last executing test programs:

3m14.284658188s ago: executing program 32 (id=1284):
syz_open_dev$mtd(&(0x7f0000000380), 0xa, 0x40)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000440)={@mcast2, r2}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r2, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2m22.799776586s ago: executing program 33 (id=1405):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f00000000c0)={@empty, @private=0xa010102})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'wlan1\x00', 0x20})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffe0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x44, 0x2}}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xbb, "f4c2719948c975ce414e7b1fe1880d90"}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbf3, {0x0, 0x0, 0x0, r2, {0x1, 0xfff1}, {0x0, 0x8}, {0xf, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x40054)
mmap(&(0x7f0000069000/0x3000)=nil, 0x3000, 0x1000001, 0x30, r1, 0xffffe000)
socket(0x1, 0x80000, 0x1)
r3 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$sierra_net(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)
write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x128)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./nfsd\x00', &(0x7f0000000500)='nfsd\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/portlist\x00', 0x1, 0x0)
write(r4, &(0x7f0000000580)='udp 2', 0x5)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff)

2m19.808811859s ago: executing program 5 (id=1439):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x80102, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000540)=@xdp, &(0x7f0000000640)=0x80)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001180)={'lo\x00'})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001280))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x5a}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b700000010000000950000"], &(0x7f0000000500)='GPL\x00', 0x6, 0x100000, &(0x7f0000100700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m19.056756718s ago: executing program 34 (id=1413):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x8, 0x58b}, 0xc)
sendto$inet6(r0, &(0x7f00000000c0)="b8", 0xffe0, 0x2000c851, &(0x7f0000000100)={0xa, 0x4e23, 0x34000, @loopback, 0xffffffff}, 0x1c)

2m14.842087625s ago: executing program 35 (id=1426):
r0 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0)
write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup(r1, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0)
syz_clone3(&(0x7f00000003c0)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x80002, 0x0)
sendfile(r3, r3, 0x0, 0x2000006)
syz_emit_ethernet(0x15a, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x3, 0x2, 0x14c, 0x65, 0x0, 0x4, 0x21, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp_addr={0x44, 0x34, 0xbc, 0x1, 0x3, [{@private=0xa010102, 0x5}, {@multicast1, 0x3}, {@private=0xa010102, 0x5}, {@remote, 0xff}, {@multicast2, 0x4adf39b2}, {@loopback, 0x5}]}, @timestamp_addr={0x44, 0x24, 0x1a, 0x1, 0x6, [{@empty, 0x2}, {@multicast2, 0x80}, {@loopback, 0x2b}, {@loopback, 0x10}]}, @rr={0x7, 0x13, 0x6, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010100, @local]}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x5, 0x6, "7f6173d6"}, {0x0, 0x5, "fb723e"}]}, @end, @noop]}}, {{0x4e22, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x7, 0x6, "ba8e7b", 0x0, "2c5289"}, "476a3d52a01b6a123b0c1ed9d529c031cc2cbf8d2b16d174c7cb5fb2abb68079951911296b1c23a4e26df3e7752ee121506ebae08a7945327a0a23d45a3f53ef5f4679d134bf0be40a992b727ad1a5848d6ccff6ec78bcafc433d19be3568fdb5cde47fdaded80da380a423f9d477562156d23958f9190333665a7873531fe5df38239db4adad196be28084a5970e47aee214e29292cc38c342d94ab79453d3bdceb90ef2dab99e5"}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r4 = getpid()
syz_emit_ethernet(0xbe, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000014000000000011907864010101ac14142100004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2663fcbb2c5a57df67d544af6e8dafe09c50abd12ea7a9c1301a68badea1f6d207df392ed6cc2720a6ee70d5f7756cd5b54cc117911e208f24680999ef61942739853353142e25ce45537b4feb41eb4826a733434a96388b7e92f08fc0478d4ab40e7871adae8768b8c53b8b5e0c26e6dc75d97f007e1a60377dbc1a28ad38d71cc4349803f0f6e23e8101d5bbb9211af06f45f003b3a5011b3dd5ca08674a4f0382b7c1ee5b24162ae45b8662550d74b77fb1fab86149d5921c3cd925305254438c01f87bbd23e01b5b3de6261d1"], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000140)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000001c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000240), 0x651, 0x0)
recvmmsg(r5, &(0x7f0000000280), 0x10106, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x48850)
r7 = getpgrp(0x0)
r8 = syz_pidfd_open(r7, 0x0)
pidfd_send_signal(r8, 0x0, &(0x7f00000002c0)={0xc, 0xf2a, 0xfffffff8}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r9, 0x84, 0x76, &(0x7f00000008c0)=""/4102, &(0x7f0000001900)=0x1006)
mknod(&(0x7f0000000340)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000380)='./file0\x00', 0x2, 0x85)

2m13.057746531s ago: executing program 36 (id=1428):
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6)
syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newchain={0x3218, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0xfff1}, {0xfff3, 0xd}, {0xb, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x2f9c, 0x2, [@TCA_FW_ACT={0xe4, 0x4, [@m_nat={0xe0, 0x8, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xffff0001, 0x8, 0x9, 0x9}, @multicast1, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0x7, 0x571, 0x8}, @private=0xa010102, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x8, 0x7fff, 0x5}, @dev={0xac, 0x14, 0x14, 0x16}, @empty}}]}, {0x3d, 0x6, "f1e18125058ba26692e6f3541fd2abbd3a6e9c688663120a5b5b950dc65649a2e5dd5b51d8783468f6dbd567eb69484d85c9dd99c9077611cd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_ACT={0x2e74, 0x4, [@m_ct={0x114, 0xc, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x10000}, @TCA_CT_LABELS={0x14, 0x7, "f0d1d736db395f4c27bb71d7e8747ea3"}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_MARK={0x8, 0x5, 0x1}]}, {0xbf, 0x6, "e17c2402e8c36cac0412b8004bdff1f35961ae5828ec572300740ff87cd2c560a37c75a78513ebc0b8ceba80bc6ee40035e527e83d10544500927167f1bda9501e5304fc2a5d41c0ab01e24556bc2e861e0e0e234a9371935c75cfe45a5ea95f613f25fecec0ca0df57841802680f8cba115d83cf97bc42b9d773b4721f90d0beeeb3bcbc5d21351e9fd2df03f4b33193c483a6687f8487f0def5f1c54bbde2123b3c8351812b0178ed04a8b72023ded21861b96a1946a108d3177"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0x2c70, 0xe, 0x0, 0x0, {{0xa}, {0x2c08, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x24, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xa}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x9, 0x80000001, 0x3, 0x0, 0x5}, 0x2, 0x4, [{0x0, 0xf, 0x7ff, 0x900000, 0x4}, {0x0, 0xfffff3fe, 0x1701c62d, 0x3, 0x80000001, 0x19d}, {0xfffffff7, 0xe8a8, 0x7d, 0x4f, 0x3, 0xfffffff7}, {0x3, 0x8, 0x3, 0xfffffff9, 0x5, 0x1}]}, [{0x4, 0xfffffffb, 0x4, 0x7ff, 0x6}, {0x1, 0x8001, 0x8, 0x0, 0xff, 0xfff}, {0x0, 0x3, 0x80, 0x10001, 0x401, 0xe}, {0x3, 0x1ff, 0x8, 0x80000001, 0x1, 0x200}, {0x9, 0x5, 0x6, 0x6a3, 0x1, 0x3}, {0x4, 0x3, 0x9, 0x8, 0x1, 0x5}, {0x3, 0x9, 0x6, 0x80000000, 0x200, 0x5}, {0x0, 0x7, 0xfffffa59, 0x1, 0x2, 0x800}, {0x0, 0x1, 0x100, 0x131d8000, 0x8, 0xffffffff}, {0xfff, 0xd3e7, 0xca4, 0x5, 0x3, 0x5}, {0x7fffffff, 0x80000001, 0x2280, 0x7, 0x576, 0x2}, {0x6, 0x3, 0x7, 0x1b4e, 0x5, 0xffffffff}, {0x3, 0x7ff, 0x7, 0x7, 0xffff, 0x80000000}, {0x5, 0x4, 0x575, 0x8, 0xa, 0x8}, {0x2, 0x101, 0x6, 0x1, 0x8, 0x3}, {0x81, 0x3, 0x6, 0x8, 0xa, 0x6}, {0x1, 0x0, 0x12, 0x0, 0x1, 0x3ff}, {0x0, 0x71f7, 0x3, 0xff, 0x6, 0x4}, {0x68, 0x4, 0x2, 0xffff0931, 0x4, 0x4737}, {0x3, 0x0, 0x2, 0x7, 0x0, 0x1000}, {0x1, 0x7, 0xa, 0x9, 0x5, 0x7}, {0xc97d, 0x80000000, 0x8, 0x6, 0x6, 0x6}, {0x7, 0xbfb3, 0xc, 0x8, 0x6, 0x5}, {0x4, 0x5, 0x4, 0x4, 0x4, 0x4}, {0x1ff, 0xffff, 0x9, 0x6, 0x8, 0x6}, {0x2, 0x6, 0x400, 0x4, 0x3, 0x50b}, {0xd, 0x81, 0x2, 0x7, 0x8, 0x5}, {0x1, 0x1000, 0x8, 0x8, 0x69, 0x10000}, {0xeff7, 0x7, 0x16, 0x7, 0x3, 0x7}, {0x8, 0xee900000, 0x1, 0x9, 0x5, 0x1ff}, {0x24c2, 0xfffffffa, 0x1, 0x3ff, 0x40, 0x5}, {0x7, 0x4, 0x0, 0x4, 0x45, 0x63867f3b}, {0x6, 0x9c6, 0x3ff, 0x7, 0x7f, 0x1000}, {0x5, 0x7f, 0x401, 0x80000001, 0x9, 0x5ecd}, {0x7ff, 0x6b, 0x4, 0x10, 0x9, 0xad33}, {0xea0d, 0x5, 0x2, 0x5, 0x8, 0x8}, {0x41, 0x3, 0x3, 0x0, 0x9, 0x81}, {0x7, 0x0, 0x10000, 0x9, 0x80, 0x2}, {0x3, 0xf, 0x9, 0x7fffffff, 0x6, 0x200}, {0x1ff, 0x5, 0x8001, 0x3, 0x81, 0x3}, {0x3, 0x5, 0xffffdbf3, 0x7, 0xf, 0x1}, {0xa2, 0x0, 0xfffffff8, 0x80, 0x8, 0x9}, {0x3, 0x81, 0x3780000, 0x5, 0x175, 0x40}, {0xd, 0x7745, 0x0, 0x1, 0x2b88000, 0xfffffff7}, {0x3, 0x9684, 0x5, 0x2, 0x2, 0x8}, {0x0, 0x10000, 0xe0c, 0x1000, 0x6}, {0x9, 0x0, 0x5, 0x7fff, 0x1000, 0x2}, {0x0, 0x9, 0xd, 0x4, 0x4, 0x1}, {0x1, 0x100, 0xb6, 0x6, 0x43, 0x8}, {0x7f, 0x3, 0x7, 0x6, 0x8, 0x80000001}, {0x6, 0x0, 0x2, 0x9, 0xd9, 0xfffffffb}, {0x200, 0x1, 0x400, 0x40, 0x5, 0x5}, {0x390, 0x5, 0x1, 0x7ff, 0x2, 0x6}, {0x2, 0x5, 0x4cc4, 0x8, 0x6}, {0x6, 0xfff, 0xc, 0x98, 0x6, 0x401}, {0xfffffff7, 0x1, 0x7bd9, 0x7f, 0x1}, {0x1, 0x4, 0x1, 0xa, 0xff, 0x713}, {0x5, 0x3, 0x3, 0x5, 0x1, 0xca18}, {0x70, 0x2, 0x400, 0x1aa, 0x8, 0x3}, {0x100, 0x5, 0x89, 0x40, 0x3, 0x9}, {0x8, 0x401, 0x9d1e, 0x80000000, 0xbc780, 0x1}, {0x20000000, 0x1, 0xfffffff8, 0xffffff70, 0x8, 0x12a385ac}, {0x9, 0x7, 0x9723, 0x2, 0xfff, 0x3}, {0xfffff206, 0x3, 0x8, 0x401, 0x0, 0x6}, {0x0, 0xe148bdec, 0xfff, 0x1, 0x1, 0x6}, {0x8, 0x7, 0x2, 0x398, 0xffffffff, 0x8000}, {0xfffffc01, 0x80, 0x2, 0xf3c, 0x21, 0x3}, {0xfffffff3, 0xffff, 0x1375e07b, 0x4, 0x7}, {0x6, 0x9, 0x1b, 0x9b, 0x3, 0x6}, {0x2, 0x620, 0x9, 0x8, 0x8dfc, 0x7}, {0x9, 0xffff3a2b, 0xb5b6, 0x2, 0x5, 0x3ff}, {0xd, 0x40, 0x6, 0x100, 0xaa, 0x10000}, {0xfffffc31, 0xd5d, 0xe, 0x6, 0xfff, 0x25e3}, {0x7, 0xdcd3, 0x7, 0x1, 0x8, 0x6}, {0x7, 0xc20b, 0x5, 0x8, 0x401, 0x7}, {0x80, 0xe, 0x9, 0x8, 0xf2f, 0x9}, {0x0, 0x7, 0x7, 0xc, 0x0, 0x9}, {0x800, 0x0, 0x9, 0xfff, 0x1}, {0x2, 0x2a, 0xa, 0x8, 0x8001, 0x10001}, {0x7, 0x4, 0x5, 0xe56f, 0x3, 0x1}, {0x2, 0x6, 0x100, 0x6, 0x80000001, 0x3f38a5eb}, {0x9, 0x6, 0x7, 0x7fffffff, 0xfff, 0x77}, {0x7, 0x4, 0x0, 0xe87, 0x2}, {0xfffffff5, 0x9, 0xa0, 0x2f2, 0xa18c}, {0x9, 0x3, 0x200, 0x80, 0xffffffff, 0xeb}, {0xfd, 0x8, 0x4, 0x1, 0x6, 0x3ff}, {0x3f, 0x5a90, 0x0, 0x200, 0x0, 0x9}, {0xdf8, 0x6, 0x40, 0x2, 0x4, 0x3}, {0x3, 0x100, 0x6, 0xf, 0x1, 0x5b}, {0x8, 0x7, 0x6, 0x7, 0xfffffffc}, {0x2, 0x7, 0x3, 0x7, 0xffff, 0xdd300000}, {0x7ff, 0xffffe719, 0xfffffff7, 0x4, 0xffff8000, 0xffff}, {0x7, 0x1, 0x3, 0x8, 0x4, 0x3}, {0x7fffffff, 0xca, 0x40, 0x7, 0x6, 0x8}, {0x7ef7, 0x8eb, 0x5, 0x8, 0xfffffff5, 0x5}, {0x9, 0xf4be, 0x7, 0x7, 0x0, 0x10001}, {0xffff0000, 0x3, 0x1, 0x1ff, 0x7, 0xb}, {0x3, 0x7fffffff, 0x4, 0x4, 0xb, 0x7fff}, {0x9, 0x8, 0x3, 0x8, 0x4, 0x1}, {0x5, 0x3, 0x0, 0x40, 0x53c3514c}, {0x80000001, 0x4, 0x860, 0x6, 0xd8000000, 0xffffffff}, {0x9, 0x5, 0x6, 0x1, 0x5, 0x5}, {0x80, 0x34d7, 0x1, 0x1, 0x5, 0x8}, {0x4, 0x662, 0xfffff800, 0x200, 0x324, 0x9}, {0x7, 0x5, 0x2, 0x0, 0x3, 0x9}, {0x8, 0x22657450, 0x3, 0x400, 0x18, 0x77d}, {0x4, 0x49f9, 0x9, 0x7, 0x6, 0x5}, {0x1, 0x5, 0x5, 0x3, 0x4, 0x10}, {0x4, 0x9, 0x0, 0x50b, 0x5, 0x34}, {0xa, 0x65c, 0x80000001, 0xd10, 0x6, 0x8}, {0x1, 0x2, 0xffff1042, 0x10, 0x101, 0x8}, {0x2, 0x80000000, 0x1, 0x7c2f, 0x3, 0xffffffff}, {0x1, 0x4, 0x5e49, 0x6, 0x0, 0x8413}, {0x3134, 0x1, 0xd, 0x8, 0x10, 0xa}, {0x5, 0x2, 0x5, 0x3, 0x400000, 0x3}, {0x100, 0x1, 0x800, 0x8, 0x200, 0x4}, {0x2, 0x4, 0x800, 0xa, 0x6, 0x9004}, {0x5, 0x4, 0x38f, 0x0, 0x8, 0x400}, {0x10000, 0x0, 0x2, 0x174, 0x6, 0x2}, {0xa88c, 0x10001, 0xe, 0x2e, 0x7, 0x10000}, {0x0, 0x8, 0x6, 0x1, 0x3ff, 0x6}, {0x6, 0x9, 0x6, 0x2, 0x0, 0x3}, {0xffffffff, 0x1000, 0xe, 0xf, 0x9, 0xfffffffd}, {0x0, 0x6, 0x80, 0x4, 0x8, 0x6}, {0x5, 0x3, 0xc, 0x1, 0x7, 0x8}, {0x8a, 0x80000000, 0x9d9, 0x4914, 0x9, 0x4}, {0x5, 0xd4, 0x8, 0x6, 0x9, 0x7}, {0x2, 0x7, 0xde1, 0x1632, 0x3, 0x1}], [{0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {}, {0x1}, {0x3}, {0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0xf159f29e66dbfef5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x3}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x1}, {0x5, 0x1}, {0x2, 0x9f28183220bfdf21}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {}, {0x4, 0x1}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x4}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0xb58f8b058577f1c1}, {0x0, 0x1}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x4f1ddd2cbcbf4bf8, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x3}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x6, 0x8, 0x0, 0x0, 0x4}, 0x5, 0x9, [{0x2, 0xffff8000, 0x60, 0x222e, 0x9, 0x5}, {0x5, 0x4, 0x6e, 0x7, 0x2, 0x3}, {0x8, 0xffff7fff, 0x4, 0x80000000, 0x9}, {0xffffffff, 0x6, 0x972, 0x5, 0x3}, {0x80000000, 0x1, 0x101, 0x3, 0x1, 0xfffff7d9}, {0x3, 0x10, 0x0, 0xf, 0x3, 0x8}, {0x2, 0x6, 0xfffffff9, 0x2, 0x401, 0x5}, {0x2, 0x3dd, 0xfff, 0x7, 0x5f29, 0x2}, {0xb, 0x9, 0xa, 0x51, 0xa5b, 0x8}, {0xd220, 0x1, 0x5, 0x6, 0x4, 0x40}]}, [{0xf6, 0x3, 0x6, 0x1, 0x32, 0x200}, {0x5, 0x280000, 0x2, 0x7, 0x401, 0x3ff}, {0xff, 0x4000, 0x9, 0xe, 0x1, 0xa}, {0x4, 0x2, 0x7, 0x196e, 0x81, 0x6a1d}, {0xfffffffc, 0x4, 0x1ff, 0x6, 0x81, 0xe}, {0x2, 0xfffffffd, 0x7, 0x4, 0x2, 0x9}, {0x6, 0x2, 0x9a, 0x1, 0x0, 0x4}, {0xeb, 0x3, 0x18, 0x5, 0x81, 0x4b}, {0x1, 0x669, 0x5, 0x3, 0x1ff, 0x4}, {0x9949, 0x3, 0xfff, 0xfbb6, 0x2, 0x6}, {0x7ff, 0xfffffffb, 0x7fff, 0x7, 0x9, 0xb}, {0x2, 0x2, 0x41, 0x81, 0x9, 0x5567}, {0x3, 0x25f, 0x8000, 0x1000, 0x4, 0x9}, {0x8, 0xc, 0x3, 0x5, 0x4, 0xfc}, {0xff, 0x4, 0x9, 0x409, 0x400, 0x6}, {0x8, 0x8, 0x8, 0x6, 0xa5, 0x40}, {0x9, 0x3ff, 0x28000000, 0xb5a2, 0x4, 0x1}, {0x1c00, 0x5, 0xcf1, 0xfffffffe, 0x8001, 0x5}, {0x3, 0xd9, 0x5, 0x3, 0xcc74, 0x9}, {0x1, 0x8d, 0x401, 0x3, 0x4, 0x1b57}, {0x3, 0x9, 0xe, 0x8, 0x0, 0xfffff9ef}, {0x7fff, 0x401, 0x6, 0xffff, 0x8, 0x2}, {0x4, 0x6, 0xffff0000, 0x3ff, 0x80000000, 0x6}, {0x4, 0x100, 0x1, 0xffff6f26, 0x7, 0x7}, {0xfffffffe, 0x7f, 0x100, 0xa27, 0x0, 0xa}, {0x401, 0x9, 0x8, 0x3, 0x10, 0x10001}, {0x4c, 0x82f, 0xe, 0x8, 0x7, 0x40000000}, {0x100, 0x4, 0x7, 0x2, 0xe, 0x3}, {0x8, 0x7, 0x9, 0x52f, 0x5, 0xf432}, {0x7, 0xfffffffa, 0xfffffff8, 0x0, 0x1bb, 0x9}, {0x8, 0x7, 0x3ff, 0x1, 0xba, 0x97dd032}, {0x1, 0x1000, 0x5, 0xfffffe00, 0x4, 0x3}, {0x3, 0x5, 0xa46, 0x1, 0x4, 0x3}, {0xffffff3b, 0x3, 0x0, 0xc, 0x101, 0xe5000000}, {0x6d3, 0x8, 0x1, 0x6, 0x7, 0x7fff}, {0x6, 0x80000000, 0xd, 0x5, 0xe54c, 0x80}, {0x1, 0xfffffffa, 0x8, 0xffff, 0x1, 0x101}, {0xfffffff5, 0xb, 0xa, 0x826, 0x4, 0x1}, {0x7fff, 0x5, 0x6, 0x5f43, 0x10001, 0x6}, {0x0, 0x1ff, 0x50a6, 0xff, 0x5, 0x8}, {0x8001, 0x0, 0x1, 0x6, 0x4, 0x5}, {0x1, 0x0, 0x1, 0x1, 0x1ff, 0xa}, {0x3, 0x100, 0x4, 0x9, 0x4, 0x10001}, {0xb8, 0xffffffff, 0x3, 0xab, 0x8, 0x7f}, {0x4, 0x0, 0x100, 0x0, 0x2ba0}, {0x0, 0x8, 0x6, 0x3, 0x9, 0x8}, {0x3, 0x6, 0xffffffff, 0xfffeffff, 0x1, 0x2}, {0x6, 0x6f7, 0x6, 0x1, 0x508d, 0x4}, {0x4, 0xab, 0x1, 0x9, 0x3, 0x1}, {0x5, 0x0, 0x40, 0x2, 0x5, 0x8}, {0xb, 0x8, 0xf, 0x9, 0x1, 0x8}, {0x5, 0x6c, 0x7, 0x8, 0x8, 0xfffffe00}, {0x9, 0xffff, 0x2, 0x3, 0x7, 0x8001}, {0x6, 0x4, 0x1, 0x7, 0xffffffff, 0x401}, {0x2, 0x1000, 0xb, 0x400000, 0x2, 0x5}, {0x3, 0x5, 0x3, 0x5, 0x18, 0x6}, {0x7, 0x4, 0x1000, 0x9, 0x3, 0x1}, {0x1d, 0x40, 0xa2, 0x2, 0x9, 0x71dbb01c}, {0x0, 0x4, 0x1, 0x3, 0x5, 0x10001}, {0x9, 0x8, 0x0, 0x4, 0x0, 0x7f}, {0x4d2f, 0x3, 0x0, 0x4, 0x9, 0x10}, {0x7afe, 0x5, 0xcca9, 0x6, 0xb6, 0x81}, {0x523a, 0x9, 0x7, 0x7, 0x7, 0x14be}, {0x9, 0x1, 0xf1, 0x8, 0x8000, 0x4}, {0x1, 0x7fff, 0x0, 0x8, 0xc66, 0x400}, {0x7, 0x8, 0x4ac, 0x800, 0x6, 0x4}, {0x3ff, 0x1ff, 0x5adfa978, 0x3, 0x4, 0x87}, {0x8, 0x4, 0x5, 0x1, 0x216d, 0x1}, {0x4, 0x4aa, 0x7, 0x1, 0x5, 0xfcf3}, {0x9, 0x9, 0x4, 0x100, 0xd1e6, 0x8}, {0x2, 0x0, 0xa, 0xffff7fff, 0x100, 0x1000}, {0x0, 0x0, 0xda, 0x6, 0x5b8c, 0x8a0}, {0x0, 0x2, 0x1, 0x7fff, 0x0, 0x3ff}, {0x800, 0xfffffff8, 0x3, 0x9, 0x6, 0x7}, {0x6e41a264, 0x9, 0x4, 0x2, 0xfffffff9, 0x101}, {0x1, 0x1ff, 0x8, 0xd, 0x8, 0x2}, {0x2b3, 0x9e, 0x2, 0x2, 0x5, 0xc0}, {0x3ff, 0x5, 0x6, 0xffffffff, 0xa, 0xc1bf}, {0x1000, 0x1ff, 0x9, 0x3bd9, 0x1, 0x3}, {0x2, 0x4, 0x4, 0x4, 0x1, 0x8}, {0x3, 0x9, 0x4, 0x0, 0x9, 0x6}, {0x9, 0xff800000, 0x8, 0x8, 0x2, 0x3}, {0x10, 0x0, 0x5, 0x1, 0xba981b54, 0x6}, {0x7ff, 0x5, 0x6, 0x3, 0x7, 0x9}, {0x0, 0x5, 0x4, 0x8, 0xff, 0x10}, {0x7, 0xaec, 0x1, 0xfff, 0x9, 0x2}, {0x6, 0x8, 0x0, 0x1, 0xb, 0x3}, {0x8, 0xffff, 0x7ff, 0x7fffffff, 0x7, 0x80000001}, {0xfe5, 0x1, 0x6, 0xe8d, 0xc, 0xfffffff3}, {0x7, 0xea33, 0xffffffff, 0x7, 0x7, 0x7fffffff}, {0x8, 0x4, 0x7ff, 0x7, 0x65e8, 0x2}, {0x7fffffff, 0x7, 0x3, 0x4, 0x14a, 0x2}, {0x1ff, 0x2, 0x9, 0x48000, 0x7, 0x7ff}, {0x9, 0xfffffffd, 0x5, 0x9, 0x40, 0xd}, {0x3ff, 0x1ff, 0x7, 0x9, 0x2, 0x10001}, {0x93c6, 0xffff, 0x5, 0x101, 0x8}, {0x50000, 0x2, 0x80000000, 0x88, 0xfff, 0xf97}, {0x5, 0x2, 0x12000, 0x4, 0x6fc0887b, 0x7}, {0x7, 0x66, 0x9, 0x401, 0x7, 0x10001}, {0x8, 0x7, 0x0, 0x80000000, 0xd2f1, 0x5}, {0x3, 0x9, 0x3, 0xfff, 0x100, 0x1000}, {0x3, 0x4, 0x5, 0x5, 0x7fffffff, 0x6}, {0x0, 0x7, 0x8, 0x6bcb, 0x2, 0x9}, {0x1c, 0x4, 0x7fff, 0x7fffffff, 0x7fff, 0x7}, {0x100, 0x4d1, 0xd, 0x0, 0x4, 0x5}, {0x2, 0x3b9, 0x1, 0x10000, 0x7, 0x4}, {0x7, 0xfffffffc, 0x1, 0x9, 0x9, 0x3}, {0x1, 0x7, 0xffff, 0x6, 0x0, 0x6}, {0x1, 0x5, 0x3, 0x0, 0x0, 0x8}, {0x6, 0x7, 0x1, 0x5a826ebe, 0x1, 0x6}, {0x3, 0x0, 0x5a3, 0x81, 0x2, 0x40}, {0x5, 0x80000001, 0xc05, 0x6, 0xa, 0x5}, {0xfffffffd, 0x5, 0x7, 0x3, 0x800, 0xc}, {0xf, 0x0, 0x2, 0x3, 0x2, 0xaad}, {0x800, 0x0, 0x7, 0x1, 0x7f, 0x6}, {0x80000000, 0x5, 0x2, 0xeca9, 0x4}, {0xb, 0x7f, 0x4, 0xa, 0x2, 0x80000001}, {0x0, 0x7, 0x6, 0x7, 0x17, 0x3}, {0x3f, 0x9, 0x1, 0x2c, 0x6, 0x9}, {0x10001, 0x707f, 0x3, 0x6, 0x6, 0x80000000}, {0x4, 0xfffffffb, 0x4, 0x2, 0x3, 0x200}, {0x8, 0x4, 0x3, 0x9, 0x7, 0x1}, {0x1, 0x8, 0x1, 0x80, 0x8, 0x40}, {0x9, 0x7, 0x7, 0x0, 0x7, 0x8}, {0x7, 0xa, 0x3, 0x80, 0xc, 0x1}, {0x8, 0x9, 0x7, 0x7ea42da0, 0x9, 0x5}, {0xa, 0x1, 0x1, 0x1e, 0x3, 0x7ff}, {0x80000001, 0x6, 0xa, 0x0, 0x1400000, 0x4}], [{0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x4, 0xd40b63ccd8068180}, {0x3, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x1}, {0x3, 0x3}, {0x5, 0x1}, {0x2}, {0x6c5fd267be7c3bfc}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x0, 0x1}, {0xd559515525f29d2a, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {0x2}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4b1083b0edd180a5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x656c, 0x5, 0x5, 0x5, 0xfff}, 0x2, 0x5, [{0x4, 0xff, 0x9, 0x6, 0x800, 0x80000001}, {0x1ff, 0x96, 0x6, 0xe, 0x1, 0x7b7}]}, [{0xffff84c2, 0x6, 0xa4ab, 0x2c, 0xb5, 0x4}, {0xffff, 0x8, 0x81, 0x4, 0x0, 0x3000}, {0x4, 0xb74, 0x8, 0x9, 0xffff, 0x8}, {0x3, 0x4, 0xf, 0x4, 0x9, 0x5}, {0x4261ba85, 0x6, 0x421, 0x9, 0x22f, 0x46f}, {0x6, 0x2, 0x2, 0xcfe6, 0xd, 0x7}, {0x4, 0x1, 0xffffffff, 0x8, 0x68c2, 0x36}, {0x6, 0x4, 0x5ff7, 0x6aa4, 0xdf, 0x3}, {0x70, 0xffffff81, 0xec, 0x4899, 0x1000, 0x6}, {0xff, 0xe, 0xfffffff7, 0x1000, 0xa, 0x7}, {0x6, 0x6, 0xfff, 0x0, 0x7, 0xab7}, {0x7, 0x10, 0x3, 0xda, 0x400, 0x48}, {0x9, 0x3, 0x80000000, 0x10000, 0x4, 0xb}, {0x10000, 0x1ff, 0xfffffff9, 0x8, 0x2, 0x797}, {0x8, 0x6, 0x10000, 0x101, 0x7, 0x1a7}, {0xa, 0x4, 0x8, 0x9, 0xfffffffb, 0x2}, {0x2, 0x7, 0x1000, 0x5, 0x5, 0x40a}, {0x6, 0xc, 0x25fa9080, 0x5, 0x3, 0xfffffffb}, {0x2, 0x2, 0x0, 0x4, 0xe, 0x2}, {0x6, 0x9, 0x2, 0x3, 0x100, 0x5c9}, {0x0, 0x2, 0x1, 0x8, 0x9, 0x52}, {0xc, 0x9ce6, 0x5, 0x5, 0xc, 0x2}, {0xfffffffb, 0x0, 0x1ff, 0x3, 0xa7, 0x3}, {0x6a2, 0x0, 0x3, 0xffff, 0xffffffff, 0x3}, {0x5, 0x1, 0x7f, 0x6, 0xb7, 0x1000}, {0x5, 0x9, 0x2, 0xfffffff9, 0x3, 0x7}, {0x5, 0x3, 0x6, 0x1, 0x2, 0xd11}, {0x401, 0x8, 0x2, 0xe3e, 0x3, 0x3}, {0x5, 0x7, 0x6, 0x60, 0x6, 0x6bae}, {0x5, 0x5, 0x7, 0x5, 0x2, 0x2}, {0xbe, 0x1, 0x3ff, 0x2, 0x2, 0x401}, {0xd, 0x7, 0x3, 0x4, 0x6, 0x4}, {0x8, 0x4cf, 0x4, 0xd438, 0x59, 0x5}, {0x4, 0x401, 0x7f, 0xa69c, 0x8, 0xa98}, {0x1, 0x8000, 0x9, 0xfffffff4, 0x4, 0x40}, {0x80, 0xffffffff, 0xa3fc, 0x25cbf6ce, 0xbf, 0x3}, {0x200, 0xa, 0x30, 0xfffffc24, 0xffff0001, 0xfffffffa}, {0x8, 0x2, 0x9f, 0x0, 0x4, 0x4d4f}, {0x6, 0x8000, 0x1, 0xfffffffe, 0x9, 0x3da}, {0x0, 0x25c0000, 0x8, 0x2, 0x4, 0x7}, {0x468f, 0x8, 0x7, 0x7ff, 0x7ff, 0x7}, {0x80, 0x1, 0x3, 0xfffff8d5, 0x8, 0x10000}, {0x261, 0x6, 0x4, 0x4, 0x0, 0x9}, {0x3, 0x6, 0x2, 0x0, 0x0, 0x2}, {0x0, 0x5, 0x4, 0x5, 0xb, 0x10000}, {0x7fff, 0x3, 0xbb5, 0x1000, 0x7fffffff}, {0x7ff, 0x400, 0xf, 0x1000, 0x7, 0x81}, {0x7, 0x52, 0x2, 0x7, 0x1000, 0x3ff}, {0xffffffff, 0xe6, 0x9, 0x1, 0x8000, 0x7}, {0x8, 0x1, 0x3, 0x0, 0x2, 0xc}, {0x10000, 0xb8e1, 0xb51a, 0x3, 0x7, 0xaa4}, {0x1, 0x8, 0xa81f, 0x9, 0x10000, 0xa}, {0x7, 0x3, 0x7, 0x3, 0x9, 0xd}, {0x3ff, 0x10000, 0xffffffff, 0x0, 0xfffffff7, 0x4}, {0x74000000, 0x3, 0x4, 0xf4, 0x60000000}, {0x2, 0x1, 0xebd, 0x3, 0xf, 0x3ff}, {0x6, 0xba8, 0x0, 0x25, 0x8, 0x8}, {0x2, 0xac, 0xa0000000, 0x7e24, 0x80000000, 0x6}, {0x2, 0x80000000, 0x80000001, 0xe35, 0x0, 0x9}, {0x4, 0xe, 0x761, 0x8, 0x6, 0x3ff}, {0x96a4, 0x6, 0xb, 0xfffffffc, 0x4, 0x40}, {0x0, 0xffffffff, 0x1, 0x5, 0x80000000, 0x5}, {0x2, 0x6, 0x400, 0x8, 0x7, 0x6}, {0x1, 0xf0000000, 0x80, 0xf, 0x7, 0xfffffff9}, {0xe4, 0x3, 0x2, 0x5, 0x10000, 0x480b}, {0x7fffffff, 0x67, 0x8000, 0xfffffffd, 0x80000000, 0x9}, {0xb, 0x400, 0x91, 0x400, 0xb56c, 0x100}, {0x7, 0x80000000, 0x4, 0x400, 0x5, 0xa0}, {0x400, 0x8, 0xb965, 0x4, 0xca0, 0x1}, {0x5ce8, 0x6, 0xffffffd7, 0x1ff, 0x9, 0xfffffff3}, {0x80, 0x5, 0x9, 0x200, 0x80, 0x3}, {0x9, 0x200, 0xe, 0x101, 0x6, 0x1}, {0x5, 0x0, 0x2, 0x8000, 0x1e4b, 0x6}, {0x0, 0x2, 0x7, 0x0, 0x6, 0x7}, {0xff, 0x8, 0x6, 0x80000001, 0xffffffff, 0x4}, {0x46, 0x9f00000, 0x6, 0x40, 0x9, 0x9}, {0x6, 0xc, 0x7c06, 0x6, 0x6, 0x10}, {0xa57, 0x5, 0x9, 0x1, 0x8, 0xe54}, {0x101, 0x3, 0x7fffffff, 0x6bb, 0x3, 0x3}, {0xa, 0xce, 0x7ff, 0x4, 0x800, 0x9}, {0x4, 0x9, 0xe, 0xfffffa4f, 0x8, 0xaea}, {0xfffff801, 0x40, 0x3, 0x8, 0x10000, 0x2}, {0x0, 0x832b, 0x4, 0x2, 0x5, 0x8}, {0x6, 0x9, 0x401, 0x7, 0x80000000, 0x4}, {0x1, 0xb, 0x1, 0x5, 0x79e, 0x10001}, {0x4, 0x8, 0x9, 0x0, 0x1, 0x1fb3}, {0x8, 0x400, 0x8, 0x4, 0xffffff32}, {0x8, 0x2, 0x0, 0xe, 0x0, 0x2}, {0x10001, 0x5, 0x8, 0x6, 0x478c, 0x80000001}, {0x1000, 0x6, 0xccb3, 0x3, 0xfffffffe, 0xffffffff}, {0x3ff, 0x0, 0x4, 0x9, 0x9, 0x1}, {0x8, 0x582, 0x3ff, 0x6, 0x0, 0x5783}, {0xfafc, 0xfffffffe, 0x3, 0xb4e, 0x2, 0x20080}, {0x3, 0x1, 0x6cc1a3ee, 0x40, 0xb, 0x9}, {0x7, 0x2, 0x0, 0x8, 0x9, 0x6d28}, {0xfffffff7, 0x7fffffff, 0xb4, 0x200, 0x3, 0xff}, {0xa00000, 0x2, 0x2, 0x1, 0x7, 0x6}, {0xa, 0x8, 0x7fffffff, 0xfffffffa, 0xd6c6, 0x8}, {0xfffffff9, 0x8000, 0xfffffff9, 0x6, 0xab85, 0x7}, {0x3ff, 0x5, 0x1, 0x4, 0x1, 0x10000}, {0x400, 0x380, 0x7, 0x0, 0x7ff, 0x6}, {0xe7, 0x38000, 0x480000, 0x0, 0x3, 0xff}, {0x3, 0x7, 0x3, 0x223f, 0x1, 0xffff}, {0x4, 0x4, 0x4fa1, 0x3d, 0x200, 0x1}, {0x9, 0xcba, 0x7ff, 0x9, 0x8, 0x3}, {0x51c1, 0x0, 0x2, 0x7, 0x200, 0x8}, {0xe, 0x8001, 0xf1, 0x0, 0xff, 0x10000}, {0x9, 0x5, 0xa, 0x5, 0x10, 0x7}, {0x7, 0xc, 0xffff, 0x9, 0xbf6}, {0x9, 0xb, 0x8001, 0x7f, 0x1, 0x5}, {0xef0, 0x8, 0x7, 0x2, 0x8, 0x1}, {0x3, 0x40, 0x2, 0xffffffff, 0xffff, 0x401}, {0x9, 0x7, 0x7, 0x5bf4, 0x8, 0x6}, {0xfffffffb, 0x7, 0x3, 0x8, 0x3, 0xf5e}, {0x80000001, 0x7, 0x1, 0x3, 0x9, 0x6}, {0x9, 0x1ce5, 0x1, 0x8b1, 0x10000, 0x22}, {0xfffffff7, 0x3, 0xff, 0x0, 0x4, 0x3}, {0x7fffffff, 0xa, 0x8, 0xffffffff, 0x8, 0x6}, {0x200, 0x1, 0xe, 0x4, 0x1, 0x5}, {0x473, 0x80000001, 0x80000000, 0x7a46, 0x1, 0x9e}, {0xce94, 0x6, 0x0, 0x8, 0xd, 0x9}, {0x8, 0x2, 0xb, 0x401, 0x7b23f115, 0x3}, {0x3, 0x9, 0x1, 0xa, 0xfb, 0x6}, {0x4, 0x6, 0x28, 0x1, 0x8, 0x100}, {0x80, 0x997c, 0xff, 0x4, 0x81, 0x9d}, {0x2, 0x0, 0xfffff1bb, 0x7, 0x3, 0x4}, {0x8, 0x19, 0x80000000, 0xc0000, 0x1, 0xfffffffc}, {0x9, 0x3, 0x3, 0x0, 0x3, 0x5c5e}], [{0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x2, 0x1}, {0x5, 0xe7e5425b2ee1fbd}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x6}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x5}, {0x5}, {}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4}, {0x3}, {0x5}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x5}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x5}, {}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x7}, {0x5}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x4}, {0xa, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x6}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {}, {0x3}, {0x2, 0x1}]}}]}, {0x40, 0x6, "c553766d4cec930b50fc361db5d9946f24556f9fb7d9a1a943c3ac08293f685421c656d247ba7c84913329f53f37dff8be49a2acba80b4500e96d1e6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0xec, 0xe, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf5}]}, {0xb6, 0x6, "9bfbf2ce3926d992b6a9aef64974a6db2dc05d45ab03712511a49779df98b8fa94ffb716c9885148945428c01cf7b0db17ec37b4533e6c889b3d7ac302fbf12d8b3b1d7bbb0d200f8b8895b01ca6c505093165f667b1495f41de2a645e6e591ec1df7b547dda7406f98312f4ceeb7e972b0c1a8a0a55643ab9a77cd47c798c2c45a5514e97a9bb92181046b35b33dd330c60eace4179d4c63494d34e9de7fe86b7cca37271fcb80e5a5afc9d88d74243d7f4"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_INDEV={0x14, 0x3, 'netdevsim0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x10}}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xd2, 0x58}}, @TCA_RATE={0x6, 0x5, {0x1a, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x1fc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6, 0x2}}, @TCA_ROUTE4_ACT={0x1f0, 0x6, [@m_ct={0x144, 0xc, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}, @TCA_CT_LABELS={0x14, 0x7, "b5e6a827ff512dd1a7a8b3b5256d77d8"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "25167be8a5a2f2632a161d3985c78f3a"}]}, {0xbe, 0x6, "086eb3a40d2e63f67cf9f2e4b1120469ecf571dd68f247a665f7592ff15e74ec9a43d9c0aba68b1472e94bc519ed44a906833abd3dbdf65403fe4ff6d02237d711d74482c4b717a4d4a94c7afc4cf52de3fe52cd0348ea0fbef43b6c254569fd896a0bc6ee52b5e20d41b5afbb2644329c0586908e6d30d32dfca44d2f7d75da0fb0a3db3cf05be54420122842fcab52ccd2e3c2e5cacce901adeaf159bb40b20dda87cd0467f7cb0c5634dcd7682b29c154663485c3c22ee0a8"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xa8, 0x14, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x73, 0x6, "871c714bcdbfd1af4613848eed15cf9e724ea837bdb18dc6334ff903efa4c1144fdaeeffb4c05255cd7936b63072381bb4ea4e98a6b6bc437ddeb8c99067e4e27ed0d68b639b140dbef65e119fd7697ecc3cedf2988627b1c3f4fc254b4af9f82815a2916cb8c8e4077d718981da76"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x1}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x3218}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000)
r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x0, <r6=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0)

