last executing test programs:

13m3.352855687s ago: executing program 32 (id=118):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xf, 0x0, 0x8000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='jffs2\x00', 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x5, 0x210000)
close(r0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000400)=""/102392, 0x18ff8)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000019400)={0x2020}, 0x2020)
syz_fuse_handle_req(r3, 0x0, 0x0, 0x0)
set_mempolicy(0x3, 0x0, 0x3)
r4 = syz_clone(0xa0066000, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setuid(0xee01)
setregid(0xee01, 0x0)
ptrace(0x10, r4)
r5 = openat(0xffffffffffffff9c, &(0x7f000001b440)='./mnt/fillfile\x00', 0x42, 0x9f)
write(r5, &(0x7f000001b480)="000102", 0x3)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
lseek(r6, 0x2000, 0x0)
syz_clone(0x0, 0x0, 0x44, 0x0, 0x0, 0x0)

12m3.351992851s ago: executing program 33 (id=256):
openat(0xffffffffffffff9c, 0x0, 0x503942, 0x32)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000240)=0xf1ff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x2040400)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e008d2a0000"], 0x1c}}, 0x0)

11m37.411621364s ago: executing program 34 (id=304):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGLCKTRMIOS(r0, 0x4b41, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000009, 0x80000)
ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0xbffffffd, 0xb77, 0x3014, 0x0, 0xf, 0x9, 0x1, 0x3}})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e20, @empty}], 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000600)={<r7=>0x0, 0x10, &(0x7f0000000640)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000680)=0x10)
add_key(&(0x7f00000006c0)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861f", 0x1d, 0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="30000000100001080900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000800)={r7, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
write$dsp(0xffffffffffffffff, &(0x7f00000008c0)="5cba91a4", 0xffffffd9)
ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000900)=0x4)
write(r3, &(0x7f0000000940), 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0x4, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f0000000e80)='GPL\x00', 0x5, 0xc3, &(0x7f0000000ec0)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0)

9m5.289810768s ago: executing program 35 (id=621):
fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f, 0x4d, 0x2ba8, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x200, 0x4f, 0x4, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x1, 0x3, 0x9})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000480)={0x1, 0x3, 0x9})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000005c0)={r1})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

8m31.462996244s ago: executing program 36 (id=686):
connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x38}, 0x3d}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0)

8m28.880668343s ago: executing program 37 (id=694):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000efff85000000630000001500020000000000bf010000000000008500000056000000b70000000200100095"], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9f, 0xc0, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1ff, 0x0, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x6, 0x8, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x2, 0xfc, {0x8, 0x25, 0x1, 0x3, 0xf1ee8a9fa4944be, 0x40, 0x6}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x11, &(0x7f00000000c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x23, 0x0, 0x94}]}})
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r0, r2, 0x25, 0x4, @void}, 0x10)
syz_emit_ethernet(0x7a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0xe803}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0)

8m24.569721101s ago: executing program 38 (id=704):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, 0xffffffffffffffff, 0x0)
io_setup(0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8000, 0x1f7)
sendto$inet6(r4, &(0x7f00000005c0)='X', 0x14f8d, 0x0, &(0x7f0000000600)={0xa, 0x4e23, 0x100, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000640)={0x1, [<r5=>0x0]}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000006c0)={r5, 0xa9ac}, &(0x7f0000000700)=0x8)
socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000840)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800, 0x0, 0xfffe}, @ipv4=@icmp={{0x32, 0x4, 0x1, 0xd, 0xd0, 0x64, 0x0, 0x80, 0x1, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x44, 0x67, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@local, 0x2}, {@loopback}, {@loopback, 0x40}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x4}, {@empty}, {@private=0xa010102, 0x2}, {@broadcast, 0x10001}]}, @cipso={0x86, 0x6e, 0x3, [{0x1, 0x12, "ea1fad847880ebd0efc1e53551c6e504"}, {0x7, 0xf, "055642f656043bca3758fa7d6c"}, {0x6, 0xb, "5652437227e24538ed"}, {0x0, 0x12, "fd569b57dbfedc2da7f27f37c5dc89ea"}, {0x1, 0x12, "8393175938e4731d9b95d6826fc65a46"}, {0x1, 0xd, "640bfe8bd8284458e15653"}, {0x6, 0xb, "668fbce7b6683dcf82"}]}]}}, @address_request={0x11, 0x0, 0x0, 0xe}}}, 0xde)

7m30.875718112s ago: executing program 39 (id=809):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000019340)={'bridge0\x00'})
sendmsg$nl_route(r1, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019500)={&(0x7f0000019580)=ANY=[@ANYBLOB="38000000550001002cbd7000fedbdf2507000000", @ANYBLOB="20000100"], 0x38}, 0x1, 0x0, 0x0, 0x4000081}, 0x40080c0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000019540)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0xfffffffffffffea3)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@mss={0x2, 0xfffffffc}, @mss={0x2, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x1, 0x401}, @timestamp], 0x6)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xf, &(0x7f0000000180)={0x8, 0xb3f0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6)
syz_clone(0x4008400, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000019380), 0x2)
r4 = memfd_create(&(0x7f00000193c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000019440)={r4, 0x0, 0x4000, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000))
close_range(0xffffffffffffffff, r5, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000019480)={@private1}, 0x14)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f00000002c0)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0})
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000019640)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f00000195c0)='cpu.stat\x00', 0x275a, 0x0)

7m13.773777282s ago: executing program 40 (id=854):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x60000000004, 0x1000000000, 0x7ff, 0x800000000041, 0x2000001, 0x0, 0x9521, 0x0, 0x8, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x6213})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m9.649755456s ago: executing program 41 (id=864):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fstat(r2, &(0x7f0000000340))
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffb156ff16ef00000800bbfab7b09141d782ba6e0ffa5d0166864868b782fb02db81dba94d6cf4f441887d865e5295f21ba8cc8a8445d2dad928f197f3fd3bf2fb1f2de34dbde697c078420c0ae34a2efcd7724bda25239ffd23405f"], 0x15)
init_module(&(0x7f0000000d40)=ANY=[@ANYBLOB="7f454c460009020803000000000000000300060068000000e8010000000000000000000000060000000300380002000c00ce0001000300000006000000020000000000000007000000000000000200000000000000050000000000000004000000000000000100000000000000000000700400000092800000000000000000000000000000070000000000000004000000000000000001000000000000617bd0a0cdac27d927bf7a57b605000000000000008debeca4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00"/372], 0x1b4, &(0x7f0000001040)='debugfs\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x18d042, 0x15)
ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f00000006c0)={0x80})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000780)={0x7ff, "b949667501f026b01df7590c5932abd0fac6c70c0ed6a9d04b8e50406c52d4ee", <r8=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000007c0)={"01bd29b8cc1e1d4d62b978ce5b5dcba4fbd277a29badfd3c4c79793994e9902d", r8})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r9=>0x0})
epoll_pwait2(r7, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000580), &(0x7f0000000800)={[0x7]}, 0x8)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
sendmsg$nl_route(r5, 0x0, 0x2000c006)

7m3.704743551s ago: executing program 42 (id=839):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001c000100040000000000000007000000", @ANYRES32=r1, @ANYBLOB="8000f2040a000200aaaaaaaaaa1be3ff050005"], 0x30}, 0x1, 0x1000000}, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60042, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300fffeffffdf02000000000000400000000000000003030000000000000000000008003a00011d040004000d00030000000080000000000000000000000700000000000000080000000000000005000000000000000204"], 0x78)
ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/kcore\x00', 0x0, 0x0)
lseek(r3, 0xd57, 0x2)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x2d76a8ed40aa0818, 0x0)

6m59.772185797s ago: executing program 43 (id=879):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000400)={0x0, &(0x7f0000000180)=[@wr_crn={0x67, 0x20, {0x3, 0xab6}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xb, 0x4, 0x2, 0xff}}, @wr_drn={0x68, 0x20, {0x2, 0x47}}, @nested_amd_vmload={0x182, 0x18}, @in_dx={0x69, 0x20, {0x3755, 0x2}}, @wr_crn={0x67, 0x20, {0x3, 0xfffffffffffffffd}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0x77f0}}, @in_dx={0x69, 0x20, {0x90a7, 0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x50e, 0x0, 0x7, 0x7}}, @nested_vmlaunch={0x12f, 0x18}, @nested_load_syzos={0x136, 0x40, {0x3, 0x2, [@wr_drn={0x68, 0x20, {0x4, 0x80}}]}}, @uexit={0x0, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x9a, 0x3, 0x5, 0x3}}], 0x250})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22ffe6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000005c0)={0xb957b7ed50de5cc3, &(0x7f0000000600)=[{0x1, 0x3, 0x65, 0x8}, {0x10, 0x2, 0x8, 0x101}]})
ioctl$TUNGETVNETLE(r4, 0x40107447, &(0x7f0000000640))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf254f00000008000300", @ANYRES32=r9, @ANYBLOB="44007a8014000200307c4a6095e1d2b05c4027189d431cbe0c0003"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x240000c0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="b8b36c000065f3f30f017e6c0f21f83503000e000f23f8c744240010000000c7442402ce010000c7442406000000000f011c240f01c8dcb000800000c40dc271989900958000000000200066ed66baf80cb8442ee886ef66bafc0cefb948030000b84b5dbdd3ba62291f2f66b82e010f00d0c4c19d63f6", 0x7e}], 0xaaaaaaaaaaaac63, 0x17, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6m54.893809252s ago: executing program 44 (id=886):
r0 = syz_io_uring_setup(0x80000740, &(0x7f00000002c0)={0x0, 0x289b, 0x40, 0x1, 0xdc}, &(0x7f0000000340), &(0x7f00000019c0), &(0x7f0000001a00))
eventfd2(0x400, 0x80001)
mkdirat(0xffffffffffffff9c, &(0x7f0000001ac0)='./proc\x00', 0x1f7)
mount(0x0, &(0x7f0000001b00)='./proc\x00', &(0x7f0000001b40)='proc\x00', 0x4000, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x1233, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000140)=@udp=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2], 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xd, 0x0, &(0x7f0000000540)="00000000000000000a00000011", 0x0}, 0x50)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x4000)
setresuid(r4, r4, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x4000)
mount$9p_fd(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000240), 0x68404, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472080e336f3d0000000000000000", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,aname=GPL\x00,noxattr,uname=proc\x00,noxattr,euid=', @ANYRESDEC=r4, @ANYBLOB=',subj_role=,appraise_type=imasig,appraise,fowner=', @ANYRESDEC=r5, @ANYBLOB=',permit_directio,\x00'])
r6 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r6, &(0x7f0000001bc0)='3', 0x4e)
io_uring_enter(r0, 0x5148, 0xe93c, 0x0, 0x0, 0x0)

6m18.756517782s ago: executing program 45 (id=942):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x9b, 0xa9, 0x1d, 0x40, 0x2c42, 0x1709, 0xb3a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x0, 0x10, 0x6, "", [{{0x9, 0x4, 0x7a, 0x9, 0x0, 0x26, 0x89, 0xa7}}]}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x3, 0x1, "85"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000140)=0x7, 0x4)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000180)=""/4076, &(0x7f00000011c0)=0xfec)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000000c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x40, 0xa0, 0x4, 0x1}, 0x0})
fanotify_init(0x10, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt(r1, 0x1000, 0x0, &(0x7f0000001480)=""/4096, &(0x7f0000002480)=0x1000)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$dir(0xffffffffffffff9c, &(0x7f0000001200)='.\x00', 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
symlinkat(&(0x7f0000001240)='.\x00', 0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00')
r2 = eventfd2(0x50, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r3=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000001300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380), 0x0, &(0x7f00000013c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r5, &(0x7f0000001440)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r5], 0x15)
r6 = syz_usb_connect(0x0, 0x32, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000200000040cd0c80000001010203010902200001010080000904"], 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)

6m11.461135994s ago: executing program 46 (id=928):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mq_open(&(0x7f0000002a80)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x96<x\xac\xbd\xeb\xa7\\\xf5G\x83\x03\x057\xcf\x9a\xefX\x15\xc8\xca\xb3\xa8\a]\xd0?\xa0\x1by\x17\xd1\x12\x99\xea\x99,`\xb2\x04\x1f\xcaM\x91\x86\xe9\xe6\xa7ke+V\vU}\xbf\x9cz0\xc6Y\xef&\x96o\x91', 0x8c2, 0x30, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r0 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x308, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000580)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@new_dev={0x1, 0x589, 0x0, 0x0, 0x1000, 0xffffffff, r0, 0x0, 0xe}}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(0xffffffffffffffff, 0x1, 0x0)
fchdir(r5)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0)
r6 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000780)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f00000007c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r7, &(0x7f0000000800)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8)
sendmmsg(r7, &(0x7f0000000980), 0x800001d, 0x1c)
openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r8, 0x4008af04, &(0x7f0000000180)=0xffffffffffffffff)
ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffff1000})
ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0x3ff8, 0x0, 0x0}]})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000380)=0x201)

