last executing test programs:

3m54.851097551s ago: executing program 3 (id=4):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x86)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x8880)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x44004)

3m53.659583073s ago: executing program 3 (id=6):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000640)={0x3, 0x0, [{0x2000, 0xde, &(0x7f0000000740)=""/222}, {0x10000, 0xc1, &(0x7f0000000880)=""/193}, {0x50000, 0x75, &(0x7f00000006c0)=""/117}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000001c0)={@hyper})
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000240)='./file1\x00', 0x8)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)=""/95, 0x5f}, {&(0x7f0000000540)=""/120, 0x78}, {&(0x7f00000005c0)}], 0x3, &(0x7f0000000380)=""/191, 0xbf}}], 0x1, 0x2040161, &(0x7f0000000340)={0x77359400})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40c040, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}})
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
bind(r5, &(0x7f0000000980)=@in={0x2, 0x270f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80)
listen(r5, 0x5)
write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c"], 0x6a)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2200040, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')

3m52.880201948s ago: executing program 3 (id=9):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
clock_getres(0x2, 0x0)
r0 = getpgrp(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000340)={0x540, 0x4, 0xa, 0x301, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x2}, [@generic="54824f6549bc68b64266100fe2e24bf0d0e02f30923f", @nested={0x107, 0x153, 0x0, 0x1, [@generic="8acec6a76ffbfe9fe5eab27660e8c49bfebed8c8fd10c4154b4dd689ef5ad74facc099118d06d155cf4a66ffbf9998959cb06ff51b1d00277e4969f18381860a437b33ba639579a8f4103aa2bc8f52f26296a012acc1d35cd9fbe4c26ab3d4ee0226b204c72c4ec16ff8aa9d69b0b3abdd5f574c", @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x36, 0x0, 0x0, @pid=r0}, @nested={0x4, 0xc1}, @generic="696621f4e9883644d830b379a9469a41ded24d25519fb85b6515ace0c0e871dacbf3daf541142410782d0cd50caa620ad038705e8ba9dd02385eff149eb50b38061c62b5dabee45f27aa49927cf071ca6f8af136cc016c320d2db79a8e48290daa58613e0ea9f244c15e7a7b4bcb192d6ff4fb04a5dfba", @nested={0x4, 0x139}]}, @typed={0x8, 0x9a, 0x0, 0x0, @fd}, @generic="39b9b884eeb858d9a1a034b3c003973591d5e27df3453d9df5d08b3015d44f30ff55cc92e1ccade0010580a5df6fb44ba11e5dffc09d1c9763ecadf545176451bc127680257949e3f85cd68ee57b5388d868f1a91ffe3ba3d52917a73aafd2235f447d30bc00ef1d5760377a0ffbfc9e00122fb9c2bffd5c3e684a15eeaeceea36752b2daa1b6cd539f44030196d152d079738a52f5b013fc837346ea477140e6a86b4d64d10293c12042c88d8a7747252bc37693994ab0f84e9e345c78c728c4689f6e84b56ad110dcd5fb982ddc130540bfa6f16efde8ab966", @nested={0x1a2, 0x57, 0x0, 0x1, [@nested={0x4, 0x36}, @generic="9fdce50f1f4436c6c5749e50573c3860ede3d1d993b6d5b6cecd73250272b0ca0a99e8b580f8d27a5043192500600b0c065fb1449ab4389b94b675e38b3537f49b548b6baac9bda51651ce7c685e0e23f0ca1e99d22b2369b8bbf75b45d6feea52ae26f01b9567e420db20f7d7ffd50fe2ac6cdcd962d11d7d1e27e1dc6b617651a713d0cfacb1f1b43a325fd165b072ef15556cc68629abffd743bf8c187f9de1528a85f7317ec0c2c905209e7efe12b8474b16f92b0254652094c4d37e884b9085c783b6498a873080fc4deae3ac978141afd3", @typed={0x8, 0x41, 0x0, 0x0, @fd=r2}, @generic="1f988aa2f03d7cd53a09cad4cbce8b91cae0af194b13f7c2c75ed2b350774b722bda409d418aaa14ec2b81f91084a9d4c6fba0cfb4505fae406484eca1b73b008152b90d3e1333a7930de237e1244287db847adb57d7208d203996b8dd7a4fe3e61c9f0b600f63b5319656b4f7a3981fe9d5b2f76fa564141705d2b78bcbcedb88c01f10b7a2d79ddf48f4360718d39b238f0c91aaf160a0b21a7757a2a8ae33fc300c6bb642e489e07dafadb7725a19a1131d06cfd0eed6f388", @nested={0x4, 0x150}]}, @typed={0x4, 0x158}, @nested={0x183, 0x34, 0x0, 0x1, [@generic="f6ddcdc8c142c773d3a0eabeaa90f74a88e4bfc73b036ed0fcf40843210ed6ece2766060bbcf5234f3ddc7a3dd9f2834c5923929e2ac313c49920bff3d3009deee1a9f00e945d3f09be4b77cff231aa04d925979f3e4a9983a06e2f3ca71613887e758ab39aa04ed7692b90171bddd42830e1839824a9771989c9e6275f52b1fc2e3710ecd47ee74fd64264e6dca246fbe73ab3cf472", @nested={0x4, 0xd0}, @generic="53773ea7cddb8886593ff4defa70ea1a518a8c1ed81b6f864b32f89c839a18980aa2a43b675313ec581e92be316701060bce4f33aa3b54c40840d682002240f69aee87a81eacc6a2d25050633121c827403b52939a36be4ab6b848878049363914703f41ac23b97e4a93ed36aef76c2f75dc92117424c55525f009625dfbfad3d51ca7c9f5faa7f4e087e19bef6b8058b3eb40c684b3b4a091a8fe3ea633d74a8174f9a55c3e9ef72b940203876739aa25c76dfb1c7a221438794d0efe4ce4149a28c7835f383312021be76aa024bc757ce201c8a9c0d93f3fbc905567e4744c950fbd5461"]}]}, 0x540}, 0x1, 0x0, 0x0, 0x40010}, 0x4000)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='16', 0x2)
r4 = syz_open_dev$ndb(0x0, 0x0, 0x200)
ioctl$BLKROTATIONAL(r4, 0x127e, 0x0)
getpid()
getrlimit(0xd, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)

3m50.513879314s ago: executing program 3 (id=12):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x108, &(0x7f0000000140)=""/186, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val={0x0, 0x15}, @void, @mpls={[{0x55, 0x0, 0x1}, {0xa172, 0x0, 0x1}, {0x5503f, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv6=@tcp={0x1, 0x6, "3a8527", 0x551, 0x6, 0x1, @mcast1, @local, {[], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x8, 0x6, 0x0, 0x7, {[@window={0x3, 0x3, 0x81}]}}, {"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"}}}}}}, 0x58d)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0xf500, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x20)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x800, &(0x7f00000001c0)='grpquota')
lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0xffffffffffffffff)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(0x0, &(0x7f00000001c0)='./file0\x00')
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x14}], 0x18, 0x20000040}], 0x1, 0x8040)
r4 = syz_open_dev$video(&(0x7f0000000740), 0x81, 0xa082)
socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r4)

3m49.783133756s ago: executing program 3 (id=15):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r4 = dup(r3)
setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0)
ioctl$KDSETMODE(r2, 0x4b3a, 0x1)
ioctl$KDSETMODE(r2, 0x4b3a, 0x0)

3m49.58410084s ago: executing program 32 (id=15):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r4 = dup(r3)
setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0)
ioctl$KDSETMODE(r2, 0x4b3a, 0x1)
ioctl$KDSETMODE(r2, 0x4b3a, 0x0)

35.158045864s ago: executing program 4 (id=687):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x9, 0x1, 0x1, "59be6c1cf344b8da26b94d0722eff29d23c9c02d70257abe40574c90df0016cf", 0x4f565559})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002300)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r3, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_emit_ethernet(0x7a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2b900", 0x44, 0x2f, 0x1, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x2, {0x6}}}}}}}}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r4, 0x0, 0xffe)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f00000004c0), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
cachestat(r7, &(0x7f0000000040), &(0x7f000009de80), 0x0)

35.024211025s ago: executing program 4 (id=690):
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x1400)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x700, 0x2d8, 0x0, 0x508, 0x208, 0x508, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x13, 0x5}}}, {{@ipv6={@private2, @remote, [0xff, 0xffffffff, 0xff000000, 0xff000000], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'ip6erspan0\x00', 'veth1_to_hsr\x00', {}, {}, 0x33, 0xb, 0x2, 0x28}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', @ipv4=@private=0xa010101, 0x12, 0xd, 0x5}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0xff000000, 0xff, 0xff], 'virt_wifi0\x00', 'veth1\x00', {}, {0x7f}, 0x2f, 0x3, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0x0, 0xffffff00, 0xff], [0xff000000, 0xff, 0xff000000, 0xffffffff], 'macvlan0\x00', 'gretap0\x00', {}, {}, 0x11, 0x8, 0x6, 0x8}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x7, 0x40, 0x1}}, @common=@rt={{0x138}, {0x1, [0x997e, 0x2], 0x1666131f, 0x30, 0x4, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @remote, @remote, @loopback, @mcast1, @local, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote], 0x9}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x6}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [0xff0000ff, 0xffffff00, 0xffffffff, 0xffffff00], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'nr0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x32, 0x57, 0x2, 0x20}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x0, 0x80}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x760)
open(&(0x7f00000008c0)='./file0\x00', 0x101802, 0x20)
lsetxattr$security_ima(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940), &(0x7f0000000980)=@md5={0x1, "c46034790b459b5d4206dbe81d08b3b0"}, 0x11, 0x3)
r1 = getuid()
getresgid(&(0x7f0000000c00), &(0x7f0000000c40)=<r2=>0x0, &(0x7f0000000c80))
lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
lsetxattr$system_posix_acl(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='system.posix_acl_access\x00', &(0x7f0000000d80)={{}, {0x1, 0x3}, [{0x2, 0x6, r1}], {0x4, 0x2}, [{0x8, 0x3}, {0x8, 0x7}, {0x8, 0x1, r2}, {0x8, 0x1, r3}], {0x10, 0x2}, {0x20, 0x4}}, 0x4c, 0x2)
syz_open_dev$vim2m(&(0x7f0000000e00), 0x2, 0x2)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000f00)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f0000001000)=0xe8)
mount$9p_unix(&(0x7f0000000e40)='./file0/file0\x00', 0x0, 0x0, 0x1002, &(0x7f0000001040)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@msize}, {@cache_readahead}, {@ignoreqv}, {@access_uid}, {@nodevmap}, {@noextend}, {@directio}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@hash}]}})
syz_extract_tcp_res$synack(&(0x7f0000001100)={<r5=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x127d, &(0x7f0000001140)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "b83b18", 0x1247, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@dstopts={0x2e, 0x21f, '\x00', [@generic={0x5, 0xf5, "f5d24bcc65791fe442b20f0f939fef5c6307b24157f67a0751f40deee822faa7811e0f393a4fcea77278ec2d406ba4ec085fd4907501b9981abb48f79a3390812719a2dcffa9364e48ee7285a887cea9130eaf73c46f45b88af91427dee820fea7198a8eda91a313970034e41338668aec1600149fcaefbf17808c1758c8c96f0441255cf329d33284dfac7cbc1af28a33fa08fa8854b33a202e9fc24223af6199995f47e88749f16b6afef1b04ae49e1edd9e31014a0f95b5d6340b79e9c1827533d20ba635d5bf465158daa864e6e7726b86b041fafad9450290b1f2e6364685e8ff9c433f42c10ad49411c0e571c1def77e9c72"}, @generic={0x9, 0x1000, "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"}]}, @srh={0x3a, 0xe, 0x4, 0x7, 0x3, 0x0, 0x5, [@dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x50eaa02182d668ec, 0x2, 0x26, 0x4, [0x9]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e23, 0x4e22, r5, 0x41424344, 0x1, 0x0, 0xd, 0x4, 0x3f6, 0x0, 0x8, {[@mss={0x2, 0x4, 0xcd}, @timestamp={0x8, 0xa, 0x4, 0x6}, @generic={0x5, 0x11, "1f46ed096b7d46cee33ef37e0259f9"}]}}, {"c87c73ecba9633ec9ef1ad3487100cd5bf66a8d2bbe508bb82fe487efb9520da5f27b3fd2f49112781826fe5ee2555b84533b820442bb090a676c56c10c16cd28e4b77190681087ad1f5c1b1bd61aeb36f521aadf65a839ea324fde3b73f58033f5f7aba11f3547a826f96"}}}}}}}, &(0x7f00000023c0)={0x0, 0x4, [0x85e, 0x366, 0x1a1, 0x507]})

34.192627366s ago: executing program 4 (id=693):
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc})
ioctl(r1, 0x3b8f, &(0x7f00000000c0)="2800000006000000010000000400000000000000000000000010")
close_range(r0, 0xffffffffffffffff, 0x0)

33.818889885s ago: executing program 4 (id=695):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4f23, 0x4, @mcast1, 0x6}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x12)
writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

33.521956811s ago: executing program 4 (id=698):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, 0x13}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
socket$nl_route(0x10, 0x3, 0x0)
r0 = memfd_secret(0x80000)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x9, 0x7fdf, 0xff}, 0x50)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)

32.048365264s ago: executing program 4 (id=701):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)=ANY=[@ANYBLOB="5400935c", @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25070000000c009900000800003d0000000a00180003030303030300000400cc00080005000400000008000500020000000a00180003030303030300000800050009000000"], 0x54}, 0x1, 0x0, 0x0, 0x200480d0}, 0x10)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x38b802, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020)
read$FUSE(r2, &(0x7f0000006300)={0x2020}, 0x1e01)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r3, 0x2219, 0x7721, 0x40, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r5)
sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x3c}, 0x8, 0x3000000000002}, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xde9f, 0x1000, 0x2, 0x15b}, &(0x7f0000000100)=<r8=>0x0, &(0x7f00000004c0)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r11=>0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12)
syz_ublk_setup_queues(r13, r11, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x0, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x1, 0x1000000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b75, 0x800, 0x2, 0x1eb, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b6e, 0x8, 0x1, 0x2ec}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x6, 0x0, 0x0}}, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
fallocate(r14, 0x0, 0x1, 0x7)

16.943056214s ago: executing program 33 (id=701):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)=ANY=[@ANYBLOB="5400935c", @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25070000000c009900000800003d0000000a00180003030303030300000400cc00080005000400000008000500020000000a00180003030303030300000800050009000000"], 0x54}, 0x1, 0x0, 0x0, 0x200480d0}, 0x10)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x38b802, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020)
read$FUSE(r2, &(0x7f0000006300)={0x2020}, 0x1e01)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r3, 0x2219, 0x7721, 0x40, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r5)
sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x3c}, 0x8, 0x3000000000002}, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xde9f, 0x1000, 0x2, 0x15b}, &(0x7f0000000100)=<r8=>0x0, &(0x7f00000004c0)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r11=>0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12)
syz_ublk_setup_queues(r13, r11, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x0, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x1, 0x1000000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b75, 0x800, 0x2, 0x1eb, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b6e, 0x8, 0x1, 0x2ec}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x6, 0x0, 0x0}}, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
fallocate(r14, 0x0, 0x1, 0x7)

9.199323477s ago: executing program 5 (id=778):
r0 = open(0x0, 0x42000, 0x18)
ftruncate(r0, 0x2007ffb)
bpf$MAP_CREATE(0x0, 0x0, 0x1658356475ec8287)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f00000004c0))
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0)
syz_emit_ethernet(0x6f, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x39, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00', [], "97c7e71a450b13fcbc"}}}}}}}, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r2, 0x114, 0x271d, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000001c0)={0xe0000009})
r9 = fcntl$getown(r5, 0x9)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r9, 0x5047efb0ebe6a9cb, 0x5002)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xa0)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xfffffffdffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000002bc0), 0x0, 0x0)

6.792623787s ago: executing program 0 (id=780):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40045}, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
mmap(&(0x7f000008b000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r1, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf251f000000080001004e00000008000380", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x1400c004)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x3a}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xa}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x7}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

6.572833566s ago: executing program 5 (id=781):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r0, 0x3, 0x7fff, 0x7})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00)'], 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e0000000100000000000001040000002000f001000000000000000d01000000050000000000cc0c020000000a0000000000000c0200ae000000696e74006d61696e0052"], 0x0, 0x5a, 0x0, 0xfffffffd}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x79)
write$khugepaged_scan(r2, &(0x7f0000000000), 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x9f)
write(r4, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000)

6.443516525s ago: executing program 0 (id=782):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000810}, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904060000ff4f9b000904b000003a3846000904"], 0x0)
syz_usb_control_io$uac3(r5, &(0x7f00000007c0)={0x14, &(0x7f0000000600)={0x40, 0x21, 0x44, {0x44, 0x11, "0043af969115b335580337f007f7105ff770d33fab8bf11ab438eaac31b2b78c6ba10e22228714113b3bafe064c7c31e64a67e8f25073d60df028eb21e442e69e280"}}, &(0x7f0000000700)={0x0, 0x3, 0x90, @string={0x90, 0x3, "69d73693b78871180c313d31f78a8c0170feff60d95fcfea51294f780c70b94c3658a5707d96c0a1630dddf7e30dda043de83c0417eabdd02e6e2c00e98eafcafae49a17dc3f2ae96634c3777a1025ece953c07ed8528a242d7a4af737583b08756ebca701a0d3c1ea0a95f0e19b1fc0ff241555cf0ab9d83e580c5fd6d8cb92b345ba49cd931fdf40f8aebf2d5d"}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000800)={0x40, 0x14}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x1b}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x6}, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x3, "4cfe64"}, &(0x7f00000009c0)={0x20, 0x83, 0x1, "e4"}, &(0x7f0000000a00)=ANY=[@ANYBLOB="200000ec2f"], &(0x7f0000000a40)={0x20, 0x85, 0x3, "ebd12a"}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
sendmsg$kcm(r8, &(0x7f0000001280)={&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x81, @mcast2, 0x200}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000240)="805fab74f221c958e2fd16ad", 0xc}, {&(0x7f00000003c0)="0fe95f1af5f0f6b6e07ee7c07e7ddab8a2bb4bac2e28782855232ec1b69fb1bdad01f95c7acfab1f74dfe4b8eccf9db8f69344a0060c7fd996bb06bd3aae6f00d28e887aed70dab49f2d0ea4e2e73e8e3802d2bbbfb32a549fb3bf5c6c11b6e18ca5fe4faa9f0fa2ad686f48d3443c23ca98791a528a7dbf3de6167b5698211370f150241692a657a8b4a84e92f18d0274ab", 0x92}, {&(0x7f0000000480)="582fa09b4402bb608becc2a4c023c88357ed39d401455fc5c3e37d4d2382e1ef2c24c9b137655603dbdaccc493e4b601415acd1b5e3a630de16a0b56db2424dd600bcf442bad41e968c9f50394f7265b3d71c06c24e5b04f304d261779f0589d6fde099151b071f7b1e95bd9cafe383dfbc5535f3d595bd486", 0x79}, {&(0x7f0000000500)="9878e479ada0730bb0c1856dc7d44d0924bd5c09b87a78f32721e57fe37cee71854522b1746883eb109a5d922cf9d145132638376961cdf864f38a5bd0aed4a37d386c9409a702eba6a0c44872ad188c19c2dccd8bf9eb540dcc28ebb580d8aad18ec905a7e1d3886cb503", 0x6b}, {&(0x7f0000000b40)="03cd1acec2e2bc6cc81ddb1d8e5fec673e554dfa793d1f19862382ef4dfe98954fa839c9ca3e405e876a3c244b373f96c8ee2003c081117ae8b88c53da6e097c13ae29a0f72eded561026082ca2ded292423f941e74e8b3fabfeffac2f5a89147260c24ba684aff60caa7245a50fb7ee5f8d5b6f4f466e58d0b04bf2f5ba775333e534f78ad4ee53a509812848b36c277069878eb65a3799851160030a5e41c5454f0fe7bc8d0e63f80a3ee08ecfdef9b12d0c625225d19cee66e8be6a03dcf07da6a8860122f769ee2648b5718f874b0552a4bf9a2b5833bab0f57ba175ff62bdbe03982e5c8bc08781d2671f41232a4fd3d7c5f10546b3", 0xf8}, {&(0x7f0000000c40)="cf82c79c722dd9a32d0998b0c656b26d25a1d25739ef9612bbd5ce619603832499583dceec3acdddc8e7ea17d4b9b33126d1353d27cd517bf5897d6895fd3b2a98905cee21226ded6fae5f90b4275027d4261faa2d47ab2844f282ac9e124818dbd9624e009916731d587af5e3e860a64d3f20e88c891dd2bfc5feb34f9251ac2da5", 0x82}, {&(0x7f0000000e00)="9320b023f3a733a82cd1f6aab7b99ef5a0576816e7b7f9b804dc6fd82c248d39ec044d3e8ff8b505b4e34cc311ebc84d1c217434c51d98dea823b87fc9f799d3fd452432bd90969208134c990e9a510207f6960124710101fb3fd6baad2379e224d050dcfc95f0ab92f80a505027858cce5637e811dbfcffcb38", 0x7a}, {&(0x7f0000000e80)="e6157034739034cfaa7fbea77631674e65438be3b31fc5de7d0134b2674dcab8cdcb287e03bc4bf23e302f8e6776aef528eca390b705495df19119c06053f56f44e255b3e61457c3147754e90b07528446ddc7cbf3fbb7755541643d94062a8ea718aefa627aeb26aeef74bcee65a73bc6ca8d55e710ed5a78947b066a4ff34cd7b63734c3e69dfe065d3abace75f765e5c6c468b42371a505211b60b924d119c135b1a3caf76044c58c5aba655f3905194db25ce546358d1a376103b3907b1e9b003aaedf6d1ab87413a4881a685d8e81e6f86158", 0xd5}, {&(0x7f0000000f80)="2be866425405425385ed84e83cee21d612c4a70a7c681f6d1a4be94cac5e0737342e76bcf2fb14af91edcadbdd3ef4751f3ff40a0a18d128b3dfc69e41d5e359a0466e258f359b6b2a56c0328c3921e8d6e7ef5afa1dbe5a4019d17b23c257764b72ebe083e31824f48aa961935033a6e9b2199b93c7733692", 0x79}], 0x9, &(0x7f00000010c0)=[{0xf0, 0x111, 0x8, "8a1921b80ba16f210550251b9816aabaa7fde5e108440d1d4fba8745f2f7e088bee509b2055a33b0f8d7724c4d2f3891212989ff8389afb96f1a679b5b76e46606545406e9315624d1d136b9496c878e4bf1c4ee7c5dcc0eeae2f1649fa2d340399c541ae7c8d0039eaf82fe1fc1aa01cf9c06278a58819e32196bc4a6f635480e8e8afb7919127ba91bacd4143839ffbdfcf17a8edc5152d5d8cfcac98379549444fb5337ee9aebedffec39e35a09b60d0077df09ec501203110dfee818c289e1c8c187dd0cc2739374f0334e8171294335bc2d5db7c98d5e93"}, {0xb8, 0x117, 0xf, "cb00beec67f604e4ead4333faa805800997b610fa2e87e51ddec9c594c03a3a5babf7bb0ddc76f3d95d328f05dac9cbec13500825159cdff64757275c90e5f0b0158108eebb7d35a6e8f7de7d1ac43bd5f7d0dea698c0dad832e00650bdfb3699d077c8492bb85667e37eb4d311bd2dd2d0d9927129af7dd72b21cf30a72e9ded8b73499d165208e087a7bff66e170cfd9bd5e1643fe048a109e4da7523e5b4e3e"}], 0x1a8}, 0x8000)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0x80, r7, 0x0, 0x7}, 0x38)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
unshare(0x22020600)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d8005"], 0x2c}, 0x1, 0x0, 0x0, 0x4008804}, 0x0)
socket$alg(0x26, 0x5, 0x0)

