last executing test programs:

4m30.638147593s ago: executing program 1 (id=795):
unshare(0x66000080)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', <r1=>0x0})
r2 = gettid()
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0)

4m25.929795064s ago: executing program 1 (id=805):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000001300)=@newtfilter={0x3504, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {0x0, 0xf}, {0x8, 0xfff2}}, [@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x19, 0xa}}]}}, @f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private0}]}}, @f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0x5}}]}}, @f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @remote}, @TCA_RSVP_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}]}}, @f_rsvp={{0x9}, {0x44c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0x4}}, @TCA_RSVP_POLICE={0x438, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xccb, 0x7ff, 0x3, 0x7ff, 0xfffffffe, 0x401, 0x6c36, 0x6, 0x39e6f040, 0x5a71, 0x7ff8, 0xfffffff5, 0x7, 0x8f000000, 0x6, 0x5, 0x2, 0x1, 0x1, 0x5, 0x0, 0x5, 0x9, 0x8000000, 0x0, 0x8, 0x9, 0xe, 0x7, 0x3, 0x0, 0x8, 0x6, 0x87fe, 0x3, 0x6, 0x2, 0x1000, 0x1, 0x4, 0x4, 0x100, 0xfffffff7, 0x0, 0x6, 0x820, 0x58f2, 0xfffff229, 0x5, 0x3, 0xff, 0x6, 0x5, 0xfffffffe, 0x5, 0x1, 0x100, 0x1, 0x10001, 0x7d72667, 0x9, 0xf, 0x7fffffff, 0x7, 0xfe800000, 0xc4a, 0x0, 0x5, 0x7, 0x7, 0x7ff, 0x2, 0x6, 0x2, 0x4, 0x571, 0x255d23cd, 0x5, 0x0, 0x0, 0x9, 0x7, 0xfffffffd, 0x9, 0x5, 0xf4, 0x86b, 0x9, 0x9, 0x2, 0x7, 0x0, 0xe9a, 0x3, 0x9, 0x1c00, 0x8, 0x9, 0x5, 0x4, 0x6, 0x4, 0xfffffff8, 0xff, 0xffff, 0x0, 0x8, 0x1, 0x5, 0xffffffff, 0x57, 0x1ff, 0x40821a11, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0x3ff, 0x1, 0x5, 0x8, 0x8000, 0x9, 0xffff3b70, 0x65e, 0x3, 0x9, 0x7, 0x2, 0xee8, 0x4f70, 0xfffffffa, 0x4, 0x748aebbb, 0x5, 0x2, 0xf, 0x1, 0x4, 0x7, 0x10000000, 0x3, 0xff, 0x4, 0x2, 0xe2, 0x7b, 0x2, 0x3a97, 0x7, 0x9, 0xfffeffff, 0x6, 0x3, 0xc02, 0x74, 0x1, 0x5, 0x3, 0x7f, 0x8, 0x2, 0x1, 0x6, 0x1, 0xffff, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x2, 0x8, 0xaaf8, 0x5, 0x180000, 0x158, 0x90c, 0x1, 0x5, 0x100, 0x8, 0x200, 0x0, 0x0, 0x2, 0x0, 0xead8, 0x1, 0x7, 0x2, 0x6b3, 0xdcf1, 0x100, 0xfffffffc, 0xfffffffb, 0x2, 0xc, 0x7, 0x6, 0xffff, 0x2, 0xfffffff1, 0x0, 0xffff2265, 0x3, 0x7, 0x5, 0x40, 0x3190, 0x8, 0x80, 0xfffff0f0, 0xffffffff, 0x9, 0x2, 0xd, 0xf862, 0x4, 0x2, 0x38, 0x9, 0x6, 0x0, 0x5, 0xff, 0x800, 0x5, 0x8, 0x3, 0x5, 0x3ff, 0x6, 0x2, 0x4, 0x101, 0xfff, 0x2, 0x8, 0x3, 0x800, 0x7fff, 0x2, 0x30c31da8, 0x7fffffff, 0x2, 0x28, 0x7144, 0x3, 0x4]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x47}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}, @f_rsvp6={{0xa}, {0x2f90, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private2}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xfff1}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_SRC={0x14, 0x3, @private1}, @TCA_RSVP_ACT={0x7d8, 0x6, [@m_mirred={0x100, 0xf, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x20, 0x7, 0x2, 0x9, 0xff}, 0x3}}]}, {0xb2, 0x6, "1582e1a3842081022e76caad9f4b6fe97af1a61aba91ad97ed6c22dfd7d704b2f74a069b2fdccc9e269c2e627e973ae3a37b72f3d63e623f1017b413d7a236a0a8b00886381463598db41ae0f4bcd29798e65d37a502ce8b475329746a49bc3decda09044cc3dd1e0834c52c636535ff27e6ed25fd5511b556e8dbe7b0997d4a90626dc98ae1e43f2ea85414f1809bedae0cf996ebc88a030fb7b588c101313f4fa72766eee9dce0d98dffc576f0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x14c, 0xe, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x9e4f, 0x8, 0xfffff95a, 0x4}, @loopback, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3f31, 0x7, 0x25, 0x8}, @multicast2, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6c, 0x32f, 0x0, 0x9, 0xd1c}, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x384, 0x7, 0x1, 0x1, 0x5}, @dev={0xac, 0x14, 0x14, 0x29}, @remote, 0xff}}]}, {0x82, 0x6, "10b987468ddd290a02ca983ed836489dad085bc70d5b0abdda49474cea5aa40eff008c8cdd9e5a95d0afd20fd272fe25b5ede761df4b760c576a302a8b4b8e13f9b5c13c1df0dcf34bcbc2eaf8a259f11a8ec4f2d0077265800596343520258aa54bc1a635cc89e214a1dab196a5ed00244e228f8dc83ded7dd7fb306fcc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xcc, 0x11, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x101, 0x1, 0x10, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x220, 0x6, 0x2, 0x6, 0xffffffff}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0xfffffeff, 0x8, 0x3, 0x800}, 0x4}}]}, {0x3d, 0x6, "5c3fc0067d7ab9d750cf93e0f9ce2027fa2f0970fb883179820ef1f5e275e9bdd9448a1663e4faaf459248bac6ff6f936b4d4828b8d0692770"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x1c0, 0x11, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4, 0x2, 0x6, 0xc}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x3000, 0x1, 0xcc61, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0x7, 0x20000000, 0x7, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x56c, 0x0, 0x10000000, 0x0, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6d043567, 0x9, 0x10000000, 0x0, 0x2}, 0x1}}]}, {0xf1, 0x6, "a05769fd07a0ca01a39fe9166a6aeed5f8703ba1f8a2e927afe9fa6b7614f7550a4357f2d30d4bc67d18482af3f7c3212f41aa78a110ce6bcef3597c105df46ab9fdbfc75941782a8bd716c7271824f7fdb96375168fddeca214791494816b5d36701703aa5427fc451936b81b10f31bffdf4247e2a199154e152fe2d6ae4e69f6f5c04770976be10fc5593d21cd2ebeb26489df6aed78629d4e16c72f905e11f75233833ca2c39304d3dcdd940fa0f381158c6737fdc4c69edeb25bf78b0f0c29679d24ce72ec68def70b7d6efb970f0746434f29e3b39a9682933cc824f455fb7ff9ff4c96808e2fbed5f683"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_bpf={0xe4, 0xb, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x8000, 0xff, 0x28, 0x8}, {0x72d0, 0x2d, 0x21}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0xf, 0x2, 0x6, 0x8}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x6, 0x20000000, 0x5, 0xff}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x40, 0x6, "628b19e7271da2517b915258b894ac33dd1b7dbbdbf41caba803cf702b00ec36a29cf17ed2d13d482038fbfc25b4ec8bae9a328b0ecf6ca1705e4670"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0x218, 0x1b, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x5, 0x4, 0x4}, @rand_addr=0x64010100, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb66, 0x5, 0x10000000, 0x4, 0x3}, @remote, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x5, 0x2, 0x9f, 0x4}, @empty, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x0, 0x7, 0x6, 0x101}, @multicast2, @rand_addr=0x64010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe63, 0x7, 0x0, 0x8e, 0xffffa2dc}, @broadcast, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x4, 0x9, 0x4}, @private=0xa010100, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x0, 0x7, 0x6, 0x9}, @local, @multicast1, 0xff000000}}]}, {0xd5, 0x6, "1baecb10d37420db5fb5e9a175e2ee2c6baf5ddc41a7ddd29b0e601ab60226db9fa302a24b50e465029a28b2faea7ff5b2e629147af94969df9755865e818ba8fee54118ed035564c37259eaa1474811fab25dc5a782d301481bff6205cf70cf926d18e7f1e3836bd119cb31dc7b13cd1b010c674f30b00c0f27b7af777f6a74436cc98db9e6173d93ea9b39cfe092eeaab0e42c82a4ac707c3780b4f8f391a504f0b368dc7eb52b48a6f99fe2d79f5a5e32c724542878c8f87d39969120d68a82999675bc41e12ff17781a8c21380eba4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_RSVP_ACT={0x2628, 0x6, [@m_connmark={0x150, 0x7, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc2, 0x401, 0x3, 0x0, 0x6c1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x10000000, 0x3, 0x2c7e8c67}, 0x3}}]}, {0xe5, 0x6, "5e7fb7d1dc5aa38fa0ce0da7f36558a5a29b5cb2e779a8e1611839acd3aede1e453fd50f5de5b471a56fa226426e057dfdcb8bd3533ecd67f11b860a1d78bde3a3e423854c2b7a496bbd85631b01ca2788e1b3a7a86c9052f6ebbb482bc2b6621fed5ee3def9239c9eae4bdcd1fd8c077eded95390348740e1b9035b0a7ee341a18009b53fcdfba3cf9d5ca51c619509e9c1cb384177d83d3c52d6d743063ca6ad1d195e1af176739bd8cf223e53a301473ff6f100079d21d92a203b295fde7f5892a1482286804c4037b47346a4c00fc491279693c381504cda29e3184ae8ed1a"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x1078, 0x7, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xaa027}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xed964}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xf8, 0x4, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80000001, 0x7, 0x5, 0xad5b, 0xc}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffffa}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x3, 0x3, 0x4}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}]}, {0x73, 0x6, "dc61db1159f722ec79f5052df9204903c635b8aedb2479846f926ef1e8e92bde0fb09694ae3b48274ec84debe29bd3ee2f05b8668a53f5f30e5b2095326cf5a93eeb622435a07415917688e59bc44ee6fe81c1b9bd0c5bf5aa4b8c9a159298b37c8044fe4600f4a773ca1629589bc2"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0xd4, 0x10, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x2, 0x3, 0x2, 0x5}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd0479}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}]}, {0x6c, 0x6, "54e8a4e38785f13fdd973bd11dbaec89320778cbdd0f783d97706895e6b9914474bb34ac87848bc3a1eb1c0977d8dddba61f7172e72e4281a9530c566d31f15fff918301ba7a575306828a472e36edb45a4c97a51275efbcb98249f26bd5afbe036f891ec2f36e03"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x1068, 0x19, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1000}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xf8, 0xc, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xb1, 0x6, "bd63254e4a9f5af3d31108959105af15b3d784a6bbfad2a9efa28c80a594740233ca58b67f4a27c6802a08c3c01662f988566df3333319686dd9920a7a8f2aac28872849e956602ff144edcccd233739e43ec43400c118b497921d95d67147adfbccfd64334570ca66df670255e2a38157173c599a0f0023209f1054eda301c1dc7bd63ab89d7e4660552865083dc1c519c0d06064b14b6d5e624856574bd273c63ff7dde44e630aa20a0e79cd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ife={0x130, 0x3, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @random="c9f8fe41d29f"}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xa2, 0x6, "b336ee28cf2d320b4f89d195639fc868143816b92614a8326447bdc73b19d0d1ae3cba7753b483dc76abc810fa2e28e24dcd52179ab73f28cc53073bb35fb71108202431f9d732fcf0615e92683f20d9e8c228b549ddf09748c893ccfde0548ca7a5e1b1625d8adbcdc3c411430b3a7670804c9bf29f0653e9df2a23a2b13147f191e317cf4e986f5e07ed2bcc6f1d451d51f141254ecd6dac8e2892f3d8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8001, 0x7, 0xfffffff7}, {0x0, 0x5, 0x5d67}, 0x1, 0xf2, 0xce}}, @TCA_RSVP_ACT={0x108, 0x6, [@m_skbmod={0x104, 0x8, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x37f1}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}]}, {0xaf, 0x6, "6a03269d71483b03f1e9f8afc7da6e08aa725ce5bc7414456931a032cd4cb822201c52519050d6550ceefc20fb0df40e11f059607c2b5e1b752afdee52dc7e5fc1be203d8e2af0aa0d90591402a4b32ef9a163ea024bc3b2051eeaf252bf93a688500cdc4e4e80f4d52682de170b02f6af321ef8fb86f53b2f3c4a535dd92ffa71824a343a21ec683e885b6290cfef979a900e7623322e49973c399ac2a22fc9acdcee928ca2c8ee6eafb3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x1, 0x7}, {0x388, 0x4, 0x4}, 0x0, 0x61, 0x5}}]}}, @f_rsvp={{0x9}, {0x54, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x4, 0x45}, {0x8, 0xd1, 0x4}, 0x73, 0x9, 0x9}}, @TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8000, 0xf, 0x4}, {0x2, 0x0, 0x3}, 0x4c, 0x7}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0xffff}}]}}]}, 0x3504}, 0x1, 0x0, 0x0, 0x810}, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x99}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
getsockname$packet(r3, 0x0, &(0x7f0000000380))
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x18, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x4, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
r4 = syz_usbip_server_init(0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000027ae9140ac055902b2f0000000010902"], 0x0)
write$usbip_server(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000300000001", @ANYBLOB="81db"], 0x35)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in6=@loopback}}}, &(0x7f0000000300)=0xe8)
r5 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@rdmsr={0x66, 0x18, {0x40000068}}], 0x18})

4m23.507503035s ago: executing program 1 (id=812):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x4, 0x8, 0x6})
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800010000000000000000000200000000000009000000000600150005d89693e7198f9fb1bcfd0f02ad90e8590000001800168014000100"], 0x3c}}, 0x0)

4m21.929236246s ago: executing program 1 (id=815):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0xb624}, [@ldst={0x1, 0x0, 0x2, 0x8, 0x2, 0x0, 0x8}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xd, 0x1, 0xc}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[0xffffffffffffffff], &(0x7f0000000480)=[{0x0, 0x3, 0x0, 0x4}, {0x9, 0x2, 0x10, 0x2}, {0x3, 0x4, 0x9, 0x4}, {0x3, 0x1, 0xd, 0x1}, {0x1, 0x1, 0xa, 0xa}, {0x5, 0x2, 0x0, 0x7}, {0x4, 0x2, 0x8}, {0x0, 0x1, 0x5, 0x1}, {0x2, 0x3, 0xe, 0x7}, {0x0, 0x1, 0x8, 0x3}], 0x10, 0x7}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff}, 0x50) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002240)=""/102400, 0x19000) (async)
setreuid(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async)
stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980))
getgroups(0x7, &(0x7f0000000b40)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee01]) (async)
mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r3, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r4 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) (async)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}})

4m19.007139797s ago: executing program 1 (id=821):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='binder\x00', 0x1214040, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0)

4m18.800096513s ago: executing program 1 (id=823):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x80000000, 0x8, 0xb, 0x4, 0x20, 0xd4, 0x2, 0x1, 0x42, 0x6, 0x7f, 0x0, 0x39cb}, {0x7d, 0x8, 0x3, 0x4, 0x8, 0xff, 0xa, 0x2, 0x49, 0x7, 0x4, 0xca, 0xfffffffffffffffb}, {0x0, 0x8, 0x9, 0xf8, 0x5, 0x80, 0x3, 0x2, 0x82, 0x6, 0xfe, 0x5, 0x6}], 0x7})
syz_80211_inject_frame(0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004)
r5 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00')
ioctl$NS_GET_PARENT(r5, 0x8008b705, 0x0)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000002240)=""/102400, 0x19000)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_CMAP(r7, 0x4b71, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000980))
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0x11)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000100)={0x10000, 0x116000, 0x8})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r9, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}}, 0x0)

4m6.029509835s ago: executing program 0 (id=854):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x56)
r3 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0xd, @win={{0x0, 0x0, 0x0, 0x3}, 0x0, 0x7, 0x0, 0x0, 0x0}})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10)
r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$selinux_access(r4, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000b40)=@assoc_value={0x0, 0x1}, 0x8)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000040)=""/185)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000180)={0x4, 0x7})

4m4.763840679s ago: executing program 0 (id=860):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xff7fffff, 0x0, 0x15, "ff00"})
ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000200)=0x2)
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0x3)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, 0x0, 0x0, &(0x7f000060c000/0x3000)=nil, 0x3000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x7, 0x0, 0x0, &(0x7f00005c8000/0x2000)=nil, 0x2000, 0x5})
ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, 0x2, 0xfffffffffffffffa, 0x3fff})
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)

4m3.842959654s ago: executing program 0 (id=863):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
kexec_load(0x18bf, 0x0, 0x0, 0x80000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)

4m3.522756976s ago: executing program 32 (id=823):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x80000000, 0x8, 0xb, 0x4, 0x20, 0xd4, 0x2, 0x1, 0x42, 0x6, 0x7f, 0x0, 0x39cb}, {0x7d, 0x8, 0x3, 0x4, 0x8, 0xff, 0xa, 0x2, 0x49, 0x7, 0x4, 0xca, 0xfffffffffffffffb}, {0x0, 0x8, 0x9, 0xf8, 0x5, 0x80, 0x3, 0x2, 0x82, 0x6, 0xfe, 0x5, 0x6}], 0x7})
syz_80211_inject_frame(0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004)
r5 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00')
ioctl$NS_GET_PARENT(r5, 0x8008b705, 0x0)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000002240)=""/102400, 0x19000)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_CMAP(r7, 0x4b71, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000980))
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0x11)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000100)={0x10000, 0x116000, 0x8})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r9, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}}, 0x0)

4m3.374528844s ago: executing program 0 (id=867):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x4, 0x0, 0x2, 0x8}, 0x10)
sendmmsg$alg(r1, &(0x7f00000015c0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001900)="0f0c48cab3ab455152e54b85bb30dec430bfe415ce73e8b7ea6cc4cf5f54a515325b69f2453680bea67fe339a66ab01d3345a1608602bec3d52aec645eaa16581377217f716f69c0280669810f5f465817aa5eea510dbad09b3fc0760ed69a17dc3e6696175352747836e7993450debc880abe4cfb2e186a3bd4151429712c1375621f6f97d716ff0c00519af9397bf64cc57d740ac1432633fcd2654acde856d0878352e3d593ee4ff0715057ff0e6c6a8de8c2944dd1224b199ea01a1f224091fd66182e516abc552aef5f0a7d27cd24c212fa89", 0xd5}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x80)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x14000, @local, 0x3}}}, 0x30)

