072,1024B). Runtime 240 seconds
[ 1339.353386][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1339.360301][T17844] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3317'.
[ 1339.441597][T11621] Bluetooth: hci0: command tx timeout
[ 1339.950816][ T5789] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1340.195429][ T5789] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1340.280777][ T5789] usb 7-1: config 0 has no interface number 0
[ 1340.344457][ T5789] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1340.361542][ T5789] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1340.373722][ T5789] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1340.384947][ T5789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1340.417617][ T5789] usb 7-1: config 0 descriptor??
[ 1340.573844][T17780] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1340.595604][T17780] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1341.174630][T17780] bridge_slave_0: entered allmulticast mode
[ 1341.521587][T11621] Bluetooth: hci0: command tx timeout
[ 1341.524787][T17780] bridge_slave_0: entered promiscuous mode
[ 1341.552243][ T5789] prodikeys 0003:041E:2801.0014: collection stack underflow
[ 1341.631676][T17780] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1341.687334][T17780] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1341.722092][T17780] bridge_slave_1: entered allmulticast mode
[ 1341.737665][ T5789] prodikeys 0003:041E:2801.0014: item 0 1 0 12 parsing failed
[ 1341.745659][T17780] bridge_slave_1: entered promiscuous mode
[ 1341.745706][ T5789] prodikeys 0003:041E:2801.0014: hid parse failed
[ 1341.758031][ T5789] prodikeys 0003:041E:2801.0014: probe with driver prodikeys failed with error -22
[ 1341.772657][ T5789] usb 7-1: USB disconnect, device number 15
[ 1341.789827][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1341.942706][T17780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1341.970142][T17780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1341.985257][   T30] audit: type=1400 audit(1777473183.134:790): avc:  denied  { write } for  pid=17893 comm="syz.4.3326" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1342.075408][T17780] team0: Port device team_slave_0 added
[ 1342.084938][T17780] team0: Port device team_slave_1 added
[ 1342.114837][ T5928] block nbd0: Possible stuck request ffff888028965080: control (read@0,1024B). Runtime 150 seconds
[ 1342.125834][ T5928] block nbd0: Possible stuck request ffff888028965240: control (read@1024,1024B). Runtime 150 seconds
[ 1342.137111][ T5928] block nbd0: Possible stuck request ffff888028965400: control (read@2048,1024B). Runtime 150 seconds
[ 1342.137939][T17780] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1342.148477][ T5928] block nbd0: Possible stuck request ffff8880289655c0: control (read@3072,1024B). Runtime 150 seconds
[ 1342.573777][T17780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1342.610475][T17780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1342.657550][T17780] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1342.683706][T17780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1342.857228][T17912] netlink: 798 bytes leftover after parsing attributes in process `syz.6.3330'.
[ 1343.829445][T11621] Bluetooth: hci0: command tx timeout
[ 1343.829602][T17780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1344.235967][T17914] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3329'.
[ 1345.694830][T17780] hsr_slave_0: entered promiscuous mode
[ 1345.720877][T17780] hsr_slave_1: entered promiscuous mode
[ 1345.736898][T17780] debugfs: 'hsr0' already exists in 'hsr'
[ 1345.745952][T17780] Cannot create hsr debugfs directory
[ 1345.765750][   T30] audit: type=1400 audit(1777473186.914:791): avc:  denied  { map } for  pid=17924 comm="syz.4.3334" path="/dev/sg0" dev="devtmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1345.834422][   T30] audit: type=1400 audit(1777473186.914:792): avc:  denied  { execute } for  pid=17924 comm="syz.4.3334" path="/dev/sg0" dev="devtmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1346.156031][T17941] FAULT_INJECTION: forcing a failure.