6m4.571026399s ago: executing program 47 (id=940):
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
syz_open_dev$video4linux(&(0x7f0000000180), 0x401, 0x2400)
unshare(0x6a060000)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x700, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

5m57.22638936s ago: executing program 48 (id=969):
socket$inet6_tcp(0xa, 0x1, 0x0)
setns(0xc9, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000380)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

5m35.137047131s ago: executing program 49 (id=996):
setns(0xc9, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000500)={0xc2, 0x7, 0x6, 0x481, "b551ad20495b00a34c761405c382b5e3efbb6f875976541b0bb85d0d3fb585f163c886d3a466aac6d23b9ca241013a1ca499e1d7af5ce6406ab365af95fa7baa61e21f5fc29f363025ef8a43ef26342472c441d0998aae3f005d536197249890bc0971da08b733beef0455288fb4737bad5e120cbadb32eeb7698566eadadcd3d7fe258568056eb5b7d54387f1a2b594421519f9d0b1edc132d3db32de2cc34088428b4266e46010746d"})
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@can_delroute={0x70, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "062e346aa0f99857"}}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "03ef7506ecbef970"}, 0x3}}, @CGW_SRC_IF={0x8}, @CGW_FILTER={0xc}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff8}}]}, 0x70}}, 0x0)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8)

5m30.732738508s ago: executing program 50 (id=1011):
unshare(0x60000600)
ioctl(0xffffffffffffffff, 0xc138fd04, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000406d042bc500240102000109022200010100a03209040000010300000009211101000122150007058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x88000, 0x0)
ioctl$TIOCSIG(r1, 0x40045436, 0x3)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022150000000600ff0901a10185201500260c017508910e8102c0"], 0x0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000240)={{0x9, 0x1, 0x4, 0x0, 0x2}, [{0x78000000000, 0x7, 0x2d, 0x7}, {0x2, 0x3, 0xd}]})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1})
write$tun(r2, &(0x7f00000000c0)={@void, @val={0x1, 0x3, 0x1b, 0x30, 0x14, 0x6}, @ipv6=@gre_packet={0x3, 0x6, "1772ab", 0x44, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0xa888, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x86dd}}}, {0x8, 0x22eb, 0x1, {{0xc, 0x2, 0xfa, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0xfdef)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3)
bind$bt_l2cap(r4, 0x0, 0x0)

5m3.396899662s ago: executing program 2 (id=1066):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000180)={0x2, <r1=>0xffffffffffffffff, 0x80000}, &(0x7f00000001c0)=0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'rose0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x20000f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_setup(0x66, &(0x7f0000000200)=<r4=>0x0)
setregid(0x0, 0xee00)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
setuid(0xee01)
io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xe, r5, 0x0, 0x0, 0x0, 0x0, 0x4}])
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10)

5m1.904705923s ago: executing program 2 (id=1068):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x170, 0xffffffff, 0xd8, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)
clock_gettime(0x0, &(0x7f00000034c0)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000003400)=[{{&(0x7f0000000780)=@nfc_llcp, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/120, 0x78}, {&(0x7f0000001880)=""/44, 0x2c}], 0x3, &(0x7f0000001900)=""/97, 0x61}, 0x5}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001980)=""/69, 0x45}, {&(0x7f0000001a00)=""/246, 0xf6}, {&(0x7f0000001b00)=""/144, 0x90}, {&(0x7f0000001bc0)=""/136, 0x88}], 0x4}, 0x10000}, {{&(0x7f0000001cc0)=@tipc=@id, 0x80, &(0x7f0000003240)=[{&(0x7f0000001d40)=""/242, 0xf2}, {&(0x7f0000001e40)=""/138, 0x8a}, {&(0x7f0000001f00)=""/19, 0x13}, {&(0x7f0000001f40)=""/229, 0xe5}, {&(0x7f0000002040)=""/113, 0x71}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/172, 0xac}, {&(0x7f0000003180)=""/49, 0x31}, {&(0x7f00000031c0)=""/91, 0x5b}], 0x9, &(0x7f0000003300)=""/201, 0xc9}}], 0x3, 0x40000000, &(0x7f0000003500)={r1, r2+10000000})
syz_usb_connect(0x0, 0x55, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300120100c00109040000010202010005240010010424f801052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0)

4m58.719791083s ago: executing program 2 (id=1076):
r0 = socket$netlink(0x10, 0x3, 0xa)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)

4m58.137163563s ago: executing program 2 (id=1078):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
pipe2$9p(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB="2c76657273696f6e333959323030302e752c80570c47867333832fb67f171354530af9457b49e0cdbd46e174d84b1935611166c69a7a50327b104dd10c926134e91d85d36aafec3c04c2e08f9ddad140fd67503f50e539"])
write$P9_RVERSION(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r0, @ANYRESHEX=r1], 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

4m57.695024263s ago: executing program 2 (id=1079):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0xf0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x26, 0x301, 0x70bd28, 0x25dfdbfb, {0x15}, [@typed={0x8, 0x14e, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24008002)

4m57.078688349s ago: executing program 2 (id=1080):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, 0x15, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x7b, 0x8, "6a3041c234bb2e2425e72c122f3f4e571daa101a6b5ac0bde0a543763fd17378d127eaed7e16ba2f00c3bcf12bf8ddf1bd24248d53f208480062ef266b6f96887f050889897dce3ab70cbb6ac089a283c9587c2f121830688d844fea632bbe3a2af3a174919daeea2c01e3e8e8eef5d89c0aa7b43e4511"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x325bc1ea341baa27}, 0x4000041)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x66001}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40002}, 0x20048040)

4m55.986154075s ago: executing program 51 (id=1080):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, 0x15, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x7b, 0x8, "6a3041c234bb2e2425e72c122f3f4e571daa101a6b5ac0bde0a543763fd17378d127eaed7e16ba2f00c3bcf12bf8ddf1bd24248d53f208480062ef266b6f96887f050889897dce3ab70cbb6ac089a283c9587c2f121830688d844fea632bbe3a2af3a174919daeea2c01e3e8e8eef5d89c0aa7b43e4511"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x325bc1ea341baa27}, 0x4000041)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x66001}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40002}, 0x20048040)

4m19.23521928s ago: executing program 6 (id=1184):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
sync_file_range(r0, 0xffffffffffffffff, 0x9, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xa, @loopback, 0x800002}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000500)={'fl512\x00', [0x140, 0x3, 0xd, 0x0, 0x2, 0x4, 0x4, 0x6, 0x7, 0x2c72d, 0x204, 0x7, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x103, 0x6, 0x800, 0x7, 0x7, 0x1, 0xc, 0x3ff, 0xffff, 0x6, 0xab, 0x0, 0x286, 0x8001, 0x9]})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newsa={0x118, 0x10, 0x200, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x4e20, 0x0, 0x0, 0x100, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x10}, [@address_filter={0x28, 0x1a, {@in=@local, @in=@private=0xa010100, 0x2, 0x10, 0x6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000130005000100000000000000000000000000000000000000000000010000000000000000000000000000000100000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffffffffffffffffffffffffffffffcb5f921fffffffffffffffffffffff0000000000082000020000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000100001234330000000a000000000000000000000000000000000000010000000000000000000000008e2463078a6de62c"], 0xfc}}, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000400)={0x0, 0x1, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x7f, 0x7, "91de5c12ebab40"}]}, 0x18)
sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='A', 0x1}], 0x1}}], 0x1, 0x4000801)
ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, 0x0)

4m15.026643559s ago: executing program 6 (id=1194):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090325bd7000fcdbdf250800000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) (fail_nth: 4)

4m14.565105735s ago: executing program 6 (id=1196):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0)
r1 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0)
syz_usb_ep_read(r1, 0x3, 0x0, 0x0)
syz_usb_ep_write(r1, 0x84, 0x8, &(0x7f0000000140)="0000000c00000001")
write(r0, 0x0, 0x0)

4m11.669285533s ago: executing program 6 (id=1206):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX=r0, @ANYBLOB="2c76657273696f6e333959323030302e752c80570c47867333832fb67f171354530af9457b49e0cdbd46e174d84b1935611166c69a7a50327b104dd10c926134e91d85d36aafec3c04c2e08f9ddad140fd67503f50e539"])
write$P9_RVERSION(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

4m11.553121206s ago: executing program 7 (id=1208):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, 0xffffffffffffffff, 0x0)
io_setup(0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8000, 0x1f7)
sendto$inet6(r4, &(0x7f00000005c0)='X', 0x14f8d, 0x0, &(0x7f0000000600)={0xa, 0x4e23, 0x100, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000640)={0x1, [<r5=>0x0]}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000006c0)={r5, 0xa9ac}, &(0x7f0000000700)=0x8)
socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
socket$unix(0x1, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000840)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800, 0x0, 0xfffe}, @ipv4=@icmp={{0x32, 0x4, 0x1, 0xd, 0xd0, 0x64, 0x0, 0x80, 0x1, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x44, 0x67, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@local, 0x2}, {@loopback}, {@loopback, 0x40}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x4}, {@empty}, {@private=0xa010102, 0x2}, {@broadcast, 0x10001}]}, @cipso={0x86, 0x6e, 0x3, [{0x1, 0x12, "ea1fad847880ebd0efc1e53551c6e504"}, {0x7, 0xf, "055642f656043bca3758fa7d6c"}, {0x6, 0xb, "5652437227e24538ed"}, {0x0, 0x12, "fd569b57dbfedc2da7f27f37c5dc89ea"}, {0x1, 0x12, "8393175938e4731d9b95d6826fc65a46"}, {0x6, 0xd, "caa5ae60b15124e71c6724"}, {0x6, 0xb, "668fbce7b6683dcf82"}]}]}}, @address_request={0x11, 0x0, 0x0, 0xe}}}, 0xde)

4m10.705442126s ago: executing program 6 (id=1209):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x3, &(0x7f0000000340)={0x800, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000b80)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x1)
syz_open_dev$sndmidi(&(0x7f0000000200), 0x1, 0x80080)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000c40)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000480), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)

4m10.325110095s ago: executing program 7 (id=1212):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="02180000100000000000000000000000030005003c00000002000000ac1e000100000000000000000300060000000000020000000000000000009992f0b75c21feebc2"], 0x80}}, 0x8000)
r1 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc2}, &(0x7f0000000b80)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
keyctl$chown(0x4, r1, 0x0, 0xee00)
keyctl$chown(0x4, r1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000f4ff00006a0a00fe000000008500000027000000b70000000000000095000000000000009cc6b3fcd62c7d37623802000000505f80fc88943c4f0cf0dd467b597811638883f6f698caf503a22f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b6d0e196bf02f46c7953ab1abda45cbe8d0d24b5069f8a98f3dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193105000000b100400600e1ffff88208a2f7d25c32aac1c5d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a0481e9d6da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347903420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0000000008919b3efce02a602b4ad38098774d1feaf5f277a4462a2fff2d6ff4780f9a30a2a5f5f284c00ad35e0a6f6a0f9dae214546d24ef6a9b8ced90b508dc3b55a8259614b731af86503e5849dc87ab86ec0f6a48f0d32f0d4a5f6a03c33612320bb44f2d80363dee9163424ac31469266877942abdbbb3729fd59c0ff048ed5ab58c81b74ef4e159d4594396864a65422fe5f8c8181309becc88091dd6641c2d7e5a68ecbe778f2aae1742b92dc6854de98da66f8e38d1eca95809b738c8ddcf4cf1693c7b1c2ae0a9c27bd1a6f1738f8ba2908139fd653908ca0105e72550fbb1f1543a9bcd48de441c364f1cdb53a1ed4169434fc8f705e262fb793cf25bcd60310991f0b0634fa08308c7100000834cba801f76f820ed6def799116ce2336cd308544fbd3b74e0093968fce3c425729a77ecb090000654680e715f4ce5c1ad2b75aab390700000000000000ed7ebe34db25cbe169138c15a6013220bba55923f62849392cf4fb0327877e22a4dc617a5541a7fb89223888c76d65850dd99997e727557a477a1131d06f6f7360cfcf137ccd2e0d516bb31be413b0c7bd1bd24d3dc2d8e3f4cdfa872b66d89332e313934e9e9a3471f7170832a775bb2a8e4aa6321b1a6546a56e4121231380b04eb55337c7edc66d6e3400b06fcb31b659be19cff61cfac6f1b771967aa7bfcf7dba26e279ab9bef181cc917fca8941819445dd6fd171c4065a526c7000000000000ef570531e36dd9cf4da9a269b71e05463dfadff8401bc3202a9c393e9658d15dc20655abad7f9c54fc89176071bf7645d221696fa24e1310598f1f0bbd6ea058fdec63fab905ac925b16bd5cedf4ea2775d897897473dce8a339e340519df5dc3c8ab91b6b96b10cb05637dc6f4f24b2b0ba824028fa0fa29c9cf80443de08b3fc140082c8aa79d6324e9c609b0d9c2eeba3accb49fe851b6f56a425f70b3157443d2b05a883700b554738fd8453ed2ba5af37121ff47dc759000000000000000000000000000000000d78287bf7833841f7d49160b8bf2bd448e49c9ce544f0fafba633b694965606fa98f10c1c9f55eee1aaf03d30e61c9a468758c151ebf809efcda19b880c534bce505e14b65bb4185bf0614f23c38d106f77e407cac3cdff686370d091d453f7b8f8731eb70c3053fbb1a7d1ec764f9436489e84941336e56ccdba860901290a3d27b6330b85d52095c3b28718"], &(0x7f0000000640)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0xffff0000, 0xf0, 0x0, &(0x7f0000000700)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r2, 0x0, 0x6a, 0x98, &(0x7f0000000740)="880cf36da2a9e48df76c4b9685f3d88782ca855bda17584db20236e05fda9aa55790e9c0ea595029ad8c2033bf7ae1afba99fa0fa54286e984448c7839e0ecd49f059141930e70bd415ab261ab9a742487d7b580be856cec1ef821ffe838e1895262488be15d6c88cf89", &(0x7f00000007c0)=""/152, 0x3, 0x0, 0x24, 0x84, &(0x7f0000000880)="a029f6b5efba4ebf5fb7c0c36d5ab882a7cfa4d50e9406220dcbe4d5523132caa776ebb8", &(0x7f00000008c0)="bde57451c121094c354abf5569b0ed1c2a084c59984a044e2ae2e6b37715f529256148ca2752ac4f8378515867d5b6743873b3d579601f4e0ad92b680a28bddfb7b872489f24d5f1711a4e7c380328c9b4273f8c09f2e5c8b24dbb165d4038f2a3620d90b5557327e75d9ea1bca9200dc79ea33a5e0475ac955e96add200306d1826d747", 0x1, 0x0, 0x4}, 0x50)

