last executing test programs:

54m3.916548438s ago: executing program 32 (id=878):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x202, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

51m22.323611205s ago: executing program 33 (id=2155):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r1}, &(0x7f0000000080)=0x8)

50m2.127015927s ago: executing program 1 (id=2532):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

50m2.083181159s ago: executing program 1 (id=2534):
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x3561, 0x80, 0x0, 0x271}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100)

50m1.716054767s ago: executing program 1 (id=2540):
userfaultfd(0x80001)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

50m1.128187397s ago: executing program 1 (id=2541):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
unshare(0x26020480)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)

50m0.899940696s ago: executing program 1 (id=2544):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

50m0.255789069s ago: executing program 1 (id=2547):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f0000000900800004"], 0x20)

50m0.114912161s ago: executing program 34 (id=2547):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f0000000900800004"], 0x20)

37m33.902899846s ago: executing program 0 (id=4909):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000007910000000000000c30000004000000095007400"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='ext4_da_write_pages_extent\x00', r5}, 0x18)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @dev}, &(0x7f00000009c0)=0x10)
getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000a00)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x4, 0xfd4, 0x7, 0x5, 0x2]}, &(0x7f0000000a80)=0x78)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)
r8 = dup(r1)
ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x1e, 0x16, 0x1e5, &(0x7f00000005c0)="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"})
write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r8, &(0x7f0000000280)={0x68, 0x0, 0x0, [{0x1, 0x2, 0x4, 0x5, '{@!\''}, {0x1, 0x7, 0x0, 0xffff}, {0x3, 0x7ff, 0x1, 0x2, '\x00'}]}, 0x68)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}})
fcntl$setownex(r4, 0xf, &(0x7f0000000ac0)={0x2})

37m32.960233816s ago: executing program 0 (id=4911):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012", 0x5}], 0x1, 0x0, 0x1f, 0x1f00c00e}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x20004840)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

37m30.363020272s ago: executing program 0 (id=4915):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x11, &(0x7f00000002c0), 0x2)

37m29.077547606s ago: executing program 0 (id=4917):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000008c000000000000006100"], 0x0, 0x29, 0x0, 0x4}, 0x28)
syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400001a08feffff0400000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000340)={0x0, 0x3})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
close(r2)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xd, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffa14e1e88b75fb48b4e9ebfb4d4011a78b5091346db30b0cfce24ef13"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001000000400000002000000000", @ANYRES32=0x0], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001b0007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d000106b062e586ee5a687e2ea91ed", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)

37m26.220010319s ago: executing program 0 (id=4926):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012", 0x5}], 0x1, 0x0, 0x1f, 0x1f00c00e}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x20004840)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

37m23.450275571s ago: executing program 0 (id=4931):
r0 = socket$pppoe(0x18, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = getpid()
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
r3 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, 0x0, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, 0x0, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x4000000000001aa, 0x0)
recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0x5, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20040000)
r7 = socket(0x22, 0x2, 0x2)
ioctl$IMGETCOUNT(r7, 0x80044944, &(0x7f0000000000))
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x2)
close_range(r8, 0xffffffffffffffff, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
fchdir(r8)

37m8.098473424s ago: executing program 35 (id=4931):
r0 = socket$pppoe(0x18, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = getpid()
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
r3 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, 0x0, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, 0x0, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x4000000000001aa, 0x0)
recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0x5, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20040000)
r7 = socket(0x22, 0x2, 0x2)
ioctl$IMGETCOUNT(r7, 0x80044944, &(0x7f0000000000))
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x2)
close_range(r8, 0xffffffffffffffff, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
fchdir(r8)

16m16.522132368s ago: executing program 2 (id=9311):
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
gettid()
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x800}, &(0x7f0000001200)=<r2=>0x0, &(0x7f0000001040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1})
io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0)

16m15.383769877s ago: executing program 2 (id=9314):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x1ee6, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000001, 0x35f, 0x0, r1}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(0x0, &(0x7f0000000380))
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
readv(r5, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1)

16m12.729482005s ago: executing program 2 (id=9320):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x3, 0x4000000)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
open(0x0, 0x1a1342, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x32}, 0x28)

16m11.650015448s ago: executing program 2 (id=9323):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000340)="c1c1b080cd29d3", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16m11.143981551s ago: executing program 2 (id=9326):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
open(0x0, 0x1a1342, 0x0)
socket$netlink(0x10, 0x3, 0x0)

16m10.099846499s ago: executing program 2 (id=9328):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x3807, 0x3, 0x3, 0x80000001}})
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'})
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0)

15m54.966127303s ago: executing program 36 (id=9328):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x3807, 0x3, 0x3, 0x80000001}})
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'})
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0)

3m15.180125268s ago: executing program 5 (id=11586):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x110, r1, 0x33224000)
sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

3m14.458510209s ago: executing program 5 (id=11587):
modify_ldt$write(0x1, &(0x7f0000000000)={0x9, 0x20000800}, 0x10)
modify_ldt$write2(0x11, &(0x7f0000000040)={0x9, 0x20000000, 0x4000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10)

3m14.343227863s ago: executing program 5 (id=11589):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0000006aac", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
recvmsg$can_j1939(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000480)=""/154, 0x9a}], 0x2}, 0x81)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newchain={0x90, 0x64, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0xa, 0xcf0cb0de83c21c32}, {0xf, 0x6}}, [@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x5}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_rsvp6={{0xa}, {0x40, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @loopback}, @TCA_RSVP_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}}]}, 0x90}}, 0x4080000)
syz_open_procfs(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffd, @empty, 0x3}, 0x1c)
unshare(0x2040400)
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0xe, 0x0, &(0x7f0000000900))
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

3m13.766657908s ago: executing program 5 (id=11590):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000206010400000000000000000000000005000100070000000900020073797a19000000000500050002000000050004000800000015"], 0x50}, 0x1, 0x0, 0x0, 0x44090}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x50}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r6, &(0x7f0000009c40), 0x0, 0x40000000, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3)
r8 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000940)=<r9=>0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0x7c81, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000), 0x10)

3m11.544529429s ago: executing program 5 (id=11597):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0xc0c6)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
munlockall()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008"], 0x92fc}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

3m7.912482422s ago: executing program 5 (id=11604):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x51)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}, {@cache_mmap}, {@aname={'aname', 0x3d, '/dev/audio1\x00'}}], [], 0x6b}})
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
r5 = add_key$keyring(&(0x7f0000001b40), &(0x7f0000001b80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
statx(r1, &(0x7f0000000080)='./file0\x00', 0x800, 0x100, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
write$P9_RSTATu(r3, &(0x7f0000000380)={0x61, 0x7d, 0x1, {{0x0, 0x40, 0x0, 0x6, {0x20, 0x3, 0x7}, 0x3a000000, 0x9, 0x1ff, 0xffffffffffffffff, 0x3, '@\'o', 0x1, '-', 0x5, 'aname', 0x4, '\xd8*}$'}, 0xc, '/dev/audio1\x00', 0xee01, 0xee01, r6}}, 0x61)
getgroups(0x2, &(0x7f0000001bc0)=[0xee01, <r7=>0xee00])
keyctl$chown(0x4, r5, 0xffffffffffffffff, r7)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3)

2m52.378518055s ago: executing program 37 (id=11604):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x51)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}, {@cache_mmap}, {@aname={'aname', 0x3d, '/dev/audio1\x00'}}], [], 0x6b}})
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
r5 = add_key$keyring(&(0x7f0000001b40), &(0x7f0000001b80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
statx(r1, &(0x7f0000000080)='./file0\x00', 0x800, 0x100, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
write$P9_RSTATu(r3, &(0x7f0000000380)={0x61, 0x7d, 0x1, {{0x0, 0x40, 0x0, 0x6, {0x20, 0x3, 0x7}, 0x3a000000, 0x9, 0x1ff, 0xffffffffffffffff, 0x3, '@\'o', 0x1, '-', 0x5, 'aname', 0x4, '\xd8*}$'}, 0xc, '/dev/audio1\x00', 0xee01, 0xee01, r6}}, 0x61)
getgroups(0x2, &(0x7f0000001bc0)=[0xee01, <r7=>0xee00])
keyctl$chown(0x4, r5, 0xffffffffffffffff, r7)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3)

2m36.43173274s ago: executing program 4 (id=11694):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = dup3(0xffffffffffffffff, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})

2m35.418601591s ago: executing program 4 (id=11696):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$pptp(0x18, 0x1, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000900)={{0x0, 0x4, 0x2, 0x0, 'syz1\x00', 0xd3}, 0x1, 0x200, 0x2, 0x0, 0x0, 0x3, 'syz1\x00', 0x0})
close_range(r3, 0xffffffffffffffff, 0x0)

2m34.360264236s ago: executing program 4 (id=11701):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x18, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x22281, 0x0)
ioctl$IOCTL_GET_NUM_DEVICES(r3, 0x40046104, &(0x7f00000001c0))
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r4 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x8b)
fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000000)='ro\x00', &(0x7f0000000080)='./file0\x00', r5)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x200c008, &(0x7f0000000300)='usrquota')
r6 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r7, 0x0, 0x0, 0x5412, 0x8000000, 0x50)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x1800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0)

2m32.595134445s ago: executing program 4 (id=11705):
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r1, 0x44, &(0x7f0000000280)=0x6)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc)
openat$tun(0xffffffffffffff9c, 0x0, 0x412240, 0x0)
waitid(0x2, r0, &(0x7f0000000180), 0x1, 0x0)
ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000000000)={&(0x7f00000003c0)="d38ce73f486462542ae8680d833958d203670fbe6bdea52f0d15ea2e0a385b4b87fbbc311e54db85cc9d7eb7012b02fb8458a41f038eb1d7eee2f05bea6d5bfbe7ddcfb7f2db9db02bbe8437a53861f6cb6e2a2fe22e91709011de06850267ac94c31e517a2df47ba94920c2b19d7eb7f7014e522a3894adee2f35e930006b8b8241446e8723e3", 0x87})
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
unshare(0x64000600)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x4040000)

2m31.590124715s ago: executing program 4 (id=11708):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b02, 0x0)
r2 = dup(r1)
write$UHID_INPUT(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

2m28.495688159s ago: executing program 4 (id=11718):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0xc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) (async)
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
socket(0x22, 0x2, 0x24) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd01"], 0xfdef) (async)
syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0xe244, 0x13580}, 0x0, 0x0) (async)
r8 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00')
lseek(r8, 0x2000, 0x0) (async)
sync()
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) (async)
syz_open_dev$midi(0x0, 0x500, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)

2m13.467568144s ago: executing program 38 (id=11718):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0xc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) (async)
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
socket(0x22, 0x2, 0x24) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd01"], 0xfdef) (async)
syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0xe244, 0x13580}, 0x0, 0x0) (async)
r8 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00')
lseek(r8, 0x2000, 0x0) (async)
sync()
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) (async)
syz_open_dev$midi(0x0, 0x500, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)

19.312893628s ago: executing program 8 (id=12134):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\\\x00', 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

17.894847943s ago: executing program 8 (id=12140):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18)
connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0xf0, 0x1}, 0xfe}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)

17.677365596s ago: executing program 8 (id=12141):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18)
connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0xf0, 0x1}, 0xfe}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (fail_nth: 1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)

16.959442302s ago: executing program 8 (id=12143):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

16.134673066s ago: executing program 8 (id=12144):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
timer_create(0x7, &(0x7f0000000200)={0x0, 0x38, 0x2, @thr={&(0x7f0000001280)="5a1f10162a02f1f52ae17e73fd3554875f72d1f0b9df2343cd67e176d0b6d70d7398eb6a0fb52450ccecbbdbba028f9ca965a3bdcc1cbc48e5f5959425b566cafddf28761ea37d54a73d2f7514b6e0e0ff02105d5574b316f661ff34f2bb3c296eb7a2b481abbd4e70b42b94e6e0d06e192a9a7642fc6d8eaae75df7bb087a34bb4ba3d9146e452326cb72fd7f0da9e86ba4a906a77e1f9bd13a28e6be5cd454b6cd3ae09969badb736b017c59bbd8d29884e120de82c2a5f6a40d2ddeabdcc2bbc52f0c6433e30beced2b771931941b8b62f5d47ead3c", &(0x7f0000001380)="53ef29fba5621ef60a9207e38a33d4b5108bd6027e825860d64962d2a66179cb16665d054a9ffd8c58f6995906a21566913fe33d198a74bb812ab58905febe823b6c761082f75a31ecd68a59cd0341b7ea4cfeea7b7cc39db6f049fa73d21648cc8355f7f505fb040b7c98fe47678db1fd707e77a61bb80f2e59787d91a38c876193babca8cc28eebefb2abff5467967857bf032fa9b22"}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000040)=[{0x0}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newtaction={0x174, 0x30, 0x1, 0x0, 0x0, {}, [{0x160, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xfffffffe}]}, {0x4, 0x4}, {0xc}, {0xc}}}, @m_gact={0x124, 0x9, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x8001, 0xa, 0x2, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0x9, 0x5, 0x2, 0xfffffffd}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3258, 0x2, 0x2, 0xf885, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0x2, 0x7, 0x0, 0x1e25}}, @TCA_GACT_PARMS={0x18, 0x2, {0x204, 0x9, 0x7, 0x7, 0x7}}]}, {0x80, 0x6, "ac7827b6a4fb5b8615c774d309dec9b9ba671e5f9427d624f7b8aca42f564f003ac925595c6a73bb850bfb5fc80f43073ef9df78da4e02c3ad5bdd5532c73f6e340d0367175e704f0929e080303f9ef70145e815b5b861dc3320a477397b000600ea59988501c165dcac4791f112e5afd3004bbecc6da8f25c8e503b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x174}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b0000000900000000200000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000a30d7e980080000000000000"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r6, 0x0, &(0x7f0000000540)=""/52}, 0x20)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r8 = dup3(r7, r4, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000240)="02844c94a28f6b6301c916c66b57f7cf7e25dbd6630f6d8c5279fdddf5e306b84800d322ce352da84319cbe699ff5e02272384817307290f93cbe91e96b924e53d857ecdffc3ea4f7a302c37c4ec30fab75279d3"})
r9 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000002180)={0xc, 0x0, &(0x7f0000002140)=[@free_buffer={0x40086303, r9}], 0x0, 0x0, 0x0})
r10 = mmap$binder(&(0x7f00001fc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x40)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xb8, 0x0, &(0x7f0000000540)=[@enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/240, 0xf0, 0x2, 0x1b}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/99, 0x63, 0x2, 0x6}}, &(0x7f0000000000)={0xfffffffffffffeba, 0x18, 0x40}}}, @free_buffer={0x40086303, r10}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@fda={0x66646185, 0x2, 0x0, 0x21}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/51, 0x33, 0x1, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/54, 0x36, 0x0, 0xb}}, &(0x7f0000000440)={0x0, 0x20, 0x48}}}, @clear_death={0x400c630f, 0x2}, @increfs], 0x1d, 0x0, &(0x7f0000000600)="7b0f78111811ae94a8cfaa510fb07f5882451386a60cbf0468cfc082f1"})

15.199758492s ago: executing program 8 (id=12151):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0)
r3 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440)=r2, 0x1)
pipe(&(0x7f00000000c0))
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x94)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000180), 0x2ae, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='.request_key_auth\x00', 0x0, 0xfffffffffffffffd)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000100)={0x0, 0x20, 0x10, 0x6dd, 0x4, 0x0, 0x2, 0xb05, 0x20, 0x1, 0x40, 0x7, &(0x7f0000000000)=[0x4], 0x8, 0x0})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x5d4c, 0x4)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x0)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
recvfrom(r6, 0x0, 0x0, 0x40010001, 0x0, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000004)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)

7.927607693s ago: executing program 9 (id=12174):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@fd={0x807, 0x1, 0x4, 0x8, 0x6, {}, {0x2, 0x2, 0x9, 0x6, 0x9, 0xfd, 'hT=7'}, 0x0, 0x4, {}, 0x4})
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046})

5.208334575s ago: executing program 9 (id=12180):
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x8010000000000084)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
wait4(0x0, &(0x7f0000000180), 0x1, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) (fail_nth: 1)

5.150158917s ago: executing program 6 (id=12181):
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RLOCK(r0, &(0x7f0000000080)={0x8, 0x35, 0x2, 0x3}, 0x8) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x24}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x3}]}}}]}, 0x3c}}, 0x0)

4.723942741s ago: executing program 9 (id=12183):
mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000000000001000', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x78, 0xffffffffffffffda, 0x0, {0x7c, 0x10, 0x0, {0x3, 0x0, 0x4030cfa2, 0x1, 0x5, 0x4, 0x80000000, 0xb, 0xe26, 0x5000, 0x5, 0x0, 0x0, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lseek(r2, 0x0, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0)
socket$inet(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000006111480000000000850000003b000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

4.712134719s ago: executing program 3 (id=12185):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (fail_nth: 1)

4.168885346s ago: executing program 9 (id=12187):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x61f0, 0x0) (fail_nth: 1)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x84)

3.941922924s ago: executing program 3 (id=12188):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
syz_open_dev$dri(&(0x7f0000000200), 0xffffffffacecc35e, 0x1690c0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x200008, 0x8169, 0x6, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0xff, 0x4)
pipe2$watch_queue(&(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x80)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000280)}})
r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r5, 0x39)
r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
dup(0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)

3.94137268s ago: executing program 6 (id=12189):
r0 = socket$inet6(0xa, 0x3, 0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$mixer(0xffffffffffffff9c, 0x0, 0x1c1140, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000020000000000000002000000850000002800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="89f82c2e0000000000ebff000000", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8805)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r2=>0x0})
waitid(0x0, r2, &(0x7f0000000140), 0x4, &(0x7f00000003c0))
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, 0x0, 0x5005)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f00000005c0)=0x7fff, 0x4)
creat(&(0x7f00000000c0)='./file0\x00', 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)

3.886155329s ago: executing program 7 (id=12190):
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=<r6=>0x0, &(0x7f00000003c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}})
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r8}, &(0x7f0000000d00), &(0x7f00000003c0)='%pS    \x00'}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r9=>r1, {0x99a9}}, './cgroup\x00'})
dup(r9)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f00000001c0), 0x0}, 0x20)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