4m2.690731446s ago: executing program 0 (id=869):
syz_open_dev$sndctrl(&(0x7f0000000200), 0x8003, 0x98405)
r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000180)={0xfffffffd, 0x6, 0x7, 0x8}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, 0x0, 0x0)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$FUSE(r7, &(0x7f00000024c0)={0x2020}, 0x2020)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r8=>0x0})
sendto$packet(r5, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1892f84d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r9 = fsmount(r0, 0x0, 0x8ce3afb70115b6f)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58)
ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0, 0x6000})
r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r10, 0x4008af74, &(0x7f0000000040)=ANY=[@ANYBLOB="81000000c40000001dc263b8737b02f1821094678522f15196eeb8fee957232864e774fd8e0df8e5067f1dfc44f57daaaaa4070686926f4f4da54fb821e87713095df3c3019bf0e6be3ae311bad879b99eb9113e2166490ee086b975937414ca4a93dea607dca0f5c54b3c1134bfa25b591e74ce3639f31cde8b594470c4027f11354c33d393ab43fb06374462cd860cf740a34072a5437961c9721734445bb1255265e790d81ad8f093138a56dfb6a3e28c797ca5c346ec0f540800000085dc620bce760c5d10adbffa7a71"])
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

3m57.395044665s ago: executing program 0 (id=882):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0x16, 0xa5, "8d8cd7d95ed9867c166ed0371fa5b6e582fd7ed24b844fe3f18439dc182b02688576561b9061c31155336ae25dfa5c50dede3f960430fdbafc2edc3d154b9bdaf8a3fc0eb5fa8133aa2c5b703e5279d56ba07af50d9c41aead67925b0e61b7dbce5c7f2109b1a4cdfd5d5aee84ff41de6e25e376ea14c5a93ba0449f0d9bc1b41e4c8fb5da2daae41d17956d6ae8c336fa49325f4115a6a173faf38e6aa0974e120ee6f183"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000400)={0x20, 0x81, 0x1, 'h'}, &(0x7f0000000440)={0x20, 0x82, 0x1, 'G'}, &(0x7f0000000480)={0x20, 0x83, 0x1, "89"}, &(0x7f00000004c0)={0x20, 0x84, 0x1, "ce"}, 0x0})
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES32], 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) (async)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async)
syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0x16, 0xa5, "8d8cd7d95ed9867c166ed0371fa5b6e582fd7ed24b844fe3f18439dc182b02688576561b9061c31155336ae25dfa5c50dede3f960430fdbafc2edc3d154b9bdaf8a3fc0eb5fa8133aa2c5b703e5279d56ba07af50d9c41aead67925b0e61b7dbce5c7f2109b1a4cdfd5d5aee84ff41de6e25e376ea14c5a93ba0449f0d9bc1b41e4c8fb5da2daae41d17956d6ae8c336fa49325f4115a6a173faf38e6aa0974e120ee6f183"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000400)={0x20, 0x81, 0x1, 'h'}, &(0x7f0000000440)={0x20, 0x82, 0x1, 'G'}, &(0x7f0000000480)={0x20, 0x83, 0x1, "89"}, &(0x7f00000004c0)={0x20, 0x84, 0x1, "ce"}, 0x0}) (async)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) (async)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES32], 0x15) (async)

3m42.355497891s ago: executing program 33 (id=882):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0x16, 0xa5, "8d8cd7d95ed9867c166ed0371fa5b6e582fd7ed24b844fe3f18439dc182b02688576561b9061c31155336ae25dfa5c50dede3f960430fdbafc2edc3d154b9bdaf8a3fc0eb5fa8133aa2c5b703e5279d56ba07af50d9c41aead67925b0e61b7dbce5c7f2109b1a4cdfd5d5aee84ff41de6e25e376ea14c5a93ba0449f0d9bc1b41e4c8fb5da2daae41d17956d6ae8c336fa49325f4115a6a173faf38e6aa0974e120ee6f183"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000400)={0x20, 0x81, 0x1, 'h'}, &(0x7f0000000440)={0x20, 0x82, 0x1, 'G'}, &(0x7f0000000480)={0x20, 0x83, 0x1, "89"}, &(0x7f00000004c0)={0x20, 0x84, 0x1, "ce"}, 0x0})
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES32], 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) (async)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async)
syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0x16, 0xa5, "8d8cd7d95ed9867c166ed0371fa5b6e582fd7ed24b844fe3f18439dc182b02688576561b9061c31155336ae25dfa5c50dede3f960430fdbafc2edc3d154b9bdaf8a3fc0eb5fa8133aa2c5b703e5279d56ba07af50d9c41aead67925b0e61b7dbce5c7f2109b1a4cdfd5d5aee84ff41de6e25e376ea14c5a93ba0449f0d9bc1b41e4c8fb5da2daae41d17956d6ae8c336fa49325f4115a6a173faf38e6aa0974e120ee6f183"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000400)={0x20, 0x81, 0x1, 'h'}, &(0x7f0000000440)={0x20, 0x82, 0x1, 'G'}, &(0x7f0000000480)={0x20, 0x83, 0x1, "89"}, &(0x7f00000004c0)={0x20, 0x84, 0x1, "ce"}, 0x0}) (async)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) (async)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES32], 0x15) (async)

3m25.324350176s ago: executing program 5 (id=954):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x140, 0x0, 0x0, 0xfffffffb, 0x10000, @value=r4}, 0x28)
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000080))
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
write(r0, &(0x7f00000001c0)="f75baf7d20bc86b311", 0x9)

3m24.412855846s ago: executing program 5 (id=960):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffff61)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
flock(r1, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

3m23.294376466s ago: executing program 5 (id=966):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000440)={'\x00', 0x7, 0x0, 0x3, 0x10, 0x7, <r1=>0xffffffffffffffff})
sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000002c0)=[{0x6, 0x1, 0xe, 0x7ffffffe}]})
shutdown(r0, 0x1)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES8], &(0x7f0000000680)=""/135, 0x8e, 0x87, 0x4, 0x3}, 0x28)
r5 = socket$tipc(0x1e, 0x2, 0x0)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
r7 = dup3(r5, r6, 0x0)
ioctl$SIOCX25SSUBSCRIP(r7, 0x89e1, &(0x7f00000000c0)={'\x00', 0x7, 0x4})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, r4}, 0x94)
socket$kcm(0x23, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f00000003c0)=0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)

3m21.995770478s ago: executing program 5 (id=968):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0xf4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000180)={0x32, 0x2, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0x1, [0xa]}}]}, 0x20)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800)

3m21.801168851s ago: executing program 5 (id=972):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/10)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='binder\x00', 0x1214040, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$netlink(0x10, 0x3, 0x0)
preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x2}], 0x3e8, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

3m20.501248776s ago: executing program 5 (id=978):
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r2, 0x4b44, 0x10000000000004)
add_key$fscrypt_provisioning(0x0, &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48, 0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
syz_emit_ethernet(0x5b, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0xc, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @multicast1, @broadcast, {[@lsrr={0x83, 0x17, 0x4e, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @private=0x7f, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x3, 0x8}]}}, '2'}}}}}, 0x0)
r5 = dup(r4)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0xc, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0)
ftruncate(r6, 0x200004)
sendfile(r5, r6, 0x0, 0x80001d00c0d1)
r8 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901)
ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f0000000080)=0x5)
ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000040)={0xc, 0x20008})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdc02, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x18, 0x1}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x0, 0xa0, 0x2}], @NL80211_ATTR_MESH_ID]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

3m5.447989385s ago: executing program 34 (id=978):
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r2, 0x4b44, 0x10000000000004)
add_key$fscrypt_provisioning(0x0, &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48, 0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
syz_emit_ethernet(0x5b, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0xc, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @multicast1, @broadcast, {[@lsrr={0x83, 0x17, 0x4e, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @private=0x7f, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x3, 0x8}]}}, '2'}}}}}, 0x0)
r5 = dup(r4)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0xc, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0)
ftruncate(r6, 0x200004)
sendfile(r5, r6, 0x0, 0x80001d00c0d1)
r8 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901)
ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f0000000080)=0x5)
ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000040)={0xc, 0x20008})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdc02, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x18, 0x1}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x0, 0xa0, 0x2}], @NL80211_ATTR_MESH_ID]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

2m15.679680827s ago: executing program 2 (id=1156):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0xffffffff, 0x0, r5}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83a", 0x79, 0x840, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000041a00"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r3, r6, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

2m14.718564109s ago: executing program 2 (id=1157):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@bridge_dellink={0x20, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4)
getsockopt$inet6_tcp_int(r4, 0x6, 0x17, 0x0, &(0x7f00000001c0))
sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2)
syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000a00300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r7 = socket$kcm(0x29, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94)
socket$kcm(0x2, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r6, r5})
close(r7)
pidfd_getfd(0xffffffffffffffff, r8, 0x0)
r9 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000280)='gid', 0x0, 0x0)

2m13.337283737s ago: executing program 2 (id=1160):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xc, "97"}]}}, 0x0}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000140))

2m9.874768615s ago: executing program 2 (id=1172):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000180)='./file1\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000032680)=""/102376, 0x18fe8)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$selinux_load(r3, &(0x7f00000001c0)={0xf97cff8c, 0x8, 'SE Linux', "9a58c0d20f99a0b3d9ecb03ccb0c5b"}, 0x1f)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r4 = gettid()
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x84}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffffff, 0x0)

2m9.093971903s ago: executing program 2 (id=1175):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff362}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xd312e8ef87b9c662}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000a00)=r2, 0x4)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x80)

2m8.523873068s ago: executing program 2 (id=1181):
prctl$PR_SET_ENDIAN(0x14, 0x2)
prctl$PR_SET_ENDIAN(0x14, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000180)=[{0x7f, 0x0, 0x1, 0xe665}, {0x81, 0x3, 0x1, 0x63b0000}, {0x3, 0x4, 0x5, 0x8}, {0x4, 0x4, 0x2, 0x6}, {0x9, 0x0, 0x3, 0x8}, {0x48, 0x3, 0x3, 0x8}]})
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c)
listen(r7, 0xb)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x9, &(0x7f0000001680)=0x4f673fd2, 0x4)
sendmmsg$inet6(r8, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x5, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000d0a0103ec4d59b775fb7e1e43156edd43ffe600000000000000000a0000010900020083797a31000000000900010073797a3100000000d88027bbfdc80d0279"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

2m7.26745052s ago: executing program 35 (id=1181):
prctl$PR_SET_ENDIAN(0x14, 0x2)
prctl$PR_SET_ENDIAN(0x14, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000180)=[{0x7f, 0x0, 0x1, 0xe665}, {0x81, 0x3, 0x1, 0x63b0000}, {0x3, 0x4, 0x5, 0x8}, {0x4, 0x4, 0x2, 0x6}, {0x9, 0x0, 0x3, 0x8}, {0x48, 0x3, 0x3, 0x8}]})
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c)
listen(r7, 0xb)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x9, &(0x7f0000001680)=0x4f673fd2, 0x4)
sendmmsg$inet6(r8, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x5, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000d0a0103ec4d59b775fb7e1e43156edd43ffe600000000000000000a0000010900020083797a31000000000900010073797a3100000000d88027bbfdc80d0279"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

10.255143116s ago: executing program 6 (id=1533):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYRES8=r0], 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES64, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES32=r0, @ANYRESDEC], 0x0)

8.446111098s ago: executing program 4 (id=1540):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf00e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae5"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x20000010)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0)

8.408919646s ago: executing program 6 (id=1541):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x26)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000080)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
getsockname$unix(r0, 0x0, &(0x7f00000000c0))
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005f4000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
socket$alg(0x26, 0x5, 0x0)
add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x4)
r2 = add_key$user(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$update(0x2, r2, &(0x7f0000000340), 0x0)
syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x17b}, &(0x7f0000000180), 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff8100010000000001907800000000ac1414aa110090780000000200"/42], 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}}}, 0x48)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x8, 0x700, 0xff, 0x7ff, {{0x5, 0x4, 0x1, 0x1f, 0x14, 0x66, 0x0, 0xa, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}})
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local})
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))
syz_clone3(&(0x7f0000000280)={0x100230000, &(0x7f0000000040), &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0), {0x37}, &(0x7f00000003c0)=""/142, 0x8e, &(0x7f0000000480)=""/248, &(0x7f0000000200)}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x4, r4, 0x3, &(0x7f0000000580))

6.969623372s ago: executing program 3 (id=1542):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@bridge_dellink={0x20, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x17, 0x0, &(0x7f00000001c0))
sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2)
r5 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r7 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r8 = socket$kcm(0x29, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94)
socket$kcm(0x2, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r7, r6})
close(r8)
r10 = syz_pidfd_open(r5, 0x0)
pidfd_getfd(r10, r9, 0x0)
r11 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000280)='gid', 0x0, 0x0)

6.919234357s ago: executing program 6 (id=1543):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x7fffffe, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x88}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490)

6.7450386s ago: executing program 7 (id=1544):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000380), 0x4003)
sendfile(r2, r0, &(0x7f0000000000)=0x8, 0x5)

6.714606872s ago: executing program 3 (id=1545):
r0 = socket$netlink(0x10, 0x3, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48)
mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf5040002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
r2 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x100000000000000, 0x0)
fsmount(r2, 0x0, 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES64], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x200080, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000000180))
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8922, &(0x7f0000000280)={'dummy0\x00'})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0)
ioctl$CEC_DQEVENT(r5, 0xc0506107, &(0x7f00000002c0)={0x0, 0x0, 0x0, @lost_msgs})
preadv(r5, 0x0, 0x0, 0x8003fe, 0x0)
semop(0x0, 0x0, 0x0)
semop(0x0, &(0x7f0000000000)=[{0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff])

6.122442147s ago: executing program 3 (id=1547):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_ts_info})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a5a8698dfa871c5165c14b6fb57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d00", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)

5.885071391s ago: executing program 3 (id=1549):
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x800000, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4e21, @remote}], 0x20)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syslog(0x4, &(0x7f00000001c0)=""/212, 0xd4)
socket$inet(0x2, 0x2, 0x2)

5.403836781s ago: executing program 7 (id=1550):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
mq_open(&(0x7f0000000180)='.\\\x00', 0x2, 0x40, 0x0) (async, rerun: 32)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
ptrace(0x10, r1) (async)
ptrace(0x10, r1)
ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) (async, rerun: 32)
syz_open_procfs$userns(r1, &(0x7f0000000040)) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 32)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, 0x0, 0x0, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0)
add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x34, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) (async)
pipe2$watch_queue(&(0x7f0000000300), 0x80) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (rerun: 32)

5.318804955s ago: executing program 4 (id=1551):
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000400)=""/102400, 0x19000)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00"], 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000042"], 0x14}}, 0x0)

5.247713167s ago: executing program 7 (id=1552):
socket(0x2, 0x80805, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xff7fffff, 0x0, 0x15, "ff00"})
ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000200)=0x2)
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0x3)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, 0x0, 0x0, &(0x7f000060c000/0x3000)=nil, 0x3000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x7, 0x0, 0x0, &(0x7f00005c8000/0x2000)=nil, 0x2000, 0x5})
ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, 0x2, 0xfffffffffffffffa, 0x3fff})
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)

4.976346914s ago: executing program 8 (id=1553):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x1000}) (fail_nth: 2)

4.441978704s ago: executing program 7 (id=1554):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83a", 0x79, 0x840, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000041a00"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r3, r5, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd606ed6c400442ffffc020000000000000000000000000000ff020000000000000000000000000001"], 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

4.343111675s ago: executing program 8 (id=1555):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)

3.728417057s ago: executing program 7 (id=1556):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES64, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES32=r0, @ANYRESDEC], 0x0)

2.881757801s ago: executing program 4 (id=1557):
io_setup(0x6, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
pipe2$9p(0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000080)=0xdddd0000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0)

2.829687956s ago: executing program 8 (id=1558):
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x2}}], 0x1, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2})
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb68d755d12873885f886046a2e5550caba204798bc956a8e35b04539a88965838ea21a464cd6511361959341849a8", 0x5c}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105b", 0x50}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e35842", 0x8d}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5", 0xb8}], 0x7}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.658833758s ago: executing program 3 (id=1559):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x77)

2.441475704s ago: executing program 8 (id=1560):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbacf, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xb9}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)

2.382881954s ago: executing program 4 (id=1561):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0xffffffff, 0x0, r5}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83a", 0x79, 0x840, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000041a00"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r3, r6, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd606ed6c400442ffffc020000000000000000000000000000ff020000000000000000000000000001"], 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

2.309726567s ago: executing program 8 (id=1562):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x28c00)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r6 = dup2(r5, r5)
ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000001c0)={0x14000000, 0xffffffff})
pselect6(0x40, &(0x7f0000000240)={0x9, 0x3, 0x7, 0x3, 0x9, 0x8, 0x3, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0xfffffffffffffff4, 0x7efc, 0x4, 0x1, 0x2, 0x10000b}, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x40010)

1.673686458s ago: executing program 4 (id=1563):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x129c81, 0x0)
ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x12)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x6, 0x3, "02e80400"})
syz_open_pts(r0, 0x40000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1.582530756s ago: executing program 8 (id=1564):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000))
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x40, 0x10}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xa3ab}, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x20, 0x11}, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000014c0)={0x34, &(0x7f0000001240)={0x20, 0x6, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x259, 0x0, 0x8000000000010002}]})
sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="11", 0x1, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x4, 0x6, @multicast}, 0x14)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7, '\x00', r6, r2, 0x2, 0x3, 0x3}, 0x50)
ftruncate(r2, 0x8008976)
r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r2, r2, 0x10, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f00000004c0)=r10, 0x4)
writev(r2, &(0x7f0000000880)=[{&(0x7f0000000600)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000000200)="f48ed488b79c19020b12c847a2b2bd6910d9e9dde186c648318dcc169dff39a3990286898efed16221dab719543a20fc028c0d910d5faa93e1681842fa9c6d5fe96a168e3320464326fbfd8a129db351f0d5f9a328a4358e5c0334de68436dd2b6c2502f45f248d2a7f0ebaafd021a8b306e63dd563b492896f4c09e6d5dc738b5bdc947bc7d209c1b04445155481e33fc1ef3329e34267522cae90ee707e7cbb9ca3065d53f2e86949582355a7b2cca99e1504cb2ff0c6ad674e7ceb632351c38ff3aacd22c389c43bcfeb4a4cbec9d41813f520eace7e54347a8dc9e44cd8687a97ce0ed8a2ced68318e8b8361db585ed78e80b2f7af86e42d9b8bc92b57d0851e056070e7628bb6301ff55f4452c12e3656d69e20591cc3276a8f1b28566da7939d3a45940b39", 0x128}, {&(0x7f0000000340)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f00000000c0)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f6", 0x43}, {&(0x7f0000000900)="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", 0x28a}], 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

