last executing test programs:

9m25.766133993s ago: executing program 0 (id=1074):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64000}, 0x4040)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14)
r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xffff, @multicast2}, {0x2, 0x200, @empty}, {0x2, 0x4e24, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401})
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00800000000086dd600a843500140600fe8000000000000000000000000000bbf7010000000000000000000053e46cce6ba91b2f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x9, 0x7, 0x6, 0x7f, @random="f42b835595ee"}, 0x10)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)

9m23.11811684s ago: executing program 0 (id=1093):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x40055}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getpriority(0x2, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00')
read$eventfd(r7, &(0x7f0000000000), 0x8)
add_key(&(0x7f00000003c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffff000206000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000002400128009000100626f6e640000"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r8 = socket(0x11, 0x2, 0x0)
setsockopt(r8, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10)
close(r8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48000, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x600, 0x4)
ioctl$TCXONC(r4, 0x540a, 0x0)
io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e07022d0c"], 0xa)

9m22.076063389s ago: executing program 0 (id=1103):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000300), 0x80900, 0x0)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x8851}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa0000003})
epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0)
pread64$ublk_bdev(r1, &(0x7f00000001c0)=""/174, 0xae, 0x2de)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0)
ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000000)=0x1000000010)
writev(0xffffffffffffffff, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002040)="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", 0xfb}, {0x0}, {&(0x7f00000021c0)="834279ddec7dee2e8ae5b3e114ceb4bc7f28ca7df2e1e461be6ccbc03a85085590e102132e1b99f45f59bc194d97156f0c018180241dc11a93d922ca9d0398d05335fc2af2e89d6bac8b92fac19ee2a4c994e6e59b1aeb35057f6e89142cdfe7ee0044e86ba7c8282d1830b1190b598e9bce62aa5059b595a7e6289eb0149267", 0x80}, {&(0x7f00000022c0)="3868011a0a8bade856eb8b05683c7309a7a9af91995d10329526f32b352116a3fb7637c0ce095da6811ad70f1e9de78b129b654408", 0x35}, {0x0}], 0x6)
ioctl$BLKRRPART(r6, 0x125f, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x7)

9m21.695420844s ago: executing program 0 (id=1107):
unshare(0xbb49d6412e2bbeb6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
flistxattr(r0, &(0x7f0000000200)=""/45, 0x2d)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000200900010073797a300000000028000000030a01020000000000000000010000080900010073797a30000000000800006e6174005c000000060a010400000000000000000100000008000b400000000034000480300001800b0001007461726765740000200002800700030000e44e000a000100415544495c00000008000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2125099, 0x0)
unshare(0x20400)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
ppoll(&(0x7f0000000040)=[{r3, 0x208}], 0x1, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x10010, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES32=r2], 0x0)
socket(0x400000000010, 0x3, 0x0)
madvise(&(0x7f0000a07000/0x4000)=nil, 0x4000, 0x19)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x21)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
syz_clone(0x64144000, 0x0, 0x4c, 0x0, 0x0, 0x0)

9m18.10855767s ago: executing program 0 (id=1117):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000300), 0x80900, 0x0)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x8851}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa0000003})
epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0)
pread64$ublk_bdev(r1, &(0x7f00000001c0)=""/174, 0xae, 0x2de)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0)
ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000000)=0x1000000010)
writev(0xffffffffffffffff, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002040)="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", 0xfb}, {0x0}, {&(0x7f00000021c0)="834279ddec7dee2e8ae5b3e114ceb4bc7f28ca7df2e1e461be6ccbc03a85085590e102132e1b99f45f59bc194d97156f0c018180241dc11a93d922ca9d0398d05335fc2af2e89d6bac8b92fac19ee2a4c994e6e59b1aeb35057f6e89142cdfe7ee0044e86ba7c8282d1830b1190b598e9bce62aa5059b595a7e6289eb0149267", 0x80}, {&(0x7f00000022c0)="3868011a0a8bade856eb8b05683c7309a7a9af91995d10329526f32b352116a3fb7637c0ce095da6811ad70f1e9de78b129b654408", 0x35}, {0x0}], 0x6)
ioctl$BLKRRPART(r6, 0x125f, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x7)

9m17.373827736s ago: executing program 0 (id=1124):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x80000008, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x5, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x5, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0x400, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x4}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1aa79}, @TCA_FLOW_KEYS={0x8, 0x1, 0x120cd}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x40)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$kcm(0x11, 0x3, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x1011c0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x15)
creat(&(0x7f00000000c0)='./file0\x00', 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xa8860)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7})
r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10)
sendmsg$inet_sctp(r9, 0x0, 0x6)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)

9m16.629266028s ago: executing program 32 (id=1124):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x80000008, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x5, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x5, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0x400, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x4}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1aa79}, @TCA_FLOW_KEYS={0x8, 0x1, 0x120cd}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x40)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$kcm(0x11, 0x3, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x1011c0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x15)
creat(&(0x7f00000000c0)='./file0\x00', 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xa8860)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7})
r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10)
sendmsg$inet_sctp(r9, 0x0, 0x6)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)

1m22.148261971s ago: executing program 5 (id=2753):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xfc}}, 0x0)
getpeername$netlink(r1, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1m21.971188712s ago: executing program 5 (id=2754):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0)
getpeername$netlink(r1, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1m21.678306547s ago: executing program 5 (id=2759):
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}})
fsopen(&(0x7f00000001c0)='bdev\x00', 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='16', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0)
close(r4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)

1m19.863359829s ago: executing program 5 (id=2761):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff814f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c36981edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ce852364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b00000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e20280e14700eb4acff907560500ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ad72a89a7f6d74126f327bf7dfa718d3e1e9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d7462c080c159ce40c14089c82759106f425a2554644b2582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9c3d6d47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6ea52ff414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b191d1a7f5d4e85de1a2a46579d497000000000000000000000000000085890d719cfd2eef4805fc5ebd790e94908d24a9002b0e658d593da7811e099e1c7c5699331e98eda4c706a90e22047fe27cae6994f70772815879c3d6a16e769eb6a745ca0ebcd90d81d109c1569129c0f26bb037806c424ae349391b4a5723afeffdb940ac1de55b1022c7d9aee805706e8fcdfaf3ab14ca4e"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1a8)
recvmmsg$unix(r3, &(0x7f0000005a80), 0x0, 0x2002, &(0x7f0000005d00)={0x0, 0x3938700})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r5})
ioctl(r4, 0x3b8e, &(0x7f0000000000)="10")

1m16.899811789s ago: executing program 5 (id=2763):
socket(0x10, 0x3, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0)
write(r1, &(0x7f0000000800)='- 1 0 5', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/kvm/kvm_hv_synic_set_irq/enable\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff)
r3 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="942daf8d8b7e528be9932d42f55ce4ff7f68f9c486a737078259393bc35847ca8013789e4dc9f3bcfccbc9673cf3ba9847425f9406c3cc1e62920b6bdc1d1bc68ee77a2bf2032882e1e47f10a775236f7f089e07d9501444040bf8622666cba6876b7e1f22cb55fdf0b0137d7161a6b83f12f5152531e58a7ef14ce9491ac46b2dbf5978c3beb67678c18e8942c00654c3cbf9f944c46ada15265a2d8919e58e1fd83e23dc1896cabd60ce44eade063862f0deaa320c4c0717ab0006b564405830cec3e62540b84c2f6a1a7a7be0e6a58884d0ae560f17d3d66d3a137b8e350e17d2d3a48b78b3a0326572b6ac711c", 0xef}, {0x0}], 0x2)
eventfd(0xfffffff9)
syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140), &(0x7f0000000080), &(0x7f00000000c0))

1m15.852345782s ago: executing program 5 (id=2769):
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
creat(&(0x7f0000000080)='./file0\x00', 0x0) (async, rerun: 32)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0) (async)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async, rerun: 32)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r6 = socket(0x25, 0x800, 0x0) (async, rerun: 32)
r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0xfffffd65, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0x1, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xe, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xb, 0x3, 0x10000000, 0x7fffffff, 0xd03}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r9, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
r10 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 64)
r11 = epoll_create1(0x0) (rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r13 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x3067, 0x0, 0xff, 0x3, 0x7, 0x100}, 0x20)
socket(0x1, 0x4, 0x0) (async, rerun: 32)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (rerun: 32)
sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
r15 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080)

1m0.662960794s ago: executing program 33 (id=2769):
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
creat(&(0x7f0000000080)='./file0\x00', 0x0) (async, rerun: 32)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0) (async)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async, rerun: 32)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r6 = socket(0x25, 0x800, 0x0) (async, rerun: 32)
r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0xfffffd65, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0x1, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xe, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xb, 0x3, 0x10000000, 0x7fffffff, 0xd03}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r9, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
r10 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 64)
r11 = epoll_create1(0x0) (rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r13 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x3067, 0x0, 0xff, 0x3, 0x7, 0x100}, 0x20)
socket(0x1, 0x4, 0x0) (async, rerun: 32)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (rerun: 32)
sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
r15 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080)

33.19345587s ago: executing program 4 (id=2891):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x4})
fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
open(0x0, 0x4827e, 0x195)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6(0xa, 0x2, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
removexattr(0x0, &(0x7f0000000340)=@random={'user.', '.\x00'})

32.303122071s ago: executing program 4 (id=2893):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f00000000c0), 0x8)
listen(r0, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800)

31.000922636s ago: executing program 4 (id=2897):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={<r3=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r3}}, 0x30)
prlimit64(r0, 0x4, &(0x7f0000000340)={0xd6, 0x410000000028c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_io_uring_setup(0x7b1d, &(0x7f0000000100)={0x0, 0xf40, 0x20, 0x3, 0x40000ab}, 0x0, 0x0, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(0x0, &(0x7f000020d000/0x3000)=nil, 0x5000)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r9=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, r9}}, 0x30)
process_madvise(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)="7fe2", 0x2}, {&(0x7f00000000c0)="7ee9", 0x2}], 0x3, 0x16, 0x0)
r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(0x0, 0x3000, 0x2000003, 0x12, r10, 0x8000000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000040)="cc5ab19dcc4c4ad4327a2af82a5447b3e8e1f16bf831c504fce11d30a8a05e2a87c11bc9a13ee017455bf92de2a581ef3bcaccf5c087cc0bd96f663ea364ab30c8f1152925cfb088051e3b7d777a81e9f2ca2451b589adc07aa83b8483c949f1c33aea9e0264b16ee19c52adcaa0b1b87fe3c464", &(0x7f00000000c0)=""/121, &(0x7f0000000140)="367befa75c249fe3fbee20bd89401fc646da99f7cd13d68fe86aacb2ea9733ff91c2f119c0d869d991fa4a648cc20840e64a7bb94b1a6612d584a9d2a3c319596f72292b682a62af162f48cd28a9d321ba2993feeef8e29d01769d2b94013d136c0f96fb", &(0x7f00000001c0)="10ce05dcb6d8", 0xa957, r10, 0x4}, 0x38)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'})
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000280)={0xc})

27.044359857s ago: executing program 4 (id=2910):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
modify_ldt$read(0x0, 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
dup3(r2, r1, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5319, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = syz_open_dev$usbmon(&(0x7f0000000280), 0x2c, 0x80001)
ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x374c4)

26.045284355s ago: executing program 4 (id=2913):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @random="9d3d93f9dc2b", @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x4, 0x0, 0xffd}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x9c, 0x11, 0x0, @private0, @mcast2, {[], {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "f5256f784b2f3eb14db902f6e8af9bcf554dfb1db4f6de3ccda49fec1ba7b9ac", "8dcc8a965e7ef915f0974caef5bf907611fde498ba2769e287e812fc5bf19ae703ff9408d3c498f9fbcf9748bdeb5cd2", "f6677c05c0686e2268a61979ca21351c05190cd5eadfab5db3a73f12", {"c0b9efcafd122e03dccefeea1c521ef8", "808391032e3f8423b366895b9b610b03"}}}}}}}}}, 0xde)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r4, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="010400000000aaaaaaaaaa00080045f62140f73e21"], 0x0)
bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
socket$unix(0x1, 0x2, 0x0)
pread64(r3, &(0x7f0000000240)=""/164, 0x131, 0x131)

23.908427683s ago: executing program 4 (id=2919):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64000}, 0x4040)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xffff, @multicast2}, {0x2, 0x200, @empty}, {0x2, 0x4e24, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401})
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00800000000086dd600a843500140600fe8000000000000000000000000000bbf7010000000000000000000053e46cce6ba91b2f", @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x9, 0x7, 0x6, 0x7f, @random="f42b835595ee"}, 0x10)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)

17.201365478s ago: executing program 3 (id=2944):
syz_emit_ethernet(0x33, &(0x7f00000001c0)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x11, 0x0, @opaque="c0e90236d9e21c57b6"}}}}}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$MSR(&(0x7f0000000000), 0x5, 0x0)

17.072170823s ago: executing program 3 (id=2945):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff814f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c36981edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ce852364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b00000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e20280e14700eb4acff907560500ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ad72a89a7f6d74126f327bf7dfa718d3e1e9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d7462c080c159ce40c14089c82759106f425a2554644b2582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9c3d6d47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6ea52ff414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b191d1a7f5d4e85de1a2a46579d497000000000000000000000000000085890d719cfd2eef4805fc5ebd790e94908d24a9002b0e658d593da7811e099e1c7c5699331e98eda4c706a90e22047fe27cae6994f70772815879c3d6a16e769eb6a745ca0ebcd90d81d109c1569129c0f26bb037806c424ae349391b4a5723afeffdb940ac1de55b1022c7d9aee805706e8fcdfaf3ab14ca4e"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1a8)
recvmmsg$unix(r3, &(0x7f0000005a80), 0x0, 0x2002, &(0x7f0000005d00)={0x0, 0x3938700})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r5})
ioctl(r4, 0x3b8e, &(0x7f0000000000)="10")

15.515208026s ago: executing program 3 (id=2948):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x106, 0x5}}, 0x20)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r0}}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="12030000000000000a000102aa02aaaaaabb00000f52c501078afc22baaa191e2bbb37712cf830394d8de020b4f913256aede3a4d2ede14c3778f83dd590301546d5a5e249866b145b00c174ac2d1cf95e522e13aea8caf5352c8326dbcc2c137e7a63"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000040)="97", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
close(0x3)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

13.513220901s ago: executing program 6 (id=2952):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)

10.494502079s ago: executing program 3 (id=2955):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x40055}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getpriority(0x2, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00')
read$eventfd(r7, &(0x7f0000000000), 0x8)
add_key(&(0x7f00000003c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="03150000000000002400128009000100626f6e640000"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r8 = socket(0x11, 0x2, 0x0)
setsockopt(r8, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10)
close(r8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48000, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x600, 0x4)
ioctl$TCXONC(r4, 0x540a, 0x0)
io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e07022d0c"], 0xa)

8.220615404s ago: executing program 6 (id=2960):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
modify_ldt$read(0x0, 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
r4 = dup3(r3, r2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5319, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000280), 0x2c, 0x80001)
ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x374c4)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x180, 0x0, &(0x7f0000000500)="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", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SNDCTL_SEQ_RESET(r4, 0x5100)
close_range(r1, 0xffffffffffffffff, 0x0)

7.68840548s ago: executing program 3 (id=2962):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
modify_ldt$read(0x0, 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
dup3(r3, r2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5319, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x2c, 0x80001)
ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x374c4)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
fcntl$lock(r7, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x180, 0x0, &(0x7f0000000500)="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", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(r1, 0xffffffffffffffff, 0x0)

7.197368233s ago: executing program 2 (id=2963):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
modify_ldt$read(0x0, 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
dup3(r2, r1, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5319, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x2c, 0x80001)
ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x374c4)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
fcntl$lock(r7, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x16, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x180, 0x0, &(0x7f0000000500)="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", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.193919115s ago: executing program 6 (id=2964):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
modify_ldt$read(0x0, 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
dup3(r2, r1, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5319, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x2c, 0x80001)
ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x374c4)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
fcntl$lock(r7, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x16, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x180, 0x0, &(0x7f0000000500)="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", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.178961741s ago: executing program 1 (id=2965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x7, 0x8}, {0x28, 0x4, 0x1a, 0x40}, {0x6, 0x23, 0x3, 0x209}]}, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1a, 0x10, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
timer_create(0x8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000854000/0x4000)=nil, 0x4000, 0xb)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
readv(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/136, 0x88}], 0x1)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e685401020301090224000100001010090459e102ff063d0009050b0200020500ff0905820206"], 0x0)

6.464463689s ago: executing program 3 (id=2966):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x82, 0x0, {}, {}, 0x7, 0x4})
unshare(0x20000)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904000005ff0000000705810240000107050102400001070583024000010705030240000107058402400001"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000180)=0x82)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x82, 0x0, {}, {}, 0x7, 0x4}) (async)
unshare(0x20000) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) (async)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904000005ff0000000705810240000107050102400001070583024000010705030240000107058402400001"], 0x0) (async)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) (async)
socket$inet(0x2, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) (async)
ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000180)=0x82) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) (async)