3.078501224s ago: executing program 9 (id=12191):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (fail_nth: 1)

2.949097836s ago: executing program 6 (id=12192):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96d", 0x30}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
open(0x0, 0x1a1342, 0x0)
socket$netlink(0x10, 0x3, 0x0)

2.508098001s ago: executing program 9 (id=12193):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0xda01, 0x0, 0x0}], 0x1})

1.97615296s ago: executing program 7 (id=12194):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x26e1, 0x0)
close(r1)
socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000005b80)={@empty, 0x33, r4})
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x3d, 0x400, 0x1000, 0x1cc0014, r4})
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd48040ffc30000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

1.837805991s ago: executing program 7 (id=12195):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\\\x00', 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.755996306s ago: executing program 3 (id=12196):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008"], 0x92fc}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

1.32766446s ago: executing program 6 (id=12197):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x1, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x0, 0x20000006}]}}}}}}}, 0x0)

1.269235825s ago: executing program 6 (id=12198):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x9, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000003c0)={0x0, 0x200000000000002, 0x1000, 0x476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24004800)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@multicast2, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='objagg_obj_create\x00', r0, 0x0, 0x802}, 0x18)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000040), 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setgroups(0x0, 0x0)
lseek(r6, 0x10000000005, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.259905869s ago: executing program 7 (id=12199):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) (fail_nth: 1)

864.084689ms ago: executing program 7 (id=12200):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
sendmmsg$inet(r1, 0x0, 0x0, 0x20008000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xb, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r2, 0x0, &(0x7f0000000540)=""/52}, 0x20)
getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f00000000c0), &(0x7f0000000200)=0x4)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r4 = fcntl$dupfd(r3, 0x0, r3)
write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @time={0x5, 0x6}, {0x40, 0xff}, {0x0, 0x9}, @note={0x3, 0x0, 0x0, 0xc0, 0xc0}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000300))
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000580)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x1}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000240)="f1", 0x1}], 0x1}}], 0x1, 0x2004c0d0)
setsockopt(r5, 0x84, 0x7f, &(0x7f0000000140)="020000000d800089", 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
readahead(r4, 0x10, 0x7)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

662.773278ms ago: executing program 7 (id=12201):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133})
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000024c0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x655, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

560.387351ms ago: executing program 3 (id=12202):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0})

403.19645ms ago: executing program 3 (id=12203):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

309.000083ms ago: executing program 6 (id=12204):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) (fail_nth: 1)

51.30733ms ago: executing program 39 (id=12151):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0)
r3 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440)=r2, 0x1)
pipe(&(0x7f00000000c0))
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x94)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000180), 0x2ae, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='.request_key_auth\x00', 0x0, 0xfffffffffffffffd)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000100)={0x0, 0x20, 0x10, 0x6dd, 0x4, 0x0, 0x2, 0xb05, 0x20, 0x1, 0x40, 0x7, &(0x7f0000000000)=[0x4], 0x8, 0x0})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x5d4c, 0x4)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x0)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
recvfrom(r6, 0x0, 0x0, 0x40010001, 0x0, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000004)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=12206):
socket$kcm(0xa, 0x5, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0xfffffffffffffe09}, 0x8}], 0x4000173, 0x40012102, 0x0)
sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1100000000000000000000000100000004000000000000001100000000000000000000000100000009000000000000001400000000000000000000000200000003000000000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="0a0101020a010100000000001c000000000000000000000007000000070ba2ac1414bb640101010000000000140000000000000000000000020000000300000000003400000000000000000000000700000001071b5f0a0101020a010101e00000010a01f88bab2978da85fbe03809ee390100ac1e0001ffffffff8307a4e0000002000000000014000000000000000000000002000000090000000000000014000000000000000000000001"], 0x108}, 0x40891)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000440)="6afb", 0x2, 0x0, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001b000)=""/102400, 0x19000)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x88d5)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000000300)=0x8)
syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00')
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r7 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x5, 0x30000000, 0x3)
ioctl$TUNSETLINK(r6, 0x400454cd, 0x339)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)

kernel console output (not intermixed with test programs):