6.214551197s ago: executing program 6 (id=783):
r0 = socket$inet6(0xa, 0x1, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000140)="ab604dbc4b8ce844dd98c6b76909fab5b6180ed1a27f75b26984d740cbbcc97486be91e70dfd27fe6db9b4a817e33d79aeaa88a3e512a4d77938647f82755a131d74c59136285deee4f6aa2482338e33b13ed0edf0aab0b5f3ebd54b1079f7f2e1", 0x61, r1}, 0x68)
lseek(0xffffffffffffffff, 0x9, 0x1)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@loopback, @remote, <r4=>0x0}, &(0x7f00000001c0)=0xc)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r5, &(0x7f0000000300)='p:_est/event1 ./file0:0x0 _rg2=%bx', 0x22)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x44, r10, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x19}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000)
ioctl$KVM_CAP_DIRTY_LOG_RING(r8, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000})
r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r12 = mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r11, 0x0)
syz_kvm_setup_cpu$x86(r8, r11, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r12, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x30)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400006400128008000100687372005800028008000200", @ANYRES32=r4, @ANYBLOB="050007000200000008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="050006000d00000006000500060000000800020079dbe770aa5f210d090d3899f1ee53fd", @ANYRES32=r6, @ANYBLOB="0a0004000180c2000002000008000a00", @ANYRES32=r3, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x488d4)
read$msr(0xffffffffffffffff, &(0x7f0000000800)=""/216, 0xd8)

5.885745634s ago: executing program 2 (id=785):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}})

5.761409033s ago: executing program 6 (id=786):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x9, 0x1, 0x1, "59be6c1cf344b8da26b94d0722eff29d23c9c02d70257abe40574c90df0016cf", 0x4f565559})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002300)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r3, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_emit_ethernet(0x7a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2b900", 0x44, 0x2f, 0x1, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x2, {0x6}}}}}}}}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffe)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f00000004c0), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
cachestat(r7, &(0x7f0000000040), &(0x7f000009de80), 0x0)

5.594509647s ago: executing program 2 (id=787):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, {"7a5b5d6c155dd40f67f6e40e4c2043d6ebfa548066a78df5054686213134b2f911fde484070110a78d55e6e6fa22e4c07958f78947b9d1bc259503b65cd4f28b19bba6fa1c5e6902b8abe6249a4e57066ee847657f4b7a9a30c743eeda14a3b0cdbd31995204888c221fccf43b825c8b44afcaa64247d2834abc893d6ca25109af93cd11f5355dfb4033a758cace7bb821ff043446a5e2a300c57d4d889ab88af249a72f8f9e5528eca68bb2976217bdf2c432b12c8485846ac88dcd1f35e2ffa9e6a1e0d460e0561bddcb76ab9168e6701b2bff1f295e408d7218fbbe1afda48e030880627d8844fd0d07947ecbfe8e3728d3de36be29b28890f4987f4a6e9502dc8f509b5e68b035cf787ed371c3432af0783f30b7ea5feecb76f2875004e7f6b41d1eacebb8c3e4b23728ea3cfb9bc067d6ab0d8dffae6a72c0afb25195cf0c4da2cd6d9817447e3e2ba786d2212b84a7c84d1d1357aa8a3f311579295d71edc6443abde74a5e726b0056c736c2e848d05060142e98dc30e7edd8edb746e06c53578a18388474d5f55b6ab412a39cd6953e999e03e48dc6bbcdb6db9cd2e73ea23931aa7bdadd127c0659b7cf83ec2c05f26b9e819b017e07809c987295042f9ebefad5c58083763711564e99dfee17522ff54e79b47551d49cc9c484e7670d17c2910763960adcd40d0937055fd470adfbb6fc09f384421eb986ec75c2775aa8c77aac65b01a3ec60e6c727413d0957e9ab974c3f99222f1be2d40dffc21d5c4f959bd5f837a3e09b4ed71b8af85902c37161fb48c261bf349ff812b3ec861140212d901299a84a1e9ec1f8fced1e96329033472575c73409cc98016fa9b86e113ddaaf122bea16f4d7d36bd00486c4146abe24bdc50a4f88d328a7a2fd4e52d54576224d5253117cde7fad278bf3963dd9e43eaf4aa09d8acb73fa79ebc577c8f5af708059d39ade0670532a241d08607b97d25150aa5566be06d5a8051a95e9f4470260dbd214afcbb1ef5fddab3fa450041a748ca4000747ef8a0a38f82e464252bac74f5a9f92c6697403c0966114c0837e90696cf5a2195a3ef8f511e18dd8a555231df2aced051e90332b43b8c59f3ff32ea1ae2cb932ea25473bcb7375f6f1a541a1470ed676abea8c66d3c01c419821c9f11ed570472076e5c3e8999ac9993a8f88a332387c8ca7fb975f135f339d003b4b22a783969368e25d0ae79b3c4619c228d2becbf703b435a248cfe2143949551108a1762d5ce3aa4f7fd8960f3969a0ec002dc21776f8615f03bbcd862e561d34097f2c67f398fa1840ddb314a375b2e73e83580338a60d222631fcaad6e4fb390dc6ac25a9162a4900814c0c5a0c7838875a5ad32163042c922fabeb47309023ea50e22e97365d6692e0a845e38c51b1dc09b6a28919b3c7a25c07e03280f3a3bb176b008036a287baca043f78311c61913d5b3d86527dcbc5710847b0cf053afe7ab6a69c47e086253f9862eb97fb66051f322e2c882438a0fe62daee8cfca6ce90cb72cefa610d485ff92cb7c18277be5fa603c776743cdec854fa8a3872c3ba8edaa743e8cf6141db9afa09f811df27838e5abdd495ebb4f483327885a2f457eea19ff50386430e88557dea317108f1a3e05d38d7dc0342334a080a723c12ab44cdba3a3ad4f77043eceb2630ffc58e181dee60f08618be736de66bc8eb7a1b385ff004984fb580476fd749f900d54ff2ae8f81792ab10d24fbfa2107d17288102d737ad460428f7765120d9492e345572f61cbceb250fcd0ba9c8482d6f25f66d53a9cf2f5894f7b51b760b2dac73e892deb53aa5acf801b35ac01c991b6b707eb62133e579861af655f4a21aae74f9e367895ec159bb5c98f9c8d5014af660c5721a826b11c56e730b585b5dc4746516734f6d2cb076e5d108c9b483aff6d50790042c07b961e5c910a4fbd5665709793f9377714132a076adaed2899bffbe0c678800500615f2afb84d7ca26fa032e654d8a716a5a131ac9fdafb4229fde61fb00c42e9bc4acecfce3328a0aef44e3c15a5235d2240acf8789fb517c126d11bea157434d90f059bfb3f02df1ce38d72f53a43a4a8885725ba910af0a1976b61ffb633bc89a89a3242563d1f3e1a05a37a46bec23640e4cfd93782ac89c5271cf230ac5d6f32ebff55e02377a0585a76a0dd09a252bbb3c16289c5bebd89deabec6f17de36b50dc279fb88a02291111db1cd5175af9b80d9aac8fea55853831ccddaef342b87c6e0f6328df11f0b92cbee03b6bfe53786ed763467959976ea151e77b995a75c1728c88bda7b9dc3cc89e0f52c09c4107269451c954e844d0274e203127fd3942b27a5662e88eaedf3e0ef2f0a43da15fc205da11d470e59adea13447fb7ea2aa0c4781cf222be0ef8475b287485b6a8cf1d7872ba55db56e2f8b0533219713ff95c981720d20a3a5fb6c6c75fd3f0285838c3839a32249bcea7724572a7d5910dae045da91a80bbd670358c34f3f1acdd3ab3ea7afe4af266e0461ef40d3a3b7eb3823c467e046b47060201380de95769ca65126edb1954dd5977ea6205fa5731b036021ad312bdb4c6a40401c2ef0804cd658a78a0c8a394e9555e14569ea611d2f983122cd9aec67a3889c51443f9926fa83f5ffd171678e674be320e53dceca163816114098108c9ca591c668ea91071e9e425f6e60d4183aa13dba58fde06c75ee73644c37e3169fd40c56b3b2f2d25ef7b68797f4bb365fb729a1c0949880778b8ffe1bb746f213980702f2ed0fca88d2c9fa2199316884c882f2de79c72e0c2734721ace4d0228b28c4744c12b6a60b6aa1bcd2c847c63ec71866e8e3d8108640250ad35781237f195c1849063ead8800a0d21867da867d7776f03ebf7bab6edc8a28f3982e7b86697b164de633f752375408a5d586311b7736121ceef3650968f18abfa6c7d394ba8e0b8d517dec4240f2bc6a7e1fb37cd7c08a6a8a3b4623a3a9b6bacd460e3014214a968276eb097c309bf201cab9aae4e735472ff8e84fccb6ff55718d18c47e6085ca079e4f2b283f1f9de72df438e237531b9c6c896c71844787f82bf350fb898a4110b7b1905c8c8f98479afe43ec75f1f2021024587d6c87841116a169b23180538f36fe3bdf4e9858a68a8e98f316188c45f9c53468a73c65e61df67d7991f43d5905b7fc58c2cb6faf58b2269da89809773a5b0d3af38caac6a836f6490bf37be40335b2a387346380419467fed14743e9cab6c97b235ee110af36aff1fc2d990eddf31d2931667fd691dfcfb983ed564742cc0e720a5f42058c4df97b4a273a7426b7e8a49b16258d4e39180762639c9b008149eb5b737841ef5440b0cbb23747c5ee319ea1f4a821ae8d2d24215b861535f82750fb35073907cdbae3f2d08db1f95efbbea7cf5433cb040226835bdcfcb7d45146fb51dd52add1f93aa4275b1f69d214e4114dea1be181516452273153e2b134a288663d5ec1d2880900b9ea8572b963b77b839efdf78b609cc1855d40319a809df4571a606f54e7b559a4c29cb7e2a95a5e8e4aa769c70a581f21d24321639f339d854aa11956f3eb09e4c7369d2ad675b372d75d2ca4a89065143d04ec7beeb18543a9d2a17b14d72e00173f9258e2691d3cf2f798fbbedf1ee3c90bee9f67644bde4a4ff81d07942dcf000cee4d37b02fdd2789cccb1412e1320a1285acf70eae6e6ea7b0cd53751fab6adb488982eabe73da52c76ccbb7a00971b2f333cabcc6948dd79d35f6a93a6f41b90c87307c58a10b8d6a2344f1f50ebf801602c6ed4966761b065fbe913111ad5ae8fa15440266d0fc0529a8b9c50fb196668d75bd9bcc1b312a119572afe8aaa73eec2e643e7a6708176bb76f3f48e8e36ec28519b7d1f52b15bc09c0218b8cfb8f5cc2bfbd913e4755a8371e0875412e2623542ea1e586759ab9c393e360318af4b1bf2cc235cce4a05d4268ddfbe6d85af5a743fd3883eeff9556da11b8a47403285b3d49ddea33603a6e2befba461004c7c08aa582230fee167450d35c3dcec3ebf82930bb8ea3011ebab02c36473a67fb882a3cd9a3d0c0c21420055d170d4837507f4311eeb03c18cb25bc629535911204a548a0838a89775ec8e439174ea6115dfc22466a1eb76cee7a9790b684861bfa3adc9ba697da649e8e183083e537ffa761036ff4c4541f6621f5ceacaddc32e670b77aa7bf5046da736cfc577685982b16b244edc9be5735b6ce35fedf9f663c299945b46fd5d24ea940ccf9e14269812de90b04c02f18e28d1cfe8744d0e1a2be119ae3ec184ee3db466495aa013a08657c8c0168f6ec1e15bb15b3143c2954489200948eb728664321c7815991bdad22c79b357b7a5f32175f6ff8d50e83c54f94633e5a8847efc8d0b157fdf2ae211f19f0298cd7f96f9371a59f5e32621e95af7b5ca7f9f50ac494f46ce4643e703b9c1436d07469537a344261038837e8d5c3ece4902b51effa25d3a2278e747b21e23a981c8647567dabad4506ee0d76a9da6c95633bbf001c49979da4d2bdcb2a1804257263ef7680c0234308922f0d56cf7117a592a79486cc60aaf5365e1ca4e392cd6f2c1cfd7a7dddaf4baa5054f2ab3f1c8affb50170250fef0b67cfe295caa4d21f9219c444b8ff4d10e40856ca9360260b20eeaa149ec958703ee525a525e196e915c008a8ebf8fafb3776f8a33298be2b7a8c5ecdfe65bcf1006a8e92c3fa08acf96f98a68c09abef1b16d764f3bcc64b37842053a2eb6a8832d04283e1d3aa9303bf66f83e11e07e2147ddc204a066c4469a8c53f4a2309410f28fe1ca7b5ffc043c5de7c07bccc7da0c816e7320023665ca436432d8b7652be37432b2ad2045ca9a7cdfb46ce4a7ee4fff21a4054a8632fa9829d9e97c08f1e636a76468109781f66f2d5290d205a05ae80803bbd4e534780f7cddd7308b40e2ae5168be2253bd5ecc50e861963b073b046545671d56e68ae4e1b4952c555c084c7638165dd3f7ed2f9801dc947526620abf30713cad8331a7dd743be5850f8b6a5a3a88247b2a860f9fe34b7734a22455dd1fcda0e730ef3474a5426e8094638dabe81f627d83b0422d03fd455c573d9427d77769de7e4819d87285eaed599c43c170f87df6641a113c522a2f3b69d58f541dc4bfc3e2e69bad5cd3bbe1b92aac5a4f05085db065b04768a7b66dbe643a21e15e0917256b7f7faf41d45d85872f4909a99c7d9697e2a3d32baec5e8f1330995f008a88dba634c910c6ad7560f6e1811ce922180a28e09ce7947ae6b107be522c110098c8cba0321bf7537431196841c3a8c494e87f244bf3fdbb9c328b8713d4c4f4da4ad58f2248b8924b0835ce69fdd83a39e3c08908ffa9b1a63d2b127e3ce7a9992f80979309f816633f28c22c356e4a09dfab16800b74477b41de13acc512eb622be0cdb008d41ad93bfc93970ec3ccc032d6ab252548d19d0e85638ea04aa61328420683cf208ad2c3ad35fccaa96fcf7438cd1d8bf95cff6af67d72197039de40e2fb006ab9a6e208f7ab435b4aed584eb8f86a557cff358b2cedef20d3182e90f32afad2498b7d84cf6fd1cea0b0387bd110c885b31ef745dec2305d0f4d401b7eb848e3eb3e0962b7514dd40840b68f4b2a15d728a8b1e33d273b97892d8bc0cf583abff0e58a0faf1466182bd1445e9737a7eee874f44c57f0aa51f70f21492ec251d76a4079d375a6a1f5e9119e8208d0c5e08337773b0a401ecea64b69e3665e2790b038d00997a1690f365fb8f01255c0902a421", 0x1000}}, 0x1006)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000004)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r0, 0x3, 0x7fff, 0x7})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00)'], 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e0000000100000000000001040000002000f001000000000000000d01000000050000000000cc0c020000000a0000000000000c0200ae000000696e74006d61696e0052"], 0x0, 0x5a, 0x0, 0xfffffffd}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x9f)
write(r3, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000)

5.358868311s ago: executing program 6 (id=788):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='sessname=s+ device_path=/', 0x19)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000000)={0x44, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @device_b, @device_a, @initial, {0x6, 0x1}}, @void, @val, @void, @void, @val={0x72, 0x6}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="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", 0x249}], 0x2}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002cbd7000fbdbdf25860000000800a100060000000500190109000000050019010e000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xfffffffffffffdce, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x37}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x91)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r8, &(0x7f0000000400)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xb5, 0xb}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xab}]}, 0x51}, 0x1, 0x0, 0x0, 0x4004850}, 0xc0)

5.150200077s ago: executing program 6 (id=789):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2080)
close(0x3)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x200000000000000, 0x11, r0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfb0001000000000000b9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xd8, 0x6d, &(0x7f00000000c0)="39e12dad43a02436f94155eb6c8c809fec6eea41faf915a2cd7d70465a891d585e6e02a22240a874d19ba11e0ca5022040216b0ee9f3d1a5756682a30cb5536eaf31a32e5fcfe2c9c4a91c066c98ebfee9cdc4eddcbfe80a8d4acbe54fb21e69fc0766befbaf0beed609b770c27e16083e262c1d56326cf804d4a3277c8bbb93e0589da8ef74c40428895161b9923eec3b471f900cbc8d66667e6912706c821fde11df61c7ca53465771139e39b6f0efc9e19684aad08aac05ebe2fc4f8e1006f031eeef28054b2f4bad2d7463337b196e33ca575de0ca65", &(0x7f0000000540)=""/109, 0x80000001, 0x0, 0xfa, 0x45, &(0x7f0000000700)="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", &(0x7f0000000800)="e879aa4e4e8088f32e4bbd43d0cd075c95950d9a804444bae97a077348aa5cd4c571f800f928e96a284b8f9a46968aff7c9d229560b4c9ec88362d3bebea33178bf7d45232", 0x2, 0x0, 0x8}, 0x50)
select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0)
syz_clone3(&(0x7f0000000680)={0x100a43080, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000)

