last executing test programs:

12m43.025135202s ago: executing program 32 (id=494):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)

12m4.933212144s ago: executing program 33 (id=590):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async)
r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b1", 0x4, 0xfffffffffffffffe) (async)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async, rerun: 32)
r5 = socket$inet(0x2, 0x2, 0x0) (rerun: 32)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1})
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff}) (async)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$inet(0x2, 0x800, 0x1) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x803, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES16=r0], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [<r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) (async, rerun: 64)
pipe2(0x0, 0x0) (rerun: 64)
syz_ublk_add_dev(r10, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=<r11=>0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12)
syz_ublk_setup_queues(r13, r11, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

11m31.649472563s ago: executing program 34 (id=670):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x5018, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="226b6a03000000000000000600000000000000010000000000000000ab0b8def000000"])
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff)

10m31.858080606s ago: executing program 35 (id=812):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7d2ccc1a8cedb015}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000081)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1)
syz_genetlink_get_family_id$team(0x0, r4)

8m11.193674809s ago: executing program 36 (id=1170):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0)
ioctl$TIOCSBRK(r0, 0x5427)
mkdirat(r0, &(0x7f0000000440)='./file1\x00', 0x180)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
write$FUSE_CREATE_OPEN(r1, 0x0, 0x0)

7m30.557276385s ago: executing program 37 (id=1304):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x1b5cd000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438)

7m23.919641774s ago: executing program 38 (id=1319):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_pid(r4, &(0x7f0000000240), 0x12)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
socket$unix(0x1, 0x5, 0x0)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r7 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
ftruncate(r7, 0xffff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xad6a, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x404141, 0x0)
fcntl$addseals(r7, 0x409, 0x3)
close(0x3)
ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x1, 0x0, 0x2000})
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r8, &(0x7f00000001c0), 0x8)

6m20.090511754s ago: executing program 9 (id=1514):
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x4}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f0000000c00)=@ublk_get_dev_info_sqe={0x2e, 0x0, 0x0, r1, 0x80207502, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}})
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)
r6 = signalfd4(r0, &(0x7f0000000100)={[0x1]}, 0x8, 0x80800)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
munlockall()
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b702000009000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280"], 0x90}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x8}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r11, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4)
write(r11, &(0x7f0000000040)="a9", 0x1)
r12 = epoll_create(0x402)
r13 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000001480)={0x40000000})
epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000000)={0x10})
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f00000002c0)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000600)={'tunl0\x00', <r14=>0x0, 0x7800, 0x700, 0x60000000, 0x6, {{0x41, 0x4, 0x1, 0x28, 0x104, 0x66, 0x0, 0xa, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0xb, 0x2, [{0x0, 0x2}, {0x0, 0x3, "d4"}]}, @lsrr={0x83, 0x23, 0x44, [@private=0xa010102, @empty, @loopback, @multicast1, @private=0xa010102, @rand_addr=0x64010102, @remote, @empty]}, @timestamp_addr={0x44, 0x4c, 0xe1, 0x1, 0x0, [{@multicast1, 0xfffffff9}, {@broadcast, 0x1bb}, {@multicast1, 0x3}, {@broadcast, 0x1}, {@local, 0xff}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@private=0xa010102, 0x6}, {@multicast1, 0x8000}]}, @generic={0x94, 0xe, "c07b820d29e5b0a92148aa71"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x46, 0x1, 0x7, [{@loopback, 0x4}, {@remote, 0x5}, {@empty, 0x400}, {@multicast2, 0x1}, {@private=0xa010100, 0xfffffff7}, {@broadcast, 0xd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@local, 0x6}]}, @lsrr={0x83, 0x1f, 0xa9, [@multicast2, @empty, @broadcast, @loopback, @private=0xa010101, @broadcast, @multicast2]}]}}}}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000030000000000000006000000b7080000000000007b8af8ff00000000b7080000010100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000018230000", @ANYRES32=r6, @ANYBLOB="0000000003000000850000008500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00f20000bfa25efc393fdf00000000100007020000f8ffffffb703000008000000b7040000010000008500000082000000950000"], &(0x7f0000000500)='GPL\x00', 0xfffffffc, 0xbc, &(0x7f0000000540)=""/188, 0x41100, 0x15, '\x00', r14, 0x1b, r6, 0x8, &(0x7f0000000780)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xb, 0x6, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000800)=[r6], &(0x7f0000000840)=[{0x1, 0x2, 0x4, 0xc}, {0x3, 0x3, 0xf, 0xb}, {0x0, 0x5, 0xa, 0x9}, {0x4, 0x3, 0x6, 0x9}, {0x4, 0x4, 0xc, 0x7}, {0x4, 0x1, 0x3, 0x2}], 0x10, 0x5}, 0x94)

6m19.46857825s ago: executing program 9 (id=1517):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000600)=@FILEID_INO32_GEN={0x8}, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff72}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_io_uring_setup(0x5574, &(0x7f0000000180)={0x0, 0xfffffffd, 0x40, 0x3, 0x17}, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000009c0)=[r3], 0x1)
close(r1)
r4 = dup2(r2, r3)
io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r5, &(0x7f0000000000)='7', 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846})
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0)
io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r6], 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000bc0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

6m18.907797838s ago: executing program 9 (id=1520):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff)
close(r0)
mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff)
mkdir(&(0x7f0000000180)='./config\x00', 0x1ff)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x4e22, 0x8000, 0x4e24, 0x3, 0xa, 0x20, 0x20, 0x33}, {0x80000000, 0x7, 0x8, 0x5, 0xd50, 0x81, 0x2, 0x408}, {0x7, 0x4d, 0x3, 0x4}, 0x85, 0x3, 0x1}, {{@in=@remote, 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x3, 0x0, 0x5, 0x8, 0x1000000}}, 0xe8)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000001280), 0x6)
mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$tipc(0x1e, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0xed, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x13, 0x0, &(0x7f0000000180))
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={<r3=>0xffffffffffffffff, &(0x7f0000000100)=']\x00', 0x12000, &(0x7f00000004c0)={@align=0x100000000, {0x2, 0x8, 0xf177, 0x4037}}, 0x200, &(0x7f0000000500), &(0x7f0000000540)=0x7})
ioctl$SNDCTL_SEQ_RESETSAMPLES(r3, 0x40045109, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000009c0), 0x400000, 0x0)

6m17.645358544s ago: executing program 9 (id=1522):
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x2, &(0x7f0000000380)=@string={0x2}}, {0xf, &(0x7f00000005c0)=@string={0xf, 0x3, "1d882bae5be67582683aaede32"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x3a, &(0x7f00000000c0)=@string={0x3a, 0x3, "69fedeb72973d70d31e3459c2eb5924de429de35d9a8717d504d1abc1ee924c95e0756d207d351951b339b27ab1f7affca859c3ee185f310"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x100c}}]})
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x7, 0x8, r0, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r0}])
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

6m15.198710064s ago: executing program 9 (id=1528):
epoll_create1(0x0)
socket(0x400000000010, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220000d0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00171c000000f9bb1b7974"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x20, 0x13, 0x5, "d4fa5fb9f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xa8, 0x0, 0x0)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)

6m11.983347017s ago: executing program 9 (id=1539):
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@random="c57db783be27", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40001}, 0x50)
fcntl$dupfd(r0, 0x0, r1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="ffff0400377735a78adc90780e2bbee4627cf8c1"], 0xc)

5m56.534349973s ago: executing program 39 (id=1539):
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@random="c57db783be27", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40001}, 0x50)
fcntl$dupfd(r0, 0x0, r1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="ffff0400377735a78adc90780e2bbee4627cf8c1"], 0xc)

5m42.973975806s ago: executing program 1 (id=1610):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xbffffc, 0x7, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
write(r2, &(0x7f0000000400)='PASV\r', 0x5)

5m42.484835736s ago: executing program 1 (id=1611):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001500190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003"], 0x0)

5m40.759503076s ago: executing program 1 (id=1619):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_clone(0xa00, 0x0, 0xfffffffffffffc79, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='cifs\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000180)='environ\x00')
syz_usb_disconnect(0xffffffffffffffff)
pread64(r2, 0x0, 0x48, 0x10000)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000340), 0x11000)
read$FUSE(r5, &(0x7f0000000700)={0x2020}, 0x2020)
syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x7)
r6 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fff, 0x1000000, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
set_mempolicy(0x4000, 0x0, 0x4)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x1ff)

5m37.421262244s ago: executing program 1 (id=1624):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x2}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10)

5m37.174514895s ago: executing program 1 (id=1628):
socket(0x400000000010, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220000d0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00171c000000f9bb1b7974"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x20, 0x13, 0x5, "d4fa5fb9f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xa8, 0x0, 0x0)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)

5m33.49136113s ago: executing program 1 (id=1639):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200543, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_deladdr={0x44, 0x15, 0x4, 0xad, 0x25dfdbff, {0xa, 0x8, 0xc, 0x1a038a60dc50c35d}, [@IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_FLAGS={0x8, 0x8, 0x49d}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x44}}, 0x8040091)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="20e735c5d716254e4502ed95c128b6261ea7a2abad34ac72534ef39bb4395474f40e98ac76069cbec0f0ae3f7175ab2ae8ea921c7160c5301f9113a85e6aff1a5b1304b0474c782cd1132bb1761983e2c53e399d90261ef5015d229a2ee61d3beb93", 0x62}, {&(0x7f0000000200)="9e97126af8ab706a6646ad9db3ba98b916a891d3aa21e6000f676d5b4b5bad8c4906044030ae8263f30cf6cc0797535db2df8974fe644ba304b1fa3d5638309060a84cae6371f1652facdba5372939856c7942c4d2fb4755b541bfd0a43121e1beb0422fa7b3a3c993ed854a1b7b64b1ecb11b62e434307262db81f57b44b2589021c18b963395b841298dca6896ed3c1bf69addce98f7657f214ae227e382f7d454cddeb401699a3e349f395e96288b5539ed37701bd71e65e12fe8717f5fe59dadd1cba34753bed9d23a3c806df866", 0xd0}], 0x2)
r1 = getpid()
syz_open_dev$I2C(&(0x7f0000000340), 0x4, 0x4380)
r2 = syz_open_procfs$namespace(r1, &(0x7f0000000380)='ns/uts\x00')
ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f00000003c0))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000580)={0x0, 0x1, 0x1000})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)={<r3=>0x0, <r4=>0x0})
sched_setscheduler(r4, 0x3, &(0x7f0000000640)=0x7f)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000006c0)=0x3, 0x4)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000700)=[{0xfff7, 0x6, 0x1, 0x8e14}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000780)={r3, 0x0, 0x2})
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x1, 0x5004)
r7 = syz_open_dev$vivid(&(0x7f00000007c0), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000800)={0xc, @sliced={0x3, [0xc348, 0x9, 0x8, 0x7, 0x6, 0x2, 0x3ff, 0xc, 0x80, 0xff01, 0x8000, 0x4, 0xd, 0x0, 0x4, 0x1, 0x4, 0x2, 0x7, 0x331, 0x9, 0x5, 0xff, 0x5c0, 0x6, 0x1, 0x0, 0x8df0, 0xaf, 0x3ff, 0x1000, 0xff, 0x1000, 0x4000, 0x5, 0x5, 0x7, 0x3, 0x2000, 0x0, 0xbd8, 0xffe5, 0x9, 0x0, 0x64b, 0x9, 0x5, 0x7], 0x4}})
r8 = syz_open_procfs(r1, &(0x7f0000000900)='net/snmp6\x00')
ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x8, 0x2002)
ioctl$FE_GET_FRONTEND(r8, 0x80246f4d, &(0x7f0000000940))
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f0000000980)={0x80000000, 0xc, [0x9, 0x100, 0x9]})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000009c0)=<r9=>0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000a80)={<r10=>0x0, 0x1, 0x0, [0x3, 0x0, 0x8, 0xd3, 0xffff], [0x2, 0x3, 0x2, 0x9, 0x800, 0x4, 0x67, 0x8000000000000001, 0x1, 0x5, 0x3d28, 0x200, 0x3, 0xfffffffffffffff8, 0xbd4f, 0x4, 0x1000, 0x5, 0x10001, 0x9, 0x81, 0x3, 0xca1a, 0x1, 0x3, 0x0, 0x4, 0x1, 0x7, 0x8a5, 0x100000000, 0x1, 0x7, 0x3, 0x2, 0xff, 0x670, 0xef, 0xfffffffffffff12f, 0x2, 0x2, 0x6, 0x10001, 0x0, 0x1, 0x7, 0x5, 0x100000000, 0x4bffa38d, 0xff, 0x0, 0x8, 0x1, 0x7, 0x4, 0x6, 0x7, 0xfffffffffffffff4, 0x6, 0x80000000, 0x401, 0x2, 0x1, 0x0, 0x80000001, 0x9, 0x9, 0xfff, 0x6000000000, 0x8, 0x8, 0xc0, 0x3, 0x7fff, 0x7ff, 0x9, 0xffff, 0x4, 0x0, 0xfffffffffffffff9, 0x4, 0xd9f4, 0x0, 0x4, 0xbe6, 0x0, 0x3, 0x15d6, 0x8001, 0xb3, 0x0, 0x6, 0x3, 0xfff, 0x8001, 0x7, 0x6, 0x0, 0x183, 0x101, 0x100, 0x66, 0x2, 0x7, 0x6, 0xfffffffffffffffa, 0xd12e, 0x5, 0x5, 0xe, 0x40, 0x0, 0x5, 0x0, 0x3, 0x8f, 0xf, 0x2, 0x0, 0x2, 0x100000001]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000000ec0)={{r7}, r9, 0x0, @inherit={0x70, &(0x7f0000000a00)={0x1, 0x5, 0x3, 0xfffffffffffffffb, {0x11, 0x9, 0x2, 0x4, 0xc5}, [0x1, 0xce8, 0x4, 0x6, 0x4]}}, @devid=r10})
ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000001ec0))
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000002040)=@overlay={0x7fff, 0x3, 0x4, 0x8, 0x4, {0x77359400}, {0x3, 0xc, 0xa, 0x3, 0x6, 0x80, "a3033039"}, 0x0, 0x3, {}, 0x8})
openat$ptmx(0xffffffffffffff9c, &(0x7f00000020c0), 0x4100, 0x0)
r11 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002100), 0x101000, 0x0)
fanotify_mark(r11, 0x2, 0x40001052, r0, &(0x7f0000002140)='./file0\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002500)={0x18, 0x17, &(0x7f0000002180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xdff4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002240)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002440)={0x3, 0x0, 0x6, 0x40}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002480)=[r11, r11, r8, r0], &(0x7f00000024c0)=[{0x1, 0x4, 0x5, 0x8}, {0x0, 0x1, 0x1, 0x3}, {0x3, 0x4, 0x9, 0x6}, {0x5, 0x2, 0xf, 0x2}], 0x10, 0x41fa}, 0x94)

5m17.67382811s ago: executing program 40 (id=1639):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200543, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_deladdr={0x44, 0x15, 0x4, 0xad, 0x25dfdbff, {0xa, 0x8, 0xc, 0x1a038a60dc50c35d}, [@IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_FLAGS={0x8, 0x8, 0x49d}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x44}}, 0x8040091)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="20e735c5d716254e4502ed95c128b6261ea7a2abad34ac72534ef39bb4395474f40e98ac76069cbec0f0ae3f7175ab2ae8ea921c7160c5301f9113a85e6aff1a5b1304b0474c782cd1132bb1761983e2c53e399d90261ef5015d229a2ee61d3beb93", 0x62}, {&(0x7f0000000200)="9e97126af8ab706a6646ad9db3ba98b916a891d3aa21e6000f676d5b4b5bad8c4906044030ae8263f30cf6cc0797535db2df8974fe644ba304b1fa3d5638309060a84cae6371f1652facdba5372939856c7942c4d2fb4755b541bfd0a43121e1beb0422fa7b3a3c993ed854a1b7b64b1ecb11b62e434307262db81f57b44b2589021c18b963395b841298dca6896ed3c1bf69addce98f7657f214ae227e382f7d454cddeb401699a3e349f395e96288b5539ed37701bd71e65e12fe8717f5fe59dadd1cba34753bed9d23a3c806df866", 0xd0}], 0x2)
r1 = getpid()
syz_open_dev$I2C(&(0x7f0000000340), 0x4, 0x4380)
r2 = syz_open_procfs$namespace(r1, &(0x7f0000000380)='ns/uts\x00')
ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f00000003c0))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000580)={0x0, 0x1, 0x1000})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)={<r3=>0x0, <r4=>0x0})
sched_setscheduler(r4, 0x3, &(0x7f0000000640)=0x7f)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000006c0)=0x3, 0x4)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000700)=[{0xfff7, 0x6, 0x1, 0x8e14}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000780)={r3, 0x0, 0x2})
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x1, 0x5004)
r7 = syz_open_dev$vivid(&(0x7f00000007c0), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000800)={0xc, @sliced={0x3, [0xc348, 0x9, 0x8, 0x7, 0x6, 0x2, 0x3ff, 0xc, 0x80, 0xff01, 0x8000, 0x4, 0xd, 0x0, 0x4, 0x1, 0x4, 0x2, 0x7, 0x331, 0x9, 0x5, 0xff, 0x5c0, 0x6, 0x1, 0x0, 0x8df0, 0xaf, 0x3ff, 0x1000, 0xff, 0x1000, 0x4000, 0x5, 0x5, 0x7, 0x3, 0x2000, 0x0, 0xbd8, 0xffe5, 0x9, 0x0, 0x64b, 0x9, 0x5, 0x7], 0x4}})
r8 = syz_open_procfs(r1, &(0x7f0000000900)='net/snmp6\x00')
ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x8, 0x2002)
ioctl$FE_GET_FRONTEND(r8, 0x80246f4d, &(0x7f0000000940))
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f0000000980)={0x80000000, 0xc, [0x9, 0x100, 0x9]})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000009c0)=<r9=>0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000a80)={<r10=>0x0, 0x1, 0x0, [0x3, 0x0, 0x8, 0xd3, 0xffff], [0x2, 0x3, 0x2, 0x9, 0x800, 0x4, 0x67, 0x8000000000000001, 0x1, 0x5, 0x3d28, 0x200, 0x3, 0xfffffffffffffff8, 0xbd4f, 0x4, 0x1000, 0x5, 0x10001, 0x9, 0x81, 0x3, 0xca1a, 0x1, 0x3, 0x0, 0x4, 0x1, 0x7, 0x8a5, 0x100000000, 0x1, 0x7, 0x3, 0x2, 0xff, 0x670, 0xef, 0xfffffffffffff12f, 0x2, 0x2, 0x6, 0x10001, 0x0, 0x1, 0x7, 0x5, 0x100000000, 0x4bffa38d, 0xff, 0x0, 0x8, 0x1, 0x7, 0x4, 0x6, 0x7, 0xfffffffffffffff4, 0x6, 0x80000000, 0x401, 0x2, 0x1, 0x0, 0x80000001, 0x9, 0x9, 0xfff, 0x6000000000, 0x8, 0x8, 0xc0, 0x3, 0x7fff, 0x7ff, 0x9, 0xffff, 0x4, 0x0, 0xfffffffffffffff9, 0x4, 0xd9f4, 0x0, 0x4, 0xbe6, 0x0, 0x3, 0x15d6, 0x8001, 0xb3, 0x0, 0x6, 0x3, 0xfff, 0x8001, 0x7, 0x6, 0x0, 0x183, 0x101, 0x100, 0x66, 0x2, 0x7, 0x6, 0xfffffffffffffffa, 0xd12e, 0x5, 0x5, 0xe, 0x40, 0x0, 0x5, 0x0, 0x3, 0x8f, 0xf, 0x2, 0x0, 0x2, 0x100000001]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000000ec0)={{r7}, r9, 0x0, @inherit={0x70, &(0x7f0000000a00)={0x1, 0x5, 0x3, 0xfffffffffffffffb, {0x11, 0x9, 0x2, 0x4, 0xc5}, [0x1, 0xce8, 0x4, 0x6, 0x4]}}, @devid=r10})
ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000001ec0))
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000002040)=@overlay={0x7fff, 0x3, 0x4, 0x8, 0x4, {0x77359400}, {0x3, 0xc, 0xa, 0x3, 0x6, 0x80, "a3033039"}, 0x0, 0x3, {}, 0x8})
openat$ptmx(0xffffffffffffff9c, &(0x7f00000020c0), 0x4100, 0x0)
r11 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002100), 0x101000, 0x0)
fanotify_mark(r11, 0x2, 0x40001052, r0, &(0x7f0000002140)='./file0\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002500)={0x18, 0x17, &(0x7f0000002180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xdff4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002240)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002440)={0x3, 0x0, 0x6, 0x40}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002480)=[r11, r11, r8, r0], &(0x7f00000024c0)=[{0x1, 0x4, 0x5, 0x8}, {0x0, 0x1, 0x1, 0x3}, {0x3, 0x4, 0x9, 0x6}, {0x5, 0x2, 0xf, 0x2}], 0x10, 0x41fa}, 0x94)