5304] R13: 00007fe1301d6038 R14: 00007fe1301d5fa0 R15: 00007ffc538389c8
[ 3383.838024][T15304]  </TASK>
[ 3384.093983][  T579] Bluetooth: hci6: command tx timeout
[ 3384.419212][T28391] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 3385.399811][T28391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3385.411238][T28391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3385.428545][T28391] bond0 (unregistering): Released all slaves
[ 3385.446690][T28391] bond1 (unregistering): Released all slaves
[ 3385.678203][T28391] bond2 (unregistering): Released all slaves
[ 3385.698935][T15316] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[ 3385.787061][T15316] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[ 3385.813844][T15316] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 3385.936296][T15168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3387.276021][T15344] netlink: 100 bytes leftover after parsing attributes in process `syz.9.11812'.
[ 3387.361901][T15350] netlink: 'syz.7.11817': attribute type 2 has an invalid length.
[ 3387.526723][T15168] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3388.100032][ T1206] usb 8-1: new high-speed USB device number 106 using dummy_hcd
[ 3388.149987][T28391] hsr_slave_0: left promiscuous mode
[ 3388.367906][T28391] hsr_slave_1: left promiscuous mode
[ 3388.377985][T28391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3388.378503][T15359] No source specified
[ 3388.385503][T28391] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3388.397239][ T1206] usb 8-1: Using ep0 maxpacket: 8
[ 3388.449145][T28391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3388.457959][ T1206] usb 8-1: config 0 has an invalid interface number: 109 but max is 0
[ 3388.466837][ T1206] usb 8-1: config 0 has no interface number 0
[ 3388.472925][ T1206] usb 8-1: config 0 interface 109 has no altsetting 0
[ 3388.486394][T28391] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3388.517286][ T1206] usb 8-1: New USB device found, idVendor=12d1, idProduct=1435, bcdDevice= 0.00
[ 3388.541281][T28391] veth1_macvtap: left promiscuous mode
[ 3388.554207][T28391] veth0_macvtap: left promiscuous mode
[ 3388.562277][ T1206] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3388.562598][T28391] veth1_vlan: left promiscuous mode
[ 3388.590817][T28391] veth0_vlan: left promiscuous mode
[ 3388.604048][ T1206] usb 8-1: Product: syz
[ 3388.610883][ T1206] usb 8-1: Manufacturer: syz
[ 3388.692943][T15364] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present
[ 3389.098450][ T1206] usb 8-1: SerialNumber: syz
[ 3389.099811][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 3389.109525][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 3389.141945][ T1206] usb 8-1: config 0 descriptor??
[ 3389.171529][T15367] FAULT_INJECTION: forcing a failure.
[ 3389.171529][T15367] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3389.185376][T15367] CPU: 0 UID: 0 PID: 15367 Comm: syz.9.11821 Not tainted syzkaller #0 PREEMPT(full) 
[ 3389.185400][T15367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3389.185410][T15367] Call Trace:
[ 3389.185416][T15367]  <TASK>
[ 3389.185423][T15367]  dump_stack_lvl+0x16c/0x1f0
[ 3389.185452][T15367]  should_fail_ex+0x512/0x640
[ 3389.185479][T15367]  _copy_from_user+0x2e/0xd0
[ 3389.185505][T15367]  copy_msghdr_from_user+0x98/0x160
[ 3389.185528][T15367]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 3389.185561][T15367]  ___sys_sendmsg+0xfe/0x1d0
[ 3389.185585][T15367]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3389.185638][T15367]  __sys_sendmsg+0x16d/0x220
[ 3389.185666][T15367]  ? __pfx___sys_sendmsg+0x10/0x10
[ 3389.185702][T15367]  do_syscall_64+0xcd/0x4e0
[ 3389.185727][T15367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3389.185745][T15367] RIP: 0033:0x7f57cf98eba9
[ 3389.185759][T15367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3389.185775][T15367] RSP: 002b:00007f57d0749038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3389.185793][T15367] RAX: ffffffffffffffda RBX: 00007f57cfbd5fa0 RCX: 00007f57cf98eba9
[ 3389.185805][T15367] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[ 3389.185815][T15367] RBP: 00007f57d0749090 R08: 0000000000000000 R09: 0000000000000000
[ 3389.185825][T15367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3389.185835][T15367] R13: 00007f57cfbd6038 R14: 00007f57cfbd5fa0 R15: 00007fffd8da48a8
[ 3389.185859][T15367]  </TASK>
[ 3389.477229][ T1206] usb-storage 8-1:0.109: USB Mass Storage device detected
[ 3389.671157][ T1206] usb 8-1: USB disconnect, device number 106
[ 3390.902798][   T30] audit: type=1400 audit(1757639543.994:994): avc:  denied  { map } for  pid=15391 comm="syz.7.11829" path="socket:[204280]" dev="sockfs" ino=204280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 3391.094508][T15397] siw: device registration error -23
[ 3391.507654][T28391] team0 (unregistering): Port device team_slave_1 removed
[ 3391.579065][T28391] team0 (unregistering): Port device team_slave_0 removed
[ 3392.241847][T15408] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11833'.
[ 3394.069750][T15410] geneve2: entered promiscuous mode
[ 3394.237280][   T30] audit: type=1326 audit(1757639547.364:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.9.11836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cf98eba9 code=0x7ffc0000
[ 3394.283181][T15168] veth0_vlan: entered promiscuous mode
[ 3394.296772][T15423] loop6: detected capacity change from 0 to 6
[ 3394.312718][T15168] veth1_vlan: entered promiscuous mode
[ 3394.335781][T15423] Dev loop6: unable to read RDB block 6
[ 3394.345015][   T30] audit: type=1326 audit(1757639547.364:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.9.11836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cf98eba9 code=0x7ffc0000
[ 3394.380452][T15423]  loop6: unable to read partition table
[ 3394.422555][T15423] loop6: partition table beyond EOD, truncated
[ 3394.431362][T15168] veth0_macvtap: entered promiscuous mode
[ 3394.443125][   T30] audit: type=1326 audit(1757639547.364:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.9.11836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f57cf98eba9 code=0x7ffc0000
[ 3394.454508][T15430] FAULT_INJECTION: forcing a failure.
[ 3394.454508][T15430] name failslab, interval 1, probability 0, space 0, times 0
[ 3394.471641][T15168] veth1_macvtap: entered promiscuous mode
[ 3394.494678][T15423] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 3394.532556][   T30] audit: type=1326 audit(1757639547.364:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.9.11836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cf98eba9 code=0x7ffc0000
[ 3394.544500][T15430] CPU: 1 UID: 0 PID: 15430 Comm: syz.8.11839 Not tainted syzkaller #0 PREEMPT(full) 
[ 3394.544524][T15430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3394.544533][T15430] Call Trace:
[ 3394.544538][T15430]  <TASK>
[ 3394.544544][T15430]  dump_stack_lvl+0x16c/0x1f0
[ 3394.544575][T15430]  should_fail_ex+0x512/0x640
[ 3394.544595][T15430]  ? fs_reclaim_acquire+0xae/0x150
[ 3394.544617][T15430]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 3394.544640][T15430]  should_failslab+0xc2/0x120
[ 3394.544659][T15430]  __kmalloc_noprof+0xd2/0x510
[ 3394.544679][T15430]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 3394.544703][T15430]  ? tomoyo_profile+0x47/0x60
[ 3394.544721][T15430]  tomoyo_path_number_perm+0x245/0x580
[ 3394.544739][T15430]  ? tomoyo_path_number_perm+0x237/0x580
[ 3394.544760][T15430]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3394.544780][T15430]  ? find_held_lock+0x2b/0x80
[ 3394.544818][T15430]  ? find_held_lock+0x2b/0x80
[ 3394.544836][T15430]  ? hook_file_ioctl_common+0x145/0x410
[ 3394.544858][T15430]  ? __fget_files+0x20e/0x3c0
[ 3394.544879][T15430]  security_file_ioctl+0x9b/0x240
[ 3394.544902][T15430]  __x64_sys_ioctl+0xb7/0x210
[ 3394.544925][T15430]  do_syscall_64+0xcd/0x4e0
[ 3394.544947][T15430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3394.544962][T15430] RIP: 0033:0x7f96c918eba9
[ 3394.544974][T15430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3394.544987][T15430] RSP: 002b:00007f96ca086038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3394.545003][T15430] RAX: ffffffffffffffda RBX: 00007f96c93d5fa0 RCX: 00007f96c918eba9
[ 3394.545013][T15430] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003
[ 3394.545023][T15430] RBP: 00007f96ca086090 R08: 0000000000000000 R09: 0000000000000000
[ 3394.545032][T15430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3394.545041][T15430] R13: 00007f96c93d6038 R14: 00007f96c93d5fa0 R15: 00007ffc12374658
[ 3394.545061][T15430]  </TASK>
[ 3394.545111][T15430] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3394.568632][T15168] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3394.597713][   T30] audit: type=1326 audit(1757639547.364:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.9.11836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57cf98eba9 code=0x7ffc0000
[ 3394.597767][   T30] audit: type=1326 audit(1757639547.364:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.9.11836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cf98eba9 code=0x7ffc0000
[ 3394.597806][   T30] audit: type=1326 audit(1757639547.364:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.9.11836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57cf98eba9 code=0x7ffc0000
[ 3394.597845][   T30] audit: type=1326 audit(1757639547.364:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.9.11836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cf98eba9 code=0x7ffc0000
[ 3394.597883][   T30] audit: type=1326 audit(1757639547.364:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.9.11836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f57cf98eba9 code=0x7ffc0000
[ 3394.672588][T15433] fuse: Unknown parameter 'gr00000000000000000000'
[ 3395.021134][T15168] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3395.033618][T15435] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11841'.
[ 3395.399420][   T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3395.408422][   T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3395.443857][T15442] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present
[ 3395.459178][   T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3395.554634][   T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3395.676758][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3395.720726][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3395.949224][   T30] kauditd_printk_skb: 58 callbacks suppressed
[ 3395.949264][   T30] audit: type=1400 audit(1757639549.064:1062): avc:  denied  { mount } for  pid=15451 comm="syz.6.11846" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 3396.108419][T15667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3396.131071][T15667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3396.159195][   T30] audit: type=1400 audit(1757639549.224:1063): avc:  denied  { read } for  pid=15451 comm="syz.6.11846" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 3396.233695][T15462] FAULT_INJECTION: forcing a failure.
[ 3396.233695][T15462] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3396.245537][   T30] audit: type=1400 audit(1757639549.254:1064): avc:  denied  { unmount } for  pid=14170 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 3396.253168][T15462] CPU: 0 UID: 0 PID: 15462 Comm: syz.6.11850 Not tainted syzkaller #0 PREEMPT(full) 
[ 3396.253191][T15462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3396.253200][T15462] Call Trace:
[ 3396.253206][T15462]  <TASK>
[ 3396.253212][T15462]  dump_stack_lvl+0x16c/0x1f0
[ 3396.253236][T15462]  should_fail_ex+0x512/0x640
[ 3396.253259][T15462]  _copy_from_user+0x2e/0xd0
[ 3396.253281][T15462]  do_sock_getsockopt+0x3ca/0x440
[ 3396.253311][T15462]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 3396.253331][T15462]  ? __fget_files+0x204/0x3c0
[ 3396.253358][T15462]  __sys_getsockopt+0x12f/0x260
[ 3396.253380][T15462]  __x64_sys_getsockopt+0xbd/0x160
[ 3396.253397][T15462]  ? do_syscall_64+0x91/0x4e0
[ 3396.253416][T15462]  ? lockdep_hardirqs_on+0x7c/0x110
[ 3396.253434][T15462]  do_syscall_64+0xcd/0x4e0
[ 3396.253454][T15462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3396.253469][T15462] RIP: 0033:0x7fe12ff8eba9
[ 3396.253482][T15462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3396.253496][T15462] RSP: 002b:00007fe130ea9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 3396.253511][T15462] RAX: ffffffffffffffda RBX: 00007fe1301d5fa0 RCX: 00007fe12ff8eba9
[ 3396.253521][T15462] RDX: 0000000000000008 RSI: 0000000000000065 RDI: 0000000000000003
[ 3396.253530][T15462] RBP: 00007fe130ea9090 R08: 0000200000000300 R09: 0000000000000000
[ 3396.253539][T15462] R10: 0000200000004400 R11: 0000000000000246 R12: 0000000000000001
[ 3396.253548][T15462] R13: 00007fe1301d6038 R14: 00007fe1301d5fa0 R15: 00007ffc538389c8
[ 3396.253569][T15462]  </TASK>
[ 3398.479292][T15504] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 3398.498265][T15504] netlink: 148 bytes leftover after parsing attributes in process `syz.9.11861'.
[ 3398.567433][T15507] binder: 15505:15507 ioctl 4018620d 0 returned -22
[ 3398.573713][T15504] syz.9.11861 (15504): drop_caches: 2
[ 3398.589291][T15507] binder: 15505:15507 ioctl c0306201 200000000240 returned -11
[ 3398.885355][ T1206] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 3399.002160][T15521] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present
[ 3399.154920][T31552] usb 7-1: new full-speed USB device number 127 using dummy_hcd
[ 3399.577083][ T1206] usb 4-1: Using ep0 maxpacket: 16
[ 3399.771495][T31552] usb 7-1: config 0 has an invalid interface number: 128 but max is 0
[ 3399.783858][T31552] usb 7-1: config 0 has no interface number 0
[ 3399.792264][T31552] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 3399.801429][T31552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3399.985088][T31552] usb 7-1: Product: syz
[ 3399.989551][T31552] usb 7-1: Manufacturer: syz
[ 3400.388614][T31552] usb 7-1: SerialNumber: syz
[ 3400.496838][T15528] wlan0 speed is unknown, defaulting to 1000
[ 3400.503747][T15528] lo speed is unknown, defaulting to 1000
[ 3400.546471][T31552] usb 7-1: config 0 descriptor??
[ 3400.796614][T15536] siw: device registration error -23
[ 3401.328164][T31552] usb 7-1: Firmware: major: 141, minor: 12, hardware type: UNKNOWN (66)
[ 3401.565888][T31552] usb 7-1: no permanent extended address found, random address set
[ 3401.579547][T31552] usb 7-1: atusb_probe: initialization failed, error = -524
[ 3401.607476][T31552] atusb 7-1:0.128: probe with driver atusb failed with error -524
[ 3402.093923][T15540] wlan0 speed is unknown, defaulting to 1000
[ 3402.100725][T15540] lo speed is unknown, defaulting to 1000
[ 3402.221332][T15551] binder: 15549:15551 ioctl 4018620d 0 returned -22
[ 3402.231647][T15551] binder: 15549:15551 ioctl c0306201 200000000240 returned -11
[ 3402.297528][T31552] usb 7-1: USB disconnect, device number 127
[ 3402.371600][ T1206] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 3402.388247][ T1206] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 3402.422138][ T1206] usb 4-1: can't read configurations, error -71
[ 3402.625484][T15563] netlink: 'syz.3.11879': attribute type 75 has an invalid length.
[ 3404.269448][T15582] netlink: 100 bytes leftover after parsing attributes in process `syz.7.11884'.
[ 3404.615531][T15586] fuse: Unknown parameter 'group_id00000000000000000000'
[ 3404.776238][T15589] FAULT_INJECTION: forcing a failure.
[ 3404.776238][T15589] name failslab, interval 1, probability 0, space 0, times 0
[ 3404.853215][T15589] CPU: 1 UID: 0 PID: 15589 Comm: syz.9.11888 Not tainted syzkaller #0 PREEMPT(full) 
[ 3404.853241][T15589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3404.853252][T15589] Call Trace:
[ 3404.853261][T15589]  <TASK>
[ 3404.853269][T15589]  dump_stack_lvl+0x16c/0x1f0
[ 3404.853298][T15589]  should_fail_ex+0x512/0x640
[ 3404.853322][T15589]  ? fs_reclaim_acquire+0xae/0x150
[ 3404.853347][T15589]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 3404.853375][T15589]  should_failslab+0xc2/0x120
[ 3404.853396][T15589]  __kmalloc_noprof+0xd2/0x510
[ 3404.853429][T15589]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 3404.853459][T15589]  ? tomoyo_profile+0x47/0x60
[ 3404.853479][T15589]  tomoyo_path_number_perm+0x245/0x580
[ 3404.853501][T15589]  ? tomoyo_path_number_perm+0x237/0x580
[ 3404.853526][T15589]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3404.853551][T15589]  ? find_held_lock+0x2b/0x80
[ 3404.853596][T15589]  ? find_held_lock+0x2b/0x80
[ 3404.853617][T15589]  ? hook_file_ioctl_common+0x145/0x410
[ 3404.853641][T15589]  ? __fget_files+0x20e/0x3c0
[ 3404.853666][T15589]  security_file_ioctl+0x9b/0x240
[ 3404.853693][T15589]  __x64_sys_ioctl+0xb7/0x210
[ 3404.853722][T15589]  do_syscall_64+0xcd/0x4e0
[ 3404.853748][T15589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3404.853766][T15589] RIP: 0033:0x7f57cf98eba9
[ 3404.853781][T15589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3404.853797][T15589] RSP: 002b:00007f57d0749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3404.853814][T15589] RAX: ffffffffffffffda RBX: 00007f57cfbd5fa0 RCX: 00007f57cf98eba9
[ 3404.853826][T15589] RDX: 0000200000000040 RSI: 00000000c050561a RDI: 0000000000000003
[ 3404.853836][T15589] RBP: 00007f57d0749090 R08: 0000000000000000 R09: 0000000000000000
[ 3404.853847][T15589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3404.853857][T15589] R13: 00007f57cfbd6038 R14: 00007f57cfbd5fa0 R15: 00007fffd8da48a8
[ 3404.853883][T15589]  </TASK>
[ 3405.176272][T15589] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3405.284027][T15581] siw: device registration error -23
[ 3405.342929][T15600] FAULT_INJECTION: forcing a failure.
[ 3405.342929][T15600] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3405.355238][T15604] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 3405.381064][T15600] CPU: 0 UID: 0 PID: 15600 Comm: syz.7.11890 Not tainted syzkaller #0 PREEMPT(full) 
[ 3405.381091][T15600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3405.381101][T15600] Call Trace:
[ 3405.381107][T15600]  <TASK>
[ 3405.381114][T15600]  dump_stack_lvl+0x16c/0x1f0
[ 3405.381142][T15600]  should_fail_ex+0x512/0x640
[ 3405.381167][T15600]  _copy_from_user+0x2e/0xd0
[ 3405.381193][T15600]  copy_from_sockptr_offset.constprop.0+0x153/0x1a0
[ 3405.381216][T15600]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[ 3405.381245][T15600]  do_ipv6_setsockopt+0x86e/0x4470
[ 3405.381269][T15600]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[ 3405.381287][T15600]  ? avc_has_perm_noaudit+0x117/0x3b0
[ 3405.381310][T15600]  ? avc_has_perm_noaudit+0x149/0x3b0
[ 3405.381331][T15600]  ? avc_has_perm+0x144/0x1f0
[ 3405.381349][T15600]  ? __pfx_avc_has_perm+0x10/0x10
[ 3405.381367][T15600]  ? get_pid_task+0x106/0x250
[ 3405.381383][T15600]  ? proc_fail_nth_write+0x9f/0x220
[ 3405.381413][T15600]  ? sock_has_perm+0x259/0x2f0
[ 3405.381435][T15600]  ? __pfx_sock_has_perm+0x10/0x10
[ 3405.381456][T15600]  ? selinux_netlbl_socket_setsockopt+0x183/0x470
[ 3405.381484][T15600]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[ 3405.381517][T15600]  ? ipv6_setsockopt+0xcb/0x170
[ 3405.381534][T15600]  ipv6_setsockopt+0xcb/0x170
[ 3405.381555][T15600]  udpv6_setsockopt+0x7d/0xd0
[ 3405.381578][T15600]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 3405.381607][T15600]  do_sock_setsockopt+0xf3/0x1d0
[ 3405.381635][T15600]  __sys_setsockopt+0x1a0/0x230
[ 3405.381659][T15600]  __x64_sys_setsockopt+0xbd/0x160
[ 3405.381678][T15600]  ? do_syscall_64+0x91/0x4e0
[ 3405.381701][T15600]  ? lockdep_hardirqs_on+0x7c/0x110
[ 3405.381722][T15600]  do_syscall_64+0xcd/0x4e0
[ 3405.381744][T15600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3405.381760][T15600] RIP: 0033:0x7fc11c78eba9
[ 3405.381776][T15600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3405.381790][T15600] RSP: 002b:00007fc11d570038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 3405.381806][T15600] RAX: ffffffffffffffda RBX: 00007fc11c9d5fa0 RCX: 00007fc11c78eba9
[ 3405.381816][T15600] RDX: 0000000000000001 RSI: 0000000000000029 RDI: 0000000000000003
[ 3405.381825][T15600] RBP: 00007fc11d570090 R08: 0000000000000004 R09: 0000000000000000
[ 3405.381834][T15600] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3405.381843][T15600] R13: 00007fc11c9d6038 R14: 00007fc11c9d5fa0 R15: 00007fff90137948