4.695930797s ago: executing program 5 (id=792):
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/set_event\x00', 0x2, 0xc0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$alg(0x26, 0x5, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0)
write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a)

4.562914636s ago: executing program 0 (id=793):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2080)
close(0x3)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x200000000000000, 0x11, r0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfb0001000000000000b9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xd8, 0x6d, &(0x7f00000000c0)="39e12dad43a02436f94155eb6c8c809fec6eea41faf915a2cd7d70465a891d585e6e02a22240a874d19ba11e0ca5022040216b0ee9f3d1a5756682a30cb5536eaf31a32e5fcfe2c9c4a91c066c98ebfee9cdc4eddcbfe80a8d4acbe54fb21e69fc0766befbaf0beed609b770c27e16083e262c1d56326cf804d4a3277c8bbb93e0589da8ef74c40428895161b9923eec3b471f900cbc8d66667e6912706c821fde11df61c7ca53465771139e39b6f0efc9e19684aad08aac05ebe2fc4f8e1006f031eeef28054b2f4bad2d7463337b196e33ca575de0ca65", &(0x7f0000000540)=""/109, 0x80000001, 0x0, 0xfa, 0x45, &(0x7f0000000700)="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", &(0x7f0000000800)="e879aa4e4e8088f32e4bbd43d0cd075c95950d9a804444bae97a077348aa5cd4c571f800f928e96a284b8f9a46968aff7c9d229560b4c9ec88362d3bebea33178bf7d45232", 0x2, 0x0, 0x8}, 0x50)
select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtclass={0x6c, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x6}]}}]}, 0x6c}}, 0x0)
syz_clone3(&(0x7f0000000680)={0x100a43080, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000)

4.462544561s ago: executing program 1 (id=794):
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/set_event\x00', 0x2, 0xc0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$alg(0x26, 0x5, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0)
write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) (fail_nth: 2)

4.218632927s ago: executing program 1 (id=795):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc)

4.216290157s ago: executing program 5 (id=796):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, 0x13}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
socket$nl_route(0x10, 0x3, 0x0)
r0 = memfd_secret(0x80000)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x9, 0x7fdf, 0xff}, 0x50)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)

4.124245888s ago: executing program 6 (id=797):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000000705810200020007050102000200070582020002000705020200020007058303"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/ttyUSB0\x00', 0x2, 0x1)

3.984188498s ago: executing program 1 (id=798):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050)

3.478585738s ago: executing program 2 (id=799):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d00000800020000000000080009002a"], 0x38}}, 0x0)

1.944172697s ago: executing program 1 (id=800):
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
write$UHID_INPUT(r1, &(0x7f0000001280)={0xf, {"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", 0x1000}}, 0x1006)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x3, 0x2, 0x10041, 0x0, 0x3}, 0x30, 0x0)
landlock_restrict_self(r2, 0xf)
syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffff, 0x80142)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000fd000000000e000000000000080400000000005f00"], 0x0, 0x28}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000f400"/28], 0x50)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)

1.827829237s ago: executing program 5 (id=801):
r0 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G<r\xf8\xd56\xaf~Nh%\x14\xf4\x14\xa3\x88i*rR\x17\x1ay\xc4x\x82u\xa3c\x9ez7\x88\x15\xdbz\xd1&\xd1\xca\xcb\xc5C\xa6,\xc7~\x86\xee=\xae}\xeb\xe8N\x11\xef\xb2\xceP\xff\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2/&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae\xde\xef\x06\x03W\xb5;\xa6\xb4\'\'\x17\t\x00\x00\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#\'\xc4\x06h\x1f@\a\n=7\xeb2\xaa\x0e\xee\x03\xd1\xd4\xc2yT\x8a0\x06=\xe7R\x85\x02\xf3\x15\x99z0]\xc4\x04\xb0\xea^\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\x06\x18\x86WQn`\xf1\x9b\xb5\x96\xfe\xcf\xeb\x9f\x878me\x02\x90\xa2\x13O\x9a\xd6\xd0\x12\xf2$7\xb4\x8f\xfaal\xb8\xaaV>\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x0)
fallocate(r0, 0x0, 0x0, 0x200401)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000006880)=[{0xffff7fff, 0x0, &(0x7f00000037c0)=[{&(0x7f00000027c0)=""/4096, 0x1000}]}, {0x340766a3, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003800)=""/172, 0xac}]}, {0x4, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003900)=""/42, 0x2a}, {&(0x7f0000003940)=""/247, 0xf7}, {&(0x7f0000003a40)=""/172, 0xac}, {&(0x7f0000003b00)=""/118, 0x76}, {&(0x7f0000003b80)=""/142, 0x8e}, {&(0x7f0000003c40)=""/105, 0x69}, {&(0x7f0000003cc0)=""/117, 0x75}, {&(0x7f0000003d40)=""/91, 0x5b}, {&(0x7f0000003dc0)=""/57, 0x39}]}, {0xfff, 0x0, &(0x7f0000004200)=[{&(0x7f0000003ec0)=""/49, 0x31}, {&(0x7f0000003f00)=""/27, 0x1b}, {&(0x7f0000003f40)=""/159, 0x9f}, {&(0x7f0000004000)=""/84, 0x54}, {&(0x7f0000004080)=""/18, 0x12}, {&(0x7f00000040c0)=""/110, 0x6e}, {&(0x7f0000004140)=""/188, 0xbc}]}, {0x3, 0x0, &(0x7f00000045c0)=[{&(0x7f0000004280)=""/15, 0xf}, {&(0x7f00000042c0)=""/118, 0x76}, {&(0x7f0000004340)=""/130, 0x82}, {&(0x7f0000004400)=""/157, 0x9d}, {&(0x7f00000044c0)=""/144, 0x90}, {&(0x7f0000004580)=""/35, 0x23}]}, {0x3, 0x0, &(0x7f00000057c0)=[{&(0x7f0000004640)=""/223, 0xdf}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000005740)=""/125, 0x7d}]}, {0xfffffff7, 0x0, &(0x7f0000006840)=[{&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000006800)=""/61, 0x3d}]}], 0x7)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000003c0)=0x2, 0x4)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000340)={{@local, 0xb}, @hyper, 0x0, 0x4, 0x40, 0x0, 0x7, 0x2, 0x5})
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b"], 0x120}}, 0x0)
socket(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007087d80b03c"], 0xfe33)
recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r6 = socket$kcm(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x7, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r7], 0xfe33)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000300))
syz_emit_ethernet(0x1d67, &(0x7f00000009c0)=ANY=[], 0x0)

1.680321655s ago: executing program 0 (id=802):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "005697", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}}}}}, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000002c0)=0x1, 0x8)

885.588558ms ago: executing program 2 (id=803):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000180)=""/186, 0x208000, 0x2800, 0x41}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x220040, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000100), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f8, 0x0, 0x70bd2d, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x84)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x272a42, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x28)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6}, 0x0, &(0x7f0000000040)='%ps    \x00'}, 0x20)
write(r5, &(0x7f0000000280)='tcp', 0x3)
r7 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x7f)
munmap$binder(r7, 0x1ff)

602.707983ms ago: executing program 0 (id=804):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40045}, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
mmap(&(0x7f000008b000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r1, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf251f000000080001004e00000008000380", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x1400c004)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x3a}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xa}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x7}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

493.12408ms ago: executing program 2 (id=805):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000200)={'veth0_to_team\x00', 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x110)
read(r1, &(0x7f0000000100)=""/9, 0xfffffd87)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0)
write$tun(r1, &(0x7f00000000c0)=ANY=[], 0xffe)

477.925279ms ago: executing program 1 (id=806):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = syz_io_uring_setup(0xf00, &(0x7f00000007c0)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r6, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

395.260694ms ago: executing program 0 (id=807):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
setns(0xc9, 0x0)
r3 = socket(0x8, 0x2, 0x0)
setsockopt(r3, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54)
bind(r3, &(0x7f0000000100)=@generic={0x8, "0000fffffeff2000"}, 0xc)
r4 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x49, 0x0, 0x7, &(0x7f0000000340)={0x24, 0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r4, 0x549d, 0xfffffffe, 0x4c, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', <r10=>0x0})
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@remote, r10}, 0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r10, {0x0, 0x9}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004)
socket(0x1e, 0x4, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c018050}, 0x44014)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)

158.309617ms ago: executing program 2 (id=808):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='./file0\n', 0x8)
io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000})
r3 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]})
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000240)={'syz1\x00', {0x4, 0x7, 0x2, 0xb6}, 0x8, [0x4, 0x8000, 0x7d8a, 0x78, 0x9, 0x4, 0x100, 0x951, 0x7fffffff, 0x3, 0x0, 0x6, 0x5da, 0x5, 0x8001, 0xc00, 0xdc, 0x4, 0x80000000, 0xc95e, 0x61f6, 0x1b9, 0x9, 0x2, 0x88, 0x8001, 0x0, 0x6, 0x10000, 0x4, 0x8, 0x7, 0xffffffff, 0x10001, 0xab, 0x9f, 0x5, 0x8, 0x8, 0x4000, 0xfffffffa, 0x8, 0x2, 0x8f4, 0x4, 0x40, 0x401, 0x9, 0x2, 0x3ff, 0x2, 0x2, 0xbb, 0x6, 0x7, 0x3, 0x77855e34, 0xffff, 0x3ff, 0x0, 0x47b, 0x8, 0x24000, 0x6], [0x4b4b, 0x5, 0x0, 0x2, 0x2, 0x856, 0x1, 0x3, 0x279, 0xc6, 0x6, 0x10000, 0x7, 0xe4, 0x3, 0x1000, 0xdcf, 0x2ea, 0x0, 0x9b, 0x100, 0x4, 0xe7a, 0xffffffff, 0x10, 0x200, 0x76, 0x9, 0x7, 0xffffffff, 0x7, 0x3, 0xffffffff, 0x5, 0x1ff, 0xd22c, 0x2e4c, 0x1844, 0x5, 0x0, 0xff, 0x2, 0x80000001, 0x9, 0x0, 0x200, 0x9, 0x7, 0x81, 0x800, 0x2, 0x3, 0x8, 0x0, 0x0, 0x80000000, 0x101, 0x3, 0x2, 0x30, 0x1, 0x0, 0x7ff, 0x1], [0x80000001, 0x8, 0x5, 0x7, 0x800, 0x400, 0x1, 0x10000, 0x1b23, 0xb0, 0x2, 0x1, 0x5, 0x7, 0xfffffffa, 0x9, 0x9198, 0x7ff, 0x1f63cb72, 0x8, 0xf, 0xff, 0x2, 0x4, 0x3, 0x8, 0xe, 0x7, 0x1ff, 0x7, 0x9, 0x5, 0x11ac, 0xa4b1, 0x5, 0x7, 0x5, 0x5, 0x100, 0x7, 0x1f7, 0x2f140000, 0x7, 0x6, 0x81, 0x0, 0x6, 0x6, 0x9f6, 0x2, 0x7, 0x0, 0x1, 0x0, 0xe, 0xc, 0x3, 0x7, 0x800, 0xe, 0x8, 0x4, 0x10000, 0x1], [0x3, 0x1, 0xdcf1, 0x6, 0x1000, 0xfff, 0x0, 0x6, 0x68aa, 0x3, 0x0, 0x2, 0xffff, 0x727, 0x3, 0x6, 0x4, 0x4, 0x2, 0x1, 0x1, 0x1, 0xfffffffe, 0x3, 0x8, 0x101, 0x0, 0xffff7430, 0xe, 0xc000000, 0xa88, 0xffffffff, 0xfffffffd, 0x7ff, 0x1, 0x7, 0x0, 0xb, 0x0, 0x0, 0x80000001, 0xb9, 0x6, 0x10001, 0xff, 0x2, 0x1, 0xc, 0x9, 0xffffff81, 0x1, 0xe0, 0x3, 0x5, 0x8, 0x8, 0x8fb, 0x4, 0x2, 0x6, 0x9, 0x7, 0x5, 0x2]}, 0x45c)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r6, &(0x7f00000004c0)='1', 0x1)

134.966713ms ago: executing program 5 (id=809):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000100)={0x4, {{0xa, 0x0, 0x0, @mcast2, 0xa1}}}, 0x88)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000003c0)={0x2, {{0xa, 0x4e24, 0x6, @mcast1, 0x4}}}, 0x88)
syz_emit_ethernet(0x7e, &(0x7f0000000340)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x48, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "1c62acdfad905d2b4f6f2255ad1b963029028df42bc19c77", "4b2efecb22f91768539b1bf983c8123155f58650f790b44486a262078a7de578"}}}}}}}, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x3a)
write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18)

63.0083ms ago: executing program 1 (id=810):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x4000000, 0x7, 0x201}, 0x0, 0x0, 0x0)

0s ago: executing program 6 (id=811):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000004)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00)'], 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e0000000100000000000001040000002000f001000000000000000d01000000050000000000cc0c020000000a0000000000000c0200ae000000696e74006d61696e0052"], 0x0, 0x5a, 0x0, 0xfffffffd}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x9f)
write(r3, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000)

kernel console output (not intermixed with test programs):