5m17.025786096s ago: executing program 4 (id=1691):
r0 = syz_open_dev$video4linux(&(0x7f00000002c0), 0xfffffffffffffff7, 0x8000)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=<r1=>0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000540)=@mmap={0x9, 0xb, 0x4, 0x1000, 0x1, {0x0, 0xea60}, {0x2, 0x1, 0x0, 0x2, 0x7, 0xdd, "7c115fb6"}, 0x2, 0x1, {}, 0x7, 0x0, r1})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x80800)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
write$cgroup_subtree(r8, 0x0, 0x0)
sendfile(r7, r8, 0x0, 0xfffffffefff) (fail_nth: 4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x2, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r13 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r13, 0x0, 0xf2, 0x1000, &(0x7f0000000180)="9565a5f3d8b43f1b595a7f9b8cfdbc32d67f9b9a57e673c8a3e7db377df67c57af67d32c4c243c21c53617fad24e30379ed6a0ffa4f6c598dd682009794f5c257e0cd5942e3776d4c5f952cbe9755e2269bb369593237f9f1e7f33f4d7b051a816526893c75f9fe4866db44de92a7c743095b8f008f14f217506099ede9151c9ad5f940c78155c2b47f9a1812ac754bc44b4bbb8496428b4e4cde6bcff1036b2d98d2267cd7a5febdad03c7f26b95f2b296e76b71d601f7bd1630bf62b7f0da9c3b0d54beb049b9fc177057f09de5ec4c29fb9d3b61d65da480fd0399df3a4569158a092a3baf29b1b6d4515b4f7469871dd", &(0x7f0000002dc0)=""/4096, 0x1, 0x0, 0x27, 0xc5, &(0x7f0000001600)="646af944454d050d163b6c6d912d25d99a72a7ee6e08e86adb8b66206b380a18df3aa0aaa6ae17", &(0x7f0000001640)="dbf9f29ad3c088def8c4c12886989f7372eb497eaf6d0c47f5d6dd0aa0d4745b1bc0a702cc4a5b4a86b27c53c7a4be41a4938a788eba7f83675c005a019580db47db175f940fcb35c4271b94fcca3f2aba865ad03e96436a60c615f5d6c88d49c242641b5f95510a941226fed5c88afbd613e08110b231e2734fb7b7d5fbe3bada34a06222f1db6140dda86297dffd4773306ab541e7cb28bf0090ed9e7867e1b763eec7a72b0f570900000000000000958a9ca7ed0ae0859a5593c14ec5d786bf1bcfec63", 0x8, 0x0, 0x5}, 0x50)
close(r5)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109740780000010203010902510001010080320904000009ff00000007058103"], 0x0)

5m15.539430342s ago: executing program 4 (id=1694):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @local}, 0xc)
setfsgid(0xee00)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56e, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0xc, 0xfe, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x81, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)={0x20, 0xb, 0x2a, {0x2a, 0xf7ecf655a98aac19, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf791407736dccfb66b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x0, 0xff})
timer_create(0x3, 0x0, &(0x7f00000001c0))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xefffffea]}, 0x0, 0x8)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x99b8e3d, 0x9, 0x40}, 0x50)
getrandom(&(0x7f0000000380)=""/300, 0xcebaa945, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030000000000000081e5110102030109021200010b0390670904a10400df45de03bf81b145038d395b119b2e173504fc62fa13d0b0e8e6118c417c605001f1e3b27b5e3f829a8b9b66c41195e1b4d563c4543d9103205fb1039be85259f38fa6845a0d4dd718df30bfaec8307121e55a9233ddd3d19ce435b571f9a938519ea67cf25faceeda6aa4580d3092dde7a867eb8a54409d890b4f44d2"], 0x0)

5m11.978670058s ago: executing program 4 (id=1702):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {0x3f}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

5m11.306583716s ago: executing program 4 (id=1705):
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x4}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f0000000c00)=@ublk_get_dev_info_sqe={0x2e, 0x0, 0x0, r1, 0x80207502, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}})
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)
signalfd4(r0, &(0x7f0000000100)={[0x1]}, 0x8, 0x80800)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
munlockall()
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280"], 0x90}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0)
r10 = epoll_create(0x402)
r11 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000000)={0x10})

5m9.336669023s ago: executing program 4 (id=1707):
epoll_create1(0x0)
socket(0x400000000010, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00171c000000f9bb1b7974"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x20, 0x13, 0x5, "d4fa5fb9f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xa8, 0x0, 0x0)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)

5m5.302540357s ago: executing program 4 (id=1713):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
listen(r0, 0x40)

4m49.455267439s ago: executing program 41 (id=1713):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
listen(r0, 0x40)

4m45.039002089s ago: executing program 7 (id=1766):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x3a, 0x2, 0x0, 0x0, 0x0, 0x7e, 0x8, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x8, 0x0, 0x80000045, [0x2, 0x89ff]}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setpriority(0x2, 0x0, 0x7)
syslog(0x3, &(0x7f0000000300)=""/121, 0x79)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900de05000300"], 0xbc}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xc, 0xa29, 0x6, 0x45004, 0x1, 0xb67, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0xd}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e26, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x70000003}, 0x1c)

4m44.198860816s ago: executing program 7 (id=1769):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_dir\x00', 0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./proc_dir\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_dir/acpi/wakeup\x00', 0x2, 0x0)
preadv(r0, &(0x7f0000001040)=[{0x0}], 0x1, 0x12c, 0x0)

4m42.762860785s ago: executing program 7 (id=1772):
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x4)

4m42.732401618s ago: executing program 7 (id=1773):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff200000400000000000000000000003000000000100000002"], 0x0, 0x56, 0x0, 0x1}, 0x28)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x541b, &(0x7f0000003240))
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff200000400000000000000000000003000000000100000002"], 0x0, 0x56, 0x0, 0x1}, 0x28) (async)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x541b, &(0x7f0000003240)) (async)

4m42.615181477s ago: executing program 7 (id=1774):
epoll_create1(0x0)
socket(0x400000000010, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x220000d0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00171c000000f9bb1b7974"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x20, 0x13, 0x5, "d4fa5fb9f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xa8, 0x0, 0x0)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)

4m39.031768892s ago: executing program 7 (id=1783):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0xd3a, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x924200, 0x0, 0xffffff75, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48)
socket$inet6(0xa, 0x2, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r1], 0x24}}, 0x24008000)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x800c6613, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
io_setup(0x4, &(0x7f0000000040)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000002cc0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, r4, 0x0, 0x0, 0x2}])
ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000540)=[@ioring_restriction_register_op={0x0, 0x38fc2f1a6518ef8a}], 0x1)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x2c}}, 0x0)

4m23.806475744s ago: executing program 42 (id=1783):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0xd3a, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x924200, 0x0, 0xffffff75, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48)
socket$inet6(0xa, 0x2, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r1], 0x24}}, 0x24008000)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x800c6613, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
io_setup(0x4, &(0x7f0000000040)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000002cc0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, r4, 0x0, 0x0, 0x2}])
ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000540)=[@ioring_restriction_register_op={0x0, 0x38fc2f1a6518ef8a}], 0x1)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x2c}}, 0x0)

3m10.649041796s ago: executing program 6 (id=1967):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995611874c69625021378446060ebf00725e310d723e213ad434e342b2b8e8cc08964f7d9784cc05712929c1c428ca46269b4b09a8bcbf1b41059501d5aa9fa7bd0e696785245d85e68437ad92ebda68410965ae37bb1fedb1f4e1b6facc4f66d191725642a393190d67fc95436cdf3538ab9439c9e9719188113a13f3f8040669c4a16704d6a0568be569ad01d9aec5d866fd500"/176], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000040)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008820}, 0x40095)

3m7.527203857s ago: executing program 6 (id=1974):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x20)
write(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x4070bd2d, 0x25dfdbff, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in=@private=0xa010101, 0xffffffff, 0x32}, @in=@broadcast, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfdfffffffffffffe, 0x3, 0x9}, {0x5, 0x9, 0x9, 0x292}, {0x1cb00000}, 0xffffffff, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "3ae0bd000b200000366a6a849a739045"}}]}, 0x148}}, 0x44050)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"})
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x11)
r8 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x0, r7, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
readv(r8, &(0x7f0000000340)=[{&(0x7f0000000100)=""/174, 0xae}], 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000ffff050004000000000010000300686173683a69702c6d616300050005"], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
r9 = msgget$private(0x0, 0xe6)
msgctl$IPC_INFO(r9, 0x3, &(0x7f0000000340)=""/123)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xb0e, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf8, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x7ff, 0x2, 0x1, {0x22, 0xede}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x7, 0x9}}}}}]}}]}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000810)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r10 = socket(0x1e, 0x2, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r11=>0x0}, &(0x7f0000000000)=0x8)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_MESH(r10, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x23}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x2004c000)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r11, 0x0, 0x40}, 0xc)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={r11, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x6, 0x5, 0x8000b5ed, 0x1, 0x58, 0x16, 0xdc}, 0x9c)

3m3.835105145s ago: executing program 6 (id=1982):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host})
r1 = socket(0x2, 0x80805, 0x0)
gettid()
timer_settime(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
setns(0xc9, 0x0)
socketpair(0x9, 0x5, 0x0, &(0x7f0000000000))
setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000340)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc})

3m2.83288256s ago: executing program 6 (id=1984):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995611874c69625021378446060ebf00725e310d723e213ad434e342b2b8e8cc08964f7d9784cc05712929c1c428ca46269b4b09a8bcbf1b41059501d5aa9fa7bd0e696785245d85e68437ad92ebda68410965ae37bb1fedb1f4e1b6facc4f66d191725642a393190d67fc95436cdf3538ab9439c9e9719188113a13f3f8040669c4a16704d6a0568be569ad01d9aec5d866fd500"/176], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000040)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008820}, 0x40095)

3m1.609084303s ago: executing program 6 (id=1987):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0xa, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}])
syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="04222b03"], 0x2e)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0x3, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x2, 0x0, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x2, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0xb69f, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000, 0x2})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000240)}, 0x20)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/kexec_crash_size', 0x141a82, 0x104)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x80100, 0x1, 0x400, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x800000000000a606, 0x181b00)
ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x20010, r5, 0xde1e0000)
r6 = socket$inet(0x2, 0x3, 0x4)
sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a01"], 0x40}, 0xfffe)
ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e)
setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000000)=0xb2, 0x4)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x14044804, &(0x7f0000000140)={0xa, 0x4e21, 0x767, @loopback, 0x6}, 0x1c)

3m1.311220576s ago: executing program 6 (id=1988):
migrate_pages(0x0, 0x6fb8, 0x0, &(0x7f0000000300)=0xe)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x200004000000000e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
add_key(0x0, 0x0, &(0x7f00000008c0)="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", 0x1c2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/96, 0x60}], 0x1}, 0x0)
sendto$inet6(r2, &(0x7f0000000000)="0b05", 0x2, 0x200408c4, 0x0, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x13)
add_key(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000003c0)={0x990000, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0xa00906, 0x6, '\x00', @value64=0x6a61}})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="d598cfb860a0e8adc3e587d53f5bd898da5a25fa67a0cef1985554c633908ad86ba0951909ea22a2c036d7d752c246af493c9b20b4e34c282ac23061b6a124483ab2e1168eba04ed10efb79c7d8e73060866b195c5e098830eca0357f716c4c17e0e0f7967cac3d266839c5e989a5048923b0d1d", @ANYBLOB="46eb6d6a2c7766646e6f3d", @ANYRES16=r3, @ANYBLOB="2c6d73697a653d3078303030303030303030303030313030302c6bc82e2904a5767547e4cbfe68b20df578fd5ba38dc33e6acd8a34337323aa04172d40cba2012167e768ed1dd9a9e5eb43ec99ad08c26a6c67c887e9241779112cba4d9f80b391a40cb08ac22b9b48741d781c2123f8ccd8c3d8c1bdf86e3e2ac48556f7b5996d78fbb9491dab81ea73aa24b4946e839715bf1affc097c02cfd7d6107701ca835aafa6a02ac2f84661709ed737f37fba34d75b49176a67ff380c4791196d5c36912cda2cd1d1150cd06f04b9f9f60327959f9debd7e7b0b2ca55e2725c8e8b2e8ef7591"])
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)

2m44.991890832s ago: executing program 43 (id=1988):
migrate_pages(0x0, 0x6fb8, 0x0, &(0x7f0000000300)=0xe)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x200004000000000e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
add_key(0x0, 0x0, &(0x7f00000008c0)="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", 0x1c2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/96, 0x60}], 0x1}, 0x0)
sendto$inet6(r2, &(0x7f0000000000)="0b05", 0x2, 0x200408c4, 0x0, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x13)
add_key(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000003c0)={0x990000, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0xa00906, 0x6, '\x00', @value64=0x6a61}})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="d598cfb860a0e8adc3e587d53f5bd898da5a25fa67a0cef1985554c633908ad86ba0951909ea22a2c036d7d752c246af493c9b20b4e34c282ac23061b6a124483ab2e1168eba04ed10efb79c7d8e73060866b195c5e098830eca0357f716c4c17e0e0f7967cac3d266839c5e989a5048923b0d1d", @ANYBLOB="46eb6d6a2c7766646e6f3d", @ANYRES16=r3, @ANYBLOB="2c6d73697a653d3078303030303030303030303030313030302c6bc82e2904a5767547e4cbfe68b20df578fd5ba38dc33e6acd8a34337323aa04172d40cba2012167e768ed1dd9a9e5eb43ec99ad08c26a6c67c887e9241779112cba4d9f80b391a40cb08ac22b9b48741d781c2123f8ccd8c3d8c1bdf86e3e2ac48556f7b5996d78fbb9491dab81ea73aa24b4946e839715bf1affc097c02cfd7d6107701ca835aafa6a02ac2f84661709ed737f37fba34d75b49176a67ff380c4791196d5c36912cda2cd1d1150cd06f04b9f9f60327959f9debd7e7b0b2ca55e2725c8e8b2e8ef7591"])
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)

1m20.167234584s ago: executing program 2 (id=2208):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f0000000400)={0x400, 0x60, 0x2}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xb)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000180)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000280)={0x24, 0x5, 0x6, 0x40000000032a, 0x2, 0x2, 0xfffffffffffffffd, 0x6, 0x7fff})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004010)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="100000ed", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf254b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x42020}, 0x20004880)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r5, @ANYBLOB="5c005a80140001800500070001000000050006"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m17.747759233s ago: executing program 2 (id=2213):
migrate_pages(0x0, 0x6fb8, 0x0, &(0x7f0000000300)=0xe)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x200004000000000e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
add_key(0x0, 0x0, &(0x7f00000008c0)="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", 0x1c2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/96, 0x60}], 0x1}, 0x0)
sendto$inet6(r2, &(0x7f0000000000)="0b05", 0x2, 0x200408c4, 0x0, 0x0)
add_key(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r3 = dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="d598cfb860a0e8adc3e587d53f5bd898da5a25fa67a0cef1985554c633908ad86ba0951909ea22a2c036d7d752c246af493c9b20b4e34c282ac23061b6a124483ab2e1168eba04ed10efb79c7d8e73060866b195c5e098830eca0357f716c4c17e0e0f7967cac3d266839c5e989a5048923b0d1d", @ANYBLOB="46eb6d6a2c7766646e6f3d", @ANYRES16, @ANYBLOB="2c6d73697a653d3078303030303030303030303030313030302c6bc82e2904a5767547e4cbfe68b20df578fd5ba38dc33e6acd8a34337323aa04172d40cba2012167e768ed1dd9a9e5eb43ec99ad08c26a6c67c887e9241779112cba4d9f80b391a40cb08ac22b9b48741d781c2123f8ccd8c3d8c1bdf86e3e2ac48556f7b5996d78fbb9491dab81ea73aa24b4946e839715bf1affc097c02cfd7d6107701ca835aafa6a02ac2f84661709ed737f37fba34d75b49176a67ff380c4791196d5c36912cda2cd1d1150cd06f04b9f9f60327959f9debd7e7b0b2ca55e2725c8e8b2e8ef7591"])
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)

1m15.905527698s ago: executing program 2 (id=2218):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open_tree(r0, &(0x7f0000000000)='./sec/tomoyo/query\x00', 0x8800)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x1fff, 0x40, 0xfa00, {{0xa, 0x4e23, 0xb, @loopback, 0xffff268d}, {0xa, 0x4e27, 0x20000000, @loopback, 0x2000005}, 0xffffffffffffffff, 0x1ff}}, 0x48)

1m15.604059148s ago: executing program 2 (id=2220):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x101})
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00')
r6 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0)
syz_usb_control_io$sierra_net(r6, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="d0b591903ec65a78b52ab3f10500ccb090d87f7daf83f253d917c1b38a60c4d983a05c86a9f702ac92f41d81bb59edb44fe51e7b42d3cda80be41703af7072fb1759e75ab3d0c313a6636e2c944807558f991f5b87ac7e73ef012815"], 0x0, 0x0})
syz_usb_control_io$uac2(r6, 0x0, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x85, 0x3, "89f3fb"}})
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e24, 0x80, 0x2, 0xa0, 0xa0, 0x29}, {0x104, 0x5, 0x3, 0x9, 0x0, 0x2000002, 0x9, 0x4}, {0x401, 0x5, 0x6, 0x2}, 0x0, 0xfffffffe, 0x2, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3505, 0x0, 0x1, 0x9, 0x8, 0x0, 0x6}}, 0xe8)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000000c0)={r0, 0x7, 0xe})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(0xffffffffffffffff, r8, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000000)=[@request_death, @decrefs], 0x0, 0x0, 0x0})
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020f08001000000000000000fedbdf25030005000000000002000020000000000000000000000007080012000300000000000000000000000600320000000000000000000000000000000000000000000000ffffe0000001fe800000000000000000000000000018030006000020000002"], 0x80}}, 0x0)

1m12.632588899s ago: executing program 5 (id=2230):
migrate_pages(0x0, 0x6fb8, 0x0, &(0x7f0000000300)=0xe)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x200004000000000e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
add_key(0x0, 0x0, &(0x7f00000008c0)="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", 0x1c2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/96, 0x60}], 0x1}, 0x0)
sendto$inet6(r2, &(0x7f0000000000)="0b05", 0x2, 0x200408c4, 0x0, 0x0)
add_key(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r3 = dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="d598cfb860a0e8adc3e587d53f5bd898da5a25fa67a0cef1985554c633908ad86ba0951909ea22a2c036d7d752c246af493c9b20b4e34c282ac23061b6a124483ab2e1168eba04ed10efb79c7d8e73060866b195c5e098830eca0357f716c4c17e0e0f7967cac3d266839c5e989a5048923b0d1d", @ANYBLOB="46eb6d6a2c7766646e6f3d", @ANYRES16, @ANYBLOB="2c6d73697a653d3078303030303030303030303030313030302c6bc82e2904a5767547e4cbfe68b20df578fd5ba38dc33e6acd8a34337323aa04172d40cba2012167e768ed1dd9a9e5eb43ec99ad08c26a6c67c887e9241779112cba4d9f80b391a40cb08ac22b9b48741d781c2123f8ccd8c3d8c1bdf86e3e2ac48556f7b5996d78fbb9491dab81ea73aa24b4946e839715bf1affc097c02cfd7d6107701ca835aafa6a02ac2f84661709ed737f37fba34d75b49176a67ff380c4791196d5c36912cda2cd1d1150cd06f04b9f9f60327959f9debd7e7b0b2ca55e2725c8e8b2e8ef7591"])
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)