6.275175094s ago: executing program 2 (id=2967):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'})
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r1, &(0x7f0000000100)=""/58, 0x3a)
getdents(r1, &(0x7f0000000000)=""/116, 0x74)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0)

6.159628694s ago: executing program 6 (id=2968):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = syz_clone3(&(0x7f0000000740)={0x305295080, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{<r5=>0xffffffffffffffff, &(0x7f0000000000)='/,\x00', 0x100, &(0x7f0000000040)={@_ha_fsid={[0x3ff, 0x80000001]}, {0x5, 0x9, 0xb3, 0x6}}, 0x1, &(0x7f0000000080), 0x0}, {[0x9, 0x800, 0x1, 0x6]}, 0x4, 0xee, &(0x7f0000000100)=""/238})
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r5, 0x24, &(0x7f0000000280)={0xffffcf93, 0x1}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003b00010324bd702202dcd92507000000"], 0x14}, 0x1, 0x0, 0x0, 0x4018}, 0x20040840)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r6)
getrandom(&(0x7f0000000040)=""/29, 0x1d, 0x3)
ioctl$UBLK_U_CMD_START_USER_RECOVERY(r5, 0xc0207510, &(0x7f0000000540)={<r7=>0x0})
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000005c0)={r7, 0xffff, 0x0, 0x0, r4})
r8 = gettid()
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r9, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
r10 = io_uring_setup(0x344f, &(0x7f0000000440)={0x0, 0x1536, 0x200, 0x2, 0x98})
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r11, @ANYRES32=r11, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="90677326fdda104adf5a38bf3a790b4b9a6d65b9fc769fa57f425516aba554761251bc56a77f570ab9a4e969946e90d1999f500e7e07b791183ff44c76e437ef2aa0242dde04cb148684375ec235cbabbebdeb904a04ab6220619d0c785257fb101d16f08eadd239a25e08ee4fbffae0057c30fa9d2a5fe929c0", @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r11, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140), 0x0, 0x0}, 0x40)
readahead(r10, 0xb8, 0x6)

6.044098097s ago: executing program 2 (id=2969):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @random="9d3d93f9dc2b", @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x4, 0x0, 0xffd}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x9c, 0x11, 0x0, @private0, @mcast2, {[], {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "f5256f784b2f3eb14db902f6e8af9bcf554dfb1db4f6de3ccda49fec1ba7b9ac", "8dcc8a965e7ef915f0974caef5bf907611fde498ba2769e287e812fc5bf19ae703ff9408d3c498f9fbcf9748bdeb5cd2", "f6677c05c0686e2268a61979ca21351c05190cd5eadfab5db3a73f12", {"c0b9efcafd122e03dccefeea1c521ef8", "808391032e3f8423b366895b9b610b03"}}}}}}}}}, 0xde)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r4, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="010400000000aaaaaaaaaa00080045f62140f73e21423c029078ac1e0001e0000001120090"], 0x0)
bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
socket$unix(0x1, 0x2, 0x0)
pread64(r3, &(0x7f0000000240)=""/164, 0x131, 0x131)

4.963208256s ago: executing program 6 (id=2970):
openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x67, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000540)=""/186, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x1)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x91, 0x2, 0x0)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0)
unshare(0x6a040000)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r4 = fcntl$dupfd(r3, 0x406, r3)
read$FUSE(r4, 0x0, 0x2300)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="030000000400000bd0d1a3000a000000000000005490eb4a1cf07f7e33ad547a486b4fbf876c064f2c4acdd156c02274cdef8cc290af45178f8d20d2a90236eee91c5e30b4a13814ff5a49d0f3c85c84b60dd9b7c2c507fb9a181f47bc01c57315338638627a19b2f998227ce6e335da79aee45914920ae502fa81f1b96cbe810ef42a7b352ff97405b7d9eddfa1514edc59b1ea1d98396977597643abf7eb0dbeef90889ec461e56b7c131d3db511f0742699fad6170582b84685aa22", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r6, 0x107, 0x16, 0x0, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000240)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x9, 0x100000, 0x1cc5, 0x8001, 0x8, 0x4, 0x0, 0x0, 0x1, 0x4000759}}, 0x50)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)

4.569795378s ago: executing program 2 (id=2971):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x40055}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getpriority(0x2, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00')
read$eventfd(r7, &(0x7f0000000000), 0x8)
add_key(&(0x7f00000003c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcff", @ANYRES32=0x0, @ANYBLOB="03150000000000002400128009000100626f6e640000"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r8 = socket(0x11, 0x2, 0x0)
setsockopt(r8, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10)
close(r8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48000, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x600, 0x4)
ioctl$TCXONC(r4, 0x540a, 0x0)
io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e07022d0c"], 0xa)

3.373871366s ago: executing program 1 (id=2972):
mkdir(0x0, 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='syzkaller%', 0xa)

3.244207938s ago: executing program 1 (id=2973):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
modify_ldt$read(0x0, 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
r4 = dup3(r3, r2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5319, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000280), 0x2c, 0x80001)
ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x374c4)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x180, 0x0, &(0x7f0000000500)="7a7fa22c2aff88df53ef2a2d280f094d2c509a356e9bcd4c21fddfda1602b845666d60ff403b90528113f50538314aae565fefe03610008678c8696281b83d5cccfb24d18ec3d356e417649b8adde61673674f3a90e1497b3e773cac87a98b1c2dc3d6b723398c19705675d9bad4ce25b894dd2d99bec08059e35916f5612694c14bca518373af8721f1934793162b8f257d5390fb7f465f175dac6ec16e1f6807edf4ff7b71f0a094702338fa570e7a3a4d79190c6c2e414e706b65b607d5e6138c59d6087d5a7ae30ff92b01cdb93e80fbafc82e2f14cabd80250ceb797861aac506fbc09885d8278a2758e61c69a5e69d96690d5ebec8100fc8c7c066abc9c3135f1598c67d34f8dca675b6ae4c40fbb21fee4c3454a0658add4b67af6a1f5de434c9115853ab6f8a29fcb0aafbd0de776a7802094ae62dac8175773bfbab3b7edc06f4b3c1e239634323a7f65df8c39c1e7ee7d10a9922603c841f8a2d8cfc270e5e6624ec33832d8620715ac524f335320ae41dac432b71c23ce11ca402", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SNDCTL_SEQ_RESET(r4, 0x5100)
close_range(r1, 0xffffffffffffffff, 0x0)

1.965895814s ago: executing program 1 (id=2974):
syz_emit_ethernet(0x4a, &(0x7f0000001280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv4={0x300, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010108, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x5, 0x0, 0x20, {[@md5sig={0x13, 0x12, "3cf8d8b9d377f922754884b4daf8a62a"}]}}}}}}}, 0x0)

1.861252302s ago: executing program 1 (id=2975):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
modify_ldt$read(0x0, 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
dup3(r3, r2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5319, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x2c, 0x80001)
ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x374c4)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
fcntl$lock(r7, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x180, 0x0, &(0x7f0000000500)="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", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(r1, 0xffffffffffffffff, 0x0)

1.761274499s ago: executing program 2 (id=2976):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
modify_ldt$read(0x0, 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
dup3(r3, r2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5319, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000280), 0x2c, 0x80001)
ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x374c4)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x16, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x180, 0x0, &(0x7f0000000500)="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", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(r1, 0xffffffffffffffff, 0x0)

814.582117ms ago: executing program 2 (id=2977):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8, 0x80800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000f30300007b8af9ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x8, &(0x7f0000000040)=""/8, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94)
socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt(0xffffffffffffffff, 0x114, 0x271d, 0x0, &(0x7f0000000000))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x3ff)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

676.5728ms ago: executing program 6 (id=2978):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
close(r0)
mkdir(0x0, 0x1ff)
mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) (fail_nth: 5)
mkdir(0x0, 0x1ff)
mkdir(0x0, 0x1ff)
mkdir(0x0, 0x1ff)