[ 3405.381863][T15600]  </TASK>
[ 3408.994446][T15639] netlink: 100 bytes leftover after parsing attributes in process `syz.6.11901'.
[ 3410.428558][ T5220] udevd[5220]: worker [15424] terminated by signal 33 (Unknown signal 33)
[ 3410.518711][T15673] FAULT_INJECTION: forcing a failure.
[ 3410.518711][T15673] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3410.571556][T15673] CPU: 1 UID: 0 PID: 15673 Comm: syz.9.11910 Not tainted syzkaller #0 PREEMPT(full) 
[ 3410.571581][T15673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3410.571592][T15673] Call Trace:
[ 3410.571598][T15673]  <TASK>
[ 3410.571605][T15673]  dump_stack_lvl+0x16c/0x1f0
[ 3410.571633][T15673]  should_fail_ex+0x512/0x640
[ 3410.571659][T15673]  _copy_from_user+0x2e/0xd0
[ 3410.571687][T15673]  copy_msghdr_from_user+0x98/0x160
[ 3410.571710][T15673]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 3410.571744][T15673]  ___sys_sendmsg+0xfe/0x1d0
[ 3410.571767][T15673]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3410.571819][T15673]  __sys_sendmsg+0x16d/0x220
[ 3410.571841][T15673]  ? __pfx___sys_sendmsg+0x10/0x10
[ 3410.571879][T15673]  do_syscall_64+0xcd/0x4e0
[ 3410.571904][T15673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3410.571923][T15673] RIP: 0033:0x7f57cf98eba9
[ 3410.571938][T15673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3410.571955][T15673] RSP: 002b:00007f57d0749038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3410.571973][T15673] RAX: ffffffffffffffda RBX: 00007f57cfbd5fa0 RCX: 00007f57cf98eba9
[ 3410.571984][T15673] RDX: 0000000000000880 RSI: 00002000000008c0 RDI: 0000000000000004
[ 3410.571995][T15673] RBP: 00007f57d0749090 R08: 0000000000000000 R09: 0000000000000000
[ 3410.572006][T15673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3410.572016][T15673] R13: 00007f57cfbd6038 R14: 00007f57cfbd5fa0 R15: 00007fffd8da48a8
[ 3410.572040][T15673]  </TASK>
[ 3410.785902][T13792] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[ 3410.970851][T13792] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[ 3411.104131][T13792] usb 4-1: config 0 has no interface number 0
[ 3411.135251][T13792] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 3411.190140][T13792] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 3411.216375][T13792] usb 4-1: config 0 interface 12 has no altsetting 0
[ 3411.260330][T13792] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[ 3411.331832][T13792] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[ 3411.383472][T13792] usb 4-1: Product: syz
[ 3411.441779][T13792] usb 4-1: Manufacturer: syz
[ 3411.497827][T15691] fuse: Unknown parameter 'gro00000000000000000000'
[ 3411.502513][T13792] usb 4-1: SerialNumber: syz
[ 3411.580731][T13792] usb 4-1: config 0 descriptor??
[ 3411.588562][T15668] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 3411.597593][T13792] f81534 4-1:0.12: unsupported endpoint max packet size
[ 3412.722019][T13792] usb 10-1: new high-speed USB device number 86 using dummy_hcd
[ 3412.995076][T13792] usb 10-1: Using ep0 maxpacket: 8
[ 3413.088385][T13792] usb 10-1: unable to read config index 0 descriptor/start: -61
[ 3413.096716][T13792] usb 10-1: can't read configurations, error -61
[ 3413.140026][T15697] pim6reg: entered allmulticast mode
[ 3413.241779][T13792] usb 10-1: new high-speed USB device number 87 using dummy_hcd
[ 3414.686535][T13792] usb 10-1: Using ep0 maxpacket: 8
[ 3414.718446][T13792] usb 10-1: device descriptor read/all, error -71
[ 3414.735757][T13792] usb usb10-port1: attempt power cycle
[ 3415.430206][T15668] pim6reg: left allmulticast mode
[ 3415.558540][ T1206] usb 4-1: USB disconnect, device number 32
[ 3415.676649][   T30] audit: type=1400 audit(1757639568.802:1065): avc:  denied  { read } for  pid=15731 comm="syz.7.11927" path="socket:[206292]" dev="sockfs" ino=206292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 3416.016109][T15741] netlink: 56 bytes leftover after parsing attributes in process `syz.7.11927'.
[ 3416.026752][T15742] siw: device registration error -23
[ 3416.414692][   T30] audit: type=1326 audit(1757639569.542:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.6.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ff8eba9 code=0x7ffc0000
[ 3416.578856][   T30] audit: type=1326 audit(1757639569.582:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.6.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ff8eba9 code=0x7ffc0000
[ 3416.642362][   T30] audit: type=1326 audit(1757639569.592:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.6.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe12ff8eba9 code=0x7ffc0000
[ 3416.668413][   T30] audit: type=1326 audit(1757639569.592:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.6.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ff8eba9 code=0x7ffc0000
[ 3416.696561][   T30] audit: type=1326 audit(1757639569.592:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.6.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ff8eba9 code=0x7ffc0000
[ 3416.840428][   T30] audit: type=1326 audit(1757639569.592:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.6.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe12ff8eba9 code=0x7ffc0000
[ 3416.864518][   T30] audit: type=1326 audit(1757639569.592:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.6.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ff8eba9 code=0x7ffc0000
[ 3417.352287][   T30] audit: type=1326 audit(1757639569.592:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.6.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ff8eba9 code=0x7ffc0000
[ 3417.375957][   T30] audit: type=1326 audit(1757639569.592:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.6.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe12ff8eba9 code=0x7ffc0000
[ 3418.108911][T15760] FAULT_INJECTION: forcing a failure.
[ 3418.108911][T15760] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3418.170126][T15760] CPU: 1 UID: 0 PID: 15760 Comm: syz.8.11933 Not tainted syzkaller #0 PREEMPT(full) 
[ 3418.170152][T15760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3418.170161][T15760] Call Trace:
[ 3418.170167][T15760]  <TASK>
[ 3418.170175][T15760]  dump_stack_lvl+0x16c/0x1f0
[ 3418.170205][T15760]  should_fail_ex+0x512/0x640
[ 3418.170230][T15760]  _copy_from_user+0x2e/0xd0
[ 3418.170256][T15760]  copy_from_sockptr_offset.constprop.0+0x136/0x170
[ 3418.170275][T15760]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[ 3418.170294][T15760]  ? __pfx_sock_has_perm+0x10/0x10
[ 3418.170319][T15760]  ? selinux_netlbl_socket_setsockopt+0x183/0x470
[ 3418.170346][T15760]  xsk_setsockopt+0x179/0x9a0
[ 3418.170364][T15760]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 3418.170381][T15760]  ? find_held_lock+0x2b/0x80
[ 3418.170405][T15760]  ? selinux_socket_setsockopt+0x6a/0x80
[ 3418.170427][T15760]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 3418.170445][T15760]  do_sock_setsockopt+0xf3/0x1d0
[ 3418.170474][T15760]  __sys_setsockopt+0x1a0/0x230
[ 3418.170499][T15760]  __x64_sys_setsockopt+0xbd/0x160
[ 3418.170519][T15760]  ? do_syscall_64+0x91/0x4e0
[ 3418.170542][T15760]  ? lockdep_hardirqs_on+0x7c/0x110
[ 3418.170563][T15760]  do_syscall_64+0xcd/0x4e0
[ 3418.170587][T15760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3418.170605][T15760] RIP: 0033:0x7f96c918eba9
[ 3418.170621][T15760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3418.170637][T15760] RSP: 002b:00007f96ca086038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 3418.170654][T15760] RAX: ffffffffffffffda RBX: 00007f96c93d5fa0 RCX: 00007f96c918eba9
[ 3418.170666][T15760] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003
[ 3418.170676][T15760] RBP: 00007f96ca086090 R08: 000000000000005d R09: 0000000000000000
[ 3418.170686][T15760] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001
[ 3418.170697][T15760] R13: 00007f96c93d6038 R14: 00007f96c93d5fa0 R15: 00007ffc12374658
[ 3418.170720][T15760]  </TASK>
[ 3418.835145][T15770] FAULT_INJECTION: forcing a failure.
[ 3418.835145][T15770] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3418.896838][T15770] CPU: 1 UID: 0 PID: 15770 Comm: syz.6.11936 Not tainted syzkaller #0 PREEMPT(full) 
[ 3418.896863][T15770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3418.896873][T15770] Call Trace:
[ 3418.896879][T15770]  <TASK>
[ 3418.896885][T15770]  dump_stack_lvl+0x16c/0x1f0
[ 3418.896912][T15770]  should_fail_ex+0x512/0x640
[ 3418.896937][T15770]  _copy_from_user+0x2e/0xd0
[ 3418.896968][T15770]  copy_msghdr_from_user+0x98/0x160
[ 3418.896992][T15770]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 3418.897026][T15770]  ___sys_sendmsg+0xfe/0x1d0
[ 3418.897048][T15770]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3418.897098][T15770]  __sys_sendmsg+0x16d/0x220
[ 3418.897120][T15770]  ? __pfx___sys_sendmsg+0x10/0x10
[ 3418.897155][T15770]  do_syscall_64+0xcd/0x4e0
[ 3418.897182][T15770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3418.897200][T15770] RIP: 0033:0x7fe12ff8eba9
[ 3418.897215][T15770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3418.897231][T15770] RSP: 002b:00007fe130ea9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3418.897248][T15770] RAX: ffffffffffffffda RBX: 00007fe1301d5fa0 RCX: 00007fe12ff8eba9
[ 3418.897259][T15770] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000005
[ 3418.897270][T15770] RBP: 00007fe130ea9090 R08: 0000000000000000 R09: 0000000000000000
[ 3418.897280][T15770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3418.897290][T15770] R13: 00007fe1301d6038 R14: 00007fe1301d5fa0 R15: 00007ffc538389c8
[ 3418.897313][T15770]  </TASK>
[ 3419.448974][T15784] netlink: 'syz.9.11939': attribute type 6 has an invalid length.
[ 3419.702210][T15787] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[ 3419.766707][T31554] usb 8-1: new high-speed USB device number 107 using dummy_hcd
[ 3420.016901][T31554] usb 8-1: Using ep0 maxpacket: 8
[ 3420.031168][T31554] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[ 3420.044864][T31554] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3420.066839][T31552] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 3420.136750][T31554] usb 8-1: Product: syz
[ 3420.175153][T31554] usb 8-1: Manufacturer: syz
[ 3420.190702][T31554] usb 8-1: SerialNumber: syz
[ 3420.204849][T31554] usb 8-1: config 0 descriptor??
[ 3420.218501][T31554] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[ 3420.230628][T31554] dvb-usb: bulk message failed: -22 (2/0)
[ 3420.246225][T31554] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3420.406758][T31552] usb 4-1: Using ep0 maxpacket: 16
[ 3420.451975][T15774] dvb-usb: bulk message failed: -22 (3/0)
[ 3420.473481][T31554] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[ 3420.487417][T15774] gtp0: entered promiscuous mode
[ 3420.495868][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11938'.
[ 3420.697966][T14189] usb 10-1: new high-speed USB device number 89 using dummy_hcd
[ 3420.871770][T31554] usb 8-1: media controller created
[ 3420.926209][T31554] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3420.956381][T31554] cxusb: set interface failed
[ 3420.971914][T31554] dvb-usb: bulk message failed: -22 (1/0)
[ 3420.977028][T14189] usb 10-1: Using ep0 maxpacket: 16
[ 3420.985136][T14189] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 3421.008065][T14189] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3421.031276][T31554] DVB: Unable to find symbol mt352_attach()
[ 3421.042638][T31554] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[ 3421.054000][T14189] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3421.085224][T14189] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3421.094599][T14189] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3421.110059][T14189] usb 10-1: Product: syz
[ 3421.120796][T14189] usb 10-1: Manufacturer: syz
[ 3421.127013][T31554] rc_core: IR keymap rc-dvico-portable not found
[ 3421.133412][T31554] Registered IR keymap rc-empty
[ 3421.142777][T31554] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0
[ 3421.159207][T31554] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input154
[ 3421.172168][T14189] usb 10-1: SerialNumber: syz
[ 3421.173536][T31554] dvb-usb: schedule remote query interval to 100 msecs.
[ 3421.187223][T31554] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[ 3421.211863][T31554] usb 8-1: USB disconnect, device number 107
[ 3421.329754][T31554] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[ 3421.952562][T15818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3422.297440][T15818] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3422.346980][T31554] usb 8-1: new high-speed USB device number 108 using dummy_hcd
[ 3422.480768][T14189] usb 10-1: 0:2 : does not exist
[ 3422.517669][T15822] loop6: detected capacity change from 0 to 63
[ 3422.525852][   T30] kauditd_printk_skb: 8 callbacks suppressed
[ 3422.525866][   T30] audit: type=1400 audit(1757639575.651:1083): avc:  denied  { map } for  pid=15821 comm="syz.6.11948" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 3422.528515][T15808] buffer_io_error: 11 callbacks suppressed
[ 3422.528527][T15808] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3422.534416][T15822] Buffer I/O error on dev loop6, logical block 2, async page read
[ 3422.584212][   T30] audit: type=1400 audit(1757639575.661:1084): avc:  denied  { execute } for  pid=15821 comm="syz.6.11948" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 3422.607465][T15808] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3422.609649][T15822] Buffer I/O error on dev loop6, logical block 2, async page read
[ 3422.617743][T15808] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3422.654953][T31554] usb 8-1: config 0 interface 0 altsetting 26 endpoint 0x81 has an invalid bInterval 64, changing to 10
[ 3422.669059][T31554] usb 8-1: config 0 interface 0 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3422.686698][T15808] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3422.706714][T31552] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 3422.713202][T15808] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3422.720687][T31554] usb 8-1: config 0 interface 0 has no altsetting 0
[ 3422.743886][T31554] usb 8-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[ 3422.753528][T31552] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 3422.821224][T31552] usb 4-1: can't read configurations, error -71
[ 3422.828033][T31554] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3422.860565][T31554] usb 8-1: config 0 descriptor??
[ 3423.018477][T15818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=15818 comm=syz.9.11943
[ 3423.108117][T15836] fuse: Bad value for 'user_id'
[ 3423.113060][T15836] fuse: Bad value for 'user_id'
[ 3423.570913][T31554] a4tech 0003:09DA:001A.0026: unknown main item tag 0x0
[ 3423.785181][T31554] a4tech 0003:09DA:001A.0026: unknown main item tag 0x0
[ 3423.987432][T31554] a4tech 0003:09DA:001A.0026: item fetching failed at offset 2/5
[ 3424.048466][T15851] fuse: Bad value for 'fd'
[ 3424.055991][T31554] a4tech 0003:09DA:001A.0026: parse failed
[ 3424.100558][T31554] a4tech 0003:09DA:001A.0026: probe with driver a4tech failed with error -22
[ 3424.139529][T14189] usb 10-1: 1:0: failed to get current value for ch 0 (-22)
[ 3424.206685][T31554] usb 8-1: USB disconnect, device number 108
[ 3424.278943][T14189] usb 10-1: USB disconnect, device number 89
[ 3424.408566][T15855] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.11955'.
[ 3424.901526][T15869] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present
[ 3425.524984][T15872] netlink: 100 bytes leftover after parsing attributes in process `syz.7.11960'.
[ 3426.258710][T15881] netlink: 100 bytes leftover after parsing attributes in process `syz.9.11962'.
[ 3426.457351][T14189] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 3426.650444][T14189] usb 7-1: Using ep0 maxpacket: 16
[ 3426.829451][T15892] fuse: Bad value for 'fd'
[ 3426.853984][   T30] audit: type=1326 audit(1757639579.981:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15894 comm="syz.8.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c918eba9 code=0x7ffc0000
[ 3426.938230][   T30] audit: type=1326 audit(1757639580.011:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15894 comm="syz.8.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c918eba9 code=0x7ffc0000
[ 3427.080692][   T30] audit: type=1326 audit(1757639580.011:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15894 comm="syz.8.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f96c918eba9 code=0x7ffc0000
[ 3427.327731][   T30] audit: type=1326 audit(1757639580.021:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15894 comm="syz.8.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c918eba9 code=0x7ffc0000
[ 3427.351328][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3427.775937][   T30] audit: type=1326 audit(1757639580.021:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15894 comm="syz.8.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c918eba9 code=0x7ffc0000
[ 3427.799553][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3427.842716][   T30] audit: type=1326 audit(1757639580.031:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15894 comm="syz.8.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96c918eba9 code=0x7ffc0000
[ 3427.866308][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3428.046976][   T30] audit: type=1326 audit(1757639580.031:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15894 comm="syz.8.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c918eba9 code=0x7ffc0000
[ 3428.548516][   T30] audit: type=1326 audit(1757639580.031:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15894 comm="syz.8.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c918eba9 code=0x7ffc0000
[ 3428.681404][   T30] audit: type=1326 audit(1757639580.031:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15894 comm="syz.8.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96c918eba9 code=0x7ffc0000
[ 3428.813135][   T30] audit: type=1326 audit(1757639580.121:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15894 comm="syz.8.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c918eba9 code=0x7ffc0000
[ 3428.856084][   T30] audit: type=1326 audit(1757639580.121:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15894 comm="syz.8.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c918eba9 code=0x7ffc0000
[ 3428.943538][   T30] audit: type=1326 audit(1757639580.141:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15894 comm="syz.8.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f96c918eba9 code=0x7ffc0000
[ 3428.973758][   T30] audit: type=1326 audit(1757639580.141:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15894 comm="syz.8.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c918eba9 code=0x7ffc0000
[ 3428.997550][T31554] usb 8-1: new high-speed USB device number 109 using dummy_hcd
[ 3429.027498][T14189] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 3429.045740][T14189] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 3429.053750][   T30] audit: type=1326 audit(1757639580.141:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15894 comm="syz.8.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c918eba9 code=0x7ffc0000
[ 3429.059633][T14189] usb 7-1: can't read configurations, error -71
[ 3429.177507][T31554] usb 8-1: Using ep0 maxpacket: 8
[ 3429.184725][T31554] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 3429.202847][T31554] usb 8-1: config 4 has an invalid interface number: 30 but max is 0
[ 3429.222878][T31554] usb 8-1: config 4 has no interface number 0
[ 3429.258379][T31554] usb 8-1: config 4 interface 30 has no altsetting 0
[ 3429.289681][T31554] usb 8-1: string descriptor 0 read error: -22
[ 3429.296120][T31554] usb 8-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[ 3429.782996][T31554] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3429.806650][ T7808] bridge_slave_1: left allmulticast mode
[ 3429.814695][ T7808] bridge_slave_1: left promiscuous mode
[ 3429.822459][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3429.823517][T31554] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[ 3429.936688][ T7808] bridge_slave_0: left allmulticast mode
[ 3429.943239][T15930] fuse: Bad value for 'fd'
[ 3429.997925][T31554] dw2102: su3000_power_ctrl: 1, initialized 0