1m10.662367345s ago: executing program 2 (id=2232):
unshare(0x2c020400)
io_uring_setup(0x1cf8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (fail_nth: 8)

1m9.336123714s ago: executing program 5 (id=2234):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@delchain={0x228, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x1f0, 0x2, [@TCA_CGROUP_EMATCHES={0x1ee, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1e8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x2, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0xe}, {0x0, 0x6, 0x5, 0x4, 0x7, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x8}, {0x101, 0x4, 0x0, "95062787"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x4}, {0x2, 0x44d00000, 0x1, 0x6}}}, @TCF_EM_CONTAINER={0x80, 0x2, 0x0, 0x0, {{0x3}, "176e2c5376f7177688f76939825b2965d62266c51ed4a284e5643c3d278ed71e054c06d3d9eb760975bff4dda6e5564309233a5a1699d830175e5ed138f09dd278e5b3b33853c190d9d3fdb9ea9a1f097292e4bb1ac5519458548827817e08d97c48a67ef7a445efffc9c22fb314ca7b438d"}}, @TCF_EM_IPT={0x3c, 0x1, 0x0, 0x0, {{0x1b4, 0x9, 0x600}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0xcc, 0x1, 0x0, 0x0, {{0x640}, [@TCA_EM_IPT_MATCH_DATA={0xb3, 0x5, "6b98e42c64f5d08f352697693ba312adeb3afbc17cab9c94e6a792536cdd3586e5b19021459b5640a6d3131dde8e06f9f4bd596e5bf8f62d57251d10c9f6f503b6539e5ea6a98cc0c6b074a0b91afd950b0a1e574487407393c9fbc4e6f374fec9dd3292530a4a3604f5b85e701bd32ac7f5f59115e41900a554a7ea4c4a6cc0228e4ba3d9f0729632abc6f3971f8005235e8b2b806ce45c5b9974b4f1d77ef6058f2723f1acffc5f40dfa31f078fe"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x228}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="a800000000010506000000000000000002000000340001801400018008000100ac14142308000200ac1414aa1c0002800500010006000000060002004e220000060003004e230000340002801400018008000100ac1414aa08000200ac1414231c0002800500010006000000060002004e230000060003004e220000100004800c00018005000100010000001400188008000100000001000800020000000000080007000000012c"], 0xa8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
rename(0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000780)=[{&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000300)=""/246, 0xf6}, {0x0}, {&(0x7f0000000680)=""/229, 0xe5}], 0x6, 0xf, 0x7)

1m9.266606394s ago: executing program 2 (id=2235):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000b80)=0x3, 0x2)
connect$bt_sco(r0, &(0x7f0000000480)={0x1f, @none}, 0x8)
r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8)

1m7.389612835s ago: executing program 3 (id=2239):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109", @ANYRES32=r0], 0x0)

58.387278613s ago: executing program 5 (id=2240):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001640), r0)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
r2 = userfaultfd(0x80801)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000140)={@local, 0x401, 0x2, 0x3, 0x0, 0x5, 0x7}, &(0x7f0000000280)=0x20)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402)
writev(r7, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_POISON(r2, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000dac000/0x1000)=nil, 0x1000}, 0x1})
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001680)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xeec5}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x4)

58.286719918s ago: executing program 3 (id=2242):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x4, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

52.543047203s ago: executing program 44 (id=2235):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000b80)=0x3, 0x2)
connect$bt_sco(r0, &(0x7f0000000480)={0x1f, @none}, 0x8)
r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8)

51.677916504s ago: executing program 3 (id=2245):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r3, &(0x7f0000000300)='r:test/event1 ./file0:0x0 +', 0x1b)
openat$kvm(0xffffffffffffff9c, 0x0, 0x28001, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000003c0)={"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"})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000080)=@x86={0x7, 0x1, 0x1, 0x0, 0x7, 0x2, 0x4, 0xef, 0x3, 0x9, 0x40, 0xff, 0x0, 0x5, 0x4, 0xc8, 0xa4, 0x3, 0xd, '\x00', 0x62, 0x8001})
syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x280c2)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r6 = accept(r4, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
writev(r5, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1)
recvmmsg$unix(r6, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0)

50.557399767s ago: executing program 5 (id=2248):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff)
r0 = socket$netlink(0x10, 0x3, 0x12)
writev(r0, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001ffffff40460801100001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044100}, 0x80)
syz_usb_control_io$uac3(r1, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x20, 0x7, 0xda, {0xda, 0x6, "01634a114a1bb487810878e5c0a50712f2738bae29534c6af252d1ee51cfce7b7b54ef2da71dd5f3047742360035cd570a818ed0fbecb8527447d726014de4a8f1cb0590530ed91bffe22db7d1db63b972f513df2a3ad96e2c34748de2de1e5092ab46302d0d58ca5009a198d3f1a62ed39180b92af61a9457de711a5f3d89345a83f2d6fc067bf21db7872e1a4eeedeec3ef60f330b59a5421dad2718f2efc33bbb10aa1bac6c9cd4c10eb230c47e1bdafcb156ddf7d9a1cca4c32aec45e644f0a8c99b6d106630ebb538ddebd32190b27b70f366deb270"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}}, &(0x7f0000000740)={0x44, &(0x7f00000004c0)={0x20, 0xf, 0xa0, "c197e33b278953b6ae1a5cdeeb576ce5112a4b9273e582b0a7c2621c1e33aa2c6ca84a409381a26fc44a4960cda56f82cfd5e3ce88877a3f6c101eb158393ace3aa0133c4b9283af71c8d148646bc0056369013482dd19fa0285fd23d40ea958431fd29d47c017c118e46adefc8566e1bfb3e7405bab3a6c9632454dfc8c98ad3a135f03c82471f6556fce74a5a77023d283721d6b2713daf1d93a3a08fa9054"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000600)={0x20, 0x81, 0x1, "b4"}, &(0x7f0000000640)={0x20, 0x82, 0x3, "9d9590"}, &(0x7f0000000680)={0x20, 0x83, 0x1, "ec"}, &(0x7f00000006c0)={0x20, 0x84, 0x3, "6e134f"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "39d381"}})
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x3f8, 0x300, 0x70bd2a, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x44001}, 0x8c1)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0)
ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000240)="529fc3ce88090f7797590d25049c23c9453a42c0c23f2c0630c8a90aa32b62")
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

48.571690389s ago: executing program 0 (id=2249):
sched_setscheduler(0x0, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8, @ANYRESOCT, @ANYRESHEX=r0, @ANYRESOCT], 0xfd12}}, 0x0)
setns(0xc9, 0x0)
r1 = socket(0x2a, 0x2, 0x5)
connect$inet6(r1, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @private1, 0x200}, 0x1c)
sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000881)
socket(0x2, 0x80805, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000440)=@conn_svc_rsp={0x0, 0x0, 0xa, "a77444b4", {0x3, 0x1, 0x0, 0xb, 0x2, 0x2, 0x8}})
mount$overlay(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000), 0x41004c1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00'})
tkill(0x0, 0xb)

47.864199575s ago: executing program 3 (id=2250):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0)
r3 = dup(r2)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r3})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@gettaction={0x8c, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc3}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x83}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400c004}, 0x20048851)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="18000000246837f73199aee6fdb9291b120000002d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115ad", 0xeb}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56171, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004000}, 0x40000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x5)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlockall(0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

46.210822219s ago: executing program 5 (id=2251):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
socket$netlink(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0)

45.978818766s ago: executing program 8 (id=2252):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109", @ANYRES32=r0], 0x0)

45.185763391s ago: executing program 0 (id=2253):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@delchain={0x228, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x1f0, 0x2, [@TCA_CGROUP_EMATCHES={0x1ee, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1e8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x2, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0xe}, {0x0, 0x6, 0x5, 0x4, 0x7, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x8}, {0x101, 0x4, 0x0, "95062787"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x4}, {0x2, 0x44d00000, 0x1, 0x6}}}, @TCF_EM_CONTAINER={0x80, 0x2, 0x0, 0x0, {{0x3}, "176e2c5376f7177688f76939825b2965d62266c51ed4a284e5643c3d278ed71e054c06d3d9eb760975bff4dda6e5564309233a5a1699d830175e5ed138f09dd278e5b3b33853c190d9d3fdb9ea9a1f097292e4bb1ac5519458548827817e08d97c48a67ef7a445efffc9c22fb314ca7b438d"}}, @TCF_EM_IPT={0x3c, 0x1, 0x0, 0x0, {{0x1b4, 0x9, 0x600}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0xcc, 0x1, 0x0, 0x0, {{0x640}, [@TCA_EM_IPT_MATCH_DATA={0xb3, 0x5, "6b98e42c64f5d08f352697693ba312adeb3afbc17cab9c94e6a792536cdd3586e5b19021459b5640a6d3131dde8e06f9f4bd596e5bf8f62d57251d10c9f6f503b6539e5ea6a98cc0c6b074a0b91afd950b0a1e574487407393c9fbc4e6f374fec9dd3292530a4a3604f5b85e701bd32ac7f5f59115e41900a554a7ea4c4a6cc0228e4ba3d9f0729632abc6f3971f8005235e8b2b806ce45c5b9974b4f1d77ef6058f2723f1acffc5f40dfa31f078fe"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x228}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
rename(0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000780)=[{&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000300)=""/246, 0xf6}, {0x0}, {&(0x7f0000000680)=""/229, 0xe5}], 0x6, 0xf, 0x7)

44.470018622s ago: executing program 3 (id=2254):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x4, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

43.831150156s ago: executing program 0 (id=2255):
memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2<Y\xa1\xdeP\b\xf1kM\x02\x00\x00\x03\x00eA\xb5#>\xa0D-N\xf9\xba!L]h;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xdc\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\x06]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x05\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000000000000000800450000240000000000739078e0000001e000000100000000001090780200000800000000"], 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x41}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
close(r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4004058)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x24000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a40000000090a010600000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d04001280140000001100010000000000400000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000)
memfd_create(0x0, 0x1)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4048055)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5d6)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040)
pipe2(0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x8002)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)

43.290178131s ago: executing program 0 (id=2256):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r3, &(0x7f0000000300)='r:test/event1 ./file0:0x0 +', 0x1b)
openat$kvm(0xffffffffffffff9c, 0x0, 0x28001, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r6 = accept(r4, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
writev(r5, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1)
recvmmsg$unix(r6, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0)

42.756499999s ago: executing program 5 (id=2257):
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
futex(&(0x7f0000000000)=0x2, 0xc, 0x1, 0x0, &(0x7f0000000080)=0x2, 0x2)
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x40, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000440)=<r1=>0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40a21, 0x23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)
clock_gettime(0x0, &(0x7f0000000480)={<r4=>0x0, <r5=>0x0})
timer_settime(r1, 0x1, &(0x7f00000004c0)={{r4, r5+60000000}}, &(0x7f0000000500))
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0xb0)
ioctl(r6, 0x800c0910, &(0x7f0000000420))
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x4012, r0, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200))
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0d}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0)
listen(r8, 0x10)
sendmsg$802154_raw(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)="c1e20180c5ce0000000059", 0xb}, 0x1, 0x0, 0x0, 0x24044014}, 0x40000050)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0xffc3, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e68bd607ab6b716b7feab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040110)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)

42.647656069s ago: executing program 3 (id=2258):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x101})
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00')
r6 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0)
syz_usb_control_io$sierra_net(r6, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="d0b591903ec65a78b52ab3f10500ccb090d87f7daf83f253d917c1b38a60c4d983a05c86a9f702ac92f41d81bb59edb44fe51e7b42d3cda80be41703af7072fb1759e75ab3d0c313a6636e2c944807558f991f5b87ac7e73ef012815"], 0x0, 0x0})
syz_usb_control_io$uac2(r6, 0x0, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x85, 0x3, "89f3fb"}})
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r7 = syz_io_uring_setup(0x2d63, &(0x7f0000000280)={0x0, 0x8210, 0x800, 0x0, 0x42, 0x0, r2}, &(0x7f00000000c0), &(0x7f0000011000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000000c0)={r0, 0x7, 0xe})
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(0xffffffffffffffff, r9, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000000)=[@request_death, @decrefs], 0x0, 0x0, 0x0})
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020f08001000000000000000fedbdf25030005000000000002000020000000000000000000000007080012000300000000000000000000000600320000000000000000000000000000000000000000000000ffffe0000001fe800000000000000000000000000018030006000020000002"], 0x80}}, 0x0)

42.647208083s ago: executing program 8 (id=2259):
socket$netlink(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x171}}], 0x400000000000172, 0x4001c00)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0)

39.745885884s ago: executing program 0 (id=2260):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995611874c69625021378446060ebf00725e310d723e213ad434e342b2b8e8cc08964f7d9784cc05712929c1c428ca46269b4b09a8bcbf1b41059501d5aa9fa7bd0e696785245d85e68437ad92ebda68410965ae37bb1fedb1f4e1b6facc4f66d191725642a393190d67fc95436cdf3538ab9439c9e9719188113a13f3f8040669c4a16704d6a0568be569ad01d9aec5d866fd500"/176], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000040)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008820}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)

38.767874691s ago: executing program 8 (id=2261):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f00000000c0)=0x300)

38.437670167s ago: executing program 8 (id=2262):
sched_setscheduler(0x0, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8, @ANYRESOCT, @ANYRESHEX=r0, @ANYRESOCT], 0xfd12}}, 0x0)
setns(0xc9, 0x0)
r1 = socket(0x2a, 0x2, 0x5)
connect$inet6(r1, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @private1, 0x200}, 0x1c)
sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000881)
socket(0x2, 0x80805, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000440)=@conn_svc_rsp={0x0, 0x0, 0xa, "a77444b4", {0x3, 0x1, 0x0, 0xb, 0x2, 0x2, 0x8}})
mount$overlay(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000), 0x41004c1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00'})
tkill(0x0, 0xb)

36.350780533s ago: executing program 8 (id=2263):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x28) (fail_nth: 8)

35.826412378s ago: executing program 8 (id=2264):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpriority(0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x75, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})
sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ff", 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)='1', 0x1}], 0x1}}], 0x2, 0x2090)
sendto$inet(r1, &(0x7f0000001080)="f43945ca98acb8a9b3ee48f6f16a864918caf5375823337eb7c72fc5b6b5161a2ce6e88a00a5000000000000004b1b3cdcb28fd85496523b195bda9430cfbcad76b5cee9b66a06ef4297ec9f702ab73353ba1b855ee0a82dce61ad54871cbe6d457fc54dfcffffff95318b02fd4a21807e0f", 0x72, 0x0, 0x0, 0x0)

25.803570938s ago: executing program 0 (id=2265):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0x10000, 0x4, 0xa, 0xfd, 0xec, 0x40, 0x7, 0x0, 0x2b, 0x13}, {0x200000, 0x10000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x4, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xf000, 0x2, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0xc, 0x8, 0xb1, 0x82, 0x21, 0x81, 0x80, 0x0, 0x1}, {0x30000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x60000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0xffd}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80]})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r5, @ANYBLOB="9c78d9af931d9a591d10a760486790e53970f8a9012dbbe60514796c63f49136c87c0ebf823aaac855fddac7a7d90000d60bea8ce1e75754057c8a49ba7dbe8f560e99157a0000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5}, 0x94)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
fsopen(&(0x7f0000000140)='cgroup\x00', 0x1)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r6 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r6, 0x11, &(0x7f0000000500)='n', 0x1)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, 0x0)
r8 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r8, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
connect$rxrpc(r8, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24)
syz_usb_connect(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x1a, 0xcf, 0x3, 0x40, 0x423, 0xa, 0x5fd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xac, 0x10, 0xf9, "", [{{0x9, 0x4, 0x8a, 0x1, 0x0, 0x40, 0x6c, 0x59, 0x9}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x15555899})

0s ago: executing program 45 (id=2257):
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
futex(&(0x7f0000000000)=0x2, 0xc, 0x1, 0x0, &(0x7f0000000080)=0x2, 0x2)
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x40, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000440)=<r1=>0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40a21, 0x23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)
clock_gettime(0x0, &(0x7f0000000480)={<r4=>0x0, <r5=>0x0})
timer_settime(r1, 0x1, &(0x7f00000004c0)={{r4, r5+60000000}}, &(0x7f0000000500))
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0xb0)
ioctl(r6, 0x800c0910, &(0x7f0000000420))
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x4012, r0, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200))
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0d}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0)
listen(r8, 0x10)
sendmsg$802154_raw(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)="c1e20180c5ce0000000059", 0xb}, 0x1, 0x0, 0x0, 0x24044014}, 0x40000050)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0xffc3, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e68bd607ab6b716b7feab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040110)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)

kernel console output (not intermixed with test programs):