4m7.177155503s ago: executing program 7 (id=1215):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0)
madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15)
ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0})
timer_create(0x0, 0x0, &(0x7f0000000640))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x218, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vlan1\x00', {0x0, 0x6, 0x45, 0xfffffffb, 0x9, 0x100, 0x1, 0x3ff, 0x0, 0x20}, {0x3}}}, @common=@unspec=@cpu={{0x28}, {0xfff, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x9d}}}, {{@ip={@multicast2, @rand_addr=0x64010104, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x9f7ffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400)
r3 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x63)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='./dev/sda1\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000140)='./file1\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x21)
r4 = syz_kvm_add_vcpu$x86(0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
lgetxattr(0x0, 0x0, 0x0, 0x0)

4m7.128274782s ago: executing program 6 (id=1217):
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1100000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB="0f000000000400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r0 = socket(0xa, 0x3, 0x87)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x11)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2)
creat(0x0, 0x175)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x20000800, 0x81, &(0x7f00000001c0)="1a0000aa8cfa", 0x6)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)
close(0x4)
acct(0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip6_flowlabel\x00')
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
setns(0xc9, 0x0)
r7 = socket(0xa, 0x5, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000fe0000000000000000000000000200000000023c9f4bb32617498578bbfe25ce00"/72], 0x48)
syz_kvm_setup_syzos_vm$x86(r5, &(0x7f00005b0000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'})

4m6.459955046s ago: executing program 52 (id=1217):
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1100000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB="0f000000000400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r0 = socket(0xa, 0x3, 0x87)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x11)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2)
creat(0x0, 0x175)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x20000800, 0x81, &(0x7f00000001c0)="1a0000aa8cfa", 0x6)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)
close(0x4)
acct(0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip6_flowlabel\x00')
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
setns(0xc9, 0x0)
r7 = socket(0xa, 0x5, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000fe0000000000000000000000000200000000023c9f4bb32617498578bbfe25ce00"/72], 0x48)
syz_kvm_setup_syzos_vm$x86(r5, &(0x7f00005b0000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'})

4m6.453874797s ago: executing program 7 (id=1220):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX=r0, @ANYBLOB="2c76657273696f6e333959323030302e752c80570c47867333832fb67f171354530af9457b49e0cdbd46e174d84b1935611166c69a7a50327b104dd10c926134e91d85d36aafec3c04c2e08f9ddad140fd67503f50e539"])
write$P9_RVERSION(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

4m6.307072081s ago: executing program 7 (id=1222):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0)
ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000005c0)={0x4, 0x32000000, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}})

4m5.623563247s ago: executing program 7 (id=1225):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x58}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
socket$netlink(0x10, 0x3, 0x14)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
socket$igmp(0x2, 0x3, 0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000004c0), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000500), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x1c, &(0x7f0000000680)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x5, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x502902ab}, [@map_fd={0x18, 0x6}]}, 0x0, 0x13, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x3, 0x81c6, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000a00)=[0xffffffffffffffff, r5, r4], &(0x7f0000000a40)=[{0x5, 0x5, 0x9, 0x5}, {0x2, 0x5, 0xe}, {0x0, 0x1, 0x5, 0x2}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x4, 0xf, 0x7}, {0x4, 0x4, 0x4, 0x8}, {0x0, 0x5, 0x6, 0xc}, {0x4, 0x1, 0x10001, 0x2}, {0x2, 0x5, 0x6, 0x4}], 0x10, 0xc}, 0x94)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x24000000) (fail_nth: 1)
sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080002"], 0x2c}}, 0x0)
io_uring_setup(0x7, &(0x7f0000000cc0)={0x0, 0xc8a0, 0xc018, 0x8000008, 0xc1})
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4054}, 0x24008804)

4m4.774211654s ago: executing program 53 (id=1225):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x58}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
socket$netlink(0x10, 0x3, 0x14)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
socket$igmp(0x2, 0x3, 0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000004c0), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000500), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x1c, &(0x7f0000000680)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x5, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x502902ab}, [@map_fd={0x18, 0x6}]}, 0x0, 0x13, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x3, 0x81c6, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000a00)=[0xffffffffffffffff, r5, r4], &(0x7f0000000a40)=[{0x5, 0x5, 0x9, 0x5}, {0x2, 0x5, 0xe}, {0x0, 0x1, 0x5, 0x2}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x4, 0xf, 0x7}, {0x4, 0x4, 0x4, 0x8}, {0x0, 0x5, 0x6, 0xc}, {0x4, 0x1, 0x10001, 0x2}, {0x2, 0x5, 0x6, 0x4}], 0x10, 0xc}, 0x94)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x24000000) (fail_nth: 1)
sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080002"], 0x2c}}, 0x0)
io_uring_setup(0x7, &(0x7f0000000cc0)={0x0, 0xc8a0, 0xc018, 0x8000008, 0xc1})
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4054}, 0x24008804)

3m11.173827676s ago: executing program 0 (id=1341):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100), 0x0)
openat$dm_control(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

3m9.588430861s ago: executing program 0 (id=1343):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x16b102)
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f00000017c0)='./file0\x00', 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_UNLOCK(r2, 0xc)
msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r3}]}}}]}, 0x38}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x40000000015, 0x5, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m9.479018992s ago: executing program 8 (id=1344):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x16b102)
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f00000017c0)='./file0\x00', 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}]}, 0x38}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x40000000015, 0x5, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m6.131621276s ago: executing program 0 (id=1347):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
prctl$PR_CAPBSET_DROP(0x18, 0x10009)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @private0, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20)
recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/40, 0x28}], 0x1}, 0x40}], 0x1, 0x62, 0x0)
getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000540), &(0x7f0000000580)=0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0x964, 0x89f8}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000780)={0x0, 0x5c3}, 0x8)

3m5.86644569s ago: executing program 8 (id=1349):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0, 0xc}, &(0x7f00000000c0)='R\x10\x02\x00\x00\x00\xe3c*sgrVex\xbe:\xf2', 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_FILTER={0x4}]}, 0x20}}, 0x20000080)
syz_usb_control_io$printer(r0, 0x0, 0x0)

3m5.133467886s ago: executing program 0 (id=1351):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c76657273696f6e333959323030302e752c80570c47867333832fb67f171354530af9457b49e0cdbd46e174d84b1935611166c69a7a50327b104dd10c926134e91d85d36aafec3c04c2e08f9ddad140fd67503f50e539"])
write$P9_RVERSION(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