[ 3430.028797][T15912] FAULT_INJECTION: forcing a failure.
[ 3430.028797][T15912] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3430.047637][T15912] CPU: 1 UID: 0 PID: 15912 Comm: syz.7.11972 Not tainted syzkaller #0 PREEMPT(full) 
[ 3430.047663][T15912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3430.047671][T15912] Call Trace:
[ 3430.047675][T15912]  <TASK>
[ 3430.047680][T15912]  dump_stack_lvl+0x16c/0x1f0
[ 3430.047698][T15912]  should_fail_ex+0x512/0x640
[ 3430.047714][T15912]  _copy_to_user+0x32/0xd0
[ 3430.047732][T15912]  simple_read_from_buffer+0xcb/0x170
[ 3430.047745][T15912]  proc_fail_nth_read+0x197/0x240
[ 3430.047758][T15912]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3430.047771][T15912]  ? rw_verify_area+0xcf/0x6c0
[ 3430.047788][T15912]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3430.047800][T15912]  vfs_read+0x1e4/0xcf0
[ 3430.047812][T15912]  ? __pfx___mutex_lock+0x10/0x10
[ 3430.047827][T15912]  ? __pfx_vfs_read+0x10/0x10
[ 3430.047841][T15912]  ? __fget_files+0x20e/0x3c0
[ 3430.047857][T15912]  ksys_read+0x12a/0x250
[ 3430.047867][T15912]  ? __pfx_ksys_read+0x10/0x10
[ 3430.047878][T15912]  ? fdget+0x187/0x210
[ 3430.047891][T15912]  do_syscall_64+0xcd/0x4e0
[ 3430.047906][T15912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3430.047917][T15912] RIP: 0033:0x7fc11c78d5bc
[ 3430.047927][T15912] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 3430.047937][T15912] RSP: 002b:00007fc11d570030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3430.047947][T15912] RAX: ffffffffffffffda RBX: 00007fc11c9d5fa0 RCX: 00007fc11c78d5bc
[ 3430.047954][T15912] RDX: 000000000000000f RSI: 00007fc11d5700a0 RDI: 0000000000000004
[ 3430.047960][T15912] RBP: 00007fc11d570090 R08: 0000000000000000 R09: 0000000000000000
[ 3430.047966][T15912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3430.047972][T15912] R13: 00007fc11c9d6038 R14: 00007fc11c9d5fa0 R15: 00007fff90137948
[ 3430.047986][T15912]  </TASK>
[ 3430.077539][T31554] dvb-usb: bulk message failed: -22 (2/0)
[ 3430.247329][ T7808] bridge_slave_0: left promiscuous mode
[ 3430.277613][T14189] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 3430.277712][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3430.427603][T31554] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3430.447594][T31554] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[ 3430.455123][T31554] usb 8-1: media controller created
[ 3430.461402][T14189] usb 7-1: Using ep0 maxpacket: 8
[ 3430.464802][T15936] FAULT_INJECTION: forcing a failure.
[ 3430.464802][T15936] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3430.470801][T14189] usb 7-1: config index 0 descriptor too short (expected 30, got 18)
[ 3430.492654][T15936] CPU: 0 UID: 0 PID: 15936 Comm: syz.3.11980 Not tainted syzkaller #0 PREEMPT(full) 
[ 3430.492682][T15936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3430.492693][T15936] Call Trace:
[ 3430.492699][T15936]  <TASK>
[ 3430.492707][T15936]  dump_stack_lvl+0x16c/0x1f0
[ 3430.492735][T15936]  should_fail_ex+0x512/0x640
[ 3430.492762][T15936]  _copy_from_user+0x2e/0xd0
[ 3430.492793][T15936]  copy_msghdr_from_user+0x98/0x160
[ 3430.492816][T15936]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 3430.492850][T15936]  ___sys_sendmsg+0xfe/0x1d0
[ 3430.492873][T15936]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3430.492924][T15936]  __sys_sendmsg+0x16d/0x220
[ 3430.492946][T15936]  ? __pfx___sys_sendmsg+0x10/0x10
[ 3430.492983][T15936]  do_syscall_64+0xcd/0x4e0
[ 3430.493008][T15936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3430.493025][T15936] RIP: 0033:0x7f772a58eba9
[ 3430.493040][T15936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3430.493057][T15936] RSP: 002b:00007f772b450038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3430.493074][T15936] RAX: ffffffffffffffda RBX: 00007f772a7d5fa0 RCX: 00007f772a58eba9
[ 3430.493086][T15936] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[ 3430.493096][T15936] RBP: 00007f772b450090 R08: 0000000000000000 R09: 0000000000000000
[ 3430.493106][T15936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3430.493117][T15936] R13: 00007f772a7d6038 R14: 00007f772a7d5fa0 R15: 00007fff322641a8
[ 3430.493141][T15936]  </TASK>
[ 3430.493164][T14189] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3430.493325][T31554] dvb-usb: bulk message failed: -22 (6/0)
[ 3430.531768][T14189] usb 7-1: config 0 has no interfaces?
[ 3430.557611][T31554] dw2102: i2c transfer failed.
[ 3430.682368][T13792] usb 10-1: new high-speed USB device number 90 using dummy_hcd
[ 3430.722299][T14189] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 3430.731719][T14189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3430.739870][T14189] usb 7-1: Product: syz
[ 3430.744094][T14189] usb 7-1: Manufacturer: syz
[ 3430.750091][T14189] usb 7-1: SerialNumber: syz
[ 3430.775616][T14189] usb 7-1: config 0 descriptor??
[ 3430.862822][T13792] usb 10-1: Using ep0 maxpacket: 8
[ 3430.873784][T13792] usb 10-1: config index 0 descriptor too short (expected 30, got 18)
[ 3430.885072][T13792] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3430.912800][T13792] usb 10-1: config 0 has no interfaces?
[ 3430.923449][T13792] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 3430.932948][T13792] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3430.941145][T13792] usb 10-1: Product: syz
[ 3430.945642][T13792] usb 10-1: Manufacturer: syz
[ 3430.950470][T13792] usb 10-1: SerialNumber: syz
[ 3430.956909][T13792] usb 10-1: config 0 descriptor??
[ 3431.018168][T31554] dvb-usb: bulk message failed: -22 (6/0)
[ 3431.023907][T31554] dw2102: i2c transfer failed.
[ 3431.081023][T15927] dvb-usb: bulk message failed: -22 (3/0)
[ 3431.087183][T15927] dw2102: i2c transfer failed.
[ 3431.092903][T15927] dvb-usb: bulk message failed: -22 (3/0)
[ 3431.108723][T15927] dw2102: i2c transfer failed.
[ 3431.118574][T31554] dvb-usb: bulk message failed: -22 (6/0)
[ 3431.124784][T31554] dw2102: i2c transfer failed.
[ 3431.132313][ T5852] usb 7-1: USB disconnect, device number 3
[ 3431.167714][T31554] dvb-usb: bulk message failed: -22 (6/0)
[ 3431.173456][T31554] dw2102: i2c transfer failed.
[ 3431.176983][T15940] netlink: 100 bytes leftover after parsing attributes in process `syz.8.11975'.
[ 3431.206131][T15932] FAULT_INJECTION: forcing a failure.
[ 3431.206131][T15932] name failslab, interval 1, probability 0, space 0, times 0
[ 3431.218906][T31554] dvb-usb: bulk message failed: -22 (6/0)
[ 3431.224956][T15932] CPU: 0 UID: 0 PID: 15932 Comm: syz.9.11978 Not tainted syzkaller #0 PREEMPT(full) 
[ 3431.224978][T15932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3431.224989][T15932] Call Trace:
[ 3431.224995][T15932]  <TASK>
[ 3431.225002][T15932]  dump_stack_lvl+0x16c/0x1f0
[ 3431.225034][T15932]  should_fail_ex+0x512/0x640
[ 3431.225056][T15932]  ? fs_reclaim_acquire+0xae/0x150
[ 3431.225076][T15932]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 3431.225094][T15932]  should_failslab+0xc2/0x120
[ 3431.225106][T15932]  __kmalloc_noprof+0xd2/0x510
[ 3431.225120][T15932]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 3431.225138][T15932]  ? tomoyo_profile+0x47/0x60
[ 3431.225151][T15932]  tomoyo_path_number_perm+0x245/0x580
[ 3431.225164][T15932]  ? tomoyo_path_number_perm+0x237/0x580
[ 3431.225179][T15932]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3431.225194][T15932]  ? find_held_lock+0x2b/0x80
[ 3431.225220][T15932]  ? find_held_lock+0x2b/0x80
[ 3431.225232][T15932]  ? hook_file_ioctl_common+0x145/0x410
[ 3431.225247][T15932]  ? __fget_files+0x20e/0x3c0
[ 3431.225261][T15932]  security_file_ioctl+0x9b/0x240
[ 3431.225279][T15932]  __x64_sys_ioctl+0xb7/0x210
[ 3431.225296][T15932]  do_syscall_64+0xcd/0x4e0
[ 3431.225312][T15932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3431.225323][T15932] RIP: 0033:0x7f57cf98eba9
[ 3431.225332][T15932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3431.225342][T15932] RSP: 002b:00007f57d0749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3431.225353][T15932] RAX: ffffffffffffffda RBX: 00007f57cfbd5fa0 RCX: 00007f57cf98eba9
[ 3431.225360][T15932] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004
[ 3431.225366][T15932] RBP: 00007f57d0749090 R08: 0000000000000000 R09: 0000000000000000
[ 3431.225375][T15932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3431.225384][T15932] R13: 00007f57cfbd6038 R14: 00007f57cfbd5fa0 R15: 00007fffd8da48a8
[ 3431.225406][T15932]  </TASK>
[ 3431.225418][T15932] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3431.430195][T31554] dw2102: i2c transfer failed.
[ 3431.434974][T31554] dvb-usb: bulk message failed: -22 (6/0)
[ 3431.440751][T31554] dw2102: i2c transfer failed.
[ 3431.445513][T31554] dvb-usb: MAC address: 02:02:02:02:02:02
[ 3431.451381][T15932] dvb-usb: bulk message failed: -22 (3/0)
[ 3431.467550][T15932] dw2102: i2c transfer failed.
[ 3431.490407][ T7808] bond2 (unregistering): (slave gretap1): Releasing active interface
[ 3431.495504][T31554] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3431.640579][T15932] dvb-usb: bulk message failed: -22 (3/0)
[ 3431.657871][T15932] dw2102: i2c transfer failed.
[ 3431.673397][T14217] usb 10-1: USB disconnect, device number 90
[ 3431.752191][T31554] dvb-usb: bulk message failed: -22 (3/0)
[ 3431.767929][T31554] dw2102: command 0x0e transfer failed.
[ 3431.773503][T31554] dvb-usb: bulk message failed: -22 (3/0)
[ 3431.800026][T31554] dw2102: command 0x0e transfer failed.
[ 3432.351133][T31554] dvb-usb: bulk message failed: -22 (3/0)
[ 3432.356949][T31554] dw2102: command 0x0e transfer failed.
[ 3432.364633][T31554] dvb-usb: bulk message failed: -22 (3/0)
[ 3432.370597][T31554] dw2102: command 0x0e transfer failed.
[ 3432.376158][T31554] dvb-usb: bulk message failed: -22 (1/0)
[ 3432.382268][T31554] dw2102: command 0x51 transfer failed.
[ 3432.395872][T31554] dvb-usb: bulk message failed: -22 (5/0)
[ 3432.477769][T31554] dw2102: i2c probe for address 0x68 failed.
[ 3432.512386][T31554] dvb-usb: bulk message failed: -22 (5/0)
[ 3432.552014][T31554] dw2102: i2c probe for address 0x69 failed.
[ 3432.567837][T31554] dvb-usb: bulk message failed: -22 (5/0)
[ 3432.687785][T31554] dw2102: i2c probe for address 0x6a failed.
[ 3432.693793][T31554] dw2102: probing for demodulator failed. Is the external power switched on?
[ 3432.717252][T31554] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[ 3432.818018][T31554] rc_core: IR keymap rc-tt-1500 not found
[ 3432.832852][T31554] Registered IR keymap rc-empty
[ 3432.858469][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 3432.858486][   T30] audit: type=1400 audit(1757639585.981:1100): avc:  denied  { setattr } for  pid=15954 comm="syz.8.11986" name="vbi2" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 3432.901389][T31554] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0
[ 3433.447006][T31554] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input155
[ 3433.525313][T31554] dvb-usb: schedule remote query interval to 250 msecs.
[ 3433.543665][T31554] dw2102: su3000_power_ctrl: 0, initialized 1
[ 3433.554463][ T7808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3433.572811][ T7808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3433.583010][T31554] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[ 3433.592895][ T7808] bond0 (unregistering): Released all slaves
[ 3433.695205][T31554] usb 8-1: USB disconnect, device number 109
[ 3433.874734][T31554] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[ 3434.248099][T31554] usb 8-1: new high-speed USB device number 110 using dummy_hcd
[ 3434.416345][T31554] usb 8-1: Using ep0 maxpacket: 16
[ 3434.563387][ T7808] bond1 (unregistering): Released all slaves
[ 3434.612379][ T7808] bond2 (unregistering): Released all slaves
[ 3434.628226][ T7808] bond3 (unregistering): Released all slaves
[ 3434.716096][T15973] siw: device registration error -23
[ 3435.689081][T15979] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3435.699611][ T7808] bond4 (unregistering): Released all slaves
[ 3435.770416][ T7808] bond5 (unregistering): Released all slaves
[ 3435.949472][ T7808] bond6 (unregistering): Released all slaves
[ 3436.062705][T15983] ubi31: detaching mtd0
[ 3436.194446][T15983] ubi31: mtd0 is detached
[ 3436.453145][ T7808] bond7 (unregistering): Released all slaves
[ 3436.473798][ T7808] bond8 (unregistering): Released all slaves
[ 3436.505046][ T7808] bond9 (unregistering): Released all slaves
[ 3436.698153][T31554] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 3436.731019][T31554] usb 8-1: unable to read config index 0 descriptor/start: -71
[ 3436.794985][T31554] usb 8-1: can't read configurations, error -71
[ 3437.001598][T15998] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present
[ 3438.048527][T16002] netlink: 100 bytes leftover after parsing attributes in process `syz.6.11996'.
[ 3438.353359][T16007] netlink: 'syz.3.11999': attribute type 1 has an invalid length.
[ 3438.370300][T16008] FAULT_INJECTION: forcing a failure.
[ 3438.370300][T16008] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3438.507575][T16008] CPU: 0 UID: 0 PID: 16008 Comm: syz.9.11998 Not tainted syzkaller #0 PREEMPT(full) 
[ 3438.507600][T16008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3438.507611][T16008] Call Trace:
[ 3438.507617][T16008]  <TASK>
[ 3438.507625][T16008]  dump_stack_lvl+0x16c/0x1f0
[ 3438.507652][T16008]  should_fail_ex+0x512/0x640
[ 3438.507679][T16008]  _copy_from_user+0x2e/0xd0
[ 3438.507713][T16008]  copy_msghdr_from_user+0x98/0x160
[ 3438.507736][T16008]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 3438.507763][T16008]  ? __pfx__kstrtoull+0x10/0x10
[ 3438.507787][T16008]  ___sys_sendmsg+0xfe/0x1d0
[ 3438.507810][T16008]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3438.507844][T16008]  ? find_held_lock+0x2b/0x80
[ 3438.507882][T16008]  __sys_sendmmsg+0x200/0x420
[ 3438.507907][T16008]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 3438.507935][T16008]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3438.507969][T16008]  ? fput+0x9b/0xd0
[ 3438.507991][T16008]  ? ksys_write+0x1ac/0x250
[ 3438.508009][T16008]  ? __pfx_ksys_write+0x10/0x10
[ 3438.508032][T16008]  __x64_sys_sendmmsg+0x9c/0x100
[ 3438.508053][T16008]  ? lockdep_hardirqs_on+0x7c/0x110
[ 3438.508074][T16008]  do_syscall_64+0xcd/0x4e0
[ 3438.508099][T16008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3438.508117][T16008] RIP: 0033:0x7f57cf98eba9
[ 3438.508130][T16008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3438.508147][T16008] RSP: 002b:00007f57cdbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 3438.508164][T16008] RAX: ffffffffffffffda RBX: 00007f57cfbd6090 RCX: 00007f57cf98eba9
[ 3438.508176][T16008] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000006
[ 3438.508187][T16008] RBP: 00007f57cdbf6090 R08: 0000000000000000 R09: 0000000000000000
[ 3438.508197][T16008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3438.508207][T16008] R13: 00007f57cfbd6128 R14: 00007f57cfbd6090 R15: 00007fffd8da48a8
[ 3438.508234][T16008]  </TASK>
[ 3439.114480][T16007] bond1: entered promiscuous mode
[ 3439.227384][T16007] 8021q: adding VLAN 0 to HW filter on device bond1
[ 3439.908646][T16007] overlayfs: failed lookup in lower (newroot/22, name='bus', err=-40): overlapping layers
[ 3441.058662][ T7808] hsr_slave_0: left promiscuous mode
[ 3441.197042][ T7808] hsr_slave_1: left promiscuous mode
[ 3441.204809][ T7808] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3441.212332][ T7808] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3442.149324][ T7808] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3442.233278][T16053] 9pnet_fd: Insufficient options for proto=fd
[ 3442.241164][ T7808] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3442.249150][   T30] audit: type=1400 audit(1757639595.370:1101): avc:  denied  { bind } for  pid=16052 comm="syz.6.12011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 3443.137747][ T7808] veth1_macvtap: left promiscuous mode
[ 3443.143354][ T7808] veth0_macvtap: left promiscuous mode
[ 3443.149023][ T7808] veth1_vlan: left promiscuous mode
[ 3443.154315][ T7808] veth0_vlan: left promiscuous mode
[ 3443.401742][T16063] FAT-fs (nullb0): bogus number of reserved sectors
[ 3443.408610][T16063] FAT-fs (nullb0): Can't find a valid FAT filesystem
[ 3443.787820][T16064] FAULT_INJECTION: forcing a failure.
[ 3443.787820][T16064] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3443.835095][T16064] CPU: 1 UID: 0 PID: 16064 Comm: syz.3.12014 Not tainted syzkaller #0 PREEMPT(full) 
[ 3443.835121][T16064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3443.835130][T16064] Call Trace:
[ 3443.835136][T16064]  <TASK>
[ 3443.835142][T16064]  dump_stack_lvl+0x16c/0x1f0
[ 3443.835168][T16064]  should_fail_ex+0x512/0x640
[ 3443.835194][T16064]  _copy_from_user+0x2e/0xd0
[ 3443.835220][T16064]  move_addr_to_kernel+0x65/0x170
[ 3443.835240][T16064]  __sys_sendto+0x1be/0x520
[ 3443.835260][T16064]  ? __pfx___sys_sendto+0x10/0x10
[ 3443.835301][T16064]  ? ksys_write+0x1ac/0x250
[ 3443.835320][T16064]  ? __pfx_ksys_write+0x10/0x10
[ 3443.835341][T16064]  __x64_sys_sendto+0xe0/0x1c0
[ 3443.835360][T16064]  ? do_syscall_64+0x91/0x4e0
[ 3443.835382][T16064]  ? lockdep_hardirqs_on+0x7c/0x110
[ 3443.835403][T16064]  do_syscall_64+0xcd/0x4e0
[ 3443.835428][T16064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3443.835446][T16064] RIP: 0033:0x7f772a58eba9
[ 3443.835461][T16064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3443.835478][T16064] RSP: 002b:00007f772b450038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 3443.835496][T16064] RAX: ffffffffffffffda RBX: 00007f772a7d5fa0 RCX: 00007f772a58eba9
[ 3443.835508][T16064] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[ 3443.835518][T16064] RBP: 00007f772b450090 R08: 000020000005ffe4 R09: 000000000000001c
[ 3443.835529][T16064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3443.835540][T16064] R13: 00007f772a7d6038 R14: 00007f772a7d5fa0 R15: 00007fff322641a8
[ 3443.835564][T16064]  </TASK>
[ 3446.085145][T16095] FAULT_INJECTION: forcing a failure.
[ 3446.085145][T16095] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3447.697218][T16095] CPU: 1 UID: 0 PID: 16095 Comm: syz.6.12021 Not tainted syzkaller #0 PREEMPT(full) 
[ 3447.697246][T16095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3447.697257][T16095] Call Trace:
[ 3447.697263][T16095]  <TASK>
[ 3447.697271][T16095]  dump_stack_lvl+0x16c/0x1f0
[ 3447.697299][T16095]  should_fail_ex+0x512/0x640
[ 3447.697326][T16095]  _copy_from_user+0x2e/0xd0
[ 3447.697353][T16095]  __sys_bpf+0x21d/0x4de0
[ 3447.697380][T16095]  ? __pfx___sys_bpf+0x10/0x10
[ 3447.697404][T16095]  ? ksys_write+0x190/0x250
[ 3447.697428][T16095]  ? __mutex_unlock_slowpath+0x161/0x7b0
[ 3447.697467][T16095]  ? fput+0x9b/0xd0
[ 3447.697490][T16095]  ? ksys_write+0x1ac/0x250
[ 3447.697508][T16095]  ? __pfx_ksys_write+0x10/0x10
[ 3447.697537][T16095]  __x64_sys_bpf+0x78/0xc0
[ 3447.697560][T16095]  ? lockdep_hardirqs_on+0x7c/0x110
[ 3447.697582][T16095]  do_syscall_64+0xcd/0x4e0
[ 3447.697605][T16095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3447.697620][T16095] RIP: 0033:0x7fe12ff8eba9
[ 3447.697631][T16095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3447.697642][T16095] RSP: 002b:00007fe130e67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 3447.697652][T16095] RAX: ffffffffffffffda RBX: 00007fe1301d6180 RCX: 00007fe12ff8eba9
[ 3447.697659][T16095] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018
[ 3447.697665][T16095] RBP: 00007fe130e67090 R08: 0000000000000000 R09: 0000000000000000
[ 3447.697672][T16095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3447.697678][T16095] R13: 00007fe1301d6218 R14: 00007fe1301d6180 R15: 00007ffc538389c8
[ 3447.697691][T16095]  </TASK>
[ 3448.430178][T16102] siw: device registration error -23
[ 3449.634018][   T30] audit: type=1400 audit(1757639602.749:1102): avc:  denied  { view } for  pid=16106 comm="syz.8.12025" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[ 3449.799121][ T5852] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 3449.963802][T16115] netlink: 100 bytes leftover after parsing attributes in process `syz.7.12028'.
[ 3450.150113][ T5852] usb 4-1: Using ep0 maxpacket: 8