2m4.571497025s ago: executing program 37 (id=1439):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x80102, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000540)=@xdp, &(0x7f0000000640)=0x80)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001180)={'lo\x00'})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001280))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x5a}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b700000010000000950000"], &(0x7f0000000500)='GPL\x00', 0x6, 0x100000, &(0x7f0000100700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m1.404243691s ago: executing program 38 (id=1449):
r0 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0xa, 0x0, 0xfffff034}, {0x6, 0x0, 0x40}]}, 0x10)
sendmmsg(r0, &(0x7f0000000100), 0x2e9, 0x700000000000000)

1m54.197430866s ago: executing program 39 (id=1462):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000300))
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
read$FUSE(r5, &(0x7f0000000380)={0x2020, 0x0, <r6=>0x0}, 0x2020)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000023c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
write$FUSE_LSEEK(r5, &(0x7f0000002440)={0x18, 0x0, r6, {0x1b0a6f35}}, 0x18)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002480), r9)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x10c}}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000002680)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)={0x68, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0xffffffffffffffb8, "00112233445566778899aabbccddeeff00112233"}}]}]}, 0x68}}, 0x0)
ioctl$KVM_GET_FPU(r8, 0x81a0ae8c, &(0x7f0000002840))
syz_usb_connect(0x2, 0x24, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1407, 0x1, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xc040}, 0x20005000)

1m49.972877322s ago: executing program 40 (id=1468):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_PMU_CAPABILITY(r2, 0x4068aea3, &(0x7f0000000080)={0xd4, 0x0, 0x7})
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000a80)={{<r3=>0x0, 0x5, 0x10001, 0x6, 0x1, 0x9, 0x7, 0x7bb, 0x4, 0x7, 0xe21a, 0x4, 0x6, 0x1, 0xfffffffffffffffc}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001b40)={{r3, 0x5, 0xfffffffffffffff5, 0x80000000, 0x40, 0x8, 0x0, 0x1, 0x0, 0xed, 0x7, 0xffffffffffffffff, 0x9f2d, 0x9, 0x10001}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x1000, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1m31.62659217s ago: executing program 3 (id=1551):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x801, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102)
syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x109001)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = io_uring_setup(0x2e3b, &(0x7f0000000280)={0x0, 0x5acf, 0x40, 0x0, 0xc7})
shmctl$SHM_LOCK(0x0, 0xb)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4095, 0xfff}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000013c0)='./sys\x00', &(0x7f0000001400)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001480)='./dev\x00', &(0x7f00000014c0)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r3, &(0x7f0000001540)='md0', 0x3)
ioctl(0xffffffffffffffff, 0x400c0930, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./sys/block/md0/md/component_size\x00', 0x1, 0x0)
write(r4, &(0x7f00000015c0)='10', 0x2)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001680)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000016c0)='./tracing\x00', &(0x7f0000001700)='tracefs\x00', 0x0, 0x0)
syz_io_uring_setup(0xefb, 0x0, 0x0, &(0x7f0000001740), &(0x7f0000001780))
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00')
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)

1m28.216514207s ago: executing program 3 (id=1554):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x39b3)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000b80), &(0x7f0000000bc0)=@udp=r0}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000240), 0x10106, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x39b3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, &(0x7f0000000300), &(0x7f0000000340)=@udp=r6}, 0x20)
recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7ff}, 0x1c)

1m26.067950616s ago: executing program 1 (id=1561):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = getpgrp(0xffffffffffffffff)
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r2, 0x890b, &(0x7f0000000080))
prlimit64(r0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x120000, 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000001140)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f000001a140)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f000001a180)='./sys\x00', &(0x7f000001a1c0)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f000001a200)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0)
ioctl$I2C_RETRIES(r4, 0x701, 0x1)
mount(&(0x7f000001a240)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f000001a2c0)='vfat\x00', 0x800041, &(0x7f0000000240)='discard\xad\xf9\xa6\x8aH_=\xe5\xe7DQ\xf2:\xbb\xdf\xcc\xd0\xdb}\xa3\xdbflB\xd6=\x95>90\xa9\xf3\xa4O\"\v\xbd\xd1HOs\xfc\x1aO\xf1\xfbqE)XM\xaa\xc1\xffH\xdb;\x00|}\x04\xad\x99\x00\xcd\x8bW\xde\'\x95\x92\x05\xdc\xe2?=\x87x\xd2\xacF\x7f\xf1\x88\xba^\x1ap\x87Z\xf5T\xff\'$*\xda4\xddG\xdcY\xd1\xef\x02\xdd\xe4\xec\n\xff\x00')
write$eventfd(r4, 0x0, 0xffffffffffffff1b)
bind$alg(0xffffffffffffffff, &(0x7f000001a340)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
bind$vsock_stream(r1, &(0x7f000001a400)={0x28, 0x0, 0x2710, @local}, 0x10)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f000001a440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$inet6(0xa, 0x2, 0x3a)

1m25.551546191s ago: executing program 1 (id=1562):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x141102)
r2 = gettid()
ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, &(0x7f0000000040)={&(0x7f0000000580)=[{0x7, 0x0, 0x0, {0x0, 0xfffffff8}}, {0x7, 0x0, 0x0, {0x80000000, 0xfffffffc}}], 0x2, 0x20, 0x1fe, 0xd0a})
r3 = signalfd4(0xffffffffffffffff, &(0x7f00000005c0)={[0xeffffffffffffffb]}, 0x8, 0x0)
read$FUSE(r3, &(0x7f0000000dc0)={0x2020}, 0x2020)
rt_sigqueueinfo(r2, 0x21, &(0x7f0000002e00)={0x2c, 0x0, 0xfffffffb})
writev(r1, &(0x7f0000002e80)=[{&(0x7f0000002ec0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_open_dev$dri(&(0x7f0000002f00), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002f40)='./sys\x00', 0x1ff)
mount(&(0x7f0000002f80)=@filename='none\x00', &(0x7f0000002fc0)='./sys\x00', &(0x7f0000003000)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000003040)='./config\x00', 0x1ff)
mount(&(0x7f0000003080)=@filename='none\x00', &(0x7f00000030c0)='./config\x00', &(0x7f0000003100)='configfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000003140)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r4, &(0x7f0000003180)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000031c0)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r5, &(0x7f0000003200)='wwnn=0x1000000044001123,wwpn=0x2000000044001123', 0x2f)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r6, 0x3, 0x1c})

1m23.802392633s ago: executing program 41 (id=1536):
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="35e0e44c8e9e61bf9790ade50713f1000000000085022ca77137f0bd8320bc753c925bbe5ed81901ef4b6b3c016b0ef52f495da527f17cf42609fe809d349edc4f0ef68b5a40c9911d22241d5353eec7886ce9fdee1d803761b71802ff44a03458e0420da72022c09083c1a6a05878a2b74673f29c2d549d959421e94c53081dfa9f3827a3997b31b14367c3c99824abea373ea242b17453d9e4b205fadba339b1742ab664744f87bf08e5c344bd508dee1a97aa39decd6b55ce7ca166157f", @ANYRES32, @ANYBLOB="4400028040000100240001006c625f686173685f"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
fcntl$dupfd(r2, 0x406, r2)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040))
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="35e0e44c8e9e61bf9790ade50713f1000000000085022ca77137f0bd8320bc753c925bbe5ed81901ef4b6b3c016b0ef52f495da527f17cf42609fe809d349edc4f0ef68b5a40c9911d22241d5353eec7886ce9fdee1d803761b71802ff44a03458e0420da72022c09083c1a6a05878a2b74673f29c2d549d959421e94c53081dfa9f3827a3997b31b14367c3c99824abea373ea242b17453d9e4b205fadba339b1742ab664744f87bf08e5c344bd508dee1a97aa39decd6b55ce7ca166157f", @ANYRES32, @ANYBLOB="4400028040000100240001006c625f686173685f"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) (async)
socket(0x10, 0x803, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) (async)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
fcntl$dupfd(r2, 0x406, r2) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async)

1m23.651463199s ago: executing program 1 (id=1565):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0)
r4 = syz_io_uring_setup(0xefd, &(0x7f00000003c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000440)=<r5=>0x0, &(0x7f0000000480)=<r6=>0x0, &(0x7f00000004c0)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000500)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x35, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r8, &(0x7f0000000680)='mydomain / 64\n', 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80)
write(r9, &(0x7f00000007c0)='mydomain / 64\n', 0xe)
io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x402, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x10})
r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000880)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r11, &(0x7f00000008c0)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265"], 0xaf)
r12 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x8c2)

1m21.286301776s ago: executing program 2 (id=1567):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev/sda\x00', &(0x7f0000000100)='ext2\x00', 0x1, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
lseek(r1, 0xffff800000000002, 0x1)
bind(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x2, 0x0, 0x4, 0x2}}, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x33)
ioctl$BLKZEROOUT(r2, 0xc01070ce, &(0x7f0000000040)={0x1, 0xffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000140)='./dev/sda\x00', &(0x7f0000000100)='ext2\x00', 0x1, 0x0) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) (async)
lseek(r1, 0xffff800000000002, 0x1) (async)
bind(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x2, 0x0, 0x4, 0x2}}, 0x80) (async)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x33) (async)
ioctl$BLKZEROOUT(r2, 0xc01070ce, &(0x7f0000000040)={0x1, 0xffff}) (async)

1m21.18212276s ago: executing program 1 (id=1568):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2)
rename(&(0x7f00000001c0)='./file0/file0\x00', 0x0)
r2 = socket(0x15, 0x5, 0x0)
connect$unix(r2, &(0x7f0000002840)=@abs={0xa}, 0x6e)
getsockname(r2, 0x0, &(0x7f00000028c0))
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000700), 0x407f, r4, 0x4}, 0x38)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r0, r0, 0x2f, 0x0, @void}, 0x10)
mq_open(&(0x7f0000000040)='#]#*\x00', 0x40, 0x2, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000740)={0x9, [0x200, 0x8, 0x7f, 0x6, 0x5, 0x8, 0x40, 0x7ff, 0x8001]}, 0x16)
recvmmsg(r6, &(0x7f0000002740)=[{{&(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/17, 0x11}, {&(0x7f0000000900)=""/38, 0x26}, {&(0x7f0000000940)=""/137, 0x89}, {&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000000b00)=""/16, 0x10}, {&(0x7f0000000b40)=""/142, 0x8e}, {&(0x7f0000000c00)=""/189, 0xbd}], 0x8}, 0x21fcd4}, {{&(0x7f0000000d40)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000dc0)=""/32, 0x20}, {&(0x7f0000000e00)=""/48, 0x30}, {&(0x7f0000000e40)=""/201, 0xc9}, {&(0x7f0000000f40)=""/80, 0x50}, {&(0x7f0000000fc0)=""/31, 0x1f}, {&(0x7f0000001000)=""/205, 0xcd}, {&(0x7f0000001100)=""/146, 0x92}, {&(0x7f00000011c0)=""/35, 0x23}, {&(0x7f0000001200)=""/241, 0xf1}], 0x9, &(0x7f00000013c0)=""/248, 0xf8}, 0x6fca24bc}, {{&(0x7f00000014c0)=@alg, 0x80, &(0x7f0000002700)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/198, 0xc6}, {&(0x7f0000002640)=""/58, 0x3a}, {&(0x7f0000002680)=""/118, 0x76}], 0x4}, 0xb9}], 0x3, 0x100, &(0x7f0000002800))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
pselect6(0x900, 0x0, 0x0, &(0x7f00000000c0)={0x1f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000002900)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000002940)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000002980)={@initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x800, 0x1, 0xff, 0x2, 0x0, 0x100}, 0x20)
ioctl(r7, 0x3b8f, &(0x7f0000000700)="280000000600")
bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r5, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r0, 0x4, r0}, 0x10)

1m20.111747413s ago: executing program 2 (id=1569):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x18}}, 0xc000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x20040040)
getpgrp(0x0)
prctl$PR_MCE_KILL(0x35, 0x0, 0x8)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='status\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4004884)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000019400), 0x1, 0x0)
read$msr(r4, &(0x7f00000003c0)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f00000193c0)=0x7)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000019480)={0x3, 0x10, &(0x7f0000019640)=ANY=[@ANYBLOB="180800000000000000000000000000001812", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m19.17253061s ago: executing program 2 (id=1570):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x3, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e, 0x3}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8)
mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f0000000440)='debugfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x4)
r1 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f000004b680)=0x410000002)
r2 = syz_open_procfs$namespace(0x0, &(0x7f000004b6c0)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f000004b700)={{}, {0x0, 0x80000000}})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f000004b740)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f000004b780)={0x2020}, 0x2020)
inotify_init1(0x0)
openat(0xffffffffffffff9c, &(0x7f000004d7c0)='./binfmt/status\x00', 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r5 = getpgrp(0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)

1m18.532647487s ago: executing program 2 (id=1571):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000240)={0x7, 0x5, @name="752a4b1dc17809b7afc4973022e1a2d305757e44ea8b3e89a76365556d16fcda"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000380)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102)
writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@generic={0x1, 0xff, 0x3c40})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'netdevsim0\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000740)='bridge0\x00')
socket(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000ac0)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r5, <r8=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x21, &(0x7f0000000d40)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000780))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000007c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}})

1m17.364390299s ago: executing program 2 (id=1572):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0)
r4 = syz_io_uring_setup(0xefd, &(0x7f00000003c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000440)=<r5=>0x0, &(0x7f0000000480)=<r6=>0x0, &(0x7f00000004c0)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000500)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x35, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r8, &(0x7f0000000680)='mydomain / 64\n', 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80)
write(r9, &(0x7f00000007c0)='mydomain / 64\n', 0xe)
io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x402, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x10})
r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000880)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r11, &(0x7f00000008c0)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265"], 0xaf)
r12 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x8c2)

