last executing test programs:

8m38.275271455s ago: executing program 32 (id=87):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

8m31.533936998s ago: executing program 33 (id=99):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x40)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

8m28.391187408s ago: executing program 34 (id=112):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) (async)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r2 = fcntl$dupfd(r1, 0x406, r1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) (async)
sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
write$binfmt_elf64(r2, &(0x7f0000000f80)=ANY=[], 0x540) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000652716f3b07a95378afcf46eba4e8f007ab894d2a727a9b05ea77566c56f0d49f1003ab6ee46d5819937aa1a959c74c08b3632ab776c0680221619334840feaf543ca09fee7d46b3b9fc60efaa0d3cea154ddc39a5565c6d4681dcdd82fd3712d602b35de7243c9cce4b2f1be2ca327b95e1772abfef4c4a17d226034f295732050d40ac375acedcf84b35a0db172acd7f1adc6a432e45da845926f19595cb0b661f31a4b51d128414eda2230f85", @ANYRES16=r3, @ANYBLOB="00012dbd7000fbdbdf25110000000800040004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x14004800}, 0x20000004)
shutdown(r1, 0x1) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x29, 0x5, 0x0) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'veth1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0xfffffffffffffcf5, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000f8dbdf25030000000500020009000000180001801400020073797a5f74756e000000000000000000050005"], 0x3c}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) (async)
r9 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffc, 0x1, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r8, @ANYBLOB="10002abd7000fcdbdf2504000000280001801400020076657468315f746f5f6261746164760008000100", @ANYRES32=r7, @ANYBLOB="08006e00f556575bce459d01ec9154dffbef4f757f5241ae64bf7e10298b7aafa52b13532bd08670934f06cb85f75803c922e1ba53d077f332c8ed338641b153b500a60530e46fc62e2c3120b5e33a318632d3955939d67a22372a094a25c5a706f1fcd0fd76c4bd13168ff50737c8162e79895f26b3948d91c61836afd9f77c2545129e9bacac3037d17c162aeeab4d52fdf244bfef5a72e2e8d2d35b58af49998b945fcb93", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="3c00018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020070696d72656700000000000000000000140002006272696467655f736c6176655f3000006000018008000100", @ANYRES32=r7, @ANYBLOB="1400020077673200000000000000000000000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="1400020064766d72703000000000000000000000140002006970365f76746930000000000000000008000100", @ANYRES32=r7, @ANYBLOB="5400018008000100", @ANYRES32=r7, @ANYBLOB="140002006970366772657461703000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020074756e6c30000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000300020000006c0001800800030002000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="1400020070696d36726567000000000000000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="08000300000000000800030005000000080003000300000014000200"/44], 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x8850)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r5], 0x84}}, 0x20008040) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', <r13=>0x0})
lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)={'U-', 0x9}, 0x16, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r13, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r13, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x24040091}, 0x0)

8m6.702456016s ago: executing program 35 (id=150):
r0 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x2, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xfff2, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44850)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf7", 0x10}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newchain={0x3c, 0x64, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0x3}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x3c}}, 0x41814)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

8m0.386257063s ago: executing program 36 (id=163):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f0000000080))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c40))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffef3, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000002180))
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r5 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x0)
ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0xf)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000270009002dbd7000fddbdf2511000000612e49356324785f4779687efe46f9c778f67ab30d52e3a184dc317cec048c6a25f90a6d135477f85c3f4eb202738e41e48eb7722d30895e78cdbc"], 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)

7m57.994948166s ago: executing program 37 (id=171):
r0 = syz_open_procfs(0x0, &(0x7f0000019080)='net/sockstat6\x00')
pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x9, 0x80000, r4})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x4000)
syz_open_dev$cec(0x0, 0x0, 0xe8c00)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r7 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff})
syz_open_dev$usbfs(&(0x7f00000000c0), 0xd, 0x20000)
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7m54.507510381s ago: executing program 38 (id=179):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d60c15f308000240000000010c0001004e465155455545"], 0xd0}}, 0x40804)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4)

7m51.640603704s ago: executing program 2 (id=182):
syz_clone3(&(0x7f0000000380)={0x80000, 0x0, &(0x7f0000000080), &(0x7f0000000100), {0x24}, &(0x7f0000000200)=""/120, 0x6e019f3aa56df439, &(0x7f0000000280)=""/176, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002680301"], 0x428}}, 0x40088)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2e4442, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB])
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03e6004e000000007908eb9c4b4a53b493edd5d44af2a1", @ANYRES8=0x0, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYBLOB="7275f317a89cd6a7a3b7b2ba0b1576bc34e110f7fbf83e9145bd001753fc6185cb850b3e79be1970bb1a792e0a2fcf9425c1d00731ee291a38e45890b7a63c9c739aa4eca47ef108481bcb74ee40591f650b082cacf738cda87fd64f6ced121b9e5a2af95b44b7920000260ccc740e1587da548c2c69abdf202588ddad6c60b4576d677c7ac0646b86df32b95c96044c7e36f126d98d3c75d33483cbd2f59ac5fb59173011837474d526f589eed546e9112dbf0c5d105edb2ca1e88a9e9226c9d89932a3d3e06c5ae88626f2c9eeff98e977397fac92e22b36646ca9e397a77638aacd7338"], 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0), 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x29, 0xfa, 0x5, 0x45b0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8000, 0x20, 0x3}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_delroute={0x24, 0x19, 0x0, 0x70bd2d, 0x25dfdbfc, {0xa, 0xc2b107fa7c78c623, 0x10, 0x3, 0xfe, 0x2, 0xfd, 0x7, 0x500}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x24}}, 0x0)
recvmmsg(r7, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}], 0x2, 0x40000002, 0x0)

7m50.792674723s ago: executing program 2 (id=183):
openat$ptp0(0xffffffffffffff9c, 0x0, 0x102, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = creat(&(0x7f00000016c0)='./file0\x00', 0x63)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r5}, 0x68)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001ac0)=@newtfilter={0x89c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x86c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x850, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x26, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x0, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0x0, 0xd460, 0x200, 0x80000001, 0x10, 0x2, 0x8, 0x7, 0x7, 0x2, 0x7, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x0, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0x3, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x10000, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x3, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x401, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0x7ff, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x8, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x7e, 0xfffffb01, 0x4, 0x6, 0xd, 0x3ab, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x5, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x6, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x200, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0xb, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}]}}]}, 0x89c}}, 0x800)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x12)
ioctl$UI_DEV_CREATE(r7, 0x5501)
r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

7m48.908541426s ago: executing program 2 (id=184):
r0 = socket$inet6(0xa, 0x3, 0x8b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b1000020fab08090506"], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x91ea6c1af182532)
renameat2(r1, &(0x7f0000000000)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2)
execveat(r1, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000280)={[&(0x7f0000000180)='}%-\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00']}, &(0x7f0000000380)={[&(0x7f00000002c0)='GPL\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='+{{\x93\x00']}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x19, 0x16, 0xbd, 0x8, 0x112a, 0x5, 0xdf89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x5, 0x80, 0x3, "", [{{0x9, 0x4, 0x1, 0x2, 0x0, 0x84, 0xc, 0x4, 0x7f}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r2, 0x407, 0x8001a0)
splice(r0, 0x0, r3, 0x0, 0x200002, 0x6)

7m45.777748557s ago: executing program 2 (id=185):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000003c0)='./file0\x00', 0x0)

7m45.37904613s ago: executing program 2 (id=188):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$inet6(0xa, 0x80002, 0x0)
r6 = io_uring_setup(0x4053, 0x0)
io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20)
pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102397, 0x18ffd, 0x1000000000)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x48001028, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xfa, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xd, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0], &(0x7f0000000640), 0x10, 0x3}, 0x94)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8)
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12)
recvmmsg(r8, &(0x7f0000000d80), 0x36f, 0x20102, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

7m43.433851279s ago: executing program 2 (id=191):
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @empty}, 0x10)
listen(r1, 0x2400000)
r2 = socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = openat$null(0xffffff9c, 0x0, 0x0, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x1, 0x2, 0x0, 0x1}, 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x20804}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020005ff0004f03a98000000ffffffffffffffffffffffe7ee00f0000000000000020000", 0x58}], 0x1)

7m43.022412707s ago: executing program 39 (id=191):
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @empty}, 0x10)
listen(r1, 0x2400000)
r2 = socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = openat$null(0xffffff9c, 0x0, 0x0, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x1, 0x2, 0x0, 0x1}, 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x20804}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020005ff0004f03a98000000ffffffffffffffffffffffe7ee00f0000000000000020000", 0x58}], 0x1)

7m35.818148648s ago: executing program 9 (id=213):
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x145a81, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000002a00000000050000"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))
write$tun(r3, 0x0, 0xffe)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)

7m30.23824349s ago: executing program 9 (id=222):
mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='openpromfs\x00', 0x1004008, &(0x7f00000001c0)='%+/\x00')
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
socket$igmp6(0xa, 0x3, 0x2)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c08004500fdbe00000000001190780000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
socket(0x1, 0x2, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000019980)=""/102393, &(0x7f0000000400)=0x18ff9)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x10)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010000004100000004000000000000001000000000000600130000000000000052fafd09614b73a4a7ebe0baf6426960cd9d18999c193f447d8810084b9d174013e2d653cf0482863a5b296a1f422503b60196063ed41c0831b9ed7d91355d77b3574d88f398c8749ecbe8021440ba20969a6e8401bf5a37a27a42f1bd370629f9cdfcca0f77e7f8e2d640c5b4afd28583c25b72650561f4c4be6f43979acfd1a8d204e222f40339293609c15c6882ef36ee87409e18a774ed88ede8b341ce4c"], 0x24, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
rmdir(&(0x7f0000000040)='./bus\x00')

7m29.200506551s ago: executing program 9 (id=225):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r5, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$rfkill(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x2, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x3000, 0x1efff, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0x0, 0x1, 0x400000000]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_GET_SREGS2(r6, 0x8140aecc, 0x0)

7m28.397342272s ago: executing program 9 (id=227):
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x9721, 0x1, 0x3, 0x20081}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @multicast}, 0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000080)=0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x400c090)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r8, 0x3}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x40, 0x2007, @fd=r5, 0x1, 0x0, 0x0, 0x4, 0x0, {0x2, 0x0, 0x3, '\x00', 0x0, 0xb07}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r9 = getpid()
sched_setscheduler(r9, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200)
connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(r0)
connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0xa}, 0x6e)
getsockname$packet(r0, 0x0, &(0x7f0000000940))

7m23.428260499s ago: executing program 9 (id=244):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xdddd0000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x3, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0x9, 0x1, 0x2, 0x0, 0x4, 0x2, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x10, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x10, 0x6, 0x5, 0xfc, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x40, 0x1, 0x1, 0xbf, 0x4, 0xa0, 0x1, 0xfc}, {0x6000, 0x2, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0xb, 0xfd}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x8, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x60000, 0x200708, 0x5, 0x2000, 0x4000, [0x3, 0x400, 0x7, 0xc5]})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x300, @ioapic={0xffff1000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x8, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x8, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0x0, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x3, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0x5, 0x1, '\x00', 0x21}, {0x5, 0xec, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}})

7m22.065655448s ago: executing program 9 (id=248):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18, 0xf000000}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005)

7m21.587595175s ago: executing program 40 (id=248):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18, 0xf000000}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005)

3m20.237283628s ago: executing program 4 (id=1045):
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000400)={0x20004, 0xffffffffffffffff, 0x80000})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x804)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100000000da0097020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r4 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r4, 0x0, 0xd0, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1)
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa4, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x990}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000)
fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f00000000c0)='dirsync\x00', 0x0, r7)
bind$xdp(r2, &(0x7f0000000380)={0x2c, 0xa, 0x0, 0x28, r7}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcc7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x400000000000000, 0x0, 0x10}, 0x84)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x6, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40040)

3m19.526524335s ago: executing program 4 (id=1052):
io_setup(0x239f, &(0x7f0000000380)=<r0=>0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x800002}])
io_getevents(r0, 0x2, 0x2, &(0x7f0000000ac0)=[{}, {}], 0x0)

3m17.167057725s ago: executing program 4 (id=1057):
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
unshare(0x6a040000)
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x4, 0xfffffffffffff000)
mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x20010, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0xd, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x33f}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000380)='/dev/kvm\x00', 0x0, r6)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000"], 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0)
symlink(0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
socket$unix(0x1, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)

3m14.859178189s ago: executing program 4 (id=1071):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file7/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0)
epoll_create1(0x0)
epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000640)='usbip-vudc.0', 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)

3m13.838298147s ago: executing program 4 (id=1075):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
syz_clone(0x4000a011, 0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @local}, 0x10)
syz_open_dev$dri(0x0, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x881, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0xb}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x4000000)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)
recvfrom(r4, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xdae8, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='bdev\x00', 0x80000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x2, 0x0)

3m12.567231284s ago: executing program 4 (id=1081):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x54, r1, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x3ed5}, {0x5, 0x12, 0x1}}]}, 0x54}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4)
syz_open_dev$rtc(&(0x7f0000000000), 0x7, 0x400000)
io_submit(0x0, 0x1, &(0x7f0000000c80)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
r2 = socket$packet(0x11, 0x3, 0x300)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r4 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
close_range(r5, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000100)=[{&(0x7f00000002c0)="94", 0xf00f}, {0x0}, {&(0x7f0000000040)="2c3afb64a12a28232a0d5ef66988ddee2cad49345375d729f21e4ac2bc4dc309d707201f482fd5c6129a226f9f"}], 0x2)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0)
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000))
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r2], 0x0)

2m57.485730449s ago: executing program 41 (id=1081):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x54, r1, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x3ed5}, {0x5, 0x12, 0x1}}]}, 0x54}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4)
syz_open_dev$rtc(&(0x7f0000000000), 0x7, 0x400000)
io_submit(0x0, 0x1, &(0x7f0000000c80)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
r2 = socket$packet(0x11, 0x3, 0x300)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r4 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
close_range(r5, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000100)=[{&(0x7f00000002c0)="94", 0xf00f}, {0x0}, {&(0x7f0000000040)="2c3afb64a12a28232a0d5ef66988ddee2cad49345375d729f21e4ac2bc4dc309d707201f482fd5c6129a226f9f"}], 0x2)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0)
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000))
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r2], 0x0)

2m17.624060279s ago: executing program 7 (id=1240):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x9, 0x2, 0xd20, 0x3, 0xfffffffffffffffe, 0x0, 0x9, 0x2, 0x0, 0x802, 0x2000000009, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x6, 0x2aa, 0x7, 0xc39, 0x8000008, 0x8, 0x0, 0x2, 0xa51, 0x401, 0x80401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x101, 0x3, 0x8001, 0x80000000000003fd, 0x680, 0x0, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xdb, 0x5, 0x0, 0x14, 0x800000000000005, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x0, 0x1, 0x7fffffff, 0x4, 0x2000008000, 0x9, 0xfffffffffffffffd, 0x6, 0x1, 0x82c, 0x7ff, 0xffff, 0x1fcc, 0x6, 0x5b, 0xa, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x4, 0x8, 0x0, 0x6, 0x26, 0x9, 0x100000002, 0x0, 0x4, 0x3, 0xf, 0x4, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743ac, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x8, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x80000000, 0x7, 0xa, 0x3]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0)
io_uring_enter(r5, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
io_setup(0x7d, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
socket(0x18, 0x4, 0x3)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

2m14.161181851s ago: executing program 7 (id=1250):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m13.942621998s ago: executing program 7 (id=1253):
chdir(&(0x7f0000000080)='./cgroup\x00')
r0 = inotify_init1(0x80000)
inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x200)
r1 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000006c0), 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040054}, 0x20000000)
sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYBLOB="39032cbd7000fedbdf2528000000080003003658714ce12db5b0f27f6926f84b5f5eb9fc35f7839301f16ba1d13e9f6821b657f5ac91517ab13320f045a783ded651f3db0c50bbc41b9c8efb2349c9615091958ce4d7f832ce29f7c25ee8c59926338d43536beecb0602bb7e3e893a1e277fbd0e6738919e415cb4fa1e3d11fa06a236beb02fc7bab499a03de8a8bbcd5739e0df3153c1a3ae7579684b20a7301726231d73472b0eae48c9014e3dcdf26b5d5fc93d93593bb97c0bbe8b4f566eaf4312f6ca4c5d1f9d0a32971cf3a20736", @ANYRES32, @ANYBLOB="04005f00"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40040)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16125782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f00000001c0)="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", 0x259}], 0x4}, 0x20004000)

2m12.572973646s ago: executing program 7 (id=1259):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
socket$netlink(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)

2m12.417526465s ago: executing program 7 (id=1261):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000081001e000000080006"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0)
close(r1)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091)
write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094)
sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4001, @multicast2}, 0x10, 0x0}, 0x34068096)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000ded000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4000, 0x2})
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xb1fe, 0x0, 0x0, 0x0, 0x24}, 0x94)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newsa={0x154, 0x10, 0x1, 0x20000, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0xfffd, 0xfbfe, 0x1}, {@in6=@empty, 0x0, 0x32}, @in=@loopback, {0xfffffffffffffffe, 0x1, 0x0, 0x400000000000, 0x9, 0x0, 0x1000080000}, {0x0, 0x2000000000000000, 0x0, 0x100000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf26}}]}, 0x154}}, 0x20004000)
socket$inet(0x2, 0xa, 0x400)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0xbc, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MAP={0x24, 0xe, {0xd, 0xca0, 0x1, 0x101, 0x0, 0x6}}, @IFLA_PORT_SELF={0x54, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xfe}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "979da861c346a6bc3ad34e970a7dca4a"}, @IFLA_PORT_PROFILE={0x6, 0x2, '!\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xf}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80dbab6577cd83c3727024de57d5c852"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
splice(r4, 0x0, r5, 0x0, 0x10500, 0x0)

2m11.85465298s ago: executing program 7 (id=1263):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x2000, 0xab)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x2, 0x6]}})
ioctl$BLKRRPART(r0, 0x125f, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'})

2m9.690811653s ago: executing program 42 (id=1263):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x2000, 0xab)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x2, 0x6]}})
ioctl$BLKRRPART(r0, 0x125f, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'})

1m6.765253766s ago: executing program 8 (id=1487):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020021", 0x4}], 0x3)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L', @ANYRES16, @ANYBLOB="0100000000000000000012000000080008"], 0x4c}, 0x1, 0x0, 0x0, 0x4895}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r2, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x68, 0x0, &(0x7f0000002100)=[@decrefs, @acquire, @increfs_done={0x40106308, 0x3}, @acquire_done, @acquire_done={0x40106309, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={@ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/169, 0x0, 0x2}, @flat=@handle={0x73682a85, 0x1, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000001040)=""/4096, 0x0, 0x2, 0x31}}, &(0x7f00000020c0)}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"})
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'batadv_slave_0\x00', {0x8001}, 0x9})
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$x86(r11, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x56, {"b9800000c00f3235010000000f3067470f00587ff366460f20c56564670f019a18cf28b90f005191460f219864430fdea9c7000000450f01c92e66420f3a14e209f3420f06"}}], 0x56})
ioctl$KVM_SET_CPUID(r12, 0x4008ae8a, &(0x7f0000000200))
ioctl$KVM_RUN(r12, 0xae80, 0x0)

1m4.979955507s ago: executing program 8 (id=1497):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
pause()
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x11079, 0x2b}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
write(r2, &(0x7f0000000400)='./m', 0x3)
read$FUSE(r2, &(0x7f0000002200)={0x2020}, 0x2020)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000210000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10)
syz_usb_connect(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000305bfdd082e0c0007f4d40102030109022400016406200b0904ad8e02df30059e09050e124000fafa0109058303", @ANYRESHEX=r6], &(0x7f0000000a00)={0x0, 0x0, 0xffffffffffffff0f, 0x0, 0x1, [{0x0, 0x0}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

1m1.930462378s ago: executing program 8 (id=1515):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000000)=0x1, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000000b80)=""/102384, 0x18ff0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000004400010029bd70000400000002000000043f3ffe00010000427d5fd7db25b5f59166afa517a46f282035f99263f5005f5af5faf8ca73a8e878ea117144c673ecb9515e9532db83a9c209041b8cfd28b4e90000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8f}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x40040c0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001abc0)=ANY=[@ANYRES8=r1, @ANYRES64=r1, @ANYRESOCT=0x0, @ANYRESDEC=r2, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x2004c0d4}, 0x404c894)
r5 = fsopen(&(0x7f00000001c0)='vfat\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000380)='\r\x046\xf5D\x00\x00\x00', 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x21)
dup(r7)
r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r9, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x5)
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f3, 0xec000000, 0xcd}]})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, 0x0)