0 PID: 8077 Comm: syz.1.556 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  238.767423][ T8077] Tainted: [L]=SOFTLOCKUP
[  238.767427][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  238.767433][ T8077] Call Trace:
[  238.767438][ T8077]  <TASK>
[  238.767442][ T8077]  dump_stack_lvl+0x100/0x190
[  238.767462][ T8077]  should_fail_ex.cold+0x5/0xa
[  238.767478][ T8077]  _copy_to_user+0x32/0xd0
[  238.767490][ T8077]  generic_map_lookup_batch+0xac0/0xd10
[  238.767513][ T8077]  ? __pfx_generic_map_lookup_batch+0x10/0x10
[  238.767534][ T8077]  ? __pfx_generic_map_lookup_batch+0x10/0x10
[  238.767552][ T8077]  bpf_map_do_batch+0x5b2/0x6d0
[  238.767566][ T8077]  ? bpf_lsm_bpf+0x9/0x10
[  238.767582][ T8077]  __sys_bpf+0xa79/0x4a30
[  238.767595][ T8077]  ? __pfx___sys_bpf+0x10/0x10
[  238.767605][ T8077]  ? find_held_lock+0x2b/0x80
[  238.767621][ T8077]  ? get_pid_task+0xfc/0x250
[  238.767635][ T8077]  ? get_pid_task+0xfc/0x250
[  238.767653][ T8077]  ? find_held_lock+0x2b/0x80
[  238.767671][ T8077]  ? rcu_read_lock_any_held+0x6a/0x90
[  238.767688][ T8077]  ? find_held_lock+0x2b/0x80
[  238.767702][ T8077]  ? ksys_write+0x190/0x250
[  238.767713][ T8077]  ? ksys_write+0x190/0x250
[  238.767723][ T8077]  ? lock_acquire+0x1d1/0x380
[  238.767743][ T8077]  ? fput+0x7c/0x100
[  238.767757][ T8077]  ? ksys_write+0x1ac/0x250
[  238.767769][ T8077]  ? __x64_sys_bpf+0xce/0x140
[  238.767779][ T8077]  __x64_sys_bpf+0xce/0x140
[  238.767790][ T8077]  ? do_syscall_64+0xae/0x790
[  238.767806][ T8077]  do_syscall_64+0x123/0x790
[  238.767822][ T8077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.767834][ T8077] RIP: 0033:0x7f694319e159
[  238.767843][ T8077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.767858][ T8077] RSP: 002b:00007f6943f89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  238.767869][ T8077] RAX: ffffffffffffffda RBX: 00007f6943426090 RCX: 00007f694319e159
[  238.767876][ T8077] RDX: 0000000000000038 RSI: 0000200000000100 RDI: 0000000000000018
[  238.767883][ T8077] RBP: 00007f6943f89090 R08: 0000000000000000 R09: 0000000000000000
[  238.767897][ T8077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.767904][ T8077] R13: 00007f6943426128 R14: 00007f6943426090 R15: 00007fff4d4a1658
[  238.767918][ T8077]  </TASK>
[  239.334670][ T8079] usb usb8: usbfs: process 8079 (syz.0.559) did not claim interface 3 before use
[  240.116467][ T7272] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  240.236762][  T987] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  240.266474][ T7272] usb 3-1: Using ep0 maxpacket: 32
[  240.267667][ T7272] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  240.268529][ T7272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.268550][ T7272] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  240.302089][ T7272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.302120][ T7272] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  240.332047][ T7272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.332065][ T7272] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  240.334796][ T7272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.334848][ T7272] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  240.335895][ T7272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.335916][ T7272] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  240.376796][ T7272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.376819][ T7272] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  240.406901][  T987] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  240.425852][ T7272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.425876][ T7272] usb 3-1: Product: syz
[  240.425890][ T7272] usb 3-1: Manufacturer: syz
[  240.425904][ T7272] usb 3-1: SerialNumber: syz
[  240.429652][  T987] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  240.429689][  T987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.431604][  T987] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  240.431628][  T987] usb 6-1: Manufacturer: syz
[  240.440378][  T987] usb 6-1: config 0 descriptor??
[  240.487206][ T7272] usb 3-1: config 0 descriptor??
[  240.616592][  T987] rc_core: IR keymap rc-hauppauge not found
[  240.616615][  T987] Registered IR keymap rc-empty
[  240.617474][  T987] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  240.626237][  T987] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input46
[  240.736279][ T7272] usb 3-1: USB disconnect, device number 31
[  241.501328][ T8090] jffs2: notice: (8090) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  241.533561][   T31] audit: type=1400 audit(1700000105.110:831): avc:  denied  { write } for  pid=8089 comm="syz.5.564" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  241.673648][ T5776] usb 6-1: USB disconnect, device number 27
[  242.088695][ T7272] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  242.185163][ T8124] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  242.237965][ T7272] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  242.238892][ T7272] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  242.238935][ T7272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.240970][ T7272] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  242.240992][ T7272] usb 2-1: Manufacturer: syz
[  242.264802][ T7272] usb 2-1: config 0 descriptor??
[  242.437350][ T7272] rc_core: IR keymap rc-hauppauge not found
[  242.437369][ T7272] Registered IR keymap rc-empty
[  242.439311][ T7272] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  242.444090][ T7272] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input47
[  242.616568][ T7272] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  242.770067][ T7272] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  242.772598][ T7272] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  242.772642][ T7272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.773752][ T7272] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  242.773774][ T7272] usb 5-1: Manufacturer: syz
[  242.828823][ T7272] usb 5-1: config 0 descriptor??
[  242.921667][ T8115] jffs2: notice: (8115) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  242.949031][ T7272] rc_core: IR keymap rc-hauppauge not found
[  242.949049][ T7272] Registered IR keymap rc-empty
[  242.950066][ T7272] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1
[  242.951909][ T7272] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input48
[  242.971088][   T31] audit: type=1400 audit(1700000106.550:832): avc:  denied  { open } for  pid=8118 comm="syz.0.572" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  242.978492][   T31] audit: type=1400 audit(1700000106.560:833): avc:  denied  { mount } for  pid=8118 comm="syz.0.572" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  242.997624][   T31] audit: type=1400 audit(1700000106.570:834): avc:  denied  { write } for  pid=8114 comm="syz.1.569" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  242.999765][   T31] audit: type=1807 audit(1700000106.570:835): action=measure res=1
[  243.056604][ T8121] ima: policy update completed
[  243.056723][   T31] audit: type=1802 audit(1700000106.620:836): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.0.572" res=1 errno=0
[  243.156933][ T8123] 9p: Bad value for 'rfdno'
[  243.196402][   T31] audit: type=1800 audit(1700000106.740:837): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144299 res=0 errno=0
[  243.198523][ T5776] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  243.245020][ T7272] usb 2-1: USB disconnect, device number 36
[  243.366731][   T31] audit: type=1800 audit(1700000106.900:838): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31195 res=0 errno=0
[  243.366909][   T31] audit: type=1800 audit(1700000106.940:839): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31218 res=0 errno=0
[  243.692683][   T31] audit: type=1800 audit(1700000107.270:840): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144326 res=0 errno=0
[  243.698700][ T5776] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  243.699542][ T5776] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  243.699583][ T5776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.700387][ T5776] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  243.700403][ T5776] usb 6-1: Manufacturer: syz
[  243.707455][ T5776] usb 6-1: config 0 descriptor??
[  243.719285][   T31] audit: type=1800 audit(1700000107.280:841): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144338 res=0 errno=0
[  243.836467][ T5776] rc_core: IR keymap rc-hauppauge not found
[  243.836483][ T5776] Registered IR keymap rc-empty
[  243.838511][ T5776] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  243.843183][ T5776] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input49
[  244.160141][ T5776] usb 5-1: USB disconnect, device number 32
[  244.236273][  T987] usb 6-1: USB disconnect, device number 28
[  244.677143][ T5776] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  244.828704][ T5776] usb 2-1: Using ep0 maxpacket: 16
[  244.835762][ T5776] usb 2-1: unable to get BOS descriptor or descriptor too short
[  244.835805][ T5776] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d
[  244.843502][ T5776] usb 2-1: config 249 has an invalid interface number: 60 but max is 0
[  244.843528][ T5776] usb 2-1: config 249 has no interface number 0
[  244.889740][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.889766][ T5776] usb 2-1: Product: syz
[  244.889780][ T5776] usb 2-1: Manufacturer: syz
[  244.889793][ T5776] usb 2-1: SerialNumber: syz
[  244.975839][ T8174] FAULT_INJECTION: forcing a failure.
[  244.975839][ T8174] name failslab, interval 1, probability 0, space 0, times 0
[  244.975870][ T8174] CPU: 0 UID: 0 PID: 8174 Comm: syz.2.586 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  244.975895][ T8174] Tainted: [L]=SOFTLOCKUP
[  244.975902][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  244.975912][ T8174] Call Trace:
[  244.975918][ T8174]  <TASK>
[  244.975925][ T8174]  dump_stack_lvl+0x100/0x190
[  244.975956][ T8174]  should_fail_ex.cold+0x5/0xa
[  244.975983][ T8174]  should_failslab+0xc2/0x120
[  244.976007][ T8174]  __kmalloc_noprof+0xfc/0x840
[  244.976027][ T8174]  ? sk_prot_alloc+0x10b/0x2a0
[  244.976055][ T8174]  sk_prot_alloc+0x10b/0x2a0
[  244.976079][ T8174]  sk_alloc+0x36/0xe80
[  244.976099][ T8174]  bpf_prog_test_run_skb+0x4d2/0x3530
[  244.976122][ T8174]  ? lock_acquire+0x1d1/0x380
[  244.976141][ T8174]  ? __fget_files+0x34/0x3d0
[  244.976163][ T8174]  ? find_held_lock+0x2b/0x80
[  244.976188][ T8174]  ? __fget_files+0x161/0x3d0
[  244.976215][ T8174]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  244.976247][ T8174]  ? fput+0x7c/0x100
[  244.976273][ T8174]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  244.976302][ T8174]  __sys_bpf+0x2265/0x4a30
[  244.976324][ T8174]  ? __pfx___sys_bpf+0x10/0x10
[  244.976340][ T8174]  ? find_held_lock+0x2b/0x80
[  244.976362][ T8174]  ? get_pid_task+0xfc/0x250
[  244.976386][ T8174]  ? get_pid_task+0xfc/0x250
[  244.976413][ T8174]  ? find_held_lock+0x2b/0x80
[  244.976442][ T8174]  ? rcu_read_lock_any_held+0x6a/0x90
[  244.976468][ T8174]  ? find_held_lock+0x2b/0x80
[  244.976491][ T8174]  ? ksys_write+0x190/0x250
[  244.976507][ T8174]  ? ksys_write+0x190/0x250
[  244.976525][ T8174]  ? lock_acquire+0x1d1/0x380
[  244.976565][ T8174]  ? fput+0x7c/0x100
[  244.976587][ T8174]  ? ksys_write+0x1ac/0x250
[  244.976607][ T8174]  ? __x64_sys_bpf+0xce/0x140
[  244.976621][ T8174]  __x64_sys_bpf+0xce/0x140
[  244.976638][ T8174]  ? do_syscall_64+0xae/0x790
[  244.976662][ T8174]  do_syscall_64+0x123/0x790
[  244.976686][ T8174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.976703][ T8174] RIP: 0033:0x7f325919e159
[  244.976718][ T8174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.976733][ T8174] RSP: 002b:00007f325a0aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  244.976751][ T8174] RAX: ffffffffffffffda RBX: 00007f3259425fa0 RCX: 00007f325919e159
[  244.976763][ T8174] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a
[  244.976773][ T8174] RBP: 00007f325a0aa090 R08: 0000000000000000 R09: 0000000000000000
[  244.976783][ T8174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.976793][ T8174] R13: 00007f3259426038 R14: 00007f3259425fa0 R15: 00007ffe6e499708
[  244.976815][ T8174]  </TASK>
[  245.034844][ T4918] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  245.224512][ T5776] ems_usb 2-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  245.224703][ T5776] ems_usb 2-1:249.60: probe with driver ems_usb failed with error -22
[  245.247327][ T5776] usb 2-1: USB disconnect, device number 37
[  246.341083][  T987] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  246.498759][  T987] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  246.499680][  T987] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[  246.499701][  T987] usb 3-1: config 0 has no interface number 0
[  246.499739][  T987] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  246.499769][  T987] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  246.502156][  T987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.502177][  T987] usb 3-1: Product: syz
[  246.502190][  T987] usb 3-1: Manufacturer: syz
[  246.502203][  T987] usb 3-1: SerialNumber: syz
[  246.510379][  T987] usb 3-1: config 0 descriptor??
[  246.512293][ T8188] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  246.600933][  T987] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  246.621203][  T987] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  246.646648][ T5716] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  246.731330][    C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  246.799602][ T5716] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  246.802038][ T5716] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  246.802082][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.804905][ T5716] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  246.804928][ T5716] usb 2-1: Manufacturer: syz
[  246.809431][ T5716] usb 2-1: config 0 descriptor??
[  246.932215][ T5776] usb 3-1: USB disconnect, device number 32
[  246.950173][ T5776] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  246.950681][ T5776] cyberjack 3-1:0.69: device disconnected
[  246.966516][ T5716] rc_core: IR keymap rc-hauppauge not found
[  246.966530][ T5716] Registered IR keymap rc-empty
[  246.995476][ T5716] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  247.003208][ T5716] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input50
[  247.235916][ T8222] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  247.554420][ T8199] jffs2: notice: (8199) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  247.581574][ T5716] usb 2-1: USB disconnect, device number 38
[  248.005497][   T31] kauditd_printk_skb: 109 callbacks suppressed
[  248.005515][   T31] audit: type=1400 audit(1700000111.580:951): avc:  denied  { setopt } for  pid=8232 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  248.144792][   T31] audit: type=1400 audit(1700000111.720:952): avc:  denied  { write } for  pid=8232 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  248.146283][   T31] audit: type=1400 audit(1700000111.720:953): avc:  denied  { append } for  pid=8232 comm="syz.2.606" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  248.149571][ T8233] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[  248.164363][   T31] audit: type=1400 audit(1700000111.740:954): avc:  denied  { map } for  pid=8232 comm="syz.2.606" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  248.164405][   T31] audit: type=1400 audit(1700000111.740:955): avc:  denied  { write execute } for  pid=8232 comm="syz.2.606" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  248.687591][   T31] audit: type=1400 audit(1700000112.270:956): avc:  denied  { read } for  pid=8232 comm="syz.2.606" lport=34951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  248.775735][   T31] audit: type=1800 audit(1700000112.350:957): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15499 res=0 errno=0
[  248.948085][   T31] audit: type=1800 audit(1700000112.530:958): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15499 res=0 errno=0
[  249.736630][ T7272] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  249.829134][   T31] audit: type=1800 audit(1700000113.410:959): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4787 res=0 errno=0
[  249.946931][ T7272] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  249.947813][ T7272] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  249.947835][ T7272] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.948563][ T7272] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  249.948575][ T7272] usb 6-1: Manufacturer: syz
[  249.950644][ T7272] usb 6-1: config 0 descriptor??
[  249.953515][   T31] audit: type=1800 audit(1700000113.530:960): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145909 res=0 errno=0
[  250.043928][ T8273] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  250.110622][ T8263] kvm: requested 52800 ns i8254 timer period limited to 200000 ns
[  250.125706][ T8263] kvm: requested 144152 ns i8254 timer period limited to 200000 ns
[  250.125834][ T8263] kvm: requested 99733 ns i8254 timer period limited to 200000 ns
[  250.131695][ T8263] kvm: requested 43580 ns i8254 timer period limited to 200000 ns
[  250.151871][ T8263] kvm: requested 23466 ns i8254 timer period limited to 200000 ns
[  250.155537][ T8263] kvm: requested 19276 ns i8254 timer period limited to 200000 ns
[  250.157588][ T7272] rc_core: IR keymap rc-hauppauge not found
[  250.157600][ T7272] Registered IR keymap rc-empty
[  250.159937][ T7272] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  250.162981][ T7272] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input51
[  250.261282][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  250.261334][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  250.467954][ T8249] jffs2: notice: (8249) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  250.500290][  T189] usb 6-1: USB disconnect, device number 29
[  252.047831][ T5776] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  252.198484][ T5776] usb 6-1: Using ep0 maxpacket: 16
[  252.239395][ T5776] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  252.280769][ T5776] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  252.280979][ T5776] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  252.281074][ T5776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  252.281114][ T5776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  252.340943][ T5776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.340969][ T5776] usb 6-1: Product: syz
[  252.340983][ T5776] usb 6-1: Manufacturer: syz
[  252.340997][ T5776] usb 6-1: SerialNumber: syz
[  252.346098][ T5776] usb 6-1: config 0 descriptor??
[  252.373742][  T189] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  252.586899][  T189] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  252.587805][  T189] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  252.587846][  T189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.588700][  T189] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  252.588721][  T189] usb 1-1: Manufacturer: syz
[  252.593690][  T189] usb 1-1: config 0 descriptor??
[  252.645562][ T5776] appledisplay 6-1:0.0: Error while getting initial brightness: -110
[  252.650914][ T5776] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110
[  253.300097][   T31] kauditd_printk_skb: 42 callbacks suppressed
[  253.300115][   T31] audit: type=1400 audit(1700000116.870:1003): avc:  denied  { read write } for  pid=8308 comm="syz.1.628" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  253.300156][   T31] audit: type=1400 audit(1700000116.870:1004): avc:  denied  { open } for  pid=8308 comm="syz.1.628" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  253.300212][  T189] rc_core: IR keymap rc-hauppauge not found
[  253.300223][  T189] Registered IR keymap rc-empty
[  253.301191][  T189] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  253.413067][  T189] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input52
[  253.452736][   T31] audit: type=1800 audit(1700000117.030:1005): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=146199 res=0 errno=0
[  253.452778][   T31] audit: type=1800 audit(1700000117.030:1006): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=146179 res=0 errno=0
[  253.464900][ T5776] usb 6-1: USB disconnect, device number 30
[  253.512613][   T31] audit: type=1800 audit(1700000117.090:1007): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0
[  253.538429][   T31] audit: type=1800 audit(1700000117.120:1008): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146220 res=0 errno=0
[  253.691511][   T31] audit: type=1800 audit(1700000117.270:1009): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146277 res=0 errno=0
[  253.694627][   T31] audit: type=1800 audit(1700000117.270:1010): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146289 res=0 errno=0
[  253.700492][   T31] audit: type=1800 audit(1700000117.280:1011): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=146305 res=0 errno=0
[  253.721915][   T31] audit: type=1800 audit(1700000117.280:1012): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=146308 res=0 errno=0
[  253.776005][ T8330] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  253.878315][ T8332] FAULT_INJECTION: forcing a failure.
[  253.878315][ T8332] name failslab, interval 1, probability 0, space 0, times 0
[  253.878349][ T8332] CPU: 0 UID: 0 PID: 8332 Comm: syz.1.632 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  253.878384][ T8332] Tainted: [L]=SOFTLOCKUP
[  253.878390][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  253.878400][ T8332] Call Trace:
[  253.878407][ T8332]  <TASK>
[  253.878414][ T8332]  dump_stack_lvl+0x100/0x190
[  253.878445][ T8332]  should_fail_ex.cold+0x5/0xa
[  253.878471][ T8332]  should_failslab+0xc2/0x120
[  253.878494][ T8332]  __kmalloc_cache_noprof+0x91/0x6d0
[  253.878522][ T8332]  ? copy_mount_options+0x55/0x190
[  253.878545][ T8332]  copy_mount_options+0x55/0x190
[  253.878565][ T8332]  __x64_sys_mount+0x1ab/0x310
[  253.878592][ T8332]  ? __pfx___x64_sys_mount+0x10/0x10
[  253.878626][ T8332]  do_syscall_64+0x123/0x790
[  253.878652][ T8332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.878671][ T8332] RIP: 0033:0x7f694319e159
[  253.878686][ T8332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.878703][ T8332] RSP: 002b:00007f6943faa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  253.878723][ T8332] RAX: ffffffffffffffda RBX: 00007f6943425fa0 RCX: 00007f694319e159
[  253.878734][ T8332] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000
[  253.878745][ T8332] RBP: 00007f6943faa090 R08: 0000200000000040 R09: 0000000000000000
[  253.878756][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.878766][ T8332] R13: 00007f6943426038 R14: 00007f6943425fa0 R15: 00007fff4d4a1658
[  253.878791][ T8332]  </TASK>