0s ago: executing program 1 (id=2979):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
modify_ldt$read(0x0, 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
dup3(r3, r2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5319, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x2c, 0x80001)
ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x374c4)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
fcntl$lock(r7, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x180, 0x0, &(0x7f0000000500)="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", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(r1, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  618.942790][  T804] usb 4-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00
[  618.970400][  T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.995800][T14262] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  619.213499][T14262] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  619.221645][  T804] usb 4-1: config 0 descriptor??
[  619.242970][T14262] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  619.262853][T14262] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  619.276328][T14262] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  619.433155][T14269] usbtmc 2-1:16.0: usb_control_msg returned -32
[  619.525207][T14262] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  619.719844][  T804] logitech-hidpp-device 0003:046D:C088.000C: unknown main item tag 0x3
[  619.729143][  T804] logitech-hidpp-device 0003:046D:C088.000C: unknown main item tag 0x0
[  619.750525][  T804] logitech-hidpp-device 0003:046D:C088.000C: unknown main item tag 0x0
[  619.770635][  T804] logitech-hidpp-device 0003:046D:C088.000C: unknown main item tag 0x0
[  619.784843][  T804] logitech-hidpp-device 0003:046D:C088.000C: unknown main item tag 0x0
[  619.793655][  T804] logitech-hidpp-device 0003:046D:C088.000C: unknown main item tag 0x0
[  619.803302][  T804] logitech-hidpp-device 0003:046D:C088.000C: unknown main item tag 0x0
[  619.815001][  T804] logitech-hidpp-device 0003:046D:C088.000C: unknown main item tag 0x2
[  619.889010][ T5800] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  619.899072][  T804] logitech-hidpp-device 0003:046D:C088.000C: unknown main item tag 0x2
[  619.908589][  T804] logitech-hidpp-device 0003:046D:C088.000C: unknown main item tag 0x6
[  619.924479][  T804] logitech-hidpp-device 0003:046D:C088.000C: hidraw0: USB HID v0.02 Device [HID 046d:c088] on usb-dummy_hcd.3-1/input0
[  619.959358][  T804] usb 4-1: USB disconnect, device number 25
[  620.024153][T14284] fido_id[14284]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  620.055759][ T5800] usb 3-1: Using ep0 maxpacket: 8
[  620.073135][ T5800] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  620.116715][ T5800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.135549][ T5800] usb 3-1: Product: syz
[  620.144384][ T5800] usb 3-1: Manufacturer: syz
[  620.151806][ T5800] usb 3-1: SerialNumber: syz
[  620.172061][ T5800] usb 3-1: config 0 descriptor??
[  620.281190][T14291] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2402'.
[  620.467222][ T5800] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  621.026329][  T804] usb 2-1: USB disconnect, device number 44
[  621.834296][T14294] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  622.271883][ T5800] gspca_sonixj: reg_w1 err -71
[  622.318020][ T5800] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  622.333102][ T5800] usb 3-1: USB disconnect, device number 34
[  622.360156][T14301] syzkaller0: entered promiscuous mode
[  622.366905][T14295] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  622.397450][T14301] syzkaller0: entered allmulticast mode
[  622.408212][T14295] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  623.039106][    T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  623.117164][T14320] FAT-fs (nbd3): unable to read boot sector
[  623.315898][    T9] usb 6-1: Using ep0 maxpacket: 8
[  623.365569][T14318] IPVS: length: 217 != 24
[  623.409661][    T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  623.476891][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.567249][    T9] usb 6-1: Product: syz
[  623.603487][    T9] usb 6-1: Manufacturer: syz
[  623.645537][    T9] usb 6-1: SerialNumber: syz
[  623.818115][    T9] usb 6-1: config 0 descriptor??
[  623.839195][    T9] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  623.991283][T14329] syzkaller0: entered promiscuous mode
[  624.023827][T14329] syzkaller0: entered allmulticast mode
[  624.088032][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  624.095627][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  624.629020][   T29] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  624.657584][    T9] gspca_sonixj: reg_r err -71
[  624.679279][T14343] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2416'.
[  624.700276][    T9] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  624.726346][    T9] usb 6-1: USB disconnect, device number 12
[  624.764293][T14346] syzkaller0: entered promiscuous mode
[  624.807102][T14346] syzkaller0: entered allmulticast mode
[  624.818970][   T29] usb 3-1: Using ep0 maxpacket: 8
[  624.849431][   T29] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  624.862076][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.870443][   T29] usb 3-1: Product: syz
[  624.877559][   T29] usb 3-1: Manufacturer: syz
[  624.997849][   T29] usb 3-1: SerialNumber: syz
[  625.014000][   T29] usb 3-1: config 0 descriptor??
[  625.031266][   T29] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  625.198001][T14350] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  625.624373][   T29] gspca_sonixj: reg_w1 err -110
[  626.003891][   T29] sonixj 3-1:0.0: probe with driver sonixj failed with error -110
[  626.392542][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2419'.
[  626.605802][    T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  626.656475][  T804] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  626.755758][    T9] usb 5-1: Using ep0 maxpacket: 8
[  626.762076][    T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  626.770538][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  626.780579][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  626.791586][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  626.801807][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  626.815817][  T804] usb 2-1: Using ep0 maxpacket: 8
[  626.820963][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  626.830569][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.839534][  T804] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  626.848282][  T804] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  626.861735][  T804] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  626.871562][  T804] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  626.881541][  T804] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  626.894732][  T804] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  626.903994][  T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.067917][    T9] usb 5-1: usb_control_msg returned -32
[  627.073814][    T9] usbtmc 5-1:16.0: can't read capabilities
[  627.120375][  T804] usb 2-1: usb_control_msg returned -32
[  627.126492][  T804] usbtmc 2-1:16.0: can't read capabilities
[  627.371204][T14367] FAT-fs (nbd5): unable to read boot sector
[  627.403775][T14367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2423'.
[  627.471351][   T29] usb 3-1: USB disconnect, device number 35
[  628.133785][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2424'.
[  628.176568][T14372] usbtmc 5-1:16.0: usb_control_msg returned -32
[  628.326917][T14379] syzkaller0: entered promiscuous mode
[  628.332614][T14379] syzkaller0: entered allmulticast mode
[  629.071812][T14385] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2428'.
[  629.971622][T14387] syzkaller0: entered promiscuous mode
[  630.002463][T14387] syzkaller0: entered allmulticast mode
[  630.020199][T14387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  630.032586][T14387] tipc: Resetting bearer <eth:syzkaller0>
[  630.046194][T14386] tipc: Resetting bearer <eth:syzkaller0>
[  630.101518][T14386] tipc: Disabling bearer <eth:syzkaller0>
[  630.159452][T14392] syzkaller0: entered promiscuous mode
[  630.165369][T14392] syzkaller0: entered allmulticast mode
[  630.425450][T14402] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2433'.
[  632.235234][T14415] FAT-fs (nbd3): unable to read boot sector
[  632.267378][T14415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2436'.
[  632.475501][   T47] Bluetooth: hci5: Frame reassembly failed (-84)
[  633.285939][T14371] usbtmc 5-1:16.0: usb_control_msg returned -110
[  633.294914][ T5726] usb 2-1: USB disconnect, device number 45
[  633.328477][  T804] usb 5-1: USB disconnect, device number 33
[  633.386625][   T29] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  633.399174][T14426] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2439'.
[  633.513963][T14431] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2441'.
[  633.554958][   T29] usb 4-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config
[  633.567135][   T29] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  633.587147][   T29] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  633.598087][   T29] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  633.630396][   T29] usb 4-1: Manufacturer: syz
[  633.635326][   T29] usb 4-1: SerialNumber: syz
[  633.941201][   T29] usbhid 4-1:36.0: couldn't find an input interrupt endpoint
[  633.973220][   T29] usb 4-1: USB disconnect, device number 26
[  634.488372][ T5613] Bluetooth: hci5: command 0x1003 tx timeout
[  634.496041][T13433] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  634.729300][T14446] IPVS: length: 217 != 24
[  634.967765][ T5800] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  635.258771][ T5800] usb 4-1: Using ep0 maxpacket: 8
[  635.319524][ T5800] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  635.333785][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.356237][ T5800] usb 4-1: Product: syz
[  635.362379][ T5800] usb 4-1: Manufacturer: syz
[  635.368198][ T5800] usb 4-1: SerialNumber: syz
[  635.433803][ T5800] usb 4-1: config 0 descriptor??
[  635.447586][ T5800] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  635.625739][   T29] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  635.727070][T14465] syzkaller0: entered promiscuous mode
[  635.732764][T14465] syzkaller0: entered allmulticast mode
[  635.801025][   T29] usb 2-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config
[  635.820858][   T29] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  635.838026][   T29] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  635.847233][   T29] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  635.855551][   T29] usb 2-1: Manufacturer: syz
[  635.860310][   T29] usb 2-1: SerialNumber: syz
[  636.194152][   T29] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[  636.230338][   T29] usb 2-1: USB disconnect, device number 46
[  636.253577][ T5800] gspca_sonixj: reg_r err -71
[  636.262605][ T5800] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  636.304100][ T5800] usb 4-1: USB disconnect, device number 27
[  636.467324][T14477] FAT-fs (nbd4): unable to read boot sector
[  636.515774][T14477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2454'.
[  639.232572][T14495] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2459'.
[  639.427123][ T5800] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  639.448796][T14499] syzkaller0: entered promiscuous mode
[  639.463176][T14499] syzkaller0: entered allmulticast mode
[  639.646934][ T5800] usb 5-1: Using ep0 maxpacket: 8
[  639.656894][ T5800] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  639.665313][ T5800] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  639.675724][ T5800] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  639.686168][ T5800] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  639.696297][ T5800] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  639.709674][ T5800] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  639.718817][ T5800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.521379][ T5800] usb 5-1: usb_control_msg returned -32
[  640.527193][ T5800] usbtmc 5-1:16.0: can't read capabilities
[  640.562059][T14510] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2464'.
[  641.326500][T14515] usbtmc 5-1:16.0: usb_control_msg returned -32
[  641.528967][ T5800] usb 5-1: USB disconnect, device number 34
[  642.035783][   T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  642.215782][   T29] usb 6-1: Using ep0 maxpacket: 8
[  642.235780][   T29] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  642.248729][   T29] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  642.265624][   T29] usb 6-1: config 0 interface 0 has no altsetting 0
[  642.286033][   T29] usb 6-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00
[  642.296169][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.308876][   T29] usb 6-1: config 0 descriptor??
[  642.338455][ T5800] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  642.515353][ T5800] usb 5-1: Using ep0 maxpacket: 8
[  642.529614][ T5800] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  642.538785][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.560372][ T5800] usb 5-1: Product: syz
[  642.565742][ T5800] usb 5-1: Manufacturer: syz
[  642.580588][ T5800] usb 5-1: SerialNumber: syz
[  642.597508][ T5800] usb 5-1: config 0 descriptor??
[  642.609782][ T5800] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  642.782625][   T29] hid_parser_main: 1 callbacks suppressed
[  642.782648][   T29] logitech-hidpp-device 0003:046D:C088.000D: unknown main item tag 0x3
[  642.797315][   T29] logitech-hidpp-device 0003:046D:C088.000D: unknown main item tag 0x0
[  642.806579][   T29] logitech-hidpp-device 0003:046D:C088.000D: unknown main item tag 0x0
[  642.815382][   T29] logitech-hidpp-device 0003:046D:C088.000D: unknown main item tag 0x0
[  642.825112][   T29] logitech-hidpp-device 0003:046D:C088.000D: unknown main item tag 0x0
[  642.834889][   T29] logitech-hidpp-device 0003:046D:C088.000D: unknown main item tag 0x0
[  642.843535][   T29] logitech-hidpp-device 0003:046D:C088.000D: unknown main item tag 0x0
[  642.852203][   T29] logitech-hidpp-device 0003:046D:C088.000D: unknown main item tag 0x2
[  642.861266][   T29] logitech-hidpp-device 0003:046D:C088.000D: unknown main item tag 0x2
[  642.870582][   T29] logitech-hidpp-device 0003:046D:C088.000D: unknown main item tag 0x6
[  642.896930][   T29] logitech-hidpp-device 0003:046D:C088.000D: hidraw0: USB HID v0.02 Device [HID 046d:c088] on usb-dummy_hcd.5-1/input0
[  643.039059][   T29] usb 6-1: USB disconnect, device number 13
[  643.434690][ T5800] gspca_sonixj: reg_r err -71
[  643.439628][ T5800] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  643.474654][ T5800] usb 5-1: USB disconnect, device number 35
[  643.814588][T14536] sctp_transport_update_pmtu: 47 callbacks suppressed
[  643.814603][T14536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  643.831890][T14536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  643.842331][T14536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  643.852728][T14536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  643.863474][T14536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  643.873842][T14536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  643.884457][T14536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  643.894795][T14536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  643.905122][T14536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  643.915689][T14536] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  644.005989][   T29] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  644.121370][T14542] syzkaller0: entered promiscuous mode
[  644.127462][T14542] syzkaller0: entered allmulticast mode
[  644.144098][T14542] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  644.186936][   T29] usb 6-1: Using ep0 maxpacket: 8
[  644.302041][T14549] syzkaller0: entered promiscuous mode
[  644.311438][T14549] syzkaller0: entered allmulticast mode
[  644.420987][   T29] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  644.434771][   T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  644.444912][   T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  644.454800][   T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  644.464919][   T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  644.478453][   T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  644.488102][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.730515][   T29] usb 6-1: usb_control_msg returned -32
[  645.058860][ T5726] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  645.635125][   T29] usbtmc 6-1:16.0: can't read capabilities
[  646.305743][ T5726] usb 5-1: Using ep0 maxpacket: 8
[  646.353431][ T5726] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  647.027197][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.037907][ T5726] usb 5-1: Product: syz
[  647.042356][ T5726] usb 5-1: Manufacturer: syz
[  647.084331][ T5726] usb 5-1: SerialNumber: syz
[  647.363680][ T5726] usb 5-1: config 0 descriptor??
[  647.388335][   T29] usb 6-1: USB disconnect, device number 14
[  647.531535][ T5726] usb 5-1: can't set config #0, error -71
[  647.565525][ T5726] usb 5-1: USB disconnect, device number 36
[  647.735773][ T5800] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  647.909744][ T5800] usb 4-1: Using ep0 maxpacket: 8
[  648.117952][ T5800] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  648.272068][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.429920][ T5800] usb 4-1: Product: syz
[  648.514236][ T5800] usb 4-1: Manufacturer: syz
[  648.611393][ T5800] usb 4-1: SerialNumber: syz
[  648.696616][ T5800] usb 4-1: config 0 descriptor??
[  648.727667][ T5800] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  648.921530][T14603] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2485'.
[  649.824777][T14610] syzkaller0: entered promiscuous mode
[  649.832088][T14610] syzkaller0: entered allmulticast mode
[  649.884219][ T5800] gspca_sonixj: reg_w1 err -71
[  650.367950][ T5800] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  650.554171][T14619] sctp_transport_update_pmtu: 161 callbacks suppressed
[  650.554240][T14619] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  650.573591][T14619] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  650.586131][T14619] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  650.599201][T14619] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  650.627814][T14619] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  650.640652][T14619] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  650.654003][T14619] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  650.669154][T14619] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  650.683343][T14619] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  650.697933][T14619] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  651.458916][ T5800] usb 4-1: USB disconnect, device number 28
[  651.654768][T14627] syzkaller0: entered promiscuous mode
[  651.669199][T14627] syzkaller0: entered allmulticast mode
[  651.722903][T14627] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  651.756337][T14626] tipc: Resetting bearer <eth:syzkaller0>
[  651.830963][T14626] tipc: Disabling bearer <eth:syzkaller0>
[  651.935767][    T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  652.075198][ T5881] Bluetooth: hci5: Frame reassembly failed (-84)
[  652.081895][ T5881] Bluetooth: hci5: Frame reassembly failed (-84)
[  652.095742][    T9] usb 3-1: Using ep0 maxpacket: 8
[  652.104696][    T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  652.116776][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  652.128912][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  652.150850][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  652.162272][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  652.175606][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  652.186461][ T5613] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  652.213225][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.339754][T14644] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  652.462319][    T9] usb 3-1: usb_control_msg returned -32
[  652.470169][    T9] usbtmc 3-1:16.0: can't read capabilities
[  653.267164][T14654] usbtmc 3-1:16.0: usb_control_msg returned -32
[  653.468315][   T29] usb 3-1: USB disconnect, device number 36
[  654.096125][T13433] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  654.103219][T14667] syzkaller0: entered promiscuous mode
[  654.103684][ T5613] Bluetooth: hci5: command 0x1003 tx timeout
[  654.115733][T14667] syzkaller0: entered allmulticast mode
[  654.562013][T14677] FAT-fs (nbd4): unable to read boot sector
[  654.663558][T14678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2504'.
[  655.321893][T14687] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2507'.
[  656.033130][   T29] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  656.259788][T14705] xt_hashlimit: max too large, truncated to 1048576