[ 1346.156031][T17941] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1346.169430][T17941] CPU: 0 UID: 0 PID: 17941 Comm: syz.5.3336 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1346.169458][T17941] Tainted: [L]=SOFTLOCKUP
[ 1346.169465][T17941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1346.169476][T17941] Call Trace:
[ 1346.169482][T17941]  <TASK>
[ 1346.169489][T17941]  dump_stack_lvl+0x100/0x190
[ 1346.169517][T17941]  should_fail_ex.cold+0x5/0xa
[ 1346.169543][T17941]  _copy_from_user+0x2e/0xd0
[ 1346.169570][T17941]  copy_msghdr_from_user+0x9f/0x4f0
[ 1346.169598][T17941]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1346.169619][T17941]  ? rcu_is_watching+0x12/0xc0
[ 1346.169653][T17941]  ? __lock_acquire+0x4a5/0x2630
[ 1346.169680][T17941]  ___sys_sendmsg+0x106/0x1e0
[ 1346.169703][T17941]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1346.169725][T17941]  ? lock_acquire+0x1b1/0x370
[ 1346.169778][T17941]  __sys_sendmsg+0x170/0x220
[ 1346.169805][T17941]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1346.169839][T17941]  ? rcu_is_watching+0x12/0xc0
[ 1346.169865][T17941]  ? exit_to_user_mode_loop+0xdd/0x4a0
[ 1346.169890][T17941]  ? rcu_is_watching+0x12/0xc0
[ 1346.169921][T17941]  do_syscall_64+0x10b/0xf80
[ 1346.169941][T17941]  ? clear_bhb_loop+0x40/0x90
[ 1346.169963][T17941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1346.169982][T17941] RIP: 0033:0x7f4ee599cdd9
[ 1346.169997][T17941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1346.170015][T17941] RSP: 002b:00007f4ee6828028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1346.170033][T17941] RAX: ffffffffffffffda RBX: 00007f4ee5c16180 RCX: 00007f4ee599cdd9
[ 1346.170044][T17941] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[ 1346.170055][T17941] RBP: 00007f4ee6828090 R08: 0000000000000000 R09: 0000000000000000
[ 1346.170066][T17941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1346.170076][T17941] R13: 00007f4ee5c16218 R14: 00007f4ee5c16180 R15: 00007ffdce99ec68
[ 1346.170102][T17941]  </TASK>
[ 1346.427774][   T30] audit: type=1400 audit(1777473187.574:793): avc:  denied  { create } for  pid=17942 comm="syz.7.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1346.451021][T17780] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1346.566390][T17780] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1346.732517][ T5789] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1347.602192][ T5789] usb 6-1: device descriptor read/64, error -71
[ 1347.616415][T17780] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1347.636772][T17780] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1347.660999][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1347.674969][T13643] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1347.686396][T17780] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1347.831527][T13643] usb 5-1: Using ep0 maxpacket: 16
[ 1347.838709][T13643] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 1347.849800][ T5789] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1347.857753][T13643] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1347.870610][T17780] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1347.884891][T13643] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f
[ 1347.900786][T17780] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1347.922222][T13643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1347.939796][T17780] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1347.950464][T13643] usb 5-1: Product: syz
[ 1347.960294][T13643] usb 5-1: Manufacturer: syz
[ 1347.972895][T13643] usb 5-1: SerialNumber: syz
[ 1348.013592][ T5789] usb 6-1: device descriptor read/64, error -71
[ 1348.045584][T13643] usb 5-1: config 0 descriptor??
[ 1348.074300][T13643] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected
[ 1348.113471][T13643] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[ 1348.125782][ T5789] usb usb6-port1: attempt power cycle
[ 1348.493385][ T5789] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1348.514353][ T5789] usb 6-1: device descriptor read/8, error -71
[ 1348.811596][ T5789] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1348.841951][ T5789] usb 6-1: device descriptor read/8, error -71
[ 1349.094198][ T5789] usb usb6-port1: unable to enumerate USB device
[ 1349.137122][T17978] FAULT_INJECTION: forcing a failure.