[ 3450.166002][ T5852] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 3450.176446][ T5852] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 3450.188460][ T5852] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 3450.214397][ T5852] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3450.252248][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 3450.260207][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 3450.314533][ T5852] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 3450.405923][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3450.484464][ T7808] team0 (unregistering): Port device team_slave_1 removed
[ 3450.608654][ T7808] team0 (unregistering): Port device team_slave_0 removed
[ 3450.741385][ T5852] usb 4-1: GET_CAPABILITIES returned 0
[ 3450.749442][ T5852] usbtmc 4-1:16.0: can't read capabilities
[ 3450.835628][T16107] FAULT_INJECTION: forcing a failure.
[ 3450.835628][T16107] name failslab, interval 1, probability 0, space 0, times 0
[ 3450.848447][T16107] CPU: 1 UID: 0 PID: 16107 Comm: syz.3.12027 Not tainted syzkaller #0 PREEMPT(full) 
[ 3450.848462][T16107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3450.848469][T16107] Call Trace:
[ 3450.848473][T16107]  <TASK>
[ 3450.848482][T16107]  dump_stack_lvl+0x16c/0x1f0
[ 3450.848501][T16107]  should_fail_ex+0x512/0x640
[ 3450.848515][T16107]  ? __kmalloc_cache_noprof+0x57/0x3e0
[ 3450.848533][T16107]  should_failslab+0xc2/0x120
[ 3450.848545][T16107]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 3450.848562][T16107]  ? usbtmc_read+0x130/0x13f0
[ 3450.848581][T16107]  usbtmc_read+0x130/0x13f0
[ 3450.848599][T16107]  ? __import_iovec+0x1dd/0x650
[ 3450.848615][T16107]  ? __pfx_usbtmc_read+0x10/0x10
[ 3450.848632][T16107]  ? bpf_lsm_file_permission+0x9/0x10
[ 3450.848646][T16107]  ? security_file_permission+0x71/0x210
[ 3450.848664][T16107]  ? rw_verify_area+0xcf/0x6c0
[ 3450.848682][T16107]  ? __pfx_usbtmc_read+0x10/0x10
[ 3450.848697][T16107]  vfs_readv+0x5c1/0x8b0
[ 3450.848709][T16107]  ? __pfx_vfs_readv+0x10/0x10
[ 3450.848729][T16107]  ? __fget_files+0x20e/0x3c0
[ 3450.848741][T16107]  ? __fget_files+0x1a0/0x3c0
[ 3450.848755][T16107]  ? do_readv+0x132/0x340
[ 3450.848763][T16107]  do_readv+0x132/0x340
[ 3450.848773][T16107]  ? __pfx_do_readv+0x10/0x10
[ 3450.848786][T16107]  do_syscall_64+0xcd/0x4e0
[ 3450.848802][T16107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3450.848813][T16107] RIP: 0033:0x7f772a58eba9
[ 3450.848821][T16107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3450.848832][T16107] RSP: 002b:00007f772b450038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[ 3450.848842][T16107] RAX: ffffffffffffffda RBX: 00007f772a7d5fa0 RCX: 00007f772a58eba9
[ 3450.848849][T16107] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004
[ 3450.848855][T16107] RBP: 00007f772b450090 R08: 0000000000000000 R09: 0000000000000000
[ 3450.848861][T16107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3450.848867][T16107] R13: 00007f772a7d6038 R14: 00007f772a7d5fa0 R15: 00007fff322641a8
[ 3450.848881][T16107]  </TASK>
[ 3451.074638][ T5852] usb 4-1: USB disconnect, device number 35
[ 3452.899563][T31552] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 3453.520026][T31552] usb 4-1: Using ep0 maxpacket: 8
[ 3453.532705][T31552] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 3453.736200][T31552] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 3453.785529][T31552] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 3453.795811][T31552] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3453.814007][T31552] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 3453.824025][T31552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3454.201272][T31552] usb 4-1: usb_control_msg returned -32
[ 3454.206874][T31552] usbtmc 4-1:16.0: can't read capabilities
[ 3454.242328][T31552] usb 4-1: USB disconnect, device number 36
[ 3454.518024][T16141] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present
[ 3456.477122][T16151] siw: device registration error -23
[ 3456.521006][T16069] netlink: 44 bytes leftover after parsing attributes in process `syz.9.12015'.
[ 3458.340172][T16172] netlink: 100 bytes leftover after parsing attributes in process `syz.9.12045'.
[ 3458.466085][ T7808] bridge_slave_1: left allmulticast mode
[ 3458.487712][ T7808] bridge_slave_1: left promiscuous mode
[ 3458.507727][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3458.543326][ T7808] bridge_slave_0: left allmulticast mode
[ 3458.580276][ T7808] bridge_slave_0: left promiscuous mode
[ 3458.587147][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3458.953733][   T30] audit: type=1400 audit(1757639612.078:1103): avc:  denied  { setopt } for  pid=16178 comm="syz.7.12047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 3459.575161][T14189] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 3459.929893][T16179] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 3459.980466][T14189] usb 7-1: Using ep0 maxpacket: 16
[ 3460.000771][T14189] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[ 3460.209067][T14189] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3460.219436][T14189] usb 7-1: config 0 has no interface number 0
[ 3460.231795][T14189] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice=81.28
[ 3460.241237][T14189] usb 7-1: New USB device strings: Mfr=0, Product=27, SerialNumber=3
[ 3460.249512][T14189] usb 7-1: Product: syz
[ 3460.253823][T14189] usb 7-1: SerialNumber: syz
[ 3460.262224][T16200] binder: 16199:16200 ioctl 4018620d 0 returned -22
[ 3460.270001][T14189] usb 7-1: config 0 descriptor??
[ 3460.278549][T14189] usb 7-1: Found UVC 0.00 device syz (046d:08f3)
[ 3460.285223][T14189] usb 7-1: No valid video chain found.
[ 3460.291715][T16200] binder: 16199:16200 ioctl c0306201 200000000240 returned -11
[ 3460.345993][ T7808] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 3467.096692][ T5220] udevd[5220]: worker [16109] terminated by signal 33 (Unknown signal 33)
[ 3467.201384][ T5220] udevd[5220]: worker [16117] terminated by signal 33 (Unknown signal 33)
[ 3467.276521][T21416] usb 7-1: USB disconnect, device number 4
[ 3467.454818][   T30] audit: type=1400 audit(1757639620.578:1104): avc:  denied  { unmount } for  pid=13842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 3467.533696][T16233] FAULT_INJECTION: forcing a failure.
[ 3467.533696][T16233] name failslab, interval 1, probability 0, space 0, times 0
[ 3467.569212][T16233] CPU: 0 UID: 0 PID: 16233 Comm: syz.6.12061 Not tainted syzkaller #0 PREEMPT(full) 
[ 3467.569237][T16233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3467.569246][T16233] Call Trace:
[ 3467.569251][T16233]  <TASK>
[ 3467.569258][T16233]  dump_stack_lvl+0x16c/0x1f0
[ 3467.569289][T16233]  should_fail_ex+0x512/0x640
[ 3467.569311][T16233]  ? fs_reclaim_acquire+0xae/0x150
[ 3467.569337][T16233]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 3467.569364][T16233]  should_failslab+0xc2/0x120
[ 3467.569386][T16233]  __kmalloc_noprof+0xd2/0x510
[ 3467.569411][T16233]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 3467.569441][T16233]  ? tomoyo_profile+0x47/0x60
[ 3467.569461][T16233]  tomoyo_path_number_perm+0x245/0x580
[ 3467.569490][T16233]  ? tomoyo_path_number_perm+0x237/0x580
[ 3467.569516][T16233]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3467.569541][T16233]  ? find_held_lock+0x2b/0x80
[ 3467.569585][T16233]  ? find_held_lock+0x2b/0x80
[ 3467.569607][T16233]  ? hook_file_ioctl_common+0x145/0x410
[ 3467.569632][T16233]  ? __fget_files+0x20e/0x3c0
[ 3467.569657][T16233]  security_file_ioctl+0x9b/0x240
[ 3467.569685][T16233]  __x64_sys_ioctl+0xb7/0x210
[ 3467.569714][T16233]  do_syscall_64+0xcd/0x4e0
[ 3467.569741][T16233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3467.569759][T16233] RIP: 0033:0x7fe12ff8eba9
[ 3467.569774][T16233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3467.569791][T16233] RSP: 002b:00007fe130ea9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3467.569808][T16233] RAX: ffffffffffffffda RBX: 00007fe1301d5fa0 RCX: 00007fe12ff8eba9
[ 3467.569819][T16233] RDX: 0000200000000080 RSI: 00000000c034564b RDI: 0000000000000003
[ 3467.569831][T16233] RBP: 00007fe130ea9090 R08: 0000000000000000 R09: 0000000000000000
[ 3467.569841][T16233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3467.569851][T16233] R13: 00007fe1301d6038 R14: 00007fe1301d5fa0 R15: 00007ffc538389c8
[ 3467.569876][T16233]  </TASK>
[ 3467.569883][T16233] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3468.556202][ T7808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3468.604639][T16239] netlink: 100 bytes leftover after parsing attributes in process `syz.8.12063'.
[ 3469.701821][ T7808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3469.813232][ T7808] bond0 (unregistering): Released all slaves
[ 3469.887910][ T7808] bond1 (unregistering): Released all slaves
[ 3469.938993][ T7808] bond2 (unregistering): Released all slaves
[ 3469.957566][T16251] FAULT_INJECTION: forcing a failure.
[ 3469.957566][T16251] name failslab, interval 1, probability 0, space 0, times 0
[ 3469.966577][ T7808] bond3 (unregistering): Released all slaves
[ 3470.013941][T16251] CPU: 0 UID: 0 PID: 16251 Comm: syz.6.12066 Not tainted syzkaller #0 PREEMPT(full) 
[ 3470.013969][T16251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3470.013980][T16251] Call Trace:
[ 3470.013987][T16251]  <TASK>
[ 3470.013994][T16251]  dump_stack_lvl+0x16c/0x1f0
[ 3470.014023][T16251]  should_fail_ex+0x512/0x640
[ 3470.014047][T16251]  ? fs_reclaim_acquire+0xae/0x150
[ 3470.014072][T16251]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 3470.014100][T16251]  should_failslab+0xc2/0x120
[ 3470.014121][T16251]  __kmalloc_noprof+0xd2/0x510
[ 3470.014146][T16251]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 3470.014176][T16251]  ? tomoyo_profile+0x47/0x60
[ 3470.014196][T16251]  tomoyo_path_number_perm+0x245/0x580
[ 3470.014219][T16251]  ? tomoyo_path_number_perm+0x237/0x580
[ 3470.014245][T16251]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3470.014276][T16251]  ? find_held_lock+0x2b/0x80
[ 3470.014322][T16251]  ? find_held_lock+0x2b/0x80
[ 3470.014343][T16251]  ? hook_file_ioctl_common+0x145/0x410
[ 3470.014367][T16251]  ? __fget_files+0x20e/0x3c0
[ 3470.014392][T16251]  security_file_ioctl+0x9b/0x240
[ 3470.014419][T16251]  __x64_sys_ioctl+0xb7/0x210
[ 3470.014449][T16251]  do_syscall_64+0xcd/0x4e0
[ 3470.014474][T16251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3470.014492][T16251] RIP: 0033:0x7fe12ff8eba9
[ 3470.014506][T16251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3470.014522][T16251] RSP: 002b:00007fe130ea9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3470.014540][T16251] RAX: ffffffffffffffda RBX: 00007fe1301d5fa0 RCX: 00007fe12ff8eba9
[ 3470.014552][T16251] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[ 3470.014562][T16251] RBP: 00007fe130ea9090 R08: 0000000000000000 R09: 0000000000000000
[ 3470.014576][T16251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3470.014587][T16251] R13: 00007fe1301d6038 R14: 00007fe1301d5fa0 R15: 00007ffc538389c8
[ 3470.014611][T16251]  </TASK>
[ 3470.015220][T16251] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3471.499803][ T7808] bond4 (unregistering): Released all slaves
[ 3472.065210][T14189] usb 8-1: new high-speed USB device number 112 using dummy_hcd
[ 3472.161546][T10188] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 3472.261288][T14189] usb 8-1: Using ep0 maxpacket: 8
[ 3472.334446][T14189] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 3472.357275][T14189] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 3472.514990][   T30] audit: type=1400 audit(1757639625.547:1105): avc:  denied  { kexec_image_load } for  pid=16288 comm="syz.8.12073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[ 3472.824429][T14189] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3472.836807][T14189] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 3472.848259][T10188] usb 7-1: Using ep0 maxpacket: 8
[ 3472.853583][T14189] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 3472.866403][T10188] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 3472.874079][T10188] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 3472.888271][T10188] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3472.900919][T14189] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 3472.909198][T14189] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 3472.928883][ T7808] bond5 (unregistering): Released all slaves
[ 3472.933179][T10188] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 3472.956147][T14189] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3472.978468][T10188] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 3472.990253][T14189] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 3473.001783][T14189] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 3473.038497][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12074'.
[ 3473.103926][T14189] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 3473.111708][T14189] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 3473.124245][T14189] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3473.124366][T10188] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 3473.144346][T14189] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 3473.155518][T10188] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 3473.166789][T14189] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 3473.178205][T10188] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3473.190086][T10188] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 3473.201703][T10188] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 3473.215262][T14189] usb 8-1: string descriptor 0 read error: -22
[ 3473.221648][T14189] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 3473.230694][T14189] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3473.241502][T10188] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 3473.248931][T10188] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 3473.274225][T10188] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3473.289249][T14189] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 3473.331243][T10188] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 3473.342664][T10188] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 3473.358768][T10188] usb 7-1: string descriptor 0 read error: -22
[ 3473.367116][T10188] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 3473.376346][T10188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3473.408414][T10188] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux1
[ 3473.459739][ T7808] bond6 (unregistering): Released all slaves
[ 3473.475596][ T7808] bond7 (unregistering): Released all slaves
[ 3473.505537][T14203] usb 8-1: USB disconnect, device number 112
[ 3473.538703][ T7808] bond8 (unregistering): Released all slaves
[ 3473.649367][T31552] usb 7-1: USB disconnect, device number 5
[ 3473.730652][T16306] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.12077'.
[ 3474.403149][   T30] audit: type=1400 audit(1757639627.467:1106): avc:  denied  { listen } for  pid=16309 comm="syz.3.12079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 3474.705565][T10188] usb 10-1: new high-speed USB device number 91 using dummy_hcd
[ 3474.871591][T10188] usb 10-1: Using ep0 maxpacket: 16
[ 3475.093364][ T7808] hsr_slave_0: left promiscuous mode
[ 3475.112209][ T7808] hsr_slave_1: left promiscuous mode
[ 3475.222223][T16329] siw: device registration error -23
[ 3475.232252][ T7808] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3475.239672][ T7808] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3475.290197][ T7808] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3475.298088][ T7808] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3475.350237][T16332] fuse: Unknown parameter 'use00000000000000000000'
[ 3475.376216][ T7808] veth1_macvtap: left promiscuous mode
[ 3475.385239][ T7808] veth0_macvtap: left promiscuous mode
[ 3475.391021][ T7808] veth1_vlan: left promiscuous mode
[ 3475.397550][ T7808] veth0_vlan: left promiscuous mode
[ 3476.570295][T14189] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 3476.711864][T14203] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 3476.725020][T14189] usb 7-1: Using ep0 maxpacket: 16
[ 3476.747559][T14189] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 3476.760160][T14189] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3476.780715][T14189] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3476.830509][T14189] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3476.851302][T14189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3476.860182][T14189] usb 7-1: Product: syz
[ 3476.864433][T14189] usb 7-1: Manufacturer: syz
[ 3476.869067][T14189] usb 7-1: SerialNumber: syz
[ 3476.875832][T14203] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[ 3476.884509][T14203] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3476.903579][T14203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 3476.917042][T14203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 3476.930411][T14203] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3476.945206][T14203] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3476.957246][T14203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3476.986273][T14203] usb 4-1: config 0 descriptor??
[ 3476.995662][T16349] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 3477.016839][ T7808] team0 (unregistering): Port device team_slave_1 removed
[ 3477.082695][ T7808] team0 (unregistering): Port device team_slave_0 removed
[ 3477.265206][T16350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=16350 comm=syz.3.12090
[ 3477.380830][T16352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3477.403823][T16352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3477.427925][T14189] usb 7-1: 0:2 : does not exist
[ 3477.437885][T14189] usb 7-1: 1:0: cannot get min/max values for control 2 (id 1)
[ 3477.510856][T14189] usb 7-1: USB disconnect, device number 6
[ 3477.523008][T16350] 9pnet: Could not find request transport: f
[ 3477.554627][T14203] plantronics 0003:047F:FFFF.0027: collection stack underflow
[ 3477.568125][T14203] plantronics 0003:047F:FFFF.0027: item 0 2 0 12 parsing failed
[ 3477.573910][T16223] udevd[16223]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3477.581270][T14203] plantronics 0003:047F:FFFF.0027: parse failed
[ 3477.607186][T14203] plantronics 0003:047F:FFFF.0027: probe with driver plantronics failed with error -22
[ 3477.805001][T14203] usb 4-1: USB disconnect, device number 37
[ 3477.865582][T10188] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 3477.894798][T10188] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 3477.919982][T16356] use of bytesused == 0 is deprecated and will be removed in the future,
[ 3477.929939][T16356] use the actual size instead.
[ 3477.943071][T16356] netlink: 36 bytes leftover after parsing attributes in process `syz.8.12091'.
[ 3478.047298][T10188] usb 10-1: can't read configurations, error -71
[ 3478.798676][T16368] siw: device registration error -23
[ 3480.004274][T16388] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12099'.
[ 3480.357687][T16398] block nbd9: Attempted send on invalid socket
[ 3480.364121][T16398] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 3480.375177][T16398] efs: cannot read volume header
[ 3481.064910][T16406] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present
[ 3481.490920][T16404] fuse: Unknown parameter 'user_i00000000000000000000'
[ 3481.589746][T16384] netlink: 32 bytes leftover after parsing attributes in process `syz.7.12099'.
[ 3481.885026][T14203] usb 8-1: new high-speed USB device number 113 using dummy_hcd
[ 3482.074000][T14203] usb 8-1: Using ep0 maxpacket: 8
[ 3482.084362][T14203] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 3482.167445][T14203] usb 8-1: config 7 has an invalid interface number: 58 but max is 0
[ 3482.217604][T14203] usb 8-1: config 7 has no interface number 0
[ 3482.222188][T14189] usb 10-1: new high-speed USB device number 93 using dummy_hcd
[ 3482.282687][T14203] usb 8-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 111, changing to 7
[ 3482.318101][T14203] usb 8-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid maxpacket 25702, setting to 1024
[ 3482.432187][T14203] usb 8-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3482.462124][T14203] usb 8-1: config 7 interface 58 has no altsetting 0
[ 3482.475541][T14203] usb 8-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f