1.286846445s ago: executing program 7 (id=1565):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="d00200002100000828bd7000fddbdf25170000006e3c16cb77f25034e763b9c97073e075bee897c43094cd164a0360c97f4e494640dedf33b5b9e7df3c4037d431dacce392f43291b4eb9fba039e6869c218a9d369b852a6db199d5d6a6919628201255eddb2853e778d43421e28c15a4b469eda6ff91ea166c27b645d1a280071d7103a6d8607cfa231f635c72956296084875285a54c6063ab9caf531ec5cac03f67839cecbcd0e780918dc565400a004600776c616e300000001400ca00fc02000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x24841}, 0x24060050)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c00000040000701feff"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0)
fchdir(r0)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00')
finit_module(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
iopl(0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
wait4(0x0, 0x0, 0x20000000, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=<r5=>0x0)
wait4(r5, 0x0, 0x8, &(0x7f0000000280))
r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0x1e, 0x6000, 0x0, 0x0}, {0x6, 0x4001, 0x0, 0x0}], 0x2})
syz_usb_control_io$hid(r4, &(0x7f0000000540)={0x24, &(0x7f0000000340)={0x40, 0x21, 0xf5, {0xf5, 0x4, "8b8d17344c84ca34dc16eedc0efa437d73674ef9f65efda6ece18ffea5a7c41134fea7d2c1a19673e1bb6842527a1b4f8b0dfdd8b2eca7028e83c87ac30b5838714c3998171bb02735824a17d1f2bb5cc91eaf16fa6cb3b995e191e78123daf76de063524bbec8c7291b73374be726bf27899fff60d523c8389303f2dd269e21170e0809da1b3f9421ed6ef399932b409473ec4b338d94898e0fa1868bed506e18b059dcec1372d8ba3beaa744e33e537500c9e47527c889629fbc2c62b95f1aab60522c510c4986a02dca204d349d689a2afb517f77f0b6e4840fa68547ec3a6eee78bf5cf701f0facf3cfdd465a07eb9e08b"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f00000004c0)={0x0, 0x22, 0x19, {[@local=@item_012={0x1, 0x2, 0xa, "fb"}, @main=@item_4={0x3, 0x0, 0x9, "a3178283"}, @local=@item_012={0x2, 0x2, 0x8, "97cf"}, @local=@item_4={0x3, 0x2, 0x3, "7f56031d"}, @global=@item_4={0x3, 0x1, 0xa, "f84be70a"}, @local=@item_4={0x3, 0x2, 0x9, "fc89f31a"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x14, 0xcb, 0x1, {0x22, 0x482}}}}, &(0x7f0000000a00)={0x2c, &(0x7f0000000a80)={0x60, 0x15, 0xf7, "319d36ea9ba0d21ac341113817b3661cf2bc4e941724d669b105dd85d25438ed7351c59bd4086842fd642c6ad8f698fe8214f8352e90f241ba7d18624267a339e39bfeafb67d5856f0b1bcb26e2622822434207369dbe589b0f80dfc2d9612f1811787b90d93827b18a45c876738ead9184f800d1e8ddf6cb41a059a0f6216c1d4bcfdb9dc9b85ed0e91ba03070e39383d8df909ca3069bdfbb3588a09915cb51fb631b59333036d05bdc34d85769d52f2ac9a431cd1ac54ced57cb5080d5294c85cd86788c347477eabeebd9c1efa5c0d8f2cd53c71804645328f77e79c698533f951d746efc0d57e7392faee0b507edbb7a795dc69fa"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "4cf598962be86065f002ed05793c15bb22a5d13fe9eb045a69ab7685c857237c0fdbfe3e769ded045f23f59cdd6cc7c3c50c1b13436544a9529463a5dfb6516be9ae9ae06aae01306b62fe0e36fb9ea3177e7951bc13444aeabbb7381250907906a0be0016d748d6a6126f867a53a1bec2108c91a8baf4cd736728f006990cdd4e856473e18723d4ee7b0fa6a5fec0d9d9630e5b9e782ed7c39bdd4a266b848f83685c0585db16dbe3564d815102c7d06c0730b814ccfc67533677bc40c863bee6c2bd4e3c11ff0e438e9898d53bee64c5005f36931e73c95962ee32cd9e553c9b749c32bf73"}, &(0x7f0000000640)={0x20, 0x3, 0x1}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r9=>0x0})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
r10 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r10, 0x4, &(0x7f0000000440)='macvtap\x00', 0x0, 0xffffffffffffffff)
statfs(&(0x7f0000000440)='./cgroup\x00', &(0x7f0000000480)=""/21)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

902.6617ms ago: executing program 6 (id=1566):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x102)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x640, 0x3f6e9e64, 0x34325241, 0x19, 0x0, 0x0, 0x9, 0x7, 0x3, 0x0, 0x1, 0x7}})

901.955474ms ago: executing program 6 (id=1567):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94)
socket(0x10, 0x6, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffeb7}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000280)=0x4, 0x4)
getpgid(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd \xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\x83P\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\xd66hv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfa\x87$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\xb9F,e\xfa\xd7\xa2\xeb\xb1\xc9\xbe#\x92\xf3\x19\xe6\x83(\xfe\xf8i\xb9\xc1\xa0w\xea\xbf\xe5\x8d\xe9\x14\x130\xc3\xa5|/_\t\x98\xc3\xa7\x95!\xdf*\a\xd7\xfcv|\xb3Zc\xcf~\xf6\xe2\xa86Q\x9a$\x80\x85\x8b\t\xbf\xe6(\x12\xe0\xe1e\x81x]a\x145\xa7\xd2\n\x11h\xb9\xf5g\xc4%&\xbaRy\x8f\x85Q\xb9W\xe5\x06\xe2\xb3ryk}\x86\xc6\x04\x03i\x10\xa8\xc4\xcd`\xb8\xcfT))\xb7\x15\b%\xc8uC(C\x01\x1by\xbf \x10\xe8k\xea\x80\xd0P|\x11\xe5\xb9\x1d^\x92j\xb0\xa7\x1d', 0x7)
fcntl$addseals(r4, 0x409, 0x2)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r4, 0x0, 0x0, 0x1000000})
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000007ac0)={'ip6tnl0\x00', &(0x7f0000007a40)={'syztnl0\x00', 0x0, 0x0, 0xf, 0xf1, 0x5, 0x0, @loopback, @remote, 0x8, 0x7800, 0x4, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000007b80)={'ip6tnl0\x00', 0x0})
r6 = syz_open_dev$video(&(0x7f0000000080), 0xb, 0x0)
ioctl$VIDIOC_S_FMT(r6, 0xc0d05640, &(0x7f0000000180)={0x2, @pix={0x5, 0x4982, 0x56595559, 0x0, 0xffff, 0x3, 0x3, 0xfeedcafe, 0x0, 0x0, 0x0, 0x5}})
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040000)
listen(r5, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5)

717.723221ms ago: executing program 4 (id=1568):
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000400)=""/102400, 0x19000)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00"], 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000042"], 0x14}}, 0x0)

40.294983ms ago: executing program 3 (id=1569):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0xe)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f00000253c0)=""/102394, 0x18ffa)
pipe2(&(0x7f0000001040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
gettid()
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400)
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r4 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f501"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r4)
socket$netlink(0x10, 0x3, 0x9)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x1, 0x20000, 0x0, 0x4000, 0x0, r2}, &(0x7f0000000340)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9})

0s ago: executing program 6 (id=1570):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@bridge_dellink={0x20, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f00000001c0))
sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2)
r4 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r7 = socket$kcm(0x29, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94)
socket$kcm(0x2, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r6, r5})
close(r7)
r9 = syz_pidfd_open(r4, 0x0)
pidfd_getfd(r9, r8, 0x0)
r10 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000280)='gid', 0x0, 0x0)

kernel console output (not intermixed with test programs):