57.383478964s ago: executing program 8 (id=1523):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0x1e2, &(0x7f0000007940)=ANY=[@ANYBLOB="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"/473], 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_open_dev$audion(&(0x7f0000000180), 0xfffffbff, 0x800)
socket$key(0xf, 0x3, 0x2)
ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00009b846435adb0002000010327bd700000800000040000030300"], 0x1c}}, 0xc000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010)
unshare(0x6a040000)

55.564360058s ago: executing program 8 (id=1528):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000d01000000000000000000000a02000000000000000000000b00"/79], 0x0, 0x56}, 0x28)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f00000067c0), 0x0, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb09}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c845)

51.706550975s ago: executing program 8 (id=1545):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0)
read(r1, &(0x7f0000000500)=""/4096, 0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x50)
keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000040)={0x9f14, {"0dbad96fff01000008ff00200800", "3dfa770000000000000000000000ab30", "a7c947420000000000000000ff4a70f3"}, 0x401, 0x7})
gettid()
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0xe, 0x6, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x6c}}, 0x4000c080)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}}, 0x32)
sendmsg$OSF_MSG_ADD(r5, &(0x7f0000003880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003840)={&(0x7f0000002a00)={0xe0c, 0x0, 0x5, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [{{0x254, 0x1, {{0x1, 0x4f}, 0x3, 0x9, 0x8, 0x91, 0x0, 'syz1\x00', "6dd6694bab86ef63c31e287c230ec94b0be49fea71a81857f3a54cbe0dd11640", "bb8a6b1f141aefac54c1018afbd9c9badedd32b24bcb8be214daf406bc989a32", [{0x4, 0xab, {0x0, 0x4}}, {0x9b61, 0xfffa, {0x1, 0x6}}, {0x200, 0x8, {0x3, 0x80}}, {0x97, 0x80, {0x0, 0xfffffffe}}, {0x40, 0x8, {0x1, 0x7}}, {0xfffd, 0x200, {0x2, 0x1}}, {0x1, 0x5, {0x2, 0xffff}}, {0xb9e9, 0x7, {0x2, 0x90b0}}, {0x200, 0x6, {0x3, 0x3}}, {0x4, 0xe, {0x2, 0x7b}}, {0x9, 0x4862}, {0x401, 0x0, {0x3, 0x2}}, {0x4, 0x1, {0x0, 0x7}}, {0x2974, 0x9, {0x3, 0x4}}, {0x6, 0x77, {0x0, 0x1}}, {0x5, 0x59b, {0x1, 0x7}}, {0x9, 0x8, {0x0, 0x2595}}, {0x7f, 0x5, {0x3, 0x56}}, {0x5d, 0x7, {0x1, 0x6}}, {0x1000, 0x0, {0x2, 0x6}}, {0xf4f, 0x9, {0x3, 0x3}}, {0x200, 0xa, {0x7, 0x80}}, {0x6, 0xfffa, {0x1}}, {0x8001, 0x2, {0x1, 0x3}}, {0x6, 0x401, {0x2, 0x8}}, {0x6, 0x8, {0x2, 0x9}}, {0x9f8c, 0x57, {0x0, 0x6}}, {0x1000, 0x759f, {0x2, 0x200}}, {0x68, 0x10, {0x3, 0x2eb}}, {0x1, 0x4, {0x3, 0x41}}, {0x800, 0xd, {0x2, 0x5}}, {0x2, 0x8, {0x3}}, {0x6, 0x8001, {0x0, 0x2}}, {0xcd, 0xff, {0x2, 0x76}}, {0x4, 0x800, {0x2, 0x4}}, {0x1, 0x2}, {0xffff, 0x7fff, {0x0, 0x7}}, {0xe433, 0x7, {0x3, 0x4}}, {0xb28, 0x3, {0x2, 0xddf}}, {0x0, 0x3}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x1b, 0xfa, 0x8, 0x0, 0x10, 'syz1\x00', "a7b17caa11fc75f9df5bfe8143c88b53bd0ab57b85dd8179e4fdfbad4e255e9b", "9dd3e2d4b9bf436b04946abc4d70473d12ffa1e8115e3d8c1eedecff5509c8a7", [{0x4, 0x6, {0x0, 0xab}}, {0x5410, 0x0, {0x1, 0x2c4f}}, {0x1, 0x101, {0x1, 0x1}}, {0xfffa, 0x6, {0x0, 0xa}}, {0x5, 0x4, {0x2, 0x9}}, {0x64, 0xff, {0x1, 0x3}}, {0x0, 0x5, {0x0, 0x7ff}}, {0x6, 0x401, {0x2, 0xffffff80}}, {0x4, 0x800, {0x2, 0xe199}}, {0x1, 0xb, {0x2, 0x7}}, {0x3, 0x3, {0x3, 0x4}}, {0x0, 0xff, {0x2, 0x7}}, {0xd, 0x2, {0x6, 0xd3}}, {0x1, 0x7, {0x1, 0x71}}, {0x4, 0x8, {0x3, 0x3}}, {0x8, 0x1}, {0x1, 0x3, {0x3, 0x401}}, {0x9, 0x200, {0x1, 0x2b88}}, {0x401, 0x6, {0x2, 0x6}}, {0x1e92, 0x6, {0x3, 0x8}}, {0x91a, 0x1, {0x1, 0x5}}, {0x3, 0x3, {0x1, 0x4}}, {0xfff, 0x1, {0x0, 0x6}}, {0x7, 0x7, {0x1, 0x8001}}, {0xd, 0x1ff, {0x3, 0x2}}, {0x7f, 0x6, {0x1, 0x1}}, {0x8, 0x3, {0x1, 0x5}}, {0x0, 0x5, {0x2, 0x98e}}, {0x3, 0x934, {0x2, 0x9f}}, {0x9, 0x17, {0x1, 0x6}}, {0x6, 0x4, {0x2, 0x3}}, {0x9d, 0x80, {0x2, 0x400}}, {0x0, 0x8000, {0x0, 0x10000}}, {0xc, 0x7, {0x0, 0x9}}, {0x4, 0x9, {0x0, 0x7ff}}, {0xaca, 0x4, {0x3, 0x4}}, {0x8, 0x3, {0x3, 0x6}}, {0x9, 0x9, {0x2, 0x10001}}, {0x3, 0xe0, {0x2, 0x4}}, {0x9, 0x9d, {0x1, 0x80000000}}]}}}, {{0x254, 0x1, {{0x2, 0xb3}, 0x2, 0x6, 0x101, 0x8, 0x6, 'syz1\x00', "be636d21cff40be2a86207e43c932f8d570b9f7d50403441bfc9ea4668017a36", "04011c6458a50689978c262805effe3a948673a47d85fa070d7e753f61996189", [{0x1, 0x0, {0x0, 0x1}}, {0x200, 0x1, {0x2, 0x10000}}, {0x5, 0x2, {0x1, 0x13}}, {0xb, 0x2, {0x0, 0x6}}, {0xa, 0xfff9, {0x1, 0x9}}, {0x7, 0x4, {0x1, 0xfffffff8}}, {0x9, 0x3, {0x1}}, {0xffff, 0x2, {0x3, 0x6}}, {0x32cb, 0x156, {0x1, 0x10}}, {0x6, 0x3fe, {0x3, 0x78fc}}, {0x6, 0x8, {0x0, 0xfff}}, {0xa2, 0x2, {0x2, 0x5}}, {0x4d, 0x7, {0x2, 0x81}}, {0xeb, 0x3, {0x3, 0x5}}, {0x5, 0x9, {0x2, 0x5}}, {0x0, 0x2, {0x1, 0x8000}}, {0x4b79, 0x7fff, {0x2, 0x1ff}}, {0x9, 0xba, {0x2, 0x7f}}, {0x4, 0x8, {0x0, 0x8}}, {0x6, 0xc, {0x2, 0x3}}, {0x3, 0x1000, {0x3, 0x80000001}}, {0x0, 0x87, {0x0, 0x7}}, {0x9, 0x4, {0x1, 0x7ff}}, {0x6, 0x7ff, {0x1, 0x200}}, {0x9, 0xf801, {0x0, 0x40}}, {0x2, 0x8, {0x0, 0xf0}}, {0x3, 0x1, {0x1, 0x80000000}}, {0x1}, {0x1, 0x6, {0x1, 0xffffff8c}}, {0x14, 0x3, {0x0, 0xaa6}}, {0x5, 0x1ae, {0x1, 0x3206}}, {0x7, 0x4, {0x1, 0x8}}, {0x8, 0x3, {0x3, 0xb6}}, {0x6, 0x0, {0x3, 0x9}}, {0xc, 0x6, {0x3, 0x80000001}}, {0x8, 0x6, {0x2, 0x85}}, {0x6, 0x6, {0x1, 0x3}}, {0x7, 0x7fff, {0x2, 0x7}}, {0x4, 0x16f4, {0x7, 0x4800000}}, {0xb67, 0x1, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x7ff}, 0xff, 0x5, 0x7f, 0x5, 0x27, 'syz1\x00', "5179e2a47073f32a008862531e51ccf46e0bc60b05b0f209b1da4ff117776451", "b7c9af9e2c1ba6100669c9a9be63b696b7a53488bac982bad5a3ed280ab0a9ae", [{0x9, 0xf9, {0x0, 0x75e}}, {0x800, 0x0, {0x2, 0x80000000}}, {0x68, 0x2, {0x2, 0xd}}, {0x9, 0x3d9f, {0x3}}, {0x5, 0x9, {0x2, 0x1000}}, {0x7f, 0xfff, {0x1, 0x7}}, {0x0, 0x2, {0x1, 0x2}}, {0x1, 0x9, {0x2, 0x3}}, {0xf, 0x9, {0x2}}, {0x3, 0x7e, {0x3, 0x89}}, {0x1, 0x3ee, {0x1, 0x7}}, {0x3, 0xc10, {0x3, 0x40}}, {0x9, 0x1, {0x3, 0x1ff}}, {0x0, 0x4, {0x3, 0x3}}, {0xffff, 0x8, {0x3, 0xa}}, {0x3e, 0xfffc, {0x0, 0xd}}, {0xcb, 0x1000, {0x3, 0xc}}, {0x3, 0x47d7, {0x0, 0x9}}, {0x4, 0x5, {0x3, 0x8}}, {0x5, 0x2, {0x0, 0x6}}, {0x4, 0x91, {0x3, 0x1}}, {0x5, 0x3, {0x0, 0x5}}, {0x0, 0x9, {0x2, 0x9}}, {0x6, 0xfff7, {0x0, 0x2}}, {0x8, 0x0, {0x2, 0x101}}, {0x88be, 0x5, {0x0, 0x200}}, {0x1ff, 0x9, {0x2, 0x10001}}, {0x1, 0x4000, {0x3, 0x7}}, {0xb0, 0xff, {0x2, 0x1000}}, {0x7fff, 0x800, {0x1, 0x3}}, {0x10, 0x100, {0x3, 0x3d}}, {0x0, 0x1, {0x3, 0x5}}, {0x8, 0x0, {0x1, 0xfffffffd}}, {0x9621, 0xf, {0x1}}, {0x2ec, 0x4, {0x1, 0x8001}}, {0x7f, 0x7, {0x0, 0x6}}, {0xeab1, 0x7, {0x1, 0x1}}, {0xd78, 0x2, {0x0, 0xffffffff}}, {0x4, 0x7, {0x0, 0x3}}, {0x5, 0x1, {0x3, 0x24}}]}}}, {{0x254, 0x1, {{0x2}, 0x8, 0x0, 0x9c, 0x9, 0x15, 'syz0\x00', "774180225663e64e96a64a3a4fa931d0c77abce75d1cf976fd4976ea562ee028", "6aca4e22bf0dd40ae6b4a1b3abd0076d5f3dfe666f26cda0904068ba84cb0a46", [{0x5, 0x2, {0x3, 0xe5}}, {0x1, 0x401, {0x0, 0x7}}, {0xe42, 0x10, {0x2, 0x2}}, {0xffca, 0x8, {0x0, 0x80000001}}, {0x11de, 0x401, {0x0, 0x5}}, {0xffd3, 0x401, {0x3, 0x1}}, {0x3, 0x20, {0x0, 0x2}}, {0x7, 0x9, {0x3, 0x5}}, {0x8, 0xc9b}, {0x7, 0xfff, {0x2, 0x3}}, {0x7fff, 0x9, {0x1, 0x3}}, {0x2, 0x43, {0x3, 0x800}}, {0x1, 0x4, {0x2, 0x34422ab3}}, {0x1000, 0x5, {0x0, 0x8}}, {0xfff, 0x1e, {0x0, 0x5}}, {0x40, 0x3, {0x0, 0x3}}, {0x0, 0x4, {0x0, 0xfffffff0}}, {0x743, 0x10, {0x3, 0x8001}}, {0x7, 0x1, {0x3, 0x10001}}, {0x6, 0x7f, {0x7b3ebfdf54a483e1}}, {0x3d, 0x5, {0x3, 0x8d95}}, {0x6, 0x5, {0x1, 0x1}}, {0x9, 0x2e, {0x1, 0x9}}, {0x8, 0x9, {0x1, 0xfffffff8}}, {0x8000, 0x8, {0x0, 0x7}}, {0xb, 0x1000, {0x2, 0x5}}, {0x8, 0x3, {0x0, 0x6}}, {0x101, 0x8, {0x1, 0x7}}, {0xa, 0x6, {0x2, 0x6}}, {0x8, 0x3, {0x0, 0x4}}, {0x8000, 0xf, {0x3, 0x401}}, {0x7fff, 0xb, {0x0, 0x6c1b}}, {0x2, 0x4, {0x0, 0x8}}, {0x5, 0x4, {0x0, 0x4}}, {0x5e, 0x1, {0x3, 0x3}}, {0x4, 0x4, {0x2, 0x80000001}}, {0x8, 0x7, {0x2, 0x9}}, {0x7, 0xb, {0x2, 0x9}}, {0x4, 0x2}, {0x372e, 0x8, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0xd50}, 0x9, 0x2, 0x1, 0x1, 0xc, 'syz0\x00', "e321a164227747295352f55b41730b9ec28984ac7b9540b581c31a5931e661a1", "972163e2582f7c58666dead25426ed3161ddf2773d2c85c909a19088456fa917", [{0xb, 0x200, {0x0, 0x9}}, {0x5, 0x9, {0x2, 0x4}}, {0x9, 0xd5, {0x1, 0x2}}, {0x9, 0x3, {0x3, 0x9}}, {0x0, 0x7f, {0x2, 0x3}}, {0xb72, 0x9, {0x0, 0x1}}, {0x6, 0xfff7, {0x3, 0x5}}, {0x7, 0x200, {0x1, 0x4}}, {0xaa34, 0x7, {0x3, 0x3d8}}, {0x7037, 0x2, {0x5, 0x4}}, {0x10, 0x2, {0x1, 0x3}}, {0x9, 0xa75, {0x3, 0x6}}, {0x0, 0xb, {0x2, 0x264b}}, {0x7, 0xfff, {0x3, 0x5}}, {0x80, 0x100, {0x0, 0x7af}}, {0x19, 0x7, {0x3, 0x6ff}}, {0x1, 0x19, {0x0, 0x2}}, {0x7, 0x40, {0x1, 0x80000001}}, {0x0, 0x5, {0x0, 0xff}}, {0xf, 0x4, {0x3, 0x1d8}}, {0x0, 0x9, {0x0, 0x7}}, {0x9, 0x8, {0x3, 0xf69}}, {0x5, 0x9, {0x3, 0x7}}, {0x400, 0x6, {0x2, 0xffffffff}}, {0x0, 0xb, {0x3, 0x8000}}, {0x3, 0xfff0, {0x3, 0x491f}}, {0x6, 0xe85, {0x0, 0xf}}, {0x2, 0x64a, {0x1, 0x35}}, {0xfffd, 0x8}, {0x6, 0xf663, {0x2, 0x800000}}, {0x3ff, 0x7ff, {0x2, 0x5}}, {0xb30, 0x4, {0x2, 0x170b0509}}, {0x400, 0x0, {0x3, 0xe000}}, {0x3, 0x3, {0x3}}, {0x4, 0x100, {0x2}}, {0x6, 0xfff, {0x0, 0x2}}, {0x0, 0x6, {0x1, 0xb1}}, {0xd631, 0xfff7, {0x0, 0x8}}, {0x400, 0x0, {0x2, 0x1}}, {0x2, 0x7, {0x1, 0x4}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0))