1m16.352417496s ago: executing program 2 (id=1573):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x2274, &(0x7f0000000d80)={[{0xd7, 0x4e00, "8eeefc8d85e352398fd488de760a08a988e854c78b712caf60eb75ac9bffdedf36a6c32737741ae554958ab72743b39cc3b7f99074edd11ef7f0944c79a1a78e366a22ab64a3981cd0fce1b2465f770aba474f5fcdd726a97e51de421ab62c125847c90570a253b535e1346b1187fd62d7cb7dbca9925ce542699fbf101ff802b65de194112a0f3e4705afe5e8c356fd3b70edec9be1eb6813dab952e0a62fc3d7b6b1f6094a371c73b66046365d174e42d3c9686157e275f735e7ab888c3cf52555e851d4234d64ed0336f25a900a713978f87f7af9e2"}, {0x1000, 0x4e00, "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"}, {0x1000, 0x4e00, "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"}, {0xd1, 0x4e00, "f8cea2cc152c465455d8c4db7232b3c3f72e3bb0365a5276769fd792e8ec173a1237798de552dfbf93574f173e83bc561cf5e56495aec8070988cf6f6582292838af70b43718c2bf942b92b61b02159eeb72e965349c69c1e2894c6219ef946d164d8ab67e255563225ca6575794e22b501bf05118b039843a38ada49944c59a7b2f99bd86627c194e25040a3f11a8b42a6b988fc4596037927c8d427e7b9dba756d2d7782d6db7d52083238243bc003b351b8ad5cde386021e75d89e27c22bbc4c78df8a71a7becdf6bcd4211f48b4377"}, {0xb2, 0x4e00, "36144acea524b5fe2f28772b5054a46237fe2925074d2e891bbe665d2f5a10d8af4559a2ab06e6bff61cf0a0292dcaafbea360db7db2d8b4c2e7d17af478d941645c0b95c52c6d10bb06d3b6afb4a393e6dc61a632a5faf8e8ebbf805f56532379c830546e755c82a84bbb1675e5cb5057b59917a322122ddb7e6ba6affac2123e8afa3142038e5c301caf286fb4870b7dcd1565884fc4ac7467e9c5525b0b551abd406fb1b476efffe5e2f12b0f89f29d7e"}]})
epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000040), 0x318, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000080), 0xb54b, 0x80)
epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0xc792]}, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x3)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000280))
arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f00000002c0))
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
dup(0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd.rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0])
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m12.602639592s ago: executing program 42 (id=1555):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x178)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345)
r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil)
fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x200a7a)
sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x4)
r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019580)=0x410000002)
syz_open_procfs(0x0, &(0x7f00000195c0)='net/tcp6\x00')
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x2, 0x5, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x100054, 0x0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000019600), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000019640)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b)
mount(&(0x7f00000196c0)=@filename='mtd0\x00', &(0x7f0000019700)='./file0\x00', &(0x7f0000019740)='jffs2\x00', 0x800040, 0x0)
chdir(&(0x7f0000019780)='./file0\x00')
creat(&(0x7f00000197c0)='./file0\x00', 0x40)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000198c0)=@o_path={&(0x7f0000019900)='mtd0\x00'}, 0x18)

1m12.554247831s ago: executing program 43 (id=1554):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x39b3)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000b80), &(0x7f0000000bc0)=@udp=r0}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000240), 0x10106, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x39b3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, &(0x7f0000000300), &(0x7f0000000340)=@udp=r6}, 0x20)
recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7ff}, 0x1c)

1m4.997864752s ago: executing program 0 (id=1585):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xf5ff, 0x0, 0x6, 0x0, @remote, @local}, {{0x1000, 0x2000, 0x1, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xffff, 0x0, 0x0, {[@window={0x3, 0x3, 0xf}, @timestamp={0x8, 0xa, 0x18}]}}}}}}}, 0x0)

1m4.905228759s ago: executing program 44 (id=1568):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2)
rename(&(0x7f00000001c0)='./file0/file0\x00', 0x0)
r2 = socket(0x15, 0x5, 0x0)
connect$unix(r2, &(0x7f0000002840)=@abs={0xa}, 0x6e)
getsockname(r2, 0x0, &(0x7f00000028c0))
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000700), 0x407f, r4, 0x4}, 0x38)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r0, r0, 0x2f, 0x0, @void}, 0x10)
mq_open(&(0x7f0000000040)='#]#*\x00', 0x40, 0x2, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000740)={0x9, [0x200, 0x8, 0x7f, 0x6, 0x5, 0x8, 0x40, 0x7ff, 0x8001]}, 0x16)
recvmmsg(r6, &(0x7f0000002740)=[{{&(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/17, 0x11}, {&(0x7f0000000900)=""/38, 0x26}, {&(0x7f0000000940)=""/137, 0x89}, {&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000000b00)=""/16, 0x10}, {&(0x7f0000000b40)=""/142, 0x8e}, {&(0x7f0000000c00)=""/189, 0xbd}], 0x8}, 0x21fcd4}, {{&(0x7f0000000d40)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000dc0)=""/32, 0x20}, {&(0x7f0000000e00)=""/48, 0x30}, {&(0x7f0000000e40)=""/201, 0xc9}, {&(0x7f0000000f40)=""/80, 0x50}, {&(0x7f0000000fc0)=""/31, 0x1f}, {&(0x7f0000001000)=""/205, 0xcd}, {&(0x7f0000001100)=""/146, 0x92}, {&(0x7f00000011c0)=""/35, 0x23}, {&(0x7f0000001200)=""/241, 0xf1}], 0x9, &(0x7f00000013c0)=""/248, 0xf8}, 0x6fca24bc}, {{&(0x7f00000014c0)=@alg, 0x80, &(0x7f0000002700)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/198, 0xc6}, {&(0x7f0000002640)=""/58, 0x3a}, {&(0x7f0000002680)=""/118, 0x76}], 0x4}, 0xb9}], 0x3, 0x100, &(0x7f0000002800))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
pselect6(0x900, 0x0, 0x0, &(0x7f00000000c0)={0x1f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000002900)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000002940)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000002980)={@initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x800, 0x1, 0xff, 0x2, 0x0, 0x100}, 0x20)
ioctl(r7, 0x3b8f, &(0x7f0000000700)="280000000600")
bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r5, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r0, 0x4, r0}, 0x10)

1m4.897383312s ago: executing program 0 (id=1587):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0xc01, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040))
shutdown(0xffffffffffffffff, 0x1)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xf}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000900)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'bond0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r5, @ANYBLOB="60bc010004a701003c001280"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'vcan0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'team0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'bond0\x00', <r8=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000b40)={@remote, @private, <r9=>0x0}, &(0x7f0000000b80)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c40)={'erspan0\x00', &(0x7f0000000bc0)={'ip_vti0\x00', <r10=>0x0, 0x8, 0x700, 0x10000, 0x0, {{0xe, 0x4, 0x1, 0x0, 0x38, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, {[@timestamp_prespec={0x44, 0x24, 0x2f, 0x3, 0x0, [{@broadcast, 0x8}, {@local, 0x648}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000c80)={@empty, <r11=>0x0}, &(0x7f0000000cc0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wg2\x00', <r12=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d80)=0x14)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000dc0)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000ec0)={'ip6_vti0\x00', <r16=>0x0, 0x27, 0x10, 0x1, 0x5c4, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x700, 0x7800, 0xf, 0xeae}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'batadv_slave_1\x00', <r17=>0x0})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001540)={&(0x7f0000000fc0)={0x538, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd15}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}, {{0x8, 0x1, r3}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x41c}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r7}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r15}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}]}}]}, 0x538}, 0x1, 0x0, 0x0, 0x8001}, 0x40000)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_connect$uac2(0x0, 0xee, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000ff1e0400304000010203010902dc000301090004080b0000010520030904000000010120000924010200022f00200c2403050000d501fb7b000c0a240b01058fc2ee75f5102402020302040b96bdd600000a010809040100000102200009040101010102200012240202b7e30008037558664e29534f3895090501091000080c0808250182062d05000904020000010220000904020101010220000d2402010304096e2a6062fc450924020104090401090a240202b904000006000c24020208005b00f3cbb347092402018102000002062402010103090582091000010604082501833f07fc00"], &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x0, 0x4, 0x9, 0x8, 0x6c}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x500a}}, {0xf2, &(0x7f0000000300)=@string={0xf2, 0x3, "c1006d6ab53c009e420ee4c198cc9dcd6e0302ae4fa7df79a586d378be4bd676a3afd1084cc85bf952c2f6ccbf5c36f4c2f20afdc97ed75e22e507de3a009412d493412fdf93d371f7b999cdccd1dc3c4c36d647e99814547bb4a82480bf6f64548a9e6a84844a0054d5cb77468744355782a159e581df1b246331341e7fe7481edbc39bad537d8ef4af99fbd32d0586f759abed246cacc00d411737dec8ac78a14b63192a191fb487bebea9ce7b670ca392177e909f378d91adfbc51a10fcbbeafd97b460f095af29a07b0423e01c6ea2a6b3d7d315c00598d4d12a11325bed05a62e5b47a8999ad1a225af3e051593"}}, {0x27, &(0x7f0000000400)=@string={0x27, 0x3, "46fb8553d32f1c3e0f6daa10c188d18c11e8463dbfbf90f82fbd8522fc6a4d5db867a0f97b"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1007}}, {0x1e, &(0x7f0000000480)=@string={0x1e, 0x3, "1d0032eefeed22a1129a0f0bcc729041bfb785c9b03d3fcabd3ad3b1"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x401}}]})
mount$bind(0x0, 0x0, 0x0, 0x2102404, 0xfeffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

1m3.010815126s ago: executing program 0 (id=1588):
r0 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000000)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x30}, 0x1, 0x0)
write$nsim_port_qreset(r0, &(0x7f0000000080)={0x30, 0x20, 0x33}, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f00000003c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f0000001280)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x20000001}}], 0x1, 0x24044084)
recvmmsg(r4, &(0x7f0000000500), 0x10106, 0x2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000280)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x5)
r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000600)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000640)={0x8, "b546baa5cc590d30d4d8b40d29968173b959ebab028deda525e19bdeffafde25"})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)

1m1.408641482s ago: executing program 0 (id=1589):
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa)
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff4001221800090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000100))
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000440), 0xa, 0x62080)
ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000580)={0x2, 0xe2c4b4808a3496b7, 0x7fff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2200000004"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4)
waitid$P_PIDFD(0x3, r1, &(0x7f00000002c0), 0x1, &(0x7f0000000480))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000280)={"b614419daff75fbdcb86ed7e224caa5fc6dc81f69b1a0006be1266fb112c40b5"})
ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f0000000000))

1m0.851518071s ago: executing program 45 (id=1573):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x2274, &(0x7f0000000d80)={[{0xd7, 0x4e00, "8eeefc8d85e352398fd488de760a08a988e854c78b712caf60eb75ac9bffdedf36a6c32737741ae554958ab72743b39cc3b7f99074edd11ef7f0944c79a1a78e366a22ab64a3981cd0fce1b2465f770aba474f5fcdd726a97e51de421ab62c125847c90570a253b535e1346b1187fd62d7cb7dbca9925ce542699fbf101ff802b65de194112a0f3e4705afe5e8c356fd3b70edec9be1eb6813dab952e0a62fc3d7b6b1f6094a371c73b66046365d174e42d3c9686157e275f735e7ab888c3cf52555e851d4234d64ed0336f25a900a713978f87f7af9e2"}, {0x1000, 0x4e00, "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"}, {0x1000, 0x4e00, "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"}, {0xd1, 0x4e00, "f8cea2cc152c465455d8c4db7232b3c3f72e3bb0365a5276769fd792e8ec173a1237798de552dfbf93574f173e83bc561cf5e56495aec8070988cf6f6582292838af70b43718c2bf942b92b61b02159eeb72e965349c69c1e2894c6219ef946d164d8ab67e255563225ca6575794e22b501bf05118b039843a38ada49944c59a7b2f99bd86627c194e25040a3f11a8b42a6b988fc4596037927c8d427e7b9dba756d2d7782d6db7d52083238243bc003b351b8ad5cde386021e75d89e27c22bbc4c78df8a71a7becdf6bcd4211f48b4377"}, {0xb2, 0x4e00, "36144acea524b5fe2f28772b5054a46237fe2925074d2e891bbe665d2f5a10d8af4559a2ab06e6bff61cf0a0292dcaafbea360db7db2d8b4c2e7d17af478d941645c0b95c52c6d10bb06d3b6afb4a393e6dc61a632a5faf8e8ebbf805f56532379c830546e755c82a84bbb1675e5cb5057b59917a322122ddb7e6ba6affac2123e8afa3142038e5c301caf286fb4870b7dcd1565884fc4ac7467e9c5525b0b551abd406fb1b476efffe5e2f12b0f89f29d7e"}]})
epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000040), 0x318, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000080), 0xb54b, 0x80)
epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x4, &(0x7f0000000140)={[0xc792]}, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x3)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000280))
arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f00000002c0))
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
dup(0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd.rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0])
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m0.433055473s ago: executing program 5 (id=1576):
r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000300)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x40000000000009, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x49b5e351, 0xfffffffffffffffc, 0xe8de, 0xfffffffffffffff9, 0x9, 0x1ff, 0x9, 0x1, 0x8, 0x80000000, 0x4, 0x2, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0xffffffff, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x1, 0x1ff, 0x10000, 0x42, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000000, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x80000000006, 0x8001, 0x7, 0x1, 0xec7, 0x3, 0xc58e, 0x3, 0x11ad, 0x0, 0x453, 0x8000, 0x100080, 0x7f, 0x9, 0x200000000001, 0x2, 0x8000000000000000, 0x4, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x4, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0xffffffffffffffff, 0x3, 0x100, 0x3, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x8, 0x6, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]})
r1 = fsopen(&(0x7f0000000800)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000840)='source\x00', &(0x7f0000000880)='//1#7.0.0.1/\xcb7\xcc\b\\\xd0\xe4\x85\xaf\xbb\x97yshare\x00$kV\xd6c\xa5\x19%\xe53\xefV5q\\\xb2.\x86\xd4\xaa\xcd\x05\xc6Z\x12\xb6R?\xee1\xc5\x80~~h\x95\xbd\xdf\xb2\xe1\x1fK>\xe2\x17\xb6F{\xb9\xd9\x00\x00\x00\x01\xf5+x\n\x1c\x06\xc9\xe1\xd9\xed\x9d3\t\xaa\x93\xcf\x1d\xb0\x02\xc3#\xd4>\x9b\x81/\x8e\v\xd5\xa2\x02_\xfc\x1b\xa7\xe7\x1e\xe4w', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000840)='source\x00', &(0x7f0000000880)='//1#7.0.0.1/\xcb7\xcc\b\\\xd0\xe4\x85\xaf\xbb\x97yshare\x00$kV\xd6c\xa5\x19%\xe53\xefV5q\\\xb2.\x86\xd4\xaa\xcd\x05\xc6Z\x12\xb6R?\xee1\xc5\x80~~h\x95\xbd\xdf\xb2\xe1\x1fK>\xe2\x17\xb6F{\xb9\xd9\x00\x00\x00\x01\xf5+x\n\x1c\x06\xc9\xe1\xd9\xed\x9d3\t\xaa\x93\xcf\x1d\xb0\x02\xc3#\xd4>\x9b\x81/\x8e\v\xd5\xa2\x02_\xfc\x1b\xa7\xe7\x1e\xe4w', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000900)='ip\x00', &(0x7f0000000940)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0xfffffffc, 0x0, 0x1, 0x1}, {0x80000009, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000})

1m0.327409736s ago: executing program 5 (id=1591):
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="2e00000013000500000000000000000005", 0x11}], 0x1}, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/cgroup.procs\x00', 0x40000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100088b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000740), 0x2, 0x143102)
writev(r1, &(0x7f0000000780)=[{&(0x7f00000007c0)="94", 0xf000}, {0x0}], 0x2)
listen(0xffffffffffffffff, 0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = socket$inet(0x2, 0x2, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000800), 0x82084, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x1c}}, 0x0)
ioctl$TIOCSTI(r3, 0x5412, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000900)={0x2})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7c)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$vim2m(0x0, 0x5, 0x2)
setresuid(0x0, 0xee00, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000118000/0x4000)=nil)
shmctl$SHM_LOCK(r5, 0xb)

59.038602605s ago: executing program 5 (id=1592):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2})
write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x9, 0x33, 0x40, @remote, @local, {[], "3b0400000000123400"}}}, 0x31)

58.235270872s ago: executing program 5 (id=1593):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0)
syz_io_uring_setup(0xefd, &(0x7f00000003c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000440)=<r4=>0x0, &(0x7f0000000480)=<r5=>0x0, &(0x7f00000004c0)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000500)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x35, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r7, &(0x7f0000000680)='mydomain / 64\n', 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80)
write(r8, &(0x7f00000007c0)='mydomain / 64\n', 0xe)

58.196545852s ago: executing program 0 (id=1594):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0)
r4 = syz_io_uring_setup(0xefd, &(0x7f00000003c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000440)=<r5=>0x0, &(0x7f0000000480)=<r6=>0x0, &(0x7f00000004c0)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000500)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x35, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r8, &(0x7f0000000680)='mydomain / 64\n', 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80)
write(r9, &(0x7f00000007c0)='mydomain / 64\n', 0xe)
io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x402, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x10})
r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000880)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r11, &(0x7f00000008c0)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265"], 0xaf)
r12 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x8c2)

57.183430773s ago: executing program 5 (id=1595):
syz_open_dev$I2C(0x0, 0xda3, 0x2000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000240)={0x7, 0x5, @name="752a4b1dc17809b7afc4973022e1a2d305757e44ea8b3e89a76365556d16fcda"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000380)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102)
writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@generic={0x1, 0xff, 0x3c40})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'netdevsim0\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000740)='bridge0\x00')
socket(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000ac0)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r5, <r8=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x21, &(0x7f0000000d40)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000780))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000007c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}})

56.080507555s ago: executing program 0 (id=1597):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0x4000a2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x3, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfffb, 0xb, 0x46, 0xf1, 0x7, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x4001, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x495, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x3, 0x41, 0x3, 0xee4b, 0x2000003, 0x0, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x7, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x270, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$video(&(0x7f0000000840), 0x4, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000a00)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000bc0)={0x4, 0x2, 0x0, 'queue1\x00', 0xffff0000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000c80)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000cc0)=[@text32={0x20, &(0x7f0000000d00)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000d40)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', <r9=>0x0})
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000e80), 0x0)

53.006912763s ago: executing program 8 (id=1586):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x40000000000009, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x49b5e351, 0xfffffffffffffffc, 0xe8de, 0xfffffffffffffff9, 0x9, 0x1ff, 0x9, 0x1, 0x8, 0x80000000, 0x4, 0x2, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0xffffffff, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x1, 0x1ff, 0x10000, 0x42, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000000, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x80000000006, 0x8001, 0x7, 0x1, 0xec7, 0x3, 0xc58e, 0x3, 0x11ad, 0x0, 0x453, 0x8000, 0x100080, 0x7f, 0x9, 0x200000000001, 0x2, 0x8000000000000000, 0x4, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x4, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0xffffffffffffffff, 0x3, 0x100, 0x3, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x8, 0x6, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]})
r1 = syz_open_dev$sg(&(0x7f00000014c0), 0x6f5e, 0x402)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r2, &(0x7f0000000580)={&(0x7f00000005c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000640)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={0x0, 0x80000001, 0x30}, 0xc)
r3 = dup(r2)
write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[], 0x32600)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000700)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000740)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001500)={0x0, 0x9, 0x41d})

52.64322983s ago: executing program 8 (id=1600):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000037c0), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000003800)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000300), 0x7, 0x3)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000340)={0xd, 0x100, 0x1, {0x5, 0x2, 0x35b, 0x3}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003840)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x2, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000003880)={'syzkaller0\x00', 0x1})
r6 = gettid()
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000100)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r7, 0x1, &(0x7f0000000180), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
capget(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0xfffffff1, 0x7fffffff, 0x4000000, 0x3, 0xf95a, 0x3ff})
sendmsg$nl_route_sched(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003940)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000040805000000000000000000000000080600024081000000050003"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4054)
sendmsg$nl_route_sched(r1, &(0x7f0000003980)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003a00)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
write$tun(r0, &(0x7f0000003a80)=ANY=[@ANYBLOB="ffffffffffff525400123456ed3e000a22010008"], 0x3a)

50.554069594s ago: executing program 8 (id=1602):
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="2e00000013000500000000000000000005", 0x11}], 0x1}, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/cgroup.procs\x00', 0x40000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100088b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000740), 0x2, 0x143102)
writev(r1, &(0x7f0000000780)=[{&(0x7f00000007c0)="94", 0xf000}, {0x0}], 0x2)
listen(0xffffffffffffffff, 0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = socket$inet(0x2, 0x2, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000800), 0x82084, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x1c}}, 0x0)
ioctl$TIOCSTI(r3, 0x5412, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000900)={0x2})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7c)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$vim2m(0x0, 0x5, 0x2)
setresuid(0x0, 0xee00, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000118000/0x4000)=nil)
shmctl$SHM_LOCK(r5, 0xb)

49.136406096s ago: executing program 8 (id=1604):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid() (async)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpgrp(0x0) (async)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x59)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6)
mmap(&(0x7f00003ce000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0xa0010, 0xffffffffffffffff, 0x1b5cb000) (async)
mmap(&(0x7f00003ce000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0xa0010, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) (async)
r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f000004b680)='/proc/crypto\x00', 0x0, 0x0)
lseek(r5, 0x7fffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000004b6c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000004b6c0)={<r6=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f000004b700)={{}, &(0x7f000004b740), 0x0}, 0x20)
sendmsg$inet(r6, 0x0, 0x24005800)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
ptrace(0x10, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)

47.477755463s ago: executing program 8 (id=1605):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0)
r4 = syz_io_uring_setup(0xefd, &(0x7f00000003c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000440)=<r5=>0x0, &(0x7f0000000480)=<r6=>0x0, &(0x7f00000004c0)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000500)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x35, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r8, &(0x7f0000000680)='mydomain / 64\n', 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80)
write(r9, &(0x7f00000007c0)='mydomain / 64\n', 0xe)
io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x402, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x10})
r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000880)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r11, &(0x7f00000008c0)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265"], 0xaf)
r12 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x8c2)

47.337476344s ago: executing program 6 (id=1606):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
rename(0x0, &(0x7f00000002c0)='./file0/../file0/file0\x00')
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'netdevsim0\x00', &(0x7f0000000340)=@ethtool_gfeatures={0x33}})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r5=>r0, {0x4, 0x5}}, './file0\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000013000100"/20, @ANYRES32=0x6, @ANYBLOB="0000b500000000001400030073797a3fa4ea25"], 0x34}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000280)={0xd3f, 0x80, 0x1, 0x6}, 0x10)
ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f00002e3000/0x3000)=nil, 0x3000}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001500000008000300", @ANYRES32=r2, @ANYBLOB="ed5e006bbed15fbae4261f4c90b5de28a20e4c613f679682f8a78e2a6d35abcec42f1bf3c09f3c0834159638bdccd15ce0dbe77efc7263be67"], 0x1c}}, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100))

47.139208543s ago: executing program 6 (id=1607):
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f80), r0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf254b0000000e0001006e65746465767369"], 0x3c}, 0x1, 0x0, 0x0, 0x24004010}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00')
epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000003c0)={0x4000000e})
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18)

46.180732976s ago: executing program 6 (id=1608):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f00000000c0)={<r1=>0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000180)=0x84)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
getsockopt(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup(r3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}, @in={0x2, 0x4e24, @local}], 0x2c)
setsockopt$inet_sctp_SCTP_EVENT(r4, 0x84, 0x7f, &(0x7f0000000000)={r1, 0x800b, 0x1}, 0x8)
sendmsg$inet6(r3, &(0x7f00000005c0)={&(0x7f0000000600)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000680)='j', 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x195, 0xfffffffd, 0x5}, 0x9c)

45.765457015s ago: executing program 6 (id=1609):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x178)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345)
r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil)
fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x200a7a)
sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x4)
r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019580)=0x410000002)
syz_open_procfs(0x0, &(0x7f00000195c0)='net/tcp6\x00')
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x2, 0x5, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x100054, 0x0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000019600), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000019640)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b)
mount(&(0x7f00000196c0)=@filename='mtd0\x00', &(0x7f0000019700)='./file0\x00', &(0x7f0000019740)='jffs2\x00', 0x800040, 0x0)
chdir(&(0x7f0000019780)='./file0\x00')
creat(&(0x7f00000197c0)='./file0\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000019800)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000019840)='./proc\x00', &(0x7f0000019880)='proc\x00', 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000198c0)=@o_path={&(0x7f0000019900)='mtd0\x00'}, 0x18)

45.029190633s ago: executing program 8 (id=1610):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x442, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
sendmsg$can_bcm(r0, 0x0, 0x8050)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000"], 0x0, 0x4a, 0x0, 0x200a}, 0x28)
r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0)
read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019480)=0xaf)
syz_open_dev$usbmon(&(0x7f00000194c0), 0x0, 0x20120)
r4 = socket(0xa, 0x1, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000019500), 0x42002)
poll(&(0x7f0000019580), 0x0, 0xfbe)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000195c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000019700)=ANY=[@ANYBLOB], 0x110)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r6, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x3c)

44.249629406s ago: executing program 6 (id=1612):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x39b3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x4, &(0x7f00000007c0)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x4, 0xc3, &(0x7f0000000940)=""/195, 0x0, 0x20, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000a40), 0x8, 0x10, &(0x7f0000000a80), 0x10}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000b80), &(0x7f0000000bc0)=@udp=r0}, 0x20)
setresuid(0xffffffffffffffff, 0x0, 0x0)
close(r2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000240), 0x10106, 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x39b3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
fcntl$setstatus(r6, 0x4, 0x42400)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, &(0x7f0000000300), &(0x7f0000000340)=@udp=r6}, 0x20)
recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7ff}, 0x1c)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0)