[ 1349.137122][T17978] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1349.160514][T17978] CPU: 1 UID: 0 PID: 17978 Comm: syz.7.3342 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1349.160544][T17978] Tainted: [L]=SOFTLOCKUP
[ 1349.160551][T17978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1349.160566][T17978] Call Trace:
[ 1349.160572][T17978]  <TASK>
[ 1349.160579][T17978]  dump_stack_lvl+0x100/0x190
[ 1349.160602][T17978]  should_fail_ex.cold+0x5/0xa
[ 1349.160625][T17978]  _copy_to_user+0x32/0xd0
[ 1349.160648][T17978]  simple_read_from_buffer+0xcb/0x170
[ 1349.160667][T17978]  proc_fail_nth_read+0x1af/0x230
[ 1349.160683][T17978]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1349.160699][T17978]  ? rw_verify_area+0xce/0x6d0
[ 1349.160721][T17978]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1349.160735][T17978]  vfs_read+0x1e4/0xb30
[ 1349.160752][T17978]  ? __pfx_vfs_read+0x10/0x10
[ 1349.160766][T17978]  ? __fget_files+0x215/0x3d0
[ 1349.160788][T17978]  ? __fget_files+0x21f/0x3d0
[ 1349.160811][T17978]  ksys_read+0x12a/0x250
[ 1349.160825][T17978]  ? __pfx_ksys_read+0x10/0x10
[ 1349.160838][T17978]  ? rcu_is_watching+0x12/0xc0
[ 1349.160859][T17978]  ? exit_to_user_mode_loop+0xdd/0x4a0
[ 1349.160878][T17978]  ? rcu_is_watching+0x12/0xc0
[ 1349.160901][T17978]  do_syscall_64+0x10b/0xf80
[ 1349.160916][T17978]  ? clear_bhb_loop+0x40/0x90
[ 1349.160934][T17978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1349.160948][T17978] RIP: 0033:0x7fe99555d60e
[ 1349.160961][T17978] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1349.160974][T17978] RSP: 002b:00007fe9963dafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1349.160988][T17978] RAX: ffffffffffffffda RBX: 00007fe9963db6c0 RCX: 00007fe99555d60e
[ 1349.160997][T17978] RDX: 000000000000000f RSI: 00007fe9963db0a0 RDI: 0000000000000005
[ 1349.161005][T17978] RBP: 00007fe9963db090 R08: 0000000000000000 R09: 0000000000000000
[ 1349.161013][T17978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1349.161022][T17978] R13: 00007fe995816218 R14: 00007fe995816180 R15: 00007ffee45da108
[ 1349.161042][T17978]  </TASK>
[ 1349.642875][ T5782] usb 5-1: USB disconnect, device number 52
[ 1349.815040][ T5782] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[ 1349.898724][ T5782] kobil_sct 5-1:0.0: device disconnected
[ 1349.919793][T17975] netlink: 172 bytes leftover after parsing attributes in process `syz.6.3341'.
[ 1349.932842][T17780] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1350.042680][T12222] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1350.117430][T17780] 8021q: adding VLAN 0 to HW filter on device team0
[ 1350.263400][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1350.270497][ T5804] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1350.299362][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1350.306504][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1350.324215][T12222] usb 6-1: Using ep0 maxpacket: 32
[ 1350.637681][T12222] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[ 1350.658746][T12222] usb 6-1: config 0 has no interface number 0
[ 1350.691733][T12222] usb 6-1: config 0 interface 12 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 551
[ 1350.724731][T12222] usb 6-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1350.786616][T12222] usb 6-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1350.821713][T12222] usb 6-1: config 0 interface 12 has no altsetting 0
[ 1350.850293][T12222] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1350.881117][T12222] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[ 1350.919235][T12222] usb 6-1: Product: syz
[ 1350.922378][T17999] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1350.944845][T12222] usb 6-1: Manufacturer: syz
[ 1350.945910][T17999] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1350.996439][T12222] usb 6-1: SerialNumber: syz
[ 1351.009252][T12222] usb 6-1: config 0 descriptor??
[ 1351.015527][T17980] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1351.026832][T12222] f81534 6-1:0.12: unsupported endpoint max packet size
[ 1351.408546][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3343'.
[ 1351.434917][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3343'.