36.560506143s ago: executing program 43 (id=1545):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0)
read(r1, &(0x7f0000000500)=""/4096, 0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x50)
keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000040)={0x9f14, {"0dbad96fff01000008ff00200800", "3dfa770000000000000000000000ab30", "a7c947420000000000000000ff4a70f3"}, 0x401, 0x7})
gettid()
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0xe, 0x6, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x6c}}, 0x4000c080)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}}, 0x32)
sendmsg$OSF_MSG_ADD(r5, &(0x7f0000003880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003840)={&(0x7f0000002a00)={0xe0c, 0x0, 0x5, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [{{0x254, 0x1, {{0x1, 0x4f}, 0x3, 0x9, 0x8, 0x91, 0x0, 'syz1\x00', "6dd6694bab86ef63c31e287c230ec94b0be49fea71a81857f3a54cbe0dd11640", "bb8a6b1f141aefac54c1018afbd9c9badedd32b24bcb8be214daf406bc989a32", [{0x4, 0xab, {0x0, 0x4}}, {0x9b61, 0xfffa, {0x1, 0x6}}, {0x200, 0x8, {0x3, 0x80}}, {0x97, 0x80, {0x0, 0xfffffffe}}, {0x40, 0x8, {0x1, 0x7}}, {0xfffd, 0x200, {0x2, 0x1}}, {0x1, 0x5, {0x2, 0xffff}}, {0xb9e9, 0x7, {0x2, 0x90b0}}, {0x200, 0x6, {0x3, 0x3}}, {0x4, 0xe, {0x2, 0x7b}}, {0x9, 0x4862}, {0x401, 0x0, {0x3, 0x2}}, {0x4, 0x1, {0x0, 0x7}}, {0x2974, 0x9, {0x3, 0x4}}, {0x6, 0x77, {0x0, 0x1}}, {0x5, 0x59b, {0x1, 0x7}}, {0x9, 0x8, {0x0, 0x2595}}, {0x7f, 0x5, {0x3, 0x56}}, {0x5d, 0x7, {0x1, 0x6}}, {0x1000, 0x0, {0x2, 0x6}}, {0xf4f, 0x9, {0x3, 0x3}}, {0x200, 0xa, {0x7, 0x80}}, {0x6, 0xfffa, {0x1}}, {0x8001, 0x2, {0x1, 0x3}}, {0x6, 0x401, {0x2, 0x8}}, {0x6, 0x8, {0x2, 0x9}}, {0x9f8c, 0x57, {0x0, 0x6}}, {0x1000, 0x759f, {0x2, 0x200}}, {0x68, 0x10, {0x3, 0x2eb}}, {0x1, 0x4, {0x3, 0x41}}, {0x800, 0xd, {0x2, 0x5}}, {0x2, 0x8, {0x3}}, {0x6, 0x8001, {0x0, 0x2}}, {0xcd, 0xff, {0x2, 0x76}}, {0x4, 0x800, {0x2, 0x4}}, {0x1, 0x2}, {0xffff, 0x7fff, {0x0, 0x7}}, {0xe433, 0x7, {0x3, 0x4}}, {0xb28, 0x3, {0x2, 0xddf}}, {0x0, 0x3}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x1b, 0xfa, 0x8, 0x0, 0x10, 'syz1\x00', "a7b17caa11fc75f9df5bfe8143c88b53bd0ab57b85dd8179e4fdfbad4e255e9b", "9dd3e2d4b9bf436b04946abc4d70473d12ffa1e8115e3d8c1eedecff5509c8a7", [{0x4, 0x6, {0x0, 0xab}}, {0x5410, 0x0, {0x1, 0x2c4f}}, {0x1, 0x101, {0x1, 0x1}}, {0xfffa, 0x6, {0x0, 0xa}}, {0x5, 0x4, {0x2, 0x9}}, {0x64, 0xff, {0x1, 0x3}}, {0x0, 0x5, {0x0, 0x7ff}}, {0x6, 0x401, {0x2, 0xffffff80}}, {0x4, 0x800, {0x2, 0xe199}}, {0x1, 0xb, {0x2, 0x7}}, {0x3, 0x3, {0x3, 0x4}}, {0x0, 0xff, {0x2, 0x7}}, {0xd, 0x2, {0x6, 0xd3}}, {0x1, 0x7, {0x1, 0x71}}, {0x4, 0x8, {0x3, 0x3}}, {0x8, 0x1}, {0x1, 0x3, {0x3, 0x401}}, {0x9, 0x200, {0x1, 0x2b88}}, {0x401, 0x6, {0x2, 0x6}}, {0x1e92, 0x6, {0x3, 0x8}}, {0x91a, 0x1, {0x1, 0x5}}, {0x3, 0x3, {0x1, 0x4}}, {0xfff, 0x1, {0x0, 0x6}}, {0x7, 0x7, {0x1, 0x8001}}, {0xd, 0x1ff, {0x3, 0x2}}, {0x7f, 0x6, {0x1, 0x1}}, {0x8, 0x3, {0x1, 0x5}}, {0x0, 0x5, {0x2, 0x98e}}, {0x3, 0x934, {0x2, 0x9f}}, {0x9, 0x17, {0x1, 0x6}}, {0x6, 0x4, {0x2, 0x3}}, {0x9d, 0x80, {0x2, 0x400}}, {0x0, 0x8000, {0x0, 0x10000}}, {0xc, 0x7, {0x0, 0x9}}, {0x4, 0x9, {0x0, 0x7ff}}, {0xaca, 0x4, {0x3, 0x4}}, {0x8, 0x3, {0x3, 0x6}}, {0x9, 0x9, {0x2, 0x10001}}, {0x3, 0xe0, {0x2, 0x4}}, {0x9, 0x9d, {0x1, 0x80000000}}]}}}, {{0x254, 0x1, {{0x2, 0xb3}, 0x2, 0x6, 0x101, 0x8, 0x6, 'syz1\x00', "be636d21cff40be2a86207e43c932f8d570b9f7d50403441bfc9ea4668017a36", "04011c6458a50689978c262805effe3a948673a47d85fa070d7e753f61996189", [{0x1, 0x0, {0x0, 0x1}}, {0x200, 0x1, {0x2, 0x10000}}, {0x5, 0x2, {0x1, 0x13}}, {0xb, 0x2, {0x0, 0x6}}, {0xa, 0xfff9, {0x1, 0x9}}, {0x7, 0x4, {0x1, 0xfffffff8}}, {0x9, 0x3, {0x1}}, {0xffff, 0x2, {0x3, 0x6}}, {0x32cb, 0x156, {0x1, 0x10}}, {0x6, 0x3fe, {0x3, 0x78fc}}, {0x6, 0x8, {0x0, 0xfff}}, {0xa2, 0x2, {0x2, 0x5}}, {0x4d, 0x7, {0x2, 0x81}}, {0xeb, 0x3, {0x3, 0x5}}, {0x5, 0x9, {0x2, 0x5}}, {0x0, 0x2, {0x1, 0x8000}}, {0x4b79, 0x7fff, {0x2, 0x1ff}}, {0x9, 0xba, {0x2, 0x7f}}, {0x4, 0x8, {0x0, 0x8}}, {0x6, 0xc, {0x2, 0x3}}, {0x3, 0x1000, {0x3, 0x80000001}}, {0x0, 0x87, {0x0, 0x7}}, {0x9, 0x4, {0x1, 0x7ff}}, {0x6, 0x7ff, {0x1, 0x200}}, {0x9, 0xf801, {0x0, 0x40}}, {0x2, 0x8, {0x0, 0xf0}}, {0x3, 0x1, {0x1, 0x80000000}}, {0x1}, {0x1, 0x6, {0x1, 0xffffff8c}}, {0x14, 0x3, {0x0, 0xaa6}}, {0x5, 0x1ae, {0x1, 0x3206}}, {0x7, 0x4, {0x1, 0x8}}, {0x8, 0x3, {0x3, 0xb6}}, {0x6, 0x0, {0x3, 0x9}}, {0xc, 0x6, {0x3, 0x80000001}}, {0x8, 0x6, {0x2, 0x85}}, {0x6, 0x6, {0x1, 0x3}}, {0x7, 0x7fff, {0x2, 0x7}}, {0x4, 0x16f4, {0x7, 0x4800000}}, {0xb67, 0x1, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x7ff}, 0xff, 0x5, 0x7f, 0x5, 0x27, 'syz1\x00', "5179e2a47073f32a008862531e51ccf46e0bc60b05b0f209b1da4ff117776451", "b7c9af9e2c1ba6100669c9a9be63b696b7a53488bac982bad5a3ed280ab0a9ae", [{0x9, 0xf9, {0x0, 0x75e}}, {0x800, 0x0, {0x2, 0x80000000}}, {0x68, 0x2, {0x2, 0xd}}, {0x9, 0x3d9f, {0x3}}, {0x5, 0x9, {0x2, 0x1000}}, {0x7f, 0xfff, {0x1, 0x7}}, {0x0, 0x2, {0x1, 0x2}}, {0x1, 0x9, {0x2, 0x3}}, {0xf, 0x9, {0x2}}, {0x3, 0x7e, {0x3, 0x89}}, {0x1, 0x3ee, {0x1, 0x7}}, {0x3, 0xc10, {0x3, 0x40}}, {0x9, 0x1, {0x3, 0x1ff}}, {0x0, 0x4, {0x3, 0x3}}, {0xffff, 0x8, {0x3, 0xa}}, {0x3e, 0xfffc, {0x0, 0xd}}, {0xcb, 0x1000, {0x3, 0xc}}, {0x3, 0x47d7, {0x0, 0x9}}, {0x4, 0x5, {0x3, 0x8}}, {0x5, 0x2, {0x0, 0x6}}, {0x4, 0x91, {0x3, 0x1}}, {0x5, 0x3, {0x0, 0x5}}, {0x0, 0x9, {0x2, 0x9}}, {0x6, 0xfff7, {0x0, 0x2}}, {0x8, 0x0, {0x2, 0x101}}, {0x88be, 0x5, {0x0, 0x200}}, {0x1ff, 0x9, {0x2, 0x10001}}, {0x1, 0x4000, {0x3, 0x7}}, {0xb0, 0xff, {0x2, 0x1000}}, {0x7fff, 0x800, {0x1, 0x3}}, {0x10, 0x100, {0x3, 0x3d}}, {0x0, 0x1, {0x3, 0x5}}, {0x8, 0x0, {0x1, 0xfffffffd}}, {0x9621, 0xf, {0x1}}, {0x2ec, 0x4, {0x1, 0x8001}}, {0x7f, 0x7, {0x0, 0x6}}, {0xeab1, 0x7, {0x1, 0x1}}, {0xd78, 0x2, {0x0, 0xffffffff}}, {0x4, 0x7, {0x0, 0x3}}, {0x5, 0x1, {0x3, 0x24}}]}}}, {{0x254, 0x1, {{0x2}, 0x8, 0x0, 0x9c, 0x9, 0x15, 'syz0\x00', "774180225663e64e96a64a3a4fa931d0c77abce75d1cf976fd4976ea562ee028", "6aca4e22bf0dd40ae6b4a1b3abd0076d5f3dfe666f26cda0904068ba84cb0a46", [{0x5, 0x2, {0x3, 0xe5}}, {0x1, 0x401, {0x0, 0x7}}, {0xe42, 0x10, {0x2, 0x2}}, {0xffca, 0x8, {0x0, 0x80000001}}, {0x11de, 0x401, {0x0, 0x5}}, {0xffd3, 0x401, {0x3, 0x1}}, {0x3, 0x20, {0x0, 0x2}}, {0x7, 0x9, {0x3, 0x5}}, {0x8, 0xc9b}, {0x7, 0xfff, {0x2, 0x3}}, {0x7fff, 0x9, {0x1, 0x3}}, {0x2, 0x43, {0x3, 0x800}}, {0x1, 0x4, {0x2, 0x34422ab3}}, {0x1000, 0x5, {0x0, 0x8}}, {0xfff, 0x1e, {0x0, 0x5}}, {0x40, 0x3, {0x0, 0x3}}, {0x0, 0x4, {0x0, 0xfffffff0}}, {0x743, 0x10, {0x3, 0x8001}}, {0x7, 0x1, {0x3, 0x10001}}, {0x6, 0x7f, {0x7b3ebfdf54a483e1}}, {0x3d, 0x5, {0x3, 0x8d95}}, {0x6, 0x5, {0x1, 0x1}}, {0x9, 0x2e, {0x1, 0x9}}, {0x8, 0x9, {0x1, 0xfffffff8}}, {0x8000, 0x8, {0x0, 0x7}}, {0xb, 0x1000, {0x2, 0x5}}, {0x8, 0x3, {0x0, 0x6}}, {0x101, 0x8, {0x1, 0x7}}, {0xa, 0x6, {0x2, 0x6}}, {0x8, 0x3, {0x0, 0x4}}, {0x8000, 0xf, {0x3, 0x401}}, {0x7fff, 0xb, {0x0, 0x6c1b}}, {0x2, 0x4, {0x0, 0x8}}, {0x5, 0x4, {0x0, 0x4}}, {0x5e, 0x1, {0x3, 0x3}}, {0x4, 0x4, {0x2, 0x80000001}}, {0x8, 0x7, {0x2, 0x9}}, {0x7, 0xb, {0x2, 0x9}}, {0x4, 0x2}, {0x372e, 0x8, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0xd50}, 0x9, 0x2, 0x1, 0x1, 0xc, 'syz0\x00', "e321a164227747295352f55b41730b9ec28984ac7b9540b581c31a5931e661a1", "972163e2582f7c58666dead25426ed3161ddf2773d2c85c909a19088456fa917", [{0xb, 0x200, {0x0, 0x9}}, {0x5, 0x9, {0x2, 0x4}}, {0x9, 0xd5, {0x1, 0x2}}, {0x9, 0x3, {0x3, 0x9}}, {0x0, 0x7f, {0x2, 0x3}}, {0xb72, 0x9, {0x0, 0x1}}, {0x6, 0xfff7, {0x3, 0x5}}, {0x7, 0x200, {0x1, 0x4}}, {0xaa34, 0x7, {0x3, 0x3d8}}, {0x7037, 0x2, {0x5, 0x4}}, {0x10, 0x2, {0x1, 0x3}}, {0x9, 0xa75, {0x3, 0x6}}, {0x0, 0xb, {0x2, 0x264b}}, {0x7, 0xfff, {0x3, 0x5}}, {0x80, 0x100, {0x0, 0x7af}}, {0x19, 0x7, {0x3, 0x6ff}}, {0x1, 0x19, {0x0, 0x2}}, {0x7, 0x40, {0x1, 0x80000001}}, {0x0, 0x5, {0x0, 0xff}}, {0xf, 0x4, {0x3, 0x1d8}}, {0x0, 0x9, {0x0, 0x7}}, {0x9, 0x8, {0x3, 0xf69}}, {0x5, 0x9, {0x3, 0x7}}, {0x400, 0x6, {0x2, 0xffffffff}}, {0x0, 0xb, {0x3, 0x8000}}, {0x3, 0xfff0, {0x3, 0x491f}}, {0x6, 0xe85, {0x0, 0xf}}, {0x2, 0x64a, {0x1, 0x35}}, {0xfffd, 0x8}, {0x6, 0xf663, {0x2, 0x800000}}, {0x3ff, 0x7ff, {0x2, 0x5}}, {0xb30, 0x4, {0x2, 0x170b0509}}, {0x400, 0x0, {0x3, 0xe000}}, {0x3, 0x3, {0x3}}, {0x4, 0x100, {0x2}}, {0x6, 0xfff, {0x0, 0x2}}, {0x0, 0x6, {0x1, 0xb1}}, {0xd631, 0xfff7, {0x0, 0x8}}, {0x400, 0x0, {0x2, 0x1}}, {0x2, 0x7, {0x1, 0x4}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0))

15.782716521s ago: executing program 3 (id=1670):
r0 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x4)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
readv(r1, &(0x7f0000001980)=[{&(0x7f0000000300)=""/196, 0xc4}, {0x0}, {0x0}, {0x0}], 0x4)
close(0x3)
syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[])
read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x1000000000002}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28)
sendto$inet6(r2, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905d8"], 0x0)

12.02748732s ago: executing program 1 (id=1686):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="b674386d17852432864bd57221bc", 0x0, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
shmdt(0x0)

12.000856795s ago: executing program 3 (id=1687):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000002c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa13fd664a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d658ef286087e0", 0x60}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb5584920271", 0x43}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9", 0xc3}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = fsopen(&(0x7f00000005c0)='befs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000080)='io#harset', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000009600)='iocharset', &(0x7f00000001c0)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4  \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v', 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000300000000001400000046ad00201d680000ac1e0001ffff02009404016011f3305280f125e6"], 0x2e)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r5 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

11.646319737s ago: executing program 3 (id=1689):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = open(&(0x7f0000000140)='./file0\x00', 0x4a141, 0xb8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=r3, r3, 0x7, 0x0, r2, @void, @value=r2}, 0x20)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', @multicast})
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe01}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x240008c0)
sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x4804)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x4008af04, &(0x7f0000000040))

11.172486662s ago: executing program 1 (id=1690):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x71a07}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x1}]}}}]}, 0x44}, 0x1, 0xf0ffffffffffff, 0x0, 0x20000081}, 0x20040040)

11.091108197s ago: executing program 3 (id=1691):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

10.917952167s ago: executing program 1 (id=1693):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$uinput_user_dev(r7, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x4, 0xffff, 0x0, 0x2, 0x6, 0x10401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0xfff, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x80000001, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0x2, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0x7, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0x7fffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x400, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f00005aa000/0x4000)=nil, 0x4000, 0x1, 0x20010, r7, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f0000000080))
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
socket$kcm(0x10, 0x2, 0x4)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)

10.846542234s ago: executing program 3 (id=1694):
socket(0x1e, 0x1, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x44)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)}, 0x1)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvfrom(r0, 0x0, 0x9400, 0x10132, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x4)
writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000040)="02f03aac7365f88b35cfdba1ac8058aa3512e8353a0007d166ee", 0x1a}, {&(0x7f0000000100)="84b603021f04", 0x6}], 0x2)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_RUN(r6, 0xae80, 0x40000)

9.679732996s ago: executing program 1 (id=1695):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x9}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0xcc010000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0)

9.222367937s ago: executing program 3 (id=1698):
r0 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x200000)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
getpriority(0x1, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x7}, 0x20)
migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272)

8.861435593s ago: executing program 44 (id=1698):
r0 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x200000)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
getpriority(0x1, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x7}, 0x20)
migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272)

7.903541998s ago: executing program 1 (id=1702):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x4a141, 0xb8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=r2, r2, 0x7, 0x0, r1, @void, @value=r1}, 0x20)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', @multicast})
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe01}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x240008c0)
sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x4804)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x4008af04, &(0x7f0000000040))

7.150150079s ago: executing program 1 (id=1705):
r0 = getpid() (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000006c0)={'wpan0\x00', <r3=>0x0}) (async, rerun: 64)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB="05002900ff"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30)

7.026542032s ago: executing program 6 (id=1706):
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
r1 = fanotify_init(0x8, 0x2)
write$P9_RSYMLINK(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x4000000, 0x30b}, <r8=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f00000003c0)={{<r9=>0x0, 0x2, 0xfae5, 0x6, 0x3, 0x7, 0x3, 0x100, 0x3ff, 0x4, 0x7, 0xfffffffffffffffe, 0x7, 0x8, 0x10001}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000500)={{r9, 0x1, 0x5, 0x5f, 0xffffffffffffff15, 0x4, 0x1, 0x6, 0x8, 0x9, 0x7, 0x74, 0x100000001, 0x6, 0xa}, 0x20, [0x0, 0x0, 0x0, 0x0]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

6.218273278s ago: executing program 5 (id=1709):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000300)={0x28, 0x5, 0x0, 0x0, 0x7, 0x1004, 0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="600000000206010100000000000000000a00000a0900020073797a310000000011000300686173683a6e65742c6e6574000000001400078008000840000000d805001400040000000500010007000000050005000a000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0}, &(0x7f0000000040)=0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
mkdir(&(0x7f0000000000)='./file0\x00', 0xbe9bac6d2d0f4e0b)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000001180)={&(0x7f0000000480), 0xc, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf250b0000004000018008000100", @ANYRES32=r2, @ANYRES8=r2, @ANYRESOCT=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYBLOB="1400020076657468300000000004000180380001800800010000000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020077673200000000000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000300020000001400020070696d726567000000000000000000003400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRESHEX=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="08000300020000002c0001801400020076657468315f746f5f626f6e640000001400020074756e6c3000"/52], 0x110}, 0x1, 0x0, 0x0, 0x8840}, 0x8004)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000140), 0x4)
ioctl$sock_SIOCINQ(r7, 0x541b, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = epoll_create1(0x80000)
r11 = fcntl$dupfd(r9, 0x0, r9)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000240)={0x40002010})
epoll_pwait(r10, &(0x7f0000000200)=[{}], 0x1, 0x8, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000001c0)={'sit0\x00', <r12=>0x0, 0x8000, 0x20, 0x7, 0x8, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x68, 0x0, 0x81, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x8, 0x0}, {[@noop]}}}}})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54004f1dd01409d6afda11f4d7b69796ac540000cf963246310cb23c901bd731f35b37728eb3779dabb0886a6638c5dc51498678a13ca65c54e5e559643c51e70398d483d3ecdbf697c3181acd954ff6328efc007fddcc949b1bd035e3c002266c400cc3fedb6b7186b330617f08d9bdc3e500f5e2e8f13f55c76ad67f7a0a44383f46b621cedcf28599c7f32c791d9d8f9570776c90ff4181f64e48d72deb2c", @ANYRES16=r5, @ANYBLOB="20002abd7000fddbdf250e000000050038000000000008000300", @ANYRES32=r12, @ANYBLOB="05002f0000000000080039008400000008002c000600000005002a0000000000060028000200000008002c001bb60000"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4884)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000f51900090025ee9c00", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)

5.87595684s ago: executing program 5 (id=1711):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000d01000000000000000000000a02000000000000000000000b00"/79], 0x0, 0x56}, 0x28)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f00000067c0), 0x0, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb33}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c845)

5.685404717s ago: executing program 6 (id=1713):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000002c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa13fd664a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d658ef286087e0", 0x60}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb5584920271", 0x43}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9", 0xc3}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = fsopen(&(0x7f00000005c0)='befs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000080)='io#harset', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000009600)='iocharset', &(0x7f00000001c0)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4  \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v', 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000300000000001400000046ad00201d680000ac1e0001ffff02009404016011f3305280f125e6"], 0x2e)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r5 = accept4(r3, 0x0, 0x0, 0x800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.559760003s ago: executing program 6 (id=1716):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}, [{0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x400000000000000, 0x0, 0x20000801}, 0x4041080)