43.147988368s ago: executing program 6 (id=1613):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='adfs\x00', 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x20000)
ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f00000010c0))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000000c0)=@other={0x20300002000006a0, 0x0})
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000001080)={&(0x7f0000000440)=@generic={0x15, "544316f7752672964d1f0dba5323752c61d5ba1aec95bfbc422a82de1fa723f46c96a32d0a4391791293a11f492b226be104771f8d750b307c596da4c77cff0d7103d3e0a7ee9c17ad51f942fec852ca29595bc54defe2a50367d15c6ad8611953ad1fe65263232ccace08902fb0d94bd27388523ac91effbbc24adb7ddb"}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)="a57e039d00b99532ceb91e1f82cd94cdc35a9668486c9a865b5c8f290fec3091add211dc84df9e16c28b2f6d8b8c9fcfbb42b0149b4706598f7bc12928c9ade03a39a970995b7072993124bc553215605c6673", 0x53}, {&(0x7f0000000540)="6903b269a21a4ad3f37e71e51fe66180d5d9cbccd101ced8ffbf783e17584ac41330652d87c4b1c99128946ecd6b095cf80d6b96aa96560f00f3649bbbcb92b2e25797414ebe54ac48c24f161a05b900308dee5827650cb0a16bb5786c94bde480e1b3482ccd0492b6baf1d47b9f9e89eab1fbc2db4a80be201ccb90446a", 0x7e}, {&(0x7f00000005c0)="26942c47c10f9de76dd367d71d5b1fb2e0133bf31e6472c7eefe2fba2a4cac5799c5d73a09bcde724125470ffa338ac44386bd4361ac204da54055ecefe60296eed56a13d231dba4fbddd8e13e9398837c45fb3712d17e5b60a40dc3298d0d3c8aaec5273a140f0240061a3a76740070ea9829240ebd115119af221b5f224530a789ce6321efd0c10b3804d8f1420a1cae28720dfb3921591fb8941ac1be2ea68a5d201bb0d849b1751a97a5a0d017f707187b34a4", 0xb5}, {&(0x7f0000000680)="5a32c8f906898c3c27ed7d2beb42c9bb833808abcd5995b9b278f6607ce9b5998d468ba3ac083592cc23032ca61ddb226e8e7c0d2644bb38fe2f28115b33213d45421c1d982c6592e22b3c07fa9fc4d51892f102dbb8a72f6f7ab8a17322e458025a6827945f85a1", 0x68}, {&(0x7f0000000700)="5ee78bfb15f4f941c1343cdf4e76e2f0faa6eac05692ce9a533f768df7690a02bd51d2aff42e4d2ef1049c37fbd9ed9dbddefb8b366a48cdba8742fb69dfe71d5c51657e9e42b20730f0f45c16ccb95e9e730c8897547bd0393931374b4b6774a46d61db64f698b3bf1c19b878ff61a8eee6ef849d8566cf6c215edc91770bb89c1ce86ab307f1ca719ea15c4569168d8da63d78196cb8caab40e7d7718683d9a55d6d645ba294db389361f9fed559113a811e572a18eaabe01e", 0xba}, {&(0x7f00000007c0)="6c1c1a10ab4fdd340b726671052dde0e5e99f505fb7f1c9a9aaca5d557ea57ec9e2cb7edc224c449d2b3108827f42473fd79d6d35d099fb739b44ebc948e9affc6b0c877f6206aa7a818746ee09590138fe927206a982c66cb6d66d67e18bdc101bf0ebdff38a07b4766493af2c9613ef32be64d3d10f3ccbfbe91997a26515e9005345fcc7be3f909d21fea15a6f5db7c1ada3cc1c32d6d9c", 0x99}, {&(0x7f0000000880)="7d9d4bf6dba4f4685b517ec9bc9c8aca6cc4f57ad108aad5508eae81a44c84a2a61eafa74d69757a20c1947f7b5e470d00", 0x31}], 0x7, &(0x7f0000000940)=[{0x110, 0x108, 0xaf6, "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"}, {0x100, 0x0, 0xa10, "39867d5f45a6e85bc2aaa052cdb0d42b4e9434f0c02c71578ca3287d5414493fd2b515bd85cc55145192033191a222adef65c93189e4fcffbae07c7a7b46feb580b0eeb6112cc98c793c7ff90c5be3565e9d4a7fdd932d7de168e2ddbfbdc808992fb257d241780bb206a571b426e06d50dd0d9b237d68d9c3b46a92cebd943de0c56a54a5c14d552485f62c98114d5ae055489a1cd3777126efe8a818938eb56a4899ceecabd68bca59bd40038fea8cb91fbfad6d56fbec221d72a1c09ec9ec587cfec7e0da49dbaed8700258e35af423a48fcdb4b2ba2c1fed81e7899dd3f298ef77e292e193a237ae896a"}, {0xd0, 0x10b, 0x2, "af903caa8fc94af4cf59a501d1e7332e7546d7a0db1a3091585e59d5f8eb90c24333519e4e94ba290253f40a30beba2cf067d15dacd352a5a3f8c077029a602bea05bb9ffc78acb264b72c6ac3113f8a9edd589053c046e8e1427fd7c4a4aa10d9a7736c6bbdc1af1122107e243dbffed4853eea178ac5232c8786a4f562932d1a0aac3baa62a5dd78c0d0b3fad13846a6d04a859393a8198a3d3acc65f87cd5f521be9104aad277577dec95869be1c24259d12a094903bcd1"}, {0x30, 0x10b, 0x6, "b6b0b0a9621ec98480433a99db83e5214a83e447b0bae857f0"}, {0xa0, 0x113, 0x2, "18ec0a59ceec0be8101752517abe49d85654fbc4f939efe7a1dfbb4b0e06f1a62cf35dcdbddb065115f33672cca5a43ff873ca9c7dcabecdb2d754dcf84e3180c0b42b8dff202ff62a69ec2f0c46aa648d622088fb25acc5563272cffaa625d58f4a40239e09048e4f8a23cb225d5cb6f4b2dce09086c29e9885235477d41ac9fc360a4a926b9c5113be396e95da5fb7"}, {0xb0, 0x6, 0x6e, "0f63ff3c9c617a2fe9416b9caf6c3c05c78b67259ae584b6344560b0c7000fd9a7ce0aed2982762545616e5e3d8a1005b5ceb51a3614642e0e3f23c1b308c807ccc46a4b863eb5885c09110d7d9c8889e386078dbe44859c315e43f7a42ca941795f2a494f9b567c36ac15f62e1204981df00a6ad8b309ddd14013fad1b930e6e02f2992722440a79b840348a4e2e24b369bc01165d961b3c9aafd23c3b6b3"}, {0x90, 0x117, 0xff, "963eb52f3836ec72d60f8d68de472b3f1c7711f38a02ffde9adb6ff4021c9e5d5b4fc05476db95736771f0b7f9d32f45af1d19d5179b7c035d87dce50a56d65e627ab2b6b5add52ef0c1e8c7cd8ec6bc3a9fa8796370e8cf6ae80329115a9827bed53aba12420723773e36c2a519eefd0a992818ee697fb8d1"}, {0x108, 0x112, 0xc3, "bbea4de2b2cd2d86feedd4dbcafa4cc016d8de343f73d36202947e0ed93eceec33534a0e40e9d2e3a267b64db8e0416502a357ba888f7ccc4302a8c98b37d4c3cbb799f6ae47172b72576aa6fad9e47cf09bdc9ff07494cc202a113e031abdecb7fc031074b9083f06a35c2e1c07e5fb02e64b697384a2e5330ce497fe479cd51fbf9d45d1f8a8ab9557915e02c585c5614b7c8bc31ae737cb52145034ca636d494cd834eed734ed3b0b85ff3a0b0c637ccd3b9f5acebe74d5d9805ba2548ba2bd3fbbfbd0527863d514a3113ace8fae04df55eea4ed75c7edbdbce6a48cd785a91b4d5ccc088c2537075e7df14809b5b867dcb3c17f5a60"}, {0xd8, 0x1, 0x1, "35ad84c58cb49517b1377727dcbdcdd5b34a19bd18c0f29a3ee8990368e19a769023a224dd04b863bde57645dddd4f3290e770ba18bb240d0466baf4e509f169c8f19f0c45b112a4b270ca9a117c91d5a5c379256c5d8de0b6a8310bde9a4aa5b612b355a2a30c44ebc547cc2189b12248894f2a41654917b0dacaa491c882097409adf820d443770388c3a88816344908ece02775de57ab4dc071075ea3b56cb5553eccf8b878de4de50964b0439d73de4a582f7ecf723f532ae11d5742fe3cdea078bc81"}, {0x70, 0x112, 0x6, "bb5ff9bb24f75ebc4eabe2c66a07c59b76b5657c0dcbbcf32cd934f89717d98587b628cbc10ba8c49462ad3e46bee44a2bcf4da378792d8ff4cd9a656ad48eb84f23bc896ad0e38bf3792be92ddc8a92fbc67532e08aa686aed4"}], 0x740}, 0x80)
chroot(0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc7c4ab14ca4cceca}}, @rc={0x1f, @none, 0x9}, @generic={0x23, "f118b1895cec97039b0aa78375a1"}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x101})
r7 = fsmount(r2, 0x0, 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4040040)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000027000100fdff0700001001000000000000005f1f2d2a61ed45833c8d92027b919c9615"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00')
r10 = fsmount(r0, 0x1, 0x70)
r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r11, 0x40085112, &(0x7f0000001200)=@e={0xff, 0xa})
setsockopt$llc_int(r10, 0x10c, 0x3, &(0x7f0000000280)=0x5, 0x4)
symlinkat(&(0x7f0000000140)='./file0\x00', r7, &(0x7f0000000180)='./file0\x00')
unlinkat(r7, &(0x7f00000001c0)='./file0\x00', 0x0)

41.94010119s ago: executing program 46 (id=1595):
syz_open_dev$I2C(0x0, 0xda3, 0x2000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000240)={0x7, 0x5, @name="752a4b1dc17809b7afc4973022e1a2d305757e44ea8b3e89a76365556d16fcda"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000380)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102)
writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@generic={0x1, 0xff, 0x3c40})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'netdevsim0\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000740)='bridge0\x00')
socket(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000ac0)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r5, <r8=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x21, &(0x7f0000000d40)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000780))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000007c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}})

40.889815204s ago: executing program 47 (id=1597):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0x4000a2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x3, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfffb, 0xb, 0x46, 0xf1, 0x7, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x4001, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x495, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x3, 0x41, 0x3, 0xee4b, 0x2000003, 0x0, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x7, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x270, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$video(&(0x7f0000000840), 0x4, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000a00)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000bc0)={0x4, 0x2, 0x0, 'queue1\x00', 0xffff0000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000c80)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000cc0)=[@text32={0x20, &(0x7f0000000d00)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000d40)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', <r9=>0x0})
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000e80), 0x0)

29.91760661s ago: executing program 48 (id=1610):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x442, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
sendmsg$can_bcm(r0, 0x0, 0x8050)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000"], 0x0, 0x4a, 0x0, 0x200a}, 0x28)
r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0)
read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019480)=0xaf)
syz_open_dev$usbmon(&(0x7f00000194c0), 0x0, 0x20120)
r4 = socket(0xa, 0x1, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000019500), 0x42002)
poll(&(0x7f0000019580), 0x0, 0xfbe)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000195c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000019700)=ANY=[@ANYBLOB], 0x110)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r6, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x3c)

29.506472494s ago: executing program 4 (id=1629):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1700, 0x800}, 0x20)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102)
writev(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys_sec\x00', &(0x7f0000000280)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r3, &(0x7f0000000300)=""/9, 0x9)
write$tun(r3, &(0x7f0000000340)=ANY=[], 0xffe)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x4004000)
r4 = openat$comedi(0xffffff9c, &(0x7f0000000400)='/dev/comedi0\x00', 0x1c1202, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000440)={'dt2815\x00', [0x300, 0x3, 0x7ffffffe, 0x8, 0x2f, 0x9, 0x0, 0x890, 0x280ffa, 0xfdfffffb, 0x2, 0xffffffff, 0x1031, 0x100000b, 0xf, 0x40000009, 0xfff7ffa6, 0xd4c, 0x1ff, 0x9ea, 0x3, 0x4000b, 0x8, 0x7, 0x1, 0x8, 0x5, 0x8, 0x4f, 0x2000006, 0x77fd]})
setns(0xc9, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES64=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4)

28.196961328s ago: executing program 4 (id=1631):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}) (rerun: 32)
shutdown(r1, 0x0) (async)
connect$bt_l2cap(r0, &(0x7f0000000580)={0x1f, 0x0, @any, 0xb, 0x2}, 0xe)

27.681547611s ago: executing program 49 (id=1613):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='adfs\x00', 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x20000)
ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f00000010c0))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000000c0)=@other={0x20300002000006a0, 0x0})
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000001080)={&(0x7f0000000440)=@generic={0x15, "544316f7752672964d1f0dba5323752c61d5ba1aec95bfbc422a82de1fa723f46c96a32d0a4391791293a11f492b226be104771f8d750b307c596da4c77cff0d7103d3e0a7ee9c17ad51f942fec852ca29595bc54defe2a50367d15c6ad8611953ad1fe65263232ccace08902fb0d94bd27388523ac91effbbc24adb7ddb"}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)="a57e039d00b99532ceb91e1f82cd94cdc35a9668486c9a865b5c8f290fec3091add211dc84df9e16c28b2f6d8b8c9fcfbb42b0149b4706598f7bc12928c9ade03a39a970995b7072993124bc553215605c6673", 0x53}, {&(0x7f0000000540)="6903b269a21a4ad3f37e71e51fe66180d5d9cbccd101ced8ffbf783e17584ac41330652d87c4b1c99128946ecd6b095cf80d6b96aa96560f00f3649bbbcb92b2e25797414ebe54ac48c24f161a05b900308dee5827650cb0a16bb5786c94bde480e1b3482ccd0492b6baf1d47b9f9e89eab1fbc2db4a80be201ccb90446a", 0x7e}, {&(0x7f00000005c0)="26942c47c10f9de76dd367d71d5b1fb2e0133bf31e6472c7eefe2fba2a4cac5799c5d73a09bcde724125470ffa338ac44386bd4361ac204da54055ecefe60296eed56a13d231dba4fbddd8e13e9398837c45fb3712d17e5b60a40dc3298d0d3c8aaec5273a140f0240061a3a76740070ea9829240ebd115119af221b5f224530a789ce6321efd0c10b3804d8f1420a1cae28720dfb3921591fb8941ac1be2ea68a5d201bb0d849b1751a97a5a0d017f707187b34a4", 0xb5}, {&(0x7f0000000680)="5a32c8f906898c3c27ed7d2beb42c9bb833808abcd5995b9b278f6607ce9b5998d468ba3ac083592cc23032ca61ddb226e8e7c0d2644bb38fe2f28115b33213d45421c1d982c6592e22b3c07fa9fc4d51892f102dbb8a72f6f7ab8a17322e458025a6827945f85a1", 0x68}, {&(0x7f0000000700)="5ee78bfb15f4f941c1343cdf4e76e2f0faa6eac05692ce9a533f768df7690a02bd51d2aff42e4d2ef1049c37fbd9ed9dbddefb8b366a48cdba8742fb69dfe71d5c51657e9e42b20730f0f45c16ccb95e9e730c8897547bd0393931374b4b6774a46d61db64f698b3bf1c19b878ff61a8eee6ef849d8566cf6c215edc91770bb89c1ce86ab307f1ca719ea15c4569168d8da63d78196cb8caab40e7d7718683d9a55d6d645ba294db389361f9fed559113a811e572a18eaabe01e", 0xba}, {&(0x7f00000007c0)="6c1c1a10ab4fdd340b726671052dde0e5e99f505fb7f1c9a9aaca5d557ea57ec9e2cb7edc224c449d2b3108827f42473fd79d6d35d099fb739b44ebc948e9affc6b0c877f6206aa7a818746ee09590138fe927206a982c66cb6d66d67e18bdc101bf0ebdff38a07b4766493af2c9613ef32be64d3d10f3ccbfbe91997a26515e9005345fcc7be3f909d21fea15a6f5db7c1ada3cc1c32d6d9c", 0x99}, {&(0x7f0000000880)="7d9d4bf6dba4f4685b517ec9bc9c8aca6cc4f57ad108aad5508eae81a44c84a2a61eafa74d69757a20c1947f7b5e470d00", 0x31}], 0x7, &(0x7f0000000940)=[{0x110, 0x108, 0xaf6, "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"}, {0x100, 0x0, 0xa10, "39867d5f45a6e85bc2aaa052cdb0d42b4e9434f0c02c71578ca3287d5414493fd2b515bd85cc55145192033191a222adef65c93189e4fcffbae07c7a7b46feb580b0eeb6112cc98c793c7ff90c5be3565e9d4a7fdd932d7de168e2ddbfbdc808992fb257d241780bb206a571b426e06d50dd0d9b237d68d9c3b46a92cebd943de0c56a54a5c14d552485f62c98114d5ae055489a1cd3777126efe8a818938eb56a4899ceecabd68bca59bd40038fea8cb91fbfad6d56fbec221d72a1c09ec9ec587cfec7e0da49dbaed8700258e35af423a48fcdb4b2ba2c1fed81e7899dd3f298ef77e292e193a237ae896a"}, {0xd0, 0x10b, 0x2, "af903caa8fc94af4cf59a501d1e7332e7546d7a0db1a3091585e59d5f8eb90c24333519e4e94ba290253f40a30beba2cf067d15dacd352a5a3f8c077029a602bea05bb9ffc78acb264b72c6ac3113f8a9edd589053c046e8e1427fd7c4a4aa10d9a7736c6bbdc1af1122107e243dbffed4853eea178ac5232c8786a4f562932d1a0aac3baa62a5dd78c0d0b3fad13846a6d04a859393a8198a3d3acc65f87cd5f521be9104aad277577dec95869be1c24259d12a094903bcd1"}, {0x30, 0x10b, 0x6, "b6b0b0a9621ec98480433a99db83e5214a83e447b0bae857f0"}, {0xa0, 0x113, 0x2, "18ec0a59ceec0be8101752517abe49d85654fbc4f939efe7a1dfbb4b0e06f1a62cf35dcdbddb065115f33672cca5a43ff873ca9c7dcabecdb2d754dcf84e3180c0b42b8dff202ff62a69ec2f0c46aa648d622088fb25acc5563272cffaa625d58f4a40239e09048e4f8a23cb225d5cb6f4b2dce09086c29e9885235477d41ac9fc360a4a926b9c5113be396e95da5fb7"}, {0xb0, 0x6, 0x6e, "0f63ff3c9c617a2fe9416b9caf6c3c05c78b67259ae584b6344560b0c7000fd9a7ce0aed2982762545616e5e3d8a1005b5ceb51a3614642e0e3f23c1b308c807ccc46a4b863eb5885c09110d7d9c8889e386078dbe44859c315e43f7a42ca941795f2a494f9b567c36ac15f62e1204981df00a6ad8b309ddd14013fad1b930e6e02f2992722440a79b840348a4e2e24b369bc01165d961b3c9aafd23c3b6b3"}, {0x90, 0x117, 0xff, "963eb52f3836ec72d60f8d68de472b3f1c7711f38a02ffde9adb6ff4021c9e5d5b4fc05476db95736771f0b7f9d32f45af1d19d5179b7c035d87dce50a56d65e627ab2b6b5add52ef0c1e8c7cd8ec6bc3a9fa8796370e8cf6ae80329115a9827bed53aba12420723773e36c2a519eefd0a992818ee697fb8d1"}, {0x108, 0x112, 0xc3, "bbea4de2b2cd2d86feedd4dbcafa4cc016d8de343f73d36202947e0ed93eceec33534a0e40e9d2e3a267b64db8e0416502a357ba888f7ccc4302a8c98b37d4c3cbb799f6ae47172b72576aa6fad9e47cf09bdc9ff07494cc202a113e031abdecb7fc031074b9083f06a35c2e1c07e5fb02e64b697384a2e5330ce497fe479cd51fbf9d45d1f8a8ab9557915e02c585c5614b7c8bc31ae737cb52145034ca636d494cd834eed734ed3b0b85ff3a0b0c637ccd3b9f5acebe74d5d9805ba2548ba2bd3fbbfbd0527863d514a3113ace8fae04df55eea4ed75c7edbdbce6a48cd785a91b4d5ccc088c2537075e7df14809b5b867dcb3c17f5a60"}, {0xd8, 0x1, 0x1, "35ad84c58cb49517b1377727dcbdcdd5b34a19bd18c0f29a3ee8990368e19a769023a224dd04b863bde57645dddd4f3290e770ba18bb240d0466baf4e509f169c8f19f0c45b112a4b270ca9a117c91d5a5c379256c5d8de0b6a8310bde9a4aa5b612b355a2a30c44ebc547cc2189b12248894f2a41654917b0dacaa491c882097409adf820d443770388c3a88816344908ece02775de57ab4dc071075ea3b56cb5553eccf8b878de4de50964b0439d73de4a582f7ecf723f532ae11d5742fe3cdea078bc81"}, {0x70, 0x112, 0x6, "bb5ff9bb24f75ebc4eabe2c66a07c59b76b5657c0dcbbcf32cd934f89717d98587b628cbc10ba8c49462ad3e46bee44a2bcf4da378792d8ff4cd9a656ad48eb84f23bc896ad0e38bf3792be92ddc8a92fbc67532e08aa686aed4"}], 0x740}, 0x80)
chroot(0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc7c4ab14ca4cceca}}, @rc={0x1f, @none, 0x9}, @generic={0x23, "f118b1895cec97039b0aa78375a1"}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x101})
r7 = fsmount(r2, 0x0, 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4040040)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000027000100fdff0700001001000000000000005f1f2d2a61ed45833c8d92027b919c9615"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00')
r10 = fsmount(r0, 0x1, 0x70)
r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r11, 0x40085112, &(0x7f0000001200)=@e={0xff, 0xa})
setsockopt$llc_int(r10, 0x10c, 0x3, &(0x7f0000000280)=0x5, 0x4)
symlinkat(&(0x7f0000000140)='./file0\x00', r7, &(0x7f0000000180)='./file0\x00')
unlinkat(r7, &(0x7f00000001c0)='./file0\x00', 0x0)

26.955427533s ago: executing program 4 (id=1633):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x300, &(0x7f0000000440)={&(0x7f0000000480)={0x64, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}]}, 0x64}}, 0x0) (fail_nth: 2)

26.736220121s ago: executing program 4 (id=1635):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\xf7\xf3\xc1\xa9tproto\x00', &(0x7f0000000ac0)='ud\b\x00', 0x0)

24.967446231s ago: executing program 4 (id=1636):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0)
syz_io_uring_setup(0xefd, &(0x7f00000003c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000440)=<r4=>0x0, &(0x7f0000000480)=<r5=>0x0, &(0x7f00000004c0)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000500)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x35, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r7, &(0x7f0000000680)='mydomain / 64\n', 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80)
write(r8, &(0x7f00000007c0)='mydomain / 64\n', 0xe)

24.404606349s ago: executing program 4 (id=1639):
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(0x0, r0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf254b0000000e0001006e65746465767369"], 0x3c}, 0x1, 0x0, 0x0, 0x24004010}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00')
epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000003c0)={0x4000000e})
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18)

9.219718033s ago: executing program 50 (id=1639):
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(0x0, r0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf254b0000000e0001006e65746465767369"], 0x3c}, 0x1, 0x0, 0x0, 0x24004010}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00')
epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000003c0)={0x4000000e})
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18)

9.051090348s ago: executing program 7 (id=1664):
socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x42})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xfffffffff7110f4c, 0x9a64, 0x8002, 0x200, 0xffefffff, 0x0, 0x0, 0x2, 0x4}}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x178)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f00009d4000/0x3000)=nil, 0x4000)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
getpid()
read$msr(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8.038927486s ago: executing program 9 (id=1665):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
mount(&(0x7f00000003c0)=@filename='mtd0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000740)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000780)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a2)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (fail_nth: 2)

7.990249624s ago: executing program 7 (id=1666):
syz_usb_connect(0x7, 0x1b, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x36, 0x4c, 0xc4, 0x8, 0x12d1, 0x1dc5, 0x2569, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xff, 0x0, 0xd0, 0x1}}]}}, &(0x7f0000001700)={0x0, 0x0, 0xfffffffffffffce8, 0x0})

7.595308267s ago: executing program 9 (id=1667):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pim6reg1\x00'})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
timer_create(0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40045)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2}, &(0x7f0000000140)=<r3=>0x0)
r4 = epoll_create1(0x0)
r5 = syz_open_dev$media(&(0x7f0000000180), 0x105, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f00000001c0)=<r6=>0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r3, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r7 = syz_open_dev$vim2m(&(0x7f0000000240), 0x47b, 0x2)
r8 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
sendfile(r8, r4, &(0x7f0000000440)=0x6, 0x100)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000280)={0xa00965, 0x1})
r9 = getpgrp(0xffffffffffffffff)
sched_setattr(r9, &(0x7f0000000480)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r10, &(0x7f00000004c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r10, 0x28, 0x2, &(0x7f0000000500)=0x33, 0x8)
listen(r10, 0x0)
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r11, &(0x7f0000000540)={0x28, 0x0, 0x2710}, 0x1a)
accept4(r10, 0x0, 0x0, 0x0)

7.318627007s ago: executing program 7 (id=1668):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x90, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000008a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x19b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfc, 0x6, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000008ac0)={0x24, 0x0, 0x0, &(0x7f0000008b00)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_connect$rtl8150(0x4, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0xd, 0xffffffffffffffed, 0x0)
syz_usb_ep_read(r2, 0xd, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0xd, 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000008b40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x23, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000008bc0)=[{&(0x7f0000008c00)="61cc23d4941575be99b80c562e9872f8", 0x10}], 0x100000000000028f, 0x0)
openat$snapshot(0xffffff9c, &(0x7f0000008c40), 0x185301, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000008c80))
ppoll(&(0x7f0000008d00)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000008d40))
r3 = getpid()
connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10)
syz_pidfd_open(r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000008d80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008e00), &(0x7f0000008e40), 0xa7c, r4}, 0x38)
mkdirat(0xffffffffffffff9c, &(0x7f0000008e80)='./mnt\x00', 0x1ff)
mount(&(0x7f0000008ec0)=@filename='mtd0\x00', &(0x7f0000008f00)='./mnt\x00', &(0x7f0000008f40)='jffs2\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000008f80)='./mnt/fillfile\x00', 0x42, 0x9f)
write(r5, &(0x7f0000008fc0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000)

7.157190572s ago: executing program 9 (id=1669):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc, 0x101301)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x206, 0x800, 0xec, 0xffff874c, 0x0})
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @val={@void, {0x8100, 0x3, 0x0, 0x5}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x10, 0x6, 0x0, @broadcast, @remote}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0xffff}}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x40, 0x101)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x100)
r5 = openat$vicodec1(0xffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f00000002c0)={0x3, 0x2, 0x4, {0xd, @vbi={0x8, 0x3, 0x8, 0x43564548, [0x1, 0x1], [0x9, 0xc80], 0x13a}}, 0xffff0001})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0xda, 0x0, 0x1}, 0x48)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x2}, &(0x7f0000000480))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000004c0)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r7 = fsopen(&(0x7f0000000540)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000580)='::%.0.0\xdb\x10\x00', 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
syz_emit_ethernet(0x42, 0x0, 0x0)
r8 = userfaultfd(0x80001)
read(r8, &(0x7f0000000600)=""/153, 0x99)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r6, 0x75, &(0x7f0000000700)}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)

6.720207243s ago: executing program 9 (id=1670):
setuid(0xee00)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80080)
r1 = socket(0x28, 0x5, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@nat={'nat\x00', 0x19, 0x3, 0x3b8, [0x2000000000c0, 0x0, 0x0, 0x2000000002e8, 0x200000000448], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0x714a0048511fcf54, 0x84196190ad82aaf, 'ip6gre0\x00', 'wlan1\x00', 'vcan0\x00', 'xfrm0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x5, 0x3, 0xdada, 'veth1\x00', 'netpci0\x00', 'rose0\x00', 'gretap0\x00', @remote, [0x0, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0xe0, 0x118, 0x150, [@stp={{'stp\x00', 0x0, 0x48}, {{0x83, {0xc5, 0x3ff, 0x9, @multicast, [0x0, 0xff, 0x0, 0x0, 0xff], 0xeb0, 0x3df7, 0xd, 0x0, @local, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x4e22, 0x4e24, 0x9775, 0xfffb, 0x9, 0xfffb, 0x6, 0x8, 0x1ff, 0x1}, 0x204, 0x400}}}], [@snat={'snat\x00', 0x10, {{@random="1fca2b8a3cfd", 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x40, 0x88e5, 'xfrm0\x00', 'ip6_vti0\x00', 'veth0_vlan\x00', 'pimreg\x00', @local, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0xf8, 0x130, [], [@arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x720, {0x1}}}}], @snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x430)
bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)

6.462031911s ago: executing program 9 (id=1671):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0)
syz_io_uring_setup(0xefd, &(0x7f00000003c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000440)=<r4=>0x0, &(0x7f0000000480)=<r5=>0x0, &(0x7f00000004c0)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000500)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x35, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r7, &(0x7f0000000680)='mydomain / 64\n', 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80)
write(r8, &(0x7f00000007c0)='mydomain / 64\n', 0xe)

5.797557689s ago: executing program 3 (id=1627):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x120, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xcc, 0x8, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x88, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x120)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1000000001140106"], 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4040800)

5.345268847s ago: executing program 9 (id=1672):
clock_gettime(0x7, 0x0)
io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0xa477d17605177959)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0))
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x4, &(0x7f0000000000)=[{0x1, 0xd, 0x3, 0xd}, {0x3, 0x5, 0x0, 0x2}, {0x3, 0x5, 0x1, 0x5}, {0x5, 0x32, 0x3, 0x2}]})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', <r2=>0x0, 0x4, 0x7, 0x1, 0x78, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x8000, 0x8000, 0xc000, 0x1900}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newneigh={0x5c, 0x1c, 0x200, 0x70bd28, 0x25dfdbfd, {0x1c, 0x0, 0x0, r2, 0x1, 0x50, 0x4}, [@NDA_FDB_EXT_ATTRS={0x1c, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x2}, @NFEA_DONT_REFRESH]}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_FLAGS_EXT={0xb5}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x5c}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000800)=0x20, 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000900)=r3, 0x4)

5.099254619s ago: executing program 3 (id=1673):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
write$char_usb(r1, &(0x7f0000000280)='0', 0x1)

4.004432606s ago: executing program 1 (id=1632):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x141102)
r3 = gettid()
ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000040)={&(0x7f0000000580)=[{0x7, 0x0, 0x0, {0x0, 0xfffffff8}}, {0x7, 0x0, 0x0, {0x80000000, 0xfffffffc}}], 0x2, 0x20, 0x1fe, 0xd0a})
r4 = signalfd4(0xffffffffffffffff, &(0x7f00000005c0)={[0xeffffffffffffffb]}, 0x8, 0x0)
read$FUSE(r4, &(0x7f0000000dc0)={0x2020}, 0x2020)
rt_sigqueueinfo(r3, 0x21, &(0x7f0000002e00)={0x2c, 0x0, 0xfffffffb})
writev(r2, &(0x7f0000002e80)=[{&(0x7f0000002ec0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_open_dev$dri(&(0x7f0000002f00), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002f40)='./sys\x00', 0x1ff)
mount(&(0x7f0000002f80)=@filename='none\x00', &(0x7f0000002fc0)='./sys\x00', &(0x7f0000003000)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000003040)='./config\x00', 0x1ff)
mount(&(0x7f0000003080)=@filename='none\x00', &(0x7f00000030c0)='./config\x00', &(0x7f0000003100)='configfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000003140)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r5, &(0x7f0000003180)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000031c0)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r6, &(0x7f0000003200)='wwnn=0x1000000044001123,wwpn=0x2000000044001123', 0x2f)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r7, 0x3, 0x1c})