[  254.099424][ T8288] jffs2: notice: (8288) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  254.116728][ T5776] usb 1-1: USB disconnect, device number 25
[  254.181546][ T8336] FAULT_INJECTION: forcing a failure.
[  254.181546][ T8336] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.181603][ T8336] CPU: 1 UID: 0 PID: 8336 Comm: syz.4.630 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  254.181630][ T8336] Tainted: [L]=SOFTLOCKUP
[  254.181636][ T8336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  254.181647][ T8336] Call Trace:
[  254.181654][ T8336]  <TASK>
[  254.181661][ T8336]  dump_stack_lvl+0x100/0x190
[  254.181692][ T8336]  should_fail_ex.cold+0x5/0xa
[  254.181718][ T8336]  _copy_from_user+0x2e/0xd0
[  254.181741][ T8336]  arp_ioctl+0x184/0xcb0
[  254.181769][ T8336]  ? __pfx_arp_ioctl+0x10/0x10
[  254.181796][ T8336]  ? lock_acquire+0x1d1/0x380
[  254.181814][ T8336]  ? finish_task_switch.isra.0+0x149/0x10d0
[  254.181840][ T8336]  ? rcu_is_watching+0x13/0xc0
[  254.181871][ T8336]  ? finish_task_switch.isra.0+0x2c2/0x10d0
[  254.181892][ T8336]  ? lockdep_hardirqs_on+0x7d/0x110
[  254.181919][ T8336]  inet_ioctl+0x1a4/0x3f0
[  254.181942][ T8336]  ? __pfx_inet_ioctl+0x10/0x10
[  254.181963][ T8336]  ? __schedule+0x126b/0x6920
[  254.181999][ T8336]  ? __pfx___schedule+0x10/0x10
[  254.182025][ T8336]  sock_do_ioctl+0x118/0x280
[  254.182049][ T8336]  ? lockdep_hardirqs_on+0x7d/0x110
[  254.182072][ T8336]  ? __pfx_sock_do_ioctl+0x10/0x10
[  254.182106][ T8336]  ? sock_ioctl+0x91/0x6b0
[  254.182134][ T8336]  sock_ioctl+0x599/0x6b0
[  254.182160][ T8336]  ? __pfx_sock_ioctl+0x10/0x10
[  254.182192][ T8336]  ? selinux_file_ioctl+0x13b/0x290
[  254.182211][ T8336]  ? selinux_file_ioctl+0xb6/0x290
[  254.182232][ T8336]  ? __pfx_sock_ioctl+0x10/0x10
[  254.182259][ T8336]  __x64_sys_ioctl+0x18e/0x210
[  254.182280][ T8336]  do_syscall_64+0x123/0x790
[  254.182306][ T8336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.182325][ T8336] RIP: 0033:0x7fd37699e159
[  254.182341][ T8336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.182356][ T8336] RSP: 002b:00007fd3777c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  254.182375][ T8336] RAX: ffffffffffffffda RBX: 00007fd376c26180 RCX: 00007fd37699e159
[  254.182387][ T8336] RDX: 0000200000000000 RSI: 0000000000008955 RDI: 0000000000000003
[  254.182397][ T8336] RBP: 00007fd3777c2090 R08: 0000000000000000 R09: 0000000000000000
[  254.182408][ T8336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.182419][ T8336] R13: 00007fd376c26218 R14: 00007fd376c26180 R15: 00007ffdee1a2b38
[  254.182444][ T8336]  </TASK>
[  254.543932][ T8338] FAULT_INJECTION: forcing a failure.
[  254.543932][ T8338] name failslab, interval 1, probability 0, space 0, times 0
[  254.543962][ T8338] CPU: 0 UID: 60929 PID: 8338 Comm: syz.2.633 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  254.543986][ T8338] Tainted: [L]=SOFTLOCKUP
[  254.543992][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  254.544001][ T8338] Call Trace:
[  254.544007][ T8338]  <TASK>
[  254.544013][ T8338]  dump_stack_lvl+0x100/0x190
[  254.544041][ T8338]  should_fail_ex.cold+0x5/0xa
[  254.544064][ T8338]  should_failslab+0xc2/0x120
[  254.544089][ T8338]  kmem_cache_alloc_noprof+0x92/0x6a0
[  254.544106][ T8338]  ? __pfx_map_id_range_down+0x10/0x10
[  254.544123][ T8338]  ? rcu_is_watching+0x13/0xc0
[  254.544144][ T8338]  ? security_inode_alloc+0x3b/0x2c0
[  254.544173][ T8338]  security_inode_alloc+0x3b/0x2c0
[  254.544198][ T8338]  inode_init_always_gfp+0xc6f/0xfb0
[  254.544222][ T8338]  alloc_inode+0x8e/0x250
[  254.544238][ T8338]  sock_alloc+0x44/0x280
[  254.544257][ T8338]  ? security_socket_create+0x7f/0x250
[  254.544283][ T8338]  __sock_create+0xc2/0x860
[  254.544310][ T8338]  __sys_socket+0x14d/0x260
[  254.544333][ T8338]  ? __pfx___sys_socket+0x10/0x10
[  254.544369][ T8338]  __x64_sys_socket+0x72/0xb0
[  254.544390][ T8338]  ? lockdep_hardirqs_on+0x7d/0x110
[  254.544414][ T8338]  do_syscall_64+0x123/0x790
[  254.544439][ T8338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.544458][ T8338] RIP: 0033:0x7f325919e159
[  254.544472][ T8338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.544489][ T8338] RSP: 002b:00007f325a0aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  254.544505][ T8338] RAX: ffffffffffffffda RBX: 00007f3259425fa0 RCX: 00007f325919e159
[  254.544517][ T8338] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010
[  254.544526][ T8338] RBP: 00007f325923503b R08: 0000000000000000 R09: 0000000000000000
[  254.544537][ T8338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.544548][ T8338] R13: 00007f3259426038 R14: 00007f3259425fa0 R15: 00007ffe6e499708
[  254.544571][ T8338]  </TASK>
[  254.544601][ T8338] socket: no more sockets
[  254.804633][ T6863] Bluetooth: hci6: Frame reassembly failed (-84)
[  255.701000][ T8368] jffs2: notice: (8368) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  255.801478][ T8369] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  256.035865][ T8374] FAULT_INJECTION: forcing a failure.
[  256.035865][ T8374] name failslab, interval 1, probability 0, space 0, times 0
[  256.035894][ T8374] CPU: 0 UID: 0 PID: 8374 Comm: syz.2.644 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  256.035914][ T8374] Tainted: [L]=SOFTLOCKUP
[  256.035919][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  256.035927][ T8374] Call Trace:
[  256.035932][ T8374]  <TASK>
[  256.035938][ T8374]  dump_stack_lvl+0x100/0x190
[  256.035962][ T8374]  should_fail_ex.cold+0x5/0xa
[  256.035983][ T8374]  should_failslab+0xc2/0x120
[  256.036001][ T8374]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  256.036016][ T8374]  ? __alloc_skb+0x5b7/0x710
[  256.036032][ T8374]  ? __alloc_skb+0x140/0x710
[  256.036049][ T8374]  __alloc_skb+0x140/0x710
[  256.036062][ T8374]  ? __alloc_skb+0x5b7/0x710
[  256.036075][ T8374]  ? __pfx___alloc_skb+0x10/0x10
[  256.036089][ T8374]  ? find_held_lock+0x2b/0x80
[  256.036108][ T8374]  ? is_bpf_text_address+0x8a/0x1a0
[  256.036127][ T8374]  ? is_bpf_text_address+0x8a/0x1a0
[  256.036145][ T8374]  ? bpf_ksym_find+0x128/0x1c0
[  256.036168][ T8374]  alloc_skb_with_frags+0xdd/0x760
[  256.036187][ T8374]  ? __lock_acquire+0x5c0/0x1f40
[  256.036203][ T8374]  ? unwind_get_return_address+0x59/0xa0
[  256.036227][ T8374]  sock_alloc_send_pskb+0x801/0x980
[  256.036248][ T8374]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  256.036267][ T8374]  ? __lock_acquire+0x5c0/0x1f40
[  256.036281][ T8374]  ? ref_tracker_alloc+0x307/0x590
[  256.036304][ T8374]  __ip_append_data+0x23a5/0x44d0
[  256.036337][ T8374]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  256.036353][ T8374]  ? find_held_lock+0x2b/0x80
[  256.036382][ T8374]  ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750
[  256.036404][ T8374]  ? __pfx___ip_append_data+0x10/0x10
[  256.036421][ T8374]  ? dst_alloc+0xc0/0x1a0
[  256.036436][ T8374]  ? __sock_tx_timestamp+0xb2/0xd0
[  256.036456][ T8374]  ip_make_skb+0x28b/0x310
[  256.036476][ T8374]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  256.036495][ T8374]  ? __pfx_ip_make_skb+0x10/0x10
[  256.036512][ T8374]  ? ip_route_output_key_hash+0x14c/0x2b0
[  256.036548][ T8374]  ? udp_sendmsg+0x171c/0x2710
[  256.036567][ T8374]  udp_sendmsg+0x171c/0x2710
[  256.036594][ T8374]  ? __pfx_udp_sendmsg+0x10/0x10
[  256.036613][ T8374]  ? __pfx_avc_has_perm+0x10/0x10
[  256.036646][ T8374]  ? __pfx_sock_has_perm+0x10/0x10
[  256.036670][ T8374]  ? lock_acquire+0x1d1/0x380
[  256.036704][ T8374]  ? __pfx_udp_sendmsg+0x10/0x10
[  256.036726][ T8374]  inet_sendmsg+0x105/0x140
[  256.036753][ T8374]  ____sys_sendmsg+0x9c9/0xbe0
[  256.036775][ T8374]  ? __pfx_inet_sendmsg+0x10/0x10
[  256.036801][ T8374]  ? __pfx_____sys_sendmsg+0x10/0x10
[  256.036826][ T8374]  ? _kstrtoull+0x144/0x200
[  256.036847][ T8374]  ? __pfx__kstrtoull+0x10/0x10
[  256.036874][ T8374]  ___sys_sendmsg+0x190/0x1e0
[  256.036901][ T8374]  ? __pfx____sys_sendmsg+0x10/0x10
[  256.036937][ T8374]  ? __fget_files+0x34/0x3d0
[  256.036976][ T8374]  __sys_sendmmsg+0x20c/0x440
[  256.037000][ T8374]  ? __pfx___sys_sendmmsg+0x10/0x10
[  256.037020][ T8374]  ? ksys_write+0x190/0x250
[  256.037056][ T8374]  ? fput+0x7c/0x100
[  256.037079][ T8374]  ? ksys_write+0x1ac/0x250
[  256.037095][ T8374]  ? __pfx_ksys_write+0x10/0x10
[  256.037117][ T8374]  __x64_sys_sendmmsg+0x9c/0x100
[  256.037137][ T8374]  ? lockdep_hardirqs_on+0x7d/0x110
[  256.037160][ T8374]  do_syscall_64+0x123/0x790
[  256.037186][ T8374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.037205][ T8374] RIP: 0033:0x7f325919e159
[  256.037221][ T8374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.037237][ T8374] RSP: 002b:00007f325a089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  256.037256][ T8374] RAX: ffffffffffffffda RBX: 00007f3259426090 RCX: 00007f325919e159
[  256.037268][ T8374] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004
[  256.037279][ T8374] RBP: 00007f325a089090 R08: 0000000000000000 R09: 0000000000000000
[  256.037290][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.037300][ T8374] R13: 00007f3259426128 R14: 00007f3259426090 R15: 00007ffe6e499708
[  256.037332][ T8374]  </TASK>
[  256.739695][ T4918] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  256.739736][ T5607] Bluetooth: hci5: command 0x1003 tx timeout
[  256.810780][ T5598] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  257.307825][ T8382] overlayfs: unescaped trailing colons in lowerdir mount option.
[  257.550303][ T8380] jffs2: notice: (8380) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  257.816809][  T987] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  257.967034][  T987] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  257.967995][  T987] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  257.968035][  T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.969520][  T987] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  257.969541][  T987] usb 2-1: Manufacturer: syz
[  257.973009][  T987] usb 2-1: config 0 descriptor??
[  258.047010][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'.
[  258.136902][  T987] rc_core: IR keymap rc-hauppauge not found
[  258.136919][  T987] Registered IR keymap rc-empty
[  258.149093][  T987] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  258.161052][  T987] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input53
[  258.414436][ T8387] jffs2: notice: (8387) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  258.433449][   T31] kauditd_printk_skb: 42 callbacks suppressed
[  258.433466][   T31] audit: type=1800 audit(1700000121.980:1055): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=146539 res=0 errno=0
[  258.433506][   T31] audit: type=1800 audit(1700000121.980:1056): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=146542 res=0 errno=0
[  258.433540][   T31] audit: type=1800 audit(1700000121.980:1057): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=146573 res=0 errno=0
[  258.433575][   T31] audit: type=1800 audit(1700000121.990:1058): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146601 res=0 errno=0
[  258.441017][ T8408] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  258.876113][   T31] audit: type=1800 audit(1700000122.450:1059): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=146574 res=0 errno=0
[  258.883589][   T31] audit: type=1400 audit(1700000122.460:1060): avc:  denied  { write } for  pid=8384 comm="syz.1.648" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  258.899295][   T31] audit: type=1800 audit(1700000122.460:1061): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15499 res=0 errno=0
[  258.953509][  T189] usb 2-1: USB disconnect, device number 39
[  259.066254][   T31] audit: type=1800 audit(1700000122.640:1062): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26354 res=0 errno=0
[  259.130030][ T8418] netlink: 20 bytes leftover after parsing attributes in process `syz.5.657'.
[  259.189040][ T7272] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  259.235799][   T31] audit: type=1800 audit(1700000122.810:1063): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15499 res=0 errno=0
[  259.345343][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.347006][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.363465][ T7272] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  259.364463][ T7272] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  259.364503][ T7272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.365364][ T7272] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  259.365384][ T7272] usb 3-1: Manufacturer: syz
[  259.385149][   T31] audit: type=1800 audit(1700000122.960:1064): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146664 res=0 errno=0
[  259.395548][ T7272] usb 3-1: config 0 descriptor??
[  259.488863][ T7272] rc_core: IR keymap rc-hauppauge not found
[  259.488881][ T7272] Registered IR keymap rc-empty
[  259.489741][ T7272] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  259.493578][ T7272] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input54
[  259.510824][ T8420] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.515640][ T8420] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.536602][ T5726] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  259.692915][ T5726] usb 6-1: Using ep0 maxpacket: 8
[  259.701247][ T5726] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  259.709304][ T5726] usb 6-1: config 0 has an invalid interface number: 6 but max is 2
[  259.709326][ T5726] usb 6-1: config 0 has an invalid interface number: 176 but max is 2
[  259.709343][ T5726] usb 6-1: config 0 has no interface number 1
[  259.709356][ T5726] usb 6-1: config 0 has no interface number 2
[  259.709400][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.724861][ T5726] usb 6-1: config 0 descriptor??
[  259.925706][ T8432] overlayfs: unescaped trailing colons in lowerdir mount option.
[  260.047400][ T5726] qcserial 6-1:0.6: Qualcomm USB modem converter detected
[  260.167186][ T8416] jffs2: notice: (8416) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  260.374138][ T5726] usb 3-1: USB disconnect, device number 33
[  261.497415][ T6088] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.498135][ T6088] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.498167][ T6088] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.498198][ T6088] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.502556][ T8439] lo speed is unknown, defaulting to 1000
[  261.502605][ T8439] lo speed is unknown, defaulting to 1000
[  261.512838][ T8443] FAULT_INJECTION: forcing a failure.
[  261.512838][ T8443] name failslab, interval 1, probability 0, space 0, times 0
[  261.512866][ T8443] CPU: 1 UID: 0 PID: 8443 Comm: syz.2.664 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  261.512889][ T8443] Tainted: [L]=SOFTLOCKUP
[  261.512894][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  261.512903][ T8443] Call Trace:
[  261.512909][ T8443]  <TASK>
[  261.512915][ T8443]  dump_stack_lvl+0x100/0x190
[  261.512942][ T8443]  should_fail_ex.cold+0x5/0xa
[  261.512966][ T8443]  should_failslab+0xc2/0x120
[  261.512986][ T8443]  __kmalloc_noprof+0xfc/0x840
[  261.513004][ T8443]  ? input_ff_create+0x60/0x310
[  261.513026][ T8443]  input_ff_create+0x60/0x310
[  261.513045][ T8443]  uinput_ioctl_handler.isra.0+0x70c/0x1d20
[  261.513063][ T8443]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  261.513078][ T8443]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  261.513097][ T8443]  ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10
[  261.513113][ T8443]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  261.513134][ T8443]  ? __fget_files+0x34/0x3d0
[  261.513162][ T8443]  ? selinux_file_ioctl+0x13b/0x290
[  261.513178][ T8443]  ? selinux_file_ioctl+0xb6/0x290
[  261.513196][ T8443]  ? __pfx_uinput_ioctl+0x10/0x10
[  261.513213][ T8443]  __x64_sys_ioctl+0x18e/0x210
[  261.513230][ T8443]  do_syscall_64+0x123/0x790
[  261.513258][ T8443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.513275][ T8443] RIP: 0033:0x7f325919e159
[  261.513289][ T8443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  261.513303][ T8443] RSP: 002b:00007f325a0aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  261.513319][ T8443] RAX: ffffffffffffffda RBX: 00007f3259425fa0 RCX: 00007f325919e159
[  261.513330][ T8443] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[  261.513340][ T8443] RBP: 00007f325a0aa090 R08: 0000000000000000 R09: 0000000000000000
[  261.513349][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.513358][ T8443] R13: 00007f3259426038 R14: 00007f3259425fa0 R15: 00007ffe6e499708
[  261.513381][ T8443]  </TASK>
[  261.519632][ T8439] lo speed is unknown, defaulting to 1000
[  261.593915][ T8439] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  261.593949][ T8439] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  261.593984][ T8439] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  261.741902][ T8439] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  261.953232][ T8449] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  262.021883][ T8439] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  262.087200][ T8455] netlink: 888 bytes leftover after parsing attributes in process `syz.1.669'.
[  262.095243][ T8455] netlink: 'syz.1.669': attribute type 1 has an invalid length.
[  262.155165][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'.
[  262.155187][ T8453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.668'.
[  262.300857][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'.
[  262.301165][ T8462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.668'.
[  262.329203][ T8439] lo speed is unknown, defaulting to 1000
[  262.334158][ T8439] lo speed is unknown, defaulting to 1000
[  262.336622][ T8439] lo speed is unknown, defaulting to 1000
[  262.337522][ T8439] lo speed is unknown, defaulting to 1000
[  262.688754][ T5684] usb 6-1: USB disconnect, device number 31
[  262.707076][ T5684] qcserial 6-1:0.6: device disconnected
[  262.748390][ T8439] lo speed is unknown, defaulting to 1000
[  263.796580][   T31] kauditd_printk_skb: 42 callbacks suppressed
[  263.796625][   T31] audit: type=1800 audit(1700000127.360:1107): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146959 res=0 errno=0
[  263.850568][ T8480] overlayfs: unescaped trailing colons in lowerdir mount option.
[  264.111416][ T8482] pim6reg1: entered promiscuous mode
[  264.111439][ T8482] pim6reg1: entered allmulticast mode
[  264.133104][   T31] audit: type=1400 audit(1700000127.710:1108): avc:  denied  { setopt } for  pid=8484 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  264.197021][   T31] audit: type=1800 audit(1700000127.770:1109): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0
[  264.344431][   T31] audit: type=1400 audit(1700000127.920:1110): avc:  denied  { unmount } for  pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  264.380271][ T8491] jffs2: notice: (8491) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  264.404269][   T31] audit: type=1400 audit(1700000127.980:1111): avc:  denied  { write } for  pid=8490 comm="syz.2.679" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  264.493600][   T31] audit: type=1800 audit(1700000128.070:1112): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15499 res=0 errno=0
[  264.585769][   T31] audit: type=1800 audit(1700000128.160:1113): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15499 res=0 errno=0
[  264.676464][  T189] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  264.803821][   T31] audit: type=1800 audit(1700000128.380:1114): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15499 res=0 errno=0
[  264.847481][  T189] usb 2-1: not running at top speed; connect to a high speed hub
[  264.847511][  T189] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  264.848513][  T189] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  264.848558][  T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.852995][   T31] audit: type=1800 audit(1700000128.430:1115): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=147381 res=0 errno=0
[  264.861684][   T31] audit: type=1800 audit(1700000128.440:1116): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=147410 res=0 errno=0
[  264.883696][  T189] gspca_main: spca501-2.14.0 probing 0000:0000
[  265.226918][ T5716] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  265.396770][ T5716] usb 6-1: Using ep0 maxpacket: 8
[  265.398674][  T189] gspca_spca501: reg write: error -110
[  265.398688][  T189] spca501 2-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  265.398749][  T189] spca501 2-1:1.0: probe with driver spca501 failed with error -22
[  265.399450][  T189] uvcvideo 2-1:1.0: Found UVC 1.00 device <unnamed> (0000:0000)
[  265.399957][ T5716] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  265.401104][ T5716] usb 6-1: config 0 has an invalid interface number: 6 but max is 2
[  265.401126][ T5716] usb 6-1: config 0 has an invalid interface number: 176 but max is 2
[  265.401145][ T5716] usb 6-1: config 0 has no interface number 1
[  265.401161][ T5716] usb 6-1: config 0 has no interface number 2
[  265.401208][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.403407][ T5716] usb 6-1: config 0 descriptor??
[  265.433421][  T189] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  265.441525][  T189] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26).
[  265.441572][  T189] uvcvideo 2-1:1.1: Failed to initialize the device (-5).
[  265.523673][  T189] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -5
[  265.706976][ T5716] qcserial 6-1:0.6: Qualcomm USB modem converter detected
[  266.447035][ T8511] xt_hl: Unknown TTL match mode: 255
[  266.614635][ T8531] FAULT_INJECTION: forcing a failure.
[  266.614635][ T8531] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  266.614673][ T8531] CPU: 1 UID: 0 PID: 8531 Comm: syz.2.689 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  266.614697][ T8531] Tainted: [L]=SOFTLOCKUP
[  266.614704][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  266.614715][ T8531] Call Trace:
[  266.614721][ T8531]  <TASK>
[  266.614729][ T8531]  dump_stack_lvl+0x100/0x190
[  266.614759][ T8531]  should_fail_ex.cold+0x5/0xa
[  266.614782][ T8531]  ? prepare_alloc_pages+0x16d/0x5b0
[  266.614806][ T8531]  should_fail_alloc_page+0xeb/0x140
[  266.614831][ T8531]  prepare_alloc_pages+0x1f0/0x5b0
[  266.614852][ T8531]  ? is_bpf_text_address+0x94/0x1a0
[  266.614878][ T8531]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  266.614914][ T8531]  ? stack_trace_save+0x8e/0xc0
[  266.614939][ T8531]  ? __pfx_stack_trace_save+0x10/0x10
[  266.614964][ T8531]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  266.614988][ T8531]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  266.615014][ T8531]  ? is_bpf_text_address+0x94/0x1a0
[  266.615040][ T8531]  ? kasan_save_stack+0x3f/0x50
[  266.615058][ T8531]  ? kasan_save_stack+0x30/0x50
[  266.615076][ T8531]  ? kasan_save_track+0x14/0x30
[  266.615095][ T8531]  ? __kasan_slab_alloc+0x89/0x90
[  266.615114][ T8531]  ? kmem_cache_alloc_node_noprof+0x282/0x6e0