 encryption failed: -22
[  439.021918][   T30] audit: type=1400 audit(1766464057.572:1577): avc:  denied  { setopt } for  pid=11238 comm="syz.4.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  439.113465][   T30] audit: type=1400 audit(1766464057.572:1578): avc:  denied  { bind } for  pid=11238 comm="syz.4.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  440.867959][   T89] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  440.900527][ T5825] Bluetooth: hci2: command tx timeout
[  441.050013][   T89] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  441.068661][   T89] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  441.088061][   T89] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  441.127524][   T89] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.151505][   T89] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  441.180591][   T89] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  441.198572][   T89] usb 7-1: Product: syz
[  441.202766][   T89] usb 7-1: Manufacturer: syz
[  441.237152][   T89] cdc_wdm 7-1:1.0: skipping garbage
[  441.243595][   T89] cdc_wdm 7-1:1.0: skipping garbage
[  441.266180][   T89] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  441.285952][   T89] cdc_wdm 7-1:1.0: Unknown control protocol
[  441.458451][   T30] audit: type=1400 audit(1766464060.012:1579): avc:  denied  { read write } for  pid=11267 comm="syz.6.1190" name="cdc-wdm0" dev="devtmpfs" ino=3549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  441.467994][   T89] usb 7-1: USB disconnect, device number 7
[  441.558254][   T30] audit: type=1400 audit(1766464060.012:1580): avc:  denied  { open } for  pid=11267 comm="syz.6.1190" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  441.609500][   T30] audit: type=1400 audit(1766464060.012:1581): avc:  denied  { ioctl } for  pid=11267 comm="syz.6.1190" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3549 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  441.937567][  T789] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  442.142017][  T789] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[  442.169116][  T789] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.182042][  T789] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  442.198131][  T789] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  442.206233][  T789] usb 8-1: Manufacturer: syz
[  442.227028][  T789] usb 8-1: config 0 descriptor??
[  442.319448][  T789] rc_core: IR keymap rc-hauppauge not found
[  442.325379][  T789] Registered IR keymap rc-empty
[  442.331689][  T789] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  442.358588][  T789] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input71
[  442.470319][   T30] audit: type=1400 audit(1766464061.022:1582): avc:  denied  { mount } for  pid=11286 comm="syz.7.1191" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  442.495684][T11287] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  442.987641][ T5825] Bluetooth: hci2: command tx timeout
[  443.298310][  T789] usb 8-1: USB disconnect, device number 6
[  444.074476][T11241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.089385][T11241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.113840][T11241] bond0 (unregistering): Released all slaves
[  444.163140][T11246] veth0_vlan: left promiscuous mode
[  444.297473][  T789] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  444.483006][  T789] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  444.526903][  T789] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  444.657515][  T789] usb 7-1: Product: syz
[  444.661729][  T789] usb 7-1: Manufacturer: syz
[  444.666331][  T789] usb 7-1: SerialNumber: syz
[  444.699289][  T789] usb 7-1: config 0 descriptor??
[  444.842779][  T789] ch341 7-1:0.0: ch341-uart converter detected
[  444.910205][T11305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.959050][T11305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.070032][ T5825] Bluetooth: hci2: command tx timeout
[  445.080190][   T30] audit: type=1400 audit(1766464063.632:1583): avc:  denied  { bind } for  pid=11304 comm="syz.6.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  445.168136][   T30] audit: type=1400 audit(1766464063.652:1584): avc:  denied  { listen } for  pid=11304 comm="syz.6.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  445.217104][   T30] audit: type=1400 audit(1766464063.652:1585): avc:  denied  { accept } for  pid=11304 comm="syz.6.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  445.444503][ T5823] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  445.477464][T11349] Scaler: =================  START STATUS  =================
[  445.482311][T11234] chnl_net:caif_netlink_parms(): no params data found
[  445.492226][T11349] Scaler: ==================  END STATUS  ==================
[  446.306078][  T789] usb 7-1: failed to send control message: -71
[  446.320652][  T789] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  446.334240][ T5823] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  446.347443][ T5823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.355466][ T5823] usb 8-1: Product: syz
[  446.367870][  T789] usb 7-1: USB disconnect, device number 8
[  446.385134][  T789] ch341 7-1:0.0: device disconnected
[  446.400851][ T5823] usb 8-1: Manufacturer: syz
[  446.429807][ T5823] usb 8-1: SerialNumber: syz
[  446.463105][ T5823] usb 8-1: config 0 descriptor??
[  446.487373][ T5823] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  446.508685][ T5823] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  446.519169][ T5823] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  446.562170][ T5823] usb 8-1: media controller created
[  446.727116][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  446.799485][T11234] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.806906][T11234] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.834953][T11234] bridge_slave_0: entered allmulticast mode
[  446.856559][T11234] bridge_slave_0: entered promiscuous mode
[  446.886803][T11234] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.997561][T11234] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.005912][ T5823] DVB: Unable to find symbol mt352_attach()
[  447.038015][T11234] bridge_slave_1: entered allmulticast mode
[  447.076471][T11234] bridge_slave_1: entered promiscuous mode
[  447.142762][ T5825] Bluetooth: hci2: command tx timeout
[  447.180649][ T5823] DVB: Unable to find symbol nxt6000_attach()
[  447.186754][ T5823] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  448.165054][ T5823] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input72
[  448.184181][T11234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.199126][ T5823] dvb-usb: schedule remote query interval to 1000 msecs.
[  448.328118][ T5823] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  448.331004][T11234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.338371][ T5823] dvb-usb: bulk message failed: -22 (7/0)
[  448.353144][ T5823] dvb-usb: bulk message failed: -22 (7/0)
[  448.377926][ T5823] usb 8-1: USB disconnect, device number 7
[  448.427138][   T30] audit: type=1400 audit(1766464066.972:1586): avc:  denied  { lock } for  pid=11383 comm="syz.7.1209" path="socket:[36148]" dev="sockfs" ino=36148 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  448.491502][ T5823] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  448.504621][   T30] audit: type=1400 audit(1766464067.012:1587): avc:  denied  { bind } for  pid=11383 comm="syz.7.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  448.541957][T11234] team0: Port device team_slave_0 added
[  448.563763][T11234] team0: Port device team_slave_1 added
[  449.132073][   T89] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  449.188545][ T5945] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  449.348258][ T5945] usb 7-1: device descriptor read/64, error -71
[  449.351701][ T5921] IPVS: starting estimator thread 0...
[  449.420206][   T89] usb 4-1: Using ep0 maxpacket: 32
[  449.435878][T11234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.443370][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.482915][T11234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  449.498203][   T89] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  449.510619][   T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.524165][   T89] usb 4-1: Product: syz
[  449.531486][   T89] usb 4-1: Manufacturer: syz
[  449.538574][   T89] usb 4-1: SerialNumber: syz
[  449.548456][T11397] IPVS: using max 77 ests per chain, 184800 per kthread
[  449.569436][T11234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.576465][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.576710][   T89] usb 4-1: config 0 descriptor??
[  449.645371][   T89] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  449.653557][   T89] dvb-usb: bulk message failed: -22 (2/0)
[  449.656794][T11234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.663261][   T89] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  449.680056][   T89] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  449.707523][ T5945] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  449.731556][   T89] usb 4-1: media controller created
[  449.776018][   T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  449.808982][T11234] hsr_slave_0: entered promiscuous mode
[  449.836163][T11234] hsr_slave_1: entered promiscuous mode
[  449.846639][   T30] audit: type=1400 audit(1766464068.392:1588): avc:  denied  { bind } for  pid=11401 comm="syz.4.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  449.879371][ T5945] usb 7-1: device descriptor read/64, error -71
[  449.886187][   T89] usb 4-1: selecting invalid altsetting 7
[  449.899037][T11234] debugfs: 'hsr0' already exists in 'hsr'
[  449.915297][T11234] Cannot create hsr debugfs directory
[  449.996536][   T30] audit: type=1400 audit(1766464068.422:1589): avc:  denied  { ioctl } for  pid=11384 comm="syz.3.1210" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  450.041524][ T5945] usb usb7-port1: attempt power cycle
[  450.048523][   T89] cxusb: set interface failed
[  450.053224][   T89] dvb-usb: bulk message failed: -22 (1/0)
[  450.225248][T11385] 9pnet_virtio: no channels available for device syz
[  450.518019][   T30] audit: type=1400 audit(1766464068.782:1590): avc:  denied  { create } for  pid=11384 comm="syz.3.1210" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  450.637768][T11407] : entered promiscuous mode
[  450.638291][ T5945] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  450.658081][   T89] DVB: Unable to find symbol lgdt330x_attach()
[  450.664265][   T89] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  450.690415][ T5945] usb 7-1: device descriptor read/8, error -71
[  450.897920][   T89] rc_core: IR keymap rc-dvico-portable not found
[  450.942225][ T5945] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  450.970552][   T30] audit: type=1400 audit(1766464069.512:1591): avc:  denied  { map } for  pid=11417 comm="syz.7.1217" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  450.990765][   T89] Registered IR keymap rc-empty
[  450.998971][ T5878] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  451.040454][ T5945] usb 7-1: device descriptor read/8, error -71
[  451.048457][T11419] loop6: detected capacity change from 0 to 2640
[  451.071396][T11419] buffer_io_error: 27 callbacks suppressed
[  451.077678][T11419] Buffer I/O error on dev loop6, logical block 0, async page read
[  451.134502][T11419] Buffer I/O error on dev loop6, logical block 0, async page read
[  451.143554][T11419] Buffer I/O error on dev loop6, logical block 0, async page read
[  451.151831][T11419] Buffer I/O error on dev loop6, logical block 0, async page read
[  451.160055][T11419] Buffer I/O error on dev loop6, logical block 0, async page read
[  451.168776][T11419] Buffer I/O error on dev loop6, logical block 0, async page read
[  451.168884][ T5945] usb usb7-port1: unable to enumerate USB device
[  451.184272][T11419] Buffer I/O error on dev loop6, logical block 0, async page read
[  451.192887][T11419] Buffer I/O error on dev loop6, logical block 0, async page read
[  451.193722][   T89] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  451.212415][T11419] ldm_validate_partition_table(): Disk read failed.
[  451.220950][T11419] Buffer I/O error on dev loop6, logical block 0, async page read
[  451.239119][T11419] Buffer I/O error on dev loop6, logical block 0, async page read
[  451.254306][T11419] Dev loop6: unable to read RDB block 0
[  451.265691][T11419]  loop6: unable to read partition table
[  451.272757][T11419] loop_reread_partitions: partition scan of loop6 (3„¾‚³˜) failed (rc=-5)
[  451.358680][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.434393][   T30] audit: type=1400 audit(1766464069.512:1592): avc:  denied  { execute } for  pid=11417 comm="syz.7.1217" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  451.482276][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  451.548205][   T89] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input73
[  451.618430][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  451.639597][   T89] dvb-usb: schedule remote query interval to 100 msecs.
[  451.653975][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'.
[  451.694381][   T30] audit: type=1400 audit(1766464069.592:1593): avc:  denied  { append } for  pid=11417 comm="syz.7.1217" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  451.817787][   T89] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  451.927651][ T5945] dvb-usb: bulk message failed: -22 (1/0)
[  451.940415][   T30] audit: type=1400 audit(1766464069.792:1594): avc:  denied  { unlink } for  pid=5814 comm="syz-executor" name="file0" dev="tmpfs" ino=1239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  452.181484][ T5878] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  452.246280][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.258441][   T89] usb 4-1: USB disconnect, device number 50
[  452.311791][ T5878] usb 5-1: config 0 descriptor??
[  453.169854][T11436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  453.181726][T11436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  453.261916][ T5878] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  453.308634][   T89] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  453.339452][T11234] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  453.364661][T11435] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1221'.
[  453.437134][T11234] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  453.520447][T11234] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  453.574990][ T5878] usb 5-1: USB disconnect, device number 37
[  453.632012][T11234] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  454.001105][ T5823] kernel read not supported for file /vga_arbiter (pid: 5823 comm: kworker/0:4)
[  454.142367][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1222'.
[  455.770380][T11234] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.557918][T11234] 8021q: adding VLAN 0 to HW filter on device team0
[  456.637049][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.644173][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  456.820949][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.828106][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  457.014129][T11234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  457.267237][T11472] futex_wake_op: syz.4.1227 tries to shift op by -1; fix this program
[  458.295510][T11472] usb usb8: usbfs: process 11472 (syz.4.1227) did not claim interface 12 before use
[  458.369325][T11472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1227'.
[  458.485542][T11234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.840260][T11498] netlink: 810 bytes leftover after parsing attributes in process `syz.6.1232'.
[  460.088810][   T30] audit: type=1400 audit(1766464078.622:1595): avc:  denied  { setopt } for  pid=11493 comm="syz.6.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  460.240000][T11503] futex_wake_op: syz.3.1233 tries to shift op by -1; fix this program
[  460.512402][T11505] usb usb8: usbfs: process 11505 (syz.3.1233) did not claim interface 12 before use
[  460.523092][T11505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1233'.
[  461.213191][T11511] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  461.219753][T11511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  461.368219][T11511] vhci_hcd vhci_hcd.0: Device attached
[  461.430574][   T30] audit: type=1400 audit(1766464079.982:1596): avc:  denied  { ioctl } for  pid=11493 comm="syz.6.1232" path="socket:[36842]" dev="sockfs" ino=36842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  461.473843][T11234] veth0_vlan: entered promiscuous mode
[  461.548116][ T6106] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  461.587667][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1232'.
[  461.604894][T11234] veth1_vlan: entered promiscuous mode
[  461.607561][ T5823] usb 41-1: new low-speed USB device number 3 using vhci_hcd
[  461.717559][  T789] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  461.770492][ T6106] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  461.862055][ T6106] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  461.940468][ T6106] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  462.018867][  T789] usb 5-1: config 0 has no interfaces?
[  462.021248][ T6106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  462.037463][  T789] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2
[  462.076952][  T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.119543][  T789] usb 5-1: config 0 descriptor??
[  462.205232][ T6106] usb 4-1: SerialNumber: syz
[  462.386230][T11517] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2
[  462.416551][  T789] usb 5-1: string descriptor 0 read error: -71
[  462.435689][ T9819] vhci_hcd vhci_hcd.4: stop threads
[  462.486161][  T789] usb 5-1: USB disconnect, device number 38
[  462.489284][ T6106] usb 4-1: 0:2 : does not exist
[  462.507489][ T9819] vhci_hcd vhci_hcd.4: release socket
[  462.537565][ T6106] usb 4-1: unit 255 not found!
[  462.544087][ T9819] vhci_hcd vhci_hcd.4: disconnect device
[  462.645677][ T6106] usb 4-1: USB disconnect, device number 51
[  462.899597][ T9504] udevd[9504]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  463.351221][T11533] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  463.614274][T11234] veth0_macvtap: entered promiscuous mode
[  463.758913][T11234] veth1_macvtap: entered promiscuous mode
[  463.890104][T11531] NFSD: Failed to start, no listeners configured.
[  463.920960][T11234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  464.170318][T11234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  464.628830][ T3351] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.727745][ T3351] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.833251][ T3351] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.171303][ T3351] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.458709][ T5945] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  465.717591][ T5945] usb 5-1: Using ep0 maxpacket: 16
[  465.778969][ T5945] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  465.787031][ T5945] usb 5-1: config 0 has no interface number 0
[  465.877457][ T5945] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x15, changing to 0x5
[  465.919483][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.927327][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.977749][ T5945] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  466.049393][ T5945] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  466.111086][ T5945] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  466.170043][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  466.230299][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  466.254236][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  466.290793][ T5945] usb 5-1: Product: syz
[  466.348813][ T5945] usb 5-1: SerialNumber: syz
[  466.419598][ T5945] usb 5-1: config 0 descriptor??
[  466.467030][ T5945] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  466.807501][ T5823] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  467.576340][   T30] audit: type=1400 audit(1766464086.122:1597): avc:  denied  { write } for  pid=11577 comm="syz.6.1244" path="socket:[37486]" dev="sockfs" ino=37486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  468.253029][   T30] audit: type=1400 audit(1766464086.122:1598): avc:  denied  { connect } for  pid=11577 comm="syz.6.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  468.479052][T11588] input: syz0 as /devices/virtual/input/input75
[  468.572896][T11597] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1240'.
[  468.937900][   T30] audit: type=1400 audit(1766464087.262:1599): avc:  denied  { create } for  pid=11594 comm="syz.8.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  469.313540][T11593] hfsplus: unable to find HFS+ superblock
[  471.058727][ T5945] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  471.257978][ T5945] usb 9-1: Using ep0 maxpacket: 32
[  471.284747][ T5945] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  471.347790][ T5945] usb 9-1: config 0 has no interface number 0
[  471.433436][ T5945] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  471.517432][ T5945] usb 9-1: config 0 interface 1 has no altsetting 0
[  471.537634][ T5921] usb 5-1: USB disconnect, device number 39
[  471.570329][ T5945] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  471.658383][ T5945] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.730753][ T5945] usb 9-1: Product: syz
[  471.734951][ T5945] usb 9-1: Manufacturer: syz
[  471.818505][ T5945] usb 9-1: SerialNumber: syz
[  471.890517][ T5945] usb 9-1: config 0 descriptor??
[  472.161125][ T5945] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  472.290070][ T5945] cx231xx 9-1:0.1: Not found matching IAD interface
[  472.478685][ T5945] usb 9-1: USB disconnect, device number 2
[  472.767529][ T5921] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  472.867477][ T5945] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  472.998993][ T5921] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  473.086410][ T5945] usb 4-1: Using ep0 maxpacket: 8
[  473.138076][ T5921] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  473.147183][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.259749][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  473.296290][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  473.366283][T11630] x_tables: ip_tables: osf match: only valid for protocol 6
[  473.380918][ T5921] usb 5-1: Product: syz
[  473.431982][ T5921] usb 5-1: Manufacturer: syz
[  473.529120][ T5921] usb 5-1: SerialNumber: syz
[  473.583642][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  473.608987][ T5945] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  473.657461][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.740527][ T5945] usb 4-1: config 0 descriptor??
[  474.109509][T11624] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  474.244036][ T5921] usb 5-1: USB disconnect, device number 40
[  474.384801][ T5945] usbhid 4-1:0.0: can't add hid device: -71
[  474.477963][ T5945] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  474.638401][ T5945] usb 4-1: USB disconnect, device number 52
[  474.887465][ T6106] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  475.127689][ T6106] usb 9-1: device descriptor read/64, error -71