3.023418114s ago: executing program 3 (id=1674):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@mpls_newroute={0x38, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x13}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x14}}, @RTA_OIF={0x8}]}, 0x38}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa400, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
close(0x5)

1.443854334s ago: executing program 7 (id=1675):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x20002, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x61)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
mkdirat(r0, &(0x7f00000001c0)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file1\x00', 0x20400, 0x20)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f00000003c0))
setxattr$security_capability(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x3)
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x4000, 0x20)
fdatasync(r4)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000feffffff01000000040007030000020000000000000000000c0003000700000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1)
write(r0, &(0x7f0000000680)='transport=loop,nqn=testsubsys,disable_sqflow', 0x2c)

743.045432ms ago: executing program 1 (id=1676):
syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[], 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x48a, 0x0, 0x49c8}]})
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000340)=0x4f)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000280)={0x900, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0)
syz_usb_connect$uac2(0x1, 0xbc, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x6, 0x10, 0x9, {0x8, 0xb, 0x0, 0x2, 0x1, 0xc, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x9, 0xfb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x2, 0x6}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x4, 0x33, 0x0, "d0c0d1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x6, 0x30, {0x8, 0x25, 0x1, 0x80, 0x3, 0x7, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x6}, @as_header={0x10, 0x24, 0x1, 0x1, 0xff, 0x0, 0x5, 0x8, 0x6, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x5, 0x9b, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xf5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xb7, 0x80, 0x9, {0x8, 0x25, 0x1, 0x2, 0x3, 0x7f, 0xb}}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x1, 0x4, 0x10, 0x40, 0x4}, 0x1b, &(0x7f0000000140)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0xa1, 0x2, 0xf, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa1, 0x3, 0xd, 0x5, 0x92}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x449}}]})

604.421102ms ago: executing program 3 (id=1677):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc, 0x101301)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x206, 0x800, 0xec, 0xffff874c, 0x0})
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @val={@void, {0x8100, 0x3, 0x0, 0x5}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x10, 0x6, 0x0, @broadcast, @remote}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0xffff}}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x40, 0x101)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x100)
r5 = openat$vicodec1(0xffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f00000002c0)={0x3, 0x2, 0x4, {0xd, @vbi={0x8, 0x3, 0x8, 0x43564548, [0x1, 0x1], [0x9, 0xc80], 0x13a}}, 0xffff0001})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0xda, 0x0, 0x1}, 0x48)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x2}, &(0x7f0000000480))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000004c0)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r7 = fsopen(&(0x7f0000000540)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000580)='::%.0.0\xdb\x10\x00', 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
syz_emit_ethernet(0x42, 0x0, 0x0)
r8 = userfaultfd(0x80001)
read(r8, &(0x7f0000000600)=""/153, 0x99)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r6, 0x75, &(0x7f0000000700)}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)

171.498275ms ago: executing program 7 (id=1678):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004880)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004900)={&(0x7f0000004940)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'wg0\x00'}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0x3c}}, 0x0)

0s ago: executing program 7 (id=1679):
syz_open_dev$I2C(&(0x7f0000000000), 0xda3, 0x2000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000380)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102)
writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@generic={0x1, 0xff, 0x3c40})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'netdevsim0\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000740)='bridge0\x00')
socket(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000ac0)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r5, <r8=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x21, &(0x7f0000000d40)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000780))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000007c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}})

kernel console output (not intermixed with test programs):