sadm_t pid=14853 comm="syz.5.1911" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a19e159 code=0x0
[  843.217815][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1914'.
[  843.233027][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1914'.
[  843.306801][T14877] CacheFiles: No cache directory specified
[  843.308166][   T31] audit: type=1400 audit(1788622471.896:2724): avc:  denied  { write } for  pid=14872 comm="syz.2.1916" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  844.621557][T14887] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=14887 comm=syz.2.1918
[  844.720619][ T5726] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  844.993581][ T5726] usb 4-1: device descriptor read/64, error -71
[  845.254109][ T5822] usb 3-1: new full-speed USB device number 68 using dummy_hcd
[  845.300740][ T5726] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  845.355107][T14894] gadgetfs: bound to dummy_udc driver
[  845.432739][ T5822] usb 3-1: unable to get BOS descriptor or descriptor too short
[  845.437040][ T5822] usb 3-1: not running at top speed; connect to a high speed hub
[  845.437070][ T5822] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  845.440656][ T5726] usb 4-1: device descriptor read/64, error -71
[  845.447276][ T5822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  845.447298][ T5822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  845.462138][ T5822] usb 3-1: string descriptor 0 read error: -22
[  845.462234][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.503085][ T5822] usb 3-1: 0:2 : does not exist
[  845.550880][ T5726] usb usb4-port1: attempt power cycle
[  845.689892][ T6471] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  845.698383][    C0] gadgetfs: connected
[  845.703576][ T6471] gadgetfs: disconnected
[  845.750920][T14884] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14884 comm=syz.2.1918
[  845.860880][    C0] gadgetfs: connected
[  845.866004][ T6471] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  845.878087][ T6471] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  845.898623][T14884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1918'.
[  846.237864][ T5822] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  846.251157][ T5822] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5)
[  846.251202][ T5822] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  846.251223][ T5822] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1
[  846.256897][ T5822] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  846.263292][    C0] gadgetfs: configuration #1
[  846.291019][ T6471] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input62
[  846.293256][ T5726] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  846.328898][ T5822] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  846.377310][ T5822] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  846.404243][ T5822] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5)
[  846.485868][ T5822] usb 3-1: USB disconnect, device number 68
[  846.548621][ T5726] usb 4-1: device descriptor read/8, error -71
[  847.978497][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1925'.
[  848.032734][T14912] device-mapper: ioctl: Invalid target message parameters.
[  848.280072][T14894] gadgetfs: suspended from state 3
[  848.306611][T14894] gadgetfs: disconnected
[  848.318376][ T5822] usb 2-1: USB disconnect, device number 29
[  848.746834][T14932] CacheFiles: No cache directory specified
[  850.392606][T14939] ip_tables: iptables: counters copy to user failed while replacing table
[  850.865315][   T31] audit: type=1400 audit(1788622479.456:2725): avc:  denied  { write } for  pid=14905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  850.890498][ T5822] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[  850.914597][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'.
[  850.942488][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'.
[  851.040454][ T5822] usb 7-1: Using ep0 maxpacket: 16
[  851.048708][ T5822] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  851.062899][ T5822] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  851.062941][ T5822] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  851.087153][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.087185][ T5822] usb 7-1: Product: syz
[  851.087210][ T5822] usb 7-1: Manufacturer: syz
[  851.087229][ T5822] usb 7-1: SerialNumber: syz
[  851.112199][ T5822] usb 7-1: config 0 descriptor??
[  851.192904][   T31] audit: type=1400 audit(1788622479.786:2726): avc:  denied  { write } for  pid=14960 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  851.326218][T14958] netlink: 'syz.5.1934': attribute type 8 has an invalid length.
[  851.510673][ T5726] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  851.711962][ T5726] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  851.737198][ T5726] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  851.737280][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0
[  851.756135][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.935047][ T5726] usb 3-1: config 0 descriptor??
[  852.700736][ T5726] bigben 0003:146B:0902.000C: unexpected rdesc, please submit for review
[  852.711272][ T5726] bigben 0003:146B:0902.000C: unknown main item tag 0x6
[  852.718957][ T5726] bigben 0003:146B:0902.000C: item fetching failed at offset 20/24
[  852.740676][ T5726] bigben 0003:146B:0902.000C: parse failed
[  852.748638][ T5726] bigben 0003:146B:0902.000C: probe with driver bigben failed with error -22
[  852.912183][ T5822] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  853.014453][ T6438] usb 3-1: USB disconnect, device number 69
[  853.072130][ T5822] usb 6-1: Using ep0 maxpacket: 8
[  853.086367][ T5822] usb 6-1: unable to get BOS descriptor or descriptor too short
[  853.086432][ T5822] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  853.091352][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  853.091382][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  853.091401][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  853.091424][ T5822] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  853.091443][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  853.091462][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  853.148385][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.148411][ T5822] usb 6-1: Product: syz
[  853.148423][ T5822] usb 6-1: Manufacturer: syz
[  853.148437][ T5822] usb 6-1: SerialNumber: syz
[  853.161881][ T5822] usb 6-1: config 0 descriptor??
[  853.165958][T14979] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  853.188851][ T5822] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  853.317206][   T31] audit: type=1400 audit(1788622481.906:2727): avc:  denied  { write } for  pid=14973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  853.565330][   T31] audit: type=1400 audit(1788622482.156:2728): avc:  denied  { write } for  pid=14991 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  853.683051][T14941] Process accounting paused
[  853.813682][ T5822] usb 6-1: USB disconnect, device number 22
[  853.845457][ T6437] usb 7-1: USB disconnect, device number 66
[  853.909959][ T6731] udevd[6731]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  854.097786][   T31] audit: type=1400 audit(1788622482.686:2729): avc:  denied  { write } for  pid=14994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  854.294985][T15008] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15008 comm=syz.2.1940
[  855.550157][T15015] CacheFiles: No cache directory specified
[  855.595512][   T31] audit: type=1400 audit(1788622484.186:2730): avc:  denied  { write } for  pid=15013 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  855.620619][    T9] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[  855.772939][    T9] usb 7-1: Using ep0 maxpacket: 16
[  855.774344][    T9] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  855.789332][ T5822] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  855.810689][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.810737][    T9] usb 7-1: Product: syz
[  855.810767][    T9] usb 7-1: Manufacturer: syz
[  855.810798][    T9] usb 7-1: SerialNumber: syz
[  855.828811][    T9] usb 7-1: config 0 descriptor??
[  855.857462][    T9] visor 7-1:0.0: Sony Clie 3.5 converter detected
[  855.950979][ T5822] usb 6-1: Using ep0 maxpacket: 16
[  855.965218][ T5822] usb 6-1: unable to get BOS descriptor or descriptor too short
[  855.973324][ T5822] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=88.84
[  855.988634][ T5822] usb 6-1: config 1 has an invalid interface number: 17 but max is 0
[  855.998459][ T5822] usb 6-1: config 1 has no interface number 0
[  855.998496][ T5822] usb 6-1: config 1 interface 17 has no altsetting 0
[  856.013756][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.022453][ T5822] usb 6-1: Product: syz
[  856.022476][ T5822] usb 6-1: Manufacturer: syz
[  856.022491][ T5822] usb 6-1: SerialNumber: syz
[  856.046327][    T9] usb 7-1: clie_3_5_startup: get config number bad return length: 0
[  856.046478][    T9] visor 7-1:0.0: probe with driver visor failed with error -5
[  857.285083][   T31] audit: type=1326 audit(1788622485.296:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15023 comm="syz.0.1945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f855d39e159 code=0x0
[  857.509205][ T5822] pcwd_usb: This driver only supports 1 device
[  857.535760][ T5822] usb 6-1: USB disconnect, device number 23
[  857.717187][T15033] loop4: detected capacity change from 0 to 7
[  858.010890][T15033] Dev loop4: unable to read RDB block 7
[  858.010929][T15033]  loop4: unable to read partition table
[  858.011096][T15033] loop4: partition table beyond EOD, truncated
[  858.011117][T15033] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  859.316114][   T31] audit: type=1400 audit(1788622487.906:2732): avc:  denied  { write } for  pid=15022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  859.328530][ T6471] usb 7-1: USB disconnect, device number 67
[  861.302281][T15060] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15060 comm=syz.6.1952
[  862.254490][   T31] audit: type=1400 audit(1788622490.846:2733): avc:  denied  { write } for  pid=15057 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  862.581077][ T6437] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  862.588516][   T31] audit: type=1400 audit(1788622491.156:2734): avc:  denied  { read } for  pid=15063 comm="syz.6.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  862.637401][T15068] 9p: Bad value for 'rfdno'
[  862.851032][ T6437] usb 6-1: unable to get BOS descriptor or descriptor too short
[  862.863172][ T6437] usb 6-1: not running at top speed; connect to a high speed hub
[  862.871454][ T6437] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  862.891657][ T6437] usb 6-1: config 0 has an invalid interface number: 88 but max is 0
[  862.891703][ T6437] usb 6-1: config 0 has no interface number 0
[  862.891746][ T6437] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64
[  862.891778][ T6437] usb 6-1: config 0 interface 88 has no altsetting 0
[  862.931184][ T6437] usb 6-1: language id specifier not provided by device, defaulting to English
[  862.950098][ T6437] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  862.950127][ T6437] usb 6-1: Product: syz
[  862.950149][ T6437] usb 6-1: SerialNumber: Љ
[  862.973495][ T6437] usb 6-1: config 0 descriptor??
[  862.980361][T15051] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  863.283089][ T6437] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input63
[  863.463607][ T6437] usb 6-1: USB disconnect, device number 24
[  863.508849][T15083] CacheFiles: No cache directory specified
[  864.601982][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  864.751936][   T31] audit: type=1400 audit(1788622493.346:2735): avc:  denied  { write } for  pid=15071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  864.962099][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1961'.
[  865.086423][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1961'.
[  865.886989][   T31] audit: type=1400 audit(1788622494.476:2736): avc:  denied  { write } for  pid=15105 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  866.050611][ T6443] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  866.170786][T15113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15113 comm=syz.5.1964
[  867.100475][ T6443] usb 4-1: Using ep0 maxpacket: 16
[  867.103162][ T6443] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  867.105628][ T6443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.105650][ T6443] usb 4-1: Product: syz
[  867.105665][ T6443] usb 4-1: Manufacturer: syz
[  867.105679][ T6443] usb 4-1: SerialNumber: syz
[  867.109967][ T6443] usb 4-1: config 0 descriptor??
[  867.114370][ T6443] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  867.319037][ T6443] usb 4-1: clie_3_5_startup: get config number bad return length: 0
[  867.319161][ T6443] visor 4-1:0.0: probe with driver visor failed with error -5
[  869.679724][   T31] audit: type=1400 audit(1788622498.266:2737): avc:  denied  { write } for  pid=15115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  869.704643][ T5726] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  869.825443][   T31] audit: type=1400 audit(1788622498.416:2738): avc:  denied  { write } for  pid=15141 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  869.861494][ T5726] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  869.871792][ T5726] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15
[  869.871840][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  869.894885][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.894924][ T5726] usb 6-1: Product: syz
[  869.894950][ T5726] usb 6-1: Manufacturer: syz
[  869.894965][ T5726] usb 6-1: SerialNumber: syz
[  869.923242][ T5726] usb 6-1: config 0 descriptor??
[  869.943104][ T5726] powermate 6-1:0.0: probe with driver powermate failed with error -5
[  870.142044][ T5726] usb 6-1: USB disconnect, device number 25
[  870.240536][ T6443] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  870.390048][ T5726] usb 4-1: USB disconnect, device number 79
[  870.391059][ T6443] usb 3-1: Using ep0 maxpacket: 16
[  870.393012][ T6443] usb 3-1: unable to get BOS descriptor or descriptor too short
[  870.393047][ T6443] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=88.84
[  870.393878][ T6443] usb 3-1: config 1 has an invalid interface number: 17 but max is 0
[  870.393898][ T6443] usb 3-1: config 1 has no interface number 0
[  870.393920][ T6443] usb 3-1: config 1 interface 17 has no altsetting 0
[  870.395526][ T6443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.395546][ T6443] usb 3-1: Product: syz
[  870.395558][ T6443] usb 3-1: Manufacturer: syz
[  870.395571][ T6443] usb 3-1: SerialNumber: syz
[  870.495390][   T31] audit: type=1400 audit(1788622499.086:2739): avc:  denied  { write } for  pid=15146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  870.650183][   T31] audit: type=1400 audit(1788622499.236:2740): avc:  denied  { write } for  pid=15162 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  870.805347][T15163] 9p: Bad value for 'rfdno'
[  871.073393][ T6443] pcwd_usb: This driver only supports 1 device
[  871.092173][ T6443] usb 3-1: USB disconnect, device number 70
[  871.196989][T15170] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  872.940998][ T6443] usb 7-1: new high-speed USB device number 68 using dummy_hcd
[  873.065326][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1973'.
[  873.077461][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1973'.
[  873.090537][ T6443] usb 7-1: Using ep0 maxpacket: 8
[  873.091187][ T6443] usb 7-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  873.092074][ T6443] usb 7-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  873.092099][ T6443] usb 7-1: config 1 interface 0 has no altsetting 0
[  873.095607][ T6443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.095627][ T6443] usb 7-1: Product: syz
[  873.095640][ T6443] usb 7-1: Manufacturer: syz
[  873.095652][ T6443] usb 7-1: SerialNumber: syz
[  873.623346][   T31] audit: type=1400 audit(1788622502.176:2741): avc:  denied  { getopt } for  pid=15177 comm="syz.6.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  876.140740][ T6443] usbhid 7-1:1.0: can't add hid device: -71
[  876.143093][ T6443] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  876.149843][ T6443] usb 7-1: USB disconnect, device number 68
[  877.322577][ T6437] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  877.346731][   T31] audit: type=1400 audit(1788622505.936:2742): avc:  denied  { write } for  pid=15198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  877.462110][   T31] audit: type=1400 audit(1788622506.056:2743): avc:  denied  { write } for  pid=15223 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  877.491415][ T6437] usb 4-1: Using ep0 maxpacket: 16
[  877.493476][ T6437] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  877.504110][ T6437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.504133][ T6437] usb 4-1: Product: syz
[  877.504146][ T6437] usb 4-1: Manufacturer: syz
[  877.504158][ T6437] usb 4-1: SerialNumber: syz
[  877.512867][ T6437] usb 4-1: config 0 descriptor??
[  877.528225][ T6437] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  877.727386][ T6437] usb 4-1: clie_3_5_startup: get config number bad return length: 0
[  877.727510][ T6437] visor 4-1:0.0: probe with driver visor failed with error -5
[  877.912669][ T5822] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  877.955655][   T31] audit: type=1400 audit(1788622506.546:2744): avc:  denied  { write } for  pid=15236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  878.061864][ T5822] usb 6-1: Using ep0 maxpacket: 16
[  878.062581][ T5822] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  878.065235][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.065256][ T5822] usb 6-1: Product: syz
[  878.065269][ T5822] usb 6-1: Manufacturer: syz
[  878.065282][ T5822] usb 6-1: SerialNumber: syz
[  878.067527][ T5822] usb 6-1: config 0 descriptor??
[  878.069434][ T5822] visor 6-1:0.0: Sony Clie 3.5 converter detected
[  878.145718][   T31] audit: type=1400 audit(1788622506.736:2745): avc:  denied  { write } for  pid=15248 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  878.291230][ T5822] usb 6-1: clie_3_5_startup: get config number bad return length: 0
[  878.291379][ T5822] visor 6-1:0.0: probe with driver visor failed with error -5
[  879.638167][ T5822] usb 4-1: USB disconnect, device number 80
[  880.060523][ T5822] usb 3-1: new full-speed USB device number 71 using dummy_hcd
[  880.080950][ T5726] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  880.212181][ T5726] usb 4-1: device descriptor read/64, error -71
[  880.220322][ T5822] usb 3-1: unable to get BOS descriptor or descriptor too short
[  880.229066][ T5822] usb 3-1: not running at top speed; connect to a high speed hub
[  880.238014][ T5822] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  880.251676][ T5822] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[  880.260048][ T5822] usb 3-1: config 0 has no interface number 0
[  880.268563][ T5822] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64
[  880.268610][ T5822] usb 3-1: config 0 interface 88 has no altsetting 0
[  880.290255][ T5822] usb 3-1: language id specifier not provided by device, defaulting to English
[  880.305714][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  880.314331][ T5822] usb 3-1: Product: syz
[  880.314355][ T5822] usb 3-1: SerialNumber: Љ
[  880.329560][ T5822] usb 3-1: config 0 descriptor??
[  880.335425][T15268] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  880.461757][ T5726] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  880.561121][ T5822] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input65
[  880.594548][ T5822] usb 3-1: USB disconnect, device number 71
[  880.600698][ T5726] usb 4-1: device descriptor read/64, error -71
[  880.686876][T14470] usb 6-1: USB disconnect, device number 26
[  880.712048][ T5726] usb usb4-port1: attempt power cycle
[  881.121514][ T5726] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  881.129401][T15278] 9p: Bad value for 'rfdno'
[  881.142564][ T5726] usb 4-1: device descriptor read/8, error -71
[  881.390499][ T5726] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  881.414514][ T5726] usb 4-1: device descriptor read/8, error -71
[  881.523197][ T5726] usb usb4-port1: unable to enumerate USB device
[  881.548328][   T31] audit: type=1400 audit(1788622510.136:2746): avc:  denied  { write } for  pid=15283 comm="syz.2.1996" name="functions" dev="configfs" ino=20871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  882.099531][   T31] audit: type=1400 audit(1788622510.686:2747): avc:  denied  { write } for  pid=15283 comm="syz.2.1996" name="c.1" dev="configfs" ino=44169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  882.131152][   T31] audit: type=1400 audit(1788622510.716:2748): avc:  denied  { write } for  pid=15283 comm="syz.2.1996" name="c.1" dev="configfs" ino=44169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  884.300829][T14470] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  884.450863][T14470] usb 4-1: Using ep0 maxpacket: 16
[  884.451395][T14470] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  884.454425][T14470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.454453][T14470] usb 4-1: Product: syz
[  884.454480][T14470] usb 4-1: Manufacturer: syz
[  884.454498][T14470] usb 4-1: SerialNumber: syz
[  884.457277][T14470] usb 4-1: config 0 descriptor??
[  884.472280][T14470] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  884.667296][T14470] usb 4-1: clie_3_5_startup: get config number bad return length: 0
[  884.667427][T14470] visor 4-1:0.0: probe with driver visor failed with error -5
[  885.453590][ T6471] usb 3-1: new full-speed USB device number 72 using dummy_hcd
[  885.612562][ T6471] usb 3-1: unable to get BOS descriptor or descriptor too short
[  885.621378][ T6471] usb 3-1: not running at top speed; connect to a high speed hub
[  885.629239][ T6471] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  885.639806][ T6471] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[  885.648227][ T6471] usb 3-1: config 0 has no interface number 0
[  885.648283][ T6471] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64
[  885.648310][ T6471] usb 3-1: config 0 interface 88 has no altsetting 0