[ 1351.450290][T18016] SELinux: security_context_str_to_sid (3) failed with errno=-22
[ 1351.549973][T16641] usb 6-1: USB disconnect, device number 24
[ 1351.685945][T18014] jfs: Unknown parameter 'disrArd'
[ 1351.710933][T18014] SELinux: security_context_str_to_sid (3) failed with errno=-22
[ 1351.779260][T17780] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1351.903225][T16641] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1351.920045][T18035] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3353'.
[ 1351.948003][T18034] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3353'.
[ 1351.960604][   T30] audit: type=1400 audit(1777473193.104:794): avc:  denied  { read } for  pid=18033 comm="syz.7.3353" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1352.004445][   T30] audit: type=1400 audit(1777473193.104:795): avc:  denied  { open } for  pid=18033 comm="syz.7.3353" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1352.088098][T16641] usb 6-1: Using ep0 maxpacket: 8
[ 1352.103294][T16641] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16
[ 1352.133873][T16641] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 32
[ 1352.155810][T16641] usb 6-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1352.185046][T16641] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1352.205810][T16641] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1352.232441][T16641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1352.241982][   T31] INFO: task syz.3.2790:15925 blocked for more than 143 seconds.
[ 1352.265454][T16641] usb 6-1: Product: Ї
[ 1352.269825][   T31]       Tainted: G             L      syzkaller #0
[ 1352.270201][T16641] usb 6-1: Manufacturer: ఉ
[ 1352.281383][T16641] usb 6-1: SerialNumber: 㐥
[ 1352.292547][T13643] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1352.308577][T17980] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1352.396554][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1352.428000][T17980] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1352.447880][   T31] task:syz.3.2790      state:D stack:27544 pid:15925 tgid:15924 ppid:15726  task_flags:0x400140 flags:0x00080002
[ 1352.476905][T18044] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3354'.
[ 1352.535251][   T31] Call Trace:
[ 1352.553063][   T30] audit: type=1400 audit(1777473193.694:796): avc:  denied  { sys_module } for  pid=17780 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1352.555327][   T31]  <TASK>
[ 1352.632092][T13643] usb 7-1: Using ep0 maxpacket: 32
[ 1352.668765][   T31]  __schedule+0x10e9/0x6820
[ 1352.681587][   T31]  ? __pfx___schedule+0x10/0x10
[ 1352.691736][   T31]  ? find_held_lock+0x2b/0x80
[ 1352.705094][   T31]  ? schedule+0x2bf/0x390
[ 1352.711327][   T31]  schedule+0xdd/0x390
[ 1352.716795][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1352.724376][   T31]  __mutex_lock+0xced/0x1b10
[ 1352.729030][   T31]  ? sync_bdevs+0x153/0x480
[ 1352.740188][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1352.745581][   T31]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[ 1352.751299][   T31]  ? iput.part.0+0x1a0/0xf50
[ 1352.763347][   T31]  ? sync_bdevs+0x153/0x480
[ 1352.773369][   T31]  sync_bdevs+0x153/0x480
[ 1352.781852][   T31]  ksys_sync+0xb0/0xf0
[ 1352.799760][   T31]  ? __pfx_ksys_sync+0x10/0x10
[ 1352.807612][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1352.817169][   T31]  ? do_syscall_64+0x90/0xf80
[ 1352.830629][   T31]  __do_sys_sync+0xe/0x20
[ 1352.835290][   T31]  do_syscall_64+0x10b/0xf80
[ 1352.839963][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1352.844823][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1352.850763][   T31] RIP: 0033:0x7efcead9cdd9
[ 1352.855336][   T31] RSP: 002b:00007efcebb98028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 1352.863812][   T31] RAX: ffffffffffffffda RBX: 00007efceb015fa0 RCX: 00007efcead9cdd9
[ 1352.871919][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1352.879910][   T31] RBP: 00007efceb015fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1352.888627][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1352.896741][   T31] R13: 00007efceb016038 R14: 00007efceb015fa0 R15: 00007ffc027e2428
[ 1352.904788][   T31]  </TASK>
[ 1352.917916][   T31] 
[ 1352.917916][   T31] Showing all locks held in the system:
[ 1352.925969][   T31] 1 lock held by khungtaskd/31:
[ 1352.930855][   T31]  #0: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1352.957453][   T31] 2 locks held by getty/5368:
[ 1352.972112][   T31]  #0: ffff88803499e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1352.991782][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0
[ 1353.017939][   T31] 1 lock held by udevd/5659:
[ 1353.024239][   T31]  #0: ffff8880288ea350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1353.051517][   T31] 1 lock held by udevd/5664:
[ 1353.056218][   T31]  #0: ffff888028aa2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1353.081601][   T31] 4 locks held by udevd/5669:
[ 1353.091504][   T31]  #0: ffff888078e633f8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270
[ 1353.111580][   T31]  #1: ffff888038f14c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0
[ 1353.151537][   T31]  #2: ffff888045f9e878 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0
[ 1353.176349][   T31]  #3: ffff8880352ea1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[ 1353.191505][   T31] 3 locks held by kworker/1:7/5789:
[ 1353.201705][   T31]  #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[ 1353.226524][   T31]  #1: ffffc900054cfd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[ 1353.251510][   T31]  #2: ffffffff8e7f1028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[ 1353.278639][   T31] 3 locks held by kworker/u8:12/7613:
[ 1353.284769][   T31]  #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[ 1353.297968][   T31]  #1: ffffc90002547d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[ 1353.309506][   T31]  #2: ffffffff9060aa20 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[ 1353.318781][   T31] 3 locks held by kworker/u8:16/12531:
[ 1353.324462][   T31]  #0: ffff888034774140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[ 1353.335790][   T31]  #1: ffffc90004557d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[ 1353.348236][   T31]  #2: ffffffff9060aa20 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360
[ 1353.357904][   T31] 3 locks held by kworker/1:3/13643:
[ 1353.363337][   T31]  #0: ffff888022e8a540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[ 1353.374248][   T31]  #1: ffffc9000ee07d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[ 1353.385672][   T31]  #2: ffff88802bbe61d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 1353.394856][   T31] 1 lock held by syz.3.2790/15925:
[ 1353.400100][   T31]  #0: ffff888028aa2350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[ 1353.409719][   T31] 2 locks held by syz-executor/16218:
[ 1353.415169][   T31]  #0: ffffffff9060aa20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1353.424331][   T31]  #1: ffffffff8e7f1028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 1353.434454][   T31] 4 locks held by kworker/0:6/16641:
[ 1353.439771][   T31]  #0: ffff888022e8a540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[ 1353.451331][   T31]  #1: ffffc90003e8fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[ 1353.462735][   T31]  #2: ffff88802bbd21d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 1353.471957][   T31]  #3: ffff8880352ea1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 1353.481221][   T31] 1 lock held by syz-executor/17780:
[ 1353.486648][   T31]  #0: ffffffff9060aa20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1353.495713][   T31] 1 lock held by syz.6.3352/18024:
[ 1353.500822][   T31]  #0: ffffffff9060aa20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1353.510093][   T31] 1 lock held by syz.4.3354/18041:
[ 1353.515317][   T31]  #0: ffffffff9060aa20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1353.526201][   T31] 
[ 1353.528575][   T31] =============================================
[ 1353.528575][   T31] 
[ 1353.563832][   T31] NMI backtrace for cpu 0
[ 1353.563861][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1353.563883][   T31] Tainted: [L]=SOFTLOCKUP
[ 1353.563889][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1353.563898][   T31] Call Trace:
[ 1353.563904][   T31]  <TASK>
[ 1353.563912][   T31]  dump_stack_lvl+0x100/0x190
[ 1353.563943][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1353.563963][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1353.563984][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1353.564010][   T31]  sys_info+0x141/0x190
[ 1353.564028][   T31]  watchdog+0xcb1/0x1030