erformance. Setting the MTU to 1532 would solve the problem.
[  867.160737][T12309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  867.164352][ T9777] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  867.219821][T12309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  867.219840][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  867.219865][T12309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  867.302000][T12309] hsr_slave_0: entered promiscuous mode
[  867.302941][T12309] hsr_slave_1: entered promiscuous mode
[  867.303597][T12309] debugfs: 'hsr0' already exists in 'hsr'
[  867.303616][T12309] Cannot create hsr debugfs directory
[  867.303814][ T5793] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  867.318056][ T9777] usb 10-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  867.319050][ T9777] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  867.319082][ T9777] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  867.319111][ T9777] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  867.319136][ T9777] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  867.320916][ T9777] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.320940][ T9777] usb 10-1: Product: syz
[  867.320955][ T9777] usb 10-1: Manufacturer: syz
[  867.320972][ T9777] usb 10-1: SerialNumber: syz
[  867.325136][ T9777] usb 10-1: config 0 descriptor??
[  867.333134][ T9777] iguanair 10-1:0.0: failed to get version
[  867.337841][ T9777] iguanair 10-1:0.0: probe with driver iguanair failed with error -90
[  867.388270][ T2257] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  867.454985][ T5793] usb 4-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00
[  867.456280][ T5793] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  867.456303][ T5793] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  867.457407][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  867.457433][ T5793] usb 4-1: SerialNumber: syz
[  868.540545][ T5607] Bluetooth: hci12: command tx timeout
[  868.913674][ T2257] usb 3-1: Using ep0 maxpacket: 16
[  868.915814][ T2257] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  868.917071][ T2257] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  868.917117][ T2257] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  868.917146][ T2257] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  868.917170][ T2257] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  868.917198][ T2257] usb 3-1: config 0 interface 0 has no altsetting 0
[  868.917231][ T2257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  868.990342][ T2257] usb 3-1: config 0 descriptor??
[  869.108272][T12389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  869.109192][T12389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  869.121170][ T5793] usb 4-1: 0:2 : does not exist
[  869.685187][ T2257] logitech-djreceiver 0003:046D:C53A.002B: unknown main item tag 0x0
[  869.685223][ T2257] logitech-djreceiver 0003:046D:C53A.002B: unbalanced collection at end of report description
[  869.685870][ T2257] logitech-djreceiver 0003:046D:C53A.002B: logi_dj_probe: parse failed
[  869.685938][ T2257] logitech-djreceiver 0003:046D:C53A.002B: probe with driver logitech-djreceiver failed with error -22
[  869.762394][ T5793] usb 4-1: USB disconnect, device number 39
[  869.789737][T12409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1529'.
[  869.868216][T12162] udevd[12162]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  869.893263][T12309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  869.946492][  T191] usb 3-1: USB disconnect, device number 50
[  869.968086][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  869.968139][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  870.099856][T12414] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1531'.
[  870.222454][T12309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.469730][T12309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.507294][T12415] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  870.623787][ T5607] Bluetooth: hci12: command tx timeout
[  870.780986][ T5727] usb 10-1: USB disconnect, device number 10
[  871.621126][T12309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  873.677100][T12440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1539'.
[  874.215273][   T31] audit: type=1400 audit(1792247441.993:1428): avc:  denied  { accept } for  pid=12445 comm="syz.3.1542" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  874.246310][T12309] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  874.252730][T12309] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  874.260658][T12309] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  874.287337][T12309] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  874.288231][T12309] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  874.311226][T12309] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  874.311991][T12309] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  874.330755][T12309] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  874.360591][T12453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1544'.
[  874.606900][T12309] 8021q: adding VLAN 0 to HW filter on device bond0
[  874.658957][T12309] 8021q: adding VLAN 0 to HW filter on device team0
[  874.674117][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state
[  874.674203][ T6666] bridge0: port 1(bridge_slave_0) entered forwarding state
[  874.838102][T11609] bridge0: port 2(bridge_slave_1) entered blocking state
[  874.838274][T11609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  875.761228][   T31] audit: type=1400 audit(1792247443.533:1429): avc:  denied  { write } for  pid=12462 comm="syz.2.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  876.597381][T12475] SELinux: syz.9.1540 (12475) wrote to user. This is no longer supported.
[  876.637178][T11611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  876.637201][T11611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  876.883445][  T191] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  876.930947][T12309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  877.009513][T12309] veth0_vlan: entered promiscuous mode
[  877.028185][T12309] veth1_vlan: entered promiscuous mode
[  877.043341][  T191] usb 4-1: Using ep0 maxpacket: 8
[  877.044039][  T191] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  877.047070][  T191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.047096][  T191] usb 4-1: Product: syz
[  877.047112][  T191] usb 4-1: Manufacturer: syz
[  877.047127][  T191] usb 4-1: SerialNumber: syz
[  877.053915][  T191] usb 4-1: config 0 descriptor??
[  877.064669][  T191] gspca_main: se401-2.14.0 probing 047d:5003
[  877.128163][T12309] veth0_macvtap: entered promiscuous mode
[  877.138150][T12309] veth1_macvtap: entered promiscuous mode
[  877.178710][T12309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  877.199084][T12309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  877.344410][T11611] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  877.353996][T12477] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1549'.
[  877.424890][ T5843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  877.424913][ T5843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  877.433325][   T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  877.434223][   T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  877.434292][   T64] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  877.671250][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  877.671273][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  877.732260][  T191] gspca_se401: Bayer format not supported!
[  877.781733][T12493] fuse: Bad value for 'fd'
[  877.941531][T12477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  877.945039][T12477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  877.946621][ T5728] usb 4-1: USB disconnect, device number 40
[  878.033295][  T191] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  878.326220][T12484] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  878.524611][  T191] usb 3-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[  878.545869][  T191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  878.545917][  T191] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  878.545961][  T191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.778032][  T191] usb 3-1: config 0 descriptor??
[  880.417553][  T191] input: HID 0b05:19b6 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0B05:19B6.002C/input/input62
[  881.694402][  T191] asus 0003:0B05:19B6.002C: input,hidraw0: USB HID v0.00 Joystick [HID 0b05:19b6] on usb-dummy_hcd.2-1/input0
[  881.879116][T12493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  881.879478][T12493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  881.922175][T12501] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  881.953512][T12493] random: crng reseeded on system resumption
[  882.240485][T12493] jffs2: notice: (12493) jffs2_build_xattr_subsystem: complete building xattr subsystem, 10 of xdatum (1 unchecked, 9 orphan) and 17 of xref (0 dead, 16 orphan) found.
[  882.278044][   T31] audit: type=1400 audit(1792247450.053:1430): avc:  denied  { write } for  pid=12492 comm="syz.2.1547" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  882.767547][T11575] asus 0003:0B05:19B6.002C: Asus failed to set fn lock: -71
[  882.767919][ T9777] usb 3-1: USB disconnect, device number 51
[  883.995254][T12534] Cannot find add_set index 0 as target
[  883.998569][T12534] IPVS: set_ctl: invalid protocol: 8 10.1.1.0:20001
[  884.017558][ T6666] IPVS: starting estimator thread 0...
[  884.113427][T12536] IPVS: using max 41 ests per chain, 98400 per kthread
[  884.148909][T12539] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  884.570210][T12545] vfat: Unknown parameter 'discard­ù¦ŠH_'
[  884.744666][   T31] audit: type=1400 audit(1792247452.353:1431): avc:  denied  { create } for  pid=12542 comm="syz.1.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  885.443095][   T31] audit: type=1400 audit(1792247453.203:1432): avc:  denied  { write } for  pid=12546 comm="syz.2.1563" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  887.152084][ T5612] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  887.167922][ T5612] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  887.183631][ T5612] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  887.185236][ T5612] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  887.185820][ T5612] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  887.638438][T12557] rxe_eth0 speed is unknown, defaulting to 1000
[  888.521150][T12555] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  889.103347][   T31] audit: type=1400 audit(1792247456.864:1433): avc:  denied  { write } for  pid=12572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  889.253653][ T5612] Bluetooth: hci13: command tx timeout
[  889.314302][   T31] audit: type=1400 audit(1792247457.084:1434): avc:  denied  { write } for  pid=12586 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  889.797621][T12557] bridge0: port 1(bridge_slave_0) entered blocking state
[  889.799481][T12557] bridge0: port 1(bridge_slave_0) entered disabled state
[  889.799610][T12557] bridge_slave_0: entered allmulticast mode
[  889.802994][T12557] bridge_slave_0: entered promiscuous mode
[  889.807572][T12557] bridge0: port 2(bridge_slave_1) entered blocking state
[  889.807711][T12557] bridge0: port 2(bridge_slave_1) entered disabled state
[  889.807826][T12557] bridge_slave_1: entered allmulticast mode
[  889.811008][T12557] bridge_slave_1: entered promiscuous mode
[  889.879098][T12557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  889.881934][T12557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  889.980223][T12557] team0: Port device team_slave_0 added
[  889.983447][T12557] team0: Port device team_slave_1 added
[  890.042682][T12557] batman_adv: batadv0: Adding interface: batadv_slave_0
[  890.042698][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  890.042724][T12557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  890.044951][T12557] batman_adv: batadv0: Adding interface: batadv_slave_1
[  890.044965][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  890.044989][T12557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  890.145625][T12557] hsr_slave_0: entered promiscuous mode
[  890.146173][T12557] hsr_slave_1: entered promiscuous mode
[  890.146695][T12557] debugfs: 'hsr0' already exists in 'hsr'
[  890.146707][T12557] Cannot create hsr debugfs directory
[  890.230568][   T31] audit: type=1400 audit(1792247457.994:1435): avc:  denied  { bind } for  pid=12596 comm="syz.2.1567" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  890.370603][T12602] 8021q: adding VLAN 0 to HW filter on device bond1
[  890.669053][T12557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.789455][T12557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.888939][T12557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  891.103595][T12557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  891.333496][ T5612] Bluetooth: hci13: command tx timeout
[  891.922233][T12557] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  891.961020][T12557] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  891.961671][T12557] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  891.971399][T12557] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  891.974349][T12557] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  892.008434][T12557] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  892.010638][T12557] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  892.030261][T12557] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  893.128800][T12557] 8021q: adding VLAN 0 to HW filter on device bond0
[  893.165081][T12557] 8021q: adding VLAN 0 to HW filter on device team0
[  893.170595][T11611] bridge0: port 1(bridge_slave_0) entered blocking state
[  893.170689][T11611] bridge0: port 1(bridge_slave_0) entered forwarding state
[  893.184101][T11611] bridge0: port 2(bridge_slave_1) entered blocking state
[  893.184235][T11611] bridge0: port 2(bridge_slave_1) entered forwarding state
[  893.422844][ T5612] Bluetooth: hci13: command tx timeout
[  894.047660][T12621] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  894.248575][T12557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  894.309764][T12557] veth0_vlan: entered promiscuous mode
[  894.321774][T12557] veth1_vlan: entered promiscuous mode
[  894.379663][T12557] veth0_macvtap: entered promiscuous mode
[  894.381717][T12557] veth1_macvtap: entered promiscuous mode
[  894.423944][T12557] batman_adv: batadv0: Interface activated: batadv_slave_0
[  894.429472][T12557] batman_adv: batadv0: Interface activated: batadv_slave_1
[  894.526121][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  894.526330][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  894.526448][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  894.526468][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  894.669401][T12436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.669413][T12436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  894.758344][T12436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.758366][T12436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  894.928002][T12636] Cannot find add_set index 0 as target
[  894.941758][T12636] IPVS: set_ctl: invalid protocol: 8 10.1.1.0:20001
[  894.944140][ T5843] IPVS: starting estimator thread 0...
[  895.042293][T12638] IPVS: using max 63 ests per chain, 151200 per kthread
[  895.080843][T12639] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  895.495088][ T5607] Bluetooth: hci13: command tx timeout
[  895.572394][ T5728] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  895.722209][ T5728] usb 1-1: Using ep0 maxpacket: 8
[  895.722753][ T5728] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  895.723683][ T5728] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  895.723733][ T5728] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  895.723762][ T5728] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  895.723787][ T5728] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  895.723814][ T5728] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  895.723838][ T5728] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  895.723877][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  895.936664][ T5728] usb 1-1: GET_CAPABILITIES returned 0
[  895.936709][ T5728] usbtmc 1-1:16.0: can't read capabilities
[  896.152068][    C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  896.154628][T12641] usbtmc 1-1:16.0: Unable to send data, error -71
[  896.306291][ T5728] usb 1-1: USB disconnect, device number 55
[  898.041913][ T5607] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  898.046296][ T5607] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  898.047063][ T5607] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  898.048591][ T5607] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  898.051664][ T5607] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  898.277797][ T5607] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  898.309164][ T5607] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  898.327863][ T5607] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  898.330844][ T5607] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  898.331375][ T5607] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  898.545900][ T6666] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.710258][ T6666] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.914765][ T6666] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  899.049081][T12653] rxe_eth0 speed is unknown, defaulting to 1000
[  899.168050][ T6666] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  899.513216][T12656] rxe_eth0 speed is unknown, defaulting to 1000
[  899.769034][ T6666] bridge_slave_1: left allmulticast mode
[  899.769079][ T6666] bridge_slave_1: left promiscuous mode
[  899.773053][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state
[  899.877659][ T6666] bridge_slave_0: left allmulticast mode
[  899.877685][ T6666] bridge_slave_0: left promiscuous mode
[  899.877884][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state
[  900.148681][ T5607] Bluetooth: hci14: command tx timeout
[  900.297726][T12692] FAULT_INJECTION: forcing a failure.
[  900.297726][T12692] name failslab, interval 1, probability 0, space 0, times 0
[  900.297763][T12692] CPU: 0 UID: 0 PID: 12692 Comm: syz.0.1581 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  900.297794][T12692] Tainted: [L]=SOFTLOCKUP
[  900.297802][T12692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  900.297816][T12692] Call Trace:
[  900.297823][T12692]  <TASK>
[  900.297831][T12692]  dump_stack_lvl+0x100/0x190
[  900.297869][T12692]  should_fail_ex.cold+0x5/0xa
[  900.297901][T12692]  should_failslab+0xc2/0x120
[  900.297934][T12692]  kmem_cache_alloc_noprof+0x92/0x6a0
[  900.297964][T12692]  ? __anon_vma_prepare+0x35a/0x690
[  900.297993][T12692]  __anon_vma_prepare+0x35a/0x690
[  900.298015][T12692]  ? __pfx___pte_alloc+0x10/0x10
[  900.298047][T12692]  __vmf_anon_prepare+0x11f/0x250
[  900.298080][T12692]  do_anonymous_page+0x47d/0x2050
[  900.298104][T12692]  ? find_held_lock+0x2b/0x80
[  900.298136][T12692]  ? __pmd_alloc+0x3f6/0x950
[  900.298168][T12692]  ? __pfx_do_anonymous_page+0x10/0x10
[  900.298189][T12692]  ? do_raw_spin_unlock+0x145/0x1e0
[  900.298219][T12692]  ? _raw_spin_unlock+0x28/0x50
[  900.298247][T12692]  ? __pmd_alloc+0x3fb/0x950
[  900.298280][T12692]  __handle_mm_fault+0x1ff3/0x2f60
[  900.298310][T12692]  ? __pfx___handle_mm_fault+0x10/0x10
[  900.298330][T12692]  ? __pfx_mt_find+0x10/0x10
[  900.298370][T12692]  ? find_vma+0xbf/0x140
[  900.298397][T12692]  ? __pfx_find_vma+0x10/0x10
[  900.298428][T12692]  handle_mm_fault+0x363/0xa20
[  900.298457][T12692]  do_user_addr_fault+0x745/0x12f0
[  900.298496][T12692]  exc_page_fault+0x6f/0xd0
[  900.298527][T12692]  asm_exc_page_fault+0x26/0x30
[  900.298549][T12692] RIP: 0010:__put_user_4+0xd/0x30
[  900.298579][T12692] Code: 66 89 01 31 c9 0f 01 ca e9 d0 ed 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90
[  900.298600][T12692] RSP: 0018:ffffc900049bfe10 EFLAGS: 00050206
[  900.298619][T12692] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000000
[  900.298632][T12692] RDX: ffff88802bf94b00 RSI: ffffffff8262a221 RDI: ffffffff8c625680
[  900.298652][T12692] RBP: 1ffff92000937fc6 R08: 0000000000022f69 R09: 00000000000001d1
[  900.298666][T12692] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000004
[  900.298679][T12692] R13: 0000000000000005 R14: 0000000000000004 R15: dffffc0000000000
[  900.298705][T12692]  ? __might_fault+0x111/0x140
[  900.298732][T12692]  __sys_socketpair+0x120/0x5b0
[  900.298765][T12692]  ? __pfx___sys_socketpair+0x10/0x10
[  900.298801][T12692]  ? __pfx_ksys_write+0x10/0x10
[  900.298833][T12692]  __x64_sys_socketpair+0x96/0x100
[  900.298863][T12692]  ? lockdep_hardirqs_on+0x7d/0x110
[  900.298894][T12692]  do_syscall_64+0x123/0x790
[  900.298928][T12692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  900.298950][T12692] RIP: 0033:0x7f6be4f9e559
[  900.298968][T12692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  900.298987][T12692] RSP: 002b:00007f6be5e23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  900.299006][T12692] RAX: ffffffffffffffda RBX: 00007f6be5225fa0 RCX: 00007f6be4f9e559
[  900.299021][T12692] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000023
[  900.299033][T12692] RBP: 00007f6be5e23090 R08: 0000000000000000 R09: 0000000000000000
[  900.299047][T12692] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  900.299060][T12692] R13: 00007f6be5226038 R14: 00007f6be5225fa0 R15: 00007fff60257c08
[  900.299092][T12692]  </TASK>
[  900.361980][   T31] audit: type=1400 audit(1792247468.074:1436): avc:  denied  { write } for  pid=12681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  900.386483][ T5607] Bluetooth: hci10: command tx timeout
[  900.501062][   T31] audit: type=1400 audit(1792247468.264:1437): avc:  denied  { write } for  pid=12694 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  900.700305][ T6666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  900.748563][T12697] fuse: Bad value for 'fd'
[  900.749571][ T6666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  900.762167][ T6666] bond0 (unregistering): Released all slaves
[  900.787292][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1
[  900.991972][ T9777] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  901.142607][ T9777] usb 1-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[  901.143529][ T9777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  901.143562][ T9777] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  901.143601][ T9777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.174997][ T9777] usb 1-1: config 0 descriptor??
[  901.559845][   T31] audit: type=1400 audit(1792247469.324:1438): avc:  denied  { write } for  pid=12702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  901.623745][T12653] bridge0: port 1(bridge_slave_0) entered blocking state
[  901.623874][T12653] bridge0: port 1(bridge_slave_0) entered disabled state
[  901.624021][T12653] bridge_slave_0: entered allmulticast mode
[  901.629052][T12653] bridge_slave_0: entered promiscuous mode
[  901.723000][ T9777] input: HID 0b05:19b6 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0B05:19B6.002D/input/input63
[  901.784788][   T31] audit: type=1400 audit(1792247469.554:1439): avc:  denied  { write } for  pid=12720 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  901.812596][T12653] bridge0: port 2(bridge_slave_1) entered blocking state
[  901.812745][T12653] bridge0: port 2(bridge_slave_1) entered disabled state
[  901.812880][T12653] bridge_slave_1: entered allmulticast mode
[  901.819652][T12653] bridge_slave_1: entered promiscuous mode
[  901.877765][ T9777] asus 0003:0B05:19B6.002D: input,hidraw0: USB HID v0.00 Joystick [HID 0b05:19b6] on usb-dummy_hcd.0-1/input0
[  902.030341][ T6666] hsr_slave_0: left promiscuous mode
[  902.030981][ T6666] hsr_slave_1: left promiscuous mode
[  902.033538][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  902.033571][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0
[  902.096670][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  902.096694][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1
[  902.143321][ T6666] veth1_macvtap: left promiscuous mode
[  902.143385][ T6666] veth0_macvtap: left promiscuous mode
[  902.143484][ T6666] veth1_vlan: left promiscuous mode
[  902.143632][ T6666] veth0_vlan: left promiscuous mode
[  902.216187][ T5607] Bluetooth: hci14: command tx timeout
[  902.328408][T12697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  902.329977][T12697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  902.350773][T12697] random: crng reseeded on system resumption
[  902.409222][ T6666] team0 (unregistering): Port device team_slave_1 removed
[  902.423521][ T6666] team0 (unregistering): Port device team_slave_0 removed
[  902.452238][ T5607] Bluetooth: hci10: command tx timeout
[  902.477994][T12726] jffs2: notice: (12726) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (1 unchecked, 7 orphan) and 13 of xref (0 dead, 12 orphan) found.
[  902.500050][   T31] audit: type=1400 audit(1792247470.264:1440): avc:  denied  { write } for  pid=12695 comm="syz.0.1582" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  902.609368][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2
[  902.625813][T12653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  902.677301][T12653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  902.677702][T12656] bridge0: port 1(bridge_slave_0) entered blocking state
[  902.677821][T12656] bridge0: port 1(bridge_slave_0) entered disabled state
[  902.677919][T12656] bridge_slave_0: entered allmulticast mode
[  902.680266][T12656] bridge_slave_0: entered promiscuous mode
[  902.700847][ T5607] Bluetooth: hci4: command 0x0406 tx timeout
[  902.735647][T12656] bridge0: port 2(bridge_slave_1) entered blocking state
[  902.735724][T12656] bridge0: port 2(bridge_slave_1) entered disabled state
[  902.735836][T12656] bridge_slave_1: entered allmulticast mode
[  902.737161][T12656] bridge_slave_1: entered promiscuous mode
[  902.833747][T12656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  902.836792][T12653] team0: Port device team_slave_0 added
[  902.839597][T12656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  902.841532][T12653] team0: Port device team_slave_1 added
[  902.931598][T12653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  902.931614][T12653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  902.931636][T12653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  902.983654][T12656] team0: Port device team_slave_0 added
[  902.984302][T12653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  902.984316][T12653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  902.984340][T12653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  902.986321][T12656] team0: Port device team_slave_1 added
[  903.081491][T12656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  903.081502][T12656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  903.081517][T12656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  903.194612][T12656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  903.194628][T12656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  903.194653][T12656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  903.279563][ T6666] IPVS: stop unused estimator thread 0...
[  903.297222][T12653] hsr_slave_0: entered promiscuous mode
[  903.299399][T12653] hsr_slave_1: entered promiscuous mode
[  903.299812][T12653] debugfs: 'hsr0' already exists in 'hsr'
[  903.299848][T12653] Cannot create hsr debugfs directory
[  903.398265][T12656] hsr_slave_0: entered promiscuous mode
[  903.399362][T12656] hsr_slave_1: entered promiscuous mode
[  903.400138][T12656] debugfs: 'hsr0' already exists in 'hsr'
[  903.400157][T12656] Cannot create hsr debugfs directory
[  903.528949][   T31] audit: type=1400 audit(1792247471.294:1441): avc:  denied  { write } for  pid=12730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  903.631218][ T5793] asus 0003:0B05:19B6.002D: Asus failed to set fn lock: -71
[  903.632042][ T5793] usb 1-1: USB disconnect, device number 56
[  903.750482][   T31] audit: type=1400 audit(1792247471.514:1442): avc:  denied  { write } for  pid=12743 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  903.852414][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3
[  903.940430][T12653] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.121274][T12653] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.159769][ T5612] Bluetooth: hci14: command tx timeout
[  905.159815][ T5612] Bluetooth: hci10: command tx timeout
[  905.519673][T12761] ip_tables: iptables: counters copy to user failed while replacing table
[  905.621667][T12653] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.698742][ T5612] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  905.700056][ T5612] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  905.715914][ T5612] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  905.717898][ T5612] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  905.718394][ T5612] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  905.830979][T12653] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.851323][   T31] audit: type=1400 audit(1792247473.604:1443): avc:  denied  { write } for  pid=12749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  905.922328][ T5727] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  906.011460][   T31] audit: type=1400 audit(1792247473.775:1444): avc:  denied  { write } for  pid=12775 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  906.083573][ T5727] usb 1-1: Using ep0 maxpacket: 8
[  906.085398][ T5727] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  906.089210][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.089236][ T5727] usb 1-1: Product: syz
[  906.089253][ T5727] usb 1-1: Manufacturer: syz
[  906.089268][ T5727] usb 1-1: SerialNumber: syz
[  906.097548][ T5727] usb 1-1: config 0 descriptor??
[  906.109511][ T5727] gspca_main: se401-2.14.0 probing 047d:5003
[  906.177660][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4
[  906.295648][T12653] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  906.313452][T12767] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1587'.
[  906.317274][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  906.400859][T12656] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.429749][T12653] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  906.442585][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  906.443377][T12653] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  906.446237][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  906.446978][T12653] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  906.450859][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  906.583879][T12768] rxe_eth0 speed is unknown, defaulting to 1000
[  906.663543][ T5727] gspca_se401: Bayer format not supported!
[  906.664439][T12656] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.844786][T12656] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.876025][T12767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  906.886269][T12767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  906.889010][ T9777] usb 1-1: USB disconnect, device number 57
[  907.020731][T12656] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  907.052297][T12653] 8021q: adding VLAN 0 to HW filter on device bond0
[  907.116225][T12653] 8021q: adding VLAN 0 to HW filter on device team0
[  907.169366][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state
[  907.169452][ T6023] bridge0: port 1(bridge_slave_0) entered forwarding state
[  907.188224][ T5612] Bluetooth: hci10: command tx timeout
[  907.188252][ T5612] Bluetooth: hci14: command tx timeout
[  907.236301][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state
[  907.236356][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  907.315557][T12656] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  907.318823][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  907.346823][T12656] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  907.350525][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  907.351172][T12656] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  907.363835][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  907.397413][T12656] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  907.399528][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  907.544370][T12768] bridge0: port 1(bridge_slave_0) entered blocking state
[  907.544546][T12768] bridge0: port 1(bridge_slave_0) entered disabled state
[  907.544887][T12768] bridge_slave_0: entered allmulticast mode
[  907.546458][T12768] bridge_slave_0: entered promiscuous mode
[  907.564752][T12768] bridge0: port 2(bridge_slave_1) entered blocking state
[  907.564836][T12768] bridge0: port 2(bridge_slave_1) entered disabled state
[  907.564953][T12768] bridge_slave_1: entered allmulticast mode
[  907.575983][T12768] bridge_slave_1: entered promiscuous mode
[  907.676844][T12768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  907.695206][T12768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  907.786279][T12768] team0: Port device team_slave_0 added
[  907.803741][T12768] team0: Port device team_slave_1 added
[  907.812026][ T5612] Bluetooth: hci15: command tx timeout
[  907.857904][T12768] batman_adv: batadv0: Adding interface: batadv_slave_0
[  907.857922][T12768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  907.857947][T12768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  907.860703][T12768] batman_adv: batadv0: Adding interface: batadv_slave_1
[  907.860719][T12768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  907.860744][T12768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  907.997052][T12768] hsr_slave_0: entered promiscuous mode
[  908.001784][T12768] hsr_slave_1: entered promiscuous mode
[  908.003276][T12768] debugfs: 'hsr0' already exists in 'hsr'
[  908.003296][T12768] Cannot create hsr debugfs directory
[  908.204144][T12656] 8021q: adding VLAN 0 to HW filter on device bond0
[  908.312748][T12653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  908.429596][T12768] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.458229][T12656] 8021q: adding VLAN 0 to HW filter on device team0
[  908.485813][T11609] bridge0: port 1(bridge_slave_0) entered blocking state
[  908.485899][T11609] bridge0: port 1(bridge_slave_0) entered forwarding state
[  908.530407][T12438] bridge0: port 2(bridge_slave_1) entered blocking state
[  908.530503][T12438] bridge0: port 2(bridge_slave_1) entered forwarding state
[  908.588167][T12768] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.695229][T12768] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.717486][T12656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  908.810276][T12768] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.035187][T12653] veth0_vlan: entered promiscuous mode
[  909.078092][T12653] veth1_vlan: entered promiscuous mode
[  909.137244][T12768] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  909.141022][T12768] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  909.158247][T12768] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  909.161116][T12768] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  909.176248][T12768] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  909.179450][T12768] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  909.180334][T12768] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  909.206312][T12768] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  909.245798][T12653] veth0_macvtap: entered promiscuous mode
[  909.260248][T12653] veth1_macvtap: entered promiscuous mode
[  909.300442][T12653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  909.319750][T12653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  909.342857][ T5726] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  909.436789][T11609] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  909.438356][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  909.438402][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  909.464136][T12438] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  909.499523][ T5726] usb 1-1: Using ep0 maxpacket: 16
[  909.504586][ T5726] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  909.508188][ T5726] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  909.508234][ T5726] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  909.508257][ T5726] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  909.508285][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0
[  909.508316][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  909.516159][ T5726] usb 1-1: config 0 descriptor??
[  909.556531][ T5726] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  909.602478][T12768] 8021q: adding VLAN 0 to HW filter on device bond0
[  909.664641][T12768] 8021q: adding VLAN 0 to HW filter on device team0
[  909.669209][T12438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  909.669230][T12438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  909.704578][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.704655][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  909.749912][T12656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  909.796675][ T5607] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  909.807149][ T5607] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  909.808915][ T5607] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  909.809645][ T5607] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  909.810977][ T5607] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  909.840795][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.840888][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  909.856233][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  909.856252][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  909.895779][ T5612] Bluetooth: hci15: command tx timeout
[  910.093489][T12864] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  910.093950][T12864] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare
[  910.104106][T12864] CIFS: VFS: Error connecting to socket. Aborting operation.
[  910.104250][T12864] CIFS: VFS: cifs_mount failed w/return code = -111
[  911.717144][T12656] veth0_vlan: entered promiscuous mode
[  911.741346][T12854] rxe_eth0 speed is unknown, defaulting to 1000
[  911.743263][T12656] veth1_vlan: entered promiscuous mode
[  911.793192][T12656] veth0_macvtap: entered promiscuous mode
[  911.797317][T12656] veth1_macvtap: entered promiscuous mode
[  911.833801][T12656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  911.853046][T12656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  911.893170][ T5612] Bluetooth: hci16: command tx timeout
[  911.900421][T11610] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  911.921367][T11610] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  911.972812][ T5612] Bluetooth: hci15: command tx timeout
[  912.017708][T11610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  912.017729][T11610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  912.060476][T11610] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  912.071352][T11611] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  912.105925][T11610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  912.105946][T11610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  912.205821][T12894] netlink: 'syz.6.1578': attribute type 11 has an invalid length.
[  912.232880][T12768] 8021q: adding VLAN 0 to HW filter on device batadv0
[  912.237279][T11575] usb 1-1: USB disconnect, device number 58
[  913.972187][ T5612] Bluetooth: hci16: command tx timeout
[  914.054122][T12897] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  914.055621][ T5612] Bluetooth: hci15: command tx timeout
[  914.256306][T12768] veth0_vlan: entered promiscuous mode
[  914.283731][T12768] veth1_vlan: entered promiscuous mode
[  914.481715][T12854] bridge0: port 1(bridge_slave_0) entered blocking state
[  914.481804][T12854] bridge0: port 1(bridge_slave_0) entered disabled state
[  914.482136][T12854] bridge_slave_0: entered allmulticast mode
[  914.483309][T12854] bridge_slave_0: entered promiscuous mode
[  914.487420][T12854] bridge0: port 2(bridge_slave_1) entered blocking state
[  914.487509][T12854] bridge0: port 2(bridge_slave_1) entered disabled state
[  914.487880][T12854] bridge_slave_1: entered allmulticast mode
[  914.490978][T12854] bridge_slave_1: entered promiscuous mode
[  914.516856][T12926] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1598'.
[  915.684113][T12854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  915.714106][T12854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  915.818896][T12854] team0: Port device team_slave_0 added
[  915.819282][T12768] veth0_macvtap: entered promiscuous mode
[  915.835924][T12854] team0: Port device team_slave_1 added
[  915.905230][T12854] batman_adv: batadv0: Adding interface: batadv_slave_0
[  915.905246][T12854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  915.905261][T12854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  915.906739][T12854] batman_adv: batadv0: Adding interface: batadv_slave_1
[  915.906756][T12854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  915.906779][T12854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  915.945275][T12768] veth1_macvtap: entered promiscuous mode
[  916.051016][ T5612] Bluetooth: hci16: command tx timeout
[  916.110562][T12854] hsr_slave_0: entered promiscuous mode
[  916.117218][T12854] hsr_slave_1: entered promiscuous mode
[  916.117605][T12854] debugfs: 'hsr0' already exists in 'hsr'
[  916.117624][T12854] Cannot create hsr debugfs directory
[  916.152647][T12768] batman_adv: batadv0: Interface activated: batadv_slave_0
[  916.269568][T12768] batman_adv: batadv0: Interface activated: batadv_slave_1
[  916.601319][ T6023] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  916.602403][ T6023] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  916.602443][ T6023] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  916.622894][ T1143] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  916.951864][   T31] audit: type=1400 audit(1792247484.705:1445): avc:  denied  { write } for  pid=12929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  916.960641][T12854] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.118095][   T31] audit: type=1400 audit(1792247484.885:1446): avc:  denied  { write } for  pid=12941 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  917.145565][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  917.145585][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  917.284460][T12854] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.330161][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  917.330183][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  917.450734][T12854] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.565246][T12950] program syz.8.1586 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  917.614853][T12854] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.781018][ T5728] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  917.931766][ T5728] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  917.953093][ T5728] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  917.953115][ T5728] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid maxpacket 169, setting to 64
[  917.953131][ T5728] usb 7-1: config 0 interface 0 has no altsetting 0
[  917.957559][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  917.957595][ T5728] usb 7-1: Product: syz