3m4.718956881s ago: executing program 0 (id=1354):
openat$fault_inject(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/failslab/verbose\x00', 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ef)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000002c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000003c0), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6)
bind$802154_dgram(r2, &(0x7f0000000480)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r2, &(0x7f00000004c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0103}}}, 0x14)
sendmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x1dba15b056787ca0, 0x0)
write(r6, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_usb_connect(0x1, 0x949, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x2c, 0x61, 0x42, 0x40, 0x2c7c, 0x6002, 0x6eb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x937, 0x4, 0x4c, 0x80, 0x40, 0x3, "", [{{0x9, 0x4, 0x7f, 0x3, 0x1, 0xff, 0x0, 0x0, 0x3, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '\n'}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x101, 0xf3a, 0x2, 0xd}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x5, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x5}, @dmm={0x7, 0x24, 0x14, 0x5, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x10}]}, @uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x1000, 0x6, "e03302d30d7e"}]}], [{{0x9, 0x5, 0xb, 0x10, 0x400, 0xff, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}]}}]}}, {{0x9, 0x4, 0x73, 0x3, 0x9, 0xbf, 0xcf, 0x5f, 0x1, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x4b, 0xfa, 0x2}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x2, 0x7, "3e00d7ec309906"}]}, @hid_hid={0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x4b9}}], [{{0x9, 0x5, 0x7, 0xb, 0x20, 0x6, 0xc, 0xa, [@generic={0xf, 0x21, "b9e3f7a9862abd873876b0692c"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0x93, 0x9a, 0x7}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x7, 0x80, 0x7}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x0, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x23, 0xc, 0x0, [@generic={0xef, 0x9, "5025aeaa31dbf710aae6b27e3b5a3e6b53756cd8a308940f793f1db9d3f30911b56731d707c33c9d9cf15e2b321448363ffe3b4d54d751f704a97b85b13816fa7656e9d614e0c45ad502c6d9766f64eb1affbbde8273ebeeb651986b6cd0b3cabd683b650ec69ee2a04e5b06113f10ec616da4fed4f00718b6c1b4ba46465da70bc27c3b3d030eb15694996952e7e1141585c60d96b71792befc6692b0b61e5b571e70a5d79bfc0210f38f4b43e637eee1a296f78416f1519472c7881285883c75996840595eb2381308284ebddad0d83d3e46e5584adb6dfc20722c8f2eee39d282a388207e7c54366d6c8be8"}, @generic={0x20, 0x1c, "0fe64c014f16d866c3fb97efea698928d4e1194a37abe4d98a7bbbb479b2"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0xc7, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x83, 0x81}]}}, {{0x9, 0x5, 0x1, 0xc, 0x0, 0xff}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x4, 0x25, 0x8, [@generic={0xb1, 0x24, "aeadd543fc91cc9f9f70ee9fbd4ac77797c7ecd8519564dd424a79e80a5905d7cbff177e9fe7109982da1193823607e897a2a5f750a954e7c4ae7d65d3939a2e7d60eae08870c04b7fd9b7ea1067f6d3b924779709e00f7fb648b466b034ba501fb1d4cf9f8cba8f9f4341be44779444a6cd33a2710ca5219aece5b17d0cdfcf458ba66a182b0460f2d220df50c237aab59764617df1c481d746e9c4f2a1b69e7a0ef0132a9a8a6e242ce6a29b1b40"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x9, 0x3, 0x1}}]}}, {{0x9, 0x4, 0xd, 0x8, 0xe, 0x46, 0x52, 0x4d, 0xbc, [@uac_as], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0x3, 0xc0, 0x9, [@generic={0x39, 0x22, "80ff17069cf947efdd957c47aaf191b9c38d9a9dd193927815e0538bd84a82561a3ad7c708e7fd49af1a2cb3c7c1413cdac5b66140366c"}, @generic={0x21, 0x3, "e76b93ad10066b08a10bf5db0cdf55176aba63f892de045ab4d1c099ff25ec"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x40, 0xd4, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfa, 0x2}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x42, 0x6, 0x6c, [@generic={0xbf, 0x7, "686108f7f90dc849f09677e8b51e94ec2ef8f1de4a98ceedfdad7d387a3fe20f02270dc044e609a7998535a6ced1f319182044104df04ebe7d485a33ba25ff1514f19bd533db9e2c115cb3781e5478f50c615582a9ebaae92c90003a8aa770dc11bfdc3502d18d9524dd56f619601fa1482e8289945f745ebb384a2f7ac40c96bc88682e3046dca02f586e9c8fe5cac41def302e9dc8b4aa04f792cfd3ad7a2bfddc70976407582976b3c103c43ffd60895e7ea3caa3717ee4c69d8485"}, @generic={0xdb, 0xf, "8b4f092cc7df1e2a0d75edb8e2490224ec76adafb40eb0cde12234ce49ec431b27124501882023a8fa7f73c96377b306669bbd58ae60bba207a5ea20dffac87e62cd250cb915430cfa6a2cfa22f1a73a3bcb0dc084da1eb5e8c105f8d31a8bcb2f4a4cf9dc7dc3c420a9fa3b0688009365c55969d02feb3e3233700adca11b5636b4415f34e6d441ab382ab09f5fc0011a7d394752f68795562dce5d519b07049598418ffe474485aabf2d60a92fe1255e3367e6f121ad2d7eff8d5fdc71b2baf0843e2f985295b87ac60e6ce2678248574d1cdb9a2eec7fa0"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x10, 0x0, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0xa, 0xa1, 0x8, [@generic={0x7f, 0x23, "4ee9953e0ef691535ff51c608e333b39518e4e10021e24569f8add0cf31152cdbd2c85c6009be3456c410c7f96cfb1fc550c2f7d358f2d5ee40b3a59cc3cdb7a6ccc8a65b47833daaf1649990eb60b773fc3393d9c383e9f258d62ae794c276f3337b140567de76b4ebef91f7202eb1c134f82ca0eb206838e0d6fce18"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x1, 0x3, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x8}]}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x4, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x9}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0xa2, 0x4, 0xff, [@generic={0x14, 0x30, "2e08b235a15ec3b8aa5661789f3cbc34ab7c"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x0, 0x2, 0x7f, 0x93}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x7b, 0x3, 0x5, [@generic={0xf5, 0xb, "47851e247c91b80012642c428a7cf76ccddcfff8ba5aea4b839dc05fc2cd88e12142af9e22399d4dfdaf2c4826f0c69e0992e1e5e491b24ff01a6c1bc69a08dafa12c27d60d19499d723f2a9ddf09467303b2ee1dafa15ea1f7c726cd0fbe32c62f5c7dd6efdd98d876f9c1c07d623b291a2f44fbf43f5574a0f366d5e0db8f3e13f7a5fc8b8b5da20cbb16e16a8a26ec6f32855bcfd1cd0445c63e3bfa6e0f4ed107f6f855085646a769a9fd78ddddc7453ff3b666176db6c384b8836163d7fb9c243e022841382c75781892b0938cb1b1556a3ac76cee95564f999b1710667185482340c45af1a470de1166221b6a5769d9a"}, @generic={0xf5, 0x22, "aa7567b1b226e4c9e945e9f14f82574f5f2775ffdc8676736c0e12d0c6f6a3b78c37a7dd869f08155086096bec6aa7f460eaa0d97cf373106ccba7009de8e1f4988933705d6dbb8f36f1130fe8de1d78502700f4d416d68d2f4aea3648110bfda1bf278aa21d3bb26ea41338b2225e1c97fa32aa5d798964fa141f3d2f0b6fdaeadb01f595b47cbe079f410e030a5192c57bcedcd1936df810b895831848ef8aec19bcd3e5ca8d41583b5cd19f6633699aa5420d9ab5427de9e34d7f8b305792328f56ae74f422f7ecfa096a26ddf2c21795f1cecd5ab9cafa7b7f6b97e13fe694d56d01cea3d4ca4e2ae4799a4ef0df1acfe6"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x420, 0x8, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x50, 0x2}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x62, 0x85, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x82}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x3d67}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x9, 0x4, 0x3, [@generic={0x1a, 0x31, "595f83a8d7e356eb58e14c2e5b3c3a9968ddae240320f96e"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x1, 0x2, 0xff, [@generic={0x4c, 0xd, "1892b3305a8c6293aefd3d78dcc8c1cc29874b46b4bef7b1d49fc0afdb1ec6bcc87dfee0a2b2b55c640fcd521a7dfcc77ab8a35cf9c572c5b17388abadcbca577fa78ab9fd5cc4b966c2"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x8}]}}]}}, {{0x9, 0x4, 0x22, 0x3, 0x6, 0xc, 0x86, 0x11, 0x5, [], [{{0x9, 0x5, 0xa, 0x3, 0x400, 0x3, 0x2, 0x8}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x4, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x7}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x9, 0xd, 0xf9, [@generic={0x1f, 0x31, "423ed368132e8b02694f39709a6c40e6e8f9f477350b24ece576d5b84f"}]}}, {{0x9, 0x5, 0x3, 0x12, 0x10, 0x7, 0x4, 0xe6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x4800}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x1, 0xfb, 0xc7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x48, 0x4}]}}, {{0x9, 0x5, 0x16, 0x4, 0x20, 0x8, 0x3a, 0x6, [@generic={0x46, 0x5, "5ad229aa10f183738a7aa214db84875ef9c8794ba4c6b43e8a5f6f654fe2147a74d727dae104f194095efc84f9698331898fcc79d29e7f9159d89d6918d9cc6319dd473e"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x7}]}}]}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x0, 0x8, 0x0, 0x8, 0x8, 0x3}, 0x40, &(0x7f0000000f40)={0x5, 0xf, 0x40, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "dd14555d76de147ea0c31e77b52b0d03"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x11, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0x4, 0x0, 0x2, 0x1}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x4, 0x81, 0x6, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x5, 0xa8dc}]}, 0x8, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x100c}}, {0x6b, &(0x7f0000000fc0)=@string={0x6b, 0x3, "6620712b6977452c894fa1c722e4c7d6a62b0e1f8c2857e20584b8ee678d2d8fddaff25f5a689357b794232b6bfa8d24f757b75b2b1d3799f586f341438096b297d8030e4fa64a39f3f64e561f63cd2db7661f55a99790b698131d874c36a716aade38cd7d9fed6e0b"}}, {0x80, &(0x7f0000001040)=@string={0x80, 0x3, "21722c329df75ba6a7087a8db7588673553fa0deb497f8bfb96de5c4c721535108d64c02b7955d3c632c0622e93938cf85b83cb1558bfc3b59cd7f97f02b77b2e723a223578dca80c3f44504b2c2258bc06f4f3b7325fea1f113639d13b203c188b700cc49353018f4f17e7b48cbfd86e124febf8a752ff3e5165fcfe258"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x1401}}, {0xe, &(0x7f0000001100)=@string={0xe, 0x3, "b3f6e786bb87a107a7546965"}}, {0xef, &(0x7f0000001140)=@string={0xef, 0x3, "753db7061d7452916fe6e168ce6764938b06cb2077d82606d5192107dc76af201180aada1f9d63d7bae210cf1a7770f55eeed78259f2e3e7f62002c74dae91c214979bcec5cbde907b1023a7d403e5d499635b9e3834de4205de40015a9b2b9a14949816f1cf6730a677580a6cfc314747a8490722858d3b4f7371209ba232cede851e6a4d30ee9c78cd40f616ac82b47e08839681c6913979d9490ae26b54394a862f704b5a4b30a0b41121a82912edbebb956280962971862b62676d3ea1fc53deddb5912fe9868da6cdf90312f64e8942b29153c6df006c2bd94c28c2b2d6f4cfb922d97fb76e8ca345f016"}}, {0x15, &(0x7f0000001240)=@string={0x15, 0x3, "8ac050a9c18285d34a41e69a5f814840ef0c97"}}, {0xc, &(0x7f0000001280)=@string={0xc, 0x3, "ec19206bc3a44a81eb76"}}]})
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000001340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f00000013c0), 0x318, 0x0)
recvmmsg(r8, &(0x7f0000001400), 0x10106, 0x2, 0x0)

3m2.054322737s ago: executing program 8 (id=1359):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, 0xffffffffffffffff, 0x0)
io_setup(0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8000, 0x1f7)
sendto$inet6(r4, &(0x7f00000005c0)='X', 0x14f8d, 0x0, &(0x7f0000000600)={0xa, 0x4e23, 0x100, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000640)={0x1, [<r5=>0x0]}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000006c0)={r5, 0xa9ac}, &(0x7f0000000700)=0x8)
socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000840)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800, 0x0, 0xfffe}, @ipv4=@icmp={{0x35, 0x4, 0x1, 0xd, 0xdc, 0x64, 0x0, 0x80, 0x1, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x44, 0x67, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@local, 0x2}, {@loopback}, {@loopback, 0x40}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x4}, {@empty}, {@private=0xa010102, 0x2}, {@broadcast, 0x10001}]}, @cipso={0x86, 0x79, 0x3, [{0x1, 0x12, "ea1fad847880ebd0efc1e53551c6e504"}, {0x7, 0xf, "055642f656043bca3758fa7d6c"}, {0x6, 0xb, "5652437227e24538ed"}, {0x0, 0x12, "fd569b57dbfedc2da7f27f37c5dc89ea"}, {0x1, 0x12, "8393175938e4731d9b95d6826fc65a46"}, {0x1, 0xb, "640bfe8bd8284458e1"}, {0x6, 0xd, "caa5ae60b15124e71c6724"}, {0x6, 0xb, "668fbce7b6683dcf82"}]}]}}, @address_request={0x11, 0x0, 0x0, 0xe}}}, 0xea)

3m0.713333333s ago: executing program 0 (id=1361):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f00000001c0)="ebe3a0", 0x3}], 0x2}], 0x1, 0x40800)
recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/63, 0x3f}], 0x1, 0x0, 0x0, 0x8dff}, 0x10001)
openat$tun(0xffffffffffffff9c, 0x0, 0x8082, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000640)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_cmd={0x9, 0x2, 0x818, 0x0, 0x0, 0x0, 0x2, 0x7, 0x9, 0x8, 0x0, 0x8001, 0x6, 0x9, 0x0, 0x3, [0x1, 0x6]}})
connect$unix(r3, &(0x7f0000000700)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000780), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000007c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0)
r6 = inotify_init1(0x0)
inotify_add_watch(r6, &(0x7f0000000880)='./file0\x00', 0xa4000061)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f00000008c0)='.\x00', 0x8500017e)
removexattr(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=@known='system.posix_acl_default\x00')

2m59.136908032s ago: executing program 54 (id=1361):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f00000001c0)="ebe3a0", 0x3}], 0x2}], 0x1, 0x40800)
recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/63, 0x3f}], 0x1, 0x0, 0x0, 0x8dff}, 0x10001)
openat$tun(0xffffffffffffff9c, 0x0, 0x8082, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000640)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_cmd={0x9, 0x2, 0x818, 0x0, 0x0, 0x0, 0x2, 0x7, 0x9, 0x8, 0x0, 0x8001, 0x6, 0x9, 0x0, 0x3, [0x1, 0x6]}})
connect$unix(r3, &(0x7f0000000700)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000780), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000007c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0)
r6 = inotify_init1(0x0)
inotify_add_watch(r6, &(0x7f0000000880)='./file0\x00', 0xa4000061)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f00000008c0)='.\x00', 0x8500017e)
removexattr(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=@known='system.posix_acl_default\x00')

2m58.947915914s ago: executing program 8 (id=1364):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c76657273696f6e333959323030302e752c80570c47867333832fb67f171354530af9457b49e0cdbd46e174d84b1935611166c69a7a50327b104dd10c926134e91d85d36aafec3c04c2e08f9ddad140fd67503f50e539"])
write$P9_RVERSION(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

2m57.597642536s ago: executing program 8 (id=1368):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x42300, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000001c0)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]})
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @local, @remote}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ptrace$ARCH_GET_FS(0x1e, r6, &(0x7f0000000080), 0x1003)
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setns(0xc9, 0x0)
r11 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r11, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$RDS_FREE_MR(r11, 0x114, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'})

2m53.064826352s ago: executing program 8 (id=1377):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c76657273696f6e333959323030302e752c80570c47867333832fb67f171354530af9457b49e0cdbd46e174d84b1935611166c69a7a50327b104dd10c926134e91d85d36aafec3c04c2e08f9ddad140fd67503f50e539"])
write$P9_RVERSION(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