[  475.477489][ T6106] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  475.573117][   T30] audit: type=1400 audit(1766464094.122:1600): avc:  denied  { write } for  pid=11645 comm="syz.3.1261" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  475.646711][ T6106] usb 9-1: device descriptor read/64, error -71
[  475.817508][   T30] audit: type=1400 audit(1766464094.152:1601): avc:  denied  { create } for  pid=11645 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  475.828972][ T6106] usb usb9-port1: attempt power cycle
[  476.487655][ T6106] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[  476.568126][ T6106] usb 9-1: device descriptor read/8, error -71
[  476.837745][ T6106] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  476.882299][ T6106] usb 9-1: device descriptor read/8, error -71
[  476.957652][ T5921] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  477.037470][ T5878] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  477.077789][ T6106] usb usb9-port1: unable to enumerate USB device
[  477.230964][ T5921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  477.257474][ T5878] usb 8-1: Using ep0 maxpacket: 16
[  477.356714][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  477.358270][ T5878] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  477.422435][ T5921] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  477.451916][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  477.510732][ T5921] usb 4-1: SerialNumber: syz
[  477.545591][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.647448][ T5878] usb 8-1: Product: syz
[  477.651652][ T5878] usb 8-1: Manufacturer: syz
[  477.656255][ T5878] usb 8-1: SerialNumber: syz
[  477.758266][ T5878] usb 8-1: config 0 descriptor??
[  477.780632][ T5921] usb 4-1: 0:2 : does not exist
[  477.785571][ T5921] usb 4-1: unit 5: unexpected type 0x03
[  477.829014][ T5878] visor 8-1:0.0: Sony Clie 3.5 converter detected
[  477.967677][ T5921] usb 4-1: USB disconnect, device number 53
[  477.975245][T11667] FAULT_INJECTION: forcing a failure.
[  477.975245][T11667] name failslab, interval 1, probability 0, space 0, times 0
[  479.143378][ T5878] usb 8-1: clie_3_5_startup: get config number failed: -71
[  479.157520][T11667] CPU: 0 UID: 0 PID: 11667 Comm: syz.6.1268 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  479.157551][T11667] Tainted: [L]=SOFTLOCKUP
[  479.157556][T11667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  479.157566][T11667] Call Trace:
[  479.157572][T11667]  <TASK>
[  479.157579][T11667]  dump_stack_lvl+0x16c/0x1f0
[  479.157609][T11667]  should_fail_ex+0x512/0x640
[  479.157636][T11667]  ? __kmalloc_cache_noprof+0x5f/0x800
[  479.157668][T11667]  should_failslab+0xc2/0x120
[  479.157692][T11667]  __kmalloc_cache_noprof+0x80/0x800
[  479.157718][T11667]  ? alloc_fs_context+0x57/0xf50
[  479.157739][T11667]  ? alloc_fs_context+0x57/0xf50
[  479.157755][T11667]  alloc_fs_context+0x57/0xf50
[  479.157774][T11667]  path_mount+0xe21/0x23a0
[  479.157789][T11667]  ? rcu_is_watching+0x12/0xc0
[  479.157807][T11667]  ? __pfx_path_mount+0x10/0x10
[  479.157823][T11667]  ? kmem_cache_free+0x2d8/0x770
[  479.157840][T11667]  ? putname+0xf5/0x1a0
[  479.157867][T11667]  ? putname+0xf5/0x1a0
[  479.157894][T11667]  ? putname+0xf5/0x1a0
[  479.157920][T11667]  ? __x64_sys_mount+0x293/0x310
[  479.157934][T11667]  __x64_sys_mount+0x293/0x310
[  479.157950][T11667]  ? __pfx___x64_sys_mount+0x10/0x10
[  479.157963][T11667]  ? syscall_trace_enter+0x1cb/0x220
[  479.157988][T11667]  ? rcu_is_watching+0x12/0xc0
[  479.158005][T11667]  do_syscall_64+0xcd/0xf80
[  479.158028][T11667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.158044][T11667] RIP: 0033:0x7fae6138f749
[  479.158058][T11667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  479.158073][T11667] RSP: 002b:00007fae621cc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  479.158090][T11667] RAX: ffffffffffffffda RBX: 00007fae615e5fa0 RCX: 00007fae6138f749
[  479.158100][T11667] RDX: 0000200000000080 RSI: 0000200000000100 RDI: 0000000000000000
[  479.158110][T11667] RBP: 00007fae621cc090 R08: 0000200000000200 R09: 0000000000000000
[  479.158121][T11667] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002
[  479.158131][T11667] R13: 00007fae615e6038 R14: 00007fae615e5fa0 R15: 00007fffa5748968
[  479.158153][T11667]  </TASK>
[  479.230610][ T5878] visor 8-1:0.0: probe with driver visor failed with error -71
[  479.660313][ T9504] udevd[9504]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  480.351076][T11679] : entered promiscuous mode
[  480.718262][ T5878] usb 8-1: USB disconnect, device number 8
[  480.727670][   T30] audit: type=1326 audit(1766464098.942:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab7d8f749 code=0x7ffc0000
[  480.765061][T11676] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR
[  480.897453][ T6107] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  481.021116][   T30] audit: type=1326 audit(1766464098.942:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab7d8f749 code=0x7ffc0000
[  481.177428][   T30] audit: type=1326 audit(1766464098.942:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8ab7d8f749 code=0x7ffc0000
[  481.234494][ T6107] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  481.245565][ T6107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  481.257101][ T6107] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  481.270470][ T6107] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  481.322037][ T6107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.393798][ T6107] usb 7-1: config 0 descriptor??
[  481.452068][T11687] ptrace attach of ""[11693] was attempted by "./syz-executor exec"[11687]
[  482.014248][T11699] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1269'.
[  482.498056][ T6107] holtek_kbd 0003:04D9:A055.000E: unknown main item tag 0x0
[  482.507061][ T6107] holtek_kbd 0003:04D9:A055.000E: unknown main item tag 0x0
[  482.568855][ T6107] holtek_kbd 0003:04D9:A055.000E: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.6-1/input0
[  483.107886][ T5878] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  483.277672][ T5878] usb 9-1: device descriptor read/64, error -71
[  483.517781][ T5878] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  483.664309][ T6107] usb 7-1: USB disconnect, device number 13
[  483.887494][ T5878] usb 9-1: device descriptor read/64, error -71
[  484.090436][ T5878] usb usb9-port1: attempt power cycle
[  484.248413][   T30] audit: type=1326 audit(1766464102.802:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab7d8f749 code=0x7ffc0000
[  484.297827][ T7828] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  484.487480][ T5878] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  484.516843][   T30] audit: type=1326 audit(1766464102.822:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f8ab7d8f749 code=0x7ffc0000
[  484.527458][ T7828] usb 8-1: Using ep0 maxpacket: 32
[  484.619100][ T5878] usb 9-1: device descriptor read/8, error -71
[  484.679808][ T7828] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  484.775314][ T7828] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  484.785207][   T30] audit: type=1326 audit(1766464102.822:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab7d8f749 code=0x7ffc0000
[  484.877481][ T5878] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  484.895301][ T7828] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  484.970231][ T5878] usb 9-1: device descriptor read/8, error -71
[  485.007436][ T7828] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  485.017449][ T6107] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  485.077510][   T30] audit: type=1326 audit(1766464102.842:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ab7d91667 code=0x7ffc0000
[  485.088993][ T5878] usb usb9-port1: unable to enumerate USB device
[  485.147473][ T7828] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  485.156535][ T7828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.298296][ T6107] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  486.298859][   T30] audit: type=1326 audit(1766464102.842:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8ab7d915dc code=0x7ffc0000
[  486.334757][ T6107] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  486.385973][ T7828] usb 8-1: Product: syz
[  486.424872][ T7828] usb 8-1: Manufacturer: syz
[  486.468128][ T7828] usb 8-1: SerialNumber: syz
[  486.478347][ T6107] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  486.557483][ T6107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  486.577333][    C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  486.605665][ T7828] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input76
[  486.658197][   T30] audit: type=1326 audit(1766464102.842:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8ab7d91514 code=0x7ffc0000
[  486.659689][ T6107] usb 7-1: SerialNumber: syz
[  486.777499][ T7828] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  486.847443][ T7828]  (id 0x00)
[  486.878745][   T30] audit: type=1326 audit(1766464102.842:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8ab7d91514 code=0x7ffc0000
[  486.959591][T11708] input: syz0 as /devices/virtual/input/input78
[  487.067802][   T30] audit: type=1326 audit(1766464102.842:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8ab7d8e3aa code=0x7ffc0000
[  487.130472][ T6107] usb 7-1: 0:2 : does not exist
[  487.135417][ T6107] usb 7-1: unit 5 not found!
[  487.197457][ T7828] rc_core: IR keymap rc-imon-pad not found
[  487.212449][ T7828] Registered IR keymap rc-empty
[  487.217814][   T30] audit: type=1326 audit(1766464102.842:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab7d8f749 code=0x7ffc0000
[  487.290114][ T7828] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  487.329969][ T6107] usb 7-1: USB disconnect, device number 14
[  487.369954][ T7828] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  487.548088][   T30] audit: type=1326 audit(1766464102.852:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8ab7d8f749 code=0x7ffc0000
[  487.572557][ T7828] imon:send_packet: packet tx failed (-71)
[  487.598490][ T7828] imon 8-1:155.0: remote input dev register failed
[  487.606128][ T7828] imon 8-1:155.0: imon_init_intf0: rc device setup failed
[  487.703435][   T30] audit: type=1326 audit(1766464102.852:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab7d8f749 code=0x7ffc0000
[  487.949073][ T7828] imon 8-1:155.0: unable to initialize intf0, err 0
[  487.955694][ T7828] imon:imon_probe: failed to initialize context!
[  487.997518][ T9500] udevd[9500]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  488.018250][ T7828] imon 8-1:155.0: unable to register, err -19
[  488.037494][   T30] audit: type=1326 audit(1766464102.852:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab7d8f749 code=0x7ffc0000
[  488.137770][ T7828] usb 8-1: USB disconnect, device number 9
[  488.247604][   T30] audit: type=1400 audit(1766464104.252:1617): avc:  denied  { ioctl } for  pid=11719 comm="syz.3.1283" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  488.344418][T11742] Cannot find add_set index 0 as target
[  488.506134][   T30] audit: type=1400 audit(1766464106.872:1618): avc:  denied  { execute } for  pid=11737 comm="syz.8.1288" dev="hugetlbfs" ino=37757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  490.197714][T11755] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7)
[  490.204269][T11755] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  490.358561][T11755] vhci_hcd vhci_hcd.0: Device attached
[  490.690960][ T2268] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  490.699374][ T5823] usb 47-1: new low-speed USB device number 2 using vhci_hcd
[  490.867473][ T6107] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  491.039648][ T2268] usb 8-1: config index 0 descriptor too short (expected 8192, got 18)
[  491.117421][ T2268] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  491.246738][ T2268] usb 8-1: config 0 has no interfaces?
[  491.317493][ T2268] usb 8-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2
[  491.326599][ T2268] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.349653][ T6107] usb 9-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  491.425937][ T6107] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.505695][ T2268] usb 8-1: config 0 descriptor??
[  491.544717][ T6107] usb 9-1: config 0 descriptor??
[  491.783851][T11770] Cannot find add_set index 1 as target
[  491.789728][T11757] vhci_hcd: connection closed
[  491.789893][ T9544] vhci_hcd vhci_hcd.7: stop threads
[  491.791469][ T2268] usb 8-1: string descriptor 0 read error: -71
[  491.898066][ T9544] vhci_hcd vhci_hcd.7: release socket
[  491.917739][ T5823] usb 47-1: device descriptor read/64, error -71
[  491.954730][ T9544] vhci_hcd vhci_hcd.7: disconnect device
[  492.007698][ T2268] usb 8-1: USB disconnect, device number 10
[  492.107976][ T6107] hackrf 9-1:0.0: Board ID: 00
[  492.143271][ T6107] hackrf 9-1:0.0: Firmware version: 
[  492.206175][ T5823] vhci_hcd vhci_hcd.7: vhci_device speed not set
[  492.230566][ T6107] hackrf 9-1:0.0: Registered as swradio24
[  492.301258][ T6107] videodev: could not get a free minor
[  492.306764][ T6107] hackrf 9-1:0.0: Failed to register as video device (-23)
[  492.348854][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  492.348871][   T30] audit: type=1400 audit(1766464110.902:1623): avc:  denied  { write } for  pid=11771 comm="syz.6.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  492.389176][T11774] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  492.395721][T11774] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  492.436847][ T6107] hackrf 9-1:0.0: probe with driver hackrf failed with error -23
[  492.528842][T11774] vhci_hcd vhci_hcd.0: Device attached
[  492.988924][ T6107] usb 39-1: new low-speed USB device number 4 using vhci_hcd
[  493.117558][ T5921] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  493.319025][ T5921] usb 4-1: config index 0 descriptor too short (expected 8192, got 18)
[  493.327314][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  493.452735][   T30] audit: type=1400 audit(1766464112.002:1624): avc:  denied  { bind } for  pid=11785 comm="syz.4.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  493.797445][ T5921] usb 4-1: config 0 has no interfaces?
[  493.802965][ T5921] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2
[  493.956095][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.035378][   T30] audit: type=1400 audit(1766464112.032:1625): avc:  denied  { write } for  pid=11785 comm="syz.4.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  494.076354][ T7828] usb 9-1: USB disconnect, device number 11
[  494.220706][ T9504] udevd[9504]: failed to send result of seq 26205 to main daemon: Connection refused
[  494.249465][ T5921] usb 4-1: config 0 descriptor??
[  494.495483][T11776] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3
[  494.503417][ T1996] Bluetooth: (null): Invalid header checksum
[  494.608695][T11799] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1304'.
[  494.751261][ T1996] vhci_hcd vhci_hcd.3: stop threads
[  494.756531][ T1996] vhci_hcd vhci_hcd.3: release socket
[  494.762248][ T1996] vhci_hcd vhci_hcd.3: disconnect device
[  494.779936][ T5921] usb 4-1: string descriptor 0 read error: -71
[  495.109841][ T5921] usb 4-1: USB disconnect, device number 54
[  495.261576][   T30] audit: type=1400 audit(1766464113.812:1626): avc:  denied  { map } for  pid=11806 comm="syz.6.1307" path="socket:[38857]" dev="sockfs" ino=38857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  495.397528][   T30] audit: type=1400 audit(1766464113.812:1627): avc:  denied  { read accept } for  pid=11806 comm="syz.6.1307" path="socket:[38857]" dev="sockfs" ino=38857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  495.842631][   T30] audit: type=1400 audit(1766464114.392:1628): avc:  denied  { write } for  pid=11806 comm="syz.6.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  496.167781][ T7828] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  496.175383][   T89] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  496.327700][ T7828] usb 4-1: Using ep0 maxpacket: 16
[  496.348628][ T7828] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  496.368778][   T89] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  496.387472][ T7828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.396547][   T89] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  496.416025][ T7828] usb 4-1: Product: syz
[  496.436017][ T7828] usb 4-1: Manufacturer: syz
[  496.443249][   T89] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  496.457913][ T7828] usb 4-1: SerialNumber: syz
[  496.470100][   T89] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  496.480415][ T7828] usb 4-1: config 0 descriptor??
[  496.510117][   T89] usb 9-1: SerialNumber: syz
[  496.523532][ T7828] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  496.539915][   T30] audit: type=1400 audit(1766464115.092:1629): avc:  denied  { read write } for  pid=11831 comm="syz.7.1313" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  496.577290][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1313'.
[  496.617195][   T30] audit: type=1400 audit(1766464115.092:1630): avc:  denied  { open } for  pid=11831 comm="syz.7.1313" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  496.925139][   T89] usb 9-1: 0:2 : does not exist
[  498.057358][ T7828] usb 4-1: clie_3_5_startup: get config number failed: -71
[  498.064752][ T7828] visor 4-1:0.0: probe with driver visor failed with error -71
[  498.087458][   T89] usb 9-1: unit 5 not found!
[  498.122306][ T7828] usb 4-1: USB disconnect, device number 55
[  498.127666][T11842] loop5: detected capacity change from 0 to 7
[  498.135510][   T89] usb 9-1: USB disconnect, device number 12
[  498.147181][T11842]  loop5:
[  498.159942][T11842] loop5: partition table partially beyond EOD, truncated
[  498.167813][ T6107] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  498.253753][T11849] kernel read not supported for file /eth0 (pid: 11849 comm: syz.7.1319)
[  498.266569][T11847] FAULT_INJECTION: forcing a failure.
[  498.266569][T11847] name failslab, interval 1, probability 0, space 0, times 0
[  498.289550][   T30] audit: type=1800 audit(1766464116.832:1631): pid=11849 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1319" name=6574683004 dev="mqueue" ino=39065 res=0 errno=0
[  498.396542][T11847] CPU: 0 UID: 0 PID: 11847 Comm: syz.6.1318 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  498.396573][T11847] Tainted: [L]=SOFTLOCKUP
[  498.396579][T11847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  498.396589][T11847] Call Trace:
[  498.396595][T11847]  <TASK>
[  498.396602][T11847]  dump_stack_lvl+0x16c/0x1f0
[  498.396630][T11847]  should_fail_ex+0x512/0x640
[  498.396656][T11847]  ? __kmalloc_cache_noprof+0x5f/0x800
[  498.396687][T11847]  should_failslab+0xc2/0x120
[  498.396711][T11847]  __kmalloc_cache_noprof+0x80/0x800
[  498.396740][T11847]  ? ovl_init_fs_context+0x52/0x5f0
[  498.396765][T11847]  ? ovl_init_fs_context+0x52/0x5f0
[  498.396784][T11847]  ovl_init_fs_context+0x52/0x5f0
[  498.396804][T11847]  ? __pfx_ovl_init_fs_context+0x10/0x10
[  498.396825][T11847]  alloc_fs_context+0x629/0xf50
[  498.396849][T11847]  path_mount+0xe21/0x23a0
[  498.396867][T11847]  ? rcu_is_watching+0x12/0xc0
[  498.396894][T11847]  ? __pfx_path_mount+0x10/0x10
[  498.396912][T11847]  ? kmem_cache_free+0x2d8/0x770
[  498.396931][T11847]  ? putname+0xf5/0x1a0
[  498.396963][T11847]  ? putname+0xf5/0x1a0
[  498.396988][T11847]  ? putname+0xf5/0x1a0
[  498.397017][T11847]  ? __x64_sys_mount+0x293/0x310
[  498.397034][T11847]  __x64_sys_mount+0x293/0x310
[  498.397051][T11847]  ? __pfx___x64_sys_mount+0x10/0x10
[  498.397067][T11847]  ? syscall_trace_enter+0x1cb/0x220
[  498.397097][T11847]  ? rcu_is_watching+0x12/0xc0
[  498.397116][T11847]  do_syscall_64+0xcd/0xf80
[  498.397142][T11847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.397160][T11847] RIP: 0033:0x7fae6138f749
[  498.397174][T11847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  498.397191][T11847] RSP: 002b:00007fae621cc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  498.397210][T11847] RAX: ffffffffffffffda RBX: 00007fae615e5fa0 RCX: 00007fae6138f749
[  498.397220][T11847] RDX: 0000200000000080 RSI: 0000200000000100 RDI: 0000000000000000
[  498.397231][T11847] RBP: 00007fae621cc090 R08: 0000200000000200 R09: 0000000000000000
[  498.397242][T11847] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002
[  498.397253][T11847] R13: 00007fae615e6038 R14: 00007fae615e5fa0 R15: 00007fffa5748968
[  498.397277][T11847]  </TASK>
[  499.053820][T11863] 9p: Bad value for 'wfdno'
[  499.258891][   T30] audit: type=1400 audit(1766464117.812:1632): avc:  denied  { create } for  pid=11864 comm="syz.7.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  499.317553][ T2268] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  499.567516][ T2268] usb 5-1: unable to get BOS descriptor or descriptor too short
[  499.598881][ T2268] usb 5-1: config 174 has an invalid interface number: 153 but max is 0
[  499.621562][ T2268] usb 5-1: config 174 has no interface number 0
[  499.637692][ T2268] usb 5-1: config 174 interface 153 has no altsetting 0
[  499.657821][ T2268] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=77.4a
[  499.677100][ T2268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=230
[  499.680261][T11857] syz.6.1322 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  499.698756][ T2268] usb 5-1: Product: syz
[  499.702941][ T2268] usb 5-1: Manufacturer: syz
[  499.717479][ T2268] usb 5-1: SerialNumber: syz
[  499.805897][T11857] CPU: 1 UID: 0 PID: 11857 Comm: syz.6.1322 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  499.805930][T11857] Tainted: [L]=SOFTLOCKUP
[  499.805936][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  499.805947][T11857] Call Trace:
[  499.805953][T11857]  <TASK>
[  499.805960][T11857]  dump_stack_lvl+0x16c/0x1f0
[  499.805988][T11857]  dump_header+0x101/0x960
[  499.806028][T11857]  oom_kill_process+0x176/0x910
[  499.806059][T11857]  out_of_memory+0x350/0x1700
[  499.806086][T11857]  ? __lock_acquire+0x436/0x2890
[  499.806112][T11857]  ? __pfx_out_of_memory+0x10/0x10
[  499.806146][T11857]  mem_cgroup_out_of_memory+0x118/0x130
[  499.806167][T11857]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  499.806191][T11857]  ? do_raw_spin_unlock+0x172/0x230
[  499.806220][T11857]  try_charge_memcg+0x695/0xd30
[  499.806250][T11857]  ? __pfx_try_charge_memcg+0x10/0x10
[  499.806279][T11857]  ? find_held_lock+0x2b/0x80
[  499.806310][T11857]  charge_memcg+0x8a/0x230
[  499.806334][T11857]  mem_cgroup_swapin_charge_folio+0xeb/0x470
[  499.806364][T11857]  __read_swap_cache_async+0x397/0x500
[  499.806387][T11857]  ? __pfx___read_swap_cache_async+0x10/0x10
[  499.806406][T11857]  ? mlock_drain_local+0x22d/0x4e0
[  499.806433][T11857]  swap_cluster_readahead+0x432/0x770
[  499.806459][T11857]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  499.806480][T11857]  ? __lock_acquire+0x436/0x2890
[  499.806513][T11857]  ? get_vma_policy+0x242/0x3c0
[  499.806540][T11857]  swapin_readahead+0x160/0x1220
[  499.806568][T11857]  ? __pfx_swapin_readahead+0x10/0x10
[  499.806588][T11857]  ? find_held_lock+0x2b/0x80
[  499.806612][T11857]  ? swap_cache_get_folio+0x267/0x8e0
[  499.806629][T11857]  ? swap_cache_get_folio+0x267/0x8e0
[  499.806645][T11857]  ? swap_cache_get_folio+0x267/0x8e0
[  499.806665][T11857]  ? swap_cache_get_folio+0x267/0x8e0
[  499.806681][T11857]  ? swap_cache_get_folio+0x293/0x8e0