[  917.957612][ T5728] usb 7-1: Manufacturer: syz
[  917.957629][ T5728] usb 7-1: SerialNumber: syz
[  917.960157][ T5728] usb 7-1: config 0 descriptor??
[  917.961163][T12949] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  918.046788][ T5728] usb 7-1: selecting invalid altsetting 0
[  918.141601][ T5612] Bluetooth: hci16: command tx timeout
[  918.255602][   T31] audit: type=1400 audit(1792247486.025:1447): avc:  denied  { write } for  pid=12953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  918.386651][   T31] audit: type=1400 audit(1792247486.155:1448): avc:  denied  { write } for  pid=12967 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  918.387730][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.388267][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.394019][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.394364][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.394688][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.395057][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.472248][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.472466][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.472641][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.472812][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.473008][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.473193][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.473370][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.473552][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.477725][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.553385][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.553743][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.554082][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.556040][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.556327][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.610111][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.610390][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.610585][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.610758][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.664058][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.664326][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.664498][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.664684][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.669741][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.669937][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.670120][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.670306][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.670482][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.670657][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.754697][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.766740][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.772159][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.772499][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.772829][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.773174][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.773493][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.773819][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.774145][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.774491][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.774809][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.775131][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.775457][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.775775][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.776098][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.776426][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.776742][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.777065][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.777391][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.777709][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.778037][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.778355][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.778671][T12945] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[  918.782084][ T7367] usb 7-1: USB disconnect, device number 2
[  919.042274][T12971] udevd[12971]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  919.161320][T12854] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  919.164745][T12854] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  919.166603][T12854] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  919.169847][T12854] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  919.200897][T12854] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  919.227533][T12854] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  919.228403][T12854] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  919.251593][T12854] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  919.385070][T12854] 8021q: adding VLAN 0 to HW filter on device bond0
[  919.403913][T12854] 8021q: adding VLAN 0 to HW filter on device team0
[  919.409658][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  919.409742][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  919.442422][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state
[  919.442478][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  919.543885][T12958] Unknown metaid 8705 dlen 4
[  919.814786][   T31] audit: type=1400 audit(1792247487.585:1449): avc:  denied  { write } for  pid=12981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  921.271352][   T31] audit: type=1400 audit(1792247489.045:1450): avc:  denied  { mounton } for  pid=13011 comm="syz.6.1603" path="/file0" dev="autofs" ino=42164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  921.271575][T13012] overlay: filesystem on ./file0 not supported
[  921.326462][   T31] audit: type=1400 audit(1792247489.095:1451): avc:  denied  { write } for  pid=13013 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  923.202972][T12854] 8021q: adding VLAN 0 to HW filter on device batadv0
[  923.300443][T13033] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1607'.
[  923.640406][   T31] audit: type=1400 audit(1792247491.405:1452): avc:  denied  { write } for  pid=13024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  923.817465][   T31] audit: type=1400 audit(1792247491.585:1453): avc:  denied  { write } for  pid=13045 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  924.004342][T12854] veth0_vlan: entered promiscuous mode
[  924.023782][T12854] veth1_vlan: entered promiscuous mode
[  924.095374][T12854] veth0_macvtap: entered promiscuous mode
[  924.110958][T12854] veth1_macvtap: entered promiscuous mode
[  924.135164][T12854] batman_adv: batadv0: Interface activated: batadv_slave_0
[  924.137154][T12854] batman_adv: batadv0: Interface activated: batadv_slave_1
[  924.306632][ T6046] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  924.306679][ T6046] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  924.322322][ T1158] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  924.322367][ T1158] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  924.418948][ T5843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  924.418971][ T5843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  924.506652][T13055] ip_tables: iptables: counters copy to user failed while replacing table
[  924.537500][ T6046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  924.537523][ T6046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  924.831665][T13061] jffs2: notice: (13061) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 3 of xref (0 dead, 2 orphan) found.
[  924.870666][   T31] audit: type=1400 audit(1792247492.636:1454): avc:  denied  { write } for  pid=13057 comm="syz.6.1609" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  925.157213][T13051] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  925.328826][   T31] audit: type=1400 audit(1792247493.096:1455): avc:  denied  { write } for  pid=13057 comm="syz.6.1609" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  926.204528][   T31] audit: type=1400 audit(1792247493.976:1456): avc:  denied  { write } for  pid=12656 comm="syz-executor" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  926.236460][   T31] audit: type=1400 audit(1792247493.996:1457): avc:  denied  { write } for  pid=12656 comm="syz-executor" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  926.261985][   T31] audit: type=1400 audit(1792247494.016:1458): avc:  denied  { write } for  pid=12656 comm="syz-executor" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  926.345740][T13071] fuse: Bad value for 'fd'
[  926.970563][T11575] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  927.121915][T11575] usb 8-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[  927.122967][T11575] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  927.123000][T11575] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  927.123041][T11575] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  927.126577][T11575] usb 8-1: config 0 descriptor??
[  927.627056][T11575] input: HID 0b05:19b6 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0B05:19B6.002E/input/input64
[  927.718959][T11575] asus 0003:0B05:19B6.002E: input,hidraw0: USB HID v0.00 Joystick [HID 0b05:19b6] on usb-dummy_hcd.7-1/input0
[  928.354608][T13071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  928.355077][T13071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  928.365896][T13071] random: crng reseeded on system resumption
[  928.558095][T13084] jffs2: notice: (13084) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 3 orphan) and 5 of xref (0 dead, 5 orphan) found.
[  928.579714][   T31] audit: type=1400 audit(1792247496.346:1459): avc:  denied  { write } for  pid=13070 comm="syz.7.1611" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  928.886198][ T5607] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  928.899777][ T5607] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  928.912038][ T5607] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  928.917623][ T5607] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  928.918142][ T5607] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  929.758932][T13087] rxe_eth0 speed is unknown, defaulting to 1000
[  929.822913][  T191] asus 0003:0B05:19B6.002E: Asus failed to set fn lock: -71
[  929.823333][  T191] usb 8-1: USB disconnect, device number 6
[  929.890992][ T5607] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  929.892399][ T5607] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  929.893156][ T5607] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  929.897334][ T5607] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  929.897843][ T5607] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  930.306471][T13098] rxe_eth0 speed is unknown, defaulting to 1000
[  930.352233][  T191] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  930.465942][T13087] bridge0: port 1(bridge_slave_0) entered blocking state
[  930.466095][T13087] bridge0: port 1(bridge_slave_0) entered disabled state
[  930.466274][T13087] bridge_slave_0: entered allmulticast mode
[  930.468251][T13087] bridge_slave_0: entered promiscuous mode
[  930.472270][T13087] bridge0: port 2(bridge_slave_1) entered blocking state
[  930.472384][T13087] bridge0: port 2(bridge_slave_1) entered disabled state
[  930.472692][T13087] bridge_slave_1: entered allmulticast mode
[  930.474225][T13087] bridge_slave_1: entered promiscuous mode
[  930.502170][  T191] usb 8-1: unable to get BOS descriptor or descriptor too short
[  930.502214][  T191] usb 8-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=c7.ce
[  930.503106][  T191] usb 8-1: config 9 has an invalid interface number: 16 but max is 0
[  930.503130][  T191] usb 8-1: config 9 has no interface number 0
[  930.503167][  T191] usb 8-1: config 9 interface 16 altsetting 166 bulk endpoint 0x1 has invalid maxpacket 1024
[  930.503214][  T191] usb 8-1: config 9 interface 16 has no altsetting 0
[  930.505211][  T191] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.505236][  T191] usb 8-1: Product: syz
[  930.505251][  T191] usb 8-1: Manufacturer: syz
[  930.505268][  T191] usb 8-1: SerialNumber: syz
[  930.513875][T13087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  930.516766][T13087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  930.548160][T13087] team0: Port device team_slave_0 added
[  930.550996][T13087] team0: Port device team_slave_1 added
[  930.562801][T13103] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  930.587733][T13087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  930.587749][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  930.587794][T13087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  930.589930][T13087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  930.589942][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  930.589967][T13087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  930.717393][T13087] hsr_slave_0: entered promiscuous mode
[  930.720238][T13087] hsr_slave_1: entered promiscuous mode
[  930.723023][T13087] debugfs: 'hsr0' already exists in 'hsr'
[  930.723044][T13087] Cannot create hsr debugfs directory
[  930.799584][T13103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=13103 comm=syz.7.1616
[  930.832969][T13103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=13103 comm=syz.7.1616
[  930.872086][  T191] usb 8-1: USB disconnect, device number 7
[  931.023242][ T5612] Bluetooth: hci17: command tx timeout
[  931.064035][T13087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.153336][T13087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.261421][T13087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.299195][T13098] bridge0: port 1(bridge_slave_0) entered blocking state
[  931.299289][T13098] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.299481][T13098] bridge_slave_0: entered allmulticast mode
[  931.300685][T13098] bridge_slave_0: entered promiscuous mode
[  931.303042][T13098] bridge0: port 2(bridge_slave_1) entered blocking state
[  931.303177][T13098] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.303294][T13098] bridge_slave_1: entered allmulticast mode
[  931.304782][T13098] bridge_slave_1: entered promiscuous mode
[  931.341864][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  931.341918][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  931.343603][T13098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  931.346728][T13098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  931.411809][T13098] team0: Port device team_slave_0 added
[  931.433091][T13087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.470355][T13098] team0: Port device team_slave_1 added
[  931.499835][T13126] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1617'.
[  931.520237][T13098] batman_adv: batadv0: Adding interface: batadv_slave_0
[  931.520253][T13098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  931.520279][T13098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  931.522074][T13098] batman_adv: batadv0: Adding interface: batadv_slave_1
[  931.522088][T13098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  931.522111][T13098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  931.673623][T13098] hsr_slave_0: entered promiscuous mode
[  931.677650][T13098] hsr_slave_1: entered promiscuous mode
[  931.678017][T13098] debugfs: 'hsr0' already exists in 'hsr'
[  931.678029][T13098] Cannot create hsr debugfs directory
[  931.972998][ T5612] Bluetooth: hci18: command tx timeout
[  932.010559][T13087] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  932.021352][T13087] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  932.021862][T13087] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  932.046066][T13087] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  932.080306][T13087] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  932.088295][T13087] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  932.189236][T13098] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.224755][T13087] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  932.230421][T13087] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  932.365315][T13098] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  933.473953][ T5612] Bluetooth: hci17: command tx timeout
[  933.923814][T13098] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  933.968047][T13087] 8021q: adding VLAN 0 to HW filter on device bond0
[  933.979504][T13087] 8021q: adding VLAN 0 to HW filter on device team0
[  933.984780][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state
[  933.984874][ T6046] bridge0: port 1(bridge_slave_0) entered forwarding state
[  933.996385][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state
[  933.996475][ T6046] bridge0: port 2(bridge_slave_1) entered forwarding state
[  934.052846][ T5607] Bluetooth: hci18: command tx timeout
[  934.089132][T13098] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.377642][T13098] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  934.397407][T13098] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  934.398745][T13098] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  934.406682][T13098] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  934.413037][T13098] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  934.436352][T13098] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  934.439193][T13098] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  934.452139][T13098] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  934.595094][T13098] 8021q: adding VLAN 0 to HW filter on device bond0
[  934.635967][T13098] 8021q: adding VLAN 0 to HW filter on device team0
[  934.647077][T12438] bridge0: port 1(bridge_slave_0) entered blocking state
[  934.647136][T12438] bridge0: port 1(bridge_slave_0) entered forwarding state
[  934.661152][T12438] bridge0: port 2(bridge_slave_1) entered blocking state
[  934.661244][T12438] bridge0: port 2(bridge_slave_1) entered forwarding state
[  935.064360][T13087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  935.447655][T13176] overlay: ./file1 is not a directory
[  935.457177][   T31] audit: type=1400 audit(1792247503.226:1460): avc:  denied  { remount } for  pid=13167 comm="syz.7.1620" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  935.465313][   T31] audit: type=1400 audit(1792247503.236:1461): avc:  denied  { write } for  pid=13167 comm="syz.7.1620" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  935.514126][ T5607] Bluetooth: hci17: command tx timeout
[  935.852757][T13087] veth0_vlan: entered promiscuous mode
[  935.875182][T13098] 8021q: adding VLAN 0 to HW filter on device batadv0
[  935.904320][T13087] veth1_vlan: entered promiscuous mode
[  936.010068][T13087] veth0_macvtap: entered promiscuous mode
[  936.015849][T13087] veth1_macvtap: entered promiscuous mode
[  936.085584][T13087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  936.117914][T13087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  936.131095][ T5607] Bluetooth: hci18: command tx timeout
[  936.190532][T12433] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  936.202611][T12433] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  936.222684][ T6023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  936.241915][T12433] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  936.504341][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  936.504363][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  936.603427][T12433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  936.603441][T12433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  936.779472][T13098] veth0_vlan: entered promiscuous mode
[  936.795259][T13098] veth1_vlan: entered promiscuous mode
[  937.573472][ T5607] Bluetooth: hci17: command tx timeout
[  937.955481][T13098] veth0_macvtap: entered promiscuous mode
[  937.976620][T13098] veth1_macvtap: entered promiscuous mode
[  938.028985][T13098] batman_adv: batadv0: Interface activated: batadv_slave_0
[  938.061905][T13098] batman_adv: batadv0: Interface activated: batadv_slave_1
[  938.227274][ T5607] Bluetooth: hci18: command tx timeout
[  938.270176][T12433] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  938.447082][T11609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  938.448953][T11609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  938.521535][T12436] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  938.523213][T11611] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  938.523240][T11611] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  938.623063][T11609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  938.623086][T11609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  938.640402][T12436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  938.640423][T12436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  938.929825][  T191] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  939.081854][  T191] usb 8-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  939.084956][  T191] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  939.085360][  T191] usb 8-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  939.119443][T13207] netlink: 'syz.9.1615': attribute type 10 has an invalid length.
[  939.131249][  T191] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  939.131277][  T191] usb 8-1: Product: syz
[  939.131293][  T191] usb 8-1: Manufacturer: syz
[  939.131310][  T191] usb 8-1: SerialNumber: syz
[  939.136180][T13207] bridge0: port 2(bridge_slave_1) entered disabled state
[  939.137502][T13207] bridge0: port 1(bridge_slave_0) entered disabled state
[  939.156514][T13207] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.156619][T13207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  939.156871][T13207] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.157053][T13207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  939.168430][ T5726] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  939.196041][T13207] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  939.418308][ T5726] usb 5-1: Using ep0 maxpacket: 8
[  939.426021][ T5726] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  939.461577][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  939.461619][ T5726] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  939.461835][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.658914][ T5726] usb 5-1: config 0 descriptor??
[  940.039018][T13209] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1626'.
[  940.166651][ T5726] lenovo 0003:17EF:6047.002F: unknown main item tag 0x0
[  940.166687][ T5726] lenovo 0003:17EF:6047.002F: unknown main item tag 0x0
[  940.166734][ T5726] lenovo 0003:17EF:6047.002F: unknown main item tag 0x0
[  940.166760][ T5726] lenovo 0003:17EF:6047.002F: unknown main item tag 0x0
[  940.166785][ T5726] lenovo 0003:17EF:6047.002F: unknown main item tag 0x0
[  940.166809][ T5726] lenovo 0003:17EF:6047.002F: unknown main item tag 0x0
[  940.214236][ T5726] lenovo 0003:17EF:6047.002F: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0
[  940.359253][    C0] usb 8-1: received EP1 urb->status = -71
[  940.374336][ T5726] lenovo 0003:17EF:6047.002F: Failed to switch F7/9/11 mode: -71
[  940.374878][ T5726] lenovo 0003:17EF:6047.002F: Failed to switch middle button: -71
[  940.377464][ T5726] lenovo 0003:17EF:6047.002F: Fn-lock setting failed: -71
[  940.379180][ T5726] lenovo 0003:17EF:6047.002F: Sensitivity setting failed: -71
[  940.418414][ T5726] usb 5-1: USB disconnect, device number 43
[  941.174674][  T191] usb 8-1: unable to init card! (ret=-19)
[  941.197791][T13219] comedi comedi0: dt2815: I/O port conflict (0x300,2)
[  941.409990][  T191] usb 8-1: USB disconnect, device number 8
[  942.254252][ T5612] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  942.260110][ T5612] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  942.261515][ T5612] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  942.263024][ T5612] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  942.265453][ T5612] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  943.571827][T13237] FAULT_INJECTION: forcing a failure.
[  943.571827][T13237] name failslab, interval 1, probability 0, space 0, times 0
[  943.571851][T13237] CPU: 0 UID: 0 PID: 13237 Comm: syz.4.1633 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  943.571868][T13237] Tainted: [L]=SOFTLOCKUP
[  943.571873][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  943.571880][T13237] Call Trace:
[  943.571884][T13237]  <TASK>
[  943.571890][T13237]  dump_stack_lvl+0x100/0x190
[  943.571911][T13237]  should_fail_ex.cold+0x5/0xa
[  943.571928][T13237]  should_failslab+0xc2/0x120
[  943.571946][T13237]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  943.571962][T13237]  ? __alloc_skb+0x5b7/0x710
[  943.571974][T13237]  ? __alloc_skb+0x140/0x710
[  943.571987][T13237]  __alloc_skb+0x140/0x710
[  943.571998][T13237]  ? __alloc_skb+0x5b7/0x710
[  943.572008][T13237]  ? __pfx___alloc_skb+0x10/0x10
[  943.572025][T13237]  netlink_alloc_large_skb+0x69/0x150
[  943.572045][T13237]  netlink_sendmsg+0x680/0xda0
[  943.572061][T13237]  ? __pfx_netlink_sendmsg+0x10/0x10
[  943.572074][T13237]  ? selinux_socket_sendmsg+0x198/0x2f0
[  943.572094][T13237]  ____sys_sendmsg+0xa4d/0xbe0
[  943.572109][T13237]  ? __pfx_netlink_sendmsg+0x10/0x10
[  943.572122][T13237]  ? __pfx_____sys_sendmsg+0x10/0x10
[  943.572141][T13237]  ? lock_acquire+0x1d1/0x380
[  943.572154][T13237]  ? get_pid_task+0x2a/0x250
[  943.572171][T13237]  ___sys_sendmsg+0x190/0x1e0
[  943.572188][T13237]  ? __pfx____sys_sendmsg+0x10/0x10
[  943.572204][T13237]  ? get_pid_task+0x106/0x250
[  943.572226][T13237]  ? find_held_lock+0x2b/0x80
[  943.572254][T13237]  __sys_sendmsg+0x160/0x210
[  943.572267][T13237]  ? __pfx___sys_sendmsg+0x10/0x10
[  943.572289][T13237]  do_syscall_64+0x123/0x790
[  943.572308][T13237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  943.572321][T13237] RIP: 0033:0x7f08a119e559
[  943.572331][T13237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  943.572342][T13237] RSP: 002b:00007f08a1fd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  943.572354][T13237] RAX: ffffffffffffffda RBX: 00007f08a1425fa0 RCX: 00007f08a119e559
[  943.572362][T13237] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004
[  943.572369][T13237] RBP: 00007f08a1fd8090 R08: 0000000000000000 R09: 0000000000000000
[  943.572376][T13237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  943.572383][T13237] R13: 00007f08a1426038 R14: 00007f08a1425fa0 R15: 00007ffdc98d88e8
[  943.572400][T13237]  </TASK>
[  944.104828][T13249] syz.9.1634: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  944.105066][T13249] CPU: 0 UID: 0 PID: 13249 Comm: syz.9.1634 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  944.105099][T13249] Tainted: [L]=SOFTLOCKUP
[  944.105109][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  944.105124][T13249] Call Trace:
[  944.105133][T13249]  <TASK>
[  944.105143][T13249]  dump_stack_lvl+0x100/0x190
[  944.105184][T13249]  warn_alloc.cold+0x9e/0xb2
[  944.105213][T13249]  ? __pfx_warn_alloc+0x10/0x10
[  944.105237][T13249]  ? __kasan_kmalloc+0xaa/0xb0
[  944.105270][T13249]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  944.105294][T13249]  ? xskq_create+0x52/0x290
[  944.105322][T13249]  ? do_sock_setsockopt+0xf3/0x1d0
[  944.105351][T13249]  ? do_syscall_64+0x123/0x790
[  944.105385][T13249]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  944.105426][T13249]  ? xsk_setsockopt+0x743/0xab0
[  944.105455][T13249]  __vmalloc_node_range_noprof+0x123b/0x1420
[  944.105503][T13249]  ? xsk_setsockopt+0x743/0xab0
[  944.105538][T13249]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  944.105574][T13249]  ? kasan_save_track+0x14/0x30
[  944.105611][T13249]  ? __kasan_kmalloc+0xaa/0xb0
[  944.105644][T13249]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  944.105672][T13249]  ? xskq_create+0x52/0x290
[  944.105703][T13249]  ? xsk_setsockopt+0x743/0xab0
[  944.105731][T13249]  xskq_create+0x18f/0x290
[  944.105761][T13249]  ? xsk_setsockopt+0x743/0xab0
[  944.105793][T13249]  xsk_setsockopt+0x743/0xab0
[  944.105823][T13249]  ? __pfx_xsk_setsockopt+0x10/0x10
[  944.105851][T13249]  ? find_held_lock+0x2b/0x80
[  944.105885][T13249]  ? __fget_files+0x215/0x3d0
[  944.105923][T13249]  ? selinux_socket_setsockopt+0x6a/0x80
[  944.105956][T13249]  ? __pfx_xsk_setsockopt+0x10/0x10
[  944.105987][T13249]  do_sock_setsockopt+0xf3/0x1d0
[  944.106019][T13249]  __sys_setsockopt+0x195/0x220
[  944.106049][T13249]  __x64_sys_setsockopt+0xbd/0x160
[  944.106071][T13249]  ? do_syscall_64+0xae/0x790
[  944.106103][T13249]  ? lockdep_hardirqs_on+0x7d/0x110
[  944.106136][T13249]  do_syscall_64+0x123/0x790
[  944.106172][T13249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  944.106196][T13249] RIP: 0033:0x7f5fc0d9e559
[  944.106216][T13249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  944.106237][T13249] RSP: 002b:00007f5fc1c0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  944.106259][T13249] RAX: ffffffffffffffda RBX: 00007f5fc1026090 RCX: 00007f5fc0d9e559
[  944.106275][T13249] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  944.106289][T13249] RBP: 00007f5fc0e35ab8 R08: 0000000000000004 R09: 0000000000000000
[  944.106304][T13249] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000
[  944.106318][T13249] R13: 00007f5fc1026128 R14: 00007f5fc1026090 R15: 00007ffd93069e58
[  944.106351][T13249]  </TASK>
[  944.106415][T13249] Mem-Info:
[  944.106457][T13249] active_anon:28737 inactive_anon:16238 isolated_anon:0
[  944.106457][T13249]  active_file:12575 inactive_file:50511 isolated_file:0
[  944.106457][T13249]  unevictable:0 dirty:376 writeback:0
[  944.106457][T13249]  slab_reclaimable:13213 slab_unreclaimable:155030
[  944.106457][T13249]  mapped:121766 shmem:30957 pagetables:2780
[  944.106457][T13249]  sec_pagetables:0 bounce:0
[  944.106457][T13249]  kernel_misc_reclaimable:0
[  944.106457][T13249]  free:1004947 free_pcp:4479 free_cma:0
[  944.106523][T13249] Node 0 active_anon:114948kB inactive_anon:64952kB active_file:50300kB inactive_file:201768kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:437940kB dirty:1500kB writeback:0kB shmem:123828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19464kB pagetables:10972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  944.106594][T13249] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:49124kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  944.106668][T13249] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  944.106774][T13249] lowmem_reserve[]: 0 2452 2452 2452 2452
[  944.106955][T13249] Node 0 DMA32 free:186220kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:114948kB inactive_anon:64952kB active_file:50300kB inactive_file:201768kB unevictable:0kB writepending:1500kB zspages:1640kB present:3129332kB managed:2510920kB mlocked:0kB bounce:0kB free_pcp:10940kB local_pcp:5096kB free_cma:0kB
[  944.107078][T13249] lowmem_reserve[]: 0 0 0 0 0
[  944.107260][T13249] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  944.107416][T13249] lowmem_reserve[]: 0 0 0 0 0
[  944.107583][T13249] Node 1 Normal free:3822304kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:276kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:6976kB local_pcp:248kB free_cma:0kB
[  944.107687][T13249] lowmem_reserve[]: 0 0 0 0 0
[  944.107812][T13249] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB
[  944.108447][T13249] Node 0 DMA32: 1*4kB (M) 11*8kB (ME) 1638*16kB (ME) 1059*32kB (M) 373*64kB (ME) 123*128kB (M) 111*256kB (ME) 53*512kB (ME) 20*1024kB (ME) 5*2048kB (M) 0*4096kB = 186076kB
[  944.110743][T13249] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  944.111273][T13249] Node 1 Normal: 4*4kB (M) 2*8kB (M) 6*16kB (UM) 3*32kB (M) 10*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (M) 3*1024kB (UM) 3*2048kB (UM) 930*4096kB (M) = 3822304kB
[  944.111965][T13249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  944.112011][T13249] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB
[  944.112052][T13249] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  944.112101][T13249] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  944.112130][T13249] 94042 total pagecache pages
[  944.112173][T13249] 1 pages in swap cache
[  944.112210][T13249] Free swap  = 124044kB
[  944.112252][T13249] Total swap = 124996kB
[  944.112291][T13249] 2097051 pages RAM
[  944.112331][T13249] 0 pages HighMem/MovableOnly
[  944.112367][T13249] 437690 pages reserved
[  944.112409][T13249] 0 pages cma reserved
[  944.379770][ T5607] Bluetooth: hci19: command tx timeout
[  945.513912][T13220] rxe_eth0 speed is unknown, defaulting to 1000
[  946.033236][ T5612] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[  947.051507][ T5612] Bluetooth: hci19: command tx timeout
[  947.061345][T11335] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[  947.062102][T11335] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[  947.062615][T11335] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[  947.064493][T11335] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[  947.677639][T13269] input: syz1 as /devices/virtual/input/input65
[  947.805259][   T31] audit: type=1400 audit(1792247515.577:1462): avc:  denied  { setattr } for  pid=13272 comm="syz.7.1640" path="pipe:[44261]" dev="pipefs" ino=44261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  949.100405][ T5607] Bluetooth: hci20: command tx timeout
[  949.101423][ T5607] Bluetooth: hci19: command tx timeout
[  949.213055][T13254] rxe_eth0 speed is unknown, defaulting to 1000
[  949.972263][T13296] netdevsim netdevsim7: Firmware load for './cgroup/../file0' refused, path contains '..' component
[  950.249792][T11575] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  950.411781][T11575] usb 8-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  950.413166][T11575] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  950.413198][T11575] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  950.413298][T11575] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  950.423815][T11575] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.423842][T11575] usb 8-1: Product: syz
[  950.423858][T11575] usb 8-1: Manufacturer: syz
[  950.423876][T11575] usb 8-1: SerialNumber: syz
[  950.976556][T13220] bridge0: port 1(bridge_slave_0) entered blocking state
[  950.987831][T13220] bridge0: port 1(bridge_slave_0) entered disabled state
[  950.987982][T13220] bridge_slave_0: entered allmulticast mode
[  951.012171][T13220] bridge_slave_0: entered promiscuous mode
[  951.026056][T13220] bridge0: port 2(bridge_slave_1) entered blocking state
[  951.028564][T13220] bridge0: port 2(bridge_slave_1) entered disabled state
[  951.028698][T13220] bridge_slave_1: entered allmulticast mode
[  951.056618][T13220] bridge_slave_1: entered promiscuous mode
[  951.081885][   T31] audit: type=1400 audit(1792247518.857:1463): avc:  denied  { ioctl } for  pid=13315 comm="syz.9.1647" path="socket:[45235]" dev="sockfs" ino=45235 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  951.088785][   T31] audit: type=1400 audit(1792247518.857:1464): avc:  denied  { write } for  pid=13315 comm="syz.9.1647" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  951.172389][T11335] Bluetooth: hci19: command tx timeout
[  951.172421][T11335] Bluetooth: hci20: command tx timeout
[  951.231893][T13220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  951.254402][T13220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  951.459885][T13220] team0: Port device team_slave_0 added
[  951.545011][T13220] team0: Port device team_slave_1 added
[  951.696948][   T31] audit: type=1400 audit(1792247519.467:1465): avc:  denied  { write } for  pid=13310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  951.748350][T13328] jffs2: notice: (13328) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 5 of xref (0 dead, 4 orphan) found.
[  951.789675][T13220] batman_adv: batadv0: Adding interface: batadv_slave_0
[  951.789692][T13220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  951.789714][T13220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  951.791486][T13220] batman_adv: batadv0: Adding interface: batadv_slave_1
[  951.791501][T13220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  951.791527][T13220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  951.843039][   T31] audit: type=1400 audit(1792247519.617:1466): avc:  denied  { write } for  pid=13324 comm="syz.9.1649" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  951.844317][   T31] audit: type=1400 audit(1792247519.617:1467): avc:  denied  { write } for  pid=13324 comm="syz.9.1649" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  951.992051][   T31] audit: type=1400 audit(1792247519.767:1468): avc:  denied  { write } for  pid=13098 comm="syz-executor" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  952.026487][T13220] hsr_slave_0: entered promiscuous mode
[  952.027451][T13220] hsr_slave_1: entered promiscuous mode
[  952.028110][T13220] debugfs: 'hsr0' already exists in 'hsr'
[  952.028129][T13220] Cannot create hsr debugfs directory
[  952.055892][   T31] audit: type=1400 audit(1792247519.827:1469): avc:  denied  { write } for  pid=13098 comm="syz-executor" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  952.082035][   T31] audit: type=1400 audit(1792247519.847:1470): avc:  denied  { write } for  pid=13098 comm="syz-executor" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  952.184035][   T31] audit: type=1400 audit(1792247519.957:1471): avc:  denied  { write } for  pid=13332 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  952.298866][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1650'.
[  952.305395][T13335] netlink: 'syz.9.1650': attribute type 22 has an invalid length.
[  952.305416][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1650'.
[  952.419489][T11611] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  952.419521][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1650'.
[  952.419548][T13335] netlink: 'syz.9.1650': attribute type 22 has an invalid length.
[  952.419561][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1650'.
[  952.611321][T12433] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  952.611369][T12433] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  952.611397][T12433] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  953.238421][   T31] audit: type=1400 audit(1792247521.007:1472): avc:  denied  { write } for  pid=13346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  953.269290][T13330] Bluetooth: hci20: command tx timeout
[  953.900248][T13330] Bluetooth: hci6: command 0x0406 tx timeout
[  953.901964][T13330] Bluetooth: hci5: command 0x0406 tx timeout
[  954.203938][T13367] FAULT_INJECTION: forcing a failure.
[  954.203938][T13367] name failslab, interval 1, probability 0, space 0, times 0
[  954.203996][T13367] CPU: 0 UID: 0 PID: 13367 Comm: syz.9.1653 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  954.204028][T13367] Tainted: [L]=SOFTLOCKUP
[  954.204036][T13367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  954.204050][T13367] Call Trace:
[  954.204058][T13367]  <TASK>
[  954.204068][T13367]  dump_stack_lvl+0x100/0x190
[  954.204108][T13367]  should_fail_ex.cold+0x5/0xa
[  954.204141][T13367]  should_failslab+0xc2/0x120
[  954.204174][T13367]  __kmalloc_noprof+0xfc/0x840
[  954.204201][T13367]  ? tomoyo_encode2+0xfb/0x3c0
[  954.204240][T13367]  tomoyo_encode2+0xfb/0x3c0
[  954.204276][T13367]  tomoyo_encode+0x29/0x50
[  954.204308][T13367]  tomoyo_realpath_from_path+0x18c/0x690
[  954.204346][T13367]  tomoyo_path_number_perm+0x23c/0x580
[  954.204375][T13367]  ? tomoyo_path_number_perm+0x22e/0x580
[  954.204406][T13367]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  954.204447][T13367]  ? __lock_acquire+0x5c0/0x1f40
[  954.204487][T13367]  ? __fget_files+0x34/0x3d0
[  954.204520][T13367]  ? find_held_lock+0x2b/0x80
[  954.204548][T13367]  ? hook_file_ioctl_common+0x140/0x440
[  954.204573][   T31] audit: type=1400 audit(1792247521.977:1473): avc:  denied  { write } for  pid=13365 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  954.204577][T13367]  ? __fget_files+0x21f/0x3d0
[  954.204613][T13367]  security_file_ioctl+0xd3/0x230
[  954.204644][T13367]  __x64_sys_ioctl+0xb7/0x210
[  954.204671][T13367]  do_syscall_64+0x123/0x790
[  954.204698][T13367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  954.204721][T13367] RIP: 0033:0x7f5fc0d9e559
[  954.204739][T13367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  954.204759][T13367] RSP: 002b:00007f5fc1c2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  954.204786][T13367] RAX: ffffffffffffffda RBX: 00007f5fc1025fa0 RCX: 00007f5fc0d9e559
[  954.204800][T13367] RDX: 0000200000000500 RSI: 00000000c040564a RDI: 0000000000000003
[  954.204813][T13367] RBP: 00007f5fc1c2f090 R08: 0000000000000000 R09: 0000000000000000
[  954.204826][T13367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  954.204838][T13367] R13: 00007f5fc1026038 R14: 00007f5fc1025fa0 R15: 00007ffd93069e58
[  954.204869][T13367]  </TASK>
[  954.204909][T13367] ERROR: Out of memory at tomoyo_realpath_from_path.
[  954.463459][T13254] bridge0: port 1(bridge_slave_0) entered blocking state
[  954.463546][T13254] bridge0: port 1(bridge_slave_0) entered disabled state
[  954.463703][T13254] bridge_slave_0: entered allmulticast mode
[  954.465371][T13254] bridge_slave_0: entered promiscuous mode
[  954.476616][T13254] bridge0: port 2(bridge_slave_1) entered blocking state
[  954.479032][T13254] bridge0: port 2(bridge_slave_1) entered disabled state
[  954.479167][T13254] bridge_slave_1: entered allmulticast mode
[  954.499769][T13254] bridge_slave_1: entered promiscuous mode
[  954.637790][T13254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  954.647341][T13254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  954.722658][T13372] FAULT_INJECTION: forcing a failure.
[  954.722658][T13372] name failslab, interval 1, probability 0, space 0, times 0
[  954.722692][T13372] CPU: 1 UID: 0 PID: 13372 Comm: syz.9.1654 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  954.722722][T13372] Tainted: [L]=SOFTLOCKUP
[  954.722731][T13372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  954.722745][T13372] Call Trace:
[  954.722753][T13372]  <TASK>
[  954.722761][T13372]  dump_stack_lvl+0x100/0x190
[  954.722798][T13372]  should_fail_ex.cold+0x5/0xa
[  954.722830][T13372]  should_failslab+0xc2/0x120
[  954.722864][T13372]  __kmalloc_noprof+0xfc/0x840
[  954.722890][T13372]  ? __pfx_dynamic_dname+0x10/0x10
[  954.722917][T13372]  ? tomoyo_encode2+0xfb/0x3c0
[  954.722958][T13372]  tomoyo_encode2+0xfb/0x3c0
[  954.722995][T13372]  tomoyo_encode+0x29/0x50
[  954.723027][T13372]  tomoyo_realpath_from_path+0x18c/0x690
[  954.723068][T13372]  tomoyo_path_number_perm+0x23c/0x580
[  954.723097][T13372]  ? tomoyo_path_number_perm+0x22e/0x580
[  954.723126][T13372]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  954.723184][T13372]  ? __lock_acquire+0x5c0/0x1f40
[  954.723226][T13372]  ? __fget_files+0x34/0x3d0
[  954.723263][T13372]  ? find_held_lock+0x2b/0x80
[  954.723295][T13372]  ? hook_file_ioctl_common+0x140/0x440
[  954.723326][T13372]  ? __fget_files+0x21f/0x3d0
[  954.723363][T13372]  security_file_ioctl+0xd3/0x230
[  954.723396][T13372]  __x64_sys_ioctl+0xb7/0x210
[  954.723427][T13372]  do_syscall_64+0x123/0x790
[  954.723462][T13372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  954.723486][T13372] RIP: 0033:0x7f5fc0d9e559
[  954.723505][T13372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  954.723525][T13372] RSP: 002b:00007f5fc1c0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  954.723547][T13372] RAX: ffffffffffffffda RBX: 00007f5fc1026090 RCX: 00007f5fc0d9e559
[  954.723563][T13372] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  954.723577][T13372] RBP: 00007f5fc1c0e090 R08: 0000000000000000 R09: 0000000000000000
[  954.723591][T13372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  954.723606][T13372] R13: 00007f5fc1026128 R14: 00007f5fc1026090 R15: 00007ffd93069e58