3.576119843s ago: executing program 0 (id=1717):
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
socket(0x10, 0x80000, 0xfffffffc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000098000/0x3000)=nil, 0x3000, 0xc)
setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, 0x0, 0x0)
connect$tipc(r2, &(0x7f00000000c0)=@name, 0x10)
fchdir(0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newtaction={0x25c0, 0x30, 0x1, 0x0, 0x0, {}, [{0x25ac, 0x1, [@m_xt={0x1290, 0xb, 0x0, 0x0, {{0x7}, {0x11a0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x102a, 0x6, {0x0, 'raw\x00', 0x2a, 0xff80, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0xdc, 0x6, {0x40, 'raw\x00', 0xff, 0x1fec, "0fc23704f741d3818ade8040ada8f45fe814b95003c9402bc017f67d2031d5418c0027aff7ed8f2badd939aaf3f6b960deaa066f3184b834570a704e7525435f076ac706a5d97a977fd364fffe41e8ca948f3538dc3db5300a0b7520ef3d33f7ad8a86b8721f5d570dc22169a71e1373f8799ed42469d6a61e53cd2c2532106e916da250ce6a2358df5e99329839272f92b1a09a73325b4062f0b6899b13f4d8a3f08d5216b92ad26fe5c5e6d418e61ad49d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xc9, 0x6, "37e7ab2ae659cc6b4e26759d29b4a9fc48b8085799e5919e96599e87da3bb677bcc2103d10f73a00d86c9265ca525f77a0a37b6dbbfbd236576abdad2e90302978fede3945b352dedd8cebc619986673810170a05db43cf21d3409f67d32938d56034cf8e237af811445d26438a142d7cd0234d6682c201b410c337bd3ae8a4ed0c737bb1fb5358d9aeeb060aaf805cb1ec5487101ba19cc25c0368bc5d5ae5f48cb6b0a5fe78dd63552a081a81d93321c513e07ca6bf7a8752fd80bf06e27da0afea47970"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x107c, 0x12, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfffff151, 0x5, 0x4, 0x4}, @remote, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa686, 0x8, 0x0, 0x5, 0x8}, @broadcast, @private=0xa010100, 0xff, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0xf4, 0x11, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x7, 0x6, 0x3, 0xeeea}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8b23, 0x8, 0x6, 0xff, 0x8000}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0x8c, 0x6, "08da932af3abe6655fad2317ecba2b03c72422704dde35c649c1f90781e4d4915702ee0e29985d0d43eb392b657b7602450da52e0192276103fd779be84dbb28fbddb9a5a727169d5f771823f2b1b7055e955646277503d9765b20523020547bacc7c3b891a6e54871ae214811755179559564ed72a886027b2c771418de5238994541d8329869ff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x6}}}}, @m_vlan={0x128, 0x6, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x1, 0x10000000, 0xf96, 0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x78d, 0x5, 0x20000000, 0x0, 0x8}, 0x3}}]}, {0xb9, 0x6, "aa4d1cd9303358588ff3864de0275ec195f882e264983b8fbe8ca6a2dbe95971722e005e5d76167e40c8e91da9721ca6317b38c35cb88f06fa304aec0ca856a4faedc8f2e334079246ce876ba10f15334d023fd8080683b0d9c87d2e43cda80299a52c4aaeb8278d6013cbb40178c2ae012332b944f4e4204c818dd210e9bb9d1512883cb1e82acd56ef698efc0500cdebef60bc5f730e62b35d2d405323ef7a4185db12971ec6e5be03bff75d23a56a4764954a7c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x80, 0x12, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x4, 0x0, 0x1, 0x9}}]}, {0x3c, 0x6, "4df38792ddf0ea97c5a9ba962b595939fa3e3765358026803f87fd45bf35ae779ad45426e1394f565c30c1c9307d92cae50d8f066a651eee"}, {0xc}, {0xc, 0x8, {0x7, 0x2}}}}]}]}, 0x25c0}}, 0x10)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

3.557367811s ago: executing program 5 (id=1718):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r0, 0x701, 0x0, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0xfffff000}, 0x40)

3.314499247s ago: executing program 5 (id=1719):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (fail_nth: 5)

3.271201675s ago: executing program 6 (id=1720):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x10, 0x200, &(0x7f0000000540)="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"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}})
mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000580)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@nested_vmlaunch={0x12f, 0x18, 0x10002}], 0x18})

2.569731878s ago: executing program 0 (id=1721):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0xfff4, 0x0, 0x0)

2.334194005s ago: executing program 0 (id=1722):
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
inotify_init()
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1056c1, 0x0)
socket(0xa, 0x3, 0x3a)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001082dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="d0510013000cbe70be7bbbda", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff)
write$sysctl(0xffffffffffffffff, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0)
write$sysctl(r2, &(0x7f0000000300)='1\x00', 0x1)
socket(0x2, 0x2, 0x0)

2.319889687s ago: executing program 6 (id=1723):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x21)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0)
r6 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000001380)={0xa000000a})

2.295875933s ago: executing program 5 (id=1724):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x401064d0, &(0x7f0000000000)={0x1, 0x2})
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xf)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
ioctl$TCFLSH(r6, 0x540b, 0x1)
r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
r8 = fsmount(r7, 0x0, 0x6)
fchdir(r8)
ioctl$UBLK_U_CMD_ADD_DEV(r8, 0xc0207504, &(0x7f0000000280)={0xffffffff, 0xffff, 0x0, 0x0})
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94)
r10 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r10, 0xc028564e, &(0x7f0000000180)={0x0, 0x0, [0x2, 0x0, 0x402f, 0x7, 0x9, 0x0, 0x80000001, 0x20008]})

1.397409076s ago: executing program 0 (id=1725):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x20400, 0x120)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {<r2=>r0}}, './file0\x00'})
r3 = open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x48)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x5)
sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xe8, 0x1000)
ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000100)={0x5, 0x7, 0x4, 0x4, 0x9})
socket(0x8, 0x80000, 0x7)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000280)=<r5=>0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000, &(0x7f00000002c0)={[{@huge_never}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}, {@quota}, {@huge_within_size}, {@inode32}, {@gid={'gid', 0x3d, r4}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x6d, 0x38]}}, {@huge_never}], [{@subj_type={'subj_type', 0x3d, '..(#-'}}, {@subj_user={'subj_user', 0x3d, '+-$\xac%}'}}, {@euid_gt={'euid>', r5}}]})
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000400)={@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, {&(0x7f0000000380)}, &(0x7f00000003c0), 0x56}, 0xa0)
ioctl$TIOCNOTTY(r0, 0x5422)
r6 = getuid()
chown(&(0x7f00000004c0)='./file1\x00', r6, r4)
ioctl$KDDELIO(r0, 0x4b35, 0x227)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x97e9c02b49c2f108, 0x50, r7, 0x9328a000)
syz_open_dev$video(&(0x7f0000000500), 0x8, 0x7a801)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0), 0x8)
ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000000600)={0x4, 0x688aad2b, 0x101, 0x1ed})
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb0, 0x0, 0x9, 0x801, 0x0, 0x0, {0x11ecc965ac2db781, 0x0, 0x8}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffff8}}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1ff}}]}, 0xb0}}, 0x4000000)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x10, &(0x7f00000007c0)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xec0}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffeff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}], &(0x7f0000000840)='syzkaller\x00', 0x8, 0x3e, &(0x7f0000000880)=""/62, 0x41100, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000008c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r1, r0], 0x0, 0x10, 0x9}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000a00)={r7, r8})
pipe2$watch_queue(&(0x7f0000000a40)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
connect$unix(r9, &(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
mount$pvfs2(&(0x7f0000000b00), &(0x7f0000000b40)='./file1\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)={[{'tmpfs\x00'}, {'tmpfs\x00'}, {'/dev/video#\x00'}, {'/dev/video#\x00'}, {'gid'}, {}], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x33, 0x63, 0x35, 0x37, 0x33, 0x65], 0x2d, [0x38, 0x66, 0x30, 0x30], 0x2d, [0x64, 0x64, 0x39, 0x36], 0x2d, [0x35, 0x33, 0x66, 0x37], 0x2d, [0x33, 0x66, 0x62, 0x34, 0x35, 0xc2, 0x65, 0x62]}}}, {@dont_measure}, {@audit}]})
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x49}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40d0)
r10 = syz_open_dev$media(&(0x7f0000000d40), 0x6, 0x323e01)
ioctl$MEDIA_IOC_G_TOPOLOGY(r10, 0xc0487c04, &(0x7f00000011c0)={0x0, 0x2, 0x0, &(0x7f0000000d80)=[{}, {}], 0x5, 0x0, &(0x7f0000000e40)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000001080)=[{}], 0x5, 0x0, &(0x7f00000010c0)=[{}, {}, {}, {}, {}]})

1.090611254s ago: executing program 0 (id=1726):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
preadv(r2, &(0x7f0000000000), 0x50, 0xfffffffd, 0xfffffffd)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xff8b, 0x5, 0x3, 0x6}]})
ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0x4)

1.012888616s ago: executing program 5 (id=1727):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e28, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe9, 0x79, 0x56, 0x40, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x2b, 0xd, 0x2, 0x39, 0xb3, 0x92, 0x9, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0xb9, 0x1}}, {{0x9, 0x5, 0x82, 0x12, 0x8, 0x4, 0x4, 0x3f}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x51, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7f, 0x7, 0xef}, {0x6, 0x24, 0x1a, 0x40, 0x1c}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x2, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x0, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7f, 0xf, 0x26}}}}}}}]}}, 0x0)
read$hidraw(0xffffffffffffffff, 0x0, 0xfffffffd)
ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0)
pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="10b02c25cc62585a89223d4f6bfa9bff3baa9f60b9e9d9a0157a0318bd76dca4decaa101e1162709898e5af9ef0a6bb55e8551fa025579a7024e3b3ba43961ff49139cc1df7a8bfd06c53214f6ca2f50fb4f0ad307a016ffff808df8bd156fb0ef9517caede4606a7a27666cdfbfd7f4abac5e7a8c75", 0x76}], 0x1, 0x7f, 0x7fffffff)

932.6188ms ago: executing program 6 (id=1728):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[])
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x80000}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000)
pipe2(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write(r5, &(0x7f0000000500)="010000", 0x3)
read(r4, &(0x7f0000000000), 0x4)
write(r5, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', 0xc)
sendmsg$xdp(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404e010}, 0x40)

0s ago: executing program 0 (id=1729):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000000)={0x3, 0x80})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setrlimit(0x1, &(0x7f0000000040))
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfffff, 0xfffffffffffffffe)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000056c0)=[{{&(0x7f0000000080)=@alg, 0x80, &(0x7f0000000600)=[{&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/254, 0xfe}, {&(0x7f00000005c0)=""/27, 0x1b}], 0x4, &(0x7f0000000640)=""/201, 0xc9}, 0x4}, {{&(0x7f0000000740)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002900)=""/227, 0xe3}}, {{&(0x7f0000002a00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002a80)=""/169, 0xa9}, {&(0x7f0000002b40)=""/248, 0xf8}, {&(0x7f0000002c40)=""/173, 0xad}, {&(0x7f0000002d00)=""/102, 0x66}], 0x4, &(0x7f0000002dc0)=""/231, 0xe7}, 0xc0}, {{&(0x7f0000002ec0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002f40)=""/240, 0xf0}, {&(0x7f0000003040)=""/181, 0xb5}, {&(0x7f0000003100)=""/160, 0xa0}], 0x3, &(0x7f0000003200)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000005880)=""/240, 0xf0}], 0x1, &(0x7f0000004340)=""/4096, 0x1000}, 0xfff}, {{&(0x7f0000005340)=@phonet, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/228, 0xe4}, {&(0x7f00000054c0)=""/106, 0x6a}], 0x2, &(0x7f0000005580)=""/10, 0xa}, 0x4}, {{&(0x7f00000055c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000005680)=[{&(0x7f0000005640)=""/26, 0x1a}], 0x1}, 0x9}], 0x7, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$rfkill(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x2, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x3000, 0x1efff, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0x0, 0x1, 0x400000000]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