[  656.266643][   T29] usb 2-1: Using ep0 maxpacket: 8
[  656.297936][   T29] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  656.389321][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.507611][   T29] usb 2-1: Product: syz
[  656.723949][   T29] usb 2-1: Manufacturer: syz
[  656.802978][   T29] usb 2-1: SerialNumber: syz
[  657.060904][   T29] usb 2-1: config 0 descriptor??
[  657.159978][   T29] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  657.379537][T14709] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2512'.
[  658.164097][   T29] gspca_sonixj: reg_w1 err -71
[  658.206033][   T29] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  658.767514][   T29] usb 2-1: USB disconnect, device number 47
[  658.926406][T14730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2517'.
[  659.942420][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2521'.
[  660.365357][T14742] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  660.571144][T14754] fuse: Bad value for 'fd'
[  661.596497][   T47] Bluetooth: hci5: Frame reassembly failed (-84)
[  661.618799][T14766] Bluetooth: hci5: Frame reassembly failed (-84)
[  661.647943][   T47] Bluetooth: hci5: Frame reassembly failed (-84)
[  661.723278][T14773] Bluetooth: hci5: Frame reassembly failed (-84)
[  662.834336][T14781] xt_hashlimit: max too large, truncated to 1048576
[  663.607543][T13433] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  663.918216][T14787] FAT-fs (nbd2): unable to read boot sector
[  663.969756][T14787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2530'.
[  665.254328][T14803] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2535'.
[  665.475713][ T5726] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  666.179538][ T5726] usb 6-1: Using ep0 maxpacket: 8
[  667.391057][ T5726] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  667.526907][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.534957][ T5726] usb 6-1: Product: syz
[  667.539240][ T5726] usb 6-1: Manufacturer: syz
[  667.543880][ T5726] usb 6-1: SerialNumber: syz
[  667.628883][ T5726] usb 6-1: config 0 descriptor??
[  667.789465][ T5726] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  668.052762][T14808] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2537'.
[  668.295764][ T5800] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  668.468152][ T5800] usb 4-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config
[  668.481925][ T5800] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  668.510609][ T5800] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  668.524059][ T5800] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  668.535699][ T5800] usb 4-1: Manufacturer: syz
[  668.541983][ T5800] usb 4-1: SerialNumber: syz
[  668.595014][ T5726] gspca_sonixj: reg_r err -71
[  668.599830][ T5726] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  668.625283][ T5726] usb 6-1: USB disconnect, device number 15
[  668.822099][ T5800] usbhid 4-1:36.0: couldn't find an input interrupt endpoint
[  668.831863][ T5800] usb 4-1: USB disconnect, device number 29
[  668.875272][T14828] Bluetooth: hci5: Frame reassembly failed (-84)
[  668.942665][T14832] Bluetooth: hci5: Frame reassembly failed (-84)
[  668.978899][ T1322] Bluetooth: hci5: Frame reassembly failed (-84)
[  669.927744][T14847] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  670.173966][T14854] overlayfs: missing 'lowerdir'
[  670.248429][T14856] IPVS: length: 217 != 24
[  670.678894][T14861] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  670.919503][T13433] Bluetooth: hci5: command 0x1003 tx timeout
[  670.945832][ T5613] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  672.315342][T14871] syzkaller0: entered promiscuous mode
[  672.364917][T14871] syzkaller0: entered allmulticast mode
[  672.483063][T14874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  672.569657][T14878] sctp_transport_update_pmtu: 47 callbacks suppressed
[  672.569769][T14878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  672.590865][T14878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  672.603027][T14878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  672.615913][T14878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  672.662024][T14878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  672.674502][T14878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  672.687121][T14878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  672.699367][T14878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  672.711994][T14878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  672.725998][T14878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  672.778088][T14871] tipc: Resetting bearer <eth:syzkaller0>
[  673.322731][T14887] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2557'.
[  673.847100][T14868] tipc: Resetting bearer <eth:syzkaller0>
[  674.004258][T14868] tipc: Disabling bearer <eth:syzkaller0>
[  674.147660][    T9] tipc: Node number set to 550247185
[  676.885478][T14932] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  676.994122][T14938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2567'.
[  677.212803][T14938] bond8: entered promiscuous mode
[  677.220651][T14938] 8021q: adding VLAN 0 to HW filter on device bond8
[  677.378291][T14938] dummy0: entered allmulticast mode
[  677.388931][T14938] dummy0: left allmulticast mode
[  677.511489][ T5613] Bluetooth: hci1: unexpected event for opcode 0x0c2d
[  678.195802][T14952] syzkaller0: entered promiscuous mode
[  678.208872][T14952] syzkaller0: entered allmulticast mode
[  678.331900][T14952] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  678.504357][T14954] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  679.466897][ T5800] tipc: Node number set to 1979582470
[  679.725577][T14951] tipc: Resetting bearer <eth:syzkaller0>
[  679.783424][T14959] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  680.071315][T14951] tipc: Disabling bearer <eth:syzkaller0>
[  680.077491][T14964] FAT-fs (nbd3): unable to read boot sector
[  680.202529][T14964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2572'.
[  680.911737][T14970] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2571'.
[  681.053699][T14978] FAT-fs (nbd2): unable to read boot sector
[  681.105949][T14978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2576'.
[  681.934549][T14979] syzkaller0: entered promiscuous mode
[  681.940110][T14979] syzkaller0: entered allmulticast mode
[  681.953257][T14976] overlayfs: missing 'lowerdir'
[  683.012530][T14993] syzkaller0: entered promiscuous mode
[  683.018370][T14993] syzkaller0: entered allmulticast mode
[  684.409474][T15016] syzkaller0: entered promiscuous mode
[  684.439808][T15016] syzkaller0: entered allmulticast mode
[  684.492093][T15019] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  684.637591][T15024] syzkaller0: entered promiscuous mode
[  684.657629][T15024] syzkaller0: entered allmulticast mode
[  684.694270][T15027] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  684.753192][T15024] tipc: Resetting bearer <eth:syzkaller0>
[  684.798753][T15023] tipc: Resetting bearer <eth:syzkaller0>
[  684.811099][  T140] Bluetooth: hci5: Frame reassembly failed (-84)
[  684.958661][T15039] FAT-fs (nbd1): unable to read boot sector
[  684.984890][T13433] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  685.084174][T15039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2588'.
[  685.484018][T15023] tipc: Disabling bearer <eth:syzkaller0>
[  685.551097][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  685.561582][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  686.147288][T15052] dummy0: entered allmulticast mode
[  686.179104][T15052] dummy0: left allmulticast mode
[  686.364744][T13433] Bluetooth: hci0: unexpected event for opcode 0x0c2d
[  686.814472][ T5613] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  687.037930][T15059] sctp_transport_update_pmtu: 104 callbacks suppressed
[  687.038007][T15059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  687.057116][T15059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  687.068793][T15059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  687.080829][T15059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  687.096617][T15059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  687.109039][T15059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  687.121139][T15059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  687.133137][T15059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  687.144980][T15059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  687.156606][T15059] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  687.876796][T15062] syzkaller0: entered promiscuous mode
[  687.882528][T15062] syzkaller0: entered allmulticast mode
[  689.081949][T15079] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2596'.
[  689.101605][T15079] dummy0: entered allmulticast mode
[  689.114340][T15079] dummy0: left allmulticast mode
[  689.299691][ T5613] Bluetooth: hci4: unexpected event for opcode 0x0c2d
[  689.323605][T15084] FAT-fs (nbd1): unable to read boot sector
[  689.356707][T15084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2597'.
[  690.911557][T15113] FAT-fs (nbd1): unable to read boot sector
[  690.971694][T15113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2606'.
[  691.679048][   T29] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  691.835750][   T29] usb 6-1: Using ep0 maxpacket: 8
[  691.854731][   T29] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  691.941045][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.034033][   T29] usb 6-1: Product: syz
[  692.087007][   T29] usb 6-1: Manufacturer: syz
[  692.087547][T15130] overlayfs: missing 'lowerdir'
[  692.121498][   T29] usb 6-1: SerialNumber: syz
[  692.164664][   T29] usb 6-1: config 0 descriptor??
[  692.190471][   T29] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  693.480125][   T29] gspca_sonixj: reg_w1 err -71
[  693.549785][   T29] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  693.711159][   T29] usb 6-1: USB disconnect, device number 16
[  693.816794][T15153] syzkaller0: entered promiscuous mode
[  693.831645][T15153] syzkaller0: entered allmulticast mode
[  694.391758][T15166] sctp_transport_update_pmtu: 104 callbacks suppressed
[  694.391773][T15166] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  694.409483][T15166] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  694.419997][T15166] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  694.430642][T15166] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  694.441528][T15166] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  694.451856][T15166] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  694.462255][T15166] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  694.472746][T15166] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  694.483160][T15166] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  694.493551][T15166] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  696.912597][T15176] befs: (nullb0): invalid magic header
[  697.276904][   T30] audit: type=1400 audit(1785592584.869:822): avc:  denied  { write } for  pid=15173 comm="syz.2.2623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  697.300072][   T30] audit: type=1400 audit(1785592584.869:823): avc:  denied  { ioctl } for  pid=15173 comm="syz.2.2623" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  697.433145][T15175] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  700.189895][T15193] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2629'.
[  700.281744][T15196] syzkaller1: entered promiscuous mode
[  700.307711][T15196] syzkaller1: entered allmulticast mode
[  702.008066][T15211] sctp_transport_update_pmtu: 47 callbacks suppressed
[  702.008087][T15211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  702.026399][T15211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  702.036931][T15211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  702.047563][T15211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  702.058292][T15211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  702.068657][T15211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  702.079478][T15211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  702.090448][T15211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  702.101380][T15211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  702.111890][T15211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  702.359380][   T30] audit: type=1400 audit(1785592590.419:824): avc:  denied  { ioctl } for  pid=15218 comm="syz.5.2636" path="socket:[46442]" dev="sockfs" ino=46442 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  702.489457][   T30] audit: type=1400 audit(1785592590.419:825): avc:  denied  { execute } for  pid=15218 comm="syz.5.2636" path="/dev/adsp1" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  702.592185][   T30] audit: type=1400 audit(1785592590.619:826): avc:  denied  { create } for  pid=15221 comm="syz.4.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  702.643244][T15225] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2638'.
[  702.705391][   T30] audit: type=1400 audit(1785592590.639:827): avc:  denied  { bind } for  pid=15221 comm="syz.4.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  702.946576][T15231] FAT-fs (nbd5): unable to read boot sector
[  703.049875][T15232] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2639'.
[  706.258046][T15273] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15273 comm=syz.5.2650
[  706.508251][T15276] syzkaller0: entered promiscuous mode
[  706.529406][T15276] syzkaller0: entered allmulticast mode
[  706.562189][T15276] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  706.609053][T15280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2651'.
[  706.645921][T15275] tipc: Resetting bearer <eth:syzkaller0>
[  706.699655][   T30] audit: type=1326 audit(1785592594.759:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15277 comm="syz.5.2653" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96e1b9e019 code=0x0
[  706.733276][T15275] tipc: Disabling bearer <eth:syzkaller0>
[  707.017577][   T30] audit: type=1400 audit(1785592595.079:829): avc:  denied  { create } for  pid=15284 comm="syz.1.2654" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  707.079680][   T30] audit: type=1400 audit(1785592595.099:830): avc:  denied  { write } for  pid=15284 comm="syz.1.2654" name="file2" dev="tmpfs" ino=3096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  707.123849][   T30] audit: type=1400 audit(1785592595.099:831): avc:  denied  { open } for  pid=15284 comm="syz.1.2654" path="/544/file2" dev="tmpfs" ino=3096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  707.149083][   T30] audit: type=1400 audit(1785592595.119:832): avc:  denied  { cmd } for  pid=15284 comm="syz.1.2654" path="/544/file2" dev="tmpfs" ino=3096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1
[  707.214535][   T30] audit: type=1400 audit(1785592595.269:833): avc:  denied  { unlink } for  pid=5608 comm="syz-executor" name="file2" dev="tmpfs" ino=3096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  708.418394][T15291] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  708.489279][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2658'.
[  708.925982][T15302] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size.
[  709.070182][T15310] FAULT_INJECTION: forcing a failure.
[  709.070182][T15310] name failslab, interval 1, probability 0, space 0, times 1
[  709.118231][T15310] CPU: 1 UID: 0 PID: 15310 Comm: syz.3.2663 Not tainted syzkaller #0 PREEMPT(full) 
[  709.118259][T15310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  709.118268][T15310] Call Trace:
[  709.118273][T15310]  <TASK>
[  709.118279][T15310]  dump_stack_lvl+0x100/0x190
[  709.118306][T15310]  should_fail_ex.cold+0x5/0xa
[  709.118324][T15310]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  709.118353][T15310]  should_failslab+0xc2/0x120
[  709.118373][T15310]  kmem_cache_alloc_noprof+0x91/0x6a0
[  709.118395][T15310]  ? skb_clone+0x190/0x400
[  709.118421][T15310]  skb_clone+0x190/0x400
[  709.118444][T15310]  netlink_deliver_tap+0xaed/0xcc0
[  709.118484][T15310]  netlink_unicast+0x62b/0x850
[  709.118506][T15310]  ? __pfx_netlink_unicast+0x10/0x10
[  709.118522][T15310]  ? __build_skb_around+0x278/0x390
[  709.118545][T15310]  netlink_sendmsg+0x8b0/0xda0
[  709.118567][T15310]  ? __pfx_netlink_sendmsg+0x10/0x10
[  709.118588][T15310]  ? selinux_socket_sendmsg+0x198/0x2f0
[  709.118617][T15310]  ____sys_sendmsg+0xa4d/0xbe0
[  709.118643][T15310]  ? __pfx_netlink_sendmsg+0x10/0x10
[  709.118664][T15310]  ? __pfx_____sys_sendmsg+0x10/0x10
[  709.118701][T15310]  ___sys_sendmsg+0x190/0x1e0
[  709.118721][T15310]  ? __pfx____sys_sendmsg+0x10/0x10
[  709.118737][T15310]  ? __lock_acquire+0x49f/0x1a40
[  709.118759][T15310]  ? get_pid_task+0x106/0x250
[  709.118803][T15310]  __sys_sendmsg+0x160/0x210
[  709.118827][T15310]  ? __pfx___sys_sendmsg+0x10/0x10
[  709.118863][T15310]  do_syscall_64+0x115/0x870
[  709.118885][T15310]  ? clear_bhb_loop+0x40/0x90
[  709.118907][T15310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.118926][T15310] RIP: 0033:0x7ff943b9e019
[  709.118942][T15310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  709.118959][T15310] RSP: 002b:00007ff944a27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  709.118976][T15310] RAX: ffffffffffffffda RBX: 00007ff943e26180 RCX: 00007ff943b9e019
[  709.118988][T15310] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000005
[  709.118998][T15310] RBP: 00007ff944a27090 R08: 0000000000000000 R09: 0000000000000000
[  709.119008][T15310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  709.119017][T15310] R13: 00007ff943e26218 R14: 00007ff943e26180 R15: 00007ffc95c2e728
[  709.119040][T15310]  </TASK>
[  709.380484][T15315] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  709.781361][T15318] syzkaller0: entered promiscuous mode
[  709.801830][T15318] syzkaller0: entered allmulticast mode
[  709.842096][T15318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  710.052798][T15317] tipc: Resetting bearer <eth:syzkaller0>
[  711.053060][T15317] tipc: Disabling bearer <eth:syzkaller0>
[  711.190366][   T30] audit: type=1400 audit(1785592599.249:834): avc:  denied  { ioctl } for  pid=15337 comm="syz.2.2669" path="socket:[47366]" dev="sockfs" ino=47366 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  711.327982][T15342] No control pipe specified
[  711.733555][  T804] tipc: Node number set to 719800448
[  711.775946][   T30] audit: type=1400 audit(1785592599.249:835): avc:  denied  { bind } for  pid=15337 comm="syz.2.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  711.798648][   T30] audit: type=1400 audit(1785592599.779:836): avc:  denied  { setopt } for  pid=15337 comm="syz.2.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  711.803337][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2669'.
[  711.818917][   T30] audit: type=1400 audit(1785592599.829:837): avc:  denied  { create } for  pid=15343 comm="syz.3.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  711.936271][   T30] audit: type=1400 audit(1785592599.909:838): avc:  denied  { write } for  pid=15343 comm="syz.3.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  712.217303][  T140] Bluetooth: hci5: Frame reassembly failed (-84)
[  712.316360][T13433] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  712.354449][T15361] FAULT_INJECTION: forcing a failure.
[  712.354449][T15361] name failslab, interval 1, probability 0, space 0, times 0
[  712.416405][T15363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2677'.
[  712.438688][T15361] CPU: 1 UID: 0 PID: 15361 Comm: syz.5.2676 Not tainted syzkaller #0 PREEMPT(full) 
[  712.438713][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  712.438723][T15361] Call Trace:
[  712.438728][T15361]  <TASK>
[  712.438734][T15361]  dump_stack_lvl+0x100/0x190
[  712.438759][T15361]  should_fail_ex.cold+0x5/0xa
[  712.438778][T15361]  should_failslab+0xc2/0x120
[  712.438798][T15361]  kmem_cache_alloc_noprof+0x91/0x6a0
[  712.438815][T15361]  ? rcu_is_watching+0x12/0xc0
[  712.438837][T15361]  ? do_getname+0x35/0x390
[  712.438861][T15361]  do_getname+0x35/0x390
[  712.438885][T15361]  __do_sys_move_mount+0x42f/0x780
[  712.438909][T15361]  ? __pfx___do_sys_move_mount+0x10/0x10
[  712.438928][T15361]  ? ksys_write+0x1ac/0x250
[  712.438954][T15361]  ? __pfx_ksys_write+0x10/0x10
[  712.438987][T15361]  do_syscall_64+0x115/0x870
[  712.439009][T15361]  ? clear_bhb_loop+0x40/0x90
[  712.439030][T15361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.439048][T15361] RIP: 0033:0x7f96e1b9e019
[  712.439063][T15361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.439079][T15361] RSP: 002b:00007f96e29a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad
[  712.439097][T15361] RAX: ffffffffffffffda RBX: 00007f96e1e25fa0 RCX: 00007f96e1b9e019
[  712.439108][T15361] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 0000000000000005
[  712.439119][T15361] RBP: 00007f96e29a1090 R08: 0000000000000000 R09: 0000000000000000
[  712.439129][T15361] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  712.439139][T15361] R13: 00007f96e1e26038 R14: 00007f96e1e25fa0 R15: 00007ffc0764f2c8