2m51.804226602s ago: executing program 55 (id=1377):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c76657273696f6e333959323030302e752c80570c47867333832fb67f171354530af9457b49e0cdbd46e174d84b1935611166c69a7a50327b104dd10c926134e91d85d36aafec3c04c2e08f9ddad140fd67503f50e539"])
write$P9_RVERSION(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

21.916719372s ago: executing program 3 (id=1703):
syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22400)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, 0xffffffffffffffff, 0xd0b5b000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c41, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f00000023c0)=""/102392, 0x18ff8)
connect$vsock_stream(0xffffffffffffffff, &(0x7f000001b3c0)={0x28, 0x0, 0x2710, @host}, 0x10)
wait4(r1, &(0x7f0000000200), 0x1, &(0x7f000001b400))
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='dir0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x80, 0x0)
ioprio_set$pid(0x1000000, r0, 0x4000)
read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2020)

19.420309102s ago: executing program 3 (id=1712):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
r1 = dup(0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000640)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0x11, &(0x7f00000008c0)=ANY=[], 0x0, 0x1}, 0x94)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x27d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x82, 0x20, 0xce, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x20, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0xa34}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x8, 0xe}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x0, 0x8, 0x7, 0x8, 0x7}, 0x11, &(0x7f0000000080)={0x5, 0xf, 0x11, 0x2, [@ptm_cap={0x3}, @generic={0x9, 0x10, 0x4, "81f408e3fa57"}]}, 0x4, [{0xba, &(0x7f00000000c0)=@string={0xba, 0x3, "bc2431583de3270e43dee5431fb64d7deb2dff9ea7dde179cadbbf93d4d4e95fca848403b332c76253196ead3990d304f9727403f06766cc1fe4d57e89f96c418ba0139342eb5511793124c03cf8a9e8c9d3ac521ce5c09b10488b46fd5e1341503fa44046fd2578fadbfc3ba5907d5ed15acb089de7c9d5e0511e50d5676ca8897221f7a28b9b24196a53de07e8a867b776da8b7f06ec3a56224d54ac9628b3fc1b4151e289168060e291f36696fd4d7f4da66a63081ea6"}}, {0x98, &(0x7f0000000180)=@string={0x98, 0x3, "297b08509a57f856e34c2106fcb32c55cd597eed9a324015f41131e2dd3bffa21a00cc318ca055b13b6e2bc8539a0269f02727246790eae1d97ccae215c49acfbf43f84f2aaadf92b91c304c79d6bdbcce79f63170aa1a0020651f2133996891db39358e092a23c63e0b55235a366e2f13a6e68f93acc673833d678d58c0bf1bcc38213aa1755162fa62f980e857653953a36789fbd6"}}, {0xce, &(0x7f00000002c0)=@string={0xce, 0x3, "26bc6dbc26e651531f06c879f2baeb465817fdf21a9238b13245bb663ae851cce9795fb611bc6234c9e3d245b16dead0518442bab5d9a1b0a62eafb8805175a0efd274cd0fbfda1b118a3382868a85dc7e84f49440f282ee15bd12eff56339a91ccdef2556c8711f4237ed2c89bf985ce29be3fe5ee192d534b82bce3e2978c07f7f94317ab1153754de6e0c3e8bc325baca0f231141972469f994ade67c0b58efd72a54b69079e34cd650ed684391a0390cc932e455fb17da594ba3f384e125cb0830bb95eae862e0bd4e63"}}, {0xf1, &(0x7f00000003c0)=@string={0xf1, 0x3, "a1bc5bbb6ef4b46ee909ed12d331c5200693e072088a5f3720075109fad12604de32dd447c0eef266fe2f7466add5d50ff790de8d179608bbb531321e0eb33b30b008c7273633d801ea56f57d433b52118aad2c603f10236b6486e98024ba5e657279946e5c05ca73ee7c2ac173a0ab42602ccb3221b2d50b9c2f1a3d662efd21492b1c5b8a7a4efbedd4f684626962509cbf2f35334d22ebafd58ed1adb3484180995b5d32642790e3f8a13529478ae00ebb966ca891c4755b0cd5ada4d912ad35e9c192219ccae2e69ee132bc61a47071fbbb939f59340aa4a7737fcfc6c3b81cb91ebb4ddf831f240b4f686e934"}}]})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r4, 0x5452, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x0, 0x36})

18.845347115s ago: executing program 5 (id=1713):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r0, 0x0, 0xce, 0x0, &(0x7f0000000040))

18.375868224s ago: executing program 5 (id=1715):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, 0xffffffffffffffff, 0x0)
io_setup(0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8000, 0x1f7)
sendto$inet6(r4, &(0x7f00000005c0)='X', 0x14f8d, 0x0, &(0x7f0000000600)={0xa, 0x4e23, 0x100, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000640)={0x1, [<r5=>0x0]}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000006c0)={r5, 0xa9ac}, &(0x7f0000000700)=0x8)
socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000840)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800, 0x0, 0xfffe}, @ipv4=@icmp={{0x32, 0x4, 0x1, 0xd, 0xd0, 0x64, 0x0, 0x80, 0x1, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x44, 0x67, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@local, 0x2}, {@loopback}, {@loopback, 0x40}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x4}, {@empty}, {@private=0xa010102, 0x2}, {@broadcast, 0x10001}]}, @cipso={0x86, 0x6e, 0x3, [{0x1, 0x12, "ea1fad847880ebd0efc1e53551c6e504"}, {0x7, 0xf, "055642f656043bca3758fa7d6c"}, {0x6, 0xb, "5652437227e24538ed"}, {0x0, 0x12, "fd569b57dbfedc2da7f27f37c5dc89ea"}, {0x1, 0x12, "8393175938e4731d9b95d6826fc65a46"}, {0x6, 0xd, "caa5ae60b15124e71c6724"}, {0x6, 0xb, "668fbce7b6683dcf82"}]}]}}, @address_request={0x11, 0x0, 0x0, 0xe}}}, 0xde)

15.948620131s ago: executing program 3 (id=1719):
userfaultfd(0x801)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c00000010001fff2cbd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

15.9477071s ago: executing program 1 (id=1720):
write$sysctl(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x100})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x1001})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r4=>0x0})
mount(0x0, &(0x7f0000000900)='.\x00', &(0x7f0000000e40)='gadgetfs\x00', 0x10005, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0xd, 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="760a00008000000061115000000000001800000000000000000000000000000095"], &(0x7f0000000e00)='GPL\x00'}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r6, 0x1, 0x1}}, 0x20}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r7, 0x1, 0x1}}, 0x20}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001400050498bc70000000000002180000", @ANYRES32=r7, @ANYBLOB="08100200640101010800010064010101"], 0x28}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$tun(r0, &(0x7f00000008c0)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='ABCD'}}}, 0x20)
write$tun(r0, &(0x7f0000000940)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'dummy0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, 0xa04, 0x409}, [@IFLA_CARRIER={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x44804}, 0x24008844)
sendmsg$nl_route(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r12, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x8000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6tnl0\x00', <r13=>r6, 0x29, 0x5, 0x2, 0xfffffff8, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x7800, 0x0, 0x4, 0x6}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000980)={0x2cc, r8, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

14.486027275s ago: executing program 5 (id=1723):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001})
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
socket(0xa, 0x3, 0x87)
listen(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a30000000030a010400000000000000000200000c0900010073797a300000000009000300735d7a300000000004000480140000001100010000000000000000000a00000a9e1d2c3549ea0c8014092c135ead772264e9d8523527fbc08bddfa38bb66e1ae04efbf427a77659af878c2bdacc9678269377d7f3df5ece114de57eb58e7c12fb8b42b00b40251c79be4f8235ec5afc9e39a11dac96e6524a8df3b25904f8fe03eb460172271e63c44f19eeda643849d9c3be305363d4d0e0c24556f3279da5a4480340eb6f14ee351569ad6132eda53fec386fad1d44a5ed0218ced08"], 0x58}}, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r4 = accept4(r0, 0x0, 0x0, 0x800)
sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400000000a882, 0x0)
r6 = dup(r5)
ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000100)={0xf400, 0x9})
recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)

12.913384071s ago: executing program 5 (id=1725):
bind$inet(0xffffffffffffffff, &(0x7f0000000780)={0x2, 0x0, @local}, 0x10)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x6c5)
close(0xffffffffffffffff)
gettid()
futex_waitv(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000880)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x1, 0x0, &(0x7f0000000440)='\x00'/118, 0x0, 0x3332f000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000004c0))
r3 = dup(r2)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000500)={0x0, r3})
setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@sm4_gcm={{0x304}, "4836fa6bc4c18842", "1b66e649d046e9678ac4bbd0783db0d5", "aa592880", "41ce5708da987af0"}, 0x28)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = memfd_create(&(0x7f0000019880)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r<Y\xa1\xdeP\b\xf1kM\x02\x00\x00\x03\x00eh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\x06]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x05\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a3100000000090001fcffffff31000000001400038010000080080003400000000204000a80"], 0x40}, 0x1, 0x0, 0x0, 0x4004815}, 0x8000)

12.768200554s ago: executing program 3 (id=1726):
execveat(0xffffffffffffffff, &(0x7f0000000000)='./tracing/events/sched/filter\x00', 0x0, 0x0, 0x1000)
symlinkat(&(0x7f0000000580)='./file2\x00', 0xffffffffffffffff, &(0x7f00000005c0)='./tracing\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x28)
socket$l2tp(0x2, 0x2, 0x73)
syz_emit_ethernet(0x46, &(0x7f0000000640)=ANY=[], 0x0)
mknodat$md(0xffffffffffffff9c, &(0x7f0000000680)='./md0\x00', 0x6180, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x800001000085}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x6)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x401, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000840)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000001880), 0x0, 0x0)
read$msr(r1, &(0x7f00000018c0)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x16)
mount(0x0, &(0x7f000001a900)='./tracing\x00', &(0x7f000001a940)='tracefs\x00', 0x0, 0x0)
add_key(&(0x7f000001a980)='asymmetric\x00', 0x0, &(0x7f000001a9c0)="3081d73081ba020101300d06092a864886f70d01010b0500300d310b3009060355040313024341301e170d3230303130313030303030305a170d3330303130313030303030305a300f310d300b06035504031304557365723066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300d06092a864886f70d01010b05000309000102030405060708", 0xda, 0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f000001aac0)='./tracing/events/sched/filter\x00', 0x1, 0x15d)
write(r2, &(0x7f000001ab00)='common_pid > 0', 0xe)
bind$bt_sco(0xffffffffffffffff, &(0x7f000001ab40)={0x1f, @none}, 0x8)
listen(0xffffffffffffffff, 0x5)
accept(0xffffffffffffffff, 0x0, 0x0)
openat$md_node(0xffffffffffffff9c, &(0x7f000001ab80)='./md0\x00', 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)

12.052835137s ago: executing program 1 (id=1728):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000080)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280))
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8e, 0x0, 0x0, 0x100000c01, 0x38, 0x0, 0x34, 0x3e})
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x0, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, &(0x7f00000008c0), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x1, 0x3}, {{0x353733de}, 0x7}, {{0x2}, 0x2}, 0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [0x0, 0x0, 0xff000000, 0xff], 0x4e23, 0x4e22, 0x4e23, 0x4e24, 0x1, 0x9, 0xee, 0x1, 0x6cde}}}, {{@ip={@rand_addr=0x64010102, @empty, 0xff000000, 0xff000000, 'veth0_vlan\x00', 'geneve0\x00', {0xff}, {0xff}, 0x62, 0x2}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@addrtype={{0x30}, {0x862, 0x232, 0x1, 0x1}}, @common=@icmp={{0x28}, {0x7677c3378b2b8f48, "c531", 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'ipvlan1\x00', {0x4cd8}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6_vti0\x00', {0x4485}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'netdevsim0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000980)='bridge0\x00')
r4 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f00000009c0))
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000002c00000008000300", @ANYRES32=r7, @ANYBLOB="264ace4faf2a36800a57c0534d1b5c896be0798987cd7352ecf8acf44c91dcf33f1963ac4e50b6bafca0e6628cc989d52f9647724ecf1766872e48a12ba952473d9484852f"], 0x1c}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000b40)='wlan0\x00', &(0x7f0000000b80), 0x6, 0x0)
read(0xffffffffffffffff, &(0x7f0000000bc0)=""/217, 0xd9)
sendmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r8, 0x89e7, &(0x7f0000000000)={0x1001038})

11.46506895s ago: executing program 3 (id=1729):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x82900, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000080))
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$OCFS2_IOC_GROUP_EXTEND(r3, 0x40046f01, &(0x7f0000000100))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

9.496310055s ago: executing program 5 (id=1730):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x700, 0x0, 0x3, 0x1}, 0x8)