[  266.615132][ T8531]  ? alloc_vmap_area+0x640/0x2bb0
[  266.615150][ T8531]  ? __get_vm_area_node+0x1ed/0x350
[  266.615170][ T8531]  ? __vmalloc_node_range_noprof+0x268/0x1420
[  266.615191][ T8531]  ? __vmalloc_node_noprof+0xad/0xf0
[  266.615209][ T8531]  ? __vmalloc_noprof+0xa3/0x120
[  266.615231][ T8531]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  266.615252][ T8531]  ? bpf_prog_alloc+0x3b/0x200
[  266.615270][ T8531]  ? bpf_prog_load+0x49e/0x2a80
[  266.615293][ T8531]  ? __sys_bpf+0x1f46/0x4a30
[  266.615308][ T8531]  ? __x64_sys_bpf+0xce/0x140
[  266.615323][ T8531]  ? do_syscall_64+0x123/0x790
[  266.615345][ T8531]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.615372][ T8531]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  266.615393][ T8531]  ? policy_nodemask+0xed/0x4f0
[  266.615417][ T8531]  alloc_pages_mpol+0x201/0x550
[  266.615441][ T8531]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  266.615468][ T8531]  alloc_pages_noprof+0x1a/0x160
[  266.615494][ T8531]  get_free_pages_noprof+0x10/0xb0
[  266.615513][ T8531]  __kasan_populate_vmalloc+0xa0/0x210
[  266.615536][ T8531]  alloc_vmap_area+0x95d/0x2bb0
[  266.615563][ T8531]  ? kasan_save_track+0x14/0x30
[  266.615582][ T8531]  ? __kasan_kmalloc+0xaa/0xb0
[  266.615602][ T8531]  ? __pfx_alloc_vmap_area+0x10/0x10
[  266.615623][ T8531]  ? __get_vm_area_node+0x124/0x350
[  266.615653][ T8531]  __get_vm_area_node+0x1ed/0x350
[  266.615679][ T8531]  __vmalloc_node_range_noprof+0x268/0x1420
[  266.615703][ T8531]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  266.615726][ T8531]  ? kfree+0x22b/0x6d0
[  266.615755][ T8531]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  266.615777][ T8531]  ? lock_acquire+0x1d1/0x380
[  266.615798][ T8531]  ? find_held_lock+0x2b/0x80
[  266.615822][ T8531]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  266.615846][ T8531]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  266.615875][ T8531]  ? avc_has_perm_noaudit+0x145/0x3b0
[  266.615900][ T8531]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  266.615923][ T8531]  __vmalloc_node_noprof+0xad/0xf0
[  266.615945][ T8531]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  266.615970][ T8531]  __vmalloc_noprof+0xa3/0x120
[  266.615990][ T8531]  ? __pfx___vmalloc_noprof+0x10/0x10
[  266.616015][ T8531]  ? rcu_is_watching+0x13/0xc0
[  266.616039][ T8531]  ? cap_capable+0x107/0x430
[  266.616066][ T8531]  bpf_prog_alloc_no_stats+0x59/0x690
[  266.616087][ T8531]  ? security_capable+0x80/0x260
[  266.616114][ T8531]  bpf_prog_alloc+0x3b/0x200
[  266.616134][ T8531]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  266.616156][ T8531]  bpf_prog_load+0x49e/0x2a80
[  266.616185][ T8531]  ? __pfx_bpf_prog_load+0x10/0x10
[  266.616228][ T8531]  __sys_bpf+0x1f46/0x4a30
[  266.616253][ T8531]  ? __pfx___sys_bpf+0x10/0x10
[  266.616279][ T8531]  ? find_held_lock+0x2b/0x80
[  266.616303][ T8531]  ? get_pid_task+0xfc/0x250
[  266.616326][ T8531]  ? get_pid_task+0xfc/0x250
[  266.616357][ T8531]  ? find_held_lock+0x2b/0x80
[  266.616383][ T8531]  ? rcu_read_lock_any_held+0x6a/0x90
[  266.616406][ T8531]  ? find_held_lock+0x2b/0x80
[  266.616429][ T8531]  ? ksys_write+0x190/0x250
[  266.616447][ T8531]  ? ksys_write+0x190/0x250
[  266.616464][ T8531]  ? lock_acquire+0x1d1/0x380
[  266.616499][ T8531]  ? fput+0x7c/0x100
[  266.616522][ T8531]  ? ksys_write+0x1ac/0x250
[  266.616543][ T8531]  ? __x64_sys_bpf+0xce/0x140
[  266.616560][ T8531]  __x64_sys_bpf+0xce/0x140
[  266.616578][ T8531]  ? do_syscall_64+0xae/0x790
[  266.616602][ T8531]  do_syscall_64+0x123/0x790
[  266.616625][ T8531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.616644][ T8531] RIP: 0033:0x7f325919e159
[  266.616665][ T8531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.616682][ T8531] RSP: 002b:00007f325a0aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  266.616700][ T8531] RAX: ffffffffffffffda RBX: 00007f3259425fa0 RCX: 00007f325919e159
[  266.616712][ T8531] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  266.616723][ T8531] RBP: 00007f325a0aa090 R08: 0000000000000000 R09: 0000000000000000
[  266.616734][ T8531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.616743][ T8531] R13: 00007f3259426038 R14: 00007f3259425fa0 R15: 00007ffe6e499708
[  266.616768][ T8531]  </TASK>
[  266.618235][ T8531] syz.2.689: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  266.618295][ T8531] CPU: 1 UID: 0 PID: 8531 Comm: syz.2.689 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  266.618319][ T8531] Tainted: [L]=SOFTLOCKUP
[  266.618325][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  266.618334][ T8531] Call Trace:
[  266.618339][ T8531]  <TASK>
[  266.618345][ T8531]  dump_stack_lvl+0x100/0x190
[  266.618371][ T8531]  warn_alloc.cold+0x9e/0xb2
[  266.618389][ T8531]  ? __pfx_warn_alloc+0x10/0x10
[  266.618413][ T8531]  ? lockdep_hardirqs_on+0x7d/0x110
[  266.618436][ T8531]  ? __get_vm_area_node+0x2f0/0x350
[  266.618459][ T8531]  ? __get_vm_area_node+0x22b/0x350
[  266.618481][ T8531]  __vmalloc_node_range_noprof+0xfa2/0x1420
[  266.618503][ T8531]  ? kfree+0x22b/0x6d0
[  266.618528][ T8531]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  266.618549][ T8531]  ? lock_acquire+0x1d1/0x380
[  266.618567][ T8531]  ? find_held_lock+0x2b/0x80
[  266.618588][ T8531]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  266.618607][ T8531]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  266.618633][ T8531]  ? avc_has_perm_noaudit+0x145/0x3b0
[  266.618659][ T8531]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  266.618678][ T8531]  __vmalloc_node_noprof+0xad/0xf0
[  266.618697][ T8531]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  266.618719][ T8531]  __vmalloc_noprof+0xa3/0x120
[  266.618738][ T8531]  ? __pfx___vmalloc_noprof+0x10/0x10
[  266.618760][ T8531]  ? rcu_is_watching+0x13/0xc0
[  266.618780][ T8531]  ? cap_capable+0x107/0x430
[  266.618804][ T8531]  bpf_prog_alloc_no_stats+0x59/0x690
[  266.618822][ T8531]  ? security_capable+0x80/0x260
[  266.618845][ T8531]  bpf_prog_alloc+0x3b/0x200
[  266.618862][ T8531]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  266.618881][ T8531]  bpf_prog_load+0x49e/0x2a80
[  266.618906][ T8531]  ? __pfx_bpf_prog_load+0x10/0x10
[  266.618943][ T8531]  __sys_bpf+0x1f46/0x4a30
[  266.618964][ T8531]  ? __pfx___sys_bpf+0x10/0x10
[  266.618980][ T8531]  ? find_held_lock+0x2b/0x80
[  266.619000][ T8531]  ? get_pid_task+0xfc/0x250
[  266.619020][ T8531]  ? get_pid_task+0xfc/0x250
[  266.619046][ T8531]  ? find_held_lock+0x2b/0x80
[  266.619072][ T8531]  ? rcu_read_lock_any_held+0x6a/0x90
[  266.619094][ T8531]  ? find_held_lock+0x2b/0x80
[  266.619114][ T8531]  ? ksys_write+0x190/0x250
[  266.619130][ T8531]  ? ksys_write+0x190/0x250
[  266.619145][ T8531]  ? lock_acquire+0x1d1/0x380
[  266.619175][ T8531]  ? fput+0x7c/0x100
[  266.619193][ T8531]  ? ksys_write+0x1ac/0x250
[  266.619211][ T8531]  ? __x64_sys_bpf+0xce/0x140
[  266.619225][ T8531]  __x64_sys_bpf+0xce/0x140
[  266.619241][ T8531]  ? do_syscall_64+0xae/0x790
[  266.619262][ T8531]  do_syscall_64+0x123/0x790
[  266.619284][ T8531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.619300][ T8531] RIP: 0033:0x7f325919e159
[  266.619313][ T8531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.619327][ T8531] RSP: 002b:00007f325a0aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  266.619342][ T8531] RAX: ffffffffffffffda RBX: 00007f3259425fa0 RCX: 00007f325919e159
[  266.619352][ T8531] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  266.619362][ T8531] RBP: 00007f325a0aa090 R08: 0000000000000000 R09: 0000000000000000
[  266.619371][ T8531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.619380][ T8531] R13: 00007f3259426038 R14: 00007f3259425fa0 R15: 00007ffe6e499708
[  266.619401][ T8531]  </TASK>
[  266.619453][ T8531] Mem-Info:
[  266.619460][ T8531] active_anon:18340 inactive_anon:0 isolated_anon:0
[  266.619460][ T8531]  active_file:16 inactive_file:62646 isolated_file:0
[  266.619460][ T8531]  unevictable:0 dirty:407 writeback:0
[  266.619460][ T8531]  slab_reclaimable:11885 slab_unreclaimable:98318
[  266.619460][ T8531]  mapped:35621 shmem:8291 pagetables:1449
[  266.619460][ T8531]  sec_pagetables:0 bounce:0
[  266.619460][ T8531]  kernel_misc_reclaimable:0
[  266.619460][ T8531]  free:1279458 free_pcp:17174 free_cma:0
[  266.619497][ T8531] Node 0 active_anon:73360kB inactive_anon:0kB active_file:64kB inactive_file:250380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142484kB dirty:1624kB writeback:0kB shmem:33164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13004kB pagetables:5696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  266.619536][ T8531] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  266.619573][ T8531] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  266.619615][ T8531] lowmem_reserve[]: 0 2470 2470 2470 2470
[  266.619641][ T8531] Node 0 DMA32 free:1152284kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:73360kB inactive_anon:0kB active_file:64kB inactive_file:250380kB unevictable:0kB writepending:1624kB zspages:0kB present:3129332kB managed:2530164kB mlocked:0kB bounce:0kB free_pcp:68696kB local_pcp:33948kB free_cma:0kB
[  266.619691][ T8531] lowmem_reserve[]: 0 0 0 0 0
[  266.619716][ T8531] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  266.619755][ T8531] lowmem_reserve[]: 0 0 0 0 0
[  266.619780][ T8531] Node 1 Normal free:3950188kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  266.619821][ T8531] lowmem_reserve[]: 0 0 0 0 0
[  266.619846][ T8531] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  266.619934][ T8531] Node 0 DMA32: 1016*4kB (UME) 587*8kB (UM) 365*16kB (UM) 256*32kB (UME) 465*64kB (UME) 236*128kB (UME) 116*256kB (UME) 69*512kB (UME) 27*1024kB (UME) 7*2048kB (UME) 235*4096kB (UM) = 1152328kB
[  266.620054][ T8531] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  266.620127][ T8531] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 4*16kB (UM) 12*32kB (UM) 8*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 962*4096kB (M) = 3950188kB
[  266.620298][ T8531] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  266.620311][ T8531] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  266.620323][ T8531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  266.620334][ T8531] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  266.620346][ T8531] 70949 total pagecache pages
[  266.620351][ T8531] 0 pages in swap cache
[  266.620356][ T8531] Free swap  = 124996kB
[  266.620362][ T8531] Total swap = 124996kB
[  266.620368][ T8531] 2097051 pages RAM
[  266.620373][ T8531] 0 pages HighMem/MovableOnly
[  266.620378][ T8531] 432876 pages reserved
[  266.620383][ T8531] 0 pages cma reserved
[  267.585930][ T5776] usb 2-1: USB disconnect, device number 40
[  268.048547][  T189] usb 6-1: USB disconnect, device number 32
[  268.049848][  T189] qcserial 6-1:0.6: device disconnected
[  268.367707][ T8558] netlink: 'syz.1.696': attribute type 12 has an invalid length.
[  268.986666][  T189] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  269.171954][  T189] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  269.185192][  T189] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  269.185370][  T189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  269.237627][  T189] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  269.237688][  T189] usb 6-1: Manufacturer: syz
[  269.317061][  T189] usb 6-1: config 0 descriptor??
[  269.416141][   T31] kauditd_printk_skb: 25 callbacks suppressed
[  269.416160][   T31] audit: type=1800 audit(1700000132.980:1142): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=147646 res=0 errno=0
[  269.449957][   T31] audit: type=1800 audit(1700000133.030:1143): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=147676 res=0 errno=0
[  269.450635][   T31] audit: type=1800 audit(1700000133.030:1144): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=147653 res=0 errno=0
[  269.452070][   T31] audit: type=1800 audit(1700000133.030:1145): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=147654 res=0 errno=0
[  269.598781][   T31] audit: type=1800 audit(1700000133.180:1146): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0
[  269.682729][   T31] audit: type=1400 audit(1700000133.260:1147): avc:  denied  { read } for  pid=8566 comm="syz.4.701" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1
[  269.684488][   T31] audit: type=1400 audit(1700000133.260:1148): avc:  denied  { open } for  pid=8566 comm="syz.4.701" path="/141/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1
[  269.710675][  T189] rc_core: IR keymap rc-hauppauge not found
[  269.710692][  T189] Registered IR keymap rc-empty
[  269.711575][  T189] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  269.758711][  T189] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input56
[  269.762923][   T31] audit: type=1800 audit(1700000133.340:1149): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=147675 res=0 errno=0
[  269.776553][   T31] audit: type=1800 audit(1700000133.350:1150): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=147655 res=0 errno=0
[  269.789854][   T31] audit: type=1800 audit(1700000133.370:1151): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=147696 res=0 errno=0
[  270.129068][ T8584] xt_hashlimit: size too large, truncated to 1048576
[  270.140052][ T8560] jffs2: notice: (8560) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  270.245843][  T189] usb 6-1: USB disconnect, device number 33
[  270.663142][ T8589] device-mapper: ioctl: name not supplied when creating device
[  270.832333][   T50] IPVS: starting estimator thread 0...
[  270.962727][ T8591] IPVS: using max 37 ests per chain, 88800 per kthread
[  271.442948][ T8590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.038754][ T8602] openvswitch: netlink: Message has 8 unknown bytes.
[  272.236944][ T8602] vlan2: left promiscuous mode
[  272.236996][ T8602] macvtap0: left promiscuous mode
[  272.240147][ T8602] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  272.391618][ T5603] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  272.538315][ T5603] usb 6-1: not running at top speed; connect to a high speed hub
[  272.538346][ T5603] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  272.539428][ T5603] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  272.539475][ T5603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.586711][ T5603] gspca_main: spca501-2.14.0 probing 0000:0000
[  272.740048][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'.
[  272.740071][ T8611] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  272.744108][ T5603] gspca_spca501: reg write: error -71
[  272.744123][ T5603] spca501 6-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  272.744180][ T5603] spca501 6-1:1.0: probe with driver spca501 failed with error -22
[  272.744914][ T5603] uvcvideo 6-1:1.0: Found UVC 1.00 device <unnamed> (0000:0000)
[  272.797424][ T5603] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  272.798137][ T5603] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  272.798181][ T5603] uvcvideo 6-1:1.1: Failed to initialize the device (-71).
[  272.798642][ T5603] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -71
[  272.837047][  T987] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  272.851826][ T5603] usb 6-1: USB disconnect, device number 34
[  272.926522][  T189] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  273.096678][  T987] usb 1-1: Using ep0 maxpacket: 8
[  273.097418][  T987] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  273.098378][  T987] usb 1-1: config 0 has an invalid interface number: 6 but max is 2
[  273.098399][  T987] usb 1-1: config 0 has an invalid interface number: 176 but max is 2
[  273.098416][  T987] usb 1-1: config 0 has no interface number 1
[  273.098430][  T987] usb 1-1: config 0 has no interface number 2
[  273.098475][  T987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.113870][  T987] usb 1-1: config 0 descriptor??
[  273.480434][  T987] qcserial 1-1:0.6: Qualcomm USB modem converter detected
[  273.593840][  T189] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  273.597821][  T189] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  273.597861][  T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.599271][  T189] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  273.599294][  T189] usb 3-1: Manufacturer: syz
[  273.601775][  T189] usb 3-1: config 0 descriptor??
[  273.708419][  T189] rc_core: IR keymap rc-hauppauge not found
[  273.708436][  T189] Registered IR keymap rc-empty
[  273.709323][  T189] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  273.715456][  T189] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input57
[  273.959853][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'.
[  274.284982][ T8609] jffs2: notice: (8609) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  274.322454][ T5716] usb 3-1: USB disconnect, device number 34
[  274.366953][ T5776] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  274.426454][  T189] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  274.517252][ T5776] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  274.518428][ T5776] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  274.518468][ T5776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.520271][ T5776] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  274.520292][ T5776] usb 6-1: Manufacturer: syz
[  274.522521][ T5776] usb 6-1: config 0 descriptor??
[  274.523735][   T31] kauditd_printk_skb: 54 callbacks suppressed
[  274.523748][   T31] audit: type=1800 audit(1700000138.100:1206): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148255 res=0 errno=0
[  274.525951][   T31] audit: type=1800 audit(1700000138.100:1207): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=148285 res=0 errno=0
[  274.572417][   T31] audit: type=1800 audit(1700000138.150:1208): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=148262 res=0 errno=0
[  274.573191][   T31] audit: type=1800 audit(1700000138.150:1209): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=148263 res=0 errno=0
[  274.616451][ T5776] rc_core: IR keymap rc-hauppauge not found
[  274.616466][ T5776] Registered IR keymap rc-empty
[  274.617291][ T5776] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  274.621116][ T5776] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input58
[  274.698856][  T189] usb 2-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7
[  274.699718][  T189] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  274.699739][  T189] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  274.699756][  T189] usb 2-1: config 0 has no interface number 0
[  274.699787][  T189] usb 2-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 84
[  274.699819][  T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.701026][   T31] audit: type=1800 audit(1700000138.280:1210): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=148284 res=0 errno=0
[  274.701976][   T31] audit: type=1800 audit(1700000138.280:1211): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=148264 res=0 errno=0
[  274.702907][  T189] usb 2-1: config 0 descriptor??
[  274.703472][ T8635] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  274.705146][   T31] audit: type=1800 audit(1700000138.280:1212): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148415 res=0 errno=0
[  274.729101][   T31] audit: type=1800 audit(1700000138.310:1213): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=148444 res=0 errno=0
[  274.733303][   T31] audit: type=1800 audit(1700000138.310:1214): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=148422 res=0 errno=0
[  274.734562][   T31] audit: type=1800 audit(1700000138.310:1215): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=148423 res=0 errno=0
[  274.990624][  T987] usb 6-1: USB disconnect, device number 35
[  275.030882][  T189] usb 2-1: USB disconnect, device number 41
[  275.964014][  T189] usb 1-1: USB disconnect, device number 26
[  276.112317][  T189] qcserial 1-1:0.6: device disconnected
[  276.382801][ T8643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.579485][  T139] Bluetooth: hci5: Frame reassembly failed (-84)
[  276.716573][ T5776] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  276.997642][ T5776] usb 6-1: Using ep0 maxpacket: 8
[  277.027070][ T5776] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  277.103306][ T5776] usb 6-1: config 0 has an invalid interface number: 6 but max is 2
[  277.103334][ T5776] usb 6-1: config 0 has an invalid interface number: 176 but max is 2
[  277.103354][ T5776] usb 6-1: config 0 has no interface number 1
[  277.103368][ T5776] usb 6-1: config 0 has no interface number 2
[  277.103430][ T5776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.402625][ T5776] usb 6-1: config 0 descriptor??
[  278.446684][  T189] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  278.597448][  T189] usb 1-1: not running at top speed; connect to a high speed hub
[  278.597476][  T189] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  278.598443][  T189] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  278.598488][  T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.611321][ T5776] qcserial 6-1:0.6: Qualcomm USB modem converter detected
[  278.649081][ T5598] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  278.658222][  T189] gspca_main: spca501-2.14.0 probing 0000:0000
[  278.915749][ T8670] FAULT_INJECTION: forcing a failure.
[  278.915749][ T8670] name failslab, interval 1, probability 0, space 0, times 0
[  278.915812][ T8670] CPU: 1 UID: 0 PID: 8670 Comm: syz.2.728 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  278.915837][ T8670] Tainted: [L]=SOFTLOCKUP
[  278.915844][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  278.915855][ T8670] Call Trace:
[  278.915861][ T8670]  <TASK>
[  278.915869][ T8670]  dump_stack_lvl+0x100/0x190
[  278.915901][ T8670]  should_fail_ex.cold+0x5/0xa
[  278.915927][ T8670]  should_failslab+0xc2/0x120
[  278.915952][ T8670]  __kmalloc_noprof+0xfc/0x840
[  278.915973][ T8670]  ? tomoyo_encode2+0xfb/0x3c0
[  278.915998][ T8670]  tomoyo_encode2+0xfb/0x3c0
[  278.916022][ T8670]  tomoyo_encode+0x29/0x50
[  278.916041][ T8670]  tomoyo_realpath_from_path+0x18c/0x690
[  278.916068][ T8670]  tomoyo_path_number_perm+0x23c/0x580
[  278.916094][ T8670]  ? tomoyo_path_number_perm+0x22e/0x580
[  278.916123][ T8670]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  278.916162][ T8670]  ? __lock_acquire+0x5c0/0x1f40
[  278.916193][ T8670]  ? __fget_files+0x34/0x3d0
[  278.916216][ T8670]  ? find_held_lock+0x2b/0x80
[  278.916241][ T8670]  ? hook_file_ioctl_common+0x140/0x440
[  278.916271][ T8670]  ? __fget_files+0x21f/0x3d0
[  278.916296][ T8670]  security_file_ioctl+0xd3/0x230
[  278.916318][ T8670]  __x64_sys_ioctl+0xb7/0x210
[  278.916339][ T8670]  do_syscall_64+0x123/0x790
[  278.916368][ T8670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.916385][ T8670] RIP: 0033:0x7f325919e159
[  278.916405][ T8670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  278.916421][ T8670] RSP: 002b:00007f325a089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  278.916440][ T8670] RAX: ffffffffffffffda RBX: 00007f3259426090 RCX: 00007f325919e159