95 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.1.1351" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff83ef9dd82 code=0x7ffc0000
[  515.622450][T11800] usb 2-1: new low-speed USB device number 49 using dummy_hcd
[  515.684029][   T30] audit: type=1326 audit(2000000192.390:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.1.1351" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff83ef9de17 code=0x7ffc0000
[  515.721760][ T5805] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[  515.805039][T11800] usb 2-1: unable to get BOS descriptor or descriptor too short
[  515.820067][T11800] usb 2-1: config 100 has an invalid interface number: 173 but max is 0
[  515.925184][T11800] usb 2-1: config 100 has no interface number 0
[  515.931928][T13376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1356'.
[  515.941200][T13376] veth0_to_batadv: entered promiscuous mode
[  515.947304][ T5805] usb 9-1: Using ep0 maxpacket: 16
[  515.952807][T13376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1356'.
[  515.967963][ T5805] usb 9-1: unable to get BOS descriptor or descriptor too short
[  515.981517][T11800] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  515.998312][ T5805] usb 9-1: config 5 has an invalid descriptor of length 67, skipping remainder of the config
[  516.049254][T11800] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 30768, setting to 8
[  516.077344][ T5805] usb 9-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 51, changing to 7
[  516.153257][T11800] usb 2-1: config 100 interface 173 has no altsetting 0
[  516.170451][ T5805] usb 9-1: config 5 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 50464, setting to 1024
[  516.312866][ T5805] usb 9-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  516.329492][ T5805] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.344612][T11800] usb 2-1: string descriptor 0 read error: -22
[  516.377635][ T5805] usb 9-1: Product: syz
[  516.386167][T11800] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  516.406287][ T5805] usb 9-1: Manufacturer: syz
[  516.422308][ T5805] usb 9-1: SerialNumber: syz
[  516.427201][T11800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.491009][T13360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  516.505311][T12275] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[  516.515072][T13360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  516.530573][T11800] metro_usb 2-1:100.173: Metrologic USB to Serial converter detected
[  516.570853][T11800] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  516.699138][T13384] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1357'.
[  516.712136][ T5805] usb 9-1: Audio class v2/v3 interfaces need an interface association
[  516.740320][ T5805] snd-usb-audio 9-1:5.0: probe with driver snd-usb-audio failed with error -22
[  516.875825][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'.
[  516.903077][ T5805] usb 9-1: 2:1 : can't get High Capability descriptor
[  517.284093][ T5805] usb 9-1: USB disconnect, device number 52
[  517.361375][ T8460] udevd[8460]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  517.961638][T13409] netlink: 'syz.6.1364': attribute type 1 has an invalid length.
[  518.008205][T13409] bond2: entered promiscuous mode
[  518.016022][T13409] 8021q: adding VLAN 0 to HW filter on device bond2
[  518.038751][T13409] ipvlan2: entered allmulticast mode
[  518.052674][T13409] bond2: entered allmulticast mode
[  518.073450][T13409] ipvlan3: entered allmulticast mode
[  518.126982][T13409] bond2: (slave bridge1): making interface the new active one
[  518.187148][T13409] bridge1: entered promiscuous mode
[  518.221801][T13409] bridge1: entered allmulticast mode
[  518.269186][T13409] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  518.281281][ T5805] usb 2-1: USB disconnect, device number 49
[  518.340558][ T5805] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  518.398464][ T5805] metro_usb 2-1:100.173: device disconnected
[  518.593276][   T30] kauditd_printk_skb: 623 callbacks suppressed
[  518.593292][   T30] audit: type=1400 audit(2000000195.660:5070): avc:  denied  { setopt } for  pid=13426 comm="syz.3.1367" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1
[  518.685539][   T30] audit: type=1400 audit(2000000195.760:5071): avc:  denied  { write } for  pid=13431 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  518.781651][ T5805] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  518.941788][ T5805] usb 2-1: Using ep0 maxpacket: 8
[  518.960108][ T5805] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  518.990985][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.051259][ T5805] pvrusb2: Hardware description: Terratec Grabster AV400
[  519.073069][ T5805] pvrusb2: **********
[  519.091008][ T5805] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  519.123165][ T5805] pvrusb2: Important functionality might not be entirely working.
[  519.143275][ T5805] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  519.172503][ T5805] pvrusb2: **********
[  519.248385][ T2363] pvrusb2: Invalid write control endpoint
[  519.398885][ T2363] pvrusb2: Invalid write control endpoint
[  519.425994][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  519.467865][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  519.489289][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  519.520659][ T2363] pvrusb2: Device being rendered inoperable
[  519.529589][T13453] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1366'.
[  519.550324][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  519.581451][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  519.649527][ T2363] pvrusb2: Attached sub-driver cx25840
[  519.669664][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  519.706099][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  519.794905][   T30] audit: type=1400 audit(2000000196.870:5072): avc:  denied  { write } for  pid=13442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  519.898274][T13461] syzkaller0: entered promiscuous mode
[  519.922723][T13461] syzkaller0: entered allmulticast mode
[  519.975319][T13461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  519.991693][   T30] audit: type=1400 audit(2000000197.060:5073): avc:  denied  { write } for  pid=13462 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  520.159682][T13460] tipc: Resetting bearer <eth:syzkaller0>
[  520.416639][T13460] tipc: Disabling bearer <eth:syzkaller0>
[  521.188055][   T30] audit: type=1326 audit(2000000197.840:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  521.249108][   T30] audit: type=1326 audit(2000000197.850:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  521.326170][   T30] audit: type=1326 audit(2000000197.880:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  521.405520][   T30] audit: type=1326 audit(2000000197.880:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  521.472438][ T5805] usb 1-1: new low-speed USB device number 55 using dummy_hcd
[  521.541128][T11800] usb 2-1: USB disconnect, device number 50
[  521.593157][   T30] audit: type=1326 audit(2000000197.880:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  521.651616][ T5732] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[  521.682356][T13502] netlink: 'syz.6.1379': attribute type 12 has an invalid length.
[  521.692167][   T30] audit: type=1326 audit(2000000197.970:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  521.729034][T13502] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1379'.
[  521.743986][T13502] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1379'.
[  521.754765][T13503] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  521.770752][T13502] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1379'.
[  521.808471][T13503] FAULT_INJECTION: forcing a failure.
[  521.808471][T13503] name failslab, interval 1, probability 0, space 0, times 0
[  521.822729][ T5732] usb 9-1: Using ep0 maxpacket: 8
[  521.848025][ T5732] usb 9-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  521.870693][T13503] CPU: 0 UID: 0 PID: 13503 Comm: syz.1.1380 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  521.870721][T13503] Tainted: [L]=SOFTLOCKUP
[  521.870727][T13503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  521.870736][T13503] Call Trace:
[  521.870742][T13503]  <TASK>
[  521.870749][T13503]  dump_stack_lvl+0x100/0x190
[  521.870776][T13503]  should_fail_ex.cold+0x5/0xa
[  521.870798][T13503]  should_failslab+0xc2/0x120
[  521.870820][T13503]  __kmalloc_cache_noprof+0x91/0x6c0
[  521.870847][T13503]  ? rcu_is_watching+0x12/0xc0
[  521.870874][T13503]  ? kobject_uevent_env+0x263/0x18b0
[  521.870896][T13503]  kobject_uevent_env+0x263/0x18b0
[  521.870916][T13503]  ? kobject_put+0xb9/0x640
[  521.870945][T13503]  device_del+0x605/0x9b0
[  521.870970][T13503]  ? __pfx_device_del+0x10/0x10
[  521.870990][T13503]  ? iommufd_hw_pagetable_detach+0x26f/0x680
[  521.871019][T13503]  device_unregister+0x1d/0xe0
[  521.871041][T13503]  iommufd_selftest_destroy+0xbe/0xf0
[  521.871061][T13503]  iommufd_object_remove+0x29b/0x490
[  521.871094][T13503]  ? __pfx_iommufd_object_remove+0x10/0x10
[  521.871115][T13503]  ? __might_fault+0xc5/0x140
[  521.871143][T13503]  iommufd_fops_ioctl+0x358/0x520
[  521.871166][T13503]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  521.871191][T13503]  ? security_file_ioctl+0xde/0x230
[  521.871224][T13503]  ? selinux_file_ioctl+0x13b/0x290
[  521.871251][T13503]  ? selinux_file_ioctl+0xb6/0x290
[  521.871279][T13503]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  521.871303][T13503]  __x64_sys_ioctl+0x18e/0x210
[  521.871331][T13503]  do_syscall_64+0x115/0x870
[  521.871351][T13503]  ? clear_bhb_loop+0x40/0x90
[  521.871373][T13503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.871392][T13503] RIP: 0033:0x7ff83ef9e019
[  521.871408][T13503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  521.871425][T13503] RSP: 002b:00007ff83fe57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  521.871442][T13503] RAX: ffffffffffffffda RBX: 00007ff83f225fa0 RCX: 00007ff83ef9e019
[  521.871454][T13503] RDX: 0000200000000180 RSI: 0000000000003b80 RDI: 0000000000000003
[  521.871464][T13503] RBP: 00007ff83fe57090 R08: 0000000000000000 R09: 0000000000000000
[  521.871475][T13503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  521.871485][T13503] R13: 00007ff83f226038 R14: 00007ff83f225fa0 R15: 00007ffda81b6468
[  521.871507][T13503]  </TASK>
[  522.361609][ T5732] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.369664][ T5732] usb 9-1: Product: syz
[  522.373895][ T5732] usb 9-1: Manufacturer: syz
[  522.381579][ T5732] usb 9-1: SerialNumber: syz
[  522.387648][ T5805] usb 1-1: unable to get BOS descriptor or descriptor too short
[  522.403083][ T5805] usb 1-1: config 100 has an invalid interface number: 173 but max is 0
[  522.412554][ T5805] usb 1-1: config 100 has no interface number 0
[  522.418905][ T5805] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  522.431317][ T5805] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 30768, setting to 8
[  522.435383][ T5732] usb 9-1: config 0 descriptor??
[  522.443528][ T5805] usb 1-1: config 100 interface 173 has no altsetting 0
[  522.524727][ T5805] usb 1-1: string descriptor 0 read error: -22
[  522.547857][ T5805] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  522.556788][ T5732] usb 9-1: can't set config #0, error -71
[  522.579151][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.589730][ T5732] usb 9-1: USB disconnect, device number 53
[  522.649653][T13484] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  522.662295][T13484] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  522.684563][ T5805] metro_usb 1-1:100.173: Metrologic USB to Serial converter detected
[  522.802079][ T5792] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  522.992629][ T5805] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  523.112449][ T5792] usb 4-1: Using ep0 maxpacket: 32
[  523.123526][ T5792] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  523.133997][ T5792] usb 4-1: config 0 has no interface number 0
[  523.156169][ T5792] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  523.175537][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.189429][ T5792] usb 4-1: Product: syz
[  523.193888][ T5792] usb 4-1: Manufacturer: syz
[  523.202581][ T5792] usb 4-1: SerialNumber: syz
[  523.228009][ T5792] usb 4-1: config 0 descriptor??
[  523.271940][ T5732] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  523.438391][ T5732] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  523.458822][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.604663][   T30] kauditd_printk_skb: 426 callbacks suppressed
[  523.604673][   T30] audit: type=1326 audit(2000000200.680:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87f8f5e84e code=0x7ffc0000
[  523.644815][   T30] audit: type=1326 audit(2000000200.710:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87f8f5e84e code=0x7ffc0000
[  523.696308][ T5792] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  523.716354][   T30] audit: type=1326 audit(2000000200.720:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87f8f5e84e code=0x7ffc0000
[  523.718061][ T5732] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  523.744277][ T5792] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  523.793597][   T30] audit: type=1326 audit(2000000200.720:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87f8f5e84e code=0x7ffc0000
[  523.828917][   T30] audit: type=1326 audit(2000000200.720:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87f8f5e84e code=0x7ffc0000
[  523.891254][   T30] audit: type=1326 audit(2000000200.750:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87f8f5e84e code=0x7ffc0000
[  523.918581][   T30] audit: type=1326 audit(2000000200.750:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87f8f5e84e code=0x7ffc0000
[  523.951135][   T30] audit: type=1326 audit(2000000200.750:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87f8f5e84e code=0x7ffc0000
[  523.983694][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1386'.
[  524.001104][   T30] audit: type=1326 audit(2000000200.750:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87f8f5e84e code=0x7ffc0000
[  524.003479][ T5805] usb 1-1: USB disconnect, device number 55
[  524.027920][   T30] audit: type=1326 audit(2000000200.750:5515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.0.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87f8f5e84e code=0x7ffc0000
[  524.072881][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1386'.
[  524.117679][ T5805] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  524.174469][ T5805] metro_usb 1-1:100.173: device disconnected
[  524.472626][T13514] comedi comedi0: comedi_bond: 4:2  attached, 32 channels from 1 devices
[  525.835313][ T5732] usb 2-1: USB disconnect, device number 51
[  525.906520][ T5792] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  525.930559][ T5792] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  525.948190][ T5792] usb 4-1: USB disconnect, device number 14
[  526.164874][T13041] Bluetooth: hci4: command 0x040f tx timeout
[  526.354763][T13573] fuse: Bad value for 'fd'
[  528.617079][T13576] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1395'.
[  528.668340][T13578] input: syz1 as /devices/virtual/input/input57
[  528.789902][   T30] kauditd_printk_skb: 55 callbacks suppressed
[  528.789919][   T30] audit: type=1326 audit(2000000205.860:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13583 comm="syz.8.1398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  528.897210][   T30] audit: type=1326 audit(2000000205.860:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13583 comm="syz.8.1398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  528.924397][   T30] audit: type=1326 audit(2000000205.860:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13583 comm="syz.8.1398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  528.986577][   T30] audit: type=1326 audit(2000000205.860:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13583 comm="syz.8.1398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  529.013200][ T5792] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  529.045808][   T30] audit: type=1326 audit(2000000205.910:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13583 comm="syz.8.1398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  529.090722][   T30] audit: type=1326 audit(2000000205.910:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13583 comm="syz.8.1398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f29b539dd82 code=0x7ffc0000
[  529.120899][   T30] audit: type=1326 audit(2000000205.910:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13583 comm="syz.8.1398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f29b539de17 code=0x7ffc0000
[  529.161785][ T5792] usb 4-1: Using ep0 maxpacket: 16
[  529.171686][  T994] usb 9-1: new low-speed USB device number 54 using dummy_hcd
[  529.178139][   T30] audit: type=1326 audit(2000000205.910:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13583 comm="syz.8.1398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f29b535ad11 code=0x7ffc0000
[  529.179930][ T5792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  529.223872][   T30] audit: type=1326 audit(2000000205.910:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13583 comm="syz.8.1398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f29b539ee09 code=0x7ffc0000
[  529.237557][ T5792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  529.251473][   T30] audit: type=1326 audit(2000000205.910:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13583 comm="syz.8.1398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f29b535ad7b code=0x7ffc0000
[  529.267918][ T5792] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  529.293036][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1401'.
[  529.300526][ T5792] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  529.317573][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.345529][ T5792] usb 4-1: config 0 descriptor??
[  529.388622][  T994] usb 9-1: unable to get BOS descriptor or descriptor too short
[  529.407095][  T994] usb 9-1: config 100 has an invalid interface number: 173 but max is 0
[  529.421406][  T994] usb 9-1: config 100 has no interface number 0
[  529.474672][  T994] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  529.522094][  T994] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 30768, setting to 8
[  529.540218][  T994] usb 9-1: config 100 interface 173 has no altsetting 0
[  529.556196][  T994] usb 9-1: string descriptor 0 read error: -22
[  529.576186][  T994] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  529.606691][  T994] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.645812][ T5792] usbhid 4-1:0.0: can't add hid device: -71
[  529.653250][ T5792] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  529.662742][T13587] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  529.689888][T13587] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  529.729678][ T5792] usb 4-1: USB disconnect, device number 15
[  529.750350][  T994] metro_usb 9-1:100.173: Metrologic USB to Serial converter detected
[  529.802180][  T994] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  530.017147][T13607] wlan0 speed is unknown, defaulting to 1000
[  532.157333][ T5725] usb 9-1: USB disconnect, device number 54
[  532.190354][ T5725] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  532.210002][ T5725] metro_usb 9-1:100.173: device disconnected
[  532.286337][T13630] input: syz1 as /devices/virtual/input/input58
[  532.292891][T13629] tipc: Failed to remove unknown binding: 66,0,0/0:2235653538/2235653539
[  532.383848][T13629] tipc: Failed to remove unknown binding: 66,0,0/0:2235653538/2235653539
[  532.491843][T13634] openvswitch: netlink: IP tunnel dst address not specified
[  533.178708][T13643] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  533.539289][ T5792] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  533.651284][  T994] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  533.689823][  T994] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  533.727455][T13652] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1417'.
[  533.743935][ T5792] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  533.771679][T13652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1417'.
[  533.773683][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.830606][ T5792] usb 1-1: Product: syz
[  533.841847][ T5792] usb 1-1: Manufacturer: syz
[  533.850163][ T5792] usb 1-1: SerialNumber: syz
[  533.875936][ T5792] usb 1-1: config 0 descriptor??
[  533.953432][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  534.121593][   T10] usb 4-1: Using ep0 maxpacket: 16
[  534.136368][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.164626][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  534.199535][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  534.216933][   T30] kauditd_printk_skb: 358 callbacks suppressed
[  534.216948][   T30] audit: type=1326 audit(2000000211.290:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.6.1420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  534.231609][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  534.307745][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.325019][   T30] audit: type=1326 audit(2000000211.290:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.6.1420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  534.375033][   T10] usb 4-1: config 0 descriptor??
[  534.383381][   T30] audit: type=1326 audit(2000000211.290:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.6.1420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  534.443157][   T30] audit: type=1326 audit(2000000211.290:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.6.1420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  534.516566][   T30] audit: type=1326 audit(2000000211.290:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.6.1420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  534.552154][ T5732] usb 7-1: new low-speed USB device number 47 using dummy_hcd
[  534.574440][   T30] audit: type=1326 audit(2000000211.290:5944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.6.1420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  534.592862][   T10] usbhid 4-1:0.0: can't add hid device: -71
[  534.635480][   T30] audit: type=1326 audit(2000000211.340:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.6.1420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  534.638723][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  534.691187][T13658] audit: audit_backlog=65 > audit_backlog_limit=64
[  534.697740][T13658] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64
[  534.711691][   T30] audit: type=1326 audit(2000000211.350:5946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.6.1420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  534.714819][   T10] usb 4-1: USB disconnect, device number 16
[  534.807453][ T5732] usb 7-1: unable to get BOS descriptor or descriptor too short
[  534.826681][ T5732] usb 7-1: config 100 has an invalid interface number: 173 but max is 0
[  534.846914][ T5732] usb 7-1: config 100 has no interface number 0
[  534.855208][ T5732] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  534.866199][ T5732] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 30768, setting to 8
[  534.886966][ T5732] usb 7-1: config 100 interface 173 has no altsetting 0
[  534.903095][ T5732] usb 7-1: string descriptor 0 read error: -22
[  534.909395][ T5732] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  534.926288][ T5732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.937959][T13668] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  534.946361][T13668] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  535.042638][ T5732] metro_usb 7-1:100.173: Metrologic USB to Serial converter detected
[  535.069144][ T5732] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  535.159637][ T5792] usb 1-1: f81604_read: reg: 100e failed: -EPROTO
[  535.180409][ T5792] usb 1-1: f81604_read: reg: 200f failed: -EPROTO
[  535.197086][ T5792] usb 1-1: USB disconnect, device number 56
[  535.230661][ T5792] usb 1-1: f81604_read: reg: 100f failed: -ENODEV
[  535.636255][ T5792] usb 1-1: f81604_read: reg: 200f failed: -ENODEV
[  537.218087][ T6512] usb 7-1: USB disconnect, device number 47
[  537.252190][ T6512] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  537.292604][ T5732] usb 9-1: new high-speed USB device number 55 using dummy_hcd
[  537.420409][ T6512] metro_usb 7-1:100.173: device disconnected
[  537.581622][ T5732] usb 9-1: Using ep0 maxpacket: 16
[  537.862824][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1440'.
[  537.893482][ T5732] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  537.915070][ T5732] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  537.915714][T13761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13761 comm=syz.6.1440
[  537.925205][ T5732] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  537.954446][ T5732] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  537.991282][ T5732] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.041380][ T5732] usb 9-1: config 0 descriptor??
[  538.059701][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1440'.
[  538.099876][T13761] netlink: 'syz.6.1440': attribute type 10 has an invalid length.
[  538.127281][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1440'.
[  538.283859][T13769] FAULT_INJECTION: forcing a failure.
[  538.283859][T13769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  538.296754][ T5732] usbhid 9-1:0.0: can't add hid device: -71
[  538.297320][T13769] CPU: 1 UID: 0 PID: 13769 Comm: syz.6.1442 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  538.297344][T13769] Tainted: [L]=SOFTLOCKUP
[  538.297350][T13769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  538.297359][T13769] Call Trace:
[  538.297365][T13769]  <TASK>
[  538.297371][T13769]  dump_stack_lvl+0x100/0x190
[  538.297396][T13769]  should_fail_ex.cold+0x5/0xa
[  538.297416][T13769]  _copy_to_user+0x32/0xd0
[  538.297441][T13769]  simple_read_from_buffer+0xcb/0x170
[  538.297459][T13769]  proc_fail_nth_read+0x1af/0x230
[  538.297485][T13769]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  538.297509][T13769]  ? rw_verify_area+0xce/0x6d0
[  538.297531][T13769]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  538.297554][T13769]  vfs_read+0x1e4/0xb40
[  538.297580][T13769]  ? __pfx_vfs_read+0x10/0x10
[  538.297602][T13769]  ? __fget_files+0x215/0x3d0
[  538.297623][T13769]  ? __fget_files+0x21f/0x3d0
[  538.297645][T13769]  ksys_read+0x12a/0x250
[  538.297667][T13769]  ? __pfx_ksys_read+0x10/0x10
[  538.297696][T13769]  do_syscall_64+0x115/0x870
[  538.297715][T13769]  ? clear_bhb_loop+0x40/0x90
[  538.297734][T13769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.297750][T13769] RIP: 0033:0x7faa3b15e84e
[  538.297763][T13769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  538.297778][T13769] RSP: 002b:00007faa3c023fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  538.297794][T13769] RAX: ffffffffffffffda RBX: 00007faa3c0246c0 RCX: 00007faa3b15e84e
[  538.297804][T13769] RDX: 000000000000000f RSI: 00007faa3c0240a0 RDI: 0000000000000003
[  538.297813][T13769] RBP: 00007faa3c024090 R08: 0000000000000000 R09: 0000000000000000
[  538.297822][T13769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  538.297831][T13769] R13: 00007faa3b426038 R14: 00007faa3b425fa0 R15: 00007ffd42d75578
[  538.297853][T13769]  </TASK>
[  538.560571][ T5732] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  538.605931][ T5732] usb 9-1: USB disconnect, device number 55
[  539.020571][T13790] tipc: Started in network mode
[  539.065326][T13790] tipc: Node identity f2d9cd94f24c, cluster identity 4711
[  539.141785][T13790] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  539.196095][T13796] syzkaller0: entered promiscuous mode