[  499.806701][T11857]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  499.806717][T11857]  ? __pfx_get_swap_device+0x10/0x10
[  499.806739][T11857]  ? rcu_read_unlock+0x2d/0xb0
[  499.806761][T11857]  ? do_swap_page+0x962/0x64a0
[  499.806786][T11857]  do_swap_page+0x962/0x64a0
[  499.806820][T11857]  ? __lock_acquire+0x436/0x2890
[  499.806849][T11857]  ? __pfx_do_swap_page+0x10/0x10
[  499.806878][T11857]  ? __pfx_default_wake_function+0x10/0x10
[  499.806914][T11857]  ? rcu_is_watching+0x12/0xc0
[  499.806932][T11857]  ? ___pte_offset_map+0x175/0x380
[  499.806956][T11857]  __handle_mm_fault+0x19cb/0x2bb0
[  499.806988][T11857]  ? reacquire_held_locks+0xcd/0x1f0
[  499.807009][T11857]  ? __pfx___handle_mm_fault+0x10/0x10
[  499.807040][T11857]  ? lock_vma_under_rcu+0x176/0x580
[  499.807075][T11857]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  499.807103][T11857]  handle_mm_fault+0x3fe/0xad0
[  499.807135][T11857]  do_user_addr_fault+0x60c/0x1370
[  499.807163][T11857]  ? rcu_is_watching+0x12/0xc0
[  499.807183][T11857]  exc_page_fault+0x64/0xc0
[  499.807206][T11857]  asm_exc_page_fault+0x26/0x30
[  499.807223][T11857] RIP: 0033:0x7fae613b7565
[  499.807239][T11857] Code: 00 00 f0 83 88 08 03 00 00 10 64 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b <c3> 66 2e 0f 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 8b 90
[  499.807256][T11857] RSP: 002b:00007fffa5748a58 EFLAGS: 00010297
[  499.807272][T11857] RAX: 0000000000000002 RBX: 00007fae615e5fa0 RCX: 0000000000000000
[  499.807282][T11857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557db6f808
[  499.807292][T11857] RBP: 00007fae615e7da0 R08: 0000000000000000 R09: 00007fae621cd000
[  499.807302][T11857] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000007a1a4
[  499.807312][T11857] R13: 00007fffa5748bc0 R14: ffffffffffffffff R15: 00007fffa5748be0
[  499.807339][T11857]  </TASK>
[  499.807345][T11857] memory: usage 307200kB, limit 307200kB, failcnt 184
[  499.896411][T11872] ubi31: attaching mtd0
[  500.017624][T11857] memory+swap: usage 307324kB, limit 9007199254740988kB, failcnt 0
[  500.262642][T11857] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[  500.262666][T11857] Memory cgroup stats for /syz6:
[  500.262930][T11857] cache 0
[  500.262940][T11857] rss 0
[  500.262947][T11857] rss_huge 0
[  500.262954][T11857] shmem 0
[  500.262961][T11857] mapped_file 0
[  500.262969][T11857] dirty 0
[  500.262975][T11857] writeback 0
[  500.264184][T11857] workingset_refault_anon 17
[  500.264196][T11857] workingset_refault_file 0
[  500.264204][T11857] swap 126976
[  500.264211][T11857] swapcached 20480
[  500.264218][T11857] pgpgin 111303
[  500.264226][T11857] pgpgout 111298
[  500.264233][T11857] pgfault 89515
[  500.264240][T11857] pgmajfault 6
[  500.264247][T11857] inactive_anon 20480
[  500.264254][T11857] active_anon 0
[  500.264261][T11857] inactive_file 0
[  500.264268][T11857] active_file 0
[  500.264275][T11857] unevictable 0
[  500.264282][T11857] hierarchical_memory_limit 314572800
[  500.264291][T11857] hierarchical_memsw_limit 9223372036854771712
[  500.264299][T11857] total_cache 0
[  500.264306][T11857] total_rss 0
[  500.264313][T11857] total_rss_huge 0
[  500.264321][T11857] total_shmem 0
[  500.264328][T11857] total_mapped_file 0
[  500.264335][T11857] total_dirty 0
[  500.264342][T11857] total_writeback 0
[  500.264349][T11857] total_workingset_refault_anon 17
[  500.264357][T11857] total_workingset_refault_file 0
[  500.264366][T11857] total_swap 126976
[  500.264372][T11857] total_swapcached 20480
[  500.264379][T11857] total_pgpgin 111303
[  500.264386][T11857] total_pgpgout 111298
[  500.264393][T11857] total_pgfault 89515
[  500.264400][T11857] total_pgmajfault 6
[  500.264407][T11857] total_inactive_anon 20480
[  500.264415][T11857] total_active_anon 0
[  500.264422][T11857] total_inactive_file 0
[  500.264429][T11857] total_active_file 0
[  500.264437][T11857] total_unevictable 0
[  500.264444][T11857] anon_cost 0
[  500.264451][T11857] file_cost 0
[  500.264459][T11857] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1322,pid=11857,uid=0
[  500.267216][T11857] Memory cgroup out of memory: Killed process 11857 (syz.6.1322) total-vm:98456kB, anon-rss:1276kB, file-rss:21672kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000
[  500.279222][T11872] ubi31: scanning is finished
[  500.279244][T11872] ubi31: empty MTD device detected
[  500.422808][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  500.468290][T11872] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  500.468310][T11872] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  500.468321][T11872] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  500.468330][T11872] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  500.468339][T11872] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  500.468362][T11872] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  500.468372][T11872] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 557897937
[  500.468382][T11872] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  500.482044][T11876] ubi31: background thread "ubi_bgt31d" started, PID 11876
[  501.320007][ T2268] sierra 5-1:174.153: Sierra USB modem converter detected
[  501.358805][ T2268] usb 5-1: USB disconnect, device number 41
[  501.365284][ T2268] sierra 5-1:174.153: device disconnected
[  503.206172][ T5878] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  503.369877][ T5878] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  503.407231][ T5878] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  503.460103][ T5878] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  503.509453][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  503.567635][ T5878] usb 7-1: SerialNumber: syz
[  504.161077][   T30] audit: type=1400 audit(1766464122.712:1633): avc:  denied  { write } for  pid=11902 comm="syz.3.1335" name="kcm" dev="proc" ino=4026533372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  504.199030][ T5878] usb 7-1: 0:2 : does not exist
[  504.204014][ T5878] usb 7-1: unit 5 not found!
[  504.212447][T11903] ip6t_srh: unknown srh match flags  4000
[  504.260285][ T5878] usb 7-1: USB disconnect, device number 15
[  504.298672][T11903] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[  504.329936][   T30] audit: type=1400 audit(1766464122.882:1634): avc:  denied  { append } for  pid=11902 comm="syz.3.1335" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  504.492693][T11916] fuse: Bad value for 'rootmode'
[  504.557493][ T6106] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  504.717454][ T6106] usb 9-1: Using ep0 maxpacket: 8
[  504.732271][ T6106] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  504.767445][ T6106] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  504.787808][ T6106] usb 9-1: Product: syz
[  504.792011][ T6106] usb 9-1: Manufacturer: syz
[  504.821208][ T6106] usb 9-1: SerialNumber: syz
[  504.852503][ T6106] usb 9-1: config 0 descriptor??
[  504.880963][ T6106] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  504.968194][ T9407] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  505.427906][ T6106] gspca_zc3xx: reg_w_i err -110
[  505.433227][ T6106] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110
[  505.497475][ T9407] usb 4-1: Using ep0 maxpacket: 16
[  505.711283][ T9407] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  505.725249][ T9407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.858145][ T9407] usb 4-1: Product: syz
[  505.862874][ T9407] usb 4-1: Manufacturer: syz
[  505.881206][ T9407] usb 4-1: SerialNumber: syz
[  505.895868][ T9407] usb 4-1: config 0 descriptor??
[  505.907973][ T9407] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  506.206389][T11934] input: syz1 as /devices/virtual/input/input79
[  506.302074][ T8922] usb 9-1: USB disconnect, device number 13
[  507.155383][ T9407] usb 4-1: clie_3_5_startup: get config number failed: -71
[  507.192361][ T9407] visor 4-1:0.0: probe with driver visor failed with error -71
[  507.318283][ T9407] usb 4-1: USB disconnect, device number 56
[  507.633248][   T30] audit: type=1400 audit(1766464126.182:1635): avc:  denied  { bind } for  pid=11951 comm="syz.8.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  507.672170][   T30] audit: type=1400 audit(1766464126.182:1636): avc:  denied  { node_bind } for  pid=11951 comm="syz.8.1347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  507.694741][   T30] audit: type=1400 audit(1766464126.202:1637): avc:  denied  { getopt } for  pid=11951 comm="syz.8.1347" laddr=fe80::10 faddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  507.965920][ T9407] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[  508.129296][ T9407] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  508.157809][ T9407] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[  508.209940][ T9407] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  508.236704][ T9407] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.285271][ T9407] usb 9-1: config 0 descriptor??
[  508.308444][ T9407] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  508.329892][ T9407] dvb-usb: bulk message failed: -22 (3/0)
[  508.364608][ T9407] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  508.405007][ T9407] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  508.447335][ T9407] usb 9-1: media controller created
[  508.454976][ T9407] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  508.498014][ T9407] dvb-usb: bulk message failed: -22 (6/0)
[  508.503999][ T9407] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  508.518115][T11952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.526876][T11952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  508.552064][ T9407] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input80
[  508.583396][ T9407] dvb-usb: schedule remote query interval to 150 msecs.
[  508.597804][ T9407] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  508.759174][ T9407] dvb-usb: bulk message failed: -22 (1/0)
[  508.778035][ T9407] dvb-usb: error while querying for an remote control event.
[  508.784228][   T30] audit: type=1400 audit(1766464127.282:1638): avc:  denied  { read } for  pid=11964 comm="syz.7.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  508.910850][   T30] audit: type=1400 audit(1766464127.452:1639): avc:  denied  { append } for  pid=11973 comm="syz.3.1350" name="video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  508.948017][ T8922] usb 9-1: USB disconnect, device number 14
[  508.968909][ T8922] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  509.783877][T11995] futex_wake_op: syz.8.1359 tries to shift op by -1; fix this program
[  509.812181][T11997] futex_wake_op: syz.3.1360 tries to shift op by -1; fix this program
[  509.887455][ T6107] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  509.974460][T12000] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1359'.
[  510.086142][T11999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1360'.
[  510.239467][ T6107] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  510.250902][ T6107] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  510.260996][ T6107] usb 8-1: config 1 has no interface number 0
[  510.267260][ T6107] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  510.278670][ T6107] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  510.289091][ T6107] usb 8-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xD8, changing to 0x88
[  510.318971][ T6107] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x88 has invalid maxpacket 14
[  510.329773][ T6107] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  510.365789][ T6107] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  510.377244][ T6107] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.386103][ T6107] usb 8-1: Product: syz
[  510.390633][ T6107] usb 8-1: Manufacturer: syz
[  510.396200][ T6107] usb 8-1: SerialNumber: syz
[  510.616894][T11991] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  510.624240][ T8922] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  510.787645][ T8922] usb 7-1: Using ep0 maxpacket: 16
[  510.815426][ T8922] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  510.825153][ T8922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.835826][ T8922] usb 7-1: Product: syz
[  510.840176][ T8922] usb 7-1: Manufacturer: syz
[  510.844847][ T8922] usb 7-1: SerialNumber: syz
[  510.887116][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1358'.
[  510.900651][ T8922] usb 7-1: config 0 descriptor??
[  510.925319][ T8922] visor 7-1:0.0: Sony Clie 3.5 converter detected
[  511.043859][   T30] audit: type=1400 audit(1766464129.592:1640): avc:  denied  { ioctl } for  pid=11990 comm="syz.7.1358" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  511.840624][ T8922] usb 7-1: clie_3_5_startup: get config number failed: -71
[  511.857721][ T8922] visor 7-1:0.0: probe with driver visor failed with error -71
[  511.882856][ T8922] usb 7-1: USB disconnect, device number 16
[  511.893001][ T6107] cdc_ncm 8-1:1.1: bind() failure
[  511.930911][ T6107] usb 8-1: USB disconnect, device number 11
[  511.995827][T12020] sp0: Synchronizing with TNC
[  512.005770][T12020] sp0: Found TNC
[  512.337238][T12030] netlink: 416 bytes leftover after parsing attributes in process `syz.3.1368'.
[  512.346462][T12030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1368'.
[  512.360447][T12030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=12030 comm=syz.3.1368
[  512.433145][T12029] x_tables: ip_tables: osf match: only valid for protocol 6
[  513.833320][T12043] netlink: 'syz.3.1372': attribute type 1 has an invalid length.
[  514.363173][T12052] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1374'.
[  514.390568][T12052] 9pnet_fd: Insufficient options for proto=fd
[  515.618540][T12075] futex_wake_op: syz.6.1378 tries to shift op by -1; fix this program
[  515.900650][T12080] usb usb8: usbfs: process 12080 (syz.6.1378) did not claim interface 12 before use
[  515.941324][T12079] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1378'.
[  517.303044][   T30] audit: type=1400 audit(1766464135.852:1641): avc:  denied  { bind } for  pid=12089 comm="syz.3.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  517.391800][T12098] "syz.8.1384" (12098) uses obsolete ecb(arc4) skcipher
[  517.977485][    C1] sd 0:0:1:0: [sda] tag#10000 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  517.988017][    C1] sd 0:0:1:0: [sda] tag#10000 CDB: Read(6) 08 00 00 00 03 44
[  518.163539][   T30] audit: type=1400 audit(1766464136.702:1642): avc:  denied  { kexec_image_load } for  pid=12105 comm="syz.3.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  518.245727][   T30] audit: type=1400 audit(1766464136.712:1643): avc:  denied  { write } for  pid=12105 comm="syz.3.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  518.528134][ T5921] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[  519.175159][ T5921] usb 8-1: unable to get BOS descriptor or descriptor too short
[  519.188081][ T5921] usb 8-1: not running at top speed; connect to a high speed hub
[  519.210237][ T5921] usb 8-1: config 128 has an invalid interface number: 225 but max is 0
[  519.226417][ T5921] usb 8-1: config 128 has no interface number 0
[  519.237335][ T5921] usb 8-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=38.13
[  519.254197][ T5921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.263200][ T5921] usb 8-1: Product: syz
[  519.268829][   T30] audit: type=1400 audit(1766464137.822:1644): avc:  denied  { map } for  pid=12136 comm="syz.3.1396" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  519.305660][ T5921] usb 8-1: Manufacturer: syz
[  519.314819][ T5921] usb 8-1: SerialNumber: syz
[  520.077495][ T5878] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  520.117247][   T30] audit: type=1400 audit(1766464138.652:1645): avc:  denied  { read } for  pid=12116 comm="syz.7.1390" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  520.151365][ T5921] usb 8-1: USB disconnect, device number 12
[  520.359144][   T30] audit: type=1400 audit(1766464138.902:1646): avc:  denied  { accept } for  pid=12146 comm="syz.8.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  520.640245][ T5878] usb 7-1: device descriptor read/64, error -71
[  520.898924][ T5878] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  521.147046][ T5878] usb 7-1: device descriptor read/64, error -71
[  521.159749][T12170] futex_wake_op: syz.7.1404 tries to shift op by -1; fix this program
[  521.279214][ T5878] usb usb7-port1: attempt power cycle
[  521.897750][ T5878] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  521.928211][ T5878] usb 7-1: device descriptor read/8, error -71
[  521.930256][T12183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1408'.
[  521.949667][T12175] usb usb8: usbfs: process 12175 (syz.7.1404) did not claim interface 12 before use
[  521.965441][T12175] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1404'.
[  522.269080][ T5878] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  522.514496][ T5878] usb 7-1: device descriptor read/8, error -71
[  523.087755][ T5878] usb usb7-port1: unable to enumerate USB device
[  523.247562][ T5921] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  523.400077][ T5921] usb 4-1: Using ep0 maxpacket: 16
[  523.419827][ T5921] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  523.437522][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.455390][ T5921] usb 4-1: Product: syz
[  523.465238][ T5921] usb 4-1: Manufacturer: syz
[  523.474676][ T5921] usb 4-1: SerialNumber: syz
[  523.503213][ T5921] usb 4-1: config 0 descriptor??
[  523.521690][ T5921] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  523.627480][ T6107] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  524.405328][ T5921] usb 4-1: clie_3_5_startup: get config number failed: -71
[  524.412835][ T5921] visor 4-1:0.0: probe with driver visor failed with error -71
[  524.420444][ T6107] usb 5-1: Using ep0 maxpacket: 16
[  524.430714][ T6107] usb 5-1: config 0 has an invalid interface number: 129 but max is 0
[  524.442693][ T5921] usb 4-1: USB disconnect, device number 57
[  524.448778][ T6107] usb 5-1: config 0 has no interface number 0
[  524.462385][ T6107] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=11.ab
[  524.487429][ T6107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.504505][ T6107] usb 5-1: Product: syz
[  524.517456][ T6107] usb 5-1: Manufacturer: syz
[  524.537910][ T6107] usb 5-1: SerialNumber: syz
[  524.549043][ T6107] usb 5-1: config 0 descriptor??
[  525.703625][ T6107] usb 5-1: USB disconnect, device number 42
[  526.428705][T12227] loop5: detected capacity change from 0 to 7
[  526.448564][T12227]  loop5:
[  526.451549][T12227] loop5: partition table partially beyond EOD, truncated
[  526.865831][T12239] loop6: detected capacity change from 0 to 2640
[  526.880257][T12239] buffer_io_error: 11 callbacks suppressed
[  526.880293][T12239] Buffer I/O error on dev loop6, logical block 0, async page read
[  526.896612][T12239] Buffer I/O error on dev loop6, logical block 0, async page read
[  526.905416][T12239] Buffer I/O error on dev loop6, logical block 0, async page read
[  526.914220][T12239] Buffer I/O error on dev loop6, logical block 0, async page read
[  526.922851][T12239] Buffer I/O error on dev loop6, logical block 0, async page read
[  526.934833][T12239] Buffer I/O error on dev loop6, logical block 0, async page read
[  526.943913][T12239] Buffer I/O error on dev loop6, logical block 0, async page read
[  526.952484][T12239] Buffer I/O error on dev loop6, logical block 0, async page read
[  526.960626][T12239] ldm_validate_partition_table(): Disk read failed.
[  526.968321][T12239] Buffer I/O error on dev loop6, logical block 0, async page read
[  526.976992][T12239] Buffer I/O error on dev loop6, logical block 0, async page read
[  526.986303][T12239] Dev loop6: unable to read RDB block 0
[  526.993020][T12239]  loop6: unable to read partition table
[  526.999410][T12239] loop_reread_partitions: partition scan of loop6 (3„¾‚³˜) failed (rc=-5)
[  527.040515][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'.
[  527.332851][T11839] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  527.547816][T11839] usb 8-1: device descriptor read/64, error -71
[  527.691743][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1429'.
[  527.797865][T11839] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  527.938555][T11839] usb 8-1: device descriptor read/64, error -71
[  527.977902][ T5922] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  528.049679][T11839] usb usb8-port1: attempt power cycle
[  528.102270][T12268] futex_wake_op: syz.6.1432 tries to shift op by -1; fix this program
[  528.128459][ T5922] usb 4-1: Using ep0 maxpacket: 16
[  528.164059][ T5922] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  528.189790][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.200849][ T5922] usb 4-1: Product: syz
[  528.205295][ T5922] usb 4-1: Manufacturer: syz
[  528.212296][ T5922] usb 4-1: SerialNumber: syz
[  528.266891][ T5922] usb 4-1: config 0 descriptor??
[  528.305366][ T5922] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  528.374562][T12269] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1432'.
[  528.387628][T11839] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  528.422181][T11839] usb 8-1: device descriptor read/8, error -71
[  529.286513][ T5922] usb 4-1: clie_3_5_startup: get config number failed: -71
[  529.302559][ T5922] visor 4-1:0.0: probe with driver visor failed with error -71
[  529.315187][ T5922] usb 4-1: USB disconnect, device number 58
[  529.370619][   T30] audit: type=1400 audit(1766464147.922:1647): avc:  denied  { wake_alarm } for  pid=12273 comm="syz.8.1433" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  529.427613][T11839] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  529.500787][T11839] usb 8-1: device descriptor read/8, error -71
[  530.013630][T11839] usb usb8-port1: unable to enumerate USB device
[  530.503915][   T30] audit: type=1400 audit(1766464149.052:1648): avc:  denied  { listen } for  pid=12288 comm="syz.8.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  530.529522][   T30] audit: type=1400 audit(1766464149.052:1649): avc:  denied  { accept } for  pid=12288 comm="syz.8.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  531.424439][ T2268] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  531.521962][   T30] audit: type=1400 audit(1766464150.072:1650): avc:  denied  { unmount } for  pid=11234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  531.655678][ T3558] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.669292][ T3558] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  531.678825][ T2268] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  531.696016][ T2268] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.712991][ T2268] usb 7-1: Product: syz
[  531.719843][T12297] wireguard2: entered allmulticast mode
[  531.731820][ T2268] usb 7-1: Manufacturer: syz
[  531.742162][ T2268] usb 7-1: SerialNumber: syz
[  531.767127][ T2268] usb 7-1: config 0 descriptor??
[  531.790015][ T3558] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.803488][ T2268] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  531.873020][ T3558] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  531.889916][ T5878] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  531.933284][ T2268] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  531.949995][ T2268] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  531.970098][T12307] bridge0: entered promiscuous mode