[  712.439163][T15361]  </TASK>
[  712.810914][T15363] binfmt_misc: register: failed to install interpreter file ./file1
[  712.975976][T15373] sctp_transport_update_pmtu: 104 callbacks suppressed
[  712.976032][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  712.994753][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  713.006095][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  713.017467][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  713.044173][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  713.057106][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  713.068973][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  713.080559][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  713.137980][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  713.149708][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  713.773330][   T29] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  714.247349][T13433] Bluetooth: hci5: command 0x1003 tx timeout
[  714.261579][ T5613] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  714.394610][   T29] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  714.689288][   T29] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129
[  714.710382][   T29] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  714.719558][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.727628][   T29] usb 3-1: Product: syz
[  714.731843][   T29] usb 3-1: Manufacturer: syz
[  714.736949][   T29] usb 3-1: SerialNumber: syz
[  714.744468][   T29] usb 3-1: config 0 descriptor??
[  714.797178][   T30] audit: type=1400 audit(1785592602.859:839): avc:  denied  { map } for  pid=15388 comm="syz.5.2681" path="pipe:[46779]" dev="pipefs" ino=46779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  715.197978][T15394] syzkaller0: entered promiscuous mode
[  715.212729][T15394] syzkaller0: entered allmulticast mode
[  715.248575][T15394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  715.272989][T15393] tipc: Resetting bearer <eth:syzkaller0>
[  715.338710][T15393] tipc: Disabling bearer <eth:syzkaller0>
[  715.495836][ T5726] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  715.554128][T15402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2685'.
[  715.574158][T15402] dummy0: entered allmulticast mode
[  715.584875][T15402] dummy0: left allmulticast mode
[  715.686201][ T5613] Bluetooth: hci0: unexpected event for opcode 0x0c2d
[  715.695948][T14424] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  715.750570][ T5726] usb 2-1: Using ep0 maxpacket: 16
[  715.764504][ T5726] usb 2-1: config index 0 descriptor too short (expected 65, got 36)
[  715.788798][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  715.834336][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  715.875876][T14424] usb 6-1: device descriptor read/64, error -71
[  715.890883][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  715.941694][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  716.002160][ T5726] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  716.039595][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.136310][T14424] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  716.150791][ T5726] usb 2-1: config 0 descriptor??
[  716.213818][T15396] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  716.438796][T14424] usb 6-1: device descriptor read/64, error -71
[  716.517693][ T5726] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24
[  716.628305][T14424] usb usb6-port1: attempt power cycle
[  716.708053][T15396] Cannot find add_set index 0 as target
[  716.771087][   T29] mos7840 3-1:0.0: required endpoints missing
[  716.789882][   T29] usb 3-1: USB disconnect, device number 37
[  717.045829][T14424] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  717.059375][   T30] audit: type=1400 audit(1785592605.119:840): avc:  denied  { map } for  pid=15395 comm="syz.1.2683" path="socket:[46848]" dev="sockfs" ino=46848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  717.087334][T14424] usb 6-1: device descriptor read/8, error -71
[  717.109507][   T30] audit: type=1400 audit(1785592605.119:841): avc:  denied  { read } for  pid=15395 comm="syz.1.2683" path="socket:[46848]" dev="sockfs" ino=46848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  717.335747][T14424] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  717.356437][T14424] usb 6-1: device descriptor read/8, error -71
[  717.466351][T14424] usb usb6-port1: unable to enumerate USB device
[  718.035815][T14424] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  718.185813][T14424] usb 4-1: Using ep0 maxpacket: 8
[  718.196683][T14424] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  718.208485][T14424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.217271][T14424] usb 4-1: Product: syz
[  718.222362][T14424] usb 4-1: Manufacturer: syz
[  718.227611][T14424] usb 4-1: SerialNumber: syz
[  718.245017][T14424] usb 4-1: config 0 descriptor??
[  718.265860][T14424] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  718.310171][    T9] usb 2-1: USB disconnect, device number 48
[  720.353805][T14424] gspca_sonixj: reg_r err -71
[  720.385373][T14424] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  720.562505][T14424] usb 4-1: USB disconnect, device number 30
[  720.667038][T15436] syzkaller0: entered promiscuous mode
[  720.705397][T15436] syzkaller0: entered allmulticast mode
[  720.711414][T15422] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2689'.
[  720.786751][T15437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  720.800445][T15434] tipc: Resetting bearer <eth:syzkaller0>
[  720.949882][T15434] tipc: Disabling bearer <eth:syzkaller0>
[  721.148969][   T30] audit: type=1400 audit(1785592609.199:842): avc:  denied  { create } for  pid=15445 comm="syz.3.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  721.240737][   T30] audit: type=1400 audit(1785592609.259:843): avc:  denied  { getopt } for  pid=15445 comm="syz.3.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  721.386256][   T30] audit: type=1400 audit(1785592609.299:844): avc:  denied  { write } for  pid=15445 comm="syz.3.2699" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  721.484773][   T30] audit: type=1400 audit(1785592609.299:845): avc:  denied  { open } for  pid=15445 comm="syz.3.2699" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  721.512572][T15450] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  722.042921][T15461] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2705'.
[  722.205732][ T5726] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  723.309175][ T5726] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  723.319408][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  723.330835][ T5726] usb 5-1: Product: syz
[  723.335461][ T5726] usb 5-1: SerialNumber: syz
[  723.343464][ T5726] usb 5-1: config 0 descriptor??
[  723.360553][   T30] audit: type=1400 audit(1785592611.419:846): avc:  denied  { kexec_image_load } for  pid=15472 comm="syz.3.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  723.770837][   T30] audit: type=1400 audit(1785592611.829:847): avc:  denied  { create } for  pid=15480 comm="syz.2.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  724.039413][T15456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  724.050123][T15456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  724.129516][T15481] FAT-fs (nbd2): unable to read boot sector
[  724.332954][T15481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2711'.
[  726.165847][    T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  726.241496][ T5726] usb 5-1: USB disconnect, device number 37
[  726.325895][    T9] usb 6-1: Using ep0 maxpacket: 16
[  726.349666][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  726.391469][    T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  726.432080][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.462347][    T9] usb 6-1: config 0 descriptor??
[  726.626790][T15516] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2721'.
[  726.835743][ T5800] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  726.970242][    T9] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  727.011679][ T5800] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  727.041934][ T5800] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  727.052954][  T804] libceph: connect (1)[c::]:6789 error -101
[  727.080506][  T804] libceph: mon0 (1)[c::]:6789 connect error
[  727.100060][ T5800] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  727.131227][ T5800] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  727.161816][ T5800] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  727.184644][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  727.215967][ T5800] usb 5-1: Product: syz
[  727.227403][ T5800] usb 5-1: Manufacturer: syz
[  727.259523][ T5800] cdc_wdm 5-1:1.0: skipping garbage
[  727.279866][  T804] libceph: connect (1)[c::]:6789 error -101
[  727.290857][ T5800] cdc_wdm 5-1:1.0: skipping garbage
[  727.308291][  T804] libceph: mon0 (1)[c::]:6789 connect error
[  727.324514][ T5800] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  727.334554][T15511] ceph: No mds server is up or the cluster is laggy
[  727.343188][ T5800] cdc_wdm 5-1:1.0: Unknown control protocol
[  727.518346][ T5726] usb 6-1: USB disconnect, device number 21
[  727.696090][T14424] usb 5-1: USB disconnect, device number 38
[  728.547329][ T5800] libceph: connect (1)[c::]:6789 error -101
[  728.616193][ T5800] libceph: mon0 (1)[c::]:6789 connect error
[  728.896237][T14424] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  729.147476][T14424] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  729.156605][T14424] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  729.167615][T14424] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  729.179646][ T5800] libceph: connect (1)[c::]:6789 error -101
[  729.193857][T15551] syzkaller0: entered promiscuous mode
[  729.206631][T14424] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  729.208300][ T5800] libceph: mon0 (1)[c::]:6789 connect error
[  729.227555][T15551] syzkaller0: entered allmulticast mode
[  729.351581][T14424] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  729.360993][T14424] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  729.369808][T14424] usb 5-1: Product: syz
[  729.374008][T14424] usb 5-1: Manufacturer: syz
[  729.394125][T15551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  729.428282][T15549] tipc: Resetting bearer <eth:syzkaller0>
[  729.437772][T14424] cdc_wdm 5-1:1.0: skipping garbage
[  729.454420][T14424] cdc_wdm 5-1:1.0: skipping garbage
[  729.474796][T14424] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  729.498358][T14424] cdc_wdm 5-1:1.0: Unknown control protocol
[  729.522521][T15549] tipc: Disabling bearer <eth:syzkaller0>
[  729.612692][ T5800] usb 5-1: USB disconnect, device number 39
[  729.799116][T15557] FAULT_INJECTION: forcing a failure.
[  729.799116][T15557] name failslab, interval 1, probability 0, space 0, times 0
[  729.885464][T15557] CPU: 1 UID: 0 PID: 15557 Comm: syz.4.2731 Not tainted syzkaller #0 PREEMPT(full) 
[  729.885489][T15557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  729.885498][T15557] Call Trace:
[  729.885504][T15557]  <TASK>
[  729.885509][T15557]  dump_stack_lvl+0x100/0x190
[  729.885534][T15557]  should_fail_ex.cold+0x5/0xa
[  729.885553][T15557]  should_failslab+0xc2/0x120
[  729.885573][T15557]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  729.885591][T15557]  ? __alloc_skb+0x5b7/0x710
[  729.885611][T15557]  ? __alloc_skb+0x140/0x710
[  729.885632][T15557]  __alloc_skb+0x140/0x710
[  729.885648][T15557]  ? __alloc_skb+0x5b7/0x710
[  729.885664][T15557]  ? __pfx___alloc_skb+0x10/0x10
[  729.885688][T15557]  netlink_alloc_large_skb+0x69/0x150
[  729.885707][T15557]  netlink_sendmsg+0x680/0xda0
[  729.885726][T15557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  729.885744][T15557]  ? selinux_socket_sendmsg+0x198/0x2f0
[  729.885770][T15557]  ____sys_sendmsg+0xa4d/0xbe0
[  729.885792][T15557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  729.885809][T15557]  ? __pfx_____sys_sendmsg+0x10/0x10
[  729.885841][T15557]  ___sys_sendmsg+0x190/0x1e0
[  729.885858][T15557]  ? __pfx____sys_sendmsg+0x10/0x10
[  729.885871][T15557]  ? __lock_acquire+0x49f/0x1a40
[  729.885890][T15557]  ? get_pid_task+0x106/0x250
[  729.885929][T15557]  __sys_sendmsg+0x160/0x210
[  729.885949][T15557]  ? __pfx___sys_sendmsg+0x10/0x10
[  729.885980][T15557]  do_syscall_64+0x115/0x870
[  729.885998][T15557]  ? clear_bhb_loop+0x40/0x90
[  729.886016][T15557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.886032][T15557] RIP: 0033:0x7f532bb9e019
[  729.886046][T15557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.886060][T15557] RSP: 002b:00007f532caa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  729.886085][T15557] RAX: ffffffffffffffda RBX: 00007f532be25fa0 RCX: 00007f532bb9e019
[  729.886095][T15557] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  729.886104][T15557] RBP: 00007f532caa5090 R08: 0000000000000000 R09: 0000000000000000
[  729.886113][T15557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  729.886121][T15557] R13: 00007f532be26038 R14: 00007f532be25fa0 R15: 00007fff8b7b2b38
[  729.886142][T15557]  </TASK>
[  730.426820][T15560] veth0: entered promiscuous mode
[  730.582415][   T30] audit: type=1400 audit(1785592618.639:848): avc:  denied  { map } for  pid=15561 comm="syz.4.2733" path="socket:[47936]" dev="sockfs" ino=47936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  730.879665][T15559] veth0: left promiscuous mode
[  731.468504][T15578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2735'.
[  732.523715][T15589] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  732.562509][T15574] netlink: 'syz.3.2737': attribute type 1 has an invalid length.
[  733.340171][   T30] audit: type=1400 audit(1785592621.399:849): avc:  denied  { write } for  pid=15572 comm="syz.3.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  733.671935][T15595] syzkaller0: entered promiscuous mode
[  733.763572][T15595] syzkaller0: entered allmulticast mode
[  733.994413][   T30] audit: type=1400 audit(1785592622.049:850): avc:  denied  { watch } for  pid=15607 comm="syz.2.2746" path="/549/bus" dev="tmpfs" ino=3069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  734.084003][   T30] audit: type=1400 audit(1785592622.049:851): avc:  denied  { watch_sb watch_reads } for  pid=15607 comm="syz.2.2746" path="/549/bus" dev="tmpfs" ino=3069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  734.499591][   T30] audit: type=1800 audit(1785592622.559:852): pid=15614 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2748" name="file0" dev="overlay" ino=3127 res=0 errno=0
[  735.593188][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2758'.
[  735.715702][    T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  735.850268][ T5726] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  736.180843][ T5726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  736.247244][ T5726] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  736.313362][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  736.390803][ T5726] as10x_usb: device has been detected
[  736.422826][ T5726] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  736.516476][ T5726] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  736.545691][    T9] usb 5-1: Using ep0 maxpacket: 16
[  736.680071][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  736.698376][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  737.264411][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  737.303919][    T9] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  737.318912][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.505667][    T9] usb 5-1: Product: syz
[  737.513949][    T9] usb 5-1: Manufacturer: syz
[  737.528867][    T9] usb 5-1: SerialNumber: syz
[  737.538704][ T5726] as10x_usb: error during firmware upload part1
[  739.518848][T15662] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  739.586198][T15665] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  739.977955][ T5726] Registered device Abilis Systems DVB-Titan
[  740.032272][    T9] usb 5-1: can't set config #1, error -71
[  740.061563][ T5800] usb 2-1: USB disconnect, device number 49
[  740.069692][    T9] usb 5-1: USB disconnect, device number 40
[  740.128562][ T5800] Unregistered device Abilis Systems DVB-Titan
[  740.139715][ T5800] as10x_usb: device has been disconnected
[  740.352368][   T30] audit: type=1400 audit(1785592628.409:853): avc:  denied  { mount } for  pid=15672 comm="syz.5.2763" name="/" dev="autofs" ino=48109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  740.445688][   T30] audit: type=1400 audit(1785592628.499:854): avc:  denied  { mounton } for  pid=15672 comm="syz.5.2763" path="/319/file1/trace" dev="autofs" ino=48116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  740.670137][   T30] audit: type=1400 audit(1785592628.729:855): avc:  denied  { unmount } for  pid=9392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  742.444915][   T30] audit: type=1400 audit(1785592630.119:856): avc:  denied  { name_bind } for  pid=15687 comm="syz.4.2772" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  743.730911][T15711] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  746.618431][T15731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2782'.
[  746.967572][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  746.974092][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  747.064668][   T30] audit: type=1400 audit(1785592634.659:857): avc:  denied  { write } for  pid=15727 comm="syz.3.2782" name="mcfilter6" dev="proc" ino=4026533218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  747.193984][ T5613] Bluetooth: hci0: unexpected event for opcode 0x0c2d
[  747.731207][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2785'.
[  747.852409][T15736] dummy0: entered allmulticast mode
[  747.971548][T15736] dummy0: left allmulticast mode
[  748.141692][T15750] syzkaller0: entered promiscuous mode
[  748.152638][T15750] syzkaller0: entered allmulticast mode
[  748.165819][T14424] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  748.204756][T15752] FAULT_INJECTION: forcing a failure.
[  748.204756][T15752] name failslab, interval 1, probability 0, space 0, times 0
[  748.217945][T15752] CPU: 1 UID: 0 PID: 15752 Comm: syz.3.2788 Not tainted syzkaller #0 PREEMPT(full) 
[  748.217972][T15752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  748.217981][T15752] Call Trace:
[  748.217988][T15752]  <TASK>
[  748.217995][T15752]  dump_stack_lvl+0x100/0x190
[  748.218022][T15752]  should_fail_ex.cold+0x5/0xa
[  748.218043][T15752]  should_failslab+0xc2/0x120
[  748.218065][T15752]  __kmalloc_noprof+0xfc/0x820
[  748.218085][T15752]  ? tomoyo_encode2+0xfb/0x3c0
[  748.218106][T15752]  tomoyo_encode2+0xfb/0x3c0
[  748.218126][T15752]  tomoyo_encode+0x29/0x50
[  748.218141][T15752]  tomoyo_realpath_from_path+0x18c/0x690
[  748.218165][T15752]  tomoyo_path_number_perm+0x23c/0x580
[  748.218189][T15752]  ? tomoyo_path_number_perm+0x22e/0x580
[  748.218216][T15752]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  748.218266][T15752]  ? find_held_lock+0x2b/0x80
[  748.218281][T15752]  ? __fget_files+0x215/0x3d0
[  748.218299][T15752]  ? hook_file_ioctl_common+0x140/0x440
[  748.218319][T15752]  ? __fget_files+0x215/0x3d0
[  748.218340][T15752]  ? __fget_files+0x21f/0x3d0
[  748.218362][T15752]  security_file_ioctl+0xd3/0x230
[  748.218390][T15752]  __x64_sys_ioctl+0xb7/0x210
[  748.218416][T15752]  do_syscall_64+0x115/0x870
[  748.218438][T15752]  ? clear_bhb_loop+0x40/0x90
[  748.218460][T15752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.218478][T15752] RIP: 0033:0x7ff943b9e019
[  748.218493][T15752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  748.218510][T15752] RSP: 002b:00007ff944a69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  748.218528][T15752] RAX: ffffffffffffffda RBX: 00007ff943e25fa0 RCX: 00007ff943b9e019
[  748.218540][T15752] RDX: 0000200000001680 RSI: 0000000000005459 RDI: 0000000000000003
[  748.218551][T15752] RBP: 00007ff944a69090 R08: 0000000000000000 R09: 0000000000000000
[  748.218561][T15752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  748.218572][T15752] R13: 00007ff943e26038 R14: 00007ff943e25fa0 R15: 00007ffc95c2e728
[  748.218597][T15752]  </TASK>
[  748.218612][T15752] ERROR: Out of memory at tomoyo_realpath_from_path.
[  748.334737][T15754] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  748.417314][T14424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  748.485984][T14424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  748.508985][T14424] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  748.520327][T14424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.539296][T14424] usb 3-1: config 0 descriptor??
[  748.706842][   T30] audit: type=1400 audit(1785592636.769:858): avc:  denied  { read } for  pid=15759 comm="syz.3.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  748.750798][   T30] audit: type=1400 audit(1785592636.799:859): avc:  denied  { accept } for  pid=15759 comm="syz.3.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  748.980464][T14424] hid_parser_main: 1 callbacks suppressed