[ 3482.547828][T14189] usb 10-1: Using ep0 maxpacket: 16
[ 3482.664331][T14203] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3482.673846][T14203] usb 8-1: Product: syz
[ 3482.681558][T14203] usb 8-1: Manufacturer: Ь
[ 3482.689994][T14203] usb 8-1: SerialNumber: syz
[ 3482.770943][T14203] usb 8-1: can't set config #7, error -71
[ 3482.837910][T14203] usb 8-1: USB disconnect, device number 113
[ 3484.260853][T14189] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 3484.303315][T14189] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 3484.311055][T14189] usb 10-1: can't read configurations, error -71
[ 3484.863549][ T5852] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 3485.696468][ T5852] usb 7-1: Using ep0 maxpacket: 8
[ 3485.742493][ T5852] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 3485.844043][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3485.958739][T16481] siw: device registration error -23
[ 3486.332973][ T5852] pvrusb2: Hardware description: Terratec Grabster AV400
[ 3486.379857][ T5852] pvrusb2: **********
[ 3486.392523][ T5852] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 3486.421714][ T5852] pvrusb2: Important functionality might not be entirely working.
[ 3486.431300][ T5852] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 3486.458762][ T5852] pvrusb2: **********
[ 3486.545083][ T2331] pvrusb2: Invalid write control endpoint
[ 3486.688920][ T2331] pvrusb2: Invalid write control endpoint
[ 3486.700181][T16492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16492 comm=syz.8.12125
[ 3486.732371][ T2331] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 3486.805973][ T2331] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 3486.823817][T16490] netlink: 48 bytes leftover after parsing attributes in process `syz.8.12125'.
[ 3486.842875][T16490] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12125'.
[ 3486.845909][ T2331] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 3486.886995][ T2331] pvrusb2: Device being rendered inoperable
[ 3486.910326][T16460] pvrusb2: Attempted to execute control transfer when device not ok
[ 3486.922365][ T2331] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 3486.922992][T31554] usb 7-1: USB disconnect, device number 7
[ 3486.960380][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12125'.
[ 3486.980444][ T2331] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[ 3487.068265][ T2331] pvrusb2: Attached sub-driver cx25840
[ 3487.092704][ T2331] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 3487.182568][ T2331] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 3488.243677][T16516] netlink: 51 bytes leftover after parsing attributes in process `syz.8.12131'.
[ 3488.870192][T16529] siw: device registration error -23
[ 3490.145792][T16560] FAULT_INJECTION: forcing a failure.
[ 3490.145792][T16560] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3490.193049][T16560] CPU: 0 UID: 0 PID: 16560 Comm: syz.8.12141 Not tainted syzkaller #0 PREEMPT(full) 
[ 3490.193074][T16560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3490.193085][T16560] Call Trace:
[ 3490.193091][T16560]  <TASK>
[ 3490.193098][T16560]  dump_stack_lvl+0x16c/0x1f0
[ 3490.193125][T16560]  should_fail_ex+0x512/0x640
[ 3490.193159][T16560]  _copy_from_user+0x2e/0xd0
[ 3490.193186][T16560]  copy_msghdr_from_user+0x98/0x160
[ 3490.193208][T16560]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 3490.193235][T16560]  ? __pfx__kstrtoull+0x10/0x10
[ 3490.193259][T16560]  ___sys_sendmsg+0xfe/0x1d0
[ 3490.193282][T16560]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3490.193316][T16560]  ? find_held_lock+0x2b/0x80
[ 3490.193354][T16560]  __sys_sendmmsg+0x200/0x420
[ 3490.193378][T16560]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 3490.193408][T16560]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3490.193440][T16560]  ? fput+0x9b/0xd0
[ 3490.193463][T16560]  ? ksys_write+0x1ac/0x250
[ 3490.193481][T16560]  ? __pfx_ksys_write+0x10/0x10
[ 3490.193503][T16560]  __x64_sys_sendmmsg+0x9c/0x100
[ 3490.193524][T16560]  ? lockdep_hardirqs_on+0x7c/0x110
[ 3490.193546][T16560]  do_syscall_64+0xcd/0x4e0
[ 3490.193570][T16560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3490.193588][T16560] RIP: 0033:0x7f96c918eba9
[ 3490.193602][T16560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3490.193618][T16560] RSP: 002b:00007f96ca086038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 3490.193636][T16560] RAX: ffffffffffffffda RBX: 00007f96c93d5fa0 RCX: 00007f96c918eba9
[ 3490.193647][T16560] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000003
[ 3490.193658][T16560] RBP: 00007f96ca086090 R08: 0000000000000000 R09: 0000000000000000
[ 3490.193669][T16560] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001
[ 3490.193679][T16560] R13: 00007f96c93d6038 R14: 00007f96c93d5fa0 R15: 00007ffc12374658
[ 3490.193702][T16560]  </TASK>
[ 3490.414681][T16564] trusted_key: encrypted_key: insufficient parameters specified
[ 3490.423974][T16564] trusted_key: encrypted_key: insufficient parameters specified
[ 3491.620809][T16580] FAULT_INJECTION: forcing a failure.
[ 3491.620809][T16580] name failslab, interval 1, probability 0, space 0, times 0
[ 3491.654770][T16580] CPU: 1 UID: 0 PID: 16580 Comm: syz.3.12146 Not tainted syzkaller #0 PREEMPT(full) 
[ 3491.654797][T16580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3491.654808][T16580] Call Trace:
[ 3491.654814][T16580]  <TASK>
[ 3491.654822][T16580]  dump_stack_lvl+0x16c/0x1f0
[ 3491.654850][T16580]  should_fail_ex+0x512/0x640
[ 3491.654873][T16580]  ? fs_reclaim_acquire+0xae/0x150
[ 3491.654897][T16580]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 3491.654918][T16580]  should_failslab+0xc2/0x120
[ 3491.654937][T16580]  __kmalloc_noprof+0xd2/0x510
[ 3491.654962][T16580]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 3491.654991][T16580]  ? tomoyo_profile+0x47/0x60
[ 3491.655012][T16580]  tomoyo_path_number_perm+0x245/0x580
[ 3491.655033][T16580]  ? tomoyo_path_number_perm+0x237/0x580
[ 3491.655056][T16580]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3491.655078][T16580]  ? find_held_lock+0x2b/0x80
[ 3491.655115][T16580]  ? find_held_lock+0x2b/0x80
[ 3491.655133][T16580]  ? hook_file_ioctl_common+0x145/0x410
[ 3491.655161][T16580]  ? __fget_files+0x20e/0x3c0
[ 3491.655182][T16580]  security_file_ioctl+0x9b/0x240
[ 3491.655208][T16580]  __x64_sys_ioctl+0xb7/0x210
[ 3491.655233][T16580]  do_syscall_64+0xcd/0x4e0
[ 3491.655257][T16580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3491.655275][T16580] RIP: 0033:0x7f772a58eba9
[ 3491.655290][T16580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3491.655307][T16580] RSP: 002b:00007f772b450038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3491.655325][T16580] RAX: ffffffffffffffda RBX: 00007f772a7d5fa0 RCX: 00007f772a58eba9
[ 3491.655336][T16580] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000006
[ 3491.655346][T16580] RBP: 00007f772b450090 R08: 0000000000000000 R09: 0000000000000000
[ 3491.655357][T16580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3491.655367][T16580] R13: 00007f772a7d6038 R14: 00007f772a7d5fa0 R15: 00007fff322641a8
[ 3491.655392][T16580]  </TASK>
[ 3491.655944][T16580] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3492.215224][T16589] siw: device registration error -23
[ 3493.113128][T14203] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 3493.983213][T14203] usb 4-1: Using ep0 maxpacket: 16
[ 3494.121975][T21416] usb 8-1: new high-speed USB device number 114 using dummy_hcd
[ 3494.467438][T16618] binder: 16617:16618 ioctl c0306201 200000000240 returned -11
[ 3494.493404][T21416] usb 8-1: Using ep0 maxpacket: 16
[ 3494.636620][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12157'.
[ 3494.661005][T16621] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12157'.
[ 3495.586522][T14203] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 3495.635255][T14203] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 3495.658848][T14203] usb 4-1: can't read configurations, error -71
[ 3495.784164][T21416] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 3495.813908][T21416] usb 8-1: unable to read config index 0 descriptor/start: -71
[ 3495.832226][T21416] usb 8-1: can't read configurations, error -71
[ 3495.840775][   T30] audit: type=1400 audit(1757639648.945:1107): avc:  denied  { ioctl } for  pid=16634 comm="syz.3.12161" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 3496.313444][T14203] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 3496.493755][T14203] usb 4-1: Using ep0 maxpacket: 16
[ 3496.505421][T16646] siw: device registration error -23
[ 3496.562225][T14203] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[ 3496.572511][T14203] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[ 3496.581668][T14203] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[ 3496.636841][T14203] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[ 3496.670471][T14203] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 3496.717524][T14203] usb 4-1: config 0 has no interface number 0
[ 3496.742664][T14203] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 3496.763600][T14203] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 3496.791020][T14203] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3496.846074][T14203] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3496.862776][T14203] usb 4-1: config 0 interface 125 has no altsetting 0
[ 3496.921929][T14203] usb 4-1: config 0 interface 125 has no altsetting 2
[ 3496.932547][T14203] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 3496.942029][T14203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3496.950204][T14203] usb 4-1: Product: syz
[ 3496.954473][T14203] usb 4-1: Manufacturer: syz
[ 3496.959115][T14203] usb 4-1: SerialNumber: syz
[ 3496.972369][T14203] usb 4-1: config 0 descriptor??
[ 3496.991304][T14203] usb 4-1: selecting invalid altsetting 2
[ 3497.297158][T21416] usb 8-1: new high-speed USB device number 115 using dummy_hcd
[ 3497.308881][   T30] audit: type=1400 audit(1757639650.425:1108): avc:  denied  { accept } for  pid=16661 comm="syz.6.12167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 3497.330809][T10188] usb 10-1: new high-speed USB device number 95 using dummy_hcd
[ 3497.473482][T21416] usb 8-1: Using ep0 maxpacket: 16
[ 3497.487373][T21416] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 3497.506189][T10188] usb 10-1: Using ep0 maxpacket: 8
[ 3497.514061][T21416] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3497.534021][T21416] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3497.573314][T10188] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 3497.576805][T21416] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3497.589995][T10188] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 3497.593225][T21416] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3497.613502][T10188] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 3497.617086][T21416] usb 8-1: Product: syz
[ 3497.636648][T21416] usb 8-1: Manufacturer: syz
[ 3497.641615][T10188] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3497.652121][T21416] usb 8-1: SerialNumber: syz
[ 3497.664486][T10188] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 3497.677562][T10188] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3497.907735][T10188] usb 10-1: GET_CAPABILITIES returned 0
[ 3497.913901][T10188] usbtmc 10-1:16.0: can't read capabilities
[ 3498.139464][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.148655][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.157775][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.166891][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.180908][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.190116][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.199292][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.208443][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.250187][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.253095][T16669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3498.262094][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.269447][T16669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3498.277275][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.294175][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.303343][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.312475][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.360114][T10188] usb 4-1: USB disconnect, device number 39
[ 3498.374700][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.383913][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 3498.402728][T21416] usb 8-1: 0:2 : does not exist
[ 3498.418648][  T579] Bluetooth: hci6: command 0x0406 tx timeout
[ 3498.420744][T21416] usb 8-1: 1:0: cannot get min/max values for control 2 (id 1)
[ 3498.461953][T16671] fuse: Bad value for 'rootmode'
[ 3498.485161][T21416] usb 8-1: USB disconnect, device number 115
[ 3498.499011][T13792] usb 10-1: USB disconnect, device number 95
[ 3498.825692][T16223] udevd[16223]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3499.405721][T16679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 3499.999880][T13792] usb 8-1: new high-speed USB device number 116 using dummy_hcd
[ 3500.073722][ T5852] usb 10-1: new high-speed USB device number 96 using dummy_hcd
[ 3500.184192][T13792] usb 8-1: Using ep0 maxpacket: 16
[ 3500.224432][T13792] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 3500.233149][T13792] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3500.260519][ T5852] usb 10-1: Using ep0 maxpacket: 16
[ 3500.272953][T16691] netlink: 100 bytes leftover after parsing attributes in process `syz.6.12175'.
[ 3500.282406][T14203] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 3500.331726][ T5852] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 3500.373696][ T5852] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3500.389530][T13792] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3500.485284][ T5852] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3500.505197][T14203] usb 4-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7
[ 3500.513930][T13792] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3500.523286][T13792] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3500.554732][T14203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3500.627681][ T5852] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3500.630780][T14203] usb 4-1: config 0 descriptor??
[ 3500.697662][T13792] usb 8-1: Product: syz
[ 3500.701855][T13792] usb 8-1: Manufacturer: syz
[ 3500.718073][T14203] gspca_main: mars-2.14.0 probing 093a:050f
[ 3500.763729][ T5852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3500.931181][T13792] usb 8-1: SerialNumber: syz
[ 3500.951414][ T5852] usb 10-1: Product: syz
[ 3500.992056][ T5852] usb 10-1: Manufacturer: syz
[ 3501.025500][ T5852] usb 10-1: SerialNumber: syz
[ 3501.156925][T14203] usb 4-1: USB disconnect, device number 40
[ 3501.489786][T13792] usb 8-1: 0:2 : does not exist
[ 3501.516742][T13792] usb 8-1: 1:0: cannot get min/max values for control 2 (id 1)
[ 3501.606735][T13792] usb 8-1: USB disconnect, device number 116
[ 3501.782909][ T5852] usb 10-1: 0:2 : does not exist
[ 3501.865255][ T5852] usb 10-1: 1:0: cannot get min/max values for control 2 (id 1)
[ 3501.933540][ T5852] usb 10-1: USB disconnect, device number 96
[ 3502.099265][T16223] udevd[16223]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 3502.518816][T16732] FAULT_INJECTION: forcing a failure.
[ 3502.518816][T16732] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3502.559283][T16732] CPU: 0 UID: 0 PID: 16732 Comm: syz.9.12180 Not tainted syzkaller #0 PREEMPT(full) 
[ 3502.559309][T16732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3502.559320][T16732] Call Trace:
[ 3502.559327][T16732]  <TASK>
[ 3502.559335][T16732]  dump_stack_lvl+0x16c/0x1f0
[ 3502.559363][T16732]  should_fail_ex+0x512/0x640
[ 3502.559390][T16732]  _copy_from_user+0x2e/0xd0
[ 3502.559417][T16732]  copy_msghdr_from_user+0x98/0x160
[ 3502.559441][T16732]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 3502.559468][T16732]  ? __pfx__kstrtoull+0x10/0x10
[ 3502.559492][T16732]  ___sys_sendmsg+0xfe/0x1d0
[ 3502.559515][T16732]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3502.559547][T16732]  ? find_held_lock+0x2b/0x80
[ 3502.559581][T16732]  __sys_sendmmsg+0x200/0x420
[ 3502.559606][T16732]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 3502.559634][T16732]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3502.559664][T16732]  ? fput+0x9b/0xd0
[ 3502.559686][T16732]  ? ksys_write+0x1ac/0x250
[ 3502.559704][T16732]  ? __pfx_ksys_write+0x10/0x10
[ 3502.559731][T16732]  __x64_sys_sendmmsg+0x9c/0x100
[ 3502.559752][T16732]  ? lockdep_hardirqs_on+0x7c/0x110
[ 3502.559772][T16732]  do_syscall_64+0xcd/0x4e0
[ 3502.559796][T16732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3502.559813][T16732] RIP: 0033:0x7f57cf98eba9
[ 3502.559827][T16732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3502.559843][T16732] RSP: 002b:00007f57d0749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 3502.559860][T16732] RAX: ffffffffffffffda RBX: 00007f57cfbd5fa0 RCX: 00007f57cf98eba9
[ 3502.559871][T16732] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000005
[ 3502.559881][T16732] RBP: 00007f57d0749090 R08: 0000000000000000 R09: 0000000000000000
[ 3502.559891][T16732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3502.559901][T16732] R13: 00007f57cfbd6038 R14: 00007f57cfbd5fa0 R15: 00007fffd8da48a8
[ 3502.559925][T16732]  </TASK>
[ 3502.930886][T16739] fuse: Bad value for 'rootmode'
[ 3503.280186][T16744] FAULT_INJECTION: forcing a failure.
[ 3503.280186][T16744] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3503.298760][T16744] CPU: 1 UID: 0 PID: 16744 Comm: syz.3.12185 Not tainted syzkaller #0 PREEMPT(full) 
[ 3503.298784][T16744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3503.298795][T16744] Call Trace:
[ 3503.298801][T16744]  <TASK>
[ 3503.298808][T16744]  dump_stack_lvl+0x16c/0x1f0
[ 3503.298837][T16744]  should_fail_ex+0x512/0x640
[ 3503.298864][T16744]  _copy_from_user+0x2e/0xd0
[ 3503.298891][T16744]  copy_msghdr_from_user+0x98/0x160
[ 3503.298915][T16744]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 3503.298949][T16744]  ___sys_sendmsg+0xfe/0x1d0
[ 3503.298972][T16744]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3503.299035][T16744]  __sys_sendmsg+0x16d/0x220
[ 3503.299057][T16744]  ? __pfx___sys_sendmsg+0x10/0x10
[ 3503.299095][T16744]  do_syscall_64+0xcd/0x4e0
[ 3503.299120][T16744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3503.299137][T16744] RIP: 0033:0x7f772a58eba9
[ 3503.299151][T16744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3503.299168][T16744] RSP: 002b:00007f772b450038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3503.299185][T16744] RAX: ffffffffffffffda RBX: 00007f772a7d5fa0 RCX: 00007f772a58eba9
[ 3503.299197][T16744] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004
[ 3503.299207][T16744] RBP: 00007f772b450090 R08: 0000000000000000 R09: 0000000000000000
[ 3503.299218][T16744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3503.299228][T16744] R13: 00007f772a7d6038 R14: 00007f772a7d5fa0 R15: 00007fff322641a8
[ 3503.299251][T16744]  </TASK>
[ 3503.515397][T16749] FAULT_INJECTION: forcing a failure.
[ 3503.515397][T16749] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3503.551520][T16749] CPU: 1 UID: 0 PID: 16749 Comm: syz.7.12186 Not tainted syzkaller #0 PREEMPT(full) 
[ 3503.551543][T16749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3503.551553][T16749] Call Trace:
[ 3503.551558][T16749]  <TASK>
[ 3503.551565][T16749]  dump_stack_lvl+0x16c/0x1f0
[ 3503.551606][T16749]  should_fail_ex+0x512/0x640
[ 3503.551633][T16749]  _copy_from_user+0x2e/0xd0
[ 3503.551658][T16749]  copy_msghdr_from_user+0x98/0x160
[ 3503.551681][T16749]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 3503.551711][T16749]  ___sys_sendmsg+0xfe/0x1d0
[ 3503.551731][T16749]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3503.551777][T16749]  __sys_sendmsg+0x16d/0x220
[ 3503.551798][T16749]  ? __pfx___sys_sendmsg+0x10/0x10
[ 3503.551834][T16749]  do_syscall_64+0xcd/0x4e0
[ 3503.551859][T16749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3503.551876][T16749] RIP: 0033:0x7fc11c78eba9