[  954.723639][T13372]  </TASK>
[  954.723659][T13372] ERROR: Out of memory at tomoyo_realpath_from_path.
[  954.725646][T13254] team0: Port device team_slave_0 added
[  954.744345][T13254] team0: Port device team_slave_1 added
[  954.822473][T13254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  954.822489][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  954.822515][T13254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  954.825467][T13254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  954.825481][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  954.825506][T13254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  955.053432][T13254] hsr_slave_0: entered promiscuous mode
[  955.054416][T13254] hsr_slave_1: entered promiscuous mode
[  955.058184][T13254] debugfs: 'hsr0' already exists in 'hsr'
[  955.058203][T13254] Cannot create hsr debugfs directory
[  955.341069][ T5607] Bluetooth: hci20: command tx timeout
[  955.431016][   T31] audit: type=1400 audit(1792247523.207:1474): avc:  denied  { write } for  pid=13371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  955.523741][T11575] usb 8-1: 0:2 : does not exist
[  955.571678][T13220] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  955.589460][T13220] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  955.591838][T13220] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  955.625217][   T31] audit: type=1400 audit(1792247523.397:1475): avc:  denied  { write } for  pid=13388 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  955.663172][T13220] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  955.674858][T13220] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  955.724533][T13220] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  955.734653][T13220] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  955.762982][T13220] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  955.845303][ T5793] usb 8-1: USB disconnect, device number 9
[  956.002797][T13254] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.193759][T13220] 8021q: adding VLAN 0 to HW filter on device bond0
[  957.352104][T13254] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.381878][T13220] 8021q: adding VLAN 0 to HW filter on device team0
[  957.416637][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state
[  957.416730][ T6023] bridge0: port 1(bridge_slave_0) entered forwarding state
[  957.418508][T13408] FAULT_INJECTION: forcing a failure.
[  957.418508][T13408] name failslab, interval 1, probability 0, space 0, times 0
[  957.418539][T13408] CPU: 0 UID: 0 PID: 13408 Comm: syz.7.1657 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  957.418569][T13408] Tainted: [L]=SOFTLOCKUP
[  957.418578][T13408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  957.418591][T13408] Call Trace:
[  957.418599][T13408]  <TASK>
[  957.418608][T13408]  dump_stack_lvl+0x100/0x190
[  957.418646][T13408]  should_fail_ex.cold+0x5/0xa
[  957.418672][T13408]  ? lockdep_hardirqs_on+0x7d/0x110
[  957.418705][T13408]  should_failslab+0xc2/0x120
[  957.418735][T13408]  kmem_cache_alloc_noprof+0x92/0x6a0
[  957.418762][T13408]  ? do_raw_spin_lock+0x128/0x260
[  957.418791][T13408]  ? inet_bind_bucket_create+0x2d/0x280
[  957.418830][T13408]  inet_bind_bucket_create+0x2d/0x280
[  957.418867][T13408]  inet_csk_get_port+0x153f/0x28e0
[  957.418921][T13408]  __inet6_bind+0x6c5/0x1b40
[  957.418952][T13408]  inet6_bind+0xdb/0x120
[  957.418973][T13408]  __sys_bind+0x1a9/0x260
[  957.419004][T13408]  ? __pfx___sys_bind+0x10/0x10
[  957.419033][T13408]  ? __fget_files+0x21f/0x3d0
[  957.419076][T13408]  ? __pfx_ksys_write+0x10/0x10
[  957.419111][T13408]  __x64_sys_bind+0x72/0xb0
[  957.419138][T13408]  ? lockdep_hardirqs_on+0x7d/0x110
[  957.419169][T13408]  do_syscall_64+0x123/0x790
[  957.419203][T13408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.419227][T13408] RIP: 0033:0x7f1e31f9e559
[  957.419245][T13408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  957.419266][T13408] RSP: 002b:00007f1e32e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  957.419286][T13408] RAX: ffffffffffffffda RBX: 00007f1e32225fa0 RCX: 00007f1e31f9e559
[  957.419301][T13408] RDX: 000000000000001b RSI: 00002000000000c0 RDI: 0000000000000003
[  957.419315][T13408] RBP: 00007f1e32e47090 R08: 0000000000000000 R09: 0000000000000000
[  957.419328][T13408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  957.419341][T13408] R13: 00007f1e32226038 R14: 00007f1e32225fa0 R15: 00007ffce6f6aca8
[  957.419374][T13408]  </TASK>
[  957.436623][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state
[  957.436715][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  957.642957][T13254] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.694877][   T31] audit: type=1400 audit(1792247525.467:1476): avc:  denied  { setopt } for  pid=13410 comm="syz.7.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  957.839617][   T31] audit: type=1400 audit(1792247525.617:1477): avc:  denied  { write } for  pid=13394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  957.993165][T13254] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  958.031456][   T31] audit: type=1400 audit(1792247525.807:1478): avc:  denied  { write } for  pid=13418 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  958.136245][T13220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  959.013119][ T5607] Bluetooth: hci7: command 0x0406 tx timeout
[  961.322288][T13254] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  961.405510][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  961.439989][T13254] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  961.811602][T13450] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1664'.
[  962.225184][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  962.246912][T13254] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  962.290689][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  962.313169][T13254] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  962.339670][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  962.510035][   T31] audit: type=1400 audit(1792247530.278:1479): avc:  denied  { write } for  pid=13424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  962.643362][T13469] jffs2: notice: (13469) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 5 orphan) and 7 of xref (0 dead, 7 orphan) found.
[  962.666664][   T31] audit: type=1400 audit(1792247530.438:1480): avc:  denied  { write } for  pid=13468 comm="syz.9.1665" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  962.697971][T13254] 8021q: adding VLAN 0 to HW filter on device bond0
[  962.715410][T13469] FAULT_INJECTION: forcing a failure.
[  962.715410][T13469] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  962.715433][T13469] CPU: 0 UID: 0 PID: 13469 Comm: syz.9.1665 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  962.715451][T13469] Tainted: [L]=SOFTLOCKUP
[  962.715455][T13469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  962.715463][T13469] Call Trace:
[  962.715467][T13469]  <TASK>
[  962.715472][T13469]  dump_stack_lvl+0x100/0x190
[  962.715494][T13469]  should_fail_ex.cold+0x5/0xa
[  962.715512][T13469]  _copy_from_user+0x2e/0xd0
[  962.715530][T13469]  memdup_user+0x6b/0xe0
[  962.715545][T13469]  strndup_user+0x78/0xe0
[  962.715558][T13469]  __x64_sys_mount+0x136/0x310
[  962.715572][T13469]  ? __pfx___x64_sys_mount+0x10/0x10
[  962.715590][T13469]  do_syscall_64+0x123/0x790
[  962.715609][T13469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  962.715621][T13469] RIP: 0033:0x7f5fc0d9e559
[  962.715632][T13469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  962.715644][T13469] RSP: 002b:00007f5fc1c2f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  962.715655][T13469] RAX: ffffffffffffffda RBX: 00007f5fc1025fa0 RCX: 00007f5fc0d9e559
[  962.715663][T13469] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  962.715671][T13469] RBP: 00007f5fc1c2f090 R08: 00002000000001c0 R09: 0000000000000000
[  962.715678][T13469] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  962.715685][T13469] R13: 00007f5fc1026038 R14: 00007f5fc1025fa0 R15: 00007ffd93069e58
[  962.715701][T13469]  </TASK>
[  962.757153][T13254] 8021q: adding VLAN 0 to HW filter on device team0
[  962.815152][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[  962.815246][ T5843] bridge0: port 1(bridge_slave_0) entered forwarding state
[  962.840343][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[  962.840451][ T5843] bridge0: port 2(bridge_slave_1) entered forwarding state
[  962.964763][   T31] audit: type=1400 audit(1792247530.738:1481): avc:  denied  { write } for  pid=13472 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  962.986988][T13254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  963.133036][T13220] 8021q: adding VLAN 0 to HW filter on device batadv0
[  963.174587][T13364] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[  963.200778][T13364] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[  963.209911][T13364] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[  963.225406][T13364] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[  963.237563][T13364] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
[  963.356120][T13486] fuse: Bad value for 'fd'
[  963.384481][T13220] veth0_vlan: entered promiscuous mode
[  963.413819][T13220] veth1_vlan: entered promiscuous mode
[  963.524831][T13220] veth0_macvtap: entered promiscuous mode
[  963.542600][T13220] veth1_macvtap: entered promiscuous mode
[  963.598811][ T5793] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  963.608022][T13220] batman_adv: batadv0: Interface activated: batadv_slave_0
[  963.639964][T13220] batman_adv: batadv0: Interface activated: batadv_slave_1
[  963.689496][ T1414] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  963.691018][ T1414] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  963.691057][ T1414] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  963.691166][ T1414] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  963.751241][ T5793] usb 8-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[  963.754717][ T5793] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  963.754751][ T5793] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  963.754779][ T5793] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.764699][ T5793] usb 8-1: config 0 descriptor??
[  964.075705][   T31] audit: type=1400 audit(1792247531.848:1482): avc:  denied  { write } for  pid=13488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  964.085704][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  964.085726][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  964.133940][T11335] Bluetooth: hci8: command 0x0406 tx timeout
[  964.307116][T12436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  964.307140][T12436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  964.370290][ T5793] input: HID 0b05:19b6 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0B05:19B6.0030/input/input66
[  964.445882][ T5793] asus 0003:0B05:19B6.0030: input,hidraw0: USB HID v0.00 Joystick [HID 0b05:19b6] on usb-dummy_hcd.7-1/input0
[  964.684139][   T31] audit: type=1400 audit(1792247532.458:1483): avc:  denied  { write } for  pid=13517 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  964.803891][T13254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  965.009528][T13254] veth0_vlan: entered promiscuous mode
[  965.049358][T13254] veth1_vlan: entered promiscuous mode
[  965.113938][T13486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  965.135455][T13481] rxe_eth0 speed is unknown, defaulting to 1000
[  965.161960][T13486] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  965.164238][T13486] random: crng reseeded on system resumption
[  965.206730][   T31] audit: type=1400 audit(1792247532.978:1484): avc:  denied  { read } for  pid=13523 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  965.324248][T13254] veth0_macvtap: entered promiscuous mode
[  965.342046][ T5607] Bluetooth: hci21: command tx timeout
[  965.375788][T13254] veth1_macvtap: entered promiscuous mode
[  965.471179][T13254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  965.497992][T13533] jffs2: notice: (13533) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 5 orphan) and 8 of xref (0 dead, 7 orphan) found.
[  965.514176][T13254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  965.561482][   T31] audit: type=1400 audit(1792247533.338:1485): avc:  denied  { write } for  pid=13485 comm="syz.7.1668" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  965.576269][T12433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  965.592449][T11609] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  965.595754][ T6023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  965.610803][ T6023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  965.720601][   T31] audit: type=1400 audit(1792247533.498:1486): avc:  denied  { write } for  pid=13525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  965.759073][ T5726] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  965.879181][   T31] audit: type=1400 audit(1792247533.658:1487): avc:  denied  { write } for  pid=13544 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  965.924621][ T5726] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  965.928733][ T5726] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  965.928759][ T5726] usb 4-1: config 0 has no interface number 0
[  965.928797][ T5726] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  965.934719][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.934747][ T5726] usb 4-1: Product: syz
[  965.934763][ T5726] usb 4-1: Manufacturer: syz
[  965.934780][ T5726] usb 4-1: SerialNumber: syz
[  965.947094][ T5726] usb 4-1: config 0 descriptor??
[  966.010455][ T5726] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[  966.106305][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  966.106327][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  966.184250][T13506] usb 4-1: USB disconnect, device number 41
[  966.204007][T13506] yurex 4-1:0.50: USB YUREX #0 now disconnected
[  966.295134][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  966.295149][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  967.412212][ T5607] Bluetooth: hci21: command tx timeout
[  968.061150][  T191] usb 8-1: USB disconnect, device number 10
[  968.118161][ T5727] asus 0003:0B05:19B6.0030: Asus failed to set fn lock: -71
[  969.249615][ T5607] Bluetooth: hci9: command 0x0406 tx timeout
[  969.488568][ T5607] Bluetooth: hci21: command tx timeout
[  969.523828][   T31] audit: type=1400 audit(1792247537.298:1488): avc:  denied  { write } for  pid=13546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  969.716430][T13571] overlayfs: failed to resolve './file2': -2
[  969.721236][T13571] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1675'.
[  969.721277][T13571] nbd: must specify at least one socket
[  969.805717][   T31] audit: type=1400 audit(1792247537.578:1489): avc:  denied  { write } for  pid=13568 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  969.858122][ T6023] nvmet: connect request for invalid subsystem testsubsys!
[  969.863342][T13571] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[  969.907644][T13481] bridge0: port 1(bridge_slave_0) entered blocking state
[  969.911036][T13481] bridge0: port 1(bridge_slave_0) entered disabled state
[  969.911139][T13481] bridge_slave_0: entered allmulticast mode
[  969.912002][T13481] bridge_slave_0: entered promiscuous mode
[  969.953017][T13481] bridge0: port 2(bridge_slave_1) entered blocking state
[  969.954787][T13481] bridge0: port 2(bridge_slave_1) entered disabled state
[  969.954924][T13481] bridge_slave_1: entered allmulticast mode
[  969.956443][T13481] bridge_slave_1: entered promiscuous mode
[  970.014117][T13481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  970.017729][T13481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  970.040194][T13506] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  970.083417][T13481] team0: Port device team_slave_0 added
[  970.085889][T13481] team0: Port device team_slave_1 added
[  970.135588][T13481] batman_adv: batadv0: Adding interface: batadv_slave_0
[  970.135607][T13481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  970.135627][T13481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  970.177665][T13481] batman_adv: batadv0: Adding interface: batadv_slave_1
[  970.177682][T13481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  970.177706][T13481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  970.179287][T13506] usb 2-1: device descriptor read/64, error -71
[  970.313172][T13481] hsr_slave_0: entered promiscuous mode
[  970.314128][T13481] hsr_slave_1: entered promiscuous mode
[  970.314720][T13481] debugfs: 'hsr0' already exists in 'hsr'
[  970.314739][T13481] Cannot create hsr debugfs directory
[  970.367713][T13586] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  970.438167][T13506] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  970.578239][T13506] usb 2-1: device descriptor read/64, error -71
[  970.692358][T13506] usb usb2-port1: attempt power cycle
[  971.009605][   T32] INFO: task syz-executor:5598 blocked for more than 144 seconds.
[  971.009632][   T32]       Tainted: G             L      syzkaller #0
[  971.009645][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  971.009654][   T32] task:syz-executor    state:D stack:22024 pid:5598  tgid:5598  ppid:1      task_flags:0x400140 flags:0x00080002
[  971.009740][   T32] Call Trace:
[  971.009748][   T32]  <TASK>
[  971.009762][   T32]  __schedule+0x1259/0x6920
[  971.009801][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  971.009835][   T32]  ? do_raw_spin_lock+0x128/0x260
[  971.009870][   T32]  ? lock_acquire+0x1d1/0x380
[  971.009896][   T32]  ? __pfx___schedule+0x10/0x10
[  971.009920][   T32]  ? find_held_lock+0x2b/0x80
[  971.009948][   T32]  ? schedule+0x225/0x2c0
[  971.009975][   T32]  schedule+0xdd/0x2c0
[  971.010005][   T32]  schedule_preempt_disabled+0x13/0x30
[  971.010031][   T32]  __mutex_lock+0xccb/0x1bd0
[  971.010063][   T32]  ? nfsd_shutdown_threads+0x5b/0xf0
[  971.010100][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  971.010137][   T32]  ? net_generic+0x25/0x2a0
[  971.010165][   T32]  ? net_generic+0xea/0x2a0
[  971.010191][   T32]  ? net_generic+0xea/0x2a0
[  971.010226][   T32]  ? nfsd_shutdown_threads+0x5b/0xf0
[  971.010258][   T32]  nfsd_shutdown_threads+0x5b/0xf0
[  971.010289][   T32]  nfsd_umount+0x3b/0x60
[  971.010322][   T32]  deactivate_locked_super+0xbd/0x130
[  971.010351][   T32]  deactivate_super+0xea/0x110
[  971.010378][   T32]  cleanup_mnt+0xb7/0x160
[  971.010403][   T32]  task_work_run+0x150/0x240
[  971.010440][   T32]  ? __pfx_task_work_run+0x10/0x10
[  971.010484][   T32]  exit_to_user_mode_loop+0x1d8/0x700
[  971.010516][   T32]  ? rcu_is_watching+0x13/0xc0
[  971.010552][   T32]  do_syscall_64+0x661/0x790
[  971.010589][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.010614][   T32] RIP: 0033:0x7ff20b59f797
[  971.010633][   T32] RSP: 002b:00007ffffd5269d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  971.010656][   T32] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff20b59f797
[  971.010672][   T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffd526a90
[  971.010686][   T32] RBP: 00007ffffd526a90 R08: 00007ffffd527a90 R09: 00000000ffffffff
[  971.010702][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffd527b20
[  971.010737][   T32] R13: 00007ff20b634efb R14: 00000000000c8887 R15: 00007ffffd527b60
[  971.010777][   T32]  </TASK>
[  971.010787][   T32] INFO: task syz-executor:5599 blocked for more than 144 seconds.
[  971.010806][   T32]       Tainted: G             L      syzkaller #0
[  971.010819][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  971.010828][   T32] task:syz-executor    state:D stack:22760 pid:5599  tgid:5599  ppid:1      task_flags:0x400140 flags:0x00080002
[  971.010894][   T32] Call Trace:
[  971.010901][   T32]  <TASK>
[  971.010914][   T32]  __schedule+0x1259/0x6920
[  971.010944][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  971.010979][   T32]  ? irqentry_exit+0x24d/0xa10
[  971.011019][   T32]  ? __pfx___schedule+0x10/0x10
[  971.062159][T13506] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  971.199517][T13506] usb 2-1: device descriptor read/8, error -71
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  971.239984][   T32]  ? find_held_lock+0x2b/0x80
[  971.240054][   T32]  ? schedule+0x225/0x2c0
[  971.240123][   T32]  schedule+0xdd/0x2c0
[  971.240163][   T32]  schedule_preempt_disabled+0x13/0x30
[  971.240199][   T32]  __mutex_lock+0xccb/0x1bd0
[  971.240236][   T32]  ? nfsd_shutdown_threads+0x5b/0xf0
[  971.240311][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  971.240385][   T32]  ? net_generic+0x25/0x2a0
[  971.240421][   T32]  ? net_generic+0xea/0x2a0
[  971.240453][   T32]  ? net_generic+0xea/0x2a0
[  971.245108][   T32]  ? nfsd_shutdown_threads+0x5b/0xf0
[  971.245175][   T32]  nfsd_shutdown_threads+0x5b/0xf0
[  971.245215][   T32]  nfsd_umount+0x3b/0x60
[  971.245290][   T32]  deactivate_locked_super+0xbd/0x130
[  971.245325][   T32]  deactivate_super+0xea/0x110
[  971.245409][   T32]  cleanup_mnt+0xb7/0x160
[  971.245446][   T32]  task_work_run+0x150/0x240
[  971.245487][   T32]  ? __pfx_task_work_run+0x10/0x10
[  971.245566][   T32]  exit_to_user_mode_loop+0x1d8/0x700
[  971.245602][   T32]  ? rcu_is_watching+0x13/0xc0
[  971.245643][   T32]  do_syscall_64+0x661/0x790
[  971.245715][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.245740][   T32] RIP: 0033:0x7ff73959f797
[  971.245786][   T32] RSP: 002b:00007ffd34ae0cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  971.379574][   T31] audit: type=1400 audit(1792247539.088:1490): avc:  denied  { write } for  pid=5587 comm="syz-executor" path="pipe:[5178]" dev="pipefs" ino=5178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  971.573061][T11335] Bluetooth: hci21: command tx timeout
[  971.635441][T13506] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  971.645185][   T32] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff73959f797
[  971.645217][   T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd34ae0d80
[  971.645261][   T32] RBP: 00007ffd34ae0d80 R08: 00007ffd34ae1d80 R09: 00000000ffffffff
[  971.645300][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd34ae1e10
[  971.645380][   T32] R13: 00007ff739634efb R14: 00000000000c66e5 R15: 00007ffd34ae1e50
[  971.645546][   T32]  </TASK>
[  971.645611][   T32] INFO: task syz-executor:5600 blocked for more than 144 seconds.
[  971.645714][   T32]       Tainted: G             L      syzkaller #0
[  971.645754][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  971.645791][   T32] task:syz-executor    state:D stack:23272 pid:5600  tgid:5600  ppid:1      task_flags:0x400140 flags:0x00080002
[  971.646112][   T32] Call Trace:
[  971.646147][   T32]  <TASK>
[  971.646189][   T32]  __schedule+0x1259/0x6920
[  971.646257][   T32]  ? __lock_acquire+0x5c0/0x1f40
[  971.646331][   T32]  ? do_raw_spin_lock+0x128/0x260
[  971.646406][   T32]  ? __pfx___schedule+0x10/0x10
[  971.646441][   T32]  ? find_held_lock+0x2b/0x80
[  971.663695][   T32]  ? schedule+0x225/0x2c0
[  971.663856][   T32]  schedule+0xdd/0x2c0
[  971.663932][   T32]  schedule_preempt_disabled+0x13/0x30
[  971.664004][   T32]  __mutex_lock+0xccb/0x1bd0
[  971.664078][   T32]  ? nfsd_shutdown_threads+0x5b/0xf0
[  971.664142][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  971.664221][   T32]  ? net_generic+0x25/0x2a0
[  971.664296][   T32]  ? net_generic+0xea/0x2a0
[  971.664365][   T32]  ? net_generic+0xea/0x2a0
[  971.664510][   T32]  ? nfsd_shutdown_threads+0x5b/0xf0
[  971.664581][   T32]  nfsd_shutdown_threads+0x5b/0xf0
[  971.664655][   T32]  nfsd_umount+0x3b/0x60
[  971.664704][   T32]  deactivate_locked_super+0xbd/0x130
[  971.664741][   T32]  deactivate_super+0xea/0x110
[  971.664902][   T32]  cleanup_mnt+0xb7/0x160
[  971.664977][   T32]  task_work_run+0x150/0x240
[  971.665053][   T32]  ? __pfx_task_work_run+0x10/0x10
[  971.665278][   T32]  exit_to_user_mode_loop+0x1d8/0x700
[  971.665349][   T32]  ? rcu_is_watching+0x13/0xc0
[  971.665432][   T32]  do_syscall_64+0x661/0x790
[  971.665507][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.665574][   T32] RIP: 0033:0x7f3a0379f797
[  971.665648][   T32] RSP: 002b:00007ffd3b2e9f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  971.665722][   T32] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3a0379f797
[  971.665801][   T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3b2e9ff0
[  971.665856][   T32] RBP: 00007ffd3b2e9ff0 R08: 00007ffd3b2eaff0 R09: 00000000ffffffff
[  971.665937][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3b2eb080
[  971.665952][   T32] R13: 00007f3a03834efb R14: 00000000000c855a R15: 00007ffd3b2eb0c0
[  971.666275][   T32]  </TASK>
[  971.811278][T13506] usb 2-1: device descriptor read/8, error -71
[  971.823729][   T32] 
[  971.823729][   T32] Showing all locks held in the system:
[  971.823772][   T32] locks held by kworker/u8:0/12: 3, last CPU#0:
[  971.823798][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  971.823986][   T32]  #1: ffffc90000117d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  971.824111][   T32]  #2: ffff888039e9d258 (&devlink->lock_key#20){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20
[  971.824265][   T32] locks held by pr/ttyS0/16: 1, last CPU#1:
[  971.824304][   T32]  #0: ffffffff8fdd88f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60
[  971.824455][   T32] locks held by khungtaskd/32: 1, last CPU#1:
[  971.824509][   T32]  #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  971.824668][   T32] locks held by kworker/u8:5/180: 5, last CPU#1:
[  971.824723][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  971.824848][   T32]  #1: ffffc90002e67d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  971.824998][   T32]  #2: ffff88802b0c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[  971.825171][   T32]  #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: ieee80211_update_sta_info.isra.0+0x2a8/0x1230
[  971.825358][   T32]  #4: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: sta_info_get+0x55/0x3e0
[  971.831266][   T32] locks held by kworker/u8:7/1143: 3, last CPU#1:
[  971.831293][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  971.853660][   T32]  #1: ffffc900059cfd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  971.855262][   T32]  #2: ffff8880ace30800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[  971.855483][   T32] locks held by kworker/u8:9/1208: 3, last CPU#1:
[  971.855536][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  971.855768][   T32]  #1: ffffc9000591fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  971.855835][   T32]  #2: 
[  971.969013][T13506] usb usb2-port1: unable to enumerate USB device
[  972.037816][   T32] ffff888090be0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[  972.037899][   T32] locks held by kworker/u8:10/1414: 3, last CPU#1:
[  972.037926][   T32]  #0: ffff8880a5160940 ((wq_completion)wg-kex-wg1#45){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  972.038112][   T32]  #1: ffffc900060cfd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  972.038292][   T32]  #2: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[  972.038486][   T32] locks held by kworker/0:1H/2100: 6, last CPU#0:
[  972.038526][   T32]  #0: ffff88801d05ad40 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  972.038683][   T32]  #1: ffffc9000720fd08 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  972.038884][   T32]  #2: ffff8880b8228518 (hrtimer_bases.lock){-.-.}-{2:2}, at: snd_rawmidi_transmit+0x28/0x130
[  972.039007][   T32]  #3: ffff8880ab79ec70 (&runtime->sleep){....}-{3:3}, at: __wake_up+0x1c/0x60
[  972.039222][   T32]  #4: ffff8880412d8a98 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xbd/0x1c90
[  972.039402][   T32]  #5: ffff8880b823bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[  972.039617][   T32] locks held by klogd/4958: 1, last CPU#1:
[  972.039656][   T32]  #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[  972.039857][   T32] locks held by getty/5356: 2, on CPU#0:
[  972.039894][   T32]  #0: ffff88803997a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  972.051626][   T32]  #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  972.235327][   T32] locks held by syz-executor/5587: 2, last CPU#1:
[  972.235354][   T32]  #0: ffff888031dc5900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  972.235541][   T32]  #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[  972.235721][   T32] locks held by syz-executor/5598: 2, on CPU#0:
[  972.235760][   T32]  #0: ffff888034d440e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.235926][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.236085][   T32] locks held by syz-executor/5599: 2, on CPU#0:
[  972.236111][   T32]  #0: ffff888037dbe0e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.236290][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.236438][   T32] locks held by syz-executor/5600: 2, on CPU#0:
[  972.236454][   T32]  #0: ffff88802b3e00e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.236737][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.236868][   T32] locks held by kworker/u8:11/5842: 4, last CPU#1:
[  972.236907][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  972.237099][   T32]  #1: ffffc900047afd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  972.237455][   T32]  #2: ffff888092ba0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[  972.264290][   T32]  #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: ieee80211_update_sta_info.isra.0+0x2a8/0x1230
[  972.465555][   T32] locks held by kworker/u8:12/5843: 3, last CPU#1:
[  972.465583][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  972.465801][   T32]  #1: ffffc900047bfd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  972.465997][   T32]  #2: ffff888087a30800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[  972.466142][   T32] locks held by kworker/u8:13/6023: 3, last CPU#1:
[  972.466190][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  972.466374][   T32]  #1: ffffc90004f67d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  972.466521][   T32]  #2: ffff88802b0c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_
** replaying previous printk message **
[  972.466521][   T32]  #2: ffff88802b0c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[  972.466714][   T32] locks held by kworker/u8:16/6046: 3, on CPU#1:
[  972.466739][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  972.466904][   T32]  #1: ffffc9000546fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  972.467122][   T32]  #2: ffffffff91cd5b80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[  972.467332][   T32] locks held by kworker/u8:17/6666: 3, last CPU#1:
[  972.467372][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  972.467554][   T32]  #1: ffffc900042c7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  972.486670][   T32]  #2: ffff8880acfd0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[  972.672270][   T32] locks held by kworker/1:2/9777: 2, last CPU#1:
[  972.672319][   T32]  #0: ffff8880a43f8940 ((wq_completion)wg-crypt-wg0#18){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  972.672578][   T32]  #1: ffffc900031e7d08 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  972.672783][   T32] locks held by syz-executor/11334: 2, on CPU#0:
[  972.672822][   T32]  #0: ffff88807d8800e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.673001][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.673189][   T32] locks held by kworker/u8:2/11609: 3, last CPU#1:
[  972.673228][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  972.673411][   T32]  #1: ffffc900031c7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  972.673633][   T32]  #2: ffff8880ace30800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[  972.673800][   T32] locks held by kworker/u8:15/11611: 3, last CPU#1:
[  972.673840][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  972.674024][   T32]  #1: ffffc900034b7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  972.674202][   T32]  #2: ffff888056250800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[  972.695029][   T32] locks held by syz.3.1405/11721: 3, on CPU#1:
[  972.700106][   T32]  #0: ffff888032d422b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  972.715279][   T32]  #1: ffff888026878460 (sb_writers#17){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  972.715501][   T32]  #2: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  972.715726][   T32] locks held by syz-executor/11824: 2, on CPU#0:
[  972.715780][   T32]  #0: ffff8880371560e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.715997][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.716171][   T32] locks held by syz-executor/11885: 2, on CPU#0:
[  972.716201][   T32]  #0: ffff88807a74a0e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.717666][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.872985][   T32] locks held by syz-executor/11950: 2, on CPU#1:
[  972.873013][   T32]  #0: ffff88807ef980e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.881273][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.881484][   T32] locks held by syz-executor/11988: 2, on CPU#0:
[  972.881509][   T32]  #0: ffff88807f40e0e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.881682][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.881841][   T32] locks held by syz-executor/12089: 2, on CPU#0:
[  972.881881][   T32]  #0: ffff8880791140e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.882030][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.882172][   T32] locks held by syz-executor/12239: 2, on CPU#0:
[  972.882197][   T32]  #0: ffff8880383940e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.882362][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.882536][   T32] locks held by syz-executor/12309: 2, on CPU#1:
[  972.885255][   T32]  #0: ffff88804f2160e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.901229][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.940685][   T32] locks held by kworker/u8:19/12434: 3, last CPU#1:
[  972.940704][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  972.940766][   T32]  #1: ffffc90004097d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  972.940828][   T32]  #2: ffff888095050800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[  972.941660][   T32] locks held by kworker/u8:20/12435: 2, last CPU#0:
[  972.941677][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  972.941739][   T32]  #1: ffffc900040a7d08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  972.941802][   T32] locks held by kworker/u8:22/12438: 3, last CPU#1:
[  972.941818][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  972.941880][   T32]  #1: ffffc90003ce7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  972.941943][   T32]  #2: ffff88807b2fb258 (&devlink->lock_key#16){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20
[  972.942004][   T32] locks held by syz-executor/12557: 2, on CPU#0:
[  972.942019][   T32]  #0: ffff888024fd40e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.942081][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.942139][   T32] locks held by syz-executor/12653: 2, on CPU#0:
[  972.942154][   T32]  #0: ffff888026f820e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.942210][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.942270][   T32] locks held by syz-executor/12768: 2, on CPU#1:
[  972.942286][   T32]  #0: ffff8880462260e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.942345][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.942408][   T32] locks held by syz.6.1613/13079: 2, on CPU#1:
[  972.942423][   T32]  #0: ffffffff91d849c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  972.942471][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xd9/0x230
[  972.942525][   T32] locks held by syz-executor/13087: 2, on CPU#1:
[  972.942540][   T32]  #0: ffff88803a06c0e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.942598][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.942657][   T32] locks held by syz-executor/13098: 2, on CPU#1:
[  972.942673][   T32]  #0: ffff8880564f40e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  972.942731][   T32]  #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.942793][   T32] locks held by syz-executor/13481: 2, on CPU#1:
[  972.942808][   T32]  #0: ffffffff9245aa68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0
[  972.942865][   T32]  #1: ffffffff91cd5b80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620
[  972.942917][   T32] locks held by kworker/u8:23/13564: 4, last CPU#0:
[  972.942933][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  972.942994][   T32]  #1: ffffc90004257d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  972.943065][   T32]  #2: ffff888028729258 (&devlink->lock_key#18){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20
[  972.943123][   T32]  #3: ffff8880a08cb8e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1c7/0xd20
[  972.943179][   T32] locks held by syz.3.1677/13578: 2, last CPU#0:
[  972.943195][   T32]  #0: ffff888039419bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  972.943253][   T32]  #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  972.943308][   T32] locks held by syz.7.1679/13589: 2, on CPU#1:
[  972.943324][   T32]  #0: ffffffff91bbdd00 (register_mutex#4){+.+.}-{4:4}, at: odev_release+0x44/0x70
[  972.943380][   T32]  #1: ffffffff8fdf84e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[  972.943433][   T32] locks held by syz.7.1679/13590: 1, on CPU#0:
[  972.943449][   T32]  #0: ffff888035033960 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_release+0x66/0x110
[  972.943508][   T32] locks held by sed/13595: 2, last CPU#1:
[  972.943522][   T32]  #0: ffffffff9090b2f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x169/0x3c0
[  972.943580][   T32]  #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[  973.096908][   T32] 
[  973.096921][   T32] =============================================
[  973.096921][   T32] 
[  973.096948][   T32] NMI backtrace for cpu 0
[  973.096966][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  973.096996][   T32] Tainted: [L]=SOFTLOCKUP
[  973.097004][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  973.097018][   T32] Call Trace:
[  973.097026][   T32]  <TASK>
[  973.097036][   T32]  dump_stack_lvl+0x100/0x190
[  973.097074][   T32]  nmi_cpu_backtrace.cold+0x12d/0x151
[  973.097108][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  973.097136][   T32]  nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[  973.097167][   T32]  sys_info+0x141/0x190
[  973.097189][   T32]  watchdog+0xcb1/0x1030
[  973.097223][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  973.097253][   T32]  ? __pfx_watchdog+0x10/0x10
[  973.097280][   T32]  ? __kthread_parkme+0x18f/0x230
[  973.097310][   T32]  ? kthread+0x13a/0x450
[  973.097338][   T32]  ? __pfx_watchdog+0x10/0x10
[  973.097363][   T32]  kthread+0x373/0x450
[  973.097392][   T32]  ? __pfx_kthread+0x10/0x10
[  973.097424][   T32]  ret_from_fork+0x730/0xd60
[  973.097451][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  973.097478][   T32]  ? __switch_to+0x800/0x10f0
[  973.097508][   T32]  ? __pfx_kthread+0x10/0x10
[  973.097546][   T32]  ret_from_fork_asm+0x1a/0x30
[  973.097585][   T32]  </TASK>
[  973.097593][   T32] Sending NMI from CPU 0 to CPUs 1:
[  973.097624][    C1] NMI backtrace for cpu 1
[  973.097637][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  973.097665][    C1] Tainted: [L]=SOFTLOCKUP
[  973.097672][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  973.097684][    C1] RIP: 0010:io_serial_in+0x87/0xb0
[  973.097714][    C1] Code: 88 59 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 88 c9 cd fc eb a2 e8 11 ca
[  973.097734][    C1] RSP: 0000:ffffc90000157958 EFLAGS: 00000002
[  973.097749][    C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000
[  973.097761][    C1] RDX: 00000000000003fd RSI: ffffffff85b2ced0 RDI: ffffffff9cc7e660
[  973.097774][    C1] RBP: ffffffff9cc7e620 R08: 0000000000000001 R09: 000000000000001f
[  973.097786][    C1] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000
[  973.097799][    C1] R13: 0000000000000020 R14: fffffbfff398fd21 R15: dffffc0000000000
[  973.097813][    C1] FS:  0000000000000000(0000) GS:ffff888122a46000(0000) knlGS:0000000000000000
[  973.097832][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  973.097846][    C1] CR2: 00007fb3d6243fe8 CR3: 0000000021b4c000 CR4: 00000000003526f0
[  973.097859][    C1] Call Trace:
[  973.097866][    C1]  <TASK>
[  973.097874][    C1]  wait_for_lsr+0x13a/0x210
[  973.097896][    C1]  serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0
[  973.097919][    C1]  __serial8250_console_fifo_write+0xa5/0x290
[  973.097939][    C1]  ? __pfx_io_serial_out+0x10/0x10
[  973.097970][    C1]  serial8250_console_write+0x1108/0x14f0
[  973.097997][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  973.098021][    C1]  ? __nbcon_context_update_unsafe+0x1b6/0x220
[  973.098051][    C1]  ? __pfx___nbcon_context_update_unsafe+0x10/0x10
[  973.098078][    C1]  nbcon_emit_next_record+0x8f7/0xa70
[  973.098102][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  973.098124][    C1]  ? nbcon_context_try_acquire+0x3a6/0xc60
[  973.098145][    C1]  ? do_raw_spin_lock+0xf0/0x260
[  973.098176][    C1]  ? __pfx___cant_migrate+0x10/0x10
[  973.098203][    C1]  ? _raw_spin_lock_irqsave+0x42/0x60
[  973.098229][    C1]  nbcon_emit_one+0x1a8/0x2b0
[  973.098249][    C1]  ? __pfx_nbcon_emit_one+0x10/0x10
[  973.098274][    C1]  nbcon_kthread_func+0x613/0x7d0
[  973.098297][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  973.098322][    C1]  ? __kthread_parkme+0x18f/0x230
[  973.098347][    C1]  ? kthread+0x13a/0x450
[  973.098373][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  973.098395][    C1]  kthread+0x373/0x450
[  973.098421][    C1]  ? __pfx_kthread+0x10/0x10
[  973.098449][    C1]  ret_from_fork+0x730/0xd60
[  973.098472][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  973.098495][    C1]  ? __switch_to+0x800/0x10f0
[  973.098522][    C1]  ? __pfx_kthread+0x10/0x10
[  973.098550][    C1]  ret_from_fork_asm+0x1a/0x30
[  973.098580][    C1]  </TASK>
[  973.140141][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  974.440511][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  974.451194][   T32] Tainted: [L]=SOFTLOCKUP
[  974.455494][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  974.465518][   T32] Call Trace:
[  974.468772][   T32]  <TASK>
[  974.471680][   T32]  dump_stack_lvl+0x100/0x190
[  974.476340][   T32]  vpanic+0x553/0x970
[  974.480293][   T32]  ? __pfx_vpanic+0x10/0x10
[  974.484772][   T32]  panic+0xd1/0xe0
[  974.488468][   T32]  ? __pfx_panic+0x10/0x10
[  974.492889][   T32]  ? nmi_trigger_cpumask_backtrace+0x263/0x2a0
[  974.499056][   T32]  ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0
[  974.505214][   T32]  ? watchdog.cold+0x1ec/0x234
[  974.509971][   T32]  watchdog.cold+0x1fd/0x234
[  974.514540][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  974.520328][   T32]  ? __pfx_watchdog+0x10/0x10
[  974.524983][   T32]  ? __kthread_parkme+0x18f/0x230
[  974.529988][   T32]  ? kthread+0x13a/0x450
[  974.534221][   T32]  ? __pfx_watchdog+0x10/0x10
[  974.538880][   T32]  kthread+0x373/0x450
[  974.542958][   T32]  ? __pfx_kthread+0x10/0x10
[  974.547561][   T32]  ret_from_fork+0x730/0xd60
[  974.552162][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  974.557262][   T32]  ? __switch_to+0x800/0x10f0
[  974.561934][   T32]  ? __pfx_kthread+0x10/0x10
[  974.566507][   T32]  ret_from_fork_asm+0x1a/0x30
[  974.571254][   T32]  </TASK>
[  974.574495][   T32] Kernel Offset: disabled
[  974.578803][   T32] Rebooting in 86400 seconds..