[  748.980478][T14424] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  748.999660][T14424] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  749.014407][T14424] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  749.024596][T14424] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  749.031724][T14424] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  749.039617][T14424] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  749.047352][T14424] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  749.074258][T14424] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  749.277303][T14424] cp2112 0003:10C4:EA90.000F: Part Number: 0x00 Device Version: 0x00
[  750.076868][T14424] cp2112 0003:10C4:EA90.000F: error reading lock byte: -71
[  750.131349][T14424] usb 3-1: USB disconnect, device number 38
[  750.191953][T15779] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2795'.
[  750.217889][   T30] audit: type=1400 audit(1785592638.269:860): avc:  denied  { set_context_mgr } for  pid=15778 comm="syz.4.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  750.358686][   T30] audit: type=1400 audit(1785592638.419:861): avc:  denied  { ioctl } for  pid=15780 comm="syz.1.2796" path="socket:[49481]" dev="sockfs" ino=49481 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  750.865714][   T30] audit: type=1400 audit(1785592638.419:862): avc:  denied  { write } for  pid=15780 comm="syz.1.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  750.888100][   T30] audit: type=1400 audit(1785592638.449:863): avc:  denied  { connect } for  pid=15784 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  750.909777][   T30] audit: type=1400 audit(1785592638.449:864): avc:  denied  { setopt } for  pid=15784 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  751.019875][   T30] audit: type=1400 audit(1785592638.449:865): avc:  denied  { bind } for  pid=15784 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  751.065728][   T30] audit: type=1400 audit(1785592638.449:866): avc:  denied  { read } for  pid=15784 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  751.204634][T15797] syzkaller0: entered promiscuous mode
[  751.215808][T15797] syzkaller0: entered allmulticast mode
[  752.405699][ T5614] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  752.440496][T15817] syzkaller0: entered promiscuous mode
[  752.460032][T15817] syzkaller0: entered allmulticast mode
[  752.586517][ T5614] usb 2-1: Using ep0 maxpacket: 8
[  752.601892][ T5614] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  752.613631][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.625574][ T5614] usb 2-1: Product: syz
[  752.630661][ T5614] usb 2-1: Manufacturer: syz
[  752.636556][ T5614] usb 2-1: SerialNumber: syz
[  752.647845][ T5614] usb 2-1: config 0 descriptor??
[  752.666074][ T5614] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  752.760637][T15821] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2807'.
[  753.718253][ T5614] gspca_sonixj: reg_w1 err -71
[  753.765781][ T5614] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  753.779517][ T5614] usb 2-1: USB disconnect, device number 50
[  754.127387][T15840] sctp_transport_update_pmtu: 47 callbacks suppressed
[  754.127436][T15840] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  754.145983][T15840] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  754.158848][T15840] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  754.171481][T15840] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  754.224798][T15840] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  754.238237][T15840] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  754.250614][T15840] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  754.263315][T15840] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  754.275789][T15840] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  754.288023][T15840] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  754.935099][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2812'.
[  755.545163][T15863] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2819'.
[  755.633943][ T5881] Bluetooth: hci5: Frame reassembly failed (-84)
[  756.247813][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  756.260083][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  756.270910][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  756.284214][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  756.295543][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  756.840518][   T30] audit: type=1400 audit(1785592644.819:867): avc:  denied  { append } for  pid=15881 comm="syz.2.2822" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  757.685747][T13433] Bluetooth: hci5: command 0x1003 tx timeout
[  757.691788][ T5881] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  757.762516][ T5613] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  757.964516][ T5881] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.211237][ T5881] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.320658][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2828'.
[  758.335697][ T5613] Bluetooth: hci6: command tx timeout
[  759.582141][T15919] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2830'.
[  759.704726][ T5881] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.405858][ T5613] Bluetooth: hci6: command tx timeout
[  760.916007][   T30] audit: type=1400 audit(1785592648.969:868): avc:  denied  { write } for  pid=15934 comm="syz.2.2835" name="cgroup.subtree_control" dev="cgroup2" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  761.182965][   T30] audit: type=1400 audit(1785592649.009:869): avc:  denied  { open } for  pid=15934 comm="syz.2.2835" path="<too_long>" dev="cgroup2" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  761.332542][T15946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15186 sclass=netlink_route_socket pid=15946 comm=syz.2.2835
[  761.807859][T15874] bridge0: port 1(bridge_slave_0) entered blocking state
[  761.821860][T15874] bridge0: port 1(bridge_slave_0) entered disabled state
[  761.829298][T15874] bridge_slave_0: entered allmulticast mode
[  761.838208][T15874] bridge_slave_0: entered promiscuous mode
[  761.850588][T15874] bridge0: port 2(bridge_slave_1) entered blocking state
[  761.857967][T15874] bridge0: port 2(bridge_slave_1) entered disabled state
[  761.866213][T15874] bridge_slave_1: entered allmulticast mode
[  762.033553][T15874] bridge_slave_1: entered promiscuous mode
[  762.614759][ T5613] Bluetooth: hci6: command tx timeout
[  762.864060][ T5881] bridge_slave_1: left allmulticast mode
[  762.914843][ T5881] bridge_slave_1: left promiscuous mode
[  762.973444][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[  762.985029][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2841'.
[  763.004073][ T5881] bridge_slave_0: left allmulticast mode
[  763.012382][ T5881] bridge_slave_0: left promiscuous mode
[  763.020678][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.103840][   T30] audit: type=1400 audit(1785592651.159:870): avc:  denied  { sys_module } for  pid=15968 comm="syz.2.2841" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  763.315731][ T5614] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  763.324678][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  763.343638][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  763.354528][ T5881] bond0 (unregistering): Released all slaves
[  763.366361][ T5881] bond1 (unregistering): Released all slaves
[  763.372413][   T30] audit: type=1400 audit(1785592651.429:871): avc:  denied  { write } for  pid=15972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  763.408221][ T5881] bond2 (unregistering): Released all slaves
[  763.426582][ T5881] bond3 (unregistering): Released all slaves
[  763.443717][   T30] audit: type=1400 audit(1785592651.499:872): avc:  denied  { write } for  pid=15990 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  763.472529][ T5881] bond4 (unregistering): Released all slaves
[  763.480672][ T5614] usb 2-1: config 0 has no interfaces?
[  763.487729][ T5881] bond5 (unregistering): Released all slaves
[  763.495837][ T5614] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  763.502507][ T5881] bond6 (unregistering): Released all slaves
[  763.516687][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.532066][ T5614] usb 2-1: Product: syz
[  763.548333][ T5614] usb 2-1: Manufacturer: syz
[  763.556517][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5
[  763.577712][ T5614] usb 2-1: SerialNumber: syz
[  763.619050][ T5614] usb 2-1: config 0 descriptor??
[  763.644676][T15874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  763.675474][T15993] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2844'.
[  763.698937][ T5881] tipc: Left network mode
[  763.792227][T15874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  763.845186][T15874] team0: Port device team_slave_0 added
[  763.860902][T15874] team0: Port device team_slave_1 added
[  763.941706][T15874] batman_adv: batadv0: Adding interface: batadv_slave_0
[  763.963542][T15874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  764.063279][T15874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  764.105798][T15874] batman_adv: batadv0: Adding interface: batadv_slave_1
[  764.116804][T15874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  764.144274][T15874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  764.186992][T16004] syzkaller0: entered promiscuous mode
[  764.192736][T16004] syzkaller0: entered allmulticast mode
[  764.291818][    T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  764.309770][T15874] hsr_slave_0: entered promiscuous mode
[  764.318353][T15874] hsr_slave_1: entered promiscuous mode
[  764.324797][T15874] debugfs: 'hsr0' already exists in 'hsr'
[  764.331829][T15874] Cannot create hsr debugfs directory
[  764.332790][   T30] audit: type=1400 audit(1785592652.389:873): avc:  denied  { write } for  pid=16001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  764.378800][ T5881] hsr_slave_0: left promiscuous mode
[  764.390221][ T5881] hsr_slave_1: left promiscuous mode
[  764.399652][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  764.408972][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0
[  764.421102][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  764.432301][    T9] usb 3-1: device descriptor read/64, error -71
[  764.439103][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1
[  764.451006][   T30] audit: type=1400 audit(1785592652.509:874): avc:  denied  { write } for  pid=16015 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  764.479491][ T5881] veth1_macvtap: left promiscuous mode
[  764.485166][ T5881] veth0_macvtap: left promiscuous mode
[  764.491050][ T5881] veth1_vlan: left promiscuous mode
[  764.502520][ T5881] veth0_vlan: left promiscuous mode
[  764.601781][ T5614] usb 2-1: USB disconnect, device number 51
[  764.646519][ T5613] Bluetooth: hci6: command tx timeout
[  764.715751][    T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  764.865931][  T804] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  764.878487][    T9] usb 3-1: device descriptor read/64, error -71
[  765.068712][    T9] usb usb3-port1: attempt power cycle
[  765.487797][   T30] audit: type=1400 audit(1785592653.549:875): avc:  denied  { connect } for  pid=16029 comm="syz.1.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  765.507676][   T30] audit: type=1400 audit(1785592653.549:876): avc:  denied  { listen } for  pid=16029 comm="syz.1.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  765.636252][    T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  765.656210][    T9] usb 3-1: device descriptor read/8, error -71
[  766.787051][    T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  767.540458][T16036] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  767.565739][   T30] audit: type=1800 audit(1785592654.889:877): pid=16038 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2852" name="file0" dev="overlay" ino=3296 res=0 errno=0
[  767.605430][    T9] usb 3-1: device descriptor read/8, error -71
[  767.755990][    T9] usb usb3-port1: unable to enumerate USB device
[  767.789352][T16047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'.
[  767.837803][ T5881] team0 (unregistering): Port device team_slave_1 removed
[  767.851540][ T5881] team0 (unregistering): Port device team_slave_0 removed
[  767.971323][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6
[  768.190576][T16056] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2858'.
[  768.946826][T16072] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  770.027866][T15874] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  770.798956][T15874] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  770.849275][T15874] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  771.517553][T16100] sctp_transport_update_pmtu: 104 callbacks suppressed
[  771.517620][T16100] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  771.538409][T16100] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  771.549915][T16100] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  771.562226][T16100] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  771.580321][T16100] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  771.593591][T16100] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  771.607328][T16100] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  771.620358][T16100] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  771.632460][T16100] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  771.646357][T16100] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  771.962980][   T30] audit: type=1400 audit(1785592660.009:878): avc:  denied  { write } for  pid=16069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  772.383972][T15874] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  772.392575][T15874] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  772.517014][   T30] audit: type=1400 audit(1785592660.579:879): avc:  denied  { write } for  pid=16112 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  773.061459][T15874] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  773.184273][T16117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  773.209336][T15874] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  773.240588][T15874] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  773.341817][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7
[  773.354984][T16108] tipc: Resetting bearer <eth:syzkaller0>
[  773.427842][T16101] tipc: Disabling bearer <eth:syzkaller0>
[  773.495458][T16137] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2869'.
[  773.667338][T15874] 8021q: adding VLAN 0 to HW filter on device bond0
[  773.690454][T15874] 8021q: adding VLAN 0 to HW filter on device team0
[  773.702714][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  773.709929][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  773.873249][T16149] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  774.284100][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.292092][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  775.219332][ T5800] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  775.227054][   T30] audit: type=1400 audit(1785592663.249:880): avc:  denied  { write } for  pid=16141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  775.341950][   T30] audit: type=1400 audit(1785592663.399:881): avc:  denied  { write } for  pid=16174 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  775.422385][ T5800] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  775.564817][   T13] xs_tcp_setup_socket: connect returned unhandled error -13
[  775.587277][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.593845][   T13] xs_tcp_setup_socket: connect returned unhandled error -13
[  775.610861][ T5881] xs_tcp_setup_socket: connect returned unhandled error -13
[  775.653805][ T5800] usb 3-1: USB2VGA dongle found at address 43
[  775.671744][ T5881] xs_tcp_setup_socket: connect returned unhandled error -13
[  775.697504][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8
[  775.730644][ T5881] xs_tcp_setup_socket: connect returned unhandled error -13
[  775.746169][ T5800] usb 3-1: Allocated 8 output buffers
[  775.760522][ T5882] xs_tcp_setup_socket: connect returned unhandled error -13
[  775.808901][ T5882] xs_tcp_setup_socket: connect returned unhandled error -13
[  775.865310][ T5882] xs_tcp_setup_socket: connect returned unhandled error -13
[  775.942933][ T5882] xs_tcp_setup_socket: connect returned unhandled error -13
[  775.996274][ T5881] xs_tcp_setup_socket: connect returned unhandled error -13
[  776.032997][T15874] 8021q: adding VLAN 0 to HW filter on device batadv0
[  776.060641][ T5882] xs_tcp_setup_socket: connect returned unhandled error -13
[  776.077546][ T5882] xs_tcp_setup_socket: connect returned unhandled error -13
[  776.143594][ T5882] xs_tcp_setup_socket: connect returned unhandled error -13
[  776.171871][ T5882] xs_tcp_setup_socket: connect returned unhandled error -13
[  776.198603][ T5882] xs_tcp_setup_socket: connect returned unhandled error -13
[  776.224124][ T5882] xs_tcp_setup_socket: connect returned unhandled error -13
[  776.251865][  T735] xs_tcp_setup_socket: connect returned unhandled error -13
[  776.807726][ T5613] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  776.957491][T15874] veth0_vlan: entered promiscuous mode
[  776.998086][T15874] veth1_vlan: entered promiscuous mode
[  777.225576][T16212] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  777.247013][T16211] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  777.522227][T15874] veth0_macvtap: entered promiscuous mode
[  777.549058][T15874] veth1_macvtap: entered promiscuous mode
[  777.619638][T15874] batman_adv: batadv0: Interface activated: batadv_slave_0
[  777.781169][T15874] batman_adv: batadv0: Interface activated: batadv_slave_1
[  777.886144][T16220] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  779.233783][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  779.280125][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  779.315755][ T1322] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  779.325485][ T1322] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  779.349774][ T5800] usb 3-1: Failed to early initialize device
[  779.361182][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  779.369519][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  779.469461][ T5800] usb 3-1: USB disconnect, device number 43
[  779.536421][ T5614] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  779.587567][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  779.629487][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  779.796590][ T5614] usb 2-1: Using ep0 maxpacket: 8
[  779.872402][T16236] overlayfs: failed to resolve './file0': -2
[  779.961245][T16237] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  781.228304][ T5614] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  781.237939][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.246433][ T5614] usb 2-1: Product: syz
[  781.252431][ T5614] usb 2-1: Manufacturer: syz
[  781.262220][ T5614] usb 2-1: SerialNumber: syz
[  781.276465][ T5614] usb 2-1: config 0 descriptor??
[  781.297592][ T5614] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  782.549818][T16258] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  782.813433][ T5614] gspca_sonixj: reg_w1 err -71
[  782.878393][ T5614] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  782.931878][ T5614] usb 2-1: USB disconnect, device number 52
[  783.119761][T16265] syzkaller0: entered promiscuous mode
[  783.139344][T16265] syzkaller0: entered allmulticast mode
[  783.167570][T16265] tipc: Started in network mode
[  783.182121][T16265] tipc: Node identity 520b5c140de2, cluster identity 4711
[  783.240045][T16265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  783.289583][T16265] tipc: Resetting bearer <eth:syzkaller0>
[  783.326980][T16271] sctp: [Deprecated]: syz.3.2888 (pid 16271) Use of int in maxseg socket option.
[  783.326980][T16271] Use struct sctp_assoc_value instead
[  783.374543][T16264] tipc: Resetting bearer <eth:syzkaller0>
[  784.192036][T16264] tipc: Disabling bearer <eth:syzkaller0>
[  784.740666][   T30] audit: type=1400 audit(1785592672.779:882): avc:  denied  { write } for  pid=16286 comm="syz.6.2895" lport=55149 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  784.822152][   T30] audit: type=1400 audit(1785592672.789:883): avc:  denied  { setopt } for  pid=16286 comm="syz.6.2895" lport=55149 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  786.027791][T16300] dummy0: entered allmulticast mode
[  786.034822][T16300] dummy0: left allmulticast mode
[  786.136251][ T5613] Bluetooth: hci3: unexpected event for opcode 0x0c2d
[  786.252395][T16302] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  787.075701][T16309] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  787.403325][   T30] audit: type=1400 audit(1785592675.449:884): avc:  denied  { map } for  pid=16294 comm="syz.4.2897" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  787.536321][T16316] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  787.893363][   T30] audit: type=1400 audit(1785592675.949:885): avc:  denied  { write } for  pid=16301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  788.174813][T16328] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  788.656997][   T30] audit: type=1400 audit(1785592676.709:886): avc:  denied  { write } for  pid=16329 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  789.185792][    T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  789.284784][T16345] mac80211_hwsim hwsim15 