9.273732583s ago: executing program 1 (id=1731):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x3, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r3, &(0x7f00000003c0)=""/102368, 0x18fe0)
openat(0xffffffffffffff9c, 0x0, 0x8000, 0x5a)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000001a440)={'syzkaller0\x00', 0x1})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f000001a480)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f000001a4c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r4, &(0x7f000001a500)={0x0, 0x0, &(0x7f000001a540)={&(0x7f000001a580)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f000001a5c0)={0x0, 0x0, &(0x7f000001a600)={&(0x7f000001a640)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xd}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000001, 0x0, 0x3}, @loopback, @private=0xa010101}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
write(0xffffffffffffffff, &(0x7f000001a700)="69434a4f814a2cf78c64a002772cbf93b5c0fbbed155bfc0e6", 0x19)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r0)
write$UHID_INPUT(r7, &(0x7f00000193c0)={0xf, {"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", 0x1000}}, 0x1006)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/set_event\x00', 0x1, 0x0)
write(r8, &(0x7f0000000280)='foo:mod:', 0x8)

9.025086722s ago: executing program 9 (id=1732):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r1, 0x0, 0x24000890)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000380), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f00000004c0)='./sys\x00', 0x0, 0x0, 0x0)
write(r0, 0x0, 0x0)
mount(&(0x7f0000000380)=@nullb, &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000500)='udf\x00', 0x200480, 0x0)
kexec_load(0x3, 0x1, &(0x7f0000000fc0)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0)

8.945014117s ago: executing program 4 (id=1733):
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
socket(0x10, 0x3, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xa, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x4}, 0x94)
syz_open_dev$video(&(0x7f0000000280), 0xa3, 0x0)
mknod$loop(&(0x7f00000002c0)='./file0\x00', 0xfff, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./gadget\x00', &(0x7f00000004c0)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r1, &(0x7f0000000540)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
write(r2, &(0x7f00000005c0)="0100000007058102400000", 0xb)
r3 = socket(0x2b, 0x80801, 0x1)
getsockname$inet6(r3, 0x0, &(0x7f0000000e40))

7.488099195s ago: executing program 9 (id=1734):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/bus/input/devices\x00', 0x0, 0x0)
mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = userfaultfd(0x80001)
ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000640)={0xaa, 0x51})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000600)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xcd5e5000)
ioctl$UFFDIO_POISON(r3, 0xc020aa08, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x40, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
prlimit64(0xffffffffffffffff, 0xa, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x14, &(0x7f0000000380)=[{&(0x7f0000000580)=' ', 0xffffff1f}], 0x1}, 0x0)
io_setup(0x4, &(0x7f0000000440)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000480)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000500)={{0x6, 0x1000, 0xffed, 0xa001}, 'syz0\x00', 0x3e})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

4.997649208s ago: executing program 9 (id=1735):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_restrict_self(r0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x300)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2)

4.877267822s ago: executing program 4 (id=1736):
r0 = socket(0x11, 0x3, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
write$dsp(r3, &(0x7f0000000040)="2df0b427d53edb81c8e597979e59a478d822cc4512a5b3883e26c95fd4423c4e51b74279b20aec93e6a1587e7d59dfdcd037e9078f77123897bd7ad8f152d56adcaa758e5b5d90ad20ec357bfdadd22d6344afa5e48c48bcc28617cf1695b1ea12ccde7fa4940b99a8dd2413fae149abb6ad61876c9409d812ea177819bb6c4939aa65", 0x83)

4.699941135s ago: executing program 1 (id=1737):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, 0x0, 0x0)

4.351371221s ago: executing program 9 (id=1738):
r0 = openat$macvtap(0xffffffffffffff9c, &(0x7f0000000040), 0xa0c82, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000000)=',\xee\x00', 0x2d6101, &(0x7f0000000080)={@_ha_fsid={[0x999, 0x7f]}, {0x9, 0x2, 0x69, 0x4}}, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x8})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_io_uring_setup(0x111, &(0x7f00000001c0)={0x0, 0x39c4, 0x8, 0x4, 0xbffffffe}, &(0x7f0000000240), &(0x7f0000000280), 0x0)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
unshare(0x20000400)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={r3, &(0x7f0000000680)}, 0x20)
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)=0x14)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
read$tun(r0, 0x0, 0x0)

4.334329695s ago: executing program 1 (id=1739):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000019340)={'wlan0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019440)={&(0x7f00000197c0)=ANY=[@ANYBLOB="38000000550001002cbd7000fedbdf2507000000", @ANYRES32=r1, @ANYRESOCT, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4000081}, 0x40080c0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000019580)={&(0x7f00000195c0)=ANY=[@ANYBLOB="2400000005060101df0000000000000006000004050001000700"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000019540)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@mss, @mss={0x2, 0x1}, @window={0x3, 0x297}, @timestamp, @mss={0x2, 0x8001}, @window={0x3, 0x0, 0x7}], 0x6)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xc11)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6)
syz_clone(0x28abb80, 0x0, 0x42, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r4, &(0x7f0000000340)=""/102392, 0x18ff8)
r5 = memfd_create(&(0x7f00000193c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
r6 = memfd_create(&(0x7f0000019380)='\'*\x00', 0x5)
r7 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000019400)={r6, 0xfffffffe, 0x4000, 0xfffffffff0000000})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000019480)={@mcast2, r1}, 0x14)
sendto$inet(r0, &(0x7f0000000240), 0xffffffffffffff94, 0xb, 0x0, 0x0)

4.220970218s ago: executing program 4 (id=1740):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000080)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280))
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8e, 0x0, 0x0, 0x100000c01, 0x38, 0x0, 0x34, 0x3e})
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x0, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, &(0x7f00000008c0), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x1, 0x3}, {{0x353733de}, 0x7}, {{0x2}, 0x2}, 0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [0x0, 0x0, 0xff000000, 0xff], 0x4e23, 0x4e22, 0x4e23, 0x4e24, 0x1, 0x9, 0xee, 0x1, 0x6cde}}}, {{@ip={@rand_addr=0x64010102, @empty, 0xff000000, 0xff000000, 'veth0_vlan\x00', 'geneve0\x00', {0xff}, {0xff}, 0x62, 0x2}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@addrtype={{0x30}, {0x862, 0x232, 0x1, 0x1}}, @common=@icmp={{0x28}, {0x7677c3378b2b8f48, "c531", 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'ipvlan1\x00', {0x4cd8}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6_vti0\x00', {0x4485}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'netdevsim0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000980)='bridge0\x00')
r4 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f00000009c0))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000002c00000008000300", @ANYRES32=r7, @ANYBLOB="264ace4faf2a36800a57c0534d1b5c896be0798987cd7352ecf8acf44c91dcf33f1963ac4e50b6bafca0e6628cc989d52f9647724ecf1766872e48a12ba952473d9484852f"], 0x1c}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000b40)='wlan0\x00', &(0x7f0000000b80), 0x6, 0x0)
read(0xffffffffffffffff, &(0x7f0000000bc0)=""/217, 0xd9)
sendmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r8, 0x89e7, &(0x7f0000000000)={0x1001038})

2.715308596s ago: executing program 5 (id=1741):
r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3)
r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0)
write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5)
r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0)
write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1)
r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0)
write$md_sysfs(r3, &(0x7f0000000200)=@str='512', 0x3)
r4 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0)
write$md_sysfs(r4, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16)
write$md_sysfs(r4, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16)
r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000300)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0)
write$md_sysfs(r5, &(0x7f0000000340)=@str='0', 0x1)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0xc42, 0x0)
write$sequencer(r6, &(0x7f0000000540)=[@l={0x92, 0x3, 0xd0, 0x6, 0x2, 0x2, 0x7712}, @e={0xff, 0x9, 0x9, 0x0, @SEQ_NOTEON=@special, 0x1, 0x6, 0x7}], 0x10)
r7 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0)
write$md_sysfs(r7, &(0x7f00000003c0)=@str='1', 0x1)
r8 = syz_clone(0x48000080, &(0x7f0000000580)="3d3e489f992200ce3e000000006d14862e8a7b5f", 0x14, 0x0, &(0x7f00000005c0), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r8, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000600)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r9 = userfaultfd(0x801)
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
read$FUSE(r10, &(0x7f0000000680)={0x2020}, 0xfffffec1)
read$FUSE(r10, &(0x7f00000026c0)={0x2020}, 0xfffffce2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, r9, 0xec776000)
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000004700)={0x3, 0x1ff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004740)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/16], 0x50)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

2.324079234s ago: executing program 4 (id=1742):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40001, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x30, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x4000, r1}, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_restrict_self(r2, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x1)
ftruncate(r3, 0x1)
truncate(&(0x7f0000000280)='./file1\x00', 0x1)
ftruncate(r0, 0x1)
ftruncate(r1, 0x1)
ftruncate(r4, 0x1)

2.320660256s ago: executing program 9 (id=1743):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket(0x1e, 0x4, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x88002, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syz_tun\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syz_tun\x00', 0x1})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x15, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r4, &(0x7f00000002c0), 0x12)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0x0, 0x200000000000002, {0xa, 0x4e23, 0x7, @remote, 0x5}}}, 0x38)
syz_open_procfs(0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x4a0000, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f00000005c0)={0x22800000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1.726615259s ago: executing program 4 (id=1744):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpgrp(0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000019800)={0x0, 0x0, &(0x7f0000019840)={&(0x7f0000019880)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fcfffbff000000008000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000019900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000400)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0)
read$msr(r5, &(0x7f0000000480)=""/102392, 0x18ff8)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000019480), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f00000194c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000019500)="e6", 0x1, 0x4a})
ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, &(0x7f0000019540)={0x18, 0x0, 0x5100, 0x280000000})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000019580)={0x0, 0x0, &(0x7f00000195c0)={&(0x7f0000019600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000030000000160a01f12680c9b28cdd204f332a6f30000000000000000008010000010900010073797a30000000000900ed0073797a30000000000400038014000000100001"], 0x78}}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/uprobe_events\x00', 0x401, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000019680)='./proc\x00', &(0x7f00000196c0)='proc\x00', 0x0, 0x0)
capset(&(0x7f0000019700)={0x20080522}, &(0x7f0000019740)={0x1000, 0x10ffff, 0xfffffffd})
ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f00000197c0)={0xc})
openat(0xffffffffffffff9c, &(0x7f0000019780)='./proc/sys/kernel/pid_max\x00', 0x0, 0x0)
write(r8, &(0x7f00000003c0)='-:s/p ./file0', 0xd)

1.639316203s ago: executing program 9 (id=1745):
r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3)
r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0)
write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5)
r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0)
write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1)
r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0)
write$md_sysfs(r3, &(0x7f0000000200)=@str='512', 0x3)
r4 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r5 = syz_create_resource$futex(&(0x7f0000000380)=0x1)
futex(r5, 0x80, 0x1, 0x0, r5, 0x2)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ioctl$int_in(r6, 0x40000000af01, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000680)={0x0, 0x1, 0x0, &(0x7f00000006c0)='\x00'/118, 0x0, 0x3332f000})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0)
r8 = dup(r7)
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000740)={0x0, r8})
write$md_sysfs(r4, &(0x7f0000000440)=@dev={'1:', 0x1}, 0x16)
write$md_sysfs(r4, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16)
r9 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000300)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0)
write$md_sysfs(r9, &(0x7f0000000340)=@str='0', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000540)='./trace\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace/set_event\x00', 0x2, 0x0)
write(r10, 0x0, 0x0)
r11 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000480)={'/sys/block/md', @named={'_syz', 0x0, '1'}, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0)
write$md_sysfs(r11, &(0x7f00000003c0)=@str='1', 0x1)
openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0)

526.574437ms ago: executing program 1 (id=1746):
r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3)
r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0)
write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5)
r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'errors\x00'}}, 0x0, 0x0)
write$md_sysfs(r2, &(0x7f00000005c0)=@str='-external_bbl', 0xd)
r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0)
write$md_sysfs(r3, &(0x7f0000000200)=@str='512', 0x3)
r4 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0)
write$md_sysfs(r4, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16)
write$md_sysfs(r4, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16)
r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000003c0)={'/sys/block/md', @named={'_syz', 0x0, '1'}, '/md/', @array='rmw_level\x00'}, 0x2, 0x0)
write$md_sysfs(r5, &(0x7f0000000340)=@str='0', 0x1)
openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x181002, 0x0)
ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000600)={0x49db, 0x0, 0xfff9, 0x1, 0x18, "ec28a144f13d7607"})
write$binfmt_aout(r6, &(0x7f0000000640)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000680)={0x0, 0xffffef7b, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"})
r7 = syz_open_pts(r6, 0x20800)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000006c0)=0x44)
write$md_sysfs(r5, &(0x7f0000000540)=@num=0x2e, 0x14)
r8 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0)
capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
ioprio_set$pid(0x3, 0x0, 0x2004)
openat$md(0xffffffffffffff9c, &(0x7f0000000000)={'/dev/md', @num=0x0}, 0x101000, 0x0)
write$md_sysfs(r8, &(0x7f0000000440)=@str='active', 0x6)
r9 = openat$md(0xffffffffffffff9c, &(0x7f0000000480)={'/dev/md', @num=0x0}, 0x2, 0x0)
pwrite64(r9, &(0x7f00000004c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000)
close(r9)
write$md_sysfs(r8, &(0x7f0000000500)=@str='clear', 0x5)