[ 1353.564051][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1353.564067][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1353.564084][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1353.564101][   T31]  ? kthread+0x13a/0x450
[ 1353.564117][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1353.564132][   T31]  kthread+0x370/0x450
[ 1353.564148][   T31]  ? __pfx_kthread+0x10/0x10
[ 1353.564165][   T31]  ret_from_fork+0x72b/0xd50
[ 1353.564185][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1353.564204][   T31]  ? __switch_to+0x800/0x1100
[ 1353.564227][   T31]  ? __pfx_kthread+0x10/0x10
[ 1353.564244][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1353.564281][   T31]  </TASK>
[ 1353.564303][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1353.697884][    C1] NMI backtrace for cpu 1
[ 1353.697901][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1353.697920][    C1] Tainted: [L]=SOFTLOCKUP
[ 1353.697926][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1353.697934][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1353.697954][    C1] Code: 96 93 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 e0 21 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1353.697968][    C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246
[ 1353.697983][    C1] RAX: 0000000006387f71 RBX: ffff88801e2ba500 RCX: ffffffff8b89b045
[ 1353.697993][    C1] RDX: 0000000000000000 RSI: ffffffff8df1e844 RDI: ffffffff8c1c3480
[ 1353.698003][    C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5
[ 1353.698011][    C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001
[ 1353.698020][    C1] R13: ffffed1003c574a0 R14: 0000000000000001 R15: ffffffff90d78850
[ 1353.698030][    C1] FS:  0000000000000000(0000) GS:ffff888124479000(0000) knlGS:0000000000000000
[ 1353.698044][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1353.698054][    C1] CR2: 0000564d4b07da78 CR3: 000000000e596000 CR4: 00000000003526f0
[ 1353.698064][    C1] Call Trace:
[ 1353.698069][    C1]  <TASK>
[ 1353.698074][    C1]  default_idle+0x9/0x10
[ 1353.698090][    C1]  default_idle_call+0x6c/0xb0
[ 1353.698106][    C1]  do_idle+0x464/0x590
[ 1353.698123][    C1]  ? finish_task_switch.isra.0+0x152/0x1010
[ 1353.698137][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1353.698150][    C1]  ? do_idle+0x30f/0x590
[ 1353.698164][    C1]  cpu_startup_entry+0x4f/0x60
[ 1353.698177][    C1]  start_secondary+0x21d/0x2d0
[ 1353.698194][    C1]  ? __pfx_start_secondary+0x10/0x10
[ 1353.698212][    C1]  common_startup_64+0x13e/0x148
[ 1353.698236][    C1]  </TASK>
[ 1353.903319][T16641] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 5 proto 1 vid 0x04B8 pid 0x0202
[ 1353.914298][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1353.914322][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1353.914351][   T31] Tainted: [L]=SOFTLOCKUP
[ 1353.914358][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1353.914369][   T31] Call Trace:
[ 1353.949682][   T31]  <TASK>
[ 1353.952601][   T31]  dump_stack_lvl+0x100/0x190
[ 1353.957277][   T31]  vpanic+0x552/0x970
[ 1353.961235][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1353.965711][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1353.971855][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1353.978003][   T31]  panic+0xd1/0xe0
[ 1353.981701][   T31]  ? __pfx_panic+0x10/0x10
[ 1353.986093][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1353.992235][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1353.998366][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1354.004501][   T31]  ? watchdog.cold+0x1ec/0x234
[ 1354.009254][   T31]  ? watchdog+0xcc1/0x1030
[ 1354.013664][   T31]  watchdog.cold+0x1fd/0x234
[ 1354.018246][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1354.024031][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1354.028685][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1354.033690][   T31]  ? kthread+0x13a/0x450
[ 1354.038002][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1354.042739][   T31]  kthread+0x370/0x450
[ 1354.046783][   T31]  ? __pfx_kthread+0x10/0x10
[ 1354.051352][   T31]  ret_from_fork+0x72b/0xd50
[ 1354.055930][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1354.061017][   T31]  ? __switch_to+0x800/0x1100
[ 1354.065670][   T31]  ? __pfx_kthread+0x10/0x10
[ 1354.070250][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1354.075006][   T31]  </TASK>
[ 1354.078393][   T31] Kernel Offset: disabled
[ 1354.082704][   T31] Rebooting in 86400 seconds..