[  531.981527][ T2268] usb 7-1: media controller created
[  531.993396][T12310] netlink: 'syz.4.1444': attribute type 4 has an invalid length.
[  532.054337][ T2268] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  532.085119][ T3558] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.097537][ T5878] usb 9-1: Using ep0 maxpacket: 32
[  532.117836][ T3558] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  532.125709][ T5878] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  532.157808][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.190181][ T5878] usb 9-1: config 0 descriptor??
[  532.205333][ T2268] DVB: Unable to find symbol mt352_attach()
[  532.243121][ T3558] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.264812][ T3558] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  533.050828][ T5878] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  533.206198][T12304] bridge0: left promiscuous mode
[  533.219223][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  533.221162][ T2268] DVB: Unable to find symbol nxt6000_attach()
[  533.319043][ T2268] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  533.342332][ T2268] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input81
[  533.564468][ T2268] dvb-usb: schedule remote query interval to 1000 msecs.
[  533.577474][ T2268] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  533.597606][ T2268] dvb-usb: bulk message failed: -22 (7/0)
[  533.603361][ T2268] dvb-usb: bulk message failed: -22 (7/0)
[  533.636206][ T2268] usb 7-1: USB disconnect, device number 21
[  533.657910][ T3558] bridge_slave_1: left allmulticast mode
[  533.659711][ T5878] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  533.672960][ T3558] bridge_slave_1: left promiscuous mode
[  533.696700][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.697710][ T5878] usb 9-1: media controller created
[  533.732234][T12329] futex_wake_op: syz.4.1448 tries to shift op by -1; fix this program
[  533.848294][T12332] usb usb8: usbfs: process 12332 (syz.4.1448) did not claim interface 12 before use
[  533.865362][T12332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1448'.
[  533.893053][ T2268] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  534.020335][ T3558] bridge_slave_0: left allmulticast mode
[  534.033804][ T3558] bridge_slave_0: left promiscuous mode
[  534.085922][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.104300][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  534.893768][ T5878] az6027: usb out operation failed. (-71)
[  534.904818][ T5878] stb0899_attach: Driver disabled by Kconfig
[  534.921513][ T5878] az6027: no front-end attached
[  534.921513][ T5878] 
[  535.001160][ T5878] az6027: usb out operation failed. (-71)
[  535.006892][ T5878] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  535.146369][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input82
[  535.160178][ T5878] dvb-usb: schedule remote query interval to 400 msecs.
[  535.167186][ T5878] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  535.212364][ T5878] usb 9-1: USB disconnect, device number 15
[  535.265832][ T5878] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  535.296556][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  535.313387][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  535.331339][ T3558] bond0 (unregistering): (slave bond1): Releasing backup interface
[  535.341629][ T3558] bond0 (unregistering): Released all slaves
[  535.447494][ T6125] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  535.501311][ T3558] bond1 (unregistering): Released all slaves
[  535.607476][ T6125] usb 7-1: Using ep0 maxpacket: 8
[  535.639864][ T6125] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  535.649650][ T3558] bond2 (unregistering): (slave vcan1): Releasing backup interface
[  535.657612][ T6125] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.657642][ T6125] usb 7-1: Product: syz
[  535.657656][ T6125] usb 7-1: Manufacturer: syz
[  535.668985][ T3558] vcan1: left promiscuous mode
[  535.677411][ T6125] usb 7-1: SerialNumber: syz
[  535.689404][ T3558] bond2 (unregistering): Released all slaves
[  535.707215][ T6125] usb 7-1: config 0 descriptor??
[  535.711439][ T3558] bond3 (unregistering): Released all slaves
[  535.773945][T12347] 8021q: adding VLAN 0 to HW filter on device bond1
[  535.784033][T12347] bond0: (slave bond1): Enslaving as an active interface with an up link
[  535.846321][T12353] FAULT_INJECTION: forcing a failure.
[  535.846321][T12353] name failslab, interval 1, probability 0, space 0, times 0
[  535.912981][T12353] CPU: 1 UID: 0 PID: 12353 Comm: syz.8.1455 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  535.913016][T12353] Tainted: [L]=SOFTLOCKUP
[  535.913023][T12353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  535.913034][T12353] Call Trace:
[  535.913041][T12353]  <TASK>
[  535.913049][T12353]  dump_stack_lvl+0x16c/0x1f0
[  535.913079][T12353]  should_fail_ex+0x512/0x640
[  535.913112][T12353]  should_failslab+0xc2/0x120
[  535.913139][T12353]  __kmalloc_noprof+0xeb/0x910
[  535.913169][T12353]  ? dev_prep_valid_name.constprop.0+0x16a/0x6c0
[  535.913206][T12353]  ? dev_prep_valid_name.constprop.0+0x16a/0x6c0
[  535.913235][T12353]  dev_prep_valid_name.constprop.0+0x16a/0x6c0
[  535.913272][T12353]  ? __pfx_dev_prep_valid_name.constprop.0+0x10/0x10
[  535.913309][T12353]  ? lockdep_init_map_type+0x5c/0x270
[  535.913335][T12353]  register_netdevice+0x49d/0x21d0
[  535.913361][T12353]  ? __pfx_validate_linkmsg+0x10/0x10
[  535.913382][T12353]  ? __pfx_register_netdevice+0x10/0x10
[  535.913412][T12353]  bond_newlink+0x6a/0x100
[  535.913432][T12353]  ? __pfx_bond_newlink+0x10/0x10
[  535.913452][T12353]  rtnl_newlink+0xc19/0x1f50
[  535.913482][T12353]  ? __pfx_rtnl_newlink+0x10/0x10
[  535.913500][T12353]  ? find_held_lock+0x2b/0x80
[  535.913529][T12353]  ? avc_has_perm_noaudit+0x117/0x3b0
[  535.913565][T12353]  ? avc_has_perm_noaudit+0x149/0x3b0
[  535.913620][T12353]  ? find_held_lock+0x2b/0x80
[  535.913645][T12353]  ? __pfx_rtnl_newlink+0x10/0x10
[  535.913663][T12353]  ? __pfx_rtnl_newlink+0x10/0x10
[  535.913683][T12353]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  535.913701][T12353]  ? __pfx_rtnl_newlink+0x10/0x10
[  535.913719][T12353]  rtnetlink_rcv_msg+0x95e/0xe90
[  535.913738][T12353]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  535.913762][T12353]  ? ref_tracker_free+0x37c/0x830
[  535.913791][T12353]  netlink_rcv_skb+0x158/0x420
[  535.913810][T12353]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  535.913829][T12353]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  535.913855][T12353]  ? netlink_deliver_tap+0x1ae/0xd30
[  535.913878][T12353]  netlink_unicast+0x5aa/0x870
[  535.913900][T12353]  ? __pfx_netlink_unicast+0x10/0x10
[  535.913930][T12353]  netlink_sendmsg+0x8c8/0xdd0
[  535.913953][T12353]  ? __pfx_netlink_sendmsg+0x10/0x10
[  535.913984][T12353]  ____sys_sendmsg+0xa5d/0xc30
[  535.914006][T12353]  ? copy_msghdr_from_user+0x10a/0x160
[  535.914021][T12353]  ? __pfx_____sys_sendmsg+0x10/0x10
[  535.914054][T12353]  ___sys_sendmsg+0x134/0x1d0
[  535.914072][T12353]  ? __pfx____sys_sendmsg+0x10/0x10
[  535.914087][T12353]  ? __pfx___irq_work_queue_local+0x10/0x10
[  535.914133][T12353]  __sys_sendmsg+0x16d/0x220
[  535.914150][T12353]  ? __pfx___sys_sendmsg+0x10/0x10
[  535.914164][T12353]  ? __pfx_bpf_trace_run2+0x10/0x10
[  535.914190][T12353]  ? syscall_trace_enter+0x1cb/0x220
[  535.914216][T12353]  ? rcu_is_watching+0x12/0xc0
[  535.914233][T12353]  do_syscall_64+0xcd/0xf80
[  535.914256][T12353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.914272][T12353] RIP: 0033:0x7f347938f749
[  535.914284][T12353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  535.914300][T12353] RSP: 002b:00007f347a15a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  535.914317][T12353] RAX: ffffffffffffffda RBX: 00007f34795e5fa0 RCX: 00007f347938f749
[  535.914328][T12353] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[  535.914337][T12353] RBP: 00007f347a15a090 R08: 0000000000000000 R09: 0000000000000000
[  535.914346][T12353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  535.914355][T12353] R13: 00007f34795e6038 R14: 00007f34795e5fa0 R15: 00007ffc1875b638
[  535.914377][T12353]  </TASK>
[  536.292090][ T6125] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  536.298753][ T6125] gspca_sunplus: reg_w_riv err -71
[  536.303934][ T6125] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  536.314830][ T6125] usb 7-1: USB disconnect, device number 22
[  536.526455][ T3558] : left promiscuous mode
[  537.689086][T12379] FAULT_INJECTION: forcing a failure.
[  537.689086][T12379] name failslab, interval 1, probability 0, space 0, times 0
[  537.702347][T12379] CPU: 0 UID: 0 PID: 12379 Comm: syz.6.1463 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  537.702376][T12379] Tainted: [L]=SOFTLOCKUP
[  537.702383][T12379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  537.702394][T12379] Call Trace:
[  537.702400][T12379]  <TASK>
[  537.702408][T12379]  dump_stack_lvl+0x16c/0x1f0
[  537.702438][T12379]  should_fail_ex+0x512/0x640
[  537.702463][T12379]  ? __kmalloc_cache_noprof+0x5f/0x800
[  537.702494][T12379]  should_failslab+0xc2/0x120
[  537.702518][T12379]  __kmalloc_cache_noprof+0x80/0x800
[  537.702545][T12379]  ? ovl_init_fs_context+0x11f/0x5f0
[  537.702569][T12379]  ? ovl_init_fs_context+0x11f/0x5f0
[  537.702588][T12379]  ovl_init_fs_context+0x11f/0x5f0
[  537.702608][T12379]  ? __pfx_ovl_init_fs_context+0x10/0x10
[  537.702629][T12379]  alloc_fs_context+0x629/0xf50
[  537.702652][T12379]  path_mount+0xe21/0x23a0
[  537.702669][T12379]  ? rcu_is_watching+0x12/0xc0
[  537.702690][T12379]  ? __pfx_path_mount+0x10/0x10
[  537.702706][T12379]  ? kmem_cache_free+0x2d8/0x770
[  537.702725][T12379]  ? putname+0xf5/0x1a0
[  537.702753][T12379]  ? putname+0xf5/0x1a0
[  537.702776][T12379]  ? putname+0xf5/0x1a0
[  537.702804][T12379]  ? __x64_sys_mount+0x293/0x310
[  537.702820][T12379]  __x64_sys_mount+0x293/0x310
[  537.702837][T12379]  ? __pfx___x64_sys_mount+0x10/0x10
[  537.702853][T12379]  ? syscall_trace_enter+0x1cb/0x220
[  537.702882][T12379]  ? rcu_is_watching+0x12/0xc0
[  537.702901][T12379]  do_syscall_64+0xcd/0xf80
[  537.702926][T12379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.702945][T12379] RIP: 0033:0x7fae6138f749
[  537.702960][T12379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  537.702978][T12379] RSP: 002b:00007fae621cc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  537.703002][T12379] RAX: ffffffffffffffda RBX: 00007fae615e5fa0 RCX: 00007fae6138f749
[  537.703014][T12379] RDX: 0000200000000080 RSI: 0000200000000100 RDI: 0000000000000000
[  537.703025][T12379] RBP: 00007fae621cc090 R08: 0000200000000200 R09: 0000000000000000
[  537.703036][T12379] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002
[  537.703047][T12379] R13: 00007fae615e6038 R14: 00007fae615e5fa0 R15: 00007fffa5748968
[  537.703071][T12379]  </TASK>
[  538.006497][   T30] audit: type=1400 audit(1766464156.552:1651): avc:  denied  { ioctl } for  pid=12355 comm="syz.4.1456" path="socket:[41568]" dev="sockfs" ino=41568 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  538.027688][ T2268] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  538.068785][ T6125] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  538.237442][ T6125] usb 4-1: Using ep0 maxpacket: 32
[  538.242674][ T2268] usb 8-1: Using ep0 maxpacket: 32
[  538.250889][ T2268] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  538.272933][ T6125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  538.297764][ T2268] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  538.349495][ T6125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  538.361964][ T2268] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  538.387464][ T6125] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  538.397778][ T2268] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  538.411102][ T6125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.422126][ T6125] usb 4-1: config 0 descriptor??
[  538.436542][ T2268] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  538.446815][ T6125] hub 4-1:0.0: USB hub found
[  538.459936][ T2268] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.468369][ T2268] usb 8-1: Product: syz
[  538.472553][ T2268] usb 8-1: Manufacturer: syz
[  538.477157][ T2268] usb 8-1: SerialNumber: syz
[  538.490057][    C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  538.499198][ T2268] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input83
[  538.655756][ T6125] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  538.717456][ T2268] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  538.747075][ T2268]  (id 0x00)
[  538.897593][ T2268] rc_core: IR keymap rc-imon-pad not found
[  538.924828][ T2268] Registered IR keymap rc-empty
[  538.943521][ T2268] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  538.973773][ T3558] hsr_slave_0: left promiscuous mode
[  539.158843][ T3558] hsr_slave_1: left promiscuous mode
[  539.165220][ T2268] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  539.174872][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.182688][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.191077][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.199296][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.208213][ T2268] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0
[  539.667146][ T2268] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input84
[  539.682415][ T2268] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:17> initialized
[  539.694657][ T2268] usb 8-1: USB disconnect, device number 17
[  539.754972][ T6125] usbhid 4-1:0.0: can't add hid device: -71
[  539.878203][   T30] audit: type=1400 audit(1766464158.422:1652): avc:  denied  { ioctl } for  pid=12397 comm="syz.8.1469" path="socket:[42315]" dev="sockfs" ino=42315 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  539.883842][ T6125] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  540.017458][T12405] ubi: mtd0 is already attached to ubi31
[  540.228885][ T6125] usb 4-1: USB disconnect, device number 59
[  540.244224][ T3558] veth1_macvtap: left promiscuous mode
[  540.260226][ T3558] veth0_macvtap: left promiscuous mode
[  540.267065][ T3558] veth1_vlan: left promiscuous mode
[  540.277684][ T3558] v: left promiscuous mode
[  540.600609][T12419] ptrace attach of "./syz-executor exec"[12423] was attempted by "./syz-executor exec"[12419]
[  540.637489][ T2268] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  540.837697][ T2268] usb 8-1: Using ep0 maxpacket: 8
[  540.853477][ T2268] usb 8-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  540.863260][ T2268] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.871497][ T2268] usb 8-1: Product: syz
[  540.875894][ T2268] usb 8-1: Manufacturer: syz
[  540.880581][ T2268] usb 8-1: SerialNumber: syz
[  540.895365][ T2268] usb 8-1: config 0 descriptor??
[  541.130610][ T2268] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  541.140791][ T3558] team0 (unregistering): Port device team_slave_1 removed
[  541.185129][ T3558] team0 (unregistering): Port device team_slave_0 removed
[  541.606863][T12399] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  541.616515][ T2268] gspca_sunplus: reg_w_riv err -71
[  541.667512][ T2268] sunplus 8-1:0.0: probe with driver sunplus failed with error -71
[  541.684669][ T2268] usb 8-1: USB disconnect, device number 18
[  543.198139][   T30] audit: type=1400 audit(1766464161.552:1653): avc:  denied  { bind } for  pid=12461 comm="syz.8.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  543.937913][T12494] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1486'.
[  543.983228][T12492] ptrace attach of "./syz-executor exec"[12493] was attempted by "./syz-executor exec"[12492]
[  545.200819][T12517] Invalid source name
[  545.204839][T12517] UBIFS error (pid: 12517): cannot open "ubifs", error -22
[  545.214093][T12517] bridge2: entered promiscuous mode
[  545.227443][T12517] bridge2: entered allmulticast mode
[  545.250241][T12517] team0: Port device bridge2 added
[  545.283552][T12517] bridge0: port 3(team0) entered blocking state
[  545.347578][T12517] bridge0: port 3(team0) entered disabled state
[  545.376731][T12517] team0: entered allmulticast mode
[  545.538603][T12517] team_slave_0: entered allmulticast mode
[  545.571989][T12517] team_slave_1: entered allmulticast mode
[  545.977464][T12517] team0: entered promiscuous mode
[  545.988932][T12517] team_slave_0: entered promiscuous mode
[  545.989797][ T9172] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0
[  546.017783][T12517] team_slave_1: entered promiscuous mode
[  546.021052][T12531] FAULT_INJECTION: forcing a failure.
[  546.021052][T12531] name failslab, interval 1, probability 0, space 0, times 0
[  546.027433][ T9172] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0
[  546.044939][T12517] bridge0: port 3(team0) entered blocking state
[  546.052079][T12517] bridge0: port 3(team0) entered forwarding state
[  546.082954][T12531] CPU: 1 UID: 0 PID: 12531 Comm: syz.3.1488 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  546.082987][T12531] Tainted: [L]=SOFTLOCKUP
[  546.082994][T12531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  546.083005][T12531] Call Trace:
[  546.083011][T12531]  <TASK>
[  546.083018][T12531]  dump_stack_lvl+0x16c/0x1f0
[  546.083048][T12531]  should_fail_ex+0x512/0x640
[  546.083075][T12531]  ? kmem_cache_alloc_noprof+0x62/0x770
[  546.083097][T12531]  should_failslab+0xc2/0x120
[  546.083121][T12531]  kmem_cache_alloc_noprof+0x83/0x770
[  546.083140][T12531]  ? alloc_empty_file+0x55/0x1e0
[  546.083163][T12531]  ? alloc_empty_file+0x55/0x1e0
[  546.083178][T12531]  alloc_empty_file+0x55/0x1e0
[  546.083196][T12531]  alloc_file_pseudo+0x13a/0x230
[  546.083215][T12531]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  546.083240][T12531]  __shmem_file_setup+0x1a8/0x350
[  546.083266][T12531]  shmem_zero_setup+0x93/0x1b0
[  546.083284][T12531]  __mmap_region+0x2271/0x2a00
[  546.083305][T12531]  ? __lock_acquire+0x436/0x2890
[  546.083326][T12531]  ? __pfx___mmap_region+0x10/0x10
[  546.083362][T12531]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  546.083383][T12531]  ? is_bpf_text_address+0x94/0x1a0
[  546.083413][T12531]  ? __lock_acquire+0x436/0x2890
[  546.083470][T12531]  ? mm_get_unmapped_area_vmflags+0xd7/0x130
[  546.083504][T12531]  mmap_region+0x1ab/0x3f0
[  546.083520][T12531]  ? __get_unmapped_area+0x267/0x3f0
[  546.083543][T12531]  do_mmap+0xa3e/0x1210
[  546.083569][T12531]  ? __pfx_do_mmap+0x10/0x10
[  546.083592][T12531]  ? __pfx_down_write_killable+0x10/0x10
[  546.083647][T12531]  vm_mmap_pgoff+0x29e/0x470
[  546.083673][T12531]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  546.083698][T12531]  ? bpf_trace_run2+0x2ab/0x5c0
[  546.083720][T12531]  ? __pfx_bpf_trace_run2+0x10/0x10
[  546.083744][T12531]  ksys_mmap_pgoff+0x7d/0x5c0
[  546.083767][T12531]  ? syscall_trace_enter+0x1cb/0x220
[  546.083796][T12531]  __x64_sys_mmap+0x125/0x190
[  546.083820][T12531]  do_syscall_64+0xcd/0xf80
[  546.083845][T12531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.083862][T12531] RIP: 0033:0x7f8ab7d8f749
[  546.083879][T12531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  546.083896][T12531] RSP: 002b:00007f8ab8c7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  546.083914][T12531] RAX: ffffffffffffffda RBX: 00007f8ab7fe6180 RCX: 00007f8ab7d8f749
[  546.083925][T12531] RDX: d3283d0368e269b3 RSI: 000000000000a000 RDI: 0000200000000000
[  546.083936][T12531] RBP: 00007f8ab8c7d090 R08: ffffffffffffffff R09: 0000000000000000
[  546.083947][T12531] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001
[  546.083957][T12531] R13: 00007f8ab7fe6218 R14: 00007f8ab7fe6180 R15: 00007ffdba65d718
[  546.083984][T12531]  </TASK>
[  546.729581][ T9172] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0
[  546.737032][ T9172] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0
[  546.744593][ T9172] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0
[  546.752037][ T9172] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0
[  546.759491][ T9172] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0
[  546.766898][ T9172] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0
[  546.774389][ T9172] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0
[  546.781838][ T9172] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0
[  546.800468][   T30] audit: type=1400 audit(1766464165.352:1654): avc:  denied  { setcheckreqprot } for  pid=12536 comm="syz.8.1496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  546.833434][ T9172] hid-generic 00A0:0006:0003.000F: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  546.948120][ T5878] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  547.062280][T12541] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  547.108422][ T5878] usb 5-1: Using ep0 maxpacket: 8
[  547.117501][T12541] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  547.118424][ T5878] usb 5-1: config 0 has an invalid interface number: 94 but max is 0
[  547.149742][ T9172] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  547.157263][ T5878] usb 5-1: config 0 has no interface number 0
[  547.171114][   T30] audit: type=1400 audit(1766464165.722:1655): avc:  denied  { firmware_load } for  pid=12536 comm="syz.8.1496" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  547.213053][T12541] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[  547.297589][ T2268] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  547.317464][ T5878] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd
[  547.326569][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.352607][ T5878] usb 5-1: config 0 descriptor??
[  547.374219][ T5878] bfusb 5-1:0.94: probe with driver bfusb failed with error -5
[  547.458947][ T9172] usb 7-1: config 0 has no interfaces?
[  547.473776][ T9172] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  547.488960][ T9172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.501814][ T9172] usb 7-1: Product: syz
[  547.506053][ T9172] usb 7-1: Manufacturer: syz
[  547.512235][ T9172] usb 7-1: SerialNumber: syz
[  547.539815][ T2268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  547.602420][ T2268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  547.623026][ T9172] usb 7-1: config 0 descriptor??
[  547.656140][ T5878] usb 5-1: USB disconnect, device number 43
[  547.682693][ T2268] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  547.727405][ T2268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.759127][ T2268] usb 4-1: config 0 descriptor??
[  547.992295][T11839] usb 7-1: USB disconnect, device number 23
[  548.060639][T12555] bridge0: port 4(dummy0) entered disabled state
[  548.067996][T12555] bridge0: port 3(gretap0) entered disabled state
[  548.074580][T12555] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.083237][T12555] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.095344][T12576] ptrace attach of "./syz-executor exec"[12582] was attempted by "./syz-executor exec"[12576]
[  548.921640][ T2268] magicmouse 0003:05AC:0324.0010: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0
[  549.238527][T12595] Cannot find add_set index 0 as target
[  549.263950][ T2268] usb 4-1: USB disconnect, device number 60
[  549.302267][T12600] futex_wake_op: syz.6.1505 tries to shift op by -1; fix this program
[  549.830221][T12600] usb usb8: usbfs: process 12600 (syz.6.1505) did not claim interface 12 before use