5
ÿ: renamed from wlan0 (while UP)
[  789.349889][    T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  789.391992][    T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  789.428783][    T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  789.456301][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.481706][T16334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  789.532865][   T30] audit: type=1400 audit(1785592677.589:887): avc:  denied  { write } for  pid=16338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  789.566476][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  789.653137][T16358] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  789.988003][   T30] audit: type=1400 audit(1785592678.039:888): avc:  denied  { remount } for  pid=16350 comm="syz.1.2909" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  790.389562][   T30] audit: type=1400 audit(1785592678.439:889): avc:  denied  { write } for  pid=16362 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  790.483163][   T30] audit: type=1400 audit(1785592678.539:890): avc:  denied  { ioctl } for  pid=16363 comm="syz.3.2911" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  790.570936][    T9] usb 3-1: USB disconnect, device number 44
[  790.687769][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'.
[  790.832631][T16374] dummy0: entered allmulticast mode
[  790.839893][T16374] dummy0: left allmulticast mode
[  790.936247][ T5613] Bluetooth: hci1: unexpected event for opcode 0x0c2d
[  790.945502][T16377] netlink: 'syz.3.2914': attribute type 1 has an invalid length.
[  791.131286][   T30] audit: type=1400 audit(1785592679.129:891): avc:  denied  { ioctl } for  pid=16372 comm="syz.3.2914" path="socket:[52367]" dev="sockfs" ino=52367 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  791.691533][T16377] 8021q: adding VLAN 0 to HW filter on device bond14
[  791.799415][T16382] 8021q: adding VLAN 0 to HW filter on device bond14
[  791.814125][T16382] bond14: (slave vti0): The slave device specified does not support setting the MAC address
[  791.832323][T16382] bond14: (slave vti0): Error -95 calling set_mac_address
[  791.959873][T16386] gretap1: entered promiscuous mode
[  791.988900][T16386] bond14: (slave gretap1): making interface the new active one
[  792.057134][T16399] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  792.299165][T16386] bond14: (slave gretap1): Enslaving as an active interface with an up link
[  792.337606][   T30] audit: type=1400 audit(1785592680.389:892): avc:  denied  { write } for  pid=16367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  792.433220][T16373] macvlan2: entered promiscuous mode
[  792.479725][T16373] macvlan2: entered allmulticast mode
[  792.500999][   T30] audit: type=1400 audit(1785592680.549:893): avc:  denied  { write } for  pid=16402 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  792.524423][T16373] bond14: entered promiscuous mode
[  792.533065][T16373] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  792.546034][T16373] bond14: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  792.560183][T16373] bond14: left promiscuous mode
[  792.724492][   T30] audit: type=1400 audit(1785592680.779:894): avc:  denied  { connect } for  pid=16407 comm="syz.2.2918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  792.995841][ T5614] usb 3-1: new full-speed USB device number 45 using dummy_hcd
[  793.160764][ T5614] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83
[  793.183749][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.215192][ T5614] usb 3-1: Product: syz
[  793.233910][ T5614] usb 3-1: Manufacturer: syz
[  793.257380][ T5614] usb 3-1: SerialNumber: syz
[  793.317555][ T5614] usb 3-1: config 0 descriptor??
[  793.356787][ T5614] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  793.495308][   T30] audit: type=1400 audit(1785592681.549:895): avc:  denied  { write } for  pid=16414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  793.572530][T16436] netlink: 'syz.3.2923': attribute type 1 has an invalid length.
[  793.709383][   T30] audit: type=1400 audit(1785592681.769:896): avc:  denied  { write } for  pid=16438 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  793.778172][ T5614] gspca_m5602: Failed to find a sensor
[  793.794462][ T5614] ALi m5602 3-1:0.0: ALi m5602 webcam failed
[  793.873678][ T5614] usb 3-1: USB disconnect, device number 45
[  794.183118][T16446] netlink: 'syz.1.2924': attribute type 10 has an invalid length.
[  794.233956][T16446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2924'.
[  794.383548][T16446] dummy0: entered promiscuous mode
[  794.893364][T16448] sctp_transport_update_pmtu: 46 callbacks suppressed
[  794.893390][T16448] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  794.912570][T16448] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  794.924057][T16448] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  794.935535][T16448] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  794.950999][T16448] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  794.962772][T16448] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  794.975092][T16448] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  794.986482][T16448] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  794.999736][T16448] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  795.011482][T16448] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  795.280195][T16451] dummy0: entered allmulticast mode
[  795.351863][T16455] dummy0: left allmulticast mode
[  795.417683][ T5613] Bluetooth: hci0: unexpected event for opcode 0x0c2d
[  796.183089][T13433] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  796.203964][T13433] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  796.216201][T13433] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  796.231681][T13433] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  796.240896][T13433] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  796.250603][   T30] audit: type=1400 audit(1785592684.299:897): avc:  denied  { setopt } for  pid=16456 comm="syz.2.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  796.386603][T16473] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2932'.
[  796.632316][ T5610] bridge0: port 4(syz_tun) entered disabled state
[  796.857747][ T5610] syz_tun (unregistering): left allmulticast mode
[  796.890144][ T5610] syz_tun (unregistering): left promiscuous mode
[  796.909985][ T5610] bridge0: port 4(syz_tun) entered disabled state
[  797.396354][  T140] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  797.841037][  T140] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.099764][  T140] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.301882][  T140] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.326452][T13433] Bluetooth: hci2: command tx timeout
[  798.560443][T13433] Bluetooth: hci3: unexpected event for opcode 0x0c2d
[  799.325236][T16511] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  799.445131][T16508] dummy0: entered allmulticast mode
[  799.496016][T16508] dummy0: left allmulticast mode
[  799.521503][T16514] netlink: 'syz.1.2943': attribute type 3 has an invalid length.
[  799.849619][T16522] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  800.653874][T13433] Bluetooth: hci2: command tx timeout
[  801.080171][  T735] Bluetooth: hci4: Frame reassembly failed (-84)
[  801.182051][ T5613] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  801.432377][T16539] netlink: 'syz.3.2948': attribute type 1 has an invalid length.
[  801.838565][T16539] 8021q: adding VLAN 0 to HW filter on device bond15
[  802.726811][ T5613] Bluetooth: hci2: command tx timeout
[  802.817730][T16555] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  803.125909][ T5613] Bluetooth: hci4: command 0x1003 tx timeout
[  803.126791][T13433] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  803.194495][T16544] bond15: (slave veth0_to_bond): making interface the new active one
[  803.493211][T16544] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  804.056466][T16566] sctp_transport_update_pmtu: 47 callbacks suppressed
[  804.056481][T16566] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  804.299625][T16566] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  804.331277][T16566] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  804.384212][T16566] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  804.513186][T16566] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  804.594886][T16566] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  804.696934][T16566] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  804.917771][T13433] Bluetooth: hci2: command tx timeout
[  804.951001][T16566] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  805.225820][T16566] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  805.467654][T16566] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  805.584138][T16546] bond15: entered promiscuous mode
[  805.589615][T16546] veth0_to_bond: entered promiscuous mode
[  805.597919][T16546] bond15: entered allmulticast mode
[  805.621838][T16546] veth0_to_bond: entered allmulticast mode
[  805.732354][T16548] macvlan2: entered promiscuous mode
[  805.760936][T16548] macvlan2: entered allmulticast mode
[  805.808753][T16548] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  805.856264][T16548] bond15: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  806.003507][  T140] bond12: left allmulticast mode
[  806.008792][  T140] bond12: left promiscuous mode
[  806.017172][  T140] bridge0: port 5(bond12) entered disabled state
[  806.334623][  T140] bond8: left allmulticast mode
[  806.371880][  T140] bond8: left promiscuous mode
[  806.419961][T13433] Bluetooth: hci0: unexpected event for opcode 0x0c2d
[  806.443158][  T140] bridge0: port 3(bond8) entered disabled state
[  807.021057][  T140] bridge_slave_1: left allmulticast mode
[  807.099491][  T140] bridge_slave_1: left promiscuous mode
[  807.159673][  T140] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.320694][  T140] bridge_slave_0: left allmulticast mode
[  807.346430][  T140] bridge_slave_0: left promiscuous mode
[  807.377768][  T140] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.560988][T16584] FAULT_INJECTION: forcing a failure.
[  807.560988][T16584] name failslab, interval 1, probability 0, space 0, times 0
[  807.585797][T16584] CPU: 1 UID: 0 PID: 16584 Comm: syz.2.2958 Not tainted syzkaller #0 PREEMPT(full) 
[  807.585815][T16584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  807.585821][T16584] Call Trace:
[  807.585825][T16584]  <TASK>
[  807.585831][T16584]  dump_stack_lvl+0x100/0x190
[  807.585850][T16584]  should_fail_ex.cold+0x5/0xa
[  807.585862][T16584]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  807.585881][T16584]  should_failslab+0xc2/0x120
[  807.585897][T16584]  kmem_cache_alloc_noprof+0x91/0x6a0
[  807.585911][T16584]  ? skb_clone+0x190/0x400
[  807.585927][T16584]  skb_clone+0x190/0x400
[  807.585941][T16584]  netlink_deliver_tap+0xaed/0xcc0
[  807.585962][T16584]  netlink_unicast+0x62b/0x850
[  807.585976][T16584]  ? __pfx_netlink_unicast+0x10/0x10
[  807.585991][T16584]  netlink_sendmsg+0x8b0/0xda0
[  807.586004][T16584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  807.586022][T16584]  ? selinux_socket_sendmsg+0x198/0x2f0
[  807.586040][T16584]  ____sys_sendmsg+0xa4d/0xbe0
[  807.586058][T16584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  807.586070][T16584]  ? __pfx_____sys_sendmsg+0x10/0x10
[  807.586092][T16584]  ___sys_sendmsg+0x190/0x1e0
[  807.586104][T16584]  ? __pfx____sys_sendmsg+0x10/0x10
[  807.586113][T16584]  ? __lock_acquire+0x49f/0x1a40
[  807.586127][T16584]  ? get_pid_task+0x106/0x250
[  807.586151][T16584]  __sys_sendmsg+0x160/0x210
[  807.586166][T16584]  ? __pfx___sys_sendmsg+0x10/0x10
[  807.586186][T16584]  do_syscall_64+0x115/0x870
[  807.586200][T16584]  ? clear_bhb_loop+0x40/0x90
[  807.586213][T16584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.586224][T16584] RIP: 0033:0x7f7c4259e019
[  807.586233][T16584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  807.586243][T16584] RSP: 002b:00007f7c43390028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  807.586254][T16584] RAX: ffffffffffffffda RBX: 00007f7c42826180 RCX: 00007f7c4259e019
[  807.586261][T16584] RDX: 0000000000000804 RSI: 00002000000003c0 RDI: 0000000000000004
[  807.586267][T16584] RBP: 00007f7c43390090 R08: 0000000000000000 R09: 0000000000000000
[  807.586273][T16584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  807.586279][T16584] R13: 00007f7c42826218 R14: 00007f7c42826180 R15: 00007ffe4bd74f58
[  807.586292][T16584]  </TASK>
[  807.926935][T16587] fuse: Bad value for 'fd'
[  808.012749][  T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  808.024366][  T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  808.043182][  T140] bond0 (unregistering): Released all slaves
[  808.052298][  T140] bond1 (unregistering): Released all slaves
[  808.064017][  T140] bond2 (unregistering): Released all slaves
[  808.089986][  T140] bond3 (unregistering): Released all slaves
[  808.102439][  T140] bond4 (unregistering): Released all slaves
[  808.118492][  T140] bond5 (unregistering): Released all slaves
[  808.131466][  T140] bond6 (unregistering): Released all slaves
[  808.142826][  T140] bond7 (unregistering): Released all slaves
[  808.154424][  T140] bond8 (unregistering): Released all slaves
[  808.169098][  T140] bond9 (unregistering): Released all slaves
[  808.191057][  T140] bond10 (unregistering): Released all slaves
[  808.203848][  T140] bond11 (unregistering): Released all slaves
[  808.215467][  T140] bond12 (unregistering): Released all slaves
[  808.227358][  T140] bond13 (unregistering): Released all slaves
[  808.303881][T16573] dummy0: entered allmulticast mode
[  808.420865][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  808.427612][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  808.522085][T16592] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  808.759013][T16573] dummy0: left allmulticast mode
[  808.766793][  T140] tipc: Left network mode
[  808.894072][T16467] bridge0: port 1(bridge_slave_0) entered blocking state
[  808.943473][T16467] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.012681][T16600] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  809.243949][T16467] bridge_slave_0: entered allmulticast mode
[  809.262574][T16467] bridge_slave_0: entered promiscuous mode
[  809.271812][T16467] bridge0: port 2(bridge_slave_1) entered blocking state
[  809.279801][T16467] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.303425][T16467] bridge_slave_1: entered allmulticast mode
[  809.363153][T16467] bridge_slave_1: entered promiscuous mode
[  809.562451][T16609] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  809.835492][T16610] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  810.258472][T16467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  810.284530][   T30] audit: type=1400 audit(1785592698.329:898): avc:  denied  { setopt } for  pid=16613 comm="syz.1.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  810.290955][T16467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  810.404351][T16616] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  810.436420][  T804] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  810.595894][T15525] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  810.655555][  T804] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  810.681241][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2969'.
[  810.695749][  T804] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  811.175397][  T804] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  811.474940][T15525] usb 2-1: Using ep0 maxpacket: 32
[  811.481576][  T804] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  811.492882][T15525] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  811.502159][T15525] usb 2-1: config 0 has no interface number 0
[  811.509040][  T804] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  811.557522][T16467] team0: Port device team_slave_0 added
[  811.582833][T15525] usb 2-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6
[  811.593659][T15525] usb 2-1: config 0 interface 89 has no altsetting 0
[  811.598987][   T30] audit: type=1400 audit(1785592699.589:899): avc:  denied  { write } for  pid=16601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  811.601916][  T804] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00
[  811.668023][T16467] team0: Port device team_slave_1 added
[  811.673812][T15525] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  811.710535][T15525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.719066][  T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.728412][T15525] usb 2-1: Product: syz
[  811.732681][  T804] usb 4-1: Product: syz
[  811.743693][T15525] usb 2-1: Manufacturer: syz
[  811.750273][  T804] usb 4-1: Manufacturer: syz
[  811.761629][T15525] usb 2-1: SerialNumber: syz
[  811.768945][  T804] usb 4-1: SerialNumber: syz
[  811.783999][T15525] usb 2-1: config 0 descriptor??
[  811.795356][T16612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  811.806498][   T30] audit: type=1400 audit(1785592699.869:900): avc:  denied  { write } for  pid=16634 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  811.814077][T16612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  811.840848][T16617] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  811.866193][T15525] hub 2-1:0.89: bad descriptor, ignoring hub
[  811.878320][  T140] hsr_slave_0: left promiscuous mode
[  811.884470][T15525] hub 2-1:0.89: probe with driver hub failed with error -5
[  811.893656][T16612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  811.894496][  T140] hsr_slave_1: left promiscuous mode
[  811.904008][T15525] option 2-1:0.89: GSM modem (1-port) converter detected
[  811.929625][T16612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  811.941977][T15525] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0
[  811.967671][T16612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  811.975448][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  812.012057][  T140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  812.023527][  T804] keyspan 4-1:1.0: Keyspan 1 port adapter converter detected
[  812.046460][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  812.060032][  T804] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82
[  812.081561][  T140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  812.084719][  T804] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  812.160988][T16638] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2971'.
[  812.361210][T13433] Bluetooth: hci3: unexpected event for opcode 0x0c2d
[  812.412283][  T140] veth1_macvtap: left promiscuous mode
[  812.447142][  T140] veth0_macvtap: left promiscuous mode
[  812.497368][  T140] veth1_vlan: left promiscuous mode
[  812.551489][  T140] veth0_vlan: left promiscuous mode
[  813.031475][  T804] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB1
[  813.339514][  T140] team0 (unregistering): Port device team_slave_1 removed
[  813.664858][  T140] team0 (unregistering): Port device team_slave_0 removed
[  814.523133][T16647] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  814.615942][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9
[  814.639073][T16639] dummy0: entered allmulticast mode
[  814.689639][T16639] dummy0: left allmulticast mode
[  814.810396][T16467] batman_adv: batadv0: Adding interface: batadv_slave_0
[  814.825684][T16467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  814.870398][T16467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  814.956561][T16664] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  814.976326][T16467] batman_adv: batadv0: Adding interface: batadv_slave_1
[  815.054348][T16467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  815.277330][T16467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  815.342580][T16668] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  815.731908][T16467] hsr_slave_0: entered promiscuous mode
[  815.740487][T16467] hsr_slave_1: entered promiscuous mode
[  815.747017][T16467] debugfs: 'hsr0' already exists in 'hsr'
[  815.752808][T16467] Cannot create hsr debugfs directory
[  816.125960][   T30] audit: type=1400 audit(1785592704.169:901): avc:  denied  { write } for  pid=16674 comm="syz.6.2978" name="functions" dev="configfs" ino=7955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  816.547853][   T30] audit: type=1400 audit(1785592704.179:902): avc:  denied  { create } for  pid=16674 comm="syz.6.2978" name="tcm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  816.562218][T16676] FAULT_INJECTION: forcing a failure.
[  816.562218][T16676] name failslab, interval 1, probability 0, space 0, times 0