[ 3503.551889][T16749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3503.551905][T16749] RSP: 002b:00007fc11d570038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3503.551922][T16749] RAX: ffffffffffffffda RBX: 00007fc11c9d5fa0 RCX: 00007fc11c78eba9
[ 3503.551933][T16749] RDX: 0000000004000000 RSI: 0000200000000780 RDI: 0000000000000003
[ 3503.551943][T16749] RBP: 00007fc11d570090 R08: 0000000000000000 R09: 0000000000000000
[ 3503.551953][T16749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3503.551963][T16749] R13: 00007fc11c9d6038 R14: 00007fc11c9d5fa0 R15: 00007fff90137948
[ 3503.551990][T16749]  </TASK>
[ 3504.081982][T16746] FAULT_INJECTION: forcing a failure.
[ 3504.081982][T16746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3504.104862][T16746] CPU: 0 UID: 0 PID: 16746 Comm: syz.9.12187 Not tainted syzkaller #0 PREEMPT(full) 
[ 3504.104887][T16746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3504.104897][T16746] Call Trace:
[ 3504.104902][T16746]  <TASK>
[ 3504.104907][T16746]  dump_stack_lvl+0x16c/0x1f0
[ 3504.104925][T16746]  should_fail_ex+0x512/0x640
[ 3504.104942][T16746]  _copy_to_user+0x32/0xd0
[ 3504.104961][T16746]  simple_read_from_buffer+0xcb/0x170
[ 3504.104974][T16746]  proc_fail_nth_read+0x197/0x240
[ 3504.104988][T16746]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3504.105001][T16746]  ? rw_verify_area+0xcf/0x6c0
[ 3504.105017][T16746]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3504.105029][T16746]  vfs_read+0x1e4/0xcf0
[ 3504.105042][T16746]  ? __pfx___mutex_lock+0x10/0x10
[ 3504.105060][T16746]  ? __pfx_vfs_read+0x10/0x10
[ 3504.105074][T16746]  ? __fget_files+0x20e/0x3c0
[ 3504.105090][T16746]  ksys_read+0x12a/0x250
[ 3504.105100][T16746]  ? __pfx_ksys_read+0x10/0x10
[ 3504.105111][T16746]  ? fdget+0x187/0x210
[ 3504.105125][T16746]  do_syscall_64+0xcd/0x4e0
[ 3504.105141][T16746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3504.105152][T16746] RIP: 0033:0x7f57cf98d5bc
[ 3504.105161][T16746] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 3504.105177][T16746] RSP: 002b:00007f57d0749030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3504.105188][T16746] RAX: ffffffffffffffda RBX: 00007f57cfbd5fa0 RCX: 00007f57cf98d5bc
[ 3504.105195][T16746] RDX: 000000000000000f RSI: 00007f57d07490a0 RDI: 0000000000000004
[ 3504.105201][T16746] RBP: 00007f57d0749090 R08: 0000000000000000 R09: 0000000000000000
[ 3504.105207][T16746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3504.105213][T16746] R13: 00007f57cfbd6038 R14: 00007f57cfbd5fa0 R15: 00007fffd8da48a8
[ 3504.105227][T16746]  </TASK>
[ 3504.353402][T16762] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[ 3504.361964][T16762] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[ 3504.370429][T16762] netdevsim netdevsim7: Falling back to sysfs fallback for: .
[ 3504.640818][T16769] FAULT_INJECTION: forcing a failure.
[ 3504.640818][T16769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3504.714331][T16769] CPU: 0 UID: 0 PID: 16769 Comm: syz.9.12191 Not tainted syzkaller #0 PREEMPT(full) 
[ 3504.714358][T16769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3504.714368][T16769] Call Trace:
[ 3504.714375][T16769]  <TASK>
[ 3504.714382][T16769]  dump_stack_lvl+0x16c/0x1f0
[ 3504.714408][T16769]  should_fail_ex+0x512/0x640
[ 3504.714435][T16769]  _copy_from_user+0x2e/0xd0
[ 3504.714461][T16769]  copy_msghdr_from_user+0x98/0x160
[ 3504.714485][T16769]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 3504.714513][T16769]  ? __lock_acquire+0x62e/0x1ce0
[ 3504.714543][T16769]  ___sys_recvmsg+0xdb/0x1a0
[ 3504.714566][T16769]  ? __pfx____sys_recvmsg+0x10/0x10
[ 3504.714608][T16769]  __sys_recvmsg+0x16a/0x220
[ 3504.714631][T16769]  ? __pfx___sys_recvmsg+0x10/0x10
[ 3504.714675][T16769]  do_syscall_64+0xcd/0x4e0
[ 3504.714700][T16769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3504.714717][T16769] RIP: 0033:0x7f57cf98eba9
[ 3504.714731][T16769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3504.714748][T16769] RSP: 002b:00007f57d0749038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 3504.714771][T16769] RAX: ffffffffffffffda RBX: 00007f57cfbd5fa0 RCX: 00007f57cf98eba9
[ 3504.714782][T16769] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[ 3504.714793][T16769] RBP: 00007f57d0749090 R08: 0000000000000000 R09: 0000000000000000
[ 3504.714803][T16769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3504.714814][T16769] R13: 00007f57cfbd6038 R14: 00007f57cfbd5fa0 R15: 00007fffd8da48a8
[ 3504.714837][T16769]  </TASK>
[ 3504.884193][    C0] vkms_vblank_simulate: vblank timer overrun
[ 3505.484264][T14203] usb 10-1: new high-speed USB device number 97 using dummy_hcd
[ 3505.644232][T14203] usb 10-1: Using ep0 maxpacket: 16
[ 3505.658707][T14203] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3505.681981][T14203] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3505.725219][T14203] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 3505.743151][T16783] _ÐZ`Ô€@ÿÃ: entered promiscuous mode
[ 3505.751640][T14203] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3505.787868][T14203] usb 10-1: config 0 descriptor??
[ 3505.806485][T14203] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 3506.412498][T16796] FAULT_INJECTION: forcing a failure.
[ 3506.412498][T16796] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3506.578227][T16796] CPU: 1 UID: 0 PID: 16796 Comm: syz.7.12199 Not tainted syzkaller #0 PREEMPT(full) 
[ 3506.578246][T16796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3506.578252][T16796] Call Trace:
[ 3506.578257][T16796]  <TASK>
[ 3506.578262][T16796]  dump_stack_lvl+0x16c/0x1f0
[ 3506.578281][T16796]  should_fail_ex+0x512/0x640
[ 3506.578298][T16796]  _copy_from_user+0x2e/0xd0
[ 3506.578314][T16796]  copy_msghdr_from_user+0x98/0x160
[ 3506.578329][T16796]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 3506.578348][T16796]  ___sys_sendmsg+0xfe/0x1d0
[ 3506.578362][T16796]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3506.578390][T16796]  __sys_sendmsg+0x16d/0x220
[ 3506.578404][T16796]  ? __pfx___sys_sendmsg+0x10/0x10
[ 3506.578425][T16796]  do_syscall_64+0xcd/0x4e0
[ 3506.578441][T16796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3506.578453][T16796] RIP: 0033:0x7fc11c78eba9
[ 3506.578463][T16796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3506.578473][T16796] RSP: 002b:00007fc11d570038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3506.578483][T16796] RAX: ffffffffffffffda RBX: 00007fc11c9d5fa0 RCX: 00007fc11c78eba9
[ 3506.578490][T16796] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[ 3506.578496][T16796] RBP: 00007fc11d570090 R08: 0000000000000000 R09: 0000000000000000
[ 3506.578502][T16796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3506.578509][T16796] R13: 00007fc11c9d6038 R14: 00007fc11c9d5fa0 R15: 00007fff90137948
[ 3506.578521][T16796]  </TASK>
[ 3506.760984][T16791] netlink: 100 bytes leftover after parsing attributes in process `syz.3.12196'.
[ 3506.930160][   T30] audit: type=1400 audit(1757639660.044:1109): avc:  denied  { getopt } for  pid=16801 comm="syz.7.12200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 3506.997907][   T30] audit: type=1400 audit(1757639660.054:1110): avc:  denied  { map } for  pid=16801 comm="syz.7.12200" path="socket:[209663]" dev="sockfs" ino=209663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 3507.122334][T16808] binder: 16807:16808 ioctl c0306201 200000000240 returned -11
[ 3507.215978][   T30] audit: type=1326 audit(1757639660.254:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.7.12201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11c78eba9 code=0x7ffc0000
[ 3507.239543][    C0] vkms_vblank_simulate: vblank timer overrun
[ 3507.273641][T16812] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.12203'.
[ 3507.344133][   T30] audit: type=1326 audit(1757639660.254:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.7.12201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc11c78eba9 code=0x7ffc0000
[ 3507.369245][   T30] audit: type=1326 audit(1757639660.254:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.7.12201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11c78eba9 code=0x7ffc0000
[ 3507.392780][    C0] vkms_vblank_simulate: vblank timer overrun
[ 3507.399224][   T30] audit: type=1326 audit(1757639660.254:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.7.12201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc11c78eba9 code=0x7ffc0000
[ 3507.422678][    C0] vkms_vblank_simulate: vblank timer overrun
[ 3507.460942][   T30] audit: type=1326 audit(1757639660.254:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.7.12201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11c78eba9 code=0x7ffc0000
[ 3507.548539][   T30] audit: type=1326 audit(1757639660.254:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.7.12201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc11c78eba9 code=0x7ffc0000
[ 3507.586357][   T30] audit: type=1326 audit(1757639660.294:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.7.12201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11c78eba9 code=0x7ffc0000
[ 3507.609928][    C0] vkms_vblank_simulate: vblank timer overrun
[ 3507.649608][T16819] FAULT_INJECTION: forcing a failure.
[ 3507.649608][T16819] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3507.663798][T16819] CPU: 0 UID: 0 PID: 16819 Comm: syz.6.12204 Not tainted syzkaller #0 PREEMPT(full) 
[ 3507.663822][T16819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3507.663833][T16819] Call Trace:
[ 3507.663838][T16819]  <TASK>
[ 3507.663846][T16819]  dump_stack_lvl+0x16c/0x1f0
[ 3507.663873][T16819]  should_fail_ex+0x512/0x640
[ 3507.663899][T16819]  _copy_from_iter+0x29f/0x1720
[ 3507.663929][T16819]  ? __pfx__copy_from_iter+0x10/0x10
[ 3507.663951][T16819]  ? __lock_acquire+0xb97/0x1ce0
[ 3507.663977][T16819]  ? _parse_integer_limit+0x17f/0x1d0
[ 3507.664000][T16819]  ? _kstrtoull+0x145/0x200
[ 3507.664018][T16819]  ? __pfx__kstrtoull+0x10/0x10
[ 3507.664039][T16819]  tun_get_user+0x26d/0x3ce0
[ 3507.664076][T16819]  ? __pfx_tun_get_user+0x10/0x10
[ 3507.664103][T16819]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 3507.664135][T16819]  ? find_held_lock+0x2b/0x80
[ 3507.664156][T16819]  ? tun_get+0x191/0x370
[ 3507.664185][T16819]  tun_chr_write_iter+0xdc/0x210
[ 3507.664204][T16819]  vfs_write+0x7d0/0x11d0
[ 3507.664223][T16819]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 3507.664243][T16819]  ? __pfx_vfs_write+0x10/0x10
[ 3507.664261][T16819]  ? find_held_lock+0x2b/0x80
[ 3507.664297][T16819]  ksys_write+0x12a/0x250
[ 3507.664313][T16819]  ? __pfx_ksys_write+0x10/0x10
[ 3507.664338][T16819]  do_syscall_64+0xcd/0x4e0
[ 3507.664363][T16819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3507.664381][T16819] RIP: 0033:0x7fe12ff8eba9
[ 3507.664396][T16819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3507.664413][T16819] RSP: 002b:00007fe130ea9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3507.664429][T16819] RAX: ffffffffffffffda RBX: 00007fe1301d5fa0 RCX: 00007fe12ff8eba9
[ 3507.664441][T16819] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000005
[ 3507.664451][T16819] RBP: 00007fe130ea9090 R08: 0000000000000000 R09: 0000000000000000
[ 3507.664461][T16819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3507.664471][T16819] R13: 00007fe1301d6038 R14: 00007fe1301d5fa0 R15: 00007ffc538389c8
[ 3507.664493][T16819]  </TASK>
[ 3507.871676][    C0] vkms_vblank_simulate: vblank timer overrun
[ 3507.878617][   T30] audit: type=1326 audit(1757639660.324:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.7.12201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc11c78eba9 code=0x7ffc0000
[ 3507.983915][   T31] INFO: task syz.4.11718:14996 blocked for more than 147 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 3508.075238][   T31]       Not tainted syzkaller #0
[ 3508.134569][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3508.170011][   T31] task:syz.4.11718     state:D stack:25512 pid:14996 tgid:14994 ppid:14709  task_flags:0x400140 flags:0x00004004
[ 3508.185289][   T31] Call Trace:
[ 3508.188654][   T31]  <TASK>
[ 3508.194109][   T31]  __schedule+0x1190/0x5de0
[ 3508.204028][   T31]  ? __lock_acquire+0xb97/0x1ce0
[ 3508.214224][   T31]  ? __pfx___schedule+0x10/0x10
[ 3508.224209][   T31]  ? find_held_lock+0x2b/0x80
[ 3508.234891][   T31]  ? schedule+0x2d7/0x3a0
[ 3508.537921][   T31]  schedule+0xe7/0x3a0
[ 3508.542517][   T31]  super_lock+0x2c0/0x3f0
[ 3508.552057][T14203] usb 10-1: USB disconnect, device number 97
[ 3508.613881][   T31]  ? __pfx_super_lock+0x10/0x10
[ 3508.623381][   T31]  ? __pfx_var_wake_function+0x10/0x10
[ 3508.633086][   T31]  ? __iterate_supers+0x1b6/0x360
[ 3508.638387][   T31]  __iterate_supers+0x1e0/0x360
[ 3508.643269][   T31]  ? __pfx_sync_inodes_one_sb+0x10/0x10
[ 3508.649660][   T31]  ksys_sync+0x89/0x150
[ 3508.653843][   T31]  ? __pfx_ksys_sync+0x10/0x10
[ 3508.658730][   T31]  ? rcu_is_watching+0x12/0xc0
[ 3508.663504][   T31]  ? do_syscall_64+0x91/0x4e0
[ 3508.668279][   T31]  __do_sys_sync+0xe/0x20
[ 3508.672638][   T31]  do_syscall_64+0xcd/0x4e0
[ 3508.677225][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3508.683140][   T31] RIP: 0033:0x7f480198eba9
[ 3508.687881][   T31] RSP: 002b:00007f480285e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 3508.696365][   T31] RAX: ffffffffffffffda RBX: 00007f4801bd6090 RCX: 00007f480198eba9
[ 3508.704431][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 3508.712435][   T31] RBP: 00007f4801bd6090 R08: 0000000000000000 R09: 0000000000000000
[ 3508.720491][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3508.728565][   T31] R13: 00007f4801bd6128 R14: 00007f4801bd6090 R15: 00007fffe7e93f98
[ 3508.736824][   T31]  </TASK>
[ 3508.847843][   T31] 
[ 3508.847843][   T31] Showing all locks held in the system:
[ 3508.884434][   T31] 3 locks held by kworker/u8:1/13:
[ 3508.889611][   T31]  #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 3508.935137][   T31]  #1: ffffc90000127d10 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 3508.967267][   T31]  #2: ffff8880b8425b18 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6b8/0xd30
[ 3508.976692][   T31] 1 lock held by khungtaskd/31:
[ 3508.984626][   T31]  #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 3509.004511][   T31] 2 locks held by getty/5606:
[ 3509.014684][   T31]  #0: ffff8880324d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 3509.024647][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 3509.043062][   T31] 2 locks held by kworker/1:1/10188:
[ 3509.048604][   T31] 1 lock held by syz.5.11604/14506:
[ 3509.054043][   T31]  #0: ffff88804dfcc0e0 (&type->s_umount_key#69/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0
[ 3509.064241][   T31] 1 lock held by syz.7.12201/16803:
[ 3509.069460][   T31]  #0: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[ 3509.082503][   T31] 1 lock held by syz.6.12204/16814:
[ 3509.090807][   T31]  #0: ffffffff8e5cca00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0
[ 3509.100783][   T31] 5 locks held by syz.3.12206/16820:
[ 3509.106248][   T31]  #0: ffff888069cc0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90
[ 3509.116066][   T31]  #1: ffff888069cc00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0
[ 3509.126233][   T31]  #2: ffffffff905ed728 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260
[ 3509.136299][   T31]  #3: ffff888031009b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730
[ 3509.145845][   T31]  #4: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[ 3509.187231][   T31] 
[ 3509.189607][   T31] =============================================
[ 3509.189607][   T31] 
[ 3509.225419][   T31] NMI backtrace for cpu 1
[ 3509.225437][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 3509.225457][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3509.225468][   T31] Call Trace:
[ 3509.225474][   T31]  <TASK>
[ 3509.225481][   T31]  dump_stack_lvl+0x116/0x1f0
[ 3509.225508][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 3509.225525][   T31]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[ 3509.225546][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 3509.225575][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 3509.225595][   T31]  watchdog+0xf0e/0x1260
[ 3509.225619][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3509.225636][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 3509.225659][   T31]  ? __kthread_parkme+0x19e/0x250
[ 3509.225686][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3509.225705][   T31]  kthread+0x3c2/0x780
[ 3509.225722][   T31]  ? __pfx_kthread+0x10/0x10
[ 3509.225741][   T31]  ? rcu_is_watching+0x12/0xc0
[ 3509.225764][   T31]  ? __pfx_kthread+0x10/0x10
[ 3509.225782][   T31]  ret_from_fork+0x56a/0x730
[ 3509.225799][   T31]  ? __pfx_kthread+0x10/0x10
[ 3509.225816][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3509.225850][   T31]  </TASK>
[ 3509.225857][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 3509.346851][    C0] NMI backtrace for cpu 0
[ 3509.346863][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 3509.346879][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3509.346887][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 3509.346907][    C0] Code: bd 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 96 15 00 fb f4 <e9> cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 3509.346920][    C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2
[ 3509.346932][    C0] RAX: 000000000dbc6091 RBX: 0000000000000000 RCX: ffffffff8b947b49
[ 3509.346941][    C0] RDX: 0000000000000000 RSI: ffffffff8de52bd0 RDI: ffffffff8c163000
[ 3509.346949][    C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655
[ 3509.346958][    C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000
[ 3509.346966][    C0] R13: ffffffff8e2977c0 R14: ffffffff90ab7290 R15: 0000000000000000
[ 3509.346974][    C0] FS:  0000000000000000(0000) GS:ffff8881246b3000(0000) knlGS:0000000000000000
[ 3509.346988][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3509.346997][    C0] CR2: 0000200000404030 CR3: 0000000028f8c000 CR4: 00000000003526f0
[ 3509.347006][    C0] Call Trace:
[ 3509.347012][    C0]  <TASK>
[ 3509.347016][    C0]  default_idle+0x13/0x20
[ 3509.347034][    C0]  default_idle_call+0x6d/0xb0
[ 3509.347051][    C0]  do_idle+0x391/0x510
[ 3509.347069][    C0]  ? __pfx_do_idle+0x10/0x10
[ 3509.347090][    C0]  ? trace_sched_exit_tp+0x2f/0x120
[ 3509.347106][    C0]  cpu_startup_entry+0x4f/0x60
[ 3509.347121][    C0]  rest_init+0x16b/0x2b0
[ 3509.347132][    C0]  ? acpi_subsystem_init+0x133/0x180
[ 3509.347148][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 3509.347165][    C0]  start_kernel+0x3ee/0x4d0
[ 3509.347181][    C0]  x86_64_start_reservations+0x18/0x30
[ 3509.347196][    C0]  x86_64_start_kernel+0x130/0x190
[ 3509.347211][    C0]  common_startup_64+0x13e/0x148
[ 3509.347231][    C0]  </TASK>
[ 3509.565150][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 3509.572039][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 3509.581155][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3509.591206][   T31] Call Trace:
[ 3509.594470][   T31]  <TASK>
[ 3509.597375][   T31]  dump_stack_lvl+0x3d/0x1f0
[ 3509.601944][   T31]  vpanic+0x6e8/0x7a0
[ 3509.605898][   T31]  ? __pfx_vpanic+0x10/0x10
[ 3509.610374][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 3509.616344][   T31]  panic+0xca/0xd0
[ 3509.620062][   T31]  ? __pfx_panic+0x10/0x10
[ 3509.624482][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 3509.629874][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[ 3509.636069][   T31]  ? watchdog+0xd78/0x1260
[ 3509.640469][   T31]  ? watchdog+0xd6b/0x1260
[ 3509.644872][   T31]  watchdog+0xd89/0x1260
[ 3509.649090][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3509.653751][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 3509.658926][   T31]  ? __kthread_parkme+0x19e/0x250
[ 3509.663930][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3509.668582][   T31]  kthread+0x3c2/0x780
[ 3509.672629][   T31]  ? __pfx_kthread+0x10/0x10
[ 3509.677196][   T31]  ? rcu_is_watching+0x12/0xc0
[ 3509.681945][   T31]  ? __pfx_kthread+0x10/0x10
[ 3509.686528][   T31]  ret_from_fork+0x56a/0x730
[ 3509.691091][   T31]  ? __pfx_kthread+0x10/0x10
[ 3509.695668][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3509.700426][   T31]  </TASK>
[ 3509.703627][   T31] Kernel Offset: disabled
[ 3509.707928][   T31] Rebooting in 86400 seconds..