[  549.841769][T12600] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1505'.
[  550.333360][T12619] futex_wake_op: syz.8.1511 tries to shift op by -1; fix this program
[  550.453790][T12621] usb usb8: usbfs: process 12621 (syz.8.1511) did not claim interface 12 before use
[  550.484421][T12621] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1511'.
[  550.714085][   T30] audit: type=1400 audit(1766464169.262:1656): avc:  denied  { write } for  pid=12622 comm="syz.3.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  550.984921][ T6125] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  551.055616][T12637] ptrace attach of "./syz-executor exec"[12638] was attempted by "./syz-executor exec"[12637]
[  551.134585][   T30] audit: type=1400 audit(1766464169.682:1657): avc:  denied  { ioctl } for  pid=12631 comm="syz.3.1514" path="socket:[43199]" dev="sockfs" ino=43199 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  551.182996][ T6125] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.204078][ T6125] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  551.241755][ T6125] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  551.254320][   T30] audit: type=1400 audit(1766464169.782:1658): avc:  denied  { read } for  pid=12643 comm="syz.8.1516" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  551.281421][ T6125] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.292029][ T6125] usb 7-1: Product: syz
[  551.305570][ T6125] usb 7-1: Manufacturer: syz
[  551.313604][ T6125] usb 7-1: SerialNumber: syz
[  551.351065][T12649] kernel profiling enabled (shift: 16)
[  551.528385][T12629] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  552.945068][ T6125] cdc_ncm 7-1:1.0: bind() failure
[  552.958367][ T6125] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  552.971042][ T6125] cdc_ncm 7-1:1.1: bind() failure
[  552.988575][ T6125] usb 7-1: USB disconnect, device number 24
[  553.015754][T12682] SET target dimension over the limit!
[  553.427865][   T30] audit: type=1400 audit(1766464171.952:1659): avc:  denied  { remount } for  pid=12684 comm="syz.7.1526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  554.583051][T12707] ptrace attach of "./syz-executor exec"[12712] was attempted by "./syz-executor exec"[12707]
[  554.910464][   T30] audit: type=1400 audit(1766464173.452:1660): avc:  denied  { append } for  pid=12720 comm="syz.3.1536" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  555.007566][T11839] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  555.015721][ T9172] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  555.349076][T11839] usb 5-1: Using ep0 maxpacket: 16
[  555.359808][T11839] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  555.370994][T11839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.380229][T11839] usb 5-1: Product: syz
[  555.381183][ T9172] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  555.384835][T11839] usb 5-1: Manufacturer: syz
[  555.397387][ T9172] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  555.399735][T11839] usb 5-1: SerialNumber: syz
[  555.415467][T11839] usb 5-1: config 0 descriptor??
[  555.418025][ T9172] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  555.423770][T11839] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  555.431962][ T9172] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  555.444208][ T9172] usb 7-1: SerialNumber: syz
[  555.455840][T12729] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[  555.462365][T12729] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  555.474085][T12729] vhci_hcd vhci_hcd.0: Device attached
[  555.817895][ T6125] usb 49-1: new low-speed USB device number 2 using vhci_hcd
[  555.825556][T11839] usb 5-1: clie_3_5_startup: get config number failed: -71
[  555.826725][ T2268] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  555.853930][ T9172] usb 7-1: 0:2 : does not exist
[  555.858479][T11839] visor 5-1:0.0: probe with driver visor failed with error -71
[  555.860929][ T9172] usb 7-1: unit 5 not found!
[  555.890251][ T9172] usb 7-1: USB disconnect, device number 25
[  555.898540][T11839] usb 5-1: USB disconnect, device number 44
[  555.942025][T12736] futex_wake_op: syz.3.1539 tries to shift op by -1; fix this program
[  555.987641][ T2268] usb 9-1: device descriptor read/64, error -71
[  556.156961][T12737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1539'.
[  556.256166][ T5878] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  556.256166][ T2268] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  556.417454][ T5878] usb 8-1: Using ep0 maxpacket: 16
[  556.417510][ T2268] usb 9-1: device descriptor read/64, error -71
[  556.425903][ T5878] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  556.438419][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.446752][ T5878] usb 8-1: Product: syz
[  556.451089][ T5878] usb 8-1: Manufacturer: syz
[  556.455681][ T5878] usb 8-1: SerialNumber: syz
[  556.504524][ T5878] usb 8-1: config 0 descriptor??
[  556.513181][ T5878] visor 8-1:0.0: Sony Clie 3.5 converter detected
[  556.552355][ T2268] usb usb9-port1: attempt power cycle
[  557.729256][ T5878] usb 8-1: clie_3_5_startup: get config number failed: -71
[  557.748714][ T5878] visor 8-1:0.0: probe with driver visor failed with error -71
[  557.767599][ T5878] usb 8-1: USB disconnect, device number 19
[  557.777462][ T2268] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  557.807496][T11839] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  557.815315][ T2268] usb 9-1: device descriptor read/8, error -71
[  557.853201][T12742] overlayfs: missing 'lowerdir'
[  557.976962][T11839] usb 5-1: Using ep0 maxpacket: 32
[  557.997266][T11839] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  558.028160][T11839] usb 5-1: config 0 interface 0 has no altsetting 0
[  558.035649][T11839] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00
[  558.046649][T11839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.062913][T11839] usb 5-1: config 0 descriptor??
[  558.103753][ T2268] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  558.129267][T12748] ptrace attach of "./syz-executor exec"[12752] was attempted by "./syz-executor exec"[12748]
[  558.140175][ T2268] usb 9-1: device descriptor read/8, error -71
[  558.284370][T12740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.308462][ T2268] usb usb9-port1: unable to enumerate USB device
[  558.328153][T12740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.734688][T12730] vhci_hcd: connection reset by peer
[  558.743485][T11839] hid_parser_main: 1 callbacks suppressed
[  558.743505][T11839] aquacomputer_d5next 0003:0C70:F00E.0011: unknown main item tag 0x0
[  558.776582][ T1996] vhci_hcd vhci_hcd.8: stop threads
[  558.782131][ T1996] vhci_hcd vhci_hcd.8: release socket
[  558.792315][ T1996] vhci_hcd vhci_hcd.8: disconnect device
[  558.820193][T11839] aquacomputer_d5next 0003:0C70:F00E.0011: unknown main item tag 0x0
[  558.843438][T11839] aquacomputer_d5next 0003:0C70:F00E.0011: unknown main item tag 0x0
[  558.862139][T11839] aquacomputer_d5next 0003:0C70:F00E.0011: unknown main item tag 0x0
[  558.871751][   T30] audit: type=1400 audit(1766464177.422:1661): avc:  denied  { name_bind } for  pid=12758 comm="syz.3.1547" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  558.905891][T11839] aquacomputer_d5next 0003:0C70:F00E.0011: unknown main item tag 0x0
[  558.932354][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.954145][T11839] aquacomputer_d5next 0003:0C70:F00E.0011: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.4-1/input0
[  558.954328][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  559.077732][T11839] usb 5-1: USB disconnect, device number 45
[  559.171703][T12766] XFS (nbd3): SB validate failed with error -5.
[  559.897449][T11839] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  560.067589][T11839] usb 5-1: Using ep0 maxpacket: 16
[  560.089164][T11839] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  560.114692][T11839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.149888][T11839] usb 5-1: Product: syz
[  560.165046][T12790] FAULT_INJECTION: forcing a failure.
[  560.165046][T12790] name failslab, interval 1, probability 0, space 0, times 0
[  560.184311][T11839] usb 5-1: Manufacturer: syz
[  560.203760][T11839] usb 5-1: SerialNumber: syz
[  560.227550][T12790] CPU: 1 UID: 0 PID: 12790 Comm: syz.8.1553 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  560.227582][T12790] Tainted: [L]=SOFTLOCKUP
[  560.227588][T12790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  560.227599][T12790] Call Trace:
[  560.227606][T12790]  <TASK>
[  560.227614][T12790]  dump_stack_lvl+0x16c/0x1f0
[  560.227644][T12790]  should_fail_ex+0x512/0x640
[  560.227671][T12790]  ? fs_reclaim_acquire+0xae/0x150
[  560.227699][T12790]  should_failslab+0xc2/0x120
[  560.227725][T12790]  __kmalloc_noprof+0xeb/0x910
[  560.227754][T12790]  ? tomoyo_encode2+0x100/0x3e0
[  560.227784][T12790]  ? tomoyo_encode2+0x100/0x3e0
[  560.227807][T12790]  tomoyo_encode2+0x100/0x3e0
[  560.227835][T12790]  tomoyo_encode+0x29/0x50
[  560.227859][T12790]  tomoyo_realpath_from_path+0x18f/0x6e0
[  560.227888][T12790]  ? tomoyo_profile+0x47/0x60
[  560.227918][T12790]  tomoyo_path_number_perm+0x245/0x580
[  560.227939][T12790]  ? tomoyo_path_number_perm+0x237/0x580
[  560.227963][T12790]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  560.228012][T12790]  ? find_held_lock+0x2b/0x80
[  560.228040][T12790]  ? hook_file_ioctl_common+0x144/0x410
[  560.228074][T12790]  ? __fget_files+0x20e/0x3c0
[  560.228104][T12790]  security_file_ioctl+0x9b/0x240
[  560.228134][T12790]  __x64_sys_ioctl+0xb7/0x210
[  560.228158][T12790]  do_syscall_64+0xcd/0xf80
[  560.228184][T12790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.228204][T12790] RIP: 0033:0x7f347938f749
[  560.228219][T12790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  560.228237][T12790] RSP: 002b:00007f347a15a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  560.228256][T12790] RAX: ffffffffffffffda RBX: 00007f34795e5fa0 RCX: 00007f347938f749
[  560.228269][T12790] RDX: 0000200000000000 RSI: 000000004068aea3 RDI: 0000000000000004
[  560.228280][T12790] RBP: 00007f347a15a090 R08: 0000000000000000 R09: 0000000000000000
[  560.228292][T12790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  560.228303][T12790] R13: 00007f34795e6038 R14: 00007f34795e5fa0 R15: 00007ffc1875b638
[  560.228330][T12790]  </TASK>
[  560.462422][T11839] usb 5-1: config 0 descriptor??
[  560.470166][T11839] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  560.477264][T12790] ERROR: Out of memory at tomoyo_realpath_from_path.
[  561.259157][ T6125] vhci_hcd vhci_hcd.8: vhci_device speed not set
[  561.522005][T11839] usb 5-1: clie_3_5_startup: get config number failed: -71
[  561.546619][T11839] visor 5-1:0.0: probe with driver visor failed with error -71
[  561.592435][T11839] usb 5-1: USB disconnect, device number 46
[  561.619506][T12798] netlink: 'syz.8.1555': attribute type 1 has an invalid length.
[  561.865338][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  561.952499][T12798] 8021q: adding VLAN 0 to HW filter on device bond1
[  562.217452][ T5878] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  562.220921][T12806] bond0 (unregistering): Released all slaves
[  562.378792][ T5878] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  562.406760][ T5878] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  562.432837][ T5878] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  562.462294][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  562.487472][ T5878] usb 8-1: SerialNumber: syz
[  562.819072][ T5878] usb 8-1: 0:2 : does not exist
[  563.376107][ T5878] usb 8-1: USB disconnect, device number 20
[  563.689618][ T6107] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  563.707753][   T30] audit: type=1400 audit(1766464182.252:1662): avc:  denied  { mounton } for  pid=12830 comm="syz.7.1565" path="/proc/320" dev="proc" ino=43572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  563.711237][T12831] Invalid ELF header magic: != ELF
[  563.747481][   T30] audit: type=1400 audit(1766464182.262:1663): avc:  denied  { module_load } for  pid=12830 comm="syz.7.1565" path="/proc/320/cmdline" dev="proc" ino=4026532036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=system permissive=1
[  563.862395][ T6107] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  563.871618][ T9172] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  563.879495][ T6107] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.887700][ T6107] usb 9-1: Product: syz
[  563.892562][ T6107] usb 9-1: Manufacturer: syz
[  563.897164][ T6107] usb 9-1: SerialNumber: syz
[  563.904197][ T6107] usb 9-1: config 0 descriptor??
[  563.912140][ T6107] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  563.947554][ T5811] Bluetooth: hci2: command 0x0406 tx timeout
[  563.987448][ T6125] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  564.037402][ T9172] usb 4-1: Using ep0 maxpacket: 8
[  564.045933][ T9172] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  564.060056][ T9172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.071613][ T9172] usb 4-1: Product: syz
[  564.075932][ T9172] usb 4-1: Manufacturer: syz
[  564.080783][ T9172] usb 4-1: SerialNumber: syz
[  564.089451][ T9172] usb 4-1: config 0 descriptor??
[  564.157401][ T6125] usb 8-1: Using ep0 maxpacket: 32
[  564.174448][ T6125] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  564.200217][ T6125] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  564.212415][ T6125] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  564.223839][ T6125] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  564.270380][ T6125] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  564.279552][ T6125] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.290842][ T6125] usb 8-1: Product: syz
[  564.304984][ T9172] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  564.313952][ T6125] usb 8-1: Manufacturer: syz
[  564.321804][ T9172] gspca_sunplus: reg_w_riv err -71
[  564.330890][ T6125] usb 8-1: SerialNumber: syz
[  564.343859][ T9172] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  564.366768][    C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  564.377813][ T9172] usb 4-1: USB disconnect, device number 61
[  564.388080][ T6125] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input85
[  564.507496][ T5878] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  564.597416][ T6125] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  564.611161][ T6125]  (id 0x00)
[  564.657438][ T5878] usb 5-1: Using ep0 maxpacket: 16
[  564.680528][ T5878] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  564.692994][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.701662][ T5878] usb 5-1: Product: syz
[  564.707708][ T5878] usb 5-1: Manufacturer: syz
[  564.712649][ T5878] usb 5-1: SerialNumber: syz
[  564.737412][ T6125] rc_core: IR keymap rc-imon-pad not found
[  564.738135][ T5878] usb 5-1: config 0 descriptor??
[  564.743369][ T6125] Registered IR keymap rc-empty
[  564.743454][ T6125] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  564.743473][ T6125] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  564.796250][ T5878] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  564.799411][ T6125] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0
[  564.835054][ T6125] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input86
[  564.919077][ T6125] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:21> initialized
[  565.438958][ T5878] usb 5-1: clie_3_5_startup: get config number failed: -71
[  565.464828][ T5878] visor 5-1:0.0: probe with driver visor failed with error -71
[  565.480036][ T5878] usb 5-1: USB disconnect, device number 47
[  565.489427][ T6107] gspca_sunplus: reg_w_riv err -110
[  565.494761][ T6107] sunplus 9-1:0.0: probe with driver sunplus failed with error -110
[  565.504013][T12831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  565.577758][T12831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  565.599379][T12831] ------------[ cut here ]------------
[  565.604844][T12831] usb 1-1: BOGUS control dir, pipe 80001b80 doesn't match bRequestType c0
[  565.613619][T12831] WARNING: drivers/usb/core/urb.c:412 at usb_submit_urb+0x153e/0x1970, CPU#0: syz.7.1565/12831
[  565.624159][T12831] Modules linked in:
[  565.628748][T12831] CPU: 0 UID: 0 PID: 12831 Comm: syz.7.1565 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  565.639756][T12831] Tainted: [L]=SOFTLOCKUP
[  565.644061][T12831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  565.654593][T12831] RIP: 0010:usb_submit_urb+0x1549/0x1970
[  565.660461][T12831] Code: 30 48 89 7c 24 38 e8 c6 b5 a8 fa 48 8b 7c 24 38 e8 7c 79 d0 fe 48 89 c6 48 8d 3d 32 41 7e 09 48 8b 54 24 30 45 89 e8 44 89 f9 <67> 48 0f b9 3a e9 fd ed ff ff 48 89 7c 24 30 e8 93 b5 a8 fa 48 8b
[  565.680243][T12831] RSP: 0018:ffffc9000b6ef970 EFLAGS: 00010283
[  565.686294][T12831] RAX: ffffffff8c5455c0 RBX: ffff888048aa7c00 RCX: 0000000080001b80
[  565.694303][T12831] RDX: ffff888046a26f00 RSI: ffffffff8c5455c0 RDI: ffffffff909471f0
[  565.702384][T12831] RBP: ffff888141e87058 R08: 00000000000000c0 R09: 0000000000000000
[  565.710420][T12831] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802a31c380
[  565.718448][T12831] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080001b80
[  565.726413][T12831] FS:  00007ff7fd8036c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000
[  565.735355][T12831] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  565.741942][T12831] CR2: 0000001b2faefff8 CR3: 00000000590b5000 CR4: 00000000003526f0
[  565.749956][T12831] Call Trace:
[  565.753213][T12831]  <TASK>
[  565.756136][T12831]  ? __init_swait_queue_head+0xca/0x150
[  565.761701][T12831]  usb_start_wait_urb+0x104/0x4e0
[  565.766712][T12831]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  565.772325][T12831]  ? __asan_memset+0x23/0x50
[  565.776898][T12831]  usb_control_msg+0x326/0x4a0
[  565.781694][T12831]  ? __pfx_usb_control_msg+0x10/0x10
[  565.786966][T12831]  dib0700_ctrl_rd+0x1b2/0x350
[  565.791764][T12831]  dib0700_i2c_xfer+0xa9a/0xe40
[  565.796602][T12831]  __i2c_transfer+0x6b6/0x2100
[  565.801386][T12831]  ? lockdep_hardirqs_on+0x7c/0x110
[  565.806579][T12831]  ? __pfx___i2c_transfer+0x10/0x10
[  565.811800][T12831]  ? rt_mutex_slowtrylock+0xc9/0x100
[  565.817082][T12831]  i2c_transfer+0x1da/0x380
[  565.821605][T12831]  i2cdev_ioctl_rdwr+0x373/0x710
[  565.826543][T12831]  i2cdev_ioctl+0x628/0x840
[  565.831047][T12831]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  565.836048][T12831]  ? selinux_file_ioctl+0x180/0x270
[  565.841275][T12831]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  565.846276][T12831]  __x64_sys_ioctl+0x18e/0x210
[  565.851036][T12831]  do_syscall_64+0xcd/0xf80
[  565.855544][T12831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.861518][T12831] RIP: 0033:0x7ff7fc98f749
[  565.865908][T12831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  565.885537][T12831] RSP: 002b:00007ff7fd803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  565.893993][T12831] RAX: ffffffffffffffda RBX: 00007ff7fcbe5fa0 RCX: 00007ff7fc98f749
[  565.901964][T12831] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000008
[  565.909934][T12831] RBP: 00007ff7fca13f91 R08: 0000000000000000 R09: 0000000000000000
[  565.917917][T12831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  565.925872][T12831] R13: 00007ff7fcbe6038 R14: 00007ff7fcbe5fa0 R15: 00007fff828b1e88
[  565.933848][T12831]  </TASK>
[  565.936847][T12831] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  565.944102][T12831] CPU: 0 UID: 0 PID: 12831 Comm: syz.7.1565 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  565.955017][T12831] Tainted: [L]=SOFTLOCKUP
[  565.959311][T12831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  565.969359][T12831] Call Trace:
[  565.972618][T12831]  <TASK>
[  565.975524][T12831]  dump_stack_lvl+0x3d/0x1f0
[  565.980098][T12831]  vpanic+0x640/0x6f0
[  565.984072][T12831]  ? usb_submit_urb+0x153e/0x1970
[  565.989073][T12831]  panic+0xca/0xd0
[  565.992785][T12831]  ? __pfx_panic+0x10/0x10
[  565.997188][T12831]  check_panic_on_warn+0xab/0xb0
[  566.002103][T12831]  __warn+0x108/0x3c0
[  566.006061][T12831]  __report_bug+0x2a0/0x520
[  566.010538][T12831]  ? usb_submit_urb+0x153e/0x1970
[  566.015542][T12831]  ? __pfx___report_bug+0x10/0x10
[  566.020554][T12831]  ? lockdep_hardirqs_on+0x7c/0x110
[  566.025740][T12831]  ? kasan_save_stack+0x42/0x60
[  566.030582][T12831]  ? kasan_save_stack+0x33/0x60
[  566.035422][T12831]  report_bug_entry+0xe1/0x290
[  566.040161][T12831]  ? usb_submit_urb+0x1549/0x1970
[  566.045163][T12831]  handle_bug+0x18a/0x260
[  566.049473][T12831]  exc_invalid_op+0x17/0x50
[  566.053953][T12831]  asm_exc_invalid_op+0x1a/0x20
[  566.058777][T12831] RIP: 0010:usb_submit_urb+0x1549/0x1970
[  566.064389][T12831] Code: 30 48 89 7c 24 38 e8 c6 b5 a8 fa 48 8b 7c 24 38 e8 7c 79 d0 fe 48 89 c6 48 8d 3d 32 41 7e 09 48 8b 54 24 30 45 89 e8 44 89 f9 <67> 48 0f b9 3a e9 fd ed ff ff 48 89 7c 24 30 e8 93 b5 a8 fa 48 8b
[  566.083973][T12831] RSP: 0018:ffffc9000b6ef970 EFLAGS: 00010283
[  566.090014][T12831] RAX: ffffffff8c5455c0 RBX: ffff888048aa7c00 RCX: 0000000080001b80
[  566.097959][T12831] RDX: ffff888046a26f00 RSI: ffffffff8c5455c0 RDI: ffffffff909471f0
[  566.105903][T12831] RBP: ffff888141e87058 R08: 00000000000000c0 R09: 0000000000000000
[  566.113849][T12831] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802a31c380
[  566.121795][T12831] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080001b80
[  566.129762][T12831]  ? __init_swait_queue_head+0xca/0x150
[  566.135293][T12831]  usb_start_wait_urb+0x104/0x4e0
[  566.140301][T12831]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  566.145835][T12831]  ? __asan_memset+0x23/0x50
[  566.150402][T12831]  usb_control_msg+0x326/0x4a0
[  566.155142][T12831]  ? __pfx_usb_control_msg+0x10/0x10
[  566.160406][T12831]  dib0700_ctrl_rd+0x1b2/0x350
[  566.165152][T12831]  dib0700_i2c_xfer+0xa9a/0xe40
[  566.169993][T12831]  __i2c_transfer+0x6b6/0x2100
[  566.174757][T12831]  ? lockdep_hardirqs_on+0x7c/0x110
[  566.179951][T12831]  ? __pfx___i2c_transfer+0x10/0x10
[  566.185130][T12831]  ? rt_mutex_slowtrylock+0xc9/0x100
[  566.190404][T12831]  i2c_transfer+0x1da/0x380
[  566.194889][T12831]  i2cdev_ioctl_rdwr+0x373/0x710
[  566.199825][T12831]  i2cdev_ioctl+0x628/0x840
[  566.204309][T12831]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  566.209310][T12831]  ? selinux_file_ioctl+0x180/0x270
[  566.214490][T12831]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  566.219495][T12831]  __x64_sys_ioctl+0x18e/0x210
[  566.224237][T12831]  do_syscall_64+0xcd/0xf80
[  566.228721][T12831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.234606][T12831] RIP: 0033:0x7ff7fc98f749
[  566.238996][T12831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  566.258591][T12831] RSP: 002b:00007ff7fd803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  566.266991][T12831] RAX: ffffffffffffffda RBX: 00007ff7fcbe5fa0 RCX: 00007ff7fc98f749
[  566.274939][T12831] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000008
[  566.282897][T12831] RBP: 00007ff7fca13f91 R08: 0000000000000000 R09: 0000000000000000
[  566.290842][T12831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  566.298785][T12831] R13: 00007ff7fcbe6038 R14: 00007ff7fcbe5fa0 R15: 00007fff828b1e88
[  566.306750][T12831]  </TASK>
[  566.310016][T12831] Kernel Offset: disabled
[  566.314316][T12831] Rebooting in 86400 seconds..