460.692762ms ago: executing program 4 (id=1747):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="90761644456ad6c7000000000000000002000009"], 0x14}, 0x1, 0x0, 0x0, 0x406c450}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/213, 0xd5}], 0x1}, 0x3}, {{&(0x7f0000000500)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)=""/138, 0x8a}, {&(0x7f0000000640)=""/5, 0x5}, {&(0x7f0000000680)=""/93, 0x5d}, {&(0x7f0000000700)=""/211, 0xd3}], 0x4, &(0x7f0000000840)=""/193, 0xc1}, 0x1}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002b80)=[{&(0x7f00000009c0)=""/19, 0x13}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/84, 0x54}, {&(0x7f0000002a80)=""/68, 0x44}, {&(0x7f0000002b00)=""/126, 0x7e}], 0x6}, 0xd6}, {{&(0x7f0000002c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c80)=""/170, 0xaa}], 0x1, &(0x7f0000002d80)=""/154, 0x9a}, 0x7}, {{&(0x7f0000002e40)=@generic, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002ec0)=""/176, 0xb0}], 0x1, &(0x7f0000002fc0)=""/180, 0xb4}, 0x8}, {{&(0x7f0000003080)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003100)=""/50, 0x32}, {&(0x7f0000003140)=""/232, 0xe8}, {&(0x7f0000003240)=""/136, 0x88}, {&(0x7f0000003300)=""/164, 0xa4}], 0x4, &(0x7f0000003400)=""/239, 0xef}, 0x401}], 0x6, 0x2040, &(0x7f0000003680))
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000036c0)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000003780)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003840)={&(0x7f0000003880)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x50, 0x4}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x3c7, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0x6, 0x7, 0x1, 0x4, 0x0, 0xb, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)
r5 = openat(0xffffffffffffff9c, &(0x7f0000003940)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0)
write(r5, &(0x7f0000003980)='1', 0x1)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
lseek(r6, 0xfffffffff7fffffe, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000000c0)={'veth1_macvtap\x00', @multicast})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
write$binfmt_format(r7, &(0x7f0000000140)='1\x00', 0x2)
ioctl$XFS_IOC_INUMBERS(r7, 0x80405880, &(0x7f0000000200)={{0x3, 0x0, 0x8, 0x6, 0x40}, [{0x0, 0x10, 0x8, 0xf4}]})
ioctl$KDDELIO(r6, 0x4b35, 0x5)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x78}}, 0x0)

0s ago: executing program 3 (id=1748):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000080)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280))
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8e, 0x0, 0x0, 0x100000c01, 0x38, 0x0, 0x34, 0x3e})
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x0, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, &(0x7f00000008c0), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x1, 0x3}, {{0x353733de}, 0x7}, {{0x2}, 0x2}, 0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [0x0, 0x0, 0xff000000, 0xff], 0x4e23, 0x4e22, 0x4e23, 0x4e24, 0x1, 0x9, 0xee, 0x1, 0x6cde}}}, {{@ip={@rand_addr=0x64010102, @empty, 0xff000000, 0xff000000, 'veth0_vlan\x00', 'geneve0\x00', {0xff}, {0xff}, 0x62, 0x2}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@addrtype={{0x30}, {0x862, 0x232, 0x1, 0x1}}, @common=@icmp={{0x28}, {0x7677c3378b2b8f48, "c531", 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'ipvlan1\x00', {0x4cd8}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6_vti0\x00', {0x4485}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'netdevsim0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000980)='bridge0\x00')
r4 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f00000009c0))
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000002c00000008000300", @ANYRES32=r7, @ANYBLOB="264ace4faf2a36800a57c0534d1b5c896be0798987cd7352ecf8acf44c91dcf33f1963ac4e50b6bafca0e6628cc989d52f9647724ecf1766872e48a12ba952473d9484852f"], 0x1c}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000b40)='wlan0\x00', &(0x7f0000000b80), 0x6, 0x0)
read(0xffffffffffffffff, &(0x7f0000000bc0)=""/217, 0xd9)
sendmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r8, 0x89e7, &(0x7f0000000000)={0x1001038})

kernel console output (not intermixed with test programs):