[  885.677185][ T6471] usb 3-1: language id specifier not provided by device, defaulting to English
[  885.696073][ T6471] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  885.704415][ T6471] usb 3-1: Product: syz
[  885.704439][ T6471] usb 3-1: SerialNumber: Љ
[  885.722410][ T6471] usb 3-1: config 0 descriptor??
[  885.729283][T15317] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  885.976206][ T6471] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input66
[  886.008023][ T6471] usb 3-1: USB disconnect, device number 72
[  886.008074][    C1] usb_acecad 3-1:0.88: can't resubmit intr, dummy_hcd.2-1/input0, status -19
[  886.417449][T15326] 9p: Bad value for 'rfdno'
[  887.621506][ T6437] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  887.664893][ T5822] usb 4-1: USB disconnect, device number 85
[  887.931396][ T6437] usb 3-1: Using ep0 maxpacket: 16
[  887.937137][ T6437] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  887.954309][ T6437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.506983][ T6437] usb 3-1: Product: syz
[  888.729674][    T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  888.742611][ T6437] usb 3-1: Manufacturer: syz
[  888.742638][ T6437] usb 3-1: SerialNumber: syz
[  888.751497][ T6437] usb 3-1: config 0 descriptor??
[  888.769012][ T6437] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  888.794690][    T9] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  889.702950][ T6437] usb 3-1: clie_3_5_startup: get config number bad return length: 0
[  889.703527][ T6437] visor 3-1:0.0: probe with driver visor failed with error -5
[  889.858795][ T5822] usb 3-1: USB disconnect, device number 73
[  889.890269][T15351] Can't find ip_set type has
[  890.059713][T15347] fido_id[15347]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  891.331317][ T6437] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  891.468251][T15373] netlink: 'syz.2.2020': attribute type 1 has an invalid length.
[  891.496818][T15373] 8021q: adding VLAN 0 to HW filter on device bond1
[  891.505346][ T6437] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  891.516291][ T6437] usb 6-1: config 1 has too many interfaces: 171, using maximum allowed: 32
[  891.526249][ T6437] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 171
[  891.526522][ T6437] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 18656, setting to 1024
[  891.526547][ T6437] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  891.563377][ T6437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.563411][ T6437] usb 6-1: Product: syz
[  891.563440][ T6437] usb 6-1: Manufacturer: syz
[  891.563455][ T6437] usb 6-1: SerialNumber: syz
[  891.591758][T15360] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  891.610924][ T5713] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  891.669047][T15375] PM: Enabling pm_trace changes system date and time during resume.
[  891.669047][T15375] PM: Correct system time has to be restored manually after resume.
[  891.728720][T15373] bond1: (slave bridge1): making interface the new active one
[  891.754564][T15373] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  891.784311][ T5713] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  891.806071][ T6437] usb 6-1: Cannot retrieve CPort count: 0
[  891.808934][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.808957][ T5713] usb 4-1: Product: syz
[  891.808971][ T5713] usb 4-1: Manufacturer: syz
[  891.808983][ T5713] usb 4-1: SerialNumber: syz
[  891.812382][ T6437] usb 6-1: Cannot retrieve CPort count: -5
[  891.812409][ T6437] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -5
[  891.894011][ T5713] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  892.083650][ T5726] usb 6-1: USB disconnect, device number 27
[  893.285552][ T5822] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  893.291747][ T5713] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  893.291925][ T5713] ath9k_htc: Failed to initialize the device
[  893.446976][ T5713] usb 4-1: ath9k_htc: USB layer deinitialized
[  893.453397][ T5822] usb 3-1: device descriptor read/64, error -71
[  893.652702][ T6437] usb 4-1: USB disconnect, device number 86
[  893.784544][ T5822] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  893.911438][ T5822] usb 3-1: device descriptor read/64, error -71
[  894.020981][ T5822] usb usb3-port1: attempt power cycle
[  895.003634][ T5822] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  895.043821][ T5822] usb 3-1: device descriptor read/8, error -71
[  895.296670][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  895.407637][T15396] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  895.415519][T15396] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  895.433398][T15396] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  895.443889][T15396] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  897.196926][T15414] netlink: 'syz.5.2032': attribute type 10 has an invalid length.
[  897.390645][T15396] Bluetooth: hci5: command 0x0406 tx timeout
[  897.884046][   T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.030526][   T52] Bluetooth: hci4: command tx timeout
[  899.541439][T15435] 9p: Bad value for 'rfdno'
[  899.703722][   T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  899.960135][   T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.431069][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  900.918506][   T52] Bluetooth: hci4: command tx timeout
[  901.116638][   T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.810706][ T6438] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  901.962492][ T6438] usb 4-1: Using ep0 maxpacket: 32
[  901.963906][ T6438] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  901.973074][ T6438] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7
[  901.982820][ T6438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  901.982845][ T6438] usb 4-1: Product: syz
[  901.982859][ T6438] usb 4-1: Manufacturer: syz
[  901.982872][ T6438] usb 4-1: SerialNumber: syz
[  902.080973][ T5822] usb 3-1: new full-speed USB device number 78 using dummy_hcd
[  902.103454][T15454] FAULT_INJECTION: forcing a failure.
[  902.103454][T15454] name failslab, interval 1, probability 0, space 0, times 0
[  902.103505][T15454] CPU: 1 UID: 0 PID: 15454 Comm: syz.5.2038 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  902.103539][T15454] Tainted: [L]=SOFTLOCKUP
[  902.103548][T15454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  902.103560][T15454] Call Trace:
[  902.103569][T15454]  <TASK>
[  902.103576][T15454]  dump_stack_lvl+0x100/0x190
[  902.103610][T15454]  should_fail_ex.cold+0x5/0xa
[  902.103638][T15454]  should_failslab+0xc2/0x120
[  902.103663][T15454]  __kmalloc_cache_noprof+0x91/0x6d0
[  902.103692][T15454]  ? ____ip_mc_inc_group+0x40b/0x10d0
[  902.103729][T15454]  ____ip_mc_inc_group+0x40b/0x10d0
[  902.103768][T15454]  ? __pfx_____ip_mc_inc_group+0x10/0x10
[  902.103806][T15454]  ? ib_device_get_by_netdev+0x1b2/0x530
[  902.103834][T15454]  ip_mc_up+0x154/0x390
[  902.103854][T15454]  inetdev_event+0x6f0/0x17f0
[  902.103877][T15454]  ? ib_netdevice_event+0xfc/0x330
[  902.103896][T15454]  ? __pfx_inetdev_event+0x10/0x10
[  902.103918][T15454]  ? cfg802154_netdev_notifier_call+0x17a/0xad0
[  902.103944][T15454]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  902.103971][T15454]  notifier_call_chain+0x99/0x3f0
[  902.104007][T15454]  call_netdevice_notifiers_info+0xbe/0x110
[  902.104033][T15454]  __dev_notify_flags+0x22c/0x4b0
[  902.104064][T15454]  ? __pfx___dev_notify_flags+0x10/0x10
[  902.104099][T15454]  ? __pfx___dev_change_flags+0x10/0x10
[  902.104136][T15454]  netif_change_flags+0x108/0x160
[  902.104169][T15454]  dev_change_flags+0xba/0x260
[  902.104194][T15454]  devinet_ioctl+0x110b/0x1f10
[  902.104220][T15454]  ? __pfx_devinet_ioctl+0x10/0x10
[  902.104242][T15454]  ? _copy_from_user+0x59/0xd0
[  902.104275][T15454]  inet_ioctl+0x3aa/0x3f0
[  902.104299][T15454]  ? __pfx_inet_ioctl+0x10/0x10
[  902.104335][T15454]  ? tomoyo_path_number_perm+0x188/0x580
[  902.104372][T15454]  sock_do_ioctl+0x118/0x280
[  902.104411][T15454]  ? __pfx_sock_do_ioctl+0x10/0x10
[  902.104437][T15454]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  902.104467][T15454]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  902.104497][T15454]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  902.104520][T15454]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  902.104545][T15454]  sock_ioctl+0x599/0x6b0
[  902.104572][T15454]  ? __pfx_sock_ioctl+0x10/0x10
[  902.104604][T15454]  ? selinux_file_ioctl+0x13b/0x290
[  902.104622][T15454]  ? selinux_file_ioctl+0xb6/0x290
[  902.104643][T15454]  ? __pfx_sock_ioctl+0x10/0x10
[  902.104670][T15454]  __x64_sys_ioctl+0x18e/0x210
[  902.104703][T15454]  do_syscall_64+0x123/0x790
[  902.104729][T15454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.104750][T15454] RIP: 0033:0x7f3c7a19e159
[  902.104771][T15454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  902.104790][T15454] RSP: 002b:00007f3c783f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  902.104810][T15454] RAX: ffffffffffffffda RBX: 00007f3c7a426090 RCX: 00007f3c7a19e159
[  902.104823][T15454] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000004
[  902.104836][T15454] RBP: 00007f3c7a235024 R08: 0000000000000000 R09: 0000000000000000
[  902.104848][T15454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  902.104860][T15454] R13: 00007f3c7a426128 R14: 00007f3c7a426090 R15: 00007ffd321e0378
[  902.104886][T15454]  </TASK>
[  902.132207][   T59] bridge_slave_1: left allmulticast mode
[  902.132231][   T59] bridge_slave_1: left promiscuous mode
[  902.132419][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  902.146415][   T59] bridge_slave_0: left allmulticast mode
[  902.146443][   T59] bridge_slave_0: left promiscuous mode
[  902.146643][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  902.178883][   T59] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  902.179387][   T59] batman_adv: batadv0: Interface deactivated: gretap1
[  902.241215][ T5822] usb 3-1: unable to get BOS descriptor or descriptor too short
[  902.241671][ T5822] usb 3-1: not running at top speed; connect to a high speed hub
[  902.241693][ T5822] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  902.246398][ T5822] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[  902.246421][ T5822] usb 3-1: config 0 has no interface number 0
[  902.246454][ T5822] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64
[  902.246498][ T5822] usb 3-1: config 0 interface 88 has no altsetting 0
[  902.254745][ T5822] usb 3-1: language id specifier not provided by device, defaulting to English
[  902.282800][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  902.282824][ T5822] usb 3-1: Product: syz
[  902.282837][ T5822] usb 3-1: SerialNumber: Љ
[  902.288067][ T5822] usb 3-1: config 0 descriptor??
[  902.289014][T15450] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  902.429376][T15461] Cannot find del_set index 4 as target
[  903.657906][   T52] Bluetooth: hci4: command tx timeout
[  903.713087][   T59] batman_adv: batadv0: Removing interface: ip6gretap1
[  903.738272][ T5822] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input67
[  903.765734][ T5822] usb 3-1: USB disconnect, device number 78
[  903.982215][   T59] batman_adv: batadv0: Removing interface: gretap1
[  904.001549][   T59] bond1 (unregistering): (slave geneve2): Releasing active interface
[  904.045781][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  904.065511][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  904.077199][   T59] bond0 (unregistering): Released all slaves
[  904.093030][   T59] bond1 (unregistering): Released all slaves
[  904.111622][   T59] bond2 (unregistering): Released all slaves
[  904.119864][   T59] bond3 (unregistering): Released all slaves
[  904.443558][T15464] netlink: 'syz.3.2037': attribute type 5 has an invalid length.
[  904.508050][T15469] FAULT_INJECTION: forcing a failure.
[  904.508050][T15469] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  904.522471][T15469] CPU: 1 UID: 0 PID: 15469 Comm: syz.5.2039 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  904.522500][T15469] Tainted: [L]=SOFTLOCKUP
[  904.522507][T15469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  904.522518][T15469] Call Trace:
[  904.522524][T15469]  <TASK>
[  904.522532][T15469]  dump_stack_lvl+0x100/0x190
[  904.522566][T15469]  should_fail_ex.cold+0x5/0xa
[  904.522591][T15469]  _copy_from_user+0x2e/0xd0
[  904.522619][T15469]  kstrtouint_from_user+0xd6/0x1d0
[  904.522641][T15469]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  904.522666][T15469]  ? lock_acquire+0x1d1/0x380
[  904.522688][T15469]  proc_fail_nth_write+0x83/0x220
[  904.522709][T15469]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  904.522735][T15469]  vfs_write+0x2aa/0x1050
[  904.522752][T15469]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  904.522771][T15469]  ? lock_acquire+0x1d1/0x380
[  904.522786][T15469]  ? __fget_files+0x34/0x3d0
[  904.522806][T15469]  ? __pfx_vfs_write+0x10/0x10
[  904.522820][T15469]  ? find_held_lock+0x2b/0x80
[  904.522842][T15469]  ? __fget_files+0x215/0x3d0
[  904.522864][T15469]  ? __fget_files+0x21f/0x3d0
[  904.522888][T15469]  ksys_write+0x12a/0x250
[  904.522904][T15469]  ? __pfx_ksys_write+0x10/0x10
[  904.522925][T15469]  do_syscall_64+0x123/0x790
[  904.522947][T15469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.522964][T15469] RIP: 0033:0x7f3c7a15e98e
[  904.522980][T15469] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  904.522995][T15469] RSP: 002b:00007f3c7af99fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  904.523012][T15469] RAX: ffffffffffffffda RBX: 00007f3c7af9a6c0 RCX: 00007f3c7a15e98e
[  904.523023][T15469] RDX: 0000000000000001 RSI: 00007f3c7af9a090 RDI: 0000000000000007
[  904.523033][T15469] RBP: 00007f3c7af9a090 R08: 0000000000000000 R09: 0000000000000000
[  904.523043][T15469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  904.523054][T15469] R13: 00007f3c7a426038 R14: 00007f3c7a425fa0 R15: 00007ffd321e0378
[  904.523078][T15469]  </TASK>
[  904.710977][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2037'.
[  905.031968][ T6438] usb 4-1: USB disconnect, device number 87
[  905.187370][ T7227] udevd[7227]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  905.630822][ T6438] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  905.711142][T15396] Bluetooth: hci4: command tx timeout
[  905.793910][ T6438] usb 6-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  905.807132][ T6438] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  905.820037][ T6438] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  905.854659][ T6438] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.870095][ T6438] usb 6-1: Product: syz
[  905.879316][ T6438] usb 6-1: Manufacturer: syz
[  905.888011][ T6438] usb 6-1: SerialNumber: syz
[  906.223291][ T6438] kaweth 6-1:1.0: Firmware present in device.
[  906.234418][   T59] hsr_slave_0: left promiscuous mode
[  906.245227][   T59] hsr_slave_1: left promiscuous mode
[  906.246158][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  906.246195][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  906.267696][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  906.267717][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  906.390773][ T6438] kaweth 6-1:1.0: Statistics collection: 0
[  906.397762][ T6438] kaweth 6-1:1.0: Multicast filter limit: 0
[  906.397781][ T6438] kaweth 6-1:1.0: MTU: 0
[  906.397793][ T6438] kaweth 6-1:1.0: Read MAC address 00:00:00:00:00:00
[  906.555512][T15485] CacheFiles: No cache directory specified
[  907.031227][T15488] Mount JFS Failure: -22
[  907.031260][T15488] jfs_mount failed w/return code = -22
[  908.738306][   T59] veth1_macvtap: left promiscuous mode
[  908.738361][   T59] veth0_macvtap: left promiscuous mode
[  908.738480][   T59] veth1_vlan: left promiscuous mode
[  908.738541][   T59] veth0_vlan: left promiscuous mode
[  911.257092][   T59] team0 (unregistering): Port device team_slave_1 removed
[  911.287513][   T59] team0 (unregistering): Port device team_slave_0 removed
[  911.479660][T15393] bridge0: port 1(bridge_slave_0) entered blocking state
[  911.488446][T15393] bridge0: port 1(bridge_slave_0) entered disabled state
[  911.496959][T15393] bridge_slave_0: entered allmulticast mode
[  911.510584][T15393] bridge_slave_0: entered promiscuous mode
[  911.532897][ T6438] kaweth 6-1:1.0: Error setting SOFS wait
[  911.540485][ T6438] kaweth 6-1:1.0: probe with driver kaweth failed with error -5
[  911.544925][T15393] bridge0: port 2(bridge_slave_1) entered blocking state
[  911.551562][T15393] bridge0: port 2(bridge_slave_1) entered disabled state
[  911.551677][T15393] bridge_slave_1: entered allmulticast mode
[  911.557714][T15393] bridge_slave_1: entered promiscuous mode
[  911.594991][ T6438] usb 6-1: USB disconnect, device number 28
[  911.679437][T15393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  911.825692][T15503] 9p: Bad value for 'rfdno'
[  911.837103][T15393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  912.029584][T15393] team0: Port device team_slave_0 added
[  912.081326][T15393] team0: Port device team_slave_1 added
[  912.188970][T15393] batman_adv: batadv0: Adding interface: batadv_slave_0
[  912.189003][T15393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  912.189039][T15393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  912.222209][T15393] batman_adv: batadv0: Adding interface: batadv_slave_1
[  912.222227][T15393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  912.222249][T15393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  912.349893][T15393] hsr_slave_0: entered promiscuous mode
[  912.397215][T15393] hsr_slave_1: entered promiscuous mode
[  912.397702][T15393] debugfs: 'hsr0' already exists in 'hsr'
[  912.397718][T15393] Cannot create hsr debugfs directory
[  912.726540][T15513] 9p: Bad value for 'rfdno'
[  912.988827][   T31] audit: type=1400 audit(1788622541.576:2749): avc:  denied  { write } for  pid=15505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  913.132956][   T31] audit: type=1400 audit(1788622541.726:2750): avc:  denied  { write } for  pid=15520 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  913.184931][   T59] IPVS: stop unused estimator thread 0...
[  913.274597][ T5264] 8021q: adding VLAN 0 to HW filter on device eth21
[  913.900050][T15530] 9p: Bad value for 'rfdno'
[  914.567835][   T31] audit: type=1400 audit(1788622543.136:2751): avc:  denied  { map } for  pid=15536 comm="syz.0.2050" path="socket:[106815]" dev="sockfs" ino=106815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  917.084148][   T31] audit: type=1400 audit(1788622545.666:2752): avc:  denied  { write } for  pid=15526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  917.543517][T15572] CacheFiles: No cache directory specified
[  918.044393][   T31] audit: type=1400 audit(1788622546.636:2753): avc:  denied  { write } for  pid=15567 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  918.356073][ T5264] 8021q: adding VLAN 0 to HW filter on device eth22
[  919.189907][T15393] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  919.205099][T15393] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  919.214523][T15393] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  919.245736][T15393] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  919.255281][T15393] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  919.266382][T15393] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  919.276817][T15393] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  919.316531][T15393] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  919.364759][   T31] audit: type=1400 audit(1788622547.946:2754): avc:  denied  { write } for  pid=15584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  919.457798][   T31] audit: type=1400 audit(1788622548.046:2755): avc:  denied  { write } for  pid=15604 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  919.537339][ T5264] 8021q: adding VLAN 0 to HW filter on device eth23
[  919.618396][T15393] 8021q: adding VLAN 0 to HW filter on device bond0
[  919.663304][T15393] 8021q: adding VLAN 0 to HW filter on device team0
[  919.698730][ T7742] bridge0: port 1(bridge_slave_0) entered blocking state
[  919.698824][ T7742] bridge0: port 1(bridge_slave_0) entered forwarding state
[  919.739533][ T7742] bridge0: port 2(bridge_slave_1) entered blocking state
[  919.739625][ T7742] bridge0: port 2(bridge_slave_1) entered forwarding state
[  919.879560][   T31] audit: type=1400 audit(1788622548.466:2756): avc:  denied  { write } for  pid=15607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  920.029979][   T31] audit: type=1400 audit(1788622548.616:2757): avc:  denied  { write } for  pid=15620 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  920.162371][ T5264] 8021q: adding VLAN 0 to HW filter on device eth24
[  922.601771][T15393] 8021q: adding VLAN 0 to HW filter on device batadv0
[  922.910945][   T31] audit: type=1400 audit(1788622551.506:2758): avc:  denied  { write } for  pid=15640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  923.136698][   T31] audit: type=1400 audit(1788622551.636:2759): avc:  denied  { write } for  pid=15674 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  923.160306][T15670] CacheFiles: No cache directory specified
[  923.248907][ T5609] Bluetooth: hci0: command 0x0406 tx timeout
[  923.319808][T15393] veth0_vlan: entered promiscuous mode
[  923.343466][T15393] veth1_vlan: entered promiscuous mode
[  923.378694][T15393] veth0_macvtap: entered promiscuous mode
[  923.396105][T15393] veth1_macvtap: entered promiscuous mode
[  923.423024][T15393] batman_adv: batadv0: Interface activated: batadv_slave_0
[  923.437678][T15393] batman_adv: batadv0: Interface activated: batadv_slave_1
[  923.487481][T11287] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  923.502406][ T7742] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  923.528667][ T7741] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  923.541625][T11456] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  923.562140][ T5713] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[  923.680549][    T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  923.733598][ T5713] usb 6-1: unable to get BOS descriptor or descriptor too short
[  923.734831][ T5713] usb 6-1: not running at top speed; connect to a high speed hub
[  923.734855][ T5713] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  923.735682][ T5713] usb 6-1: config 0 has an invalid interface number: 88 but max is 0