[  278.916452][ T8670] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000005
[  278.916463][ T8670] RBP: 00007f325a089090 R08: 0000000000000000 R09: 0000000000000000
[  278.916473][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  278.916483][ T8670] R13: 00007f3259426128 R14: 00007f3259426090 R15: 00007ffe6e499708
[  278.916508][ T8670]  </TASK>
[  278.916666][ T8670] ERROR: Out of memory at tomoyo_realpath_from_path.
[  279.598309][  T189] gspca_spca501: reg write: error -71
[  279.598327][  T189] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  279.598394][  T189] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  279.599171][  T189] uvcvideo 1-1:1.0: Found UVC 1.00 device <unnamed> (0000:0000)
[  279.602467][  T189] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  279.602804][  T189] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  279.602846][  T189] uvcvideo 1-1:1.1: Failed to initialize the device (-71).
[  279.603304][  T189] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71
[  279.611903][  T189] usb 1-1: USB disconnect, device number 27
[  280.031042][   T31] kauditd_printk_skb: 42 callbacks suppressed
[  280.031077][   T31] audit: type=1800 audit(1700000143.590:1258): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.731" name="addr" dev="configfs" ino=21979 res=0 errno=0
[  280.031217][   T31] audit: type=1800 audit(1700000143.600:1259): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.731" name="addr" dev="configfs" ino=21979 res=0 errno=0
[  280.487124][  T189] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  280.677169][  T189] usb 1-1: New USB device found, idVendor=2040, idProduct=4200, bcdDevice= 1.00
[  280.678106][  T189] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  280.678138][  T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.685657][   T31] audit: type=1800 audit(1700000144.260:1260): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149021 res=0 errno=0
[  280.687037][  T189] em28xx 1-1:1.0: New device   @ 480 Mbps (2040:4200, interface 0, class 0)
[  280.687061][  T189] em28xx 1-1:1.0: Video interface 0 found:
[  280.709003][ T8681] jffs2: notice: (8681) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  280.715542][   T31] audit: type=1800 audit(1700000144.290:1261): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=149050 res=0 errno=0
[  280.715586][   T31] audit: type=1800 audit(1700000144.290:1262): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=149028 res=0 errno=0
[  280.715619][   T31] audit: type=1800 audit(1700000144.290:1263): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=149029 res=0 errno=0
[  280.715651][   T31] audit: type=1800 audit(1700000144.290:1264): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=149030 res=0 errno=0
[  280.737989][   T31] audit: type=1800 audit(1700000144.300:1265): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149070 res=0 errno=0
[  280.738040][   T31] audit: type=1400 audit(1700000144.300:1266): avc:  denied  { write } for  pid=8680 comm="syz.1.732" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  280.769217][ T5776] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  280.838288][ T5684] usb 6-1: USB disconnect, device number 36
[  280.893833][   T31] audit: type=1400 audit(1700000144.470:1267): avc:  denied  { bind } for  pid=8671 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  280.895221][ T5684] qcserial 6-1:0.6: device disconnected
[  280.990095][  T189] em28xx 1-1:1.0: unknown em28xx chip ID (0)
[  281.084790][  T189] em28xx 1-1:1.0: reading from i2c device at 0xa0 failed (error=-5)
[  281.084822][  T189] em28xx 1-1:1.0: board has no eeprom
[  281.100575][ T5776] usb 3-1: Using ep0 maxpacket: 8
[  281.105970][ T5776] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  281.116238][ T5776] usb 3-1: config 0 has an invalid interface number: 6 but max is 2
[  281.116261][ T5776] usb 3-1: config 0 has an invalid interface number: 176 but max is 2
[  281.116279][ T5776] usb 3-1: config 0 has no interface number 1
[  281.116295][ T5776] usb 3-1: config 0 has no interface number 2
[  281.116344][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.157057][ T5776] usb 3-1: config 0 descriptor??
[  281.163587][  T189] em28xx 1-1:1.0: Identified as Hauppauge WinTV USB 2 (card=4)
[  281.163614][  T189] em28xx 1-1:1.0: analog set to bulk mode.
[  281.164314][ T5603] em28xx 1-1:1.0: Registering V4L2 extension
[  281.186906][  T189] usb 1-1: USB disconnect, device number 28
[  281.192203][  T189] em28xx 1-1:1.0: Disconnecting em28xx
[  281.309412][ T8689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.360752][ T5603] em28xx 1-1:1.0: Config register raw data: 0xffffffed
[  281.360775][ T5603] em28xx 1-1:1.0: AC97 chip type couldn't be determined
[  281.360786][ T5603] em28xx 1-1:1.0: No AC97 audio processor
[  281.361000][ T5603] em28xx 1-1:1.0: em28xx_v4l2_init: em28xx_write_reg - msp34xx(1) failed! error [-19]
[  281.361162][ T5603] em28xx 1-1:1.0: Registering input extension
[  281.389734][ T5684] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  281.405973][ T5776] qcserial 3-1:0.6: Qualcomm USB modem converter detected
[  281.428200][ T5603] rc_core: IR keymap rc-hauppauge not found
[  281.428215][ T5603] Registered IR keymap rc-empty
[  281.470247][ T5603] rc rc0: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0
[  281.471379][ T5603] input: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0/input60
[  281.493819][ T5603] em28xx 1-1:1.0: Input extension successfully initialized
[  281.494360][  T189] em28xx 1-1:1.0: Closing input extension
[  281.578377][ T5684] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  281.579873][ T5684] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  281.579912][ T5684] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.584226][ T5684] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  281.584249][ T5684] usb 6-1: Manufacturer: syz
[  281.587026][ T5684] usb 6-1: config 0 descriptor??
[  281.691418][  T189] em28xx: Freeing device
[  281.806435][ T5684] rc_core: IR keymap rc-hauppauge not found
[  281.806452][ T5684] Registered IR keymap rc-empty
[  281.807311][ T5684] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  281.808806][ T5684] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input61
[  282.011784][ T8703] FAULT_INJECTION: forcing a failure.
[  282.011784][ T8703] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  282.011815][ T8703] CPU: 0 UID: 0 PID: 8703 Comm: syz.1.738 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  282.011845][ T8703] Tainted: [L]=SOFTLOCKUP
[  282.011852][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  282.011863][ T8703] Call Trace:
[  282.011869][ T8703]  <TASK>
[  282.011877][ T8703]  dump_stack_lvl+0x100/0x190
[  282.011908][ T8703]  should_fail_ex.cold+0x5/0xa
[  282.011935][ T8703]  _copy_from_user+0x2e/0xd0
[  282.011954][ T8703]  copy_msghdr_from_user+0x9f/0x4c0
[  282.011983][ T8703]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  282.012016][ T8703]  ? lock_acquire+0x1d1/0x380
[  282.012035][ T8703]  ? get_pid_task+0x2a/0x250
[  282.012062][ T8703]  ___sys_sendmsg+0x106/0x1e0
[  282.012090][ T8703]  ? __pfx____sys_sendmsg+0x10/0x10
[  282.012116][ T8703]  ? get_pid_task+0x106/0x250
[  282.012149][ T8703]  ? find_held_lock+0x2b/0x80
[  282.012190][ T8703]  __sys_sendmsg+0x160/0x210
[  282.012211][ T8703]  ? __pfx___sys_sendmsg+0x10/0x10
[  282.012246][ T8703]  do_syscall_64+0x123/0x790
[  282.012272][ T8703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.012291][ T8703] RIP: 0033:0x7f694319e159
[  282.012307][ T8703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  282.012325][ T8703] RSP: 002b:00007f6943faa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  282.012343][ T8703] RAX: ffffffffffffffda RBX: 00007f6943425fa0 RCX: 00007f694319e159
[  282.012356][ T8703] RDX: 0000000004040888 RSI: 0000200000000280 RDI: 0000000000000003
[  282.012367][ T8703] RBP: 00007f6943faa090 R08: 0000000000000000 R09: 0000000000000000
[  282.012377][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.012388][ T8703] R13: 00007f6943426038 R14: 00007f6943425fa0 R15: 00007fff4d4a1658
[  282.012413][ T8703]  </TASK>
[  282.291799][ T8705] kAFS: unable to lookup cell 'ÿ'
[  282.293475][ T8705] kAFS: unable to lookup cell '(,c¾Ì'
[  282.441009][ T8709] lo speed is unknown, defaulting to 1000
[  282.507748][ T8685] jffs2: notice: (8685) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  282.628712][ T5684] usb 6-1: USB disconnect, device number 37
[  282.645729][  T189] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  282.646203][ T5716] usb 3-1: USB disconnect, device number 35
[  282.695316][ T5716] qcserial 3-1:0.6: device disconnected
[  282.782890][ T8718] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  282.782908][ T8718] overlayfs: missing 'lowerdir'
[  282.817045][  T189] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  282.817081][  T189] usb 2-1: too many configurations: 86, using maximum allowed: 8
[  282.847754][  T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.847781][  T189] usb 2-1: Product: syz
[  282.847794][  T189] usb 2-1: Manufacturer: syz
[  282.847806][  T189] usb 2-1: SerialNumber: syz
[  283.136476][ T5716] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  283.229507][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.229835][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.248462][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.250258][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.287647][ T5716] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  283.288640][ T5716] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  283.288741][ T5716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.290397][ T5716] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  283.290417][ T5716] usb 1-1: Manufacturer: syz
[  283.293025][ T5716] usb 1-1: config 0 descriptor??
[  283.418428][ T5716] rc_core: IR keymap rc-hauppauge not found
[  283.418446][ T5716] Registered IR keymap rc-empty
[  283.423364][ T5716] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  283.449642][ T5716] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input62
[  283.591709][ T8729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.976533][ T5684] usb 3-1: new low-speed USB device number 36 using dummy_hcd
[  284.009706][ T8721] jffs2: notice: (8721) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  284.043523][ T5776] usb 1-1: USB disconnect, device number 29
[  284.136551][ T5684] usb 3-1: Invalid ep0 maxpacket: 32
[  284.266458][ T5684] usb 3-1: new low-speed USB device number 37 using dummy_hcd
[  284.372111][ T8741] netlink: 'syz.5.750': attribute type 1 has an invalid length.
[  284.427791][ T5684] usb 3-1: Invalid ep0 maxpacket: 32
[  284.428953][ T5684] usb usb3-port1: attempt power cycle
[  284.440214][ T8741] 8021q: adding VLAN 0 to HW filter on device bond1
[  284.612397][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.750'.
[  284.612431][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.5.750'.
[  284.813418][ T5684] usb 3-1: new low-speed USB device number 38 using dummy_hcd
[  284.832134][ T5684] usb 3-1: Invalid ep0 maxpacket: 32
[  284.956429][ T5684] usb 3-1: new low-speed USB device number 39 using dummy_hcd
[  284.990851][ T5684] usb 3-1: Invalid ep0 maxpacket: 32
[  284.991077][ T5684] usb usb3-port1: unable to enumerate USB device
[  285.798124][   T31] kauditd_printk_skb: 80 callbacks suppressed
[  285.798141][   T31] audit: type=1800 audit(1700000149.380:1348): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15499 res=0 errno=0
[  285.875612][  T189] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  285.875660][  T189] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  285.875677][  T189] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  285.922342][  T189] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  285.929539][   T31] audit: type=1800 audit(1700000149.510:1349): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=150341 res=0 errno=0
[  285.929578][   T31] audit: type=1800 audit(1700000149.510:1350): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=150342 res=0 errno=0
[  285.929608][   T31] audit: type=1800 audit(1700000149.510:1351): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=150321 res=0 errno=0
[  285.941935][   T31] audit: type=1800 audit(1700000149.510:1352): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=150343 res=0 errno=0
[  285.963134][   T31] audit: type=1800 audit(1700000149.540:1353): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150364 res=0 errno=0
[  286.048183][  T189] usb 2-1: USB disconnect, device number 42
[  286.113782][   T31] audit: type=1800 audit(1700000149.690:1354): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150884 res=0 errno=0
[  286.123817][   T31] audit: type=1800 audit(1700000149.700:1355): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150895 res=0 errno=0
[  286.173072][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  286.181061][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  286.182072][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  286.182921][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  286.183339][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  286.248424][   T31] audit: type=1800 audit(1700000149.830:1356): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150914 res=0 errno=0
[  286.249793][   T31] audit: type=1800 audit(1700000149.830:1357): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150925 res=0 errno=0
[  287.493054][ T8786] jffs2: notice: (8786) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  287.522613][ T8753] lo speed is unknown, defaulting to 1000
[  287.621464][ T8789] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  287.621480][ T8789] overlayfs: missing 'lowerdir'
[  287.725735][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'.
[  287.744483][ T8792] xfrm1: entered promiscuous mode
[  287.744503][ T8792] xfrm1: entered allmulticast mode
[  287.744822][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'.
[  288.001042][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.001119][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.001226][ T8753] bridge_slave_0: entered allmulticast mode
[  288.004966][ T8753] bridge_slave_0: entered promiscuous mode
[  288.012265][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.012381][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.012482][ T8753] bridge_slave_1: entered allmulticast mode
[  288.017685][ T8753] bridge_slave_1: entered promiscuous mode
[  288.119530][ T8753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.133694][ T8753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  288.256996][ T5598] Bluetooth: hci5: command tx timeout
[  288.275874][ T8753] team0: Port device team_slave_0 added
[  288.289014][ T8753] team0: Port device team_slave_1 added
[  288.385569][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.385585][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  288.385607][ T8753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.404736][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.404753][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  288.404773][ T8753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.511193][ T8753] hsr_slave_0: entered promiscuous mode
[  288.512028][ T8753] hsr_slave_1: entered promiscuous mode
[  288.512539][ T8753] debugfs: 'hsr0' already exists in 'hsr'
[  288.512555][ T8753] Cannot create hsr debugfs directory
[  288.547593][ T5716] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  288.566649][  T987] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  288.678692][ T5684] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  288.696513][ T5716] usb 6-1: Using ep0 maxpacket: 8
[  288.698260][ T5716] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  288.699152][ T5716] usb 6-1: config 0 has an invalid interface number: 6 but max is 2
[  288.699173][ T5716] usb 6-1: config 0 has an invalid interface number: 176 but max is 2
[  288.699192][ T5716] usb 6-1: config 0 has no interface number 1
[  288.699206][ T5716] usb 6-1: config 0 has no interface number 2
[  288.699253][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.703094][ T5716] usb 6-1: config 0 descriptor??
[  288.728342][  T987] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  288.730672][  T987] usb 2-1: config 0 has an invalid interface number: 32 but max is 0
[  288.730692][  T987] usb 2-1: config 0 has no interface number 0
[  288.734524][  T987] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  288.734544][  T987] usb 2-1: Product: syz
[  288.737980][  T987] usb 2-1: config 0 descriptor??
[  288.749144][  T987] ftdi_sio 2-1:0.32: FTDI USB Serial Device converter detected
[  288.757526][  T987] usb 2-1: Detected FT232H
[  288.830566][ T5684] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  288.832979][ T5684] usb 3-1: config 0 has no interfaces?
[  288.839390][ T5684] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  288.839412][ T5684] usb 3-1: Manufacturer: syz
[  288.844760][ T5684] usb 3-1: config 0 descriptor??
[  288.907511][ T5716] qcserial 6-1:0.6: Qualcomm USB modem converter detected
[  288.953044][  T987] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  289.019153][ T8753] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  289.040377][ T8753] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  289.043110][ T8753] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  289.050804][ T8753] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  289.056823][ T8753] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  289.065649][ T8753] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  289.071707][ T8753] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  289.086974][ T8753] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  289.271853][ T8753] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.513223][ T8825] FAULT_INJECTION: forcing a failure.
[  289.513223][ T8825] name failslab, interval 1, probability 0, space 0, times 0
[  289.513254][ T8825] CPU: 0 UID: 0 PID: 8825 Comm: syz.0.766 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  289.513280][ T8825] Tainted: [L]=SOFTLOCKUP
[  289.513286][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  289.513296][ T8825] Call Trace:
[  289.513303][ T8825]  <TASK>
[  289.513310][ T8825]  dump_stack_lvl+0x100/0x190
[  289.513341][ T8825]  should_fail_ex.cold+0x5/0xa
[  289.513367][ T8825]  should_failslab+0xc2/0x120
[  289.513390][ T8825]  kmem_cache_alloc_noprof+0x92/0x6a0
[  289.513410][ T8825]  ? security_file_alloc+0x34/0x2c0
[  289.513435][ T8825]  security_file_alloc+0x34/0x2c0
[  289.513456][ T8825]  init_file+0x95/0x480
[  289.513479][ T8825]  alloc_empty_file+0x79/0x1c0
[  289.513504][ T8825]  path_openat+0xdb/0x2440
[  289.513530][ T8825]  ? __pfx_path_openat+0x10/0x10
[  289.513559][ T8825]  do_file_open+0x20e/0x430
[  289.513582][ T8825]  ? __pfx_do_file_open+0x10/0x10
[  289.513622][ T8825]  ? _raw_spin_unlock+0x28/0x50
[  289.513642][ T8825]  ? alloc_fd+0x471/0x7a0
[  289.513670][ T8825]  do_sys_openat2+0x10f/0x1e0
[  289.513702][ T8825]  ? __pfx_do_sys_openat2+0x10/0x10
[  289.513725][ T8825]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  289.513754][ T8825]  __x64_sys_openat+0x12d/0x210
[  289.513779][ T8825]  ? __pfx___x64_sys_openat+0x10/0x10
[  289.513811][ T8825]  do_syscall_64+0x123/0x790
[  289.513838][ T8825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.513857][ T8825] RIP: 0033:0x7f6f4ff5e98e
[  289.513872][ T8825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  289.513889][ T8825] RSP: 002b:00007f6f50e57b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  289.513908][ T8825] RAX: ffffffffffffffda RBX: 00007f6f50e586c0 RCX: 00007f6f4ff5e98e
[  289.513920][ T8825] RDX: 0000000000000001 RSI: 00007f6f50e57c00 RDI: ffffffffffffff9c
[  289.513931][ T8825] RBP: 00007f6f50e57c00 R08: 0000000000000000 R09: 0000000000000000
[  289.513941][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  289.513952][ T8825] R13: 00007f6f50226308 R14: 00007f6f50226270 R15: 00007ffc94d80eb8
[  289.513976][ T8825]  </TASK>
[  289.624235][ T5726] usb 6-1: USB disconnect, device number 38
[  289.626116][ T5726] qcserial 6-1:0.6: device disconnected
[  289.648671][ T8753] 8021q: adding VLAN 0 to HW filter on device team0
[  289.692836][ T6863] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.692920][ T6863] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.720002][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.720080][ T6863] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.720757][ T8827] raw_sendmsg: syz.1.762 forgot to set AF_INET. Fix it!
[  289.723063][  T987] ftdi_sio 2-1:0.32: GPIO initialisation failed: -32
[  289.734033][  T987] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  290.416660][ T5598] Bluetooth: hci5: command tx timeout
[  290.912532][ T8753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  291.324223][  T987] usb 2-1: USB disconnect, device number 43
[  291.335832][   T31] kauditd_printk_skb: 44 callbacks suppressed
[  291.335848][   T31] audit: type=1400 audit(1700000154.910:1402): avc:  denied  { ioctl } for  pid=8855 comm="syz.0.772" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb70c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  291.358353][  T987] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  291.360478][  T987] ftdi_sio 2-1:0.32: device disconnected
[  291.468395][ T8859] netlink: 'syz.1.773': attribute type 2 has an invalid length.
[  291.468415][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'.
[  291.497774][ T5726] usb 3-1: USB disconnect, device number 40
[  291.725609][ T8753] veth0_vlan: entered promiscuous mode
[  291.738976][ T8753] veth1_vlan: entered promiscuous mode
[  291.775720][ T8753] veth0_macvtap: entered promiscuous mode
[  291.786281][ T8753] veth1_macvtap: entered promiscuous mode
[  291.796550][  T987] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  291.804923][ T8753] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.834546][ T8753] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.867018][ T6088] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.867332][ T6088] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.867391][ T6088] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.867420][ T6088] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.968343][ T5726] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  291.969325][  T987] usb 2-1: Using ep0 maxpacket: 8
[  291.974110][  T987] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  291.981823][  T987] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  291.981845][  T987] usb 2-1: config 179 has no interface number 0