[  539.266048][T13796] syzkaller0: entered allmulticast mode
[  539.278816][   T30] kauditd_printk_skb: 668 callbacks suppressed
[  539.278842][   T30] audit: type=1326 audit(2000000216.350:6614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13801 comm="syz.0.1448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  539.453307][   T30] audit: type=1326 audit(2000000216.390:6615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13801 comm="syz.0.1448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  539.668685][T13807] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1445'.
[  539.692036][   T30] audit: type=1326 audit(2000000216.390:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13801 comm="syz.0.1448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  539.926888][   T30] audit: type=1326 audit(2000000216.390:6617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13801 comm="syz.0.1448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  540.016169][T13799] tipc: Resetting bearer <eth:syzkaller0>
[  540.111238][T13785] tipc: Resetting bearer <eth:syzkaller0>
[  540.120176][   T30] audit: type=1326 audit(2000000216.400:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13801 comm="syz.0.1448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  540.191823][   T30] audit: type=1326 audit(2000000216.450:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13801 comm="syz.0.1448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  540.227355][T13785] tipc: Disabling bearer <eth:syzkaller0>
[  540.267526][   T30] audit: type=1326 audit(2000000216.450:6620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13801 comm="syz.0.1448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87f8f9dd82 code=0x7ffc0000
[  540.271779][T13795] wlan0 speed is unknown, defaulting to 1000
[  540.377445][   T30] audit: type=1326 audit(2000000216.450:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13801 comm="syz.0.1448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f87f8f9de17 code=0x7ffc0000
[  540.442015][   T30] audit: type=1326 audit(2000000216.450:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13801 comm="syz.0.1448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f87f8f5ad11 code=0x7ffc0000
[  540.501727][   T30] audit: type=1326 audit(2000000216.450:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13801 comm="syz.0.1448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f87f8f9ee09 code=0x7ffc0000
[  540.636081][ T5732] usb 7-1: new full-speed USB device number 48 using dummy_hcd
[  540.791615][ T5802] usb 1-1: new low-speed USB device number 57 using dummy_hcd
[  540.845389][ T5732] usb 7-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  540.858401][ T5732] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  540.873795][ T5732] usb 7-1: Product: syz
[  540.878011][ T5732] usb 7-1: Manufacturer: syz
[  540.884416][ T5732] usb 7-1: SerialNumber: syz
[  540.900074][ T5732] usb 7-1: config 0 descriptor??
[  540.989998][ T5802] usb 1-1: unable to get BOS descriptor or descriptor too short
[  541.020201][ T5802] usb 1-1: config 100 has an invalid interface number: 173 but max is 0
[  541.043915][ T5802] usb 1-1: config 100 has no interface number 0
[  541.073515][ T5802] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  541.095977][ T5802] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 30768, setting to 8
[  541.111098][ T5732] peak_usb 7-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[  541.119488][ T5802] usb 1-1: config 100 interface 173 has no altsetting 0
[  541.139864][ T5802] usb 1-1: string descriptor 0 read error: -22
[  541.157324][ T5802] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  541.188166][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.209972][T13812] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  541.239436][T13812] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  541.250322][ T5802] metro_usb 1-1:100.173: Metrologic USB to Serial converter detected
[  541.273930][ T5802] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  541.311491][ T5732] peak_usb 7-1:0.0 can0: sending command failure: -8
[  541.331011][ T5732] peak_usb 7-1:0.0 can0: sending command failure: -8
[  541.354363][ T5732] peak_usb 7-1:0.0 can0: sending command failure: -8
[  541.415271][ T5732] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -8
[  541.424953][ T5712] usb 9-1: new high-speed USB device number 56 using dummy_hcd
[  542.420617][    T9] usb 7-1: USB disconnect, device number 48
[  542.429610][T13848] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  542.491648][ T5712] usb 9-1: Using ep0 maxpacket: 16
[  542.505573][ T5712] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  542.506569][ T5792] usb 1-1: USB disconnect, device number 57
[  542.524122][ T5712] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  542.537677][ T5712] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  542.563453][ T5712] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  542.568282][ T5792] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  542.582630][ T5712] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.588197][ T5792] metro_usb 1-1:100.173: device disconnected
[  542.599492][ T5712] usb 9-1: config 0 descriptor??
[  542.893745][ T5712] usbhid 9-1:0.0: can't add hid device: -71
[  542.905030][ T5712] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  542.922765][ T5712] usb 9-1: USB disconnect, device number 56
[  543.031847][ T5792] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  543.244167][ T5792] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[  543.264565][ T5792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.290995][ T5792] emi26 - firmware loader 1-1:1.0: emi26_probe start
[  543.314124][ T5792] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2
[  543.507887][ T5792] usb 1-1: Falling back to sysfs fallback for: emi26/loader.fw
[  544.156614][T13885] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1468'.
[  544.245181][T13887] befs: (nullb0): invalid magic header
[  544.609126][T13885] hsr_slave_1 (unregistering): left promiscuous mode
[  544.711804][ T5802] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  544.827197][T13893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  544.836835][T13893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.871617][ T5802] usb 4-1: Using ep0 maxpacket: 16
[  544.883559][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  544.897175][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  544.915353][ T5802] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  544.931611][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.947088][ T5802] usb 4-1: Product: syz
[  544.961409][ T5802] usb 4-1: Manufacturer: syz
[  544.966220][ T5802] usb 4-1: SerialNumber: syz
[  544.979054][ T5802] usb 4-1: config 0 descriptor??
[  544.991363][ T5802] hub 4-1:0.0: bad descriptor, ignoring hub
[  544.997548][ T5802] hub 4-1:0.0: probe with driver hub failed with error -5
[  545.007537][ T5802] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  545.014718][   T29] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  545.156921][ T5802] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12
[  545.181702][   T29] usb 7-1: Using ep0 maxpacket: 16
[  545.478030][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  545.651423][   T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.667675][   T29] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  545.680861][T13908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  545.691075][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.701386][   T29] usb 7-1: Product: syz
[  545.706235][   T29] usb 7-1: Manufacturer: syz
[  545.711237][T13908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  545.721128][   T29] usb 7-1: SerialNumber: syz
[  545.731323][   T29] usb 7-1: config 0 descriptor??
[  545.746170][   T29] asix 7-1:0.0: probe with driver asix failed with error -22
[  545.800815][   T30] kauditd_printk_skb: 180 callbacks suppressed
[  545.800830][   T30] audit: type=1326 audit(2000000222.870:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.8.1470" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  545.884550][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1461'.
[  545.913356][   T30] audit: type=1326 audit(2000000222.870:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.8.1470" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  545.941675][   T30] audit: type=1326 audit(2000000222.870:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.8.1470" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  545.975818][   T30] audit: type=1326 audit(2000000222.870:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.8.1470" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  545.981062][ T5725] usb 7-1: USB disconnect, device number 49
[  546.004321][ T5802] usb 4-1: USB disconnect, device number 17
[  546.037281][   T30] audit: type=1326 audit(2000000222.870:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.8.1470" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  546.066259][   T30] audit: type=1326 audit(2000000222.920:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.8.1470" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  546.103386][T13916] comedi comedi0: comedi_config --init_data is deprecated
[  546.120693][   T30] audit: type=1326 audit(2000000222.920:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.8.1470" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  546.147825][   T29] usb 9-1: new low-speed USB device number 57 using dummy_hcd
[  546.176440][   T30] audit: type=1326 audit(2000000222.920:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.8.1470" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  546.206288][   T30] audit: type=1326 audit(2000000222.920:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.8.1470" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  546.543426][   T30] audit: type=1326 audit(2000000222.920:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.8.1470" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  546.784434][   T29] usb 9-1: unable to get BOS descriptor or descriptor too short
[  546.799799][   T29] usb 9-1: config 100 has an invalid interface number: 173 but max is 0
[  546.817190][   T29] usb 9-1: config 100 has no interface number 0
[  546.828145][   T29] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  546.839781][   T29] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 30768, setting to 8
[  546.852262][   T29] usb 9-1: config 100 interface 173 has no altsetting 0
[  547.495177][   T29] usb 9-1: string descriptor 0 read error: -22
[  547.511412][   T29] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  547.522199][   T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.663035][T13911] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  547.670603][T13911] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  547.751217][   T29] metro_usb 9-1:100.173: Metrologic USB to Serial converter detected
[  547.790617][   T29] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  548.081610][ T5802] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  548.244369][ T5802] usb 7-1: Using ep0 maxpacket: 16
[  548.263735][ T5802] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  548.287234][ T5802] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  548.318946][ T5802] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  548.360887][ T5802] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  548.375880][ T5802] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.407386][ T5802] usb 7-1: config 0 descriptor??
[  548.636287][ T5802] usbhid 7-1:0.0: can't add hid device: -71
[  548.652357][ T5802] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  548.669257][ T5802] usb 7-1: USB disconnect, device number 50
[  548.908870][T13953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1486'.
[  548.970162][ T5712] usb 9-1: USB disconnect, device number 57
[  548.996612][ T5712] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  549.023447][ T5712] metro_usb 9-1:100.173: device disconnected
[  549.425112][T13967] binder: 13965:13967 ioctl c0306201 0 returned -14
[  550.228245][T13982] kAFS: unparsable volume name
[  550.849366][   T30] kauditd_printk_skb: 621 callbacks suppressed
[  550.849381][   T30] audit: type=1326 audit(2000000227.920:7435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.8.1497" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  550.888223][   T30] audit: type=1326 audit(2000000227.960:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.8.1497" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  550.918609][   T30] audit: type=1326 audit(2000000227.960:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.8.1497" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f29b539dd82 code=0x7ffc0000
[  550.950796][   T30] audit: type=1326 audit(2000000227.960:7438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.8.1497" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f29b539de17 code=0x7ffc0000
[  550.977577][   T30] audit: type=1326 audit(2000000227.960:7439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.8.1497" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f29b535ad11 code=0x7ffc0000
[  551.008550][   T30] audit: type=1326 audit(2000000227.960:7440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.8.1497" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f29b539ee09 code=0x7ffc0000
[  551.036141][   T30] audit: type=1326 audit(2000000227.960:7441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.8.1497" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f29b535ad7b code=0x7ffc0000
[  551.062863][ T5732] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  551.073728][   T30] audit: type=1326 audit(2000000227.960:7442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.8.1497" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f29b535a46c code=0x7ffc0000
[  551.100651][   T30] audit: type=1326 audit(2000000227.960:7443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.8.1497" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b539e019 code=0x7ffc0000
[  551.129295][   T30] audit: type=1326 audit(2000000227.960:7444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.8.1497" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f29b535a4ce code=0x7ffc0000
[  551.133636][   T29] usb 9-1: new low-speed USB device number 58 using dummy_hcd
[  551.238421][ T5732] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  551.247646][ T5732] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.262830][ T5732] usb 7-1: config 0 descriptor??
[  551.291216][ T5732] gspca_main: cpia1-2.14.0 probing 0813:0001
[  551.320440][   T29] usb 9-1: unable to get BOS descriptor or descriptor too short
[  551.331209][   T29] usb 9-1: config 100 has an invalid interface number: 173 but max is 0
[  551.339765][   T29] usb 9-1: config 100 has no interface number 0
[  551.350783][   T29] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  551.361464][   T29] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 30768, setting to 8
[  551.373141][   T29] usb 9-1: config 100 interface 173 has no altsetting 0
[  551.391523][   T29] usb 9-1: string descriptor 0 read error: -22
[  551.398435][   T29] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  551.407580][   T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.429939][T13995] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  551.439181][T13995] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  551.468849][   T29] metro_usb 9-1:100.173: Metrologic USB to Serial converter detected
[  551.491331][ T5732] gspca_cpia1: usb_control_msg 05, error -71
[  551.495933][   T29] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  551.518191][ T5732] gspca_cpia1: usb_control_msg 01, error -71
[  551.529214][ T5732] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0)
[  551.548682][ T5732] usb 7-1: USB disconnect, device number 51
[  551.682027][T14002] fuse: Bad value for 'fd'
[  552.194136][T14011] syzkaller0: entered promiscuous mode
[  552.199620][T14011] syzkaller0: entered allmulticast mode
[  552.839596][T14024] block nbd1: server does not support multiple connections per device.
[  552.867856][T14024] block nbd1: shutting down sockets
[  553.114058][T14036] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1511'.
[  553.734588][T14043] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1513'.
[  553.805727][ T5802] usb 9-1: USB disconnect, device number 58
[  553.835221][ T5802] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  553.861676][ T5802] metro_usb 9-1:100.173: device disconnected
[  557.322666][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  558.672594][T14079] Need at least one configuration in g1.
[  558.678811][T14079] udc usbip-vudc.0: failed to start g1: -22
[  558.684804][T14079] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  558.697323][T14079] UDC core: g1: couldn't find an available UDC or it's busy
[  559.375459][T14083] wlan0 speed is unknown, defaulting to 1000
[  560.087730][   T30] kauditd_printk_skb: 1059 callbacks suppressed
[  560.087746][   T30] audit: type=1326 audit(2000000237.140:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.6.1525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  560.154106][   T30] audit: type=1326 audit(2000000237.150:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.6.1525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  560.206588][   T30] audit: type=1326 audit(2000000237.150:8506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.6.1525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  560.257323][   T30] audit: type=1326 audit(2000000237.150:8507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.6.1525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  560.286942][   T30] audit: type=1326 audit(2000000237.150:8508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.6.1525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  560.317039][   T30] audit: type=1326 audit(2000000237.150:8509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.6.1525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  560.394568][   T30] audit: type=1326 audit(2000000237.200:8510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.6.1525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3b19e019 code=0x7ffc0000
[  560.430615][   T30] audit: type=1326 audit(2000000237.200:8511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.6.1525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa3b19dd82 code=0x7ffc0000
[  560.461903][   T30] audit: type=1326 audit(2000000237.200:8512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.6.1525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7faa3b19de17 code=0x7ffc0000
[  560.486324][T14104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1529'.
[  560.497394][ T5732] usb 7-1: new low-speed USB device number 52 using dummy_hcd
[  560.795378][   T30] audit: type=1326 audit(2000000237.200:8513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.6.1525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7faa3b15ad11 code=0x7ffc0000
[  560.833204][ T5725] usb 9-1: new high-speed USB device number 59 using dummy_hcd
[  560.854572][ T5732] usb 7-1: unable to get BOS descriptor or descriptor too short
[  560.955351][ T5732] usb 7-1: config 100 has an invalid interface number: 173 but max is 0
[  560.970141][ T5732] usb 7-1: config 100 has no interface number 0
[  560.991837][ T5732] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  561.003839][ T5732] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 30768, setting to 8
[  561.016887][ T5732] usb 7-1: config 100 interface 173 has no altsetting 0
[  561.023882][ T5725] usb 9-1: Using ep0 maxpacket: 16
[  561.041933][ T5732] usb 7-1: string descriptor 0 read error: -22
[  561.048672][ T5732] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  561.066964][ T5732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.083282][T14093] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  561.108830][T14093] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  561.117677][ T5725] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.130500][ T5725] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  561.145024][ T5725] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  561.160383][ T5732] metro_usb 7-1:100.173: Metrologic USB to Serial converter detected
[  561.177212][ T5725] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  561.187542][ T5725] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.195771][ T5732] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  561.225232][ T5725] usb 9-1: config 0 descriptor??
[  561.345394][T14115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1533'.
[  562.165665][T14132] Need at least one configuration in g1.
[  562.171716][T14132] udc usbip-vudc.0: failed to start g1: -22
[  562.177664][T14132] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  562.189521][T14132] UDC core: g1: couldn't find an available UDC or it's busy
[  562.844103][   T29] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  562.991631][   T29] usb 4-1: device descriptor read/64, error -71
[  563.039181][  T994] usb 7-1: USB disconnect, device number 52
[  563.062571][  T994] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  563.092405][  T994] metro_usb 7-1:100.173: device disconnected
[  563.240798][   T29] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  563.500489][   T29] usb 4-1: device descriptor read/64, error -71
[  563.840090][   T29] usb usb4-port1: attempt power cycle
[  563.861947][  T142] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  563.994727][ T5725] usbhid 9-1:0.0: can't add hid device: -71
[  564.178685][ T5725] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  564.188629][ T5725] usb 9-1: USB disconnect, device number 59
[  564.280265][T14157] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  564.282720][   T29] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  564.287723][T14157] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  564.312059][   T29] usb 4-1: device descriptor read/8, error -71
[  564.321615][T14157] No source specified
[  564.551658][   T29] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  564.571996][   T29] usb 4-1: device descriptor read/8, error -71
[  564.693043][   T29] usb usb4-port1: unable to enumerate USB device
[  564.766435][T14164] JFS: discard option not supported on device
[  564.777570][T14164] Mount JFS Failure: -5
[  564.781935][T14164] jfs_mount failed w/return code = -5
[  564.891735][ T5732] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[  565.054247][ T5732] usb 2-1: not running at top speed; connect to a high speed hub
[  565.065966][ T5732] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  565.075239][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.085814][ T5732] usb 2-1: Product: syz
[  565.089988][ T5732] usb 2-1: Manufacturer: syz
[  565.095253][ T5732] usb 2-1: SerialNumber: syz
[  565.311756][ T5725] usb 7-1: new full-speed USB device number 53 using dummy_hcd
[  565.357977][T14167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1549'.
[  565.380302][   T30] kauditd_printk_skb: 959 callbacks suppressed
[  565.380337][   T30] audit: type=1400 audit(2000000242.450:9470): avc:  denied  { read append } for  pid=14170 comm="syz.3.1551" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  565.412815][   T30] audit: type=1400 audit(2000000242.450:9471): avc:  denied  { open } for  pid=14170 comm="syz.3.1551" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  565.502730][ T5725] usb 7-1: config 0 has an invalid interface number: 205 but max is 0
[  565.510948][ T5725] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  565.521167][ T5725] usb 7-1: config 0 has no interface number 0
[  565.527523][ T5725] usb 7-1: config 0 interface 205 has no altsetting 0
[  565.536610][ T5725] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  565.545831][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.554162][ T5725] usb 7-1: Product: syz
[  565.558344][ T5725] usb 7-1: Manufacturer: syz
[  565.563170][ T5725] usb 7-1: SerialNumber: syz
[  565.571200][ T5725] usb 7-1: config 0 descriptor??
[  565.582925][ T5725] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  565.597063][ T5725] dvb-usb: bulk message failed: -22 (3/0)
[  565.643118][ T5725] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  565.654070][ T5725] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  565.666413][ T5725] usb 7-1: media controller created
[  565.675406][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  565.688017][ T5725] dvb-usb: bulk message failed: -22 (6/0)
[  565.693909][ T5725] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  565.706994][ T5725] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input60
[  565.720779][ T5725] dvb-usb: schedule remote query interval to 150 msecs.
[  565.727832][ T5712] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  565.735635][ T5725] dvb-usb: bulk message failed: -22 (3/0)
[  565.771607][ T5725] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  565.792813][ T5725] usb 7-1: USB disconnect, device number 53
[  565.828508][ T5725] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  566.106910][   T30] audit: type=1326 audit(2000000243.180:9472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14177 comm="syz.0.1553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  566.133817][   T30] audit: type=1326 audit(2000000243.180:9473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14177 comm="syz.0.1553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  566.160843][   T30] audit: type=1326 audit(2000000243.180:9474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14177 comm="syz.0.1553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  566.187865][   T30] audit: type=1326 audit(2000000243.180:9475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14177 comm="syz.0.1553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  566.216443][   T30] audit: type=1326 audit(2000000243.180:9476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14177 comm="syz.0.1553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  566.243399][   T30] audit: type=1326 audit(2000000243.240:9477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14177 comm="syz.0.1553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f8f9e019 code=0x7ffc0000
[  566.270081][   T30] audit: type=1326 audit(2000000243.240:9478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14177 comm="syz.0.1553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87f8f9dd82 code=0x7ffc0000
[  566.297454][   T30] audit: type=1326 audit(2000000243.240:9479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14177 comm="syz.0.1553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f87f8f9de17 code=0x7ffc0000
[  566.459821][T14185] nbd: must specify an index to disconnect
[  566.711644][   T29] usb 7-1: new full-speed USB device number 54 using dummy_hcd
[  566.865739][   T29] usb 7-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  566.874878][   T29] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  566.883327][   T29] usb 7-1: Product: syz
[  566.887510][   T29] usb 7-1: Manufacturer: syz
[  566.892205][   T29] usb 7-1: SerialNumber: syz
[  566.900081][   T29] usb 7-1: config 0 descriptor??
[  567.110007][   T29] peak_usb 7-1:0.0: PEAK-System PCAN-Chip USB v19 fw v65.0.0 (1 channels)
[  567.376546][   T29] peak_usb 7-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  567.387379][   T29] peak_usb 7-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71)
[  567.424340][   T29] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71
[  567.436182][   T29] usb 7-1: USB disconnect, device number 54
[  567.543720][ T5732] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  567.550683][ T5732] usb 2-1: unit 2 not found!
[  567.561758][ T5732] usb 2-1: unit 6 not found!
[  567.681815][ T5732] usb 2-1: USB disconnect, device number 52