[  923.735701][ T5713] usb 6-1: config 0 has no interface number 0
[  923.735731][ T5713] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64
[  923.735753][ T5713] usb 6-1: config 0 interface 88 has no altsetting 0
[  923.738059][ T5713] usb 6-1: language id specifier not provided by device, defaulting to English
[  923.743073][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  923.743096][ T5713] usb 6-1: Product: syz
[  923.743110][ T5713] usb 6-1: SerialNumber: Љ
[  923.746711][ T5713] usb 6-1: config 0 descriptor??
[  923.747795][T15658] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  923.843438][    T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  923.855259][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  923.855311][    T9] usb 3-1: Product: syz
[  923.855338][    T9] usb 3-1: Manufacturer: syz
[  923.855370][    T9] usb 3-1: SerialNumber: syz
[  923.901647][    T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  923.948635][   T31] audit: type=1400 audit(1788622552.536:2760): avc:  denied  { write } for  pid=15688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  924.012816][ T5713] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input68
[  924.052604][ T5713] usb 6-1: USB disconnect, device number 29
[  924.066459][   T31] audit: type=1400 audit(1788622552.656:2761): avc:  denied  { write } for  pid=15702 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  924.842073][ T2144] usb 3-1: USB disconnect, device number 79
[  925.000287][   T31] audit: type=1400 audit(1788622553.586:2762): avc:  denied  { write } for  pid=15704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  925.001388][    T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  925.001513][    T9] ath9k_htc: Failed to initialize the device
[  925.002002][ T2144] usb 3-1: ath9k_htc: USB layer deinitialized
[  925.124836][   T31] audit: type=1400 audit(1788622553.706:2763): avc:  denied  { write } for  pid=15725 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  925.181577][T15728] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2070'.
[  925.186179][T15728] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=15728 comm=syz.5.2070
[  925.430491][    T9] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[  925.612522][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  925.612979][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[  925.613016][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  925.614132][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  925.614157][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  925.616680][    T9] usb 6-1: string descriptor 0 read error: -22
[  925.616784][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.623049][    T9] usb 6-1: 0:2 : does not exist
[  925.687764][   T31] audit: type=1400 audit(1788622554.276:2764): avc:  denied  { write } for  pid=15731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  925.865046][T15667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  926.040904][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  926.107631][   T31] audit: type=1400 audit(1788622554.656:2765): avc:  denied  { write } for  pid=15745 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  926.243265][T15728] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15728 comm=syz.5.2070
[  927.819536][ T7742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  927.834204][ T7742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  927.842977][    T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  927.904584][    T9] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[  927.904629][    T9] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  927.904658][    T9] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1
[  927.965325][    T9] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  927.981036][    T9] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[  928.016318][    T9] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  928.036833][    T9] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[  928.041419][ T7742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  928.041439][ T7742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  928.085287][    T9] usb 6-1: USB disconnect, device number 30
[  928.479712][T15763] FAULT_INJECTION: forcing a failure.
[  928.479712][T15763] name failslab, interval 1, probability 0, space 0, times 0
[  928.479753][T15763] CPU: 0 UID: 0 PID: 15763 Comm: syz.8.2024 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  928.479785][T15763] Tainted: [L]=SOFTLOCKUP
[  928.479794][T15763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  928.479807][T15763] Call Trace:
[  928.479815][T15763]  <TASK>
[  928.479823][T15763]  dump_stack_lvl+0x100/0x190
[  928.479860][T15763]  should_fail_ex.cold+0x5/0xa
[  928.479890][T15763]  should_failslab+0xc2/0x120
[  928.479918][T15763]  __kmalloc_noprof+0xfc/0x840
[  928.479939][T15763]  ? raw_event_queue_add+0x82/0x220
[  928.479975][T15763]  raw_event_queue_add+0x82/0x220
[  928.480007][T15763]  gadget_bind+0x422/0x660
[  928.480053][T15763]  gadget_bind_driver+0x28c/0xbf0
[  928.480087][T15763]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[  928.480118][T15763]  ? __pfx_gadget_bind_driver+0x10/0x10
[  928.480154][T15763]  really_probe+0x241/0xa60
[  928.480179][T15763]  __driver_probe_device+0x210/0x460
[  928.480198][T15763]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  928.480225][T15763]  driver_probe_device+0x4a/0x140
[  928.480245][T15763]  __driver_attach+0x21f/0x5b0
[  928.480267][T15763]  ? __pfx___driver_attach+0x10/0x10
[  928.480286][T15763]  bus_for_each_dev+0x13e/0x1d0
[  928.480312][T15763]  ? __pfx_bus_for_each_dev+0x10/0x10
[  928.480335][T15763]  ? bus_add_driver+0x2b5/0x5b0
[  928.480371][T15763]  bus_add_driver+0x305/0x5b0
[  928.480402][T15763]  driver_register+0x1e2/0x360
[  928.480422][T15763]  ? rcu_is_watching+0x13/0xc0
[  928.480450][T15763]  usb_gadget_register_driver_owner+0x132/0x210
[  928.480484][T15763]  raw_ioctl+0x1a85/0x2b80
[  928.480520][T15763]  ? __pfx_raw_ioctl+0x10/0x10
[  928.480546][T15763]  ? selinux_file_ioctl+0x13b/0x290
[  928.480565][T15763]  ? selinux_file_ioctl+0xb6/0x290
[  928.480585][T15763]  ? __pfx_raw_ioctl+0x10/0x10
[  928.480614][T15763]  __x64_sys_ioctl+0x18e/0x210
[  928.480651][T15763]  do_syscall_64+0x123/0x790
[  928.480679][T15763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.480702][T15763] RIP: 0033:0x7f4918b9ddeb
[  928.480722][T15763] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  928.480743][T15763] RSP: 002b:00007f4919a54f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  928.480765][T15763] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f4918b9ddeb
[  928.480779][T15763] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009
[  928.480792][T15763] RBP: 00007f4919a55fd0 R08: 0000000000000001 R09: 00000000ffffffff
[  928.480806][T15763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  928.480819][T15763] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000000
[  928.480848][T15763]  </TASK>
[  928.480943][T15763] raw-gadget.0 gadget.8: failed to queue connect event
[  928.480964][T15763] udc dummy_udc.8: failed to start USB Raw Gadget: -12
[  928.480988][T15763] raw-gadget.0 gadget.8: probe with driver raw-gadget.0 failed with error -12
[  928.481603][T15763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  928.481961][T15763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  928.618923][   T31] audit: type=1400 audit(1788622557.206:2766): avc:  denied  { bind } for  pid=15760 comm="syz.8.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  928.624738][   T31] audit: type=1400 audit(1788622557.216:2767): avc:  denied  { ioctl } for  pid=15760 comm="syz.8.2024" path="socket:[106303]" dev="sockfs" ino=106303 ioctlcmd=0x5826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  928.849823][   T31] audit: type=1400 audit(1788622557.436:2768): avc:  denied  { write } for  pid=15753 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  928.964245][   T31] audit: type=1400 audit(1788622557.556:2769): avc:  denied  { write } for  pid=15774 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  929.238514][T14471] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  929.259226][T15779] CacheFiles: No cache directory specified
[  929.382195][T14471] usb 6-1: Using ep0 maxpacket: 16
[  929.390776][T14471] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  929.407408][T14471] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  929.407452][T14471] usb 6-1: Product: syz
[  929.407479][T14471] usb 6-1: Manufacturer: syz
[  929.407497][T14471] usb 6-1: SerialNumber: syz
[  929.436776][T14471] usb 6-1: config 0 descriptor??
[  929.450179][T14471] visor 6-1:0.0: Sony Clie 3.5 converter detected
[  930.612468][   T31] audit: type=1326 audit(1788622558.606:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.2080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f855d39e159 code=0x0
[  930.668198][T14471] usb 6-1: clie_3_5_startup: get config number bad return length: 0
[  930.668328][T14471] visor 6-1:0.0: probe with driver visor failed with error -5
[  930.691353][T15794] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2079'.
[  931.471387][   T31] audit: type=1400 audit(1788622560.046:2771): avc:  denied  { write } for  pid=15776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  932.876091][   T31] audit: type=1400 audit(1788622561.466:2772): avc:  denied  { write } for  pid=15810 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  933.743090][    T9] usb 6-1: USB disconnect, device number 31
[  934.142264][   T31] audit: type=1400 audit(1788622562.736:2773): avc:  denied  { setopt } for  pid=15816 comm="syz.3.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  934.210925][   T31] audit: type=1400 audit(1788622562.736:2774): avc:  denied  { write } for  pid=15816 comm="syz.3.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  934.649859][T15829] CacheFiles: No cache directory specified
[  935.728802][   T31] audit: type=1326 audit(1788622563.916:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15835 comm="syz.3.2090" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f655d19e159 code=0x0
[  936.363111][T11288] bridge_slave_1: left allmulticast mode
[  936.363150][T11288] bridge_slave_1: left promiscuous mode
[  936.363312][T11288] bridge0: port 2(bridge_slave_1) entered disabled state
[  936.369331][   T31] audit: type=1400 audit(1788622564.956:2776): avc:  denied  { write } for  pid=15820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  936.469358][T11288] bridge_slave_0: left allmulticast mode
[  936.469405][T11288] bridge_slave_0: left promiscuous mode
[  936.469583][T11288] bridge0: port 1(bridge_slave_0) entered disabled state
[  936.513661][T11288] dvmrp0: left allmulticast mode
[  936.535266][   T31] audit: type=1400 audit(1788622565.116:2777): avc:  denied  { write } for  pid=15861 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  937.688047][T11288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  937.699143][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2096'.
[  937.721942][T11288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  937.735275][T11288] bond0 (unregistering): Released all slaves
[  937.852768][T11288] tipc: Left network mode
[  938.221852][   T31] audit: type=1400 audit(1788622566.816:2778): avc:  denied  { write } for  pid=15870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  938.348559][T15896] CacheFiles: No cache directory specified
[  938.387960][   T31] audit: type=1400 audit(1788622566.976:2779): avc:  denied  { write } for  pid=15898 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  939.619664][T15912] FAULT_INJECTION: forcing a failure.
[  939.619664][T15912] name failslab, interval 1, probability 0, space 0, times 0
[  939.619710][T15912] CPU: 1 UID: 0 PID: 15912 Comm: syz.8.2102 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  939.619735][T15912] Tainted: [L]=SOFTLOCKUP
[  939.619742][T15912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  939.619753][T15912] Call Trace:
[  939.619759][T15912]  <TASK>
[  939.619767][T15912]  dump_stack_lvl+0x100/0x190
[  939.619800][T15912]  should_fail_ex.cold+0x5/0xa
[  939.619826][T15912]  should_failslab+0xc2/0x120
[  939.619856][T15912]  __kmalloc_noprof+0xfc/0x840
[  939.619875][T15912]  ? tomoyo_encode2+0xfb/0x3c0
[  939.619900][T15912]  tomoyo_encode2+0xfb/0x3c0
[  939.619921][T15912]  tomoyo_encode+0x29/0x50
[  939.619937][T15912]  tomoyo_realpath_from_path+0x18c/0x690
[  939.619961][T15912]  tomoyo_path_number_perm+0x23c/0x580
[  939.619987][T15912]  ? tomoyo_path_number_perm+0x22e/0x580
[  939.620014][T15912]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  939.620050][T15912]  ? __lock_acquire+0x4c5/0x1ec0
[  939.620081][T15912]  ? __fget_files+0x34/0x3d0
[  939.620103][T15912]  ? find_held_lock+0x2b/0x80
[  939.620125][T15912]  ? hook_file_ioctl_common+0x140/0x440
[  939.620152][T15912]  ? __fget_files+0x21f/0x3d0
[  939.620176][T15912]  security_file_ioctl+0xd3/0x230
[  939.620210][T15912]  __x64_sys_ioctl+0xb7/0x210
[  939.620241][T15912]  do_syscall_64+0x123/0x790
[  939.620267][T15912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.620286][T15912] RIP: 0033:0x7f4918b9e159
[  939.620302][T15912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  939.620319][T15912] RSP: 002b:00007f4919a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  939.620338][T15912] RAX: ffffffffffffffda RBX: 00007f4918e25fa0 RCX: 00007f4918b9e159
[  939.620349][T15912] RDX: 0000200000000040 RSI: 0000000050009404 RDI: 0000000000000003
[  939.620360][T15912] RBP: 00007f4919a57090 R08: 0000000000000000 R09: 0000000000000000
[  939.620370][T15912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  939.620380][T15912] R13: 00007f4918e26038 R14: 00007f4918e25fa0 R15: 00007ffc5f16a408
[  939.620403][T15912]  </TASK>
[  939.677369][T15912] ERROR: Out of memory at tomoyo_realpath_from_path.
[  939.935168][   T31] audit: type=1326 audit(1788622568.526:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.0.2098" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f855d39e159 code=0x0
[  940.382477][   T31] audit: type=1400 audit(1788622568.966:2781): avc:  denied  { write } for  pid=15901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  940.596159][   T31] audit: type=1400 audit(1788622569.186:2782): avc:  denied  { write } for  pid=15927 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  941.079811][T11288] hsr_slave_0: left promiscuous mode
[  941.085960][T11288] hsr_slave_1: left promiscuous mode
[  941.088430][T11288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  941.088448][T11288] batman_adv: batadv0: Removing interface: batadv_slave_0
[  941.136176][T11288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  941.136216][T11288] batman_adv: batadv0: Removing interface: batadv_slave_1
[  941.177260][T11288] veth1_macvtap: left promiscuous mode
[  941.177314][T11288] veth0_macvtap: left promiscuous mode
[  941.177382][T11288] veth1_vlan: left promiscuous mode
[  941.177447][T11288] veth0_vlan: left promiscuous mode
[  942.150478][ T6438] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[  942.281836][ T6438] usb 6-1: device descriptor read/64, error -71
[  942.521085][ T6438] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[  942.597967][   T31] audit: type=1400 audit(1788622571.186:2783): avc:  denied  { write } for  pid=15931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  942.654981][ T6438] usb 6-1: device descriptor read/64, error -71
[  942.737855][T11288] team0 (unregistering): Port device team_slave_1 removed
[  942.762777][ T6438] usb usb6-port1: attempt power cycle
[  942.803409][T11288] team0 (unregistering): Port device team_slave_0 removed
[  942.854159][   T31] audit: type=1400 audit(1788622571.446:2784): avc:  denied  { write } for  pid=15957 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  943.101397][ T6438] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  943.123247][ T6438] usb 6-1: device descriptor read/8, error -71
[  944.090779][ T6438] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[  944.093312][ T5822] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  944.130859][ T6438] usb 6-1: device descriptor read/8, error -71
[  944.279203][ T6438] usb usb6-port1: unable to enumerate USB device
[  944.304274][ T5822] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  944.305330][ T5822] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  944.305367][ T5822] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 18656, setting to 1024
[  944.305384][ T5822] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  944.307336][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.307354][ T5822] usb 4-1: Product: syz
[  944.307372][ T5822] usb 4-1: Manufacturer: syz
[  944.307382][ T5822] usb 4-1: SerialNumber: syz
[  944.315215][T15964] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  944.624124][ T5822] usb 4-1: Cannot retrieve CPort count: 0
[  944.626038][ T5822] usb 4-1: Cannot retrieve CPort count: -5
[  944.626064][ T5822] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -5
[  945.016637][T11288] IPVS: stop unused estimator thread 0...
[  945.096764][ T5822] usb 4-1: USB disconnect, device number 88
[  945.204500][   T31] audit: type=1400 audit(1788622573.786:2785): avc:  denied  { write } for  pid=15969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  945.393519][   T31] audit: type=1400 audit(1788622573.986:2786): avc:  denied  { write } for  pid=15993 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  945.455741][T15995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15995 comm=syz.5.2118
[  945.560463][ T5822] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  945.723662][ T5822] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  945.724694][ T5822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  945.724718][ T5822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  945.726635][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.726654][ T5822] usb 3-1: Product: syz
[  945.726667][ T5822] usb 3-1: Manufacturer: syz
[  945.726679][ T5822] usb 3-1: SerialNumber: syz
[  945.853263][   T31] audit: type=1400 audit(1788622574.436:2787): avc:  denied  { write } for  pid=15997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  945.963909][   T31] audit: type=1400 audit(1788622574.556:2788): avc:  denied  { write } for  pid=16009 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  946.003590][ T5822] kaweth 3-1:1.0: Firmware present in device.
[  946.153049][ T5822] kaweth 3-1:1.0: Statistics collection: 0
[  946.153180][ T5822] kaweth 3-1:1.0: Multicast filter limit: 0
[  946.153215][ T5822] kaweth 3-1:1.0: MTU: 0
[  946.153227][ T5822] kaweth 3-1:1.0: Read MAC address 00:00:00:00:00:00
[  946.296026][T16019] 9p: Bad value for 'rfdno'
[  947.413985][ T5822] kaweth 3-1:1.0: Error setting SOFS wait
[  947.414176][ T5822] kaweth 3-1:1.0: probe with driver kaweth failed with error -5
[  947.444755][ T5822] usb 3-1: USB disconnect, device number 80
[  948.610493][    T9] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  948.781145][    T9] usb 9-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  948.792229][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  948.792274][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  948.794309][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  948.794330][    T9] usb 9-1: Product: syz
[  948.794342][    T9] usb 9-1: Manufacturer: syz
[  948.794354][    T9] usb 9-1: SerialNumber: syz
[  949.223233][    T9] kaweth 9-1:1.0: Firmware present in device.
[  949.248589][    T9] kaweth 9-1:1.0: Statistics collection: 0
[  949.248634][    T9] kaweth 9-1:1.0: Multicast filter limit: 0
[  949.256394][    T9] kaweth 9-1:1.0: MTU: 0
[  949.256419][    T9] kaweth 9-1:1.0: Read MAC address 00:00:00:00:00:00
[  949.728934][T16043] Mount JFS Failure: -22
[  949.729007][T16043] jfs_mount failed w/return code = -22
[  950.336935][    T9] kaweth 9-1:1.0: Error setting SOFS wait
[  950.337089][    T9] kaweth 9-1:1.0: probe with driver kaweth failed with error -5
[  950.343889][    T9] usb 9-1: USB disconnect, device number 23
[  951.905191][T16054] 9p: Bad value for 'rfdno'
[  952.364145][   T31] audit: type=1400 audit(1788622580.956:2789): avc:  denied  { write } for  pid=16036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  952.624141][   T31] audit: type=1400 audit(1788622581.216:2790): avc:  denied  { write } for  pid=16067 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  952.649863][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2121'.
[  952.667736][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2121'.
[  953.875922][   T31] audit: type=1326 audit(1788622582.066:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16079 comm="syz.2.2130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f118919e159 code=0x0
[  954.510566][T14471] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  954.655059][ T7746] IPVS: starting estimator thread 0...
[  954.706666][T14471] usb 9-1: Using ep0 maxpacket: 16
[  954.717032][T14471] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  954.734480][T14471] usb 9-1: config 0 has an invalid interface number: 34 but max is 0
[  954.734555][T14471] usb 9-1: config 0 has no interface number 0
[  954.734647][T14471] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  954.734671][T14471] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  954.741048][T16099] IPVS: using max 45 ests per chain, 108000 per kthread
[  954.752353][T14471] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.752438][T14471] usb 9-1: Product: syz
[  954.753821][T14471] usb 9-1: Manufacturer: syz
[  954.754372][T14471] usb 9-1: SerialNumber: syz
[  954.845616][T14471] usb 9-1: config 0 descriptor??
[  954.857830][T16092] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  954.858358][T16092] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  955.128653][T16092] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  955.129231][T16092] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  955.344196][T14471] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  955.356527][T14471] asix 9-1:0.34: probe with driver asix failed with error -32
[  957.309732][ T6443] usb 9-1: USB disconnect, device number 24
[  957.587479][T16128] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2139'.
[  957.661077][T16131] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=16131 comm=syz.5.2139
[  957.957770][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2140'.