[  816.569161][   T30] audit: type=1400 audit(1785592704.179:903): avc:  denied  { write } for  pid=16674 comm="syz.6.2978" name="target" dev="configfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  816.605976][   T30] audit: type=1400 audit(1785592704.609:904): avc:  denied  { write } for  pid=16674 comm="syz.6.2978" name="usb_gadget" dev="configfs" ino=53156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  816.638010][T16676] CPU: 0 UID: 0 PID: 16676 Comm: syz.6.2978 Not tainted syzkaller #0 PREEMPT(full) 
[  816.638040][T16676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  816.638052][T16676] Call Trace:
[  816.638058][T16676]  <TASK>
[  816.638066][T16676]  dump_stack_lvl+0x100/0x190
[  816.638098][T16676]  should_fail_ex.cold+0x5/0xa
[  816.638126][T16676]  should_failslab+0xc2/0x120
[  816.638153][T16676]  __kmalloc_noprof+0xfc/0x820
[  816.638177][T16676]  ? rcu_is_watching+0x12/0xc0
[  816.638209][T16676]  ? tomoyo_encode2+0xfb/0x3c0
[  816.638235][T16676]  tomoyo_encode2+0xfb/0x3c0
[  816.638259][T16676]  tomoyo_encode+0x29/0x50
[  816.638277][T16676]  tomoyo_realpath_from_path+0x18c/0x690
[  816.638305][T16676]  tomoyo_path_number_perm+0x23c/0x580
[  816.638331][T16676]  ? tomoyo_path_number_perm+0x22e/0x580
[  816.638358][T16676]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  816.638411][T16676]  ? current_check_access_path+0x269/0x430
[  816.638445][T16676]  ? __pfx_current_check_access_path+0x10/0x10
[  816.638471][T16676]  ? configfs_lookup+0x6e/0x7d0
[  816.638501][T16676]  ? lookup_one_qstr_excl+0xaf/0x250
[  816.638529][T16676]  tomoyo_path_mkdir+0x9b/0xe0
[  816.638550][T16676]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[  816.638578][T16676]  security_path_mkdir+0x154/0x2e0
[  816.638600][T16676]  filename_mkdirat+0x168/0x5e0
[  816.638626][T16676]  ? __pfx_filename_mkdirat+0x10/0x10
[  816.638648][T16676]  ? strncpy_from_user+0x19d/0x2d0
[  816.638674][T16676]  ? do_getname+0x191/0x390
[  816.638698][T16676]  __x64_sys_mkdir+0x6b/0x90
[  816.638719][T16676]  do_syscall_64+0x115/0x870
[  816.638742][T16676]  ? clear_bhb_loop+0x40/0x90
[  816.638766][T16676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  816.638784][T16676] RIP: 0033:0x7fac05f9e019
[  816.638801][T16676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  816.638818][T16676] RSP: 002b:00007fac06d9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  816.638837][T16676] RAX: ffffffffffffffda RBX: 00007fac06225fa0 RCX: 00007fac05f9e019
[  816.638851][T16676] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00
[  816.638863][T16676] RBP: 00007fac06d9d090 R08: 0000000000000000 R09: 0000000000000000
[  816.638875][T16676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  816.638886][T16676] R13: 00007fac06226038 R14: 00007fac06225fa0 R15: 00007fffd83cb078
[  816.638917][T16676]  </TASK>
[  816.706041][T16676] ERROR: Out of memory at tomoyo_realpath_from_path.
[  816.894873][T16686] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  816.917056][T16676] 
[  816.917067][T16676] ======================================================
[  816.917074][T16676] WARNING: possible circular locking dependency detected
[  816.917081][T16676] syzkaller #0 Not tainted
[  816.917089][T16676] ------------------------------------------------------
[  816.917094][T16676] syz.6.2978/16676 is trying to acquire lock:
[  816.917104][T16676] ffff88802445d440
[  816.921687][   T30] audit: type=1400 audit(1785592704.979:905): avc:  denied  { write } for  pid=16674 comm="syz.6.2978" name="naa.1234567890abcdef" dev="configfs" ino=53158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  816.926409][T16676]  (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0
[  816.926461][T16676] 
[  816.926461][T16676] but task is already holding lock:
[  816.926466][T16676] ffff888029c04518 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620
[  817.004695][T16676] 
[  817.004695][T16676] which lock already depends on the new lock.
[  817.004695][T16676] 
[  817.015510][T16676] 
[  817.015510][T16676] the existing dependency chain (in reverse order) is:
[  817.024504][T16676] 
[  817.024504][T16676] -> #3 (&opts->dep_lock){+.+.}-{4:4}:
[  817.032112][T16676]        lock_acquire+0x1b9/0x370
[  817.037123][T16676]        __mutex_lock+0x1a4/0x1bd0
[  817.042206][T16676]        tcm_set_name+0x29/0xb0
[  817.047027][T16676]        function_make+0x21c/0x3f0
[  817.052153][T16676]        configfs_mkdir+0x51e/0xb70
[  817.057388][T16676]        vfs_mkdir+0x361/0x850
[  817.062166][T16676]        filename_mkdirat+0x48b/0x5e0
[  817.067544][T16676]        __x64_sys_mkdir+0x6b/0x90
[  817.072671][T16676]        do_syscall_64+0x115/0x870
[  817.077792][T16676]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.084662][T16676] 
[  817.084662][T16676] -> #2 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[  817.092984][T16676]        lock_acquire+0x1b9/0x370
[  817.098000][T16676]        __mutex_lock+0x1a4/0x1bd0
[  817.103161][T16676]        uvcg_frame_w_width_store+0x12c/0x370
[  817.109236][T16676]        configfs_write_iter+0x302/0x4e0
[  817.114980][T16676]        vfs_write+0x6ac/0x1050
[  817.119849][T16676]        ksys_write+0x12a/0x250
[  817.124703][T16676]        do_syscall_64+0x115/0x870
[  817.129829][T16676]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.136390][T16676] 
[  817.136390][T16676] -> #1 (&p->frag_sem){++++}-{4:4}:
[  817.143787][T16676]        lock_acquire+0x1b9/0x370
[  817.148808][T16676]        down_write_killable+0x93/0x250
[  817.154343][T16676]        configfs_rmdir+0x3fa/0x950
[  817.159516][T16676]        vfs_rmdir+0x328/0x8a0
[  817.164260][T16676]        filename_rmdir+0x31a/0x5c0
[  817.170134][T16676]        __x64_sys_rmdir+0x46/0x70
[  817.175243][T16676]        do_syscall_64+0x115/0x870
[  817.180398][T16676]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.186839][T16676] 
[  817.186839][T16676] -> #0 (&sb->s_type->i_mutex_key#28){++++}-{4:4}:
[  817.195747][T16676]        check_prev_add+0xeb/0xe60
[  817.200874][T16676]        __lock_acquire+0x136c/0x1a40
[  817.206235][T16676]        lock_acquire+0x1b9/0x370
[  817.211276][T16676]        down_write+0x8b/0x1f0
[  817.216063][T16676]        configfs_depend_item_unlocked+0xf3/0x6a0
[  817.222748][T16676]        usbg_make_tpg+0x261/0x620
[  817.227876][T16676]        target_fabric_make_tpg+0xab/0x8c0
[  817.233685][T16676]        configfs_mkdir+0x51e/0xb70
[  817.239242][T16676]        vfs_mkdir+0x361/0x850
[  817.244014][T16676]        filename_mkdirat+0x48b/0x5e0
[  817.249393][T16676]        __x64_sys_mkdir+0x6b/0x90
[  817.254502][T16676]        do_syscall_64+0x115/0x870
[  817.259602][T16676]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.266002][T16676] 
[  817.266002][T16676] other info that might help us debug this:
[  817.266002][T16676] 
[  817.276468][T16676] Chain exists of:
[  817.276468][T16676]   &sb->s_type->i_mutex_key#28 --> gadget_subsys.su_mutex --> &opts->dep_lock
[  817.276468][T16676] 
[  817.291149][T16676]  Possible unsafe locking scenario:
[  817.291149][T16676] 
[  817.298694][T16676]        CPU0                    CPU1
[  817.304051][T16676]        ----                    ----
[  817.309401][T16676]   lock(&opts->dep_lock);
[  817.313809][T16676]                                lock(gadget_subsys.su_mutex);
[  817.321343][T16676]                                lock(&opts->dep_lock);
[  817.328274][T16676]   lock(&sb->s_type->i_mutex_key#28);
[  817.333721][T16676] 
[  817.333721][T16676]  *** DEADLOCK ***
[  817.333721][T16676] 
[  817.342037][T16676] 5 locks held by syz.6.2978/16676:
[  817.347212][T16676]  #0: ffff88801e382450 (sb_writers#17){.+.+}-{0:0}, at: filename_create+0x10d/0x400
[  817.356686][T16676]  #1: ffff8880361db0c0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400
[  817.367472][T16676]  #2: ffffffff8fd88028 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70
[  817.377258][T16676]  #3: ffffffff90253340 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620
[  817.387642][T16676]  #4: ffff888029c04518 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620
[  817.397126][T16676] 
[  817.397126][T16676] stack backtrace:
[  817.402992][T16676] CPU: 1 UID: 0 PID: 16676 Comm: syz.6.2978 Not tainted syzkaller #0 PREEMPT(full) 
[  817.403006][T16676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  817.403013][T16676] Call Trace:
[  817.403018][T16676]  <TASK>
[  817.403022][T16676]  dump_stack_lvl+0x100/0x190
[  817.403038][T16676]  print_circular_bug.cold+0x178/0x1c7
[  817.403055][T16676]  check_noncircular+0x146/0x160
[  817.403069][T16676]  check_prev_add+0xeb/0xe60
[  817.403081][T16676]  __lock_acquire+0x136c/0x1a40
[  817.403095][T16676]  ? rcu_is_watching+0x12/0xc0
[  817.403111][T16676]  lock_acquire+0x1b9/0x370
[  817.403123][T16676]  ? configfs_depend_item_unlocked+0xf3/0x6a0
[  817.403137][T16676]  ? __pfx___might_resched+0x10/0x10
[  817.403150][T16676]  down_write+0x8b/0x1f0
[  817.403164][T16676]  ? configfs_depend_item_unlocked+0xf3/0x6a0
[  817.403177][T16676]  ? __pfx_down_write+0x10/0x10
[  817.403192][T16676]  configfs_depend_item_unlocked+0xf3/0x6a0
[  817.403205][T16676]  ? __lock_acquire+0x49f/0x1a40
[  817.403217][T16676]  usbg_make_tpg+0x261/0x620
[  817.403229][T16676]  ? __pfx_usbg_make_tpg+0x10/0x10
[  817.403241][T16676]  ? find_held_lock+0x2b/0x80
[  817.403250][T16676]  ? __pfx_usbg_make_tpg+0x10/0x10
[  817.403262][T16676]  target_fabric_make_tpg+0xab/0x8c0
[  817.403277][T16676]  configfs_mkdir+0x51e/0xb70
[  817.403295][T16676]  ? __pfx_target_fabric_make_tpg+0x10/0x10
[  817.403318][T16676]  ? __pfx_configfs_mkdir+0x10/0x10
[  817.403338][T16676]  ? inode_permission+0x374/0x620
[  817.403353][T16676]  vfs_mkdir+0x361/0x850
[  817.403367][T16676]  filename_mkdirat+0x48b/0x5e0
[  817.403380][T16676]  ? __pfx_filename_mkdirat+0x10/0x10
[  817.403391][T16676]  ? strncpy_from_user+0x19d/0x2d0
[  817.403406][T16676]  ? do_getname+0x191/0x390
[  817.403419][T16676]  __x64_sys_mkdir+0x6b/0x90
[  817.403430][T16676]  do_syscall_64+0x115/0x870
[  817.403444][T16676]  ? clear_bhb_loop+0x40/0x90
[  817.403456][T16676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.403467][T16676] RIP: 0033:0x7fac05f9e019
[  817.403476][T16676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  817.403486][T16676] RSP: 002b:00007fac06d9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  817.403497][T16676] RAX: ffffffffffffffda RBX: 00007fac06225fa0 RCX: 00007fac05f9e019
[  817.403503][T16676] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00
[  817.403509][T16676] RBP: 00007fac06d9d090 R08: 0000000000000000 R09: 0000000000000000
[  817.403515][T16676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  817.403521][T16676] R13: 00007fac06226038 R14: 00007fac06225fa0 R15: 00007fffd83cb078
[  817.403530][T16676]  </TASK>
[  817.813345][   T30] audit: type=1400 audit(1785592705.869:906): avc:  denied  { write } for  pid=16670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  818.022289][   T30] audit: type=1400 audit(1785592706.079:907): avc:  denied  { write } for  pid=16692 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  818.074633][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10
[  818.111748][ T5882] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  818.223480][ T5882] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  818.249387][   T30] audit: type=1400 audit(1785592706.309:908): avc:  denied  { write } for  pid=16697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  818.286353][ T5882] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  818.305675][   T30] audit: type=1400 audit(1785592706.349:909): avc:  denied  { write } for  pid=16708 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  818.378976][ T5882] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  818.503713][ T5882] bridge_slave_1: left allmulticast mode
[  818.509488][ T5882] bridge_slave_1: left promiscuous mode
[  818.514416][   T30] audit: type=1400 audit(1785592706.569:910): avc:  denied  { write } for  pid=16710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  818.515159][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.547159][ T5882] bridge_slave_0: left allmulticast mode
[  818.552834][ T5882] bridge_slave_0: left promiscuous mode
[  818.558801][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.632502][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  818.633588][   T36] smbdirect: ib_dev[syz1] removed
[  818.647963][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  818.658131][ T5882] bond0 (unregistering): Released all slaves
[  818.665433][ T5882] bond1 (unregistering): Released all slaves
[  818.675401][ T5882] bond2 (unregistering): Released all slaves
[  818.684423][ T5882] bond3 (unregistering): Released all slaves
[  818.692822][ T5882] bond4 (unregistering): Released all slaves
[  818.701092][ T5882] bond5 (unregistering): Released all slaves
[  818.712692][ T5882] bond6 (unregistering): Released all slaves
[  818.721655][ T5882] bond7 (unregistering): Released all slaves
[  818.730046][ T5882] bond8 (unregistering): Released all slaves
[  818.809865][ T5882] tipc: Left network mode
[  818.935029][ T5882] hsr_slave_0: left promiscuous mode
[  818.941733][ T5882] hsr_slave_1: left promiscuous mode
[  818.947425][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  818.954791][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  818.962471][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  818.970072][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  818.979128][ T5882] veth1_macvtap: left promiscuous mode
[  818.984617][ T5882] veth0_macvtap: left promiscuous mode
[  818.990807][ T5882] veth1_vlan: left promiscuous mode
[  818.996229][ T5882] veth0_vlan: left promiscuous mode
[  819.070417][ T5882] team0 (unregistering): Port device team_slave_1 removed
[  819.084612][ T5882] team0 (unregistering): Port device team_slave_0 removed
[  819.129409][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9
[  819.201729][T14424] usb 2-1: USB disconnect, device number 53
[  819.226246][T14424] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  819.244714][T14424] option 2-1:0.89: device disconnected
[  819.449160][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10
[  819.460555][ T5882] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.517661][ T5882] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.549163][ T5882] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.611854][ T5882] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.627260][ T5800] usb 4-1: USB disconnect, device number 32
[  819.639229][ T5800] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1
[  819.659308][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11
[  819.659999][ T5800] keyspan 4-1:1.0: device disconnected
[  819.737323][ T5882] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.799161][ T5882] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.830277][ T5882] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.881280][ T5882] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.922296][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12
[  819.960384][ T5882] bridge_slave_1: left allmulticast mode
[  819.966134][ T5882] bridge_slave_1: left promiscuous mode
[  819.971833][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  819.980029][ T5882] bridge_slave_0: left allmulticast mode
[  819.985961][ T5882] bridge_slave_0: left promiscuous mode
[  819.991785][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.001362][ T5882] bridge_slave_1: left allmulticast mode
[  820.007963][ T5882] bridge_slave_1: left promiscuous mode
[  820.013696][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.022018][ T5882] bridge_slave_0: left allmulticast mode
[  820.027741][ T5882] bridge_slave_0: left promiscuous mode
[  820.033488][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.044778][ T5882] bridge_slave_1: left allmulticast mode
[  820.050854][ T5882] bridge_slave_1: left promiscuous mode
[  820.057048][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.065196][ T5882] bridge_slave_0: left allmulticast mode
[  820.074965][ T5882] bridge_slave_0: left promiscuous mode
[  820.080868][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.148312][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  820.166924][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  820.176751][ T5882] bond0 (unregistering): Released all slaves
[  820.197983][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  820.207486][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  820.218592][ T5882] bond0 (unregistering): Released all slaves
[  820.229291][ T5882] bond1 (unregistering): Released all slaves
[  820.237838][ T5882] bond2 (unregistering): Released all slaves
[  820.246384][ T5882] bond3 (unregistering): Released all slaves
[  820.254541][ T5882] bond4 (unregistering): Released all slaves
[  820.263445][ T5882] bond5 (unregistering): Released all slaves
[  820.273690][ T5882] bond6 (unregistering): Released all slaves
[  820.283177][ T5882] bond7 (unregistering): Released all slaves
[  820.304607][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  820.314220][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  820.323597][ T5882] bond0 (unregistering): Released all slaves
[  820.334931][ T5271] 8021q: adding VLAN 0 to HW filter on device eth13
[  820.375692][ T5882] tipc: Left network mode
[  820.392634][ T5882] tipc: Left network mode
[  820.534571][ T5271] 8021q: adding VLAN 0 to HW filter on device eth14
[  820.703705][ T5882] hsr_slave_0: left promiscuous mode
[  820.716466][ T5882] hsr_slave_1: left promiscuous mode
[  820.722033][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  820.729626][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  820.738309][ T5882] hsr_slave_0: left promiscuous mode
[  820.743872][ T5882] hsr_slave_1: left promiscuous mode
[  820.749513][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  820.756896][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  820.764264][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  820.771736][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  820.780572][ T5882] hsr_slave_0: left promiscuous mode
[  820.786222][ T5882] hsr_slave_1: left promiscuous mode
[  820.791723][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  820.799355][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  820.807736][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  820.815160][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  820.826235][ T5882] veth1_macvtap: left promiscuous mode
[  820.831723][ T5882] veth0_macvtap: left promiscuous mode
[  820.837432][ T5882] veth1_vlan: left promiscuous mode
[  820.842695][ T5882] veth0_vlan: left promiscuous mode
[  820.849348][ T5882] veth1_macvtap: left promiscuous mode
[  820.854908][ T5882] veth0_macvtap: left promiscuous mode
[  820.860517][ T5882] veth1_vlan: left promiscuous mode
[  820.865851][ T5882] veth0_vlan: left promiscuous mode
[  820.948700][ T5882] team0 (unregistering): Port device team_slave_1 removed
[  820.958360][ T5882] team0 (unregistering): Port device team_slave_0 removed
[  821.028321][ T5882] team0 (unregistering): Port device team_slave_1 removed
[  821.037874][ T5882] team0 (unregistering): Port device team_slave_0 removed
[  821.090731][ T5882] team0 (unregistering): Port device team_slave_1 removed
[  821.100430][ T5882] team0 (unregistering): Port device team_slave_0 removed
[  821.143845][ T5271] 8021q: adding VLAN 0 to HW filter on device eth15
[  821.253222][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  821.253237][   T30] audit: type=1400 audit(1785592709.309:926): avc:  denied  { write } for  pid=16822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  821.289881][   T30] audit: type=1400 audit(1785592709.349:927): avc:  denied  { write } for  pid=16833 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  821.314804][ T5271] 8021q: adding VLAN 0 to HW filter on device eth16
[  821.470653][   T30] audit: type=1400 audit(1785592709.519:928): avc:  denied  { write } for  pid=16836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  821.542051][   T30] audit: type=1400 audit(1785592709.589:929): avc:  denied  { write } for  pid=16847 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  821.575417][ T5271] 8021q: adding VLAN 0 to HW filter on device eth17
[  821.755921][   T30] audit: type=1400 audit(1785592709.809:930): avc:  denied  { write } for  pid=16850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  821.793569][   T30] audit: type=1400 audit(1785592709.839:931): avc:  denied  { write } for  pid=16861 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  821.819872][ T5271] 8021q: adding VLAN 0 to HW filter on device eth18
[  821.940063][   T30] audit: type=1400 audit(1785592709.999:932): avc:  denied  { write } for  pid=16864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  821.991135][   T30] audit: type=1400 audit(1785592710.049:933): avc:  denied  { write } for  pid=16875 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  822.031027][ T5271] 8021q: adding VLAN 0 to HW filter on device eth19
[  822.147302][   T30] audit: type=1400 audit(1785592710.209:934): avc:  denied  { write } for  pid=16878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  822.197864][   T30] audit: type=1400 audit(1785592710.259:935): avc:  denied  { write } for  pid=16889 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  822.237367][ T5271] 8021q: adding VLAN 0 to HW filter on device eth20