[  567.728972][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  567.907452][T14191] No such timeout policy "s"
[  567.918314][T14191] netlink: Failed to associated timeout policy 's'
[  568.625228][T14205] input: syz0 as /devices/virtual/input/input62
[  569.319099][T14209] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1563'.
[  569.654110][T14218] Need at least one configuration in g1.
[  569.660393][T14218] udc usbip-vudc.0: failed to start g1: -22
[  569.666467][T14218] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  569.680681][T14218] UDC core: g1: couldn't find an available UDC or it's busy
[  570.296752][T14226] input: syz0 as /devices/virtual/input/input63
[  570.389300][T14228] netlink: 'syz.0.1569': attribute type 1 has an invalid length.
[  570.466040][ T6512] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  570.603641][T14228] 8021q: adding VLAN 0 to HW filter on device bond2
[  570.657803][   T30] kauditd_printk_skb: 63 callbacks suppressed
[  570.657820][   T30] audit: type=1400 audit(2000000247.700:9543): avc:  denied  { write } for  pid=14230 comm="syz.1.1570" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  570.722662][ T6512] usb 7-1: Using ep0 maxpacket: 16
[  570.742997][ T6512] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  570.765605][ T6512] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  570.790674][ T6512] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[  570.827776][ T6512] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  570.847969][ T6512] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  570.875421][ T6512] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  570.887535][ T6512] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.919347][ T6512] usb 7-1: Product: syz
[  570.928126][ T6512] usb 7-1: Manufacturer: syz
[  570.939275][ T6512] usb 7-1: SerialNumber: syz
[  570.956207][ T6512] usb 7-1: config 0 descriptor??
[  570.971055][ T6512] port100 7-1:0.0: NFC: Could not get supported command types
[  571.208724][T14221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  571.231832][T14221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.266259][ T6512] usb 7-1: USB disconnect, device number 55
[  571.784089][   T30] audit: type=1400 audit(2000000248.860:9544): avc:  denied  { name_bind } for  pid=14246 comm="syz.1.1575" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  571.839358][   T30] audit: type=1400 audit(2000000248.900:9545): avc:  denied  { bind } for  pid=14246 comm="syz.1.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  571.904175][   T30] audit: type=1400 audit(2000000248.900:9546): avc:  denied  { name_bind } for  pid=14246 comm="syz.1.1575" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  571.971638][   T30] audit: type=1400 audit(2000000248.900:9547): avc:  denied  { node_bind } for  pid=14246 comm="syz.1.1575" saddr=fe80::bb src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  572.672497][T13041] Bluetooth: hci4: command 0x040f tx timeout
[  572.672993][ T5712] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  572.766953][ T5712] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  572.951685][ T5802] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  572.969189][T14264] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  573.125023][T14272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1580'.
[  573.203702][   T30] audit: type=1400 audit(2000000250.280:9548): avc:  denied  { write } for  pid=14261 comm="syz.0.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  573.248206][   T30] audit: type=1400 audit(2000000250.280:9549): avc:  denied  { nlmsg_write } for  pid=14261 comm="syz.0.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  573.531599][ T5712] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  573.681622][ T5712] usb 7-1: Using ep0 maxpacket: 16
[  573.688909][ T5712] usb 7-1: unable to get BOS descriptor or descriptor too short
[  573.698429][ T5712] usb 7-1: config 4 has an invalid interface number: 55 but max is 0
[  573.706850][ T5712] usb 7-1: config 4 has no interface number 0
[  573.714910][ T5712] usb 7-1: config 4 interface 55 has no altsetting 0
[  573.724004][ T5712] usb 7-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb
[  573.733327][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.741362][ T5712] usb 7-1: Product: syz
[  573.745631][ T5712] usb 7-1: Manufacturer: syz
[  573.750237][ T5712] usb 7-1: SerialNumber: syz
[  573.974646][T14277] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1584'.
[  574.012376][T14277] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1584'.
[  574.029503][T14277] IPVS: Error connecting to the multicast addr
[  574.064922][T14277] wlan0 speed is unknown, defaulting to 1000
[  574.165348][ T5712] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[  574.173118][ T5712] gspca_mr97310a: reg write [21] error -22
[  574.179252][ T5712] mr97310a 7-1:4.55: probe with driver mr97310a failed with error -22
[  574.193615][ T5712] usb 7-1: USB disconnect, device number 56
[  574.965516][T14294] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1588'.
[  574.974722][T14294] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1588'.
[  575.180781][T14297] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1589'.
[  575.207462][T14297] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1589'.
[  575.542977][ T5802] usb 2-1: unable to get BOS descriptor or descriptor too short
[  575.557525][ T5802] usb 2-1: unable to read config index 0 descriptor/start: -71
[  575.586446][ T5802] usb 2-1: can't read configurations, error -71
[  575.847207][T14302] Need at least one configuration in g1.
[  575.852984][T14302] udc usbip-vudc.0: failed to start g1: -22
[  575.858913][T14302] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  575.869400][T14302] UDC core: g1: couldn't find an available UDC or it's busy
[  576.061657][ T5802] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  576.232039][ T5802] usb 2-1: Using ep0 maxpacket: 32
[  576.243121][ T5802] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  576.259943][ T5802] usb 2-1: config 0 has no interface number 0
[  576.268540][ T5802] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  576.277900][T14304] 9p: Bad value for 'rfdno'
[  576.282575][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.290615][ T5802] usb 2-1: Product: syz
[  576.294849][ T5802] usb 2-1: Manufacturer: syz
[  576.300122][ T5802] usb 2-1: SerialNumber: syz
[  576.307669][ T5802] usb 2-1: config 0 descriptor??
[  576.318739][ T5802] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  576.522954][T14311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.542128][ T5802] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  576.551838][T14311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.589271][ T5802] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  576.850654][   T30] audit: type=1400 audit(2000000253.800:9550): avc:  denied  { node_bind } for  pid=14314 comm="syz.6.1595" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  576.912949][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  576.987149][   T29] usb 2-1: USB disconnect, device number 54
[  577.008260][   T29] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  577.041422][   T29] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  577.064277][T14313] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1594'.
[  577.107458][   T29] quatech2 2-1:0.51: device disconnected
[  577.650839][   T30] audit: type=1400 audit(2000000254.720:9551): avc:  denied  { accept } for  pid=14326 comm="syz.1.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  577.773707][   T30] audit: type=1400 audit(2000000254.850:9552): avc:  denied  { ioctl } for  pid=14334 comm="syz.3.1600" path="/dev/input/mouse0" dev="devtmpfs" ino=924 ioctlcmd=0x54c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  577.880523][T14339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1602'.
[  577.927675][T14339] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14339 comm=syz.0.1602
[  578.073086][T14346] Need at least one configuration in g1.
[  578.078834][T14346] udc usbip-vudc.0: failed to start g1: -22
[  578.085005][T14346] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  578.096601][T14346] UDC core: g1: couldn't find an available UDC or it's busy
[  578.106970][ T5712] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  578.694012][ T5712] usb 2-1: Using ep0 maxpacket: 16
[  578.793496][ T5712] usb 2-1: unable to get BOS descriptor or descriptor too short
[  578.991649][ T5712] usb 2-1: config 1 has an invalid interface number: 237 but max is 0
[  579.006878][ T5712] usb 2-1: config 1 has no interface number 0
[  579.015666][ T5712] usb 2-1: config 1 interface 237 has no altsetting 0
[  579.043196][ T5712] usb 2-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed
[  579.063601][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.091594][ T5712] usb 2-1: Product: syz
[  579.105983][ T5712] usb 2-1: Manufacturer: syz
[  579.116080][ T5712] usb 2-1: SerialNumber: syz
[  579.513464][T14364] gfs2: gfs2 mount does not exist
[  579.538728][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  579.557163][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  579.565046][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  579.578339][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  579.587520][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  579.616343][T13041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  579.625324][T13041] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  579.632937][T13041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  579.647293][T13041] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  579.655826][T13041] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  580.097020][T14376] bond0: invalid NS target ff00:: specified for addition
[  580.104160][T14376] bond0: option ns_ip6_target: invalid value (18446744073709551615)
[  580.550656][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.559305][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.589335][ T5802] wlan0 speed is unknown, defaulting to 1000
[  580.600408][ T5802] syz0: Port: 1 Link ACTIVE
[  580.880819][T14383] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1616'.
[  580.899163][ T5712] ipaq 2-1:1.237: PocketPC PDA converter detected
[  580.914682][T14383] syzkaller0: entered promiscuous mode
[  580.928641][ T5712] ipaq 2-1:1.237: probe with driver ipaq failed with error -71
[  580.946778][T14383] syzkaller0: entered allmulticast mode
[  580.975650][T14383] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  580.989145][ T5712] usb 2-1: USB disconnect, device number 55
[  581.118519][T14395] syz_tun: entered allmulticast mode
[  581.142116][T14365] wlan0 speed is unknown, defaulting to 1000
[  581.147428][T14392] syz_tun: left allmulticast mode
[  581.218213][T14398] ip6gre0: Master is either lo or non-ether device
[  581.939078][ T5618] Bluetooth: hci5: command tx timeout
[  582.690610][   T30] audit: type=1400 audit(2000000259.660:9553): avc:  denied  { write } for  pid=14417 comm="syz.3.1626" name="functions" dev="configfs" ino=8732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  582.981685][ T6512] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  583.205319][ T6512] usb 4-1: Using ep0 maxpacket: 8
[  583.360751][ T6512] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15
[  583.430220][ T6512] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87
[  583.571741][ T6512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 199, changing to 7
[  583.592967][ T6512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 42785, setting to 1024
[  583.618631][T14365] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.626125][T14365] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.633884][T14365] bridge_slave_0: entered allmulticast mode
[  583.641615][ T5732] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  583.659316][T14365] bridge_slave_0: entered promiscuous mode
[  583.668697][T14365] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.676055][T14365] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.702743][T14365] bridge_slave_1: entered allmulticast mode
[  583.724136][T14365] bridge_slave_1: entered promiscuous mode
[  583.766333][T14365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  583.776496][ T6512] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  583.778181][T14365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  583.786002][ T6512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.811811][ T6512] usb 4-1: Product: syz
[  583.816093][ T6512] usb 4-1: Manufacturer: syz
[  583.820705][ T6512] usb 4-1: SerialNumber: syz
[  583.825409][ T5732] usb 2-1: Using ep0 maxpacket: 16
[  583.833756][T14365] team0: Port device team_slave_0 added
[  583.841721][ T6512] usb 4-1: config 0 descriptor??
[  583.848160][ T5732] usb 2-1: unable to get BOS descriptor or descriptor too short
[  583.858883][T14365] team0: Port device team_slave_1 added
[  583.867933][ T6512] powermate 4-1:0.0: probe with driver powermate failed with error -5
[  583.876920][ T5732] usb 2-1: config 1 has an invalid interface number: 237 but max is 0
[  583.885709][ T5732] usb 2-1: config 1 has no interface number 0
[  583.898802][ T5732] usb 2-1: config 1 interface 237 has no altsetting 0
[  583.909004][ T5732] usb 2-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed
[  583.919248][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.923810][T14365] batman_adv: batadv0: Adding interface: batadv_slave_0
[  583.936192][ T5732] usb 2-1: Product: syz
[  583.940777][ T5732] usb 2-1: Manufacturer: syz
[  583.948491][T14365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  583.951816][ T5618] Bluetooth: hci5: command tx timeout
[  583.983749][ T5732] usb 2-1: SerialNumber: syz
[  583.991860][T14365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  584.008729][T14365] batman_adv: batadv0: Adding interface: batadv_slave_1
[  584.015756][T14365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  584.042202][T14365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  584.120562][T14365] hsr_slave_0: entered promiscuous mode
[  584.142858][T14365] hsr_slave_1: entered promiscuous mode
[  584.149143][T14365] debugfs: 'hsr0' already exists in 'hsr'
[  584.155371][T14365] Cannot create hsr debugfs directory
[  584.159268][ T5802] usb 4-1: USB disconnect, device number 23
[  584.510659][T14454] input: syz0 as /devices/virtual/input/input64
[  585.028978][   T30] audit: type=1400 audit(2000000262.100:9554): avc:  denied  { write } for  pid=14455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  585.163455][T14472] input: syz0 as /devices/virtual/input/input65
[  585.205084][   T30] audit: type=1400 audit(2000000262.270:9555): avc:  denied  { write } for  pid=14479 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  586.058357][ T5618] Bluetooth: hci5: command tx timeout
[  586.100613][ T5732] ipaq 2-1:1.237: PocketPC PDA converter detected
[  586.111980][ T5732] ipaq 2-1:1.237: probe with driver ipaq failed with error -71
[  586.172620][ T5732] usb 2-1: USB disconnect, device number 56
[  586.231594][ T6512] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  586.316267][   T30] audit: type=1400 audit(2000000263.380:9556): avc:  denied  { write } for  pid=14487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  586.396077][ T6512] usb 4-1: Using ep0 maxpacket: 16
[  586.409773][ T6512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  586.448611][ T6512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  586.475539][   T30] audit: type=1400 audit(2000000263.540:9557): avc:  denied  { write } for  pid=14502 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  586.502367][ T6512] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  586.539246][ T6512] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  586.555241][   T30] audit: type=1400 audit(2000000263.550:9558): avc:  denied  { setattr } for  pid=14503 comm="syz.1.1641" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  586.583615][ T6512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.608241][ T6512] usb 4-1: config 0 descriptor??
[  586.950766][T14516] netlink: 872 bytes leftover after parsing attributes in process `syz.0.1644'.
[  587.002449][T14516] netlink: 872 bytes leftover after parsing attributes in process `syz.0.1644'.
[  587.046177][T14495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  587.061798][ T5732] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  587.116296][T14495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  587.229769][ T6512] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  587.276428][ T6512] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  587.296594][ T5732] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  587.318847][ T6512] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  587.331701][ T5732] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  587.357755][ T6512] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  587.386573][ T5732] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  587.405313][ T6512] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  587.421257][ T5732] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  587.451088][ T6512] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  587.457004][T14365] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  587.468957][ T5732] usb 2-1: Manufacturer: syz
[  587.477445][ T6512] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  587.495668][ T5732] usb 2-1: config 0 descriptor??
[  587.514841][ T6512] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  587.521306][T14365] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  587.540344][ T6512] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  587.557816][ T6512] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  587.561430][T14365] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  587.586510][ T6512] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0010/input/input66
[  587.614444][T14365] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  587.638931][   T30] audit: type=1400 audit(2000000264.710:9559): avc:  denied  { write } for  pid=14511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  587.646365][T14365] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  587.775674][T14365] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  587.820226][T14365] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  588.071147][T14365] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  588.099789][ T6512] input input66: event field not found
[  588.122167][   T30] audit: type=1400 audit(2000000265.170:9560): avc:  denied  { write } for  pid=14533 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  588.129621][ T5618] Bluetooth: hci5: command tx timeout
[  588.247422][ T6512] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  588.293441][T14365] 8021q: adding VLAN 0 to HW filter on device bond0
[  588.314624][T14365] 8021q: adding VLAN 0 to HW filter on device team0
[  588.344069][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.351203][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  588.402840][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.409995][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.504577][T14551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.517205][T14551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.666484][   T30] audit: type=1400 audit(2000000265.740:9561): avc:  denied  { write } for  pid=14543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  588.837124][   T30] audit: type=1400 audit(2000000265.910:9562): avc:  denied  { write } for  pid=14562 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  588.921587][ T6512] usb 4-1: reset high-speed USB device number 24 using dummy_hcd
[  589.118997][T14571] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1647'.
[  589.156235][T14571] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1647'.
[  589.310834][T14365] 8021q: adding VLAN 0 to HW filter on device batadv0
[  589.499452][   T30] audit: type=1400 audit(2000000266.570:9563): avc:  denied  { write } for  pid=14566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  589.696339][   T30] audit: type=1400 audit(2000000266.770:9564): avc:  denied  { write } for  pid=14591 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  589.847832][T11800] usb 2-1: USB disconnect, device number 57
[  589.913271][T14365] veth0_vlan: entered promiscuous mode
[  589.953359][T14365] veth1_vlan: entered promiscuous mode
[  590.018369][T14365] veth0_macvtap: entered promiscuous mode
[  590.037351][T14365] veth1_macvtap: entered promiscuous mode
[  590.080230][T14365] batman_adv: batadv0: Interface activated: batadv_slave_0
[  590.115106][T14365] batman_adv: batadv0: Interface activated: batadv_slave_1
[  590.223106][ T8213] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  590.262362][   T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  590.358556][   T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  590.387490][ T6512] usb 4-1: device descriptor read/64, error -71
[  590.403928][   T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  590.438109][ T8213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  590.453015][ T8213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  590.484999][T14607] input: syz0 as /devices/virtual/input/input67
[  590.494203][   T30] audit: type=1400 audit(2000000267.570:9565): avc:  denied  { write } for  pid=14596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  590.535147][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  590.554352][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  590.682141][ T6512] usb 4-1: reset high-speed USB device number 24 using dummy_hcd
[  590.749818][   T30] audit: type=1400 audit(2000000267.820:9566): avc:  denied  { write } for  pid=14614 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  590.841287][T14619] CUSE: DEVNAME unspecified
[  590.882510][ T6512] usb 4-1: device firmware changed
[  590.926267][ T5712] usb 4-1: USB disconnect, device number 24
[  591.010600][ T5712] input input66: event field not found
[  591.740776][ T5712] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  591.972206][ T5712] usb 4-1: Using ep0 maxpacket: 16
[  591.999501][ T5712] usb 4-1: unable to get BOS descriptor or descriptor too short
[  592.039656][ T5712] usb 4-1: config 1 has an invalid interface number: 237 but max is 0
[  592.085518][ T5712] usb 4-1: config 1 has no interface number 0
[  592.111248][ T5712] usb 4-1: config 1 interface 237 has no altsetting 0
[  592.131192][   T30] audit: type=1400 audit(2000000269.190:9567): avc:  denied  { write } for  pid=14623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  592.187923][ T5712] usb 4-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed
[  592.202140][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.226529][ T5712] usb 4-1: Product: syz
[  592.241008][ T5712] usb 4-1: Manufacturer: syz
[  592.271331][ T5712] usb 4-1: SerialNumber: syz
[  594.476287][ T5712] ipaq 4-1:1.237: PocketPC PDA converter detected
[  594.632990][ T5712] ipaq 4-1:1.237: probe with driver ipaq failed with error -71
[  594.895470][ T5712] usb 4-1: USB disconnect, device number 25
[  595.155137][   T30] audit: type=1400 audit(2000000272.180:9568): avc:  denied  { write } for  pid=14665 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  595.363548][T14680] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1664'.
[  595.380907][T14680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1664'.
[  595.390663][T14680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1664'.
[  595.504601][   T29] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  595.651606][ T5712] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  595.664719][   T30] audit: type=1800 audit(2000000272.740:9569): pid=14689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1664" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  595.788466][   T30] audit: type=1400 audit(2000000272.860:9570): avc:  denied  { write } for  pid=14678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  595.791601][   T29] usb 7-1: Using ep0 maxpacket: 8
[  595.820729][ T5712] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  595.855251][ T5712] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  595.864974][   T29] usb 7-1: unable to get BOS descriptor or descriptor too short
[  595.874285][ T5712] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  595.874732][   T29] usb 7-1: config 117 has an invalid interface number: 162 but max is 0
[  595.883800][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.913814][   T29] usb 7-1: config 117 has no interface number 0
[  595.915834][T14677] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  595.940120][   T29] usb 7-1: config 117 interface 162 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  595.991824][   T29] usb 7-1: New USB device found, idVendor=0743, idProduct=1600, bcdDevice=5d.24
[  595.992032][ T5712] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  596.019901][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.022951][   T30] audit: type=1400 audit(2000000273.090:9571): avc:  denied  { write } for  pid=14696 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  596.101662][   T29] usb 7-1: Product: syz
[  596.127257][   T29] usb 7-1: Manufacturer: syz
[  596.147767][   T29] usb 7-1: SerialNumber: syz
[  596.265747][T14698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.276166][T14698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.577274][T14675] veth0: entered promiscuous mode
[  596.751301][T14675] veth0: left promiscuous mode
[  598.314251][    T9] usb 4-1: USB disconnect, device number 26
[  599.869873][   T29] usb 7-1: USB disconnect, device number 57
[  600.819528][T14737] netlink: Unknown nat attribute (0)
[  600.848383][T14737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.849944][T14735] input: syz0 as /devices/virtual/input/input68
[  600.901149][   T30] audit: type=1400 audit(2000000277.970:9572): avc:  denied  { write } for  pid=14710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  601.021621][    T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  601.070707][   T30] audit: type=1400 audit(2000000278.140:9573): avc:  denied  { write } for  pid=14742 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  601.181589][    T9] usb 4-1: Using ep0 maxpacket: 8
[  601.191408][    T9] usb 4-1: config 0 has an invalid interface number: 200 but max is 0
[  601.221622][    T9] usb 4-1: config 0 has no interface number 0
[  601.240299][    T9] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88
[  601.314628][    T9] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0
[  601.383139][    T9] usb 4-1: config 0 interface 200 has no altsetting 0
[  601.419813][    T9] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  601.643180][ T6512] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[  601.734047][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.757578][    T9] usb 4-1: Product: syz
[  601.778013][    T9] usb 4-1: Manufacturer: syz
[  601.800538][    T9] usb 4-1: SerialNumber: syz
[  601.833457][    T9] usb 4-1: config 0 descriptor??
[  601.891594][ T6512] usb 7-1: Using ep0 maxpacket: 8
[  601.904011][ T6512] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  601.924889][ T6512] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  601.939659][ T6512] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  601.967971][ T6512] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  601.991078][ T6512] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  602.014996][ T6512] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  602.028777][ T6512] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.262896][ T6512] usb 7-1: usb_control_msg returned -32
[  602.276062][ T6512] usbtmc 7-1:16.0: can't read capabilities