[  957.967450][T16127] bridge_slave_1: left allmulticast mode
[  957.975130][ T5726] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  957.987439][T16127] bridge_slave_1: left promiscuous mode
[  957.995411][T16127] bridge0: port 2(bridge_slave_1) entered disabled state
[  958.005758][T16127] bridge_slave_0: left allmulticast mode
[  958.011622][T16127] bridge_slave_0: left promiscuous mode
[  958.017708][T16127] bridge0: port 1(bridge_slave_0) entered disabled state
[  958.222438][ T5726] usb 6-1: unable to get BOS descriptor or descriptor too short
[  958.234370][ T5726] usb 6-1: not running at top speed; connect to a high speed hub
[  958.243319][ T5726] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  958.253776][ T5726] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  958.264186][ T5726] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  958.276023][ T5726] usb 6-1: string descriptor 0 read error: -22
[  958.282459][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  958.313165][ T5726] usb 6-1: 0:2 : does not exist
[  958.348143][T16144] FAULT_INJECTION: forcing a failure.
[  958.348143][T16144] name failslab, interval 1, probability 0, space 0, times 0
[  958.361275][T16144] CPU: 0 UID: 0 PID: 16144 Comm: syz.8.2144 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  958.361315][T16144] Tainted: [L]=SOFTLOCKUP
[  958.361323][T16144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  958.361336][T16144] Call Trace:
[  958.361343][T16144]  <TASK>
[  958.361352][T16144]  dump_stack_lvl+0x100/0x190
[  958.361383][T16144]  should_fail_ex.cold+0x5/0xa
[  958.361407][T16144]  should_failslab+0xc2/0x120
[  958.361429][T16144]  kmem_cache_alloc_noprof+0x92/0x6a0
[  958.361449][T16144]  ? proc_reg_open+0x23f/0x5f0
[  958.361480][T16144]  proc_reg_open+0x23f/0x5f0
[  958.361509][T16144]  do_dentry_open+0x6ab/0x14d0
[  958.361536][T16144]  ? __pfx_proc_reg_open+0x10/0x10
[  958.361569][T16144]  vfs_open+0x82/0x3f0
[  958.361598][T16144]  path_openat+0x19fa/0x2440
[  958.361626][T16144]  ? __pfx_path_openat+0x10/0x10
[  958.361655][T16144]  do_file_open+0x20e/0x430
[  958.361678][T16144]  ? __pfx_do_file_open+0x10/0x10
[  958.361717][T16144]  ? _raw_spin_unlock+0x28/0x50
[  958.361737][T16144]  ? alloc_fd+0x471/0x7a0
[  958.361767][T16144]  do_sys_openat2+0x10f/0x1e0
[  958.361792][T16144]  ? __pfx_do_sys_openat2+0x10/0x10
[  958.361822][T16144]  ? __pfx_do_set_mempolicy+0x10/0x10
[  958.361852][T16144]  __x64_sys_openat+0x12d/0x210
[  958.361879][T16144]  ? __pfx___x64_sys_openat+0x10/0x10
[  958.361914][T16144]  do_syscall_64+0x123/0x790
[  958.361940][T16144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  958.361961][T16144] RIP: 0033:0x7f4918b9e159
[  958.361996][T16144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  958.362016][T16144] RSP: 002b:00007f4919a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  958.362036][T16144] RAX: ffffffffffffffda RBX: 00007f4918e25fa0 RCX: 00007f4918b9e159
[  958.362046][T16144] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  958.362055][T16144] RBP: 00007f4918c35024 R08: 0000000000000000 R09: 0000000000000000
[  958.362064][T16144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  958.362084][T16144] R13: 00007f4918e26038 R14: 00007f4918e25fa0 R15: 00007ffc5f16a408
[  958.362109][T16144]  </TASK>
[  958.559097][T16125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16125 comm=syz.5.2139
[  958.567494][T16125] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2139'.
[  958.614336][ T5726] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  958.630316][ T5726] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[  958.638139][ T5726] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  958.648659][ T5726] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1
[  958.659442][ T5726] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  958.671007][ T5726] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[  958.697633][ T5726] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  958.714560][ T5726] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[  958.740863][ T5726] usb 6-1: USB disconnect, device number 36
[  959.066443][T16160] syzkaller0: entered promiscuous mode
[  959.073548][T16160] syzkaller0: entered allmulticast mode
[  959.083839][T16160] tipc: Started in network mode
[  959.088789][T16160] tipc: Node identity c250c51fd4d5, cluster identity 4711
[  959.097185][T16160] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  959.280784][ T6443] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  959.459593][ T6443] usb 4-1: Using ep0 maxpacket: 16
[  959.467358][ T6443] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  959.471700][ T6443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.471722][ T6443] usb 4-1: Product: syz
[  959.471735][ T6443] usb 4-1: Manufacturer: syz
[  959.471749][ T6443] usb 4-1: SerialNumber: syz
[  959.474841][ T6443] usb 4-1: config 0 descriptor??
[  959.478111][ T6443] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  959.691343][ T6443] usb 4-1: clie_3_5_startup: get config number bad return length: 0
[  959.691448][ T6443] visor 4-1:0.0: probe with driver visor failed with error -5
[  959.752405][T16171] CacheFiles: No cache directory specified
[  959.781762][T16157] tipc: Resetting bearer <eth:syzkaller0>
[  959.843055][T16157] tipc: Disabling bearer <eth:syzkaller0>
[  960.024886][T16176] 9p: Bad value for 'rfdno'
[  961.040604][ T6437] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  961.192341][ T6437] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  961.193343][ T6437] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  961.193368][ T6437] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  961.201179][ T6437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  961.201199][ T6437] usb 3-1: Product: syz
[  961.201210][ T6437] usb 3-1: Manufacturer: syz
[  961.201222][ T6437] usb 3-1: SerialNumber: syz
[  961.398637][   T52] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  961.527416][ T6437] kaweth 3-1:1.0: Firmware present in device.
[  961.615550][ T6437] kaweth 3-1:1.0: Statistics collection: 0
[  961.615629][ T6437] kaweth 3-1:1.0: Multicast filter limit: 0
[  961.616002][ T6437] kaweth 3-1:1.0: MTU: 0
[  961.616046][ T6437] kaweth 3-1:1.0: Read MAC address 00:00:00:00:00:00
[  962.146534][T16210] Mount JFS Failure: -22
[  962.146623][T16210] jfs_mount failed w/return code = -22
[  962.637064][ T5822] usb 4-1: USB disconnect, device number 89
[  962.922521][ T6437] kaweth 3-1:1.0: Error setting SOFS wait
[  962.922683][ T6437] kaweth 3-1:1.0: probe with driver kaweth failed with error -5
[  962.940490][ T6437] usb 3-1: USB disconnect, device number 81
[  963.844599][   T31] audit: type=1326 audit(1788622592.036:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2165" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f655d19e159 code=0x0
[  964.451835][T16227] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2167'.
[  964.451874][T16227] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2167'.
[  964.451902][T16227] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2167'.
[  964.485506][T16229] syzkaller0: entered promiscuous mode
[  964.485550][T16229] syzkaller0: entered allmulticast mode
[  964.610026][T16227] FAULT_INJECTION: forcing a failure.
[  964.610026][T16227] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  964.610079][T16227] CPU: 1 UID: 0 PID: 16227 Comm: syz.0.2167 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  964.610104][T16227] Tainted: [L]=SOFTLOCKUP
[  964.610112][T16227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  964.610121][T16227] Call Trace:
[  964.610127][T16227]  <TASK>
[  964.610133][T16227]  dump_stack_lvl+0x100/0x190
[  964.610161][T16227]  should_fail_ex.cold+0x5/0xa
[  964.610187][T16227]  _copy_from_user+0x2e/0xd0
[  964.610213][T16227]  move_addr_to_kernel+0x65/0x170
[  964.610236][T16227]  __sys_sendto+0x1b8/0x4e0
[  964.610262][T16227]  ? __pfx___sys_sendto+0x10/0x10
[  964.610294][T16227]  ? fd_install+0x223/0x580
[  964.610322][T16227]  ? __pfx___sys_socket+0x10/0x10
[  964.610351][T16227]  __x64_sys_sendto+0xe0/0x1c0
[  964.610374][T16227]  ? do_syscall_64+0xae/0x790
[  964.610393][T16227]  ? lockdep_hardirqs_on+0x7d/0x110
[  964.610411][T16227]  do_syscall_64+0x123/0x790
[  964.610433][T16227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.610451][T16227] RIP: 0033:0x7f855d35e98e
[  964.610466][T16227] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  964.610481][T16227] RSP: 002b:00007f855e2d5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  964.610504][T16227] RAX: ffffffffffffffda RBX: 00007f855e2d76c0 RCX: 00007f855d35e98e
[  964.610515][T16227] RDX: 0000000000000020 RSI: 00007f855e2d6000 RDI: 000000000000000b
[  964.610525][T16227] RBP: 0000000000000000 R08: 00007f855e2d5f04 R09: 000000000000000c
[  964.610535][T16227] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b
[  964.610545][T16227] R13: 00007f855e2d5f58 R14: 00007f855e2d6000 R15: 0000000000000000
[  964.610569][T16227]  </TASK>
[  964.816319][   T31] audit: type=1400 audit(1788622593.406:2793): avc:  denied  { write } for  pid=16211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  964.840216][ T5726] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  964.928309][   T31] audit: type=1400 audit(1788622593.516:2794): avc:  denied  { write } for  pid=16242 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  965.000530][ T5726] usb 9-1: Using ep0 maxpacket: 16
[  965.006480][ T5726] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  965.019480][ T5726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.019520][ T5726] usb 9-1: Product: syz
[  965.019551][ T5726] usb 9-1: Manufacturer: syz
[  965.019569][ T5726] usb 9-1: SerialNumber: syz
[  965.923862][ T5726] usb 9-1: config 0 descriptor??
[  965.940035][ T5726] visor 9-1:0.0: Sony Clie 3.5 converter detected
[  966.155604][ T5726] usb 9-1: clie_3_5_startup: get config number bad return length: 0
[  966.155733][ T5726] visor 9-1:0.0: probe with driver visor failed with error -5
[  966.455404][   T31] audit: type=1400 audit(1788622595.046:2795): avc:  denied  { write } for  pid=16249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  966.494525][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2168'.
[  966.496815][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2168'.
[  966.570077][   T31] audit: type=1400 audit(1788622595.156:2796): avc:  denied  { write } for  pid=16271 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  966.660457][ T5726] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  966.830775][ T5726] usb 3-1: Using ep0 maxpacket: 16
[  966.834804][ T5726] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  966.839782][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.839804][ T5726] usb 3-1: Product: syz
[  966.839817][ T5726] usb 3-1: Manufacturer: syz
[  966.839830][ T5726] usb 3-1: SerialNumber: syz
[  966.843667][ T5726] usb 3-1: config 0 descriptor??
[  966.849856][ T5726] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  966.880538][ T6471] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  967.040879][ T6471] usb 4-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  967.041943][ T6471] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  967.041968][ T6471] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  967.043985][ T6471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.044004][ T6471] usb 4-1: Product: syz
[  967.044015][ T6471] usb 4-1: Manufacturer: syz
[  967.044027][ T6471] usb 4-1: SerialNumber: syz
[  967.047231][ T5726] usb 3-1: clie_3_5_startup: get config number bad return length: 0
[  967.047332][ T5726] visor 3-1:0.0: probe with driver visor failed with error -5
[  967.268070][ T6471] kaweth 4-1:1.0: Firmware present in device.
[  967.453140][ T6471] kaweth 4-1:1.0: Statistics collection: 0
[  967.453164][ T6471] kaweth 4-1:1.0: Multicast filter limit: 0
[  967.453441][ T6471] kaweth 4-1:1.0: MTU: 0
[  967.453455][ T6471] kaweth 4-1:1.0: Read MAC address 00:00:00:00:00:00
[  967.560469][ T5726] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  967.714192][ T5726] usb 6-1: unable to get BOS descriptor or descriptor too short
[  967.714652][ T5726] usb 6-1: not running at top speed; connect to a high speed hub
[  967.714676][ T5726] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  967.715527][ T5726] usb 6-1: config 0 has an invalid interface number: 88 but max is 0
[  967.715546][ T5726] usb 6-1: config 0 has no interface number 0
[  967.715575][ T5726] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64
[  967.715598][ T5726] usb 6-1: config 0 interface 88 has no altsetting 0
[  967.717964][ T5726] usb 6-1: language id specifier not provided by device, defaulting to English
[  967.725107][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  967.725130][ T5726] usb 6-1: Product: syz
[  967.725161][ T5726] usb 6-1: SerialNumber: Љ
[  967.727907][ T5726] usb 6-1: config 0 descriptor??
[  967.729980][T16280] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  967.766355][   T10] usb 9-1: USB disconnect, device number 25
[  967.940084][T16287] Mount JFS Failure: -22
[  967.940153][T16287] jfs_mount failed w/return code = -22
[  968.597520][ T6471] kaweth 4-1:1.0: Error setting SOFS wait
[  968.597771][ T6471] kaweth 4-1:1.0: probe with driver kaweth failed with error -5
[  968.622705][ T5726] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input70
[  968.625123][ T6471] usb 4-1: USB disconnect, device number 90
[  968.654291][ T5726] usb 6-1: USB disconnect, device number 37
[  968.880428][   T10] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  968.977193][T16299] syzkaller0: entered promiscuous mode
[  968.982911][T16299] syzkaller0: entered allmulticast mode
[  969.048957][   T10] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  969.051705][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.051733][   T10] usb 9-1: Product: syz
[  969.051757][   T10] usb 9-1: Manufacturer: syz
[  969.051775][   T10] usb 9-1: SerialNumber: syz
[  969.117363][ T6471] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  969.181410][   T31] audit: type=1400 audit(1788622597.776:2797): avc:  denied  { write } for  pid=16290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  969.575264][T16313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16313 comm=syz.5.2183
[  970.581350][ T6471] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  970.582583][ T6471] ath9k_htc: Failed to initialize the device
[  970.619492][ T6471] usb 9-1: ath9k_htc: USB layer deinitialized
[  971.745138][   T10] usb 9-1: USB disconnect, device number 26
[  971.762033][   T31] audit: type=1400 audit(1788622600.356:2798): avc:  denied  { write } for  pid=16309 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  971.796465][T14468] usb 3-1: USB disconnect, device number 82
[  973.190531][ T6471] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  973.220481][   T10] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  973.345096][ T6471] usb 4-1: Using ep0 maxpacket: 16
[  973.347477][ T6471] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  973.353863][ T6471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  973.353886][ T6471] usb 4-1: Product: syz
[  973.353905][ T6471] usb 4-1: Manufacturer: syz
[  973.353918][ T6471] usb 4-1: SerialNumber: syz
[  973.368676][ T6471] usb 4-1: config 0 descriptor??
[  973.371423][   T10] usb 9-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  973.382655][   T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  973.382684][   T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  973.384368][ T6471] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  973.387665][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  973.387684][   T10] usb 9-1: Product: syz
[  973.387697][   T10] usb 9-1: Manufacturer: syz
[  973.387711][   T10] usb 9-1: SerialNumber: syz
[  973.596957][ T6471] usb 4-1: clie_3_5_startup: get config number bad return length: 0
[  973.597075][ T6471] visor 4-1:0.0: probe with driver visor failed with error -5
[  973.663874][   T10] kaweth 9-1:1.0: Firmware present in device.
[  973.819837][   T10] kaweth 9-1:1.0: Statistics collection: 0
[  973.819873][   T10] kaweth 9-1:1.0: Multicast filter limit: 0
[  973.819905][   T10] kaweth 9-1:1.0: MTU: 0
[  973.819921][   T10] kaweth 9-1:1.0: Read MAC address 00:00:00:00:00:00
[  973.851412][T14468] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  974.081684][T14468] usb 6-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  974.093048][T14468] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  974.104278][T14468] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  974.118832][T14468] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.128397][T14468] usb 6-1: Product: syz
[  974.128456][T14468] usb 6-1: Manufacturer: syz
[  974.128540][T14468] usb 6-1: SerialNumber: syz
[  974.173714][   T31] audit: type=1326 audit(1788622602.766:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16343 comm="syz.0.2188" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f855d39e159 code=0x0
[  974.608384][T16347] Mount JFS Failure: -22
[  974.608416][T16347] jfs_mount failed w/return code = -22
[  975.123619][   T10] kaweth 9-1:1.0: Error setting SOFS wait
[  975.123730][   T10] kaweth 9-1:1.0: probe with driver kaweth failed with error -5
[  975.140822][T14468] kaweth 6-1:1.0: Firmware present in device.
[  975.150326][   T10] usb 9-1: USB disconnect, device number 27
[  975.310662][T14468] kaweth 6-1:1.0: Statistics collection: 0
[  975.310698][T14468] kaweth 6-1:1.0: Multicast filter limit: 0
[  975.310725][T14468] kaweth 6-1:1.0: MTU: 0
[  975.310742][T14468] kaweth 6-1:1.0: Read MAC address 00:00:00:00:00:00
[  976.525327][T16342] Mount JFS Failure: -22
[  976.525354][T16342] jfs_mount failed w/return code = -22
[  976.557226][T14468] kaweth 6-1:1.0: Error setting SOFS wait
[  976.557429][T14468] kaweth 6-1:1.0: probe with driver kaweth failed with error -5
[  976.577236][T14468] usb 6-1: USB disconnect, device number 38
[  976.693945][ T6438] usb 4-1: USB disconnect, device number 91
[  977.372006][ T6438] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  977.543466][ T6438] usb 4-1: Using ep0 maxpacket: 16
[  977.549376][ T6438] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  977.562034][ T6438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.562072][ T6438] usb 4-1: Product: syz
[  977.562101][ T6438] usb 4-1: Manufacturer: syz
[  977.562119][ T6438] usb 4-1: SerialNumber: syz
[  977.588484][ T6438] usb 4-1: config 0 descriptor??
[  977.619728][ T6438] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  977.825871][ T6438] usb 4-1: clie_3_5_startup: get config number bad return length: 0
[  977.825983][ T6438] visor 4-1:0.0: probe with driver visor failed with error -5
[  977.910763][   T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  978.062355][   T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  978.075094][ T6438] usb 4-1: USB disconnect, device number 92
[  978.086349][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.086392][   T10] usb 3-1: Product: syz
[  978.086406][   T10] usb 3-1: Manufacturer: syz
[  978.086419][   T10] usb 3-1: SerialNumber: syz
[  978.244859][   T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  978.310525][ T5822] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  978.471129][ T5822] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  978.481244][ T5822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  978.491493][ T5822] usb 9-1: config 0 descriptor??
[  978.498418][ T5822] cp210x 9-1:0.0: cp210x converter detected
[  978.695411][ T5726] usb 3-1: USB disconnect, device number 83
[  978.740253][T16386] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2204'.
[  978.815322][T16392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=16392 comm=syz.0.2204
[  978.905309][ T5822] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  978.922460][ T5822] usb 9-1: cp210x converter now attached to ttyUSB0
[  979.315628][   T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  979.318964][   T10] ath9k_htc: Failed to initialize the device
[  979.363989][ T5726] usb 3-1: ath9k_htc: USB layer deinitialized
[  981.646886][ T5822] usb 9-1: USB disconnect, device number 28
[  981.654443][ T5822] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  981.664954][ T5822] cp210x 9-1:0.0: device disconnected
[  982.212954][   T31] audit: type=1326 audit(1788622610.486:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16397 comm="syz.5.2207" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a19e159 code=0x0
[  982.395351][T16417] FAULT_INJECTION: forcing a failure.
[  982.395351][T16417] name failslab, interval 1, probability 0, space 0, times 0
[  982.395389][T16417] CPU: 1 UID: 0 PID: 16417 Comm: syz.3.2211 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  982.395413][T16417] Tainted: [L]=SOFTLOCKUP
[  982.395420][T16417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  982.395430][T16417] Call Trace:
[  982.395435][T16417]  <TASK>
[  982.395441][T16417]  dump_stack_lvl+0x100/0x190
[  982.395469][T16417]  should_fail_ex.cold+0x5/0xa
[  982.395492][T16417]  should_failslab+0xc2/0x120
[  982.395511][T16417]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  982.395530][T16417]  ? __kasan_kmalloc+0xaa/0xb0
[  982.395547][T16417]  ? __request_module+0x2d5/0x6a0
[  982.395571][T16417]  kstrdup+0x51/0xe0
[  982.395595][T16417]  __request_module+0x2d5/0x6a0
[  982.395616][T16417]  ? __pfx___request_module+0x10/0x10
[  982.395634][T16417]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  982.395667][T16417]  ? rcu_is_watching+0x13/0xc0
[  982.395687][T16417]  ? cap_capable+0x107/0x430
[  982.395716][T16417]  dev_load+0x204/0x240
[  982.395733][T16417]  dev_ioctl+0x1c0/0x10e0
[  982.395750][T16417]  sock_do_ioctl+0x1a0/0x280
[  982.395771][T16417]  ? __pfx_sock_do_ioctl+0x10/0x10
[  982.395790][T16417]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  982.395812][T16417]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  982.395841][T16417]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  982.395859][T16417]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  982.395880][T16417]  sock_ioctl+0x599/0x6b0
[  982.395901][T16417]  ? __pfx_sock_ioctl+0x10/0x10
[  982.395927][T16417]  ? selinux_file_ioctl+0x13b/0x290
[  982.395941][T16417]  ? selinux_file_ioctl+0xb6/0x290
[  982.395960][T16417]  ? __pfx_sock_ioctl+0x10/0x10
[  982.395982][T16417]  __x64_sys_ioctl+0x18e/0x210
[  982.396007][T16417]  do_syscall_64+0x123/0x790