[  291.981876][  T987] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  291.981897][  T987] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  291.981919][  T987] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  291.981935][  T987] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  291.981965][  T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.990846][   T31] audit: type=1800 audit(1700000155.570:1403): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157445 res=0 errno=0
[  291.999892][ T8859] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  292.019995][   T31] audit: type=1800 audit(1700000155.590:1404): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157403 res=0 errno=0
[  292.043263][   T31] audit: type=1800 audit(1700000155.620:1405): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=157432 res=0 errno=0
[  292.054188][   T31] audit: type=1800 audit(1700000155.620:1406): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=157410 res=0 errno=0
[  292.054226][   T31] audit: type=1800 audit(1700000155.630:1407): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=157411 res=0 errno=0
[  292.067223][   T31] audit: type=1800 audit(1700000155.640:1408): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=157412 res=0 errno=0
[  292.092719][   T31] audit: type=1800 audit(1700000155.670:1409): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15499 res=0 errno=0
[  292.105103][   T31] audit: type=1800 audit(1700000155.680:1410): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157464 res=0 errno=0
[  292.146725][ T5726] usb 3-1: Using ep0 maxpacket: 8
[  292.147555][ T5726] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  292.155675][ T5726] usb 3-1: config 0 has an invalid interface number: 6 but max is 2
[  292.155697][ T5726] usb 3-1: config 0 has an invalid interface number: 176 but max is 2
[  292.155714][ T5726] usb 3-1: config 0 has no interface number 1
[  292.155728][ T5726] usb 3-1: config 0 has no interface number 2
[  292.155770][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.161469][ T5726] usb 3-1: config 0 descriptor??
[  292.163377][   T31] audit: type=1800 audit(1700000155.740:1411): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157645 res=0 errno=0
[  292.233992][  T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.234010][  T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.351507][  T987] usb 2-1: USB disconnect, device number 44
[  292.387917][ T5726] qcserial 3-1:0.6: Qualcomm USB modem converter detected
[  292.405490][ T8876] netlink: 'syz.0.777': attribute type 1 has an invalid length.
[  292.433406][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.433436][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.486833][ T5598] Bluetooth: hci5: command tx timeout
[  292.503599][ T8876] 8021q: adding VLAN 0 to HW filter on device bond5
[  294.566972][ T5598] Bluetooth: hci5: command tx timeout
[  294.586198][ T8879] bond5: (slave geneve2): making interface the new active one
[  294.618063][ T8879] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  294.806782][   T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.806847][   T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.806877][   T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.812200][   T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.849699][ T5725] usb 3-1: USB disconnect, device number 41
[  294.850813][ T5725] qcserial 3-1:0.6: device disconnected
[  294.918396][ T5776] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  295.088579][ T5776] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  295.090718][ T5776] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  295.090758][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.094103][ T5776] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  295.094118][ T5776] usb 2-1: Manufacturer: syz
[  295.097713][ T5776] usb 2-1: config 0 descriptor??
[  295.258764][ T5776] rc_core: IR keymap rc-hauppauge not found
[  295.258782][ T5776] Registered IR keymap rc-empty
[  295.259618][ T5776] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  295.261155][ T5776] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input63
[  295.309154][ T7272] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  295.497386][ T8902] netlink: 'syz.6.783': attribute type 1 has an invalid length.
[  295.497605][ T5725] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  295.508296][ T7272] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  295.509270][ T7272] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  295.509305][ T7272] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.510132][ T7272] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  295.510149][ T7272] usb 6-1: Manufacturer: syz
[  295.513893][ T7272] usb 6-1: config 0 descriptor??
[  295.636621][ T7272] rc_core: IR keymap rc-hauppauge not found
[  295.636637][ T7272] Registered IR keymap rc-empty
[  295.638402][ T7272] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1
[  295.641409][ T7272] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input64
[  295.657610][ T5725] usb 1-1: Using ep0 maxpacket: 8
[  295.658209][ T5725] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  295.659424][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.783'.
[  295.659451][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.783'.
[  295.681350][ T5725] usb 1-1: config 0 has an invalid interface number: 6 but max is 2
[  295.681376][ T5725] usb 1-1: config 0 has an invalid interface number: 176 but max is 2
[  295.681396][ T5725] usb 1-1: config 0 has no interface number 1
[  295.681411][ T5725] usb 1-1: config 0 has no interface number 2
[  295.681482][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.758076][ T5725] usb 1-1: config 0 descriptor??
[  295.792349][ T8886] jffs2: notice: (8886) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  295.824390][ T8909] loop3: detected capacity change from 0 to 7
[  295.842049][ T8909]  loop3: p1
[  295.842071][ T8909] loop3: partition table partially beyond EOD, truncated
[  295.867054][ T8909] loop3: p1 size 1919251295 extends beyond EOD, truncated
[  295.890871][ T7272] usb 2-1: USB disconnect, device number 45
[  295.973905][ T5725] qcserial 1-1:0.6: Qualcomm USB modem converter detected
[  296.122959][ T5604] udevd[5604]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  296.271689][ T5716] usb 6-1: USB disconnect, device number 39
[  296.368788][   T31] kauditd_printk_skb: 74 callbacks suppressed
[  296.368807][   T31] audit: type=1800 audit(1700000159.940:1486): pid=8920 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.788" name="map_device" dev="sysfs" ino=21051 res=0 errno=0
[  296.370854][ T8920] rnbd_client L607: Mapping device / on session s+, (access_mode: rw, nr_poll_queues: 0)
[  296.370899][ T8920] rnbd_client L1256: Session s+ not found, and path parameter not given
[  296.426602][ T7272] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  296.498596][   T31] audit: type=1800 audit(1700000160.080:1487): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15622 res=0 errno=0
[  296.577160][ T7272] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  296.578086][ T7272] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  296.578125][ T7272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.579021][ T7272] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  296.579041][ T7272] usb 3-1: Manufacturer: syz
[  296.581908][ T7272] usb 3-1: config 0 descriptor??
[  296.585517][   T31] audit: type=1800 audit(1700000160.160:1488): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158792 res=0 errno=0
[  296.595927][   T31] audit: type=1800 audit(1700000160.170:1489): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=158822 res=0 errno=0
[  296.595971][   T31] audit: type=1800 audit(1700000160.170:1490): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=158799 res=0 errno=0
[  296.596006][   T31] audit: type=1800 audit(1700000160.170:1491): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=158800 res=0 errno=0
[  296.756547][ T7272] rc_core: IR keymap rc-hauppauge not found
[  296.756572][ T7272] Registered IR keymap rc-empty
[  296.757448][ T7272] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  296.760469][ T7272] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input65
[  296.809821][   T31] audit: type=1800 audit(1700000160.390:1492): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=158821 res=0 errno=0
[  296.810396][   T31] audit: type=1800 audit(1700000160.390:1493): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=158801 res=0 errno=0
[  296.838096][   T31] audit: type=1800 audit(1700000160.400:1494): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158842 res=0 errno=0
[  296.838140][   T31] audit: type=1800 audit(1700000160.400:1495): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158861 res=0 errno=0
[  297.054434][ T5725] usb 1-1: USB disconnect, device number 30
[  297.075152][ T5725] qcserial 1-1:0.6: device disconnected
[  297.227250][ T8916] jffs2: notice: (8916) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  297.259497][ T5726] usb 3-1: USB disconnect, device number 42
[  297.345213][ T8941] netlink: 550 bytes leftover after parsing attributes in process `syz.5.792'.
[  299.730405][ T5726] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  299.878919][ T5726] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  299.879814][ T5726] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  299.879843][ T5726] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  299.880667][ T5726] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  299.880692][ T5726] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  299.882529][ T5726] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.882552][ T5726] usb 7-1: Product: syz
[  299.882566][ T5726] usb 7-1: Manufacturer: syz
[  299.882581][ T5726] usb 7-1: SerialNumber: syz
[  299.994878][ T5726] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected
[  300.615425][ T5726] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  300.727248][ T5726] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  300.880846][ T8970] netlink: 48 bytes leftover after parsing attributes in process `syz.5.801'.
[  300.900554][ T8972] Illegal XDP return value 4294967282 on prog  (id 53) dev syz_tun, expect packet loss!
[  300.984526][ T8970] netlink: 'syz.5.801': attribute type 4 has an invalid length.
[  300.984546][ T8970] netlink: 13183 bytes leftover after parsing attributes in process `syz.5.801'.
[  301.037035][ T8952] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90
[  301.059301][ T5726] usb 7-1: USB disconnect, device number 2
[  301.095583][ T5726] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  301.130788][ T5726] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  301.132971][ T5726] ti_usb_3410_5052 7-1:2.0: device disconnected
[  301.499065][   T31] kauditd_printk_skb: 48 callbacks suppressed
[  301.499083][   T31] audit: type=1800 audit(1700000165.080:1544): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15499 res=0 errno=0
[  301.615742][   T31] audit: type=1400 audit(1700000165.190:1545): avc:  denied  { write } for  pid=8996 comm="syz.2.808" name="namespaces" dev="configfs" ino=17938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  301.630537][ T8998] nvmet: adding nsid 1 to subsystem testsubsys
[  301.634911][   T31] audit: type=1800 audit(1700000165.200:1546): pid=8998 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.808" name="buffered_io" dev="configfs" ino=23231 res=0 errno=0
[  301.647188][   T31] audit: type=1800 audit(1700000165.230:1547): pid=8998 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.808" name="device_path" dev="configfs" ino=23232 res=0 errno=0
[  301.703557][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'.
[  301.708170][   T31] audit: type=1400 audit(1700000165.280:1548): avc:  denied  { connect } for  pid=8996 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  301.771181][   T31] audit: type=1800 audit(1700000165.350:1549): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.808" name="enable" dev="configfs" ino=23729 res=0 errno=0
[  301.773368][ T9005] 
[  301.796874][ T9005] ======================================================
[  301.803885][ T9005] WARNING: possible circular locking dependency detected
[  301.810898][ T9005] syzkaller #0 Tainted: G             L     
[  301.816870][ T9005] ------------------------------------------------------
[  301.823877][ T9005] syz.2.808/9005 is trying to acquire lock:
[  301.829784][ T9005] ffff888040962798 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350
[  301.840406][ T9005] 
[  301.840406][ T9005] but task is already holding lock:
[  301.847765][ T9005] ffff88804fcf7068 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x650
[  301.856736][ T9005] 
[  301.856736][ T9005] which lock already depends on the new lock.
[  301.856736][ T9005] 
[  301.867158][ T9005] 
[  301.867158][ T9005] the existing dependency chain (in reverse order) is:
[  301.872271][   T31] audit: type=1800 audit(1700000165.410:1550): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15622 res=0 errno=0
[  301.897061][ T9005] 
[  301.897061][ T9005] -> #2 (&subsys->lock){+.+.}-{4:4}:
[  301.904561][ T9005]        lock_acquire+0x1d1/0x380
[  301.909579][ T9005]        __mutex_lock+0x1a4/0x1bd0
[  301.914674][ T9005]        nvmet_ns_buffered_io_store+0xc0/0x1e0
[  301.920816][ T9005]        configfs_write_iter+0x302/0x4e0
[  301.926436][ T9005]        vfs_write+0x6af/0x1050
[  301.931274][ T9005]        ksys_write+0x12a/0x250
[  301.936102][ T9005]        do_syscall_64+0x123/0x790
[  301.941193][ T9005]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.947586][ T9005] 
[  301.947586][ T9005] -> #1 (&p->frag_sem){.+.+}-{4:4}:
[  301.954949][ T9005]        lock_acquire+0x1d1/0x380
[  301.959955][ T9005]        down_read+0x99/0x4c0
[  301.964614][ T9005]        __configfs_open_file+0xe8/0x9c0
[  301.970232][ T9005]        do_dentry_open+0x6ab/0x14d0
[  301.975498][ T9005]        vfs_open+0x82/0x3f0
[  301.980069][ T9005]        dentry_open+0x71/0xd0
[  301.984816][ T9005]        ima_calc_file_hash+0xe1/0x380
[  301.990253][ T9005]        ima_collect_measurement+0x94f/0xb30
[  301.996212][ T9005]        process_measurement+0xdfe/0x2350
[  302.001908][ T9005]        ima_file_check+0xc3/0x110
[  302.007001][ T9005]        security_file_post_open+0xc4/0x210
[  302.012873][ T9005]        path_openat+0x5cd/0x2440
[  302.017879][ T9005]        do_file_open+0x20e/0x430
[  302.022884][ T9005]        do_sys_openat2+0x10f/0x1e0
[  302.028064][ T9005]        __x64_sys_openat+0x12d/0x210
[  302.033417][ T9005]        do_syscall_64+0x123/0x790
[  302.038512][ T9005]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.044907][ T9005] 
[  302.044907][ T9005] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[  302.053488][ T9005]        check_prev_add+0xeb/0xe60
[  302.058577][ T9005]        __lock_acquire+0x1528/0x1f40
[  302.063926][ T9005]        lock_acquire+0x1d1/0x380
[  302.068932][ T9005]        __mutex_lock+0x1a4/0x1bd0
[  302.074029][ T9005]        process_measurement+0x5ab/0x2350
[  302.079727][ T9005]        ima_file_check+0xc3/0x110
[  302.084814][ T9005]        security_file_post_open+0xc4/0x210
[  302.090686][ T9005]        path_openat+0x5cd/0x2440
[  302.095690][ T9005]        do_file_open+0x20e/0x430
[  302.100695][ T9005]        file_open_name+0x1c3/0x3e0
[  302.105876][ T9005]        filp_open+0x2e/0x50
[  302.110447][ T9005]        nvmet_file_ns_enable+0x95/0x420
[  302.116062][ T9005]        nvmet_ns_enable+0x43b/0x650
[  302.121324][ T9005]        nvmet_ns_enable_store+0x11e/0x160
[  302.127115][ T9005]        configfs_write_iter+0x302/0x4e0
[  302.132733][ T9005]        vfs_write+0x6af/0x1050
[  302.137579][ T9005]        ksys_write+0x12a/0x250
[  302.142409][ T9005]        do_syscall_64+0x123/0x790
[  302.147505][ T9005]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.153898][ T9005] 
[  302.153898][ T9005] other info that might help us debug this:
[  302.153898][ T9005] 
[  302.164100][ T9005] Chain exists of:
[  302.164100][ T9005]   &ima_iint_mutex_key[depth] --> &p->frag_sem --> &subsys->lock
[  302.164100][ T9005] 
[  302.177628][ T9005]  Possible unsafe locking scenario:
[  302.177628][ T9005] 
[  302.185050][ T9005]        CPU0                    CPU1
[  302.190389][ T9005]        ----                    ----
[  302.195730][ T9005]   lock(&subsys->lock);
[  302.199955][ T9005]                                lock(&p->frag_sem);
[  302.206608][ T9005]                                lock(&subsys->lock);
[  302.213344][ T9005]   lock(&ima_iint_mutex_key[depth]);
[  302.218692][ T9005] 
[  302.218692][ T9005]  *** DEADLOCK ***
[  302.218692][ T9005] 
[  302.226811][ T9005] locks held by syz.2.808/9005: 6, last CPU#0:
[  302.232942][ T9005]  #0: ffff888075a547f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  302.241984][ T9005]  #1: ffff88801eb04460 (sb_writers#15){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  302.251010][ T9005]  #2: ffff88807b307080 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0
[  302.260998][ T9005]  #3: ffff888023eb2f70 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0
[  302.270721][ T9005]  #4: ffffffff8ff58d28 (nvmet_config_sem){+.+.}-{4:4}, at: nvmet_ns_enable_store+0xa5/0x160
[  302.280877][ T9005]  #5: ffff88804fcf7068 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x650
[  302.290250][ T9005] 
[  302.290250][ T9005] stack backtrace:
[  302.296118][ T9005] CPU: 0 UID: 0 PID: 9005 Comm: syz.2.808 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  302.306867][ T9005] Tainted: [L]=SOFTLOCKUP
[  302.311169][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  302.321201][ T9005] Call Trace:
[  302.324466][ T9005]  <TASK>
[  302.327377][ T9005]  dump_stack_lvl+0x100/0x190
[  302.332039][ T9005]  print_circular_bug.cold+0x178/0x1be
[  302.337484][ T9005]  check_noncircular+0x146/0x160
[  302.342401][ T9005]  ? arch_stack_walk+0xa6/0xf0
[  302.347151][ T9005]  check_prev_add+0xeb/0xe60
[  302.351720][ T9005]  ? stack_trace_save+0x8e/0xc0
[  302.356558][ T9005]  __lock_acquire+0x1528/0x1f40
[  302.361394][ T9005]  lock_acquire+0x1d1/0x380
[  302.365875][ T9005]  ? process_measurement+0x5ab/0x2350
[  302.371226][ T9005]  ? __pfx___might_resched+0x10/0x10
[  302.376492][ T9005]  __mutex_lock+0x1a4/0x1bd0
[  302.381068][ T9005]  ? process_measurement+0x5ab/0x2350
[  302.386431][ T9005]  ? process_measurement+0x5ab/0x2350
[  302.391783][ T9005]  ? __pfx___mutex_lock+0x10/0x10
[  302.396789][ T9005]  ? __pfx___might_resched+0x10/0x10
[  302.402055][ T9005]  ? down_write+0x146/0x1f0
[  302.406546][ T9005]  ? process_measurement+0x5ab/0x2350
[  302.411893][ T9005]  process_measurement+0x5ab/0x2350
[  302.417070][ T9005]  ? avc_has_perm_noaudit+0x56/0x3b0
[  302.422337][ T9005]  ? find_held_lock+0x2b/0x80
[  302.426997][ T9005]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  302.432352][ T9005]  ? __pfx_process_measurement+0x10/0x10
[  302.437965][ T9005]  ? avc_has_perm+0x135/0x1e0
[  302.442625][ T9005]  ? __pfx_avc_has_perm+0x10/0x10
[  302.447632][ T9005]  ? hook_file_open+0x248/0x8e0
[  302.452474][ T9005]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  302.458790][ T9005]  ima_file_check+0xc3/0x110
[  302.463359][ T9005]  ? __pfx_ima_file_check+0x10/0x10
[  302.468538][ T9005]  security_file_post_open+0xc4/0x210
[  302.473891][ T9005]  path_openat+0x5cd/0x2440
[  302.478376][ T9005]  ? __pfx_path_openat+0x10/0x10
[  302.483293][ T9005]  ? kasan_save_stack+0x3f/0x50
[  302.488125][ T9005]  ? kasan_save_stack+0x30/0x50
[  302.492954][ T9005]  ? kasan_save_track+0x14/0x30
[  302.497783][ T9005]  ? __kasan_slab_alloc+0x89/0x90
[  302.502786][ T9005]  ? kmem_cache_alloc_noprof+0x269/0x6a0
[  302.508396][ T9005]  ? do_getname_kernel+0x5d/0x250
[  302.513401][ T9005]  ? filp_open+0x1d/0x50
[  302.517624][ T9005]  ? nvmet_file_ns_enable+0x95/0x420
[  302.522890][ T9005]  do_file_open+0x20e/0x430
[  302.527376][ T9005]  ? __pfx_do_file_open+0x10/0x10
[  302.532391][ T9005]  ? rcu_is_watching+0x13/0xc0
[  302.537138][ T9005]  file_open_name+0x1c3/0x3e0
[  302.541797][ T9005]  ? __pfx_file_open_name+0x10/0x10
[  302.546976][ T9005]  ? do_getname_kernel+0x5d/0x250
[  302.551982][ T9005]  ? __asan_memcpy+0x3c/0x60
[  302.556550][ T9005]  ? do_getname_kernel+0x1be/0x250
[  302.561643][ T9005]  filp_open+0x2e/0x50
[  302.565696][ T9005]  nvmet_file_ns_enable+0x95/0x420
[  302.570789][ T9005]  nvmet_ns_enable+0x43b/0x650
[  302.575533][ T9005]  nvmet_ns_enable_store+0x11e/0x160
[  302.580804][ T9005]  ? __pfx_nvmet_ns_enable_store+0x10/0x10
[  302.586596][ T9005]  ? configfs_write_iter+0x388/0x4e0
[  302.591868][ T9005]  configfs_write_iter+0x302/0x4e0
[  302.596967][ T9005]  vfs_write+0x6af/0x1050
[  302.601273][ T9005]  ? __pfx_configfs_write_iter+0x10/0x10
[  302.606890][ T9005]  ? __fget_files+0x34/0x3d0
[  302.611461][ T9005]  ? __pfx_vfs_write+0x10/0x10
[  302.616200][ T9005]  ? find_held_lock+0x2b/0x80
[  302.620865][ T9005]  ksys_write+0x12a/0x250
[  302.625171][ T9005]  ? __pfx_ksys_write+0x10/0x10
[  302.630004][ T9005]  do_syscall_64+0x123/0x790
[  302.634579][ T9005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.640453][ T9005] RIP: 0033:0x7f325919e159
[  302.644846][ T9005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  302.664433][ T9005] RSP: 002b:00007f325a089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  302.672824][ T9005] RAX: ffffffffffffffda RBX: 00007f3259426090 RCX: 00007f325919e159
[  302.680773][ T9005] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000000
[  302.688721][ T9005] RBP: 00007f325923503b R08: 0000000000000000 R09: 0000000000000000
[  302.696671][ T9005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  302.704620][ T9005] R13: 00007f3259426128 R14: 00007f3259426090 R15: 00007ffe6e499708
[  302.712573][ T9005]  </TASK>
[  302.820736][   T31] audit: type=1800 audit(1700000166.400:1551): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15499 res=0 errno=0
[  302.986454][ T5726] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  303.146799][ T5726] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  303.147688][ T5726] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  303.147719][ T5726] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.148460][ T5726] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  303.148484][ T5726] usb 7-1: Manufacturer: syz
[  303.151397][   T31] audit: type=1800 audit(1700000166.730:1552): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159342 res=0 errno=0
[  303.151432][   T31] audit: type=1800 audit(1700000166.730:1553): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=159372 res=0 errno=0
[  303.151764][ T5726] usb 7-1: config 0 descriptor??
[  303.286470][ T5726] rc_core: IR keymap rc-hauppauge not found
[  303.286487][ T5726] Registered IR keymap rc-empty
[  303.286934][ T5726] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  303.287599][ T5726] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input67
[  303.786127][ T9007] jffs2: notice: (9007) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[  303.820885][ T5893] usb 7-1: USB disconnect, device number 3
[  311.688528][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  311.688565][ T1310] ieee802154 phy1 wpan1: encryption failed: -22