[  602.385046][   T30] audit: type=1400 audit(2000000279.460:9574): avc:  denied  { write } for  pid=14748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  602.596241][   T30] audit: type=1400 audit(2000000279.660:9575): avc:  denied  { write } for  pid=14775 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  602.819436][T14784] netlink: 'syz.1.1682': attribute type 1 has an invalid length.
[  602.849331][T14784] bond2: entered promiscuous mode
[  602.854423][T14784] bond2: entered allmulticast mode
[  602.860523][T14784] 8021q: adding VLAN 0 to HW filter on device bond2
[  602.929200][T14784] bridge1: entered promiscuous mode
[  602.934950][T14784] bridge1: entered allmulticast mode
[  602.942162][T14784] bond2: (slave bridge1): Enslaving as a backup interface with an up link
[  603.115715][   T36] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  603.435274][T10932] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  603.463019][T14797] loop5: detected capacity change from 0 to 524287999
[  603.474305][    T9] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input69
[  603.521063][    T9] usb 4-1: USB disconnect, device number 27
[  603.586610][T14788] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90
[  603.749938][   T30] audit: type=1400 audit(2000000280.820:9576): avc:  denied  { write } for  pid=14781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  603.949975][   T30] audit: type=1400 audit(2000000281.020:9577): avc:  denied  { write } for  pid=14813 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  604.121713][   T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  604.291776][   T29] usb 6-1: Using ep0 maxpacket: 8
[  604.316481][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  604.350539][   T29] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  604.410171][   T29] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  604.441276][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.489288][   T29] usb 6-1: Product: syz
[  604.507789][   T29] usb 6-1: Manufacturer: syz
[  604.528911][   T29] usb 6-1: SerialNumber: syz
[  604.557324][   T29] usb 6-1: config 0 descriptor??
[  604.615264][T11800] usb 7-1: USB disconnect, device number 58
[  604.727028][T14831] bond3: entered allmulticast mode
[  604.778402][   T30] audit: type=1400 audit(2000000281.850:9578): avc:  denied  { write } for  pid=14819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  604.837880][T14841] xt_hashlimit: size too large, truncated to 1048576
[  604.881365][T14811] wlan0 speed is unknown, defaulting to 1000
[  606.091011][   T30] audit: type=1400 audit(2000000283.160:9579): avc:  denied  { write } for  pid=14849 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  606.181782][T11800] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[  606.342744][T11800] usb 7-1: Using ep0 maxpacket: 8
[  606.359665][T11800] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  606.380290][T11800] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  606.413233][T11800] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  606.445611][T11800] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  606.465818][T11800] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  606.491684][T11800] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  606.510930][T11800] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.559753][   T29] usb 6-1: USB disconnect, device number 2
[  606.743545][T11800] usb 7-1: usb_control_msg returned -32
[  606.752097][ T7449] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.772836][T11800] usbtmc 7-1:16.0: can't read capabilities
[  606.788971][   T30] audit: type=1400 audit(2000000283.860:9580): avc:  denied  { write } for  pid=14853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  606.931312][T14860] bond3 (unregistering): Released all slaves
[  606.991964][   T30] audit: type=1400 audit(2000000284.060:9581): avc:  denied  { write } for  pid=14873 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  607.037280][T13041] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  607.059607][T13041] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  607.078940][T13041] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  607.101400][T13041] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  607.111337][T13041] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  607.214719][T14882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  607.243952][T14882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  607.248897][ T7449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.288146][T14877] usbtmc 7-1:16.0: usb_bulk_msg returned -71
[  607.421240][ T7449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.445844][T14896] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1695'.
[  607.514120][    T9] usb 7-1: USB disconnect, device number 59
[  607.543678][ T7449] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.558993][T14901] FAULT_INJECTION: forcing a failure.
[  607.558993][T14901] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  607.577048][T14901] CPU: 0 UID: 0 PID: 14901 Comm: syz.5.1701 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  607.577076][T14901] Tainted: [L]=SOFTLOCKUP
[  607.577082][T14901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  607.577092][T14901] Call Trace:
[  607.577098][T14901]  <TASK>
[  607.577105][T14901]  dump_stack_lvl+0x100/0x190
[  607.577132][T14901]  should_fail_ex.cold+0x5/0xa
[  607.577152][T14901]  ? prepare_alloc_pages+0x16d/0x5f0
[  607.577179][T14901]  should_fail_alloc_page+0xeb/0x140
[  607.577204][T14901]  prepare_alloc_pages+0x1f0/0x5f0
[  607.577227][T14901]  ? stack_trace_save+0x8e/0xc0
[  607.577249][T14901]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  607.577271][T14901]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  607.577293][T14901]  ? kasan_save_track+0x14/0x30
[  607.577319][T14901]  ? __lock_acquire+0x49f/0x1a40
[  607.577344][T14901]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  607.577370][T14901]  ? __lock_acquire+0x49f/0x1a40
[  607.577409][T14901]  ? __lock_acquire+0x49f/0x1a40
[  607.577430][T14901]  ? find_held_lock+0x2b/0x80
[  607.577446][T14901]  ? xa_load+0x149/0x2c0
[  607.577471][T14901]  ? xa_load+0x149/0x2c0
[  607.577496][T14901]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  607.577519][T14901]  ? policy_nodemask+0xed/0x4f0
[  607.577545][T14901]  alloc_pages_mpol+0x1fb/0x540
[  607.577570][T14901]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  607.577601][T14901]  alloc_pages_noprof+0x1a/0x160
[  607.577629][T14901]  pte_alloc_one+0x1c/0x3d0
[  607.577648][T14901]  do_huge_pmd_anonymous_page+0x2bf/0x1530
[  607.577670][T14901]  ? _raw_spin_unlock+0x28/0x50
[  607.577688][T14901]  ? __pmd_alloc+0x3fb/0x950
[  607.577715][T14901]  __handle_mm_fault+0x239e/0x2a00
[  607.577747][T14901]  ? mt_find+0x45e/0x8e0
[  607.577773][T14901]  ? __pfx___handle_mm_fault+0x10/0x10
[  607.577798][T14901]  ? __pfx_mt_find+0x10/0x10
[  607.577835][T14901]  ? find_vma+0xbf/0x140
[  607.577856][T14901]  ? __pfx_find_vma+0x10/0x10
[  607.577880][T14901]  handle_mm_fault+0x37b/0xa30
[  607.577912][T14901]  do_user_addr_fault+0x74c/0x12f0
[  607.577946][T14901]  exc_page_fault+0x6f/0xd0
[  607.577967][T14901]  asm_exc_page_fault+0x26/0x30
[  607.577985][T14901] RIP: 0010:rep_movs_alternative+0x33/0xa0
[  607.578011][T14901] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 9e 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb
[  607.578028][T14901] RSP: 0018:ffffc90006a87d80 EFLAGS: 00050212
[  607.578044][T14901] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000000010
[  607.578055][T14901] RDX: 0000000000000001 RSI: ffffc90006a87de0 RDI: 0000200000000100
[  607.578066][T14901] RBP: 0000200000000100 R08: 0000000000000000 R09: fffff52000d50fbd
[  607.578077][T14901] R10: ffffc90006a87def R11: 0000000000000000 R12: ffffc90006a87de0
[  607.578088][T14901] R13: 0000200000000110 R14: 00007ffffffff000 R15: 0000000000000000
[  607.578112][T14901]  _copy_to_user+0xa4/0xd0
[  607.578139][T14901]  put_itimerspec64+0xbd/0x1e0
[  607.578161][T14901]  ? __pfx_put_itimerspec64+0x10/0x10
[  607.578185][T14901]  ? do_timerfd_gettime+0x24b/0x3c0
[  607.578217][T14901]  __x64_sys_timerfd_gettime+0x142/0x180
[  607.578236][T14901]  ? __pfx___x64_sys_timerfd_gettime+0x10/0x10
[  607.578253][T14901]  ? ksys_write+0x1ac/0x250
[  607.578289][T14901]  do_syscall_64+0x115/0x870
[  607.578310][T14901]  ? clear_bhb_loop+0x40/0x90
[  607.578331][T14901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.578349][T14901] RIP: 0033:0x7fdb6619e019
[  607.578365][T14901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  607.578381][T14901] RSP: 002b:00007fdb670d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000011f
[  607.578402][T14901] RAX: ffffffffffffffda RBX: 00007fdb66425fa0 RCX: 00007fdb6619e019
[  607.578413][T14901] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  607.578423][T14901] RBP: 00007fdb670d4090 R08: 0000000000000000 R09: 0000000000000000
[  607.578434][T14901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  607.578444][T14901] R13: 00007fdb66426038 R14: 00007fdb66425fa0 R15: 00007ffde8049958
[  607.578469][T14901]  </TASK>
[  608.065185][   T30] audit: type=1400 audit(2000000285.090:9582): avc:  denied  { write } for  pid=14878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  608.122687][   T30] audit: type=1400 audit(2000000285.190:9583): avc:  denied  { write } for  pid=14911 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  608.654920][ T5792] usb 1-1: emi26_load_firmware - request_firmware() failed
[  608.683930][ T5792] usb 1-1: emi26_load_firmware - error loading firmware: error = -110
[  608.719861][T14874] wlan0 speed is unknown, defaulting to 1000
[  608.720478][ T5792] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[  608.810503][ T5792] usb 1-1: USB disconnect, device number 58
[  609.037987][ T7449] bridge_slave_1: left allmulticast mode
[  609.068831][ T7449] bridge_slave_1: left promiscuous mode
[  609.115752][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.151859][ T5792] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  609.160035][ T5618] Bluetooth: hci4: command tx timeout
[  609.264105][ T7449] bridge_slave_0: left allmulticast mode
[  609.275775][ T7449] bridge_slave_0: left promiscuous mode
[  609.288852][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.560408][ T5792] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  609.615213][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.666076][ T5792] usb 1-1: can't set config #1, error -71
[  609.704696][ T5792] usb 1-1: USB disconnect, device number 59
[  609.903302][   T30] audit: type=1400 audit(2000000286.960:9584): avc:  denied  { write } for  pid=14932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  610.127827][   T30] audit: type=1400 audit(2000000287.200:9585): avc:  denied  { write } for  pid=14967 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  610.150473][ T7449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  610.193536][ T7449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  610.334169][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  610.349428][ T7449] bond0 (unregistering): Released all slaves
[  610.840610][T14923] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.891603][    T9] usb 6-1: Using ep0 maxpacket: 16
[  610.902900][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  610.914023][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  610.923850][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  610.944485][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  610.953555][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.975462][    T9] usb 6-1: config 0 descriptor??
[  610.996505][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1
[  611.231696][ T5618] Bluetooth: hci4: command tx timeout
[  611.258949][T14923] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.422679][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  611.433631][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  611.443548][    T9] usb 6-1: USB disconnect, device number 3
[  612.060330][   T30] audit: type=1400 audit(2000000289.110:9586): avc:  denied  { write } for  pid=14982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  612.181400][T14923] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.219924][   T30] audit: type=1400 audit(2000000289.290:9587): avc:  denied  { write } for  pid=15008 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  612.486534][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2
[  612.533331][T15018] FAULT_INJECTION: forcing a failure.
[  612.533331][T15018] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  612.577680][T15018] CPU: 1 UID: 0 PID: 15018 Comm: syz.5.1719 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  612.577711][T15018] Tainted: [L]=SOFTLOCKUP
[  612.577717][T15018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  612.577728][T15018] Call Trace:
[  612.577746][T15018]  <TASK>
[  612.577755][T15018]  dump_stack_lvl+0x100/0x190
[  612.577788][T15018]  should_fail_ex.cold+0x5/0xa
[  612.577812][T15018]  _copy_from_user+0x2e/0xd0
[  612.577840][T15018]  kstrtouint_from_user+0xd6/0x1d0
[  612.577860][T15018]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  612.577879][T15018]  ? __lock_acquire+0x49f/0x1a40
[  612.577922][T15018]  proc_fail_nth_write+0x83/0x220
[  612.577957][T15018]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  612.577992][T15018]  vfs_write+0x2aa/0x1050
[  612.578022][T15018]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  612.578052][T15018]  ? __pfx_vfs_write+0x10/0x10
[  612.578086][T15018]  ? __fget_files+0x215/0x3d0
[  612.578111][T15018]  ? __fget_files+0x21f/0x3d0
[  612.578137][T15018]  ksys_write+0x12a/0x250
[  612.578164][T15018]  ? __pfx_ksys_write+0x10/0x10
[  612.578200][T15018]  do_syscall_64+0x115/0x870
[  612.578223][T15018]  ? clear_bhb_loop+0x40/0x90
[  612.578246][T15018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.578266][T15018] RIP: 0033:0x7fdb6615e84e
[  612.578282][T15018] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  612.578299][T15018] RSP: 002b:00007fdb670d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  612.578317][T15018] RAX: ffffffffffffffda RBX: 00007fdb670d46c0 RCX: 00007fdb6615e84e
[  612.578330][T15018] RDX: 0000000000000001 RSI: 00007fdb670d40a0 RDI: 0000000000000005
[  612.578341][T15018] RBP: 00007fdb670d4090 R08: 0000000000000000 R09: 0000000000000000
[  612.578353][T15018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  612.578364][T15018] R13: 00007fdb66426038 R14: 00007fdb66425fa0 R15: 00007ffde8049958
[  612.578389][T15018]  </TASK>
[  612.796491][T14923] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.824882][T14874] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.832178][T14874] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.839317][T14874] bridge_slave_0: entered allmulticast mode
[  613.074229][T14874] bridge_slave_0: entered promiscuous mode
[  613.123380][T14874] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.130840][T14874] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.189280][T14874] bridge_slave_1: entered allmulticast mode
[  613.298107][T14874] bridge_slave_1: entered promiscuous mode
[  613.311636][ T5618] Bluetooth: hci4: command tx timeout
[  613.460314][T15029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1722'.
[  613.666906][T14874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  614.307001][T14874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  614.567952][   T30] audit: type=1400 audit(2000000291.640:9588): avc:  denied  { map } for  pid=15043 comm="syz.0.1725" path="socket:[53785]" dev="sockfs" ino=53785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  614.715759][ T7449] hsr_slave_0: left promiscuous mode
[  614.763698][   T30] audit: type=1326 audit(2000000291.840:9589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.0.1726" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87f8f9e019 code=0x0
[  614.828380][ T7449] hsr_slave_1: left promiscuous mode
[  614.848945][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  614.858768][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  615.073773][   T30] audit: type=1800 audit(2000000291.930:9590): pid=15051 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1727" name="p_srate" dev="configfs" ino=53811 res=0 errno=0
[  615.107670][ T5792] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  615.266008][   T30] audit: type=1400 audit(2000000292.340:9591): avc:  denied  { write } for  pid=15031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  615.336490][ T5792] usb 6-1: config 2 has an invalid interface number: 43 but max is 0
[  615.357236][ T5792] usb 6-1: config 2 has no interface number 0
[  615.379623][ T5792] usb 6-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[  615.401066][ T5618] Bluetooth: hci4: command tx timeout
[  615.435103][ T5792] usb 6-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8
[  615.472543][ T5792] usb 6-1: config 2 interface 43 has no altsetting 0
[  615.500973][ T5792] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  615.520478][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.586883][ T5792] usb 6-1: Product: syz
[  615.611445][ T5792] usb 6-1: Manufacturer: syz
[  615.636065][ T5792] usb 6-1: SerialNumber: syz
[  615.715819][T15051] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  615.727435][T15051] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  615.747925][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  615.750342][   T30] audit: type=1400 audit(2000000292.820:9592): avc:  denied  { append } for  pid=15063 comm="syz.0.1729" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  615.761579][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_1
[  615.797132][ T7449] veth1_macvtap: left promiscuous mode
[  615.805172][ T7449] veth0_macvtap: left promiscuous mode
[  615.810764][ T7449] veth1_vlan: left promiscuous mode
[  615.816045][ T7449] veth0_vlan: left promiscuous mode
[  615.945960][   T30] audit: type=1400 audit(2000000293.010:9593): avc:  denied  { write } for  pid=15062 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  616.030768][T15065] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  616.085433][ T7449] team0 (unregistering): Port device team_slave_1 removed
[  616.098007][ T7449] team0 (unregistering): Port device team_slave_0 removed
[  616.120178][T15051] ==================================================================
[  616.128248][T15051] BUG: KASAN: invalid-free in f_uac2_opts_p_srate_store+0x1d4/0x260
[  616.136238][T15051] Free of addr ffff88807e232103 by task syz.5.1727/15051
[  616.143254][T15051] 
[  616.145575][T15051] CPU: 0 UID: 0 PID: 15051 Comm: syz.5.1727 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  616.145604][T15051] Tainted: [L]=SOFTLOCKUP
[  616.145611][T15051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  616.145623][T15051] Call Trace:
[  616.145630][T15051]  <TASK>
[  616.145637][T15051]  dump_stack_lvl+0x100/0x190
[  616.145662][T15051]  print_report+0x13d/0x4b0
[  616.145689][T15051]  ? __virt_addr_valid+0x239/0x430
[  616.145714][T15051]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  616.145741][T15051]  kasan_report_invalid_free+0xb8/0x190
[  616.145765][T15051]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  616.145791][T15051]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  616.145815][T15051]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  616.145838][T15051]  check_slab_allocation+0xe1/0xf0
[  616.145857][T15051]  ? f_uac2_opts_p_srate_store+0x130/0x260
[  616.145882][T15051]  kfree+0x1b6/0x6c0
[  616.145906][T15051]  ? __asan_memcpy+0x3c/0x60
[  616.145935][T15051]  f_uac2_opts_p_srate_store+0x1d4/0x260
[  616.145961][T15051]  ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10
[  616.145988][T15051]  ? configfs_write_iter+0x388/0x4e0
[  616.146011][T15051]  configfs_write_iter+0x302/0x4e0
[  616.146032][T15051]  do_iter_readv_writev+0x6f7/0x930
[  616.146058][T15051]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  616.146087][T15051]  vfs_writev+0x360/0xdd0
[  616.146113][T15051]  ? __pfx_vfs_writev+0x10/0x10
[  616.146143][T15051]  ? __fget_files+0x21f/0x3d0
[  616.146164][T15051]  ? do_pwritev+0x1ac/0x270
[  616.146187][T15051]  do_pwritev+0x1ac/0x270
[  616.146210][T15051]  ? __pfx_do_pwritev+0x10/0x10
[  616.146236][T15051]  do_syscall_64+0x115/0x870
[  616.146257][T15051]  ? clear_bhb_loop+0x40/0x90
[  616.146278][T15051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.146296][T15051] RIP: 0033:0x7fdb6619e019
[  616.146311][T15051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  616.146329][T15051] RSP: 002b:00007fdb670d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
[  616.146349][T15051] RAX: ffffffffffffffda RBX: 00007fdb66425fa0 RCX: 00007fdb6619e019
[  616.146363][T15051] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003
[  616.146374][T15051] RBP: 00007fdb6623500c R08: 000000007fffffff R09: 0000000000000000
[  616.146393][T15051] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000000
[  616.146404][T15051] R13: 00007fdb66426038 R14: 00007fdb66425fa0 R15: 00007ffde8049958
[  616.146424][T15051]  </TASK>
[  616.146431][T15051] 
[  616.392488][T15051] Allocated by task 15051:
[  616.396880][T15051]  kasan_save_stack+0x30/0x50
[  616.401547][T15051]  kasan_save_track+0x14/0x30
[  616.406206][T15051]  __kasan_kmalloc+0xaa/0xb0
[  616.410778][T15051]  __kmalloc_node_track_caller_noprof+0x331/0x830
[  616.417178][T15051]  kstrdup+0x51/0xe0
[  616.421055][T15051]  f_uac2_opts_p_srate_store+0x113/0x260
[  616.426673][T15051]  configfs_write_iter+0x302/0x4e0
[  616.431766][T15051]  do_iter_readv_writev+0x6f7/0x930
[  616.436951][T15051]  vfs_writev+0x360/0xdd0
[  616.441265][T15051]  do_pwritev+0x1ac/0x270
[  616.445583][T15051]  do_syscall_64+0x115/0x870
[  616.450155][T15051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.456035][T15051] 
[  616.458337][T15051] The buggy address belongs to the object at ffff88807e232100
[  616.458337][T15051]  which belongs to the cache kmalloc-128 of size 128
[  616.472365][T15051] The buggy address is located 3 bytes inside of
[  616.472365][T15051]  119-byte region [ffff88807e232100, ffff88807e232177)
[  616.485443][T15051] 
[  616.487756][T15051] The buggy address belongs to the physical page:
[  616.494143][T15051] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e232
[  616.502894][T15051] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  616.509981][T15051] page_type: f5(slab)
[  616.513942][T15051] raw: 00fff00000000000 ffff88813fe23a00 dead000000000100 dead000000000122
[  616.522507][T15051] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  616.531062][T15051] page dumped because: kasan: bad access detected
[  616.537446][T15051] page_owner tracks the page as allocated
[  616.543137][T15051] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4971, tgid 4971 (S02sysctl), ts 20148101225, free_ts 20147986296
[  616.563608][T15051]  post_alloc_hook+0xfd/0x120
[  616.568275][T15051]  get_page_from_freelist+0xf48/0x3530
[  616.573714][T15051]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  616.579585][T15051]  new_slab+0xa2/0x640
[  616.583645][T15051]  refill_objects+0xe3/0x410
[  616.588215][T15051]  __pcs_replace_empty_main+0x376/0x680
[  616.593748][T15051]  __kmalloc_noprof+0x66d/0x820
[  616.598578][T15051]  lsm_blob_alloc+0x68/0x90
[  616.603064][T15051]  security_task_alloc+0x2a/0x260
[  616.608080][T15051]  copy_process+0x2b94/0x8030
[  616.612743][T15051]  kernel_clone+0x176/0x9d0
[  616.617330][T15051]  __do_sys_clone+0xd9/0x120
[  616.621905][T15051]  do_syscall_64+0x115/0x870
[  616.626478][T15051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.632353][T15051] page last free pid 4971 tgid 4971 stack trace:
[  616.638654][T15051]  __free_frozen_pages+0x79f/0x1090
[  616.643849][T15051]  __kasan_populate_vmalloc+0x164/0x210
[  616.649378][T15051]  alloc_vmap_area+0x95d/0x2bb0
[  616.654208][T15051]  __get_vm_area_node+0x1ca/0x330
[  616.659213][T15051]  __vmalloc_node_range_noprof+0x228/0x1630
[  616.665092][T15051]  __vmalloc_node_noprof+0xad/0xf0
[  616.670203][T15051]  copy_process+0x7fb/0x8030
[  616.674785][T15051]  kernel_clone+0x176/0x9d0
[  616.679271][T15051]  __do_sys_clone+0xd9/0x120
[  616.683844][T15051]  do_syscall_64+0x115/0x870
[  616.688417][T15051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.694290][T15051] 
[  616.696594][T15051] Memory state around the buggy address:
[  616.702210][T15051]  ffff88807e232000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05
[  616.710250][T15051]  ffff88807e232080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  616.718289][T15051] >ffff88807e232100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 fc
[  616.726324][T15051]                    ^
[  616.730368][T15051]  ffff88807e232180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  616.738415][T15051]  ffff88807e232200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  616.746464][T15051] ==================================================================
[  616.815541][T15051] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  616.822755][T15051] CPU: 1 UID: 0 PID: 15051 Comm: syz.5.1727 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  616.833680][T15051] Tainted: [L]=SOFTLOCKUP
[  616.837978][T15051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  616.848017][T15051] Call Trace:
[  616.851280][T15051]  <TASK>
[  616.854197][T15051]  dump_stack_lvl+0x100/0x190
[  616.858850][T15051]  vpanic+0x552/0x970
[  616.862805][T15051]  ? __pfx_vpanic+0x10/0x10
[  616.867293][T15051]  panic+0xd1/0xe0
[  616.870996][T15051]  ? __pfx_panic+0x10/0x10
[  616.875408][T15051]  ? preempt_schedule_common+0x42/0xc0
[  616.880855][T15051]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  616.886652][T15051]  check_panic_on_warn.cold+0x19/0x34
[  616.892004][T15051]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  616.897785][T15051]  end_report.part.0+0x3a/0x90
[  616.902537][T15051]  kasan_report_invalid_free.cold+0xd/0x12
[  616.908323][T15051]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  616.914108][T15051]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  616.919889][T15051]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  616.925675][T15051]  check_slab_allocation+0xe1/0xf0
[  616.930762][T15051]  ? f_uac2_opts_p_srate_store+0x130/0x260
[  616.936543][T15051]  kfree+0x1b6/0x6c0
[  616.940434][T15051]  ? __asan_memcpy+0x3c/0x60
[  616.945006][T15051]  f_uac2_opts_p_srate_store+0x1d4/0x260
[  616.950629][T15051]  ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10
[  616.956765][T15051]  ? configfs_write_iter+0x388/0x4e0
[  616.962035][T15051]  configfs_write_iter+0x302/0x4e0
[  616.967121][T15051]  do_iter_readv_writev+0x6f7/0x930
[  616.972300][T15051]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  616.978000][T15051]  vfs_writev+0x360/0xdd0
[  616.982318][T15051]  ? __pfx_vfs_writev+0x10/0x10
[  616.987188][T15051]  ? __fget_files+0x21f/0x3d0
[  616.991861][T15051]  ? do_pwritev+0x1ac/0x270
[  616.996375][T15051]  do_pwritev+0x1ac/0x270
[  617.000698][T15051]  ? __pfx_do_pwritev+0x10/0x10
[  617.005543][T15051]  do_syscall_64+0x115/0x870
[  617.010118][T15051]  ? clear_bhb_loop+0x40/0x90
[  617.014777][T15051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.020646][T15051] RIP: 0033:0x7fdb6619e019
[  617.025043][T15051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  617.044624][T15051] RSP: 002b:00007fdb670d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
[  617.053017][T15051] RAX: ffffffffffffffda RBX: 00007fdb66425fa0 RCX: 00007fdb6619e019
[  617.060966][T15051] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003
[  617.068911][T15051] RBP: 00007fdb6623500c R08: 000000007fffffff R09: 0000000000000000
[  617.076855][T15051] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000000
[  617.084799][T15051] R13: 00007fdb66426038 R14: 00007fdb66425fa0 R15: 00007ffde8049958
[  617.092757][T15051]  </TASK>
[  617.095962][T15051] Kernel Offset: disabled
[  617.100272][T15051] Rebooting in 86400 seconds..