[  982.396028][T16417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.396045][T16417] RIP: 0033:0x7f655d19e159
[  982.396059][T16417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  982.396074][T16417] RSP: 002b:00007f655e082028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  982.396090][T16417] RAX: ffffffffffffffda RBX: 00007f655d425fa0 RCX: 00007f655d19e159
[  982.396101][T16417] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000005
[  982.396111][T16417] RBP: 00007f655e082090 R08: 0000000000000000 R09: 0000000000000000
[  982.396121][T16417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  982.396131][T16417] R13: 00007f655d426038 R14: 00007f655d425fa0 R15: 00007fff0e8c3c68
[  982.396152][T16417]  </TASK>
[  984.604613][ T6438] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  984.769790][ T6438] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  984.789882][ T6438] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.789925][ T6438] usb 9-1: Product: syz
[  984.789939][ T6438] usb 9-1: Manufacturer: syz
[  984.789953][ T6438] usb 9-1: SerialNumber: syz
[  984.840772][T14468] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  984.866056][T14471] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  985.014341][T14468] usb 3-1: Using ep0 maxpacket: 16
[  985.025133][T14468] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  985.033739][T14468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.033762][T14468] usb 3-1: Product: syz
[  985.033775][T14468] usb 3-1: Manufacturer: syz
[  985.033788][T14468] usb 3-1: SerialNumber: syz
[  985.043722][T14468] usb 3-1: config 0 descriptor??
[  985.046425][T14468] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  985.259275][T14468] usb 3-1: clie_3_5_startup: get config number bad return length: 0
[  985.259455][T14468] visor 3-1:0.0: probe with driver visor failed with error -5
[  985.326670][T14468] usb 9-1: USB disconnect, device number 29
[  985.870417][T14471] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  985.870564][T14471] ath9k_htc: Failed to initialize the device
[  985.871070][T14468] usb 9-1: ath9k_htc: USB layer deinitialized
[  987.050871][T16460] /dev/sg0: Can't lookup blockdev
[  987.472402][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  988.391508][T14468] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  989.160432][T14468] usb 4-1: Using ep0 maxpacket: 32
[  989.166090][T14468] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  989.180880][T14468] usb 4-1: config 0 has an invalid interface number: 119 but max is 0
[  989.180907][T14468] usb 4-1: config 0 has no interface number 0
[  989.180935][T14468] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  989.180949][T14468] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  989.180965][T14468] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  989.180980][T14468] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  989.264268][T14468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.264306][T14468] usb 4-1: Product: syz
[  989.264330][T14468] usb 4-1: Manufacturer: syz
[  989.264347][T14468] usb 4-1: SerialNumber: syz
[  989.267585][ T5726] usb 3-1: USB disconnect, device number 84
[  989.309769][T14468] usb 4-1: config 0 descriptor??
[  989.327142][T14468] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input71
[  990.230935][T16479] FAULT_INJECTION: forcing a failure.
[  990.230935][T16479] name failslab, interval 1, probability 0, space 0, times 0
[  990.231021][T16479] CPU: 1 UID: 0 PID: 16479 Comm: syz.2.2232 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  990.231038][T16479] Tainted: [L]=SOFTLOCKUP
[  990.231042][T16479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  990.231049][T16479] Call Trace:
[  990.231053][T16479]  <TASK>
[  990.231058][T16479]  dump_stack_lvl+0x100/0x190
[  990.231078][T16479]  should_fail_ex.cold+0x5/0xa
[  990.231094][T16479]  should_failslab+0xc2/0x120
[  990.231108][T16479]  __kmalloc_cache_noprof+0x91/0x6d0
[  990.231125][T16479]  ? alloc_tty_struct+0x96/0x8c0
[  990.231143][T16479]  alloc_tty_struct+0x96/0x8c0
[  990.231155][T16479]  ? __pfx_alloc_tty_struct+0x10/0x10
[  990.231169][T16479]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  990.231186][T16479]  tty_init_dev.part.0+0x20/0x470
[  990.231200][T16479]  tty_open+0x953/0xe20
[  990.231214][T16479]  ? __pfx_tty_open+0x10/0x10
[  990.231225][T16479]  ? chrdev_open+0x10b/0x6a0
[  990.231237][T16479]  ? chrdev_open+0x10b/0x6a0
[  990.231252][T16479]  ? __pfx_tty_open+0x10/0x10
[  990.231269][T16479]  chrdev_open+0x234/0x6a0
[  990.231282][T16479]  ? __pfx_chrdev_open+0x10/0x10
[  990.231295][T16479]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  990.231315][T16479]  do_dentry_open+0x6ab/0x14d0
[  990.231326][T16479]  ? __pfx_chrdev_open+0x10/0x10
[  990.231341][T16479]  vfs_open+0x82/0x3f0
[  990.231358][T16479]  path_openat+0x19fa/0x2440
[  990.231373][T16479]  ? __pfx_path_openat+0x10/0x10
[  990.231390][T16479]  do_file_open+0x20e/0x430
[  990.231405][T16479]  ? __pfx_do_file_open+0x10/0x10
[  990.231428][T16479]  ? _raw_spin_unlock+0x28/0x50
[  990.231439][T16479]  ? alloc_fd+0x471/0x7a0
[  990.231456][T16479]  do_sys_openat2+0x10f/0x1e0
[  990.231471][T16479]  ? __pfx_do_sys_openat2+0x10/0x10
[  990.231491][T16479]  __x64_sys_openat+0x12d/0x210
[  990.231507][T16479]  ? __pfx___x64_sys_openat+0x10/0x10
[  990.231521][T16479]  ? ksys_write+0x1ac/0x250
[  990.231536][T16479]  do_syscall_64+0x123/0x790
[  990.231550][T16479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  990.231562][T16479] RIP: 0033:0x7f118919e159
[  990.231572][T16479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  990.231583][T16479] RSP: 002b:00007f1189fbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  990.231595][T16479] RAX: ffffffffffffffda RBX: 00007f1189425fa0 RCX: 00007f118919e159
[  990.231602][T16479] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  990.231609][T16479] RBP: 00007f1189fbe090 R08: 0000000000000000 R09: 0000000000000000
[  990.231616][T16479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  990.231624][T16479] R13: 00007f1189426038 R14: 00007f1189425fa0 R15: 00007ffcc2c946b8
[  990.231646][T16479]  </TASK>
[  991.061734][T14468] usb 4-1: USB disconnect, device number 93
[  991.069463][    C0] bcm5974 4-1:0.119: trackpad urb failed: -19
[  991.099698][T16484] FAULT_INJECTION: forcing a failure.
[  991.099698][T16484] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  991.099741][T16484] CPU: 1 UID: 0 PID: 16484 Comm: syz.8.2233 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  991.099767][T16484] Tainted: [L]=SOFTLOCKUP
[  991.099774][T16484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  991.099785][T16484] Call Trace:
[  991.099792][T16484]  <TASK>
[  991.099801][T16484]  dump_stack_lvl+0x100/0x190
[  991.099832][T16484]  should_fail_ex.cold+0x5/0xa
[  991.099858][T16484]  _copy_to_user+0x32/0xd0
[  991.099888][T16484]  simple_read_from_buffer+0xcb/0x170
[  991.099913][T16484]  proc_fail_nth_read+0x1af/0x230
[  991.099937][T16484]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  991.099960][T16484]  ? rw_verify_area+0xce/0x6d0
[  991.099987][T16484]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  991.100009][T16484]  vfs_read+0x1e4/0xb40
[  991.100027][T16484]  ? lock_acquire+0x1d1/0x380
[  991.100046][T16484]  ? __fget_files+0x34/0x3d0
[  991.100067][T16484]  ? __pfx_vfs_read+0x10/0x10
[  991.100082][T16484]  ? find_held_lock+0x2b/0x80
[  991.100108][T16484]  ? __fget_files+0x215/0x3d0
[  991.100134][T16484]  ? __fget_files+0x21f/0x3d0
[  991.100162][T16484]  ksys_read+0x12a/0x250
[  991.100180][T16484]  ? __pfx_ksys_read+0x10/0x10
[  991.100205][T16484]  do_syscall_64+0x123/0x790
[  991.100230][T16484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.100256][T16484] RIP: 0033:0x7f4918b5e98e
[  991.100272][T16484] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  991.100290][T16484] RSP: 002b:00007f4919a35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  991.100308][T16484] RAX: ffffffffffffffda RBX: 00007f4919a366c0 RCX: 00007f4918b5e98e
[  991.100320][T16484] RDX: 000000000000000f RSI: 00007f4919a360a0 RDI: 0000000000000006
[  991.100334][T16484] RBP: 00007f4919a36090 R08: 0000000000000000 R09: 0000000000000000
[  991.100344][T16484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  991.100355][T16484] R13: 00007f4918e26128 R14: 00007f4918e26090 R15: 00007ffc5f16a408
[  991.100380][T16484]  </TASK>
[  992.721435][T14468] usb 9-1: new full-speed USB device number 30 using dummy_hcd
[  992.881885][T14468] usb 9-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  992.894627][T14468] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  993.311387][ T6438] usb 4-1: new full-speed USB device number 94 using dummy_hcd
[  993.434120][T14468] usb 9-1: selecting invalid altsetting 3
[  993.434160][T14468] comedi comedi5: could not set alternate setting 3 in high speed
[  993.434188][T14468] usbduxsigma 9-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[  993.482777][T14468] usbduxsigma 9-1:128.0: probe with driver usbduxsigma failed with error -22
[  993.493138][ T6438] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  993.503942][ T6438] usb 4-1: unable to read config index 0 descriptor/start: -61
[  993.503984][ T6438] usb 4-1: can't read configurations, error -61
[  993.522430][T14468] usb 9-1: USB disconnect, device number 30
[  994.683832][ T6438] usb 4-1: new full-speed USB device number 95 using dummy_hcd
[ 1000.106068][    C1] sched: DL replenish lagged too much
[ 1001.526957][ T6438] usb 4-1: device descriptor read/all, error -71
[ 1001.577727][ T6438] usb usb4-port1: attempt power cycle
[ 1009.042958][T16527] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2246'.
[ 1009.341264][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1009.497755][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1009.508160][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1009.524804][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1009.533335][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1009.902543][T14471] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1009.970431][ T6438] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1011.010679][T14471] usb 9-1: Using ep0 maxpacket: 16
[ 1011.017741][T14471] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1011.031642][T14471] usb 9-1: config 0 has an invalid interface number: 34 but max is 0
[ 1011.031680][T14471] usb 9-1: config 0 has no interface number 0
[ 1011.031726][T14471] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1011.031754][T14471] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1011.094151][ T6438] usb 6-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[ 1011.111870][T14471] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.111908][T14471] usb 9-1: Product: syz
[ 1011.111934][T14471] usb 9-1: Manufacturer: syz
[ 1011.111951][T14471] usb 9-1: SerialNumber: syz
[ 1011.148422][ T6438] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1011.148467][ T6438] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1011.173580][ T6438] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.173607][ T6438] usb 6-1: Product: syz
[ 1011.173622][ T6438] usb 6-1: Manufacturer: syz
[ 1011.173636][ T6438] usb 6-1: SerialNumber: syz
[ 1011.228895][T14471] usb 9-1: config 0 descriptor??
[ 1011.252966][T16532] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1011.253117][T16532] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1011.521174][T16532] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1011.521315][T16532] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1011.562602][ T6438] kaweth 6-1:1.0: Firmware present in device.
[ 1011.653139][   T52] Bluetooth: hci6: command tx timeout
[ 1011.677896][ T6438] kaweth 6-1:1.0: Statistics collection: 0
[ 1011.677954][ T6438] kaweth 6-1:1.0: Multicast filter limit: 0
[ 1011.677982][ T6438] kaweth 6-1:1.0: MTU: 0
[ 1011.677998][ T6438] kaweth 6-1:1.0: Read MAC address 00:00:00:00:00:00
[ 1011.743802][T14471] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1011.744015][T14471] asix 9-1:0.34: probe with driver asix failed with error -61
[ 1012.332799][T11455] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1012.498910][T16555] xt_cgroup: invalid path, errno=-2
[ 1012.520972][T16552] Mount JFS Failure: -22
[ 1012.529956][T16552] jfs_mount failed w/return code = -22
[ 1013.717367][   T52] Bluetooth: hci6: command tx timeout
[ 1013.804105][T14471] usb 9-1: USB disconnect, device number 31
[ 1014.650640][T14471] usb 9-1: new full-speed USB device number 32 using dummy_hcd
[ 1014.800048][T11455] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1014.831329][T14471] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[ 1014.847125][T14471] usb 9-1: unable to read config index 0 descriptor/start: -61
[ 1014.847189][T14471] usb 9-1: can't read configurations, error -61
[ 1014.990689][T14471] usb 9-1: new full-speed USB device number 33 using dummy_hcd
[ 1015.211319][T14471] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[ 1015.227087][T14471] usb 9-1: unable to read config index 0 descriptor/start: -61
[ 1015.227161][T14471] usb 9-1: can't read configurations, error -61
[ 1015.227387][T14471] usb usb9-port1: attempt power cycle
[ 1015.650610][T14471] usb 9-1: new full-speed USB device number 34 using dummy_hcd
[ 1015.675725][T14471] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[ 1015.686772][T14471] usb 9-1: unable to read config index 0 descriptor/start: -61
[ 1015.686816][T14471] usb 9-1: can't read configurations, error -61
[ 1015.792592][   T52] Bluetooth: hci6: command tx timeout
[ 1015.821543][T14471] usb 9-1: new full-speed USB device number 35 using dummy_hcd
[ 1015.843725][T14471] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[ 1015.860498][T14471] usb 9-1: unable to read config index 0 descriptor/start: -61
[ 1015.860566][T14471] usb 9-1: can't read configurations, error -61
[ 1015.860787][T14471] usb usb9-port1: unable to enumerate USB device
[ 1015.894932][T11455] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1016.667602][T11455] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1017.997889][   T52] Bluetooth: hci6: command tx timeout
[ 1018.798933][T16602] xt_hashlimit: size too large, truncated to 1048576
[ 1019.975693][   T31] audit: type=1400 audit(1788622648.566:2801): avc:  denied  { mounton } for  pid=16599 comm="syz.5.2257" path="/syzcgroup/unified/syz5" dev="rpc_pipefs" ino=101996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1
[ 1020.123684][ T5822] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1020.296883][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[ 1020.320492][ T5822] usb 4-1: Using ep0 maxpacket: 16
[ 1020.327725][ T5822] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1020.349022][T16607] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[ 1020.364241][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.372566][ T5822] usb 4-1: Product: syz
[ 1020.378727][ T5822] usb 4-1: Manufacturer: syz
[ 1020.409799][ T5822] usb 4-1: SerialNumber: syz
[ 1020.440810][ T5822] usb 4-1: config 0 descriptor??
[ 1020.468969][ T5822] visor 4-1:0.0: Sony Clie 3.5 converter detected
[ 1020.481045][   T31] audit: type=1400 audit(1788622649.076:2802): avc:  denied  { listen } for  pid=16599 comm="syz.5.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1020.528768][T16611] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2257'.
[ 1020.658287][ T5822] usb 4-1: clie_3_5_startup: get config number bad return length: 0
[ 1020.658440][ T5822] visor 4-1:0.0: probe with driver visor failed with error -5
[ 1022.011350][ T6443] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1022.027301][T16529] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1022.027420][T16529] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1022.027583][T16529] bridge_slave_0: entered allmulticast mode
[ 1022.065051][T16529] bridge_slave_0: entered promiscuous mode
[ 1022.088536][T16529] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1022.097488][T16529] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1022.105289][T16529] bridge_slave_1: entered allmulticast mode
[ 1022.118664][T16529] bridge_slave_1: entered promiscuous mode
[ 1022.171226][ T6443] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1022.186111][ T6443] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1022.186151][ T6443] usb 9-1: Product: syz
[ 1022.186169][ T6443] usb 9-1: Manufacturer: syz
[ 1022.186207][ T6443] usb 9-1: SerialNumber: syz
[ 1022.277863][T16529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1022.298641][ T6443] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1022.325140][T16529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1022.749462][T14471] usb 9-1: USB disconnect, device number 36
[ 1022.833276][T11455] bridge_slave_1: left allmulticast mode
[ 1022.833319][T11455] bridge_slave_1: left promiscuous mode
[ 1022.833537][T11455] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1022.996719][ T6438] kaweth 6-1:1.0: Error setting SOFS wait
[ 1022.996913][ T6438] kaweth 6-1:1.0: probe with driver kaweth failed with error -5
[ 1023.017471][T11455] bridge_slave_0: left allmulticast mode
[ 1023.028752][T11455] bridge_slave_0: left promiscuous mode
[ 1023.028970][T11455] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1023.048993][ T6438] usb 6-1: USB disconnect, device number 39
[ 1023.394504][ T6443] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[ 1023.394680][ T6443] ath9k_htc: Failed to initialize the device
[ 1023.402563][T14471] usb 9-1: ath9k_htc: USB layer deinitialized
[ 1023.685890][T16638] FAULT_INJECTION: forcing a failure.
[ 1023.685890][T16638] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1023.703299][T16638] CPU: 1 UID: 0 PID: 16638 Comm: syz.8.2263 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1023.703332][T16638] Tainted: [L]=SOFTLOCKUP
[ 1023.703339][T16638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1023.703353][T16638] Call Trace:
[ 1023.703360][T16638]  <TASK>
[ 1023.703368][T16638]  dump_stack_lvl+0x100/0x190
[ 1023.703401][T16638]  should_fail_ex.cold+0x5/0xa
[ 1023.703426][T16638]  _copy_from_user+0x2e/0xd0
[ 1023.703455][T16638]  bpf_prog_load+0x1490/0x2a80
[ 1023.703485][T16638]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1023.703528][T16638]  __sys_bpf+0x1f46/0x4a30
[ 1023.703553][T16638]  ? __pfx___sys_bpf+0x10/0x10
[ 1023.703569][T16638]  ? find_held_lock+0x2b/0x80
[ 1023.703594][T16638]  ? get_pid_task+0xfc/0x250
[ 1023.703618][T16638]  ? get_pid_task+0xfc/0x250
[ 1023.703649][T16638]  ? find_held_lock+0x2b/0x80
[ 1023.703678][T16638]  ? rcu_read_lock_any_held+0x6a/0x90
[ 1023.703705][T16638]  ? find_held_lock+0x2b/0x80
[ 1023.703733][T16638]  ? ksys_write+0x190/0x250
[ 1023.703750][T16638]  ? ksys_write+0x190/0x250
[ 1023.703766][T16638]  ? lock_acquire+0x1d1/0x380
[ 1023.703801][T16638]  ? fput+0x7c/0x100
[ 1023.703823][T16638]  ? ksys_write+0x1ac/0x250
[ 1023.703843][T16638]  ? __x64_sys_bpf+0xce/0x140
[ 1023.703860][T16638]  __x64_sys_bpf+0xce/0x140
[ 1023.703884][T16638]  ? do_syscall_64+0xae/0x790
[ 1023.703907][T16638]  do_syscall_64+0x123/0x790
[ 1023.703930][T16638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1023.703950][T16638] RIP: 0033:0x7f4918b9e159
[ 1023.703966][T16638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1023.703984][T16638] RSP: 002b:00007f4919a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1023.704003][T16638] RAX: ffffffffffffffda RBX: 00007f4918e25fa0 RCX: 00007f4918b9e159
[ 1023.704016][T16638] RDX: 0000000000000028 RSI: 00002000000054c0 RDI: 0000000000000005
[ 1023.704027][T16638] RBP: 00007f4919a57090 R08: 0000000000000000 R09: 0000000000000000
[ 1023.704039][T16638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1023.704050][T16638] R13: 00007f4918e26038 R14: 00007f4918e25fa0 R15: 00007ffc5f16a408
[ 1023.704074][T16638]  </TASK>
[ 1024.226572][   T31] audit: type=1400 audit(1788622652.816:2803): avc:  denied  { write } for  pid=16626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1024.460226][T16643] overlayfs: workdir and upperdir must be separate subtrees
[ 1024.653057][   T31] audit: type=1400 audit(1788622653.246:2804): avc:  denied  { write } for  pid=16644 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1049.531316][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.183656][T11455] bond1 (unregistering): (slave bridge1): Releasing active interface
[ 1111.369168][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 1134.369887][   T52] Bluetooth: hci6: command 0x0406 tx timeout
[ 1173.235408][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 1188.062761][   T32] INFO: task kworker/1:7:5822 blocked for more than 144 seconds.
[ 1188.077462][   T32]       Tainted: G             L      syzkaller #0
[ 1188.092310][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1188.120914][   T32] task:kworker/1:7     state:D stack:22024 pid:5822  tgid:5822  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1188.149115][   T32] Workqueue: events switchdev_deferred_process_work
[ 1188.177580][   T32] Call Trace:
[ 1188.193367][   T32]  <TASK>
[ 1188.208253][   T32]  __schedule+0x1259/0x6920
[ 1188.223126][   T32]  ? mark_held_locks+0x40/0x70
[ 1188.238211][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1188.252802][   T32]  ? __pfx___schedule+0x10/0x10
[ 1188.268159][   T32]  ? find_held_lock+0x2b/0x80
[ 1188.282731][   T32]  ? schedule+0x225/0x2c0
[ 1188.298179][   T32]  schedule+0xdd/0x2c0
[ 1188.313122][   T32]  schedule_preempt_disabled+0x13/0x30
[ 1188.327589][   T32]  __mutex_lock+0xccb/0x1bd0
[ 1188.342234][   T32]  ? switchdev_deferred_process_work+0xe/0x20
[ 1188.357069][   T32]  ? __lock_acquire+0x4c5/0x1ec0
[ 1188.371670][   T32]  ? __pfx___mutex_lock+0x10/0x10
[ 1188.386316][   T32]  ? reacquire_held_locks+0xdd/0x1f0
[ 1188.401625][   T32]  ? process_one_work+0xa2c/0x1b10
[ 1188.417011][   T32]  ? process_one_work+0x906/0x1b10
[ 1188.432121][   T32]  ? switchdev_deferred_process_work+0xe/0x20
[ 1188.447607][   T32]  ? rtnl_lock+0x9/0x20
[ 1188.462146][   T32]  switchdev_deferred_process_work+0xe/0x20
[ 1188.477886][   T32]  process_one_work+0xac7/0x1b10
[ 1188.492679][   T32]  ? __pfx_process_one_work+0x10/0x10
[ 1188.508143][   T32]  ? lock_acquire+0x1d1/0x380
[ 1188.524978][   T32]  ? __pfx_switchdev_deferred_process_work+0x10/0x10
[ 1188.539508][   T32]  worker_thread+0x5ef/0xe50
[ 1188.554134][   T32]  ? __pfx_worker_thread+0x10/0x10
[ 1188.568768][   T32]  ? kthread+0x13a/0x450
[ 1188.583228][   T32]  ? __pfx_worker_thread+0x10/0x10
[ 1188.598755][   T32]  kthread+0x373/0x450
[ 1188.613741][   T32]  ? __pfx_kthread+0x10/0x10
[ 1188.628896][   T32]  ret_from_fork+0x730/0xd60