769.808454][   T31] kauditd_printk_skb: 10 callbacks suppressed
[  769.808471][   T31] audit: type=1400 audit(1794317275.290:5113): avc:  denied  { write } for  pid=14410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  770.083414][T14461] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  770.083434][T14461] UDF-fs: Scanning with blocksize 512 failed
[  770.083811][T14461] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  770.083824][T14461] UDF-fs: Scanning with blocksize 1024 failed
[  770.084037][T14461] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  770.084050][T14461] UDF-fs: Scanning with blocksize 2048 failed
[  770.084222][T14461] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  770.084233][T14461] UDF-fs: Scanning with blocksize 4096 failed
[  771.470046][   T31] audit: type=1400 audit(1794317276.950:5114): avc:  denied  { write } for  pid=14463 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  771.937744][ T5280] 8021q: adding VLAN 0 to HW filter on device eth15
[  772.731999][   T31] audit: type=1800 audit(1794317278.200:5115): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=40347 res=0 errno=-22
[  772.973686][   T31] audit: type=1400 audit(1794317278.460:5116): avc:  denied  { read } for  pid=14484 comm="syz.9.1455" dev="sockfs" ino=55052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  773.341445][   T31] audit: type=1400 audit(1794317278.820:5117): avc:  denied  { read } for  pid=14503 comm="syz.5.1456" dev="sockfs" ino=54023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  773.381392][T14505] 9p: Bad value for 'wfdno'
[  773.423353][   T31] audit: type=1800 audit(1794317278.910:5118): pid=14498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=41326 res=0 errno=-22
[  774.349092][T14516] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  774.349115][T14516] batman_adv: batadv0: Removing interface: batadv_slave_0
[  774.352118][T14522] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1460'.
[  774.392164][T14516] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  774.392184][T14516] batman_adv: batadv0: Removing interface: batadv_slave_1
[  774.572916][   T31] audit: type=1400 audit(1794317280.060:5119): avc:  denied  { write } for  pid=14477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  774.673483][   T31] audit: type=1800 audit(1794317280.160:5120): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15640 res=0 errno=-22
[  776.435618][   T31] audit: type=1400 audit(1794317281.910:5121): avc:  denied  { write } for  pid=14539 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  776.701922][ T5280] 8021q: adding VLAN 0 to HW filter on device eth16
[  778.104675][T14564] syzkaller0: entered promiscuous mode
[  778.104698][T14564] syzkaller0: entered allmulticast mode
[  779.619086][ T5620] Bluetooth: hci3: command 0x0406 tx timeout
[  780.771235][T14601] netlink: 'syz.5.1476': attribute type 10 has an invalid length.
[  780.771980][T14601] bridge0: port 2(bridge_slave_1) entered disabled state
[  780.772476][T14601] bridge0: port 1(bridge_slave_0) entered disabled state
[  780.784335][ T8795] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  780.972154][ T8795] usb 10-1: device descriptor read/64, error -71
[  781.221651][ T8795] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[  781.361845][ T8795] usb 10-1: device descriptor read/64, error -71
[  781.477394][ T8795] usb usb10-port1: attempt power cycle
[  781.897467][ T8795] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[  781.912082][ T8795] usb 10-1: device descriptor read/8, error -71
[  782.731664][ T8795] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[  782.824063][ T8795] usb 10-1: device descriptor read/8, error -71
[  783.345345][ T8795] usb usb10-port1: unable to enumerate USB device
[  783.761959][T14620] vlan0: entered promiscuous mode
[  783.811708][   T31] audit: type=1400 audit(1794317289.290:5122): avc:  denied  { write } for  pid=14596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  783.890758][T14620] team0: Port device vlan0 added
[  784.815526][ T5630] Bluetooth: hci5: command 0x0406 tx timeout
[  785.318365][   T31] audit: type=1400 audit(1794317290.800:5123): avc:  denied  { write } for  pid=14646 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  786.042819][   T31] audit: type=1800 audit(1794317291.510:5124): pid=14654 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.1487" name="resume" dev="sysfs" ino=1437 res=0 errno=-22
[  787.159835][   T31] audit: type=1800 audit(1794317292.640:5125): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15640 res=0 errno=-22
[  787.558790][T14679] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  787.558803][T14679] UDF-fs: Scanning with blocksize 512 failed
[  787.559102][T14679] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  787.559114][T14679] UDF-fs: Scanning with blocksize 1024 failed
[  787.559344][T14679] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  787.559356][T14679] UDF-fs: Scanning with blocksize 2048 failed
[  787.559530][T14679] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  787.559541][T14679] UDF-fs: Scanning with blocksize 4096 failed
[  787.695847][   T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  787.695891][   T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  787.747295][T14685] netlink: 'syz.9.1492': attribute type 10 has an invalid length.
[  787.962839][ T5746] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  788.924219][T14690] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  788.924239][T14690] block device autoloading is deprecated and will be removed.
[  788.984674][   T31] audit: type=1800 audit(1794317294.410:5126): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=413264 res=0 errno=-22
[  788.984707][   T31] audit: type=1800 audit(1794317294.410:5127): pid=14498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=413173 res=0 errno=-22
[  789.008258][ T5746] usb 2-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00
[  789.010982][ T5746] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  789.011108][ T5746] usb 2-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  789.011157][ T5746] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  789.145751][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.145785][ T5746] usb 2-1: Product: syz
[  789.145827][ T5746] usb 2-1: Manufacturer: syz
[  789.145918][ T5746] usb 2-1: SerialNumber: syz
[  789.291396][   T31] audit: type=1800 audit(1794317294.760:5128): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=413306 res=0 errno=-22
[  789.383269][   T31] audit: type=1800 audit(1794317294.870:5129): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=413338 res=0 errno=-22
[  789.419014][   T31] audit: type=1800 audit(1794317294.900:5130): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=413313 res=0 errno=-22
[  789.419077][   T31] audit: type=1800 audit(1794317294.900:5131): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=413314 res=0 errno=-22
[  789.879537][   T31] audit: type=1400 audit(1794317295.360:5132): avc:  denied  { write } for  pid=14663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  790.351646][   T31] audit: type=1400 audit(1794317295.810:5133): avc:  denied  { write } for  pid=14708 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  791.203748][ T5746] speedtch 2-1:1.0: speedtch_bind: setting interface to  1 failed (-71)!
[  791.203805][ T5746] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -71!
[  791.203846][ T5746] speedtch 2-1:1.0: probe with driver speedtch failed with error -71
[  791.257969][ T5746] speedtch 2-1:1.1: speedtch_bind: setting interface to  1 failed (-71)!
[  791.258388][ T5746] speedtch 2-1:1.1: usbatm_usb_probe: bind failed: -71!
[  791.258432][ T5746] speedtch 2-1:1.1: probe with driver speedtch failed with error -71
[  791.293452][   T31] audit: type=1800 audit(1794317296.780:5134): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=413335 res=0 errno=-22
[  791.293498][   T31] audit: type=1800 audit(1794317296.780:5135): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=413336 res=0 errno=-22
[  791.294376][ T5746] usb 2-1: USB disconnect, device number 15
[  791.355985][T14713] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  792.236231][T14713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1500'.
[  793.176521][T14731] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  793.176544][T14731] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  793.498451][T14732] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  793.498473][T14732] batman_adv: batadv0: Removing interface: batadv_slave_0
[  793.528134][T14732] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  793.528154][T14732] batman_adv: batadv0: Removing interface: batadv_slave_1
[  793.560910][T14731] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  793.560930][T14731] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  793.895272][T14742] FAULT_INJECTION: forcing a failure.
[  793.895272][T14742] name failslab, interval 1, probability 0, space 0, times 0
[  793.895301][T14742] CPU: 1 UID: 0 PID: 14742 Comm: syz.4.1505 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  793.895325][T14742] Tainted: [L]=SOFTLOCKUP
[  793.895332][T14742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  793.895343][T14742] Call Trace:
[  793.895349][T14742]  <TASK>
[  793.895357][T14742]  dump_stack_lvl+0x100/0x190
[  793.895394][T14742]  should_fail_ex.cold+0x5/0xa
[  793.895422][T14742]  should_failslab+0xc2/0x120
[  793.895444][T14742]  __kmalloc_noprof+0xfc/0x840
[  793.895460][T14742]  ? trace_kmalloc+0xeb/0x110
[  793.895480][T14742]  ? lsm_blob_alloc+0x68/0x90
[  793.895508][T14742]  lsm_blob_alloc+0x68/0x90
[  793.895529][T14742]  security_sk_alloc+0x2d/0x290
[  793.895557][T14742]  sk_prot_alloc+0x12a/0x2a0
[  793.895586][T14742]  sk_alloc+0x36/0xe80
[  793.895608][T14742]  __netlink_create+0x5e/0x2c0
[  793.895627][T14742]  ? __wake_up+0x3f/0x60
[  793.895656][T14742]  netlink_create+0x293/0x610
[  793.895676][T14742]  ? __pfx_nfnetlink_bind+0x10/0x10
[  793.895694][T14742]  ? __pfx_nfnetlink_unbind+0x10/0x10
[  793.895716][T14742]  __sock_create+0x339/0x860
[  793.895748][T14742]  __sys_socket+0x14d/0x260
[  793.895766][T14742]  ? __pfx___sys_socket+0x10/0x10
[  793.895790][T14742]  __x64_sys_socket+0x72/0xb0
[  793.895806][T14742]  ? lockdep_hardirqs_on+0x7d/0x110
[  793.895828][T14742]  do_syscall_64+0x123/0x7b0
[  793.895851][T14742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  793.895869][T14742] RIP: 0033:0x7f07bd3a8f19
[  793.895885][T14742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  793.895903][T14742] RSP: 002b:00007f07be2b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  793.895921][T14742] RAX: ffffffffffffffda RBX: 00007f07bd626090 RCX: 00007f07bd3a8f19
[  793.895932][T14742] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010
[  793.895941][T14742] RBP: 00007f07bd437f6d R08: 0000000000000000 R09: 0000000000000000
[  793.895951][T14742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  793.895960][T14742] R13: 00007f07bd626128 R14: 00007f07bd626090 R15: 00007ffea9acf378
[  793.895974][T14742]  </TASK>
[  793.937101][T14743] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  794.062261][T14731] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  794.062280][T14731] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  794.063201][   T31] kauditd_printk_skb: 3 callbacks suppressed
[  794.063212][   T31] audit: type=1800 audit(1794317299.550:5139): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15640 res=0 errno=-22
[  794.298469][   T31] audit: type=1400 audit(1794317299.780:5140): avc:  denied  { write } for  pid=14714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  794.736728][T14731] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  794.736753][T14731] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  794.852034][T14731] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  794.852057][T14731] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  794.890954][   T31] audit: type=1400 audit(1794317300.370:5141): avc:  denied  { write } for  pid=14753 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  795.011370][T14731] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  795.011392][T14731] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  795.462784][   T31] audit: type=1800 audit(1794317300.940:5142): pid=14731 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.1503" name="attach" dev="sysfs" ino=32924 res=0 errno=-13
[  795.486109][T14731] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12)
[  795.486135][T14731] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  795.486187][T14731] vhci_hcd vhci_hcd.0: Device attached
[  795.606863][T14762] vhci_hcd: connection closed
[  795.619674][T14555] vhci_hcd vhci_hcd.9: stop threads
[  795.619721][T14555] vhci_hcd vhci_hcd.9: release socket
[  795.619770][T14555] vhci_hcd vhci_hcd.9: disconnect device
[  795.683633][  T987] vhci_hcd vhci_hcd.9: vhci_device speed not set
[  797.289738][   T31] audit: type=1400 audit(1794317302.770:5143): avc:  denied  { write } for  pid=14760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  797.452926][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  797.452958][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  797.521403][T14788] netlink: 'syz.5.1512': attribute type 10 has an invalid length.
[  799.267395][T14794] overlayfs: failed to resolve './file0': -2
[  799.282754][T14793] netlink: 'syz.9.1515': attribute type 10 has an invalid length.
[  799.392120][   T31] audit: type=1400 audit(1794317304.880:5144): avc:  denied  { write } for  pid=14795 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  799.680038][   T31] audit: type=1800 audit(1794317305.160:5145): pid=14799 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.1517" name="new_device" dev="sysfs" ino=43883 res=0 errno=-13
[  799.840797][   T31] audit: type=1800 audit(1794317305.320:5146): pid=14807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=413652 res=0 errno=-22
[  799.866017][   T31] audit: type=1400 audit(1794317305.350:5147): avc:  denied  { create } for  pid=14801 comm="syz.4.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  799.867087][   T31] audit: type=1400 audit(1794317305.350:5148): avc:  denied  { write } for  pid=14801 comm="syz.4.1518" path="socket:[56560]" dev="sockfs" ino=56560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  799.928207][   T31] audit: type=1800 audit(1794317305.410:5149): pid=14807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=43881 res=0 errno=-22
[  799.954778][   T31] audit: type=1800 audit(1794317305.420:5150): pid=14807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=413653 res=0 errno=-22
[  800.000674][   T31] audit: type=1400 audit(1794317305.480:5151): avc:  denied  { search } for  pid=14804 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  800.000785][   T31] audit: type=1400 audit(1794317305.480:5152): avc:  denied  { search } for  pid=14804 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  800.000942][   T31] audit: type=1400 audit(1794317305.480:5153): avc:  denied  { search } for  pid=14804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  800.106172][T14799] tcpci 0-0005: probe with driver tcpci failed with error -5
[  800.106520][T14799] i2c i2c-0: new_device: Instantiated device tcpci at 0x05
[  800.173856][T14799] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  802.640284][T14802] syzkaller0: entered promiscuous mode
[  802.640307][T14802] syzkaller0: entered allmulticast mode
[  803.171702][   T29] rcu_tasks_wait_gp: rcu_tasks grace period number 17 (since boot) is 1038 jiffies old.
[  803.172976][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  803.173036][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  805.072923][T14880] fuse: Bad value for 'fd'
[  805.073011][   T31] kauditd_printk_skb: 68 callbacks suppressed
[  805.073021][   T31] audit: type=1400 audit(1794317310.560:5222): avc:  denied  { mounton } for  pid=14868 comm="syz.3.1527" path="/12/file0" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  805.120854][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1524'.
[  805.120871][   T31] audit: type=1400 audit(1794317310.610:5223): avc:  denied  { write } for  pid=14871 comm="syz.4.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  805.120912][   T31] audit: type=1400 audit(1794317310.610:5224): avc:  denied  { read } for  pid=14871 comm="syz.4.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  805.456070][   T31] audit: type=1400 audit(1794317310.940:5225): avc:  denied  { write } for  pid=14856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  805.776381][   T31] audit: type=1400 audit(1794317311.260:5226): avc:  denied  { write } for  pid=14887 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  806.768135][   T31] audit: type=1400 audit(1794317312.250:5227): avc:  denied  { write } for  pid=14889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  806.808045][   T31] audit: type=1400 audit(1794317312.290:5228): avc:  denied  { create } for  pid=14899 comm="syz.4.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  807.067912][   T31] audit: type=1400 audit(1794317312.550:5229): avc:  denied  { write } for  pid=14905 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  807.210457][T14910] netlink: 'syz.3.1529': attribute type 10 has an invalid length.
[  807.262186][   T31] audit: type=1400 audit(1794317312.750:5230): avc:  denied  { map } for  pid=14899 comm="syz.4.1528" path="socket:[56711]" dev="sockfs" ino=56711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  807.266678][   T31] audit: type=1400 audit(1794317312.750:5231): avc:  denied  { read } for  pid=14899 comm="syz.4.1528" path="socket:[56711]" dev="sockfs" ino=56711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  810.430540][   T31] kauditd_printk_skb: 7 callbacks suppressed
[  810.430553][   T31] audit: type=1400 audit(1794317315.910:5239): avc:  denied  { write } for  pid=14940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  810.569491][   T31] audit: type=1400 audit(1794317316.050:5240): avc:  denied  { write } for  pid=14951 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  811.958064][T14910] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.958578][T14910] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.990804][T14910] bridge0: port 2(bridge_slave_1) entered blocking state
[  811.990852][T14910] bridge0: port 2(bridge_slave_1) entered forwarding state
[  811.991027][T14910] bridge0: port 1(bridge_slave_0) entered blocking state
[  811.991101][T14910] bridge0: port 1(bridge_slave_0) entered forwarding state
[  812.027546][T14910] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  812.067933][T14904] lo speed is unknown, defaulting to 1000
[  812.068512][T14904] lo speed is unknown, defaulting to 1000
[  812.068831][T14904] lo speed is unknown, defaulting to 1000
[  812.069244][T14904] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  812.069279][T14904] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  812.069301][T14904] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  812.197175][T14904] lo speed is unknown, defaulting to 1000
[  812.209806][T14904] lo speed is unknown, defaulting to 1000
[  812.210541][T14904] lo speed is unknown, defaulting to 1000
[  812.240953][   T31] audit: type=1800 audit(1794317317.720:5241): pid=14953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=413942 res=0 errno=-22
[  812.241036][T14904] lo speed is unknown, defaulting to 1000
[  812.276106][T14904] lo speed is unknown, defaulting to 1000
[  812.282345][   T31] audit: type=1400 audit(1794317317.770:5242): avc:  denied  { read write } for  pid=14954 comm="syz.9.1531" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  812.282645][   T31] audit: type=1400 audit(1794317317.770:5243): avc:  denied  { open } for  pid=14954 comm="syz.9.1531" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  812.287447][T14904] lo speed is unknown, defaulting to 1000
[  812.288173][T14904] lo speed is unknown, defaulting to 1000
[  812.302668][   T31] audit: type=1400 audit(1794317317.780:5244): avc:  denied  { ioctl } for  pid=14954 comm="syz.9.1531" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x41015500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  812.311249][   T31] audit: type=1800 audit(1794317317.790:5245): pid=14956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=413956 res=0 errno=-22
[  812.404201][   T31] audit: type=1800 audit(1794317317.890:5246): pid=14958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=413909 res=0 errno=-22
[  812.453894][   T31] audit: type=1400 audit(1794317317.940:5247): avc:  denied  { write } for  pid=14959 comm="syz.3.1532" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  812.466437][   T31] audit: type=1400 audit(1794317317.950:5248): avc:  denied  { ioctl } for  pid=14955 comm="syz.1.1530" path="socket:[56767]" dev="sockfs" ino=56767 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  812.503221][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'.
[  812.545504][  T987] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[  812.703326][  T987] usb 10-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00
[  812.704227][  T987] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  812.704273][  T987] usb 10-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  812.704292][  T987] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  812.706055][  T987] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.706076][  T987] usb 10-1: Product: syz
[  812.706091][  T987] usb 10-1: Manufacturer: syz
[  812.706105][  T987] usb 10-1: SerialNumber: syz
[  813.142133][ T5826] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  813.292418][ T5826] usb 2-1: Using ep0 maxpacket: 8
[  813.297546][ T5826] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  813.299364][ T5826] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  813.299400][ T5826] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  813.299436][ T5826] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  813.299457][ T5826] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  813.299477][ T5826] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  813.299508][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.519582][T14996] fuse: Bad value for 'fd'
[  813.532143][ T5826] usb 2-1: usb_control_msg returned -32
[  813.532182][ T5826] usbtmc 2-1:16.0: can't read capabilities
[  813.956948][T15005] usbtmc 2-1:16.0: control status returned 0
[  813.987276][T15005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  813.987615][T15005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  814.023698][T15005] usbtmc 2-1:16.0: control status returned 0
[  814.193178][ T5884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  814.193241][ T5884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  814.231625][T15017] netlink: 'syz.4.1535': attribute type 10 has an invalid length.
[  814.233905][T15017] bridge0: port 2(bridge_slave_1) entered disabled state
[  814.234141][T15017] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.992950][ T9471] usb 2-1: USB disconnect, device number 16
[  816.272534][   T31] kauditd_printk_skb: 20 callbacks suppressed
[  816.272572][   T31] audit: type=1400 audit(1794317321.760:5269): avc:  denied  { mount } for  pid=15032 comm="syz.1.1541" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  816.286127][T15033] FAULT_INJECTION: forcing a failure.
[  816.286127][T15033] name failslab, interval 1, probability 0, space 0, times 0
[  816.286170][T15033] CPU: 0 UID: 0 PID: 15033 Comm: syz.1.1541 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  816.286193][T15033] Tainted: [L]=SOFTLOCKUP
[  816.286199][T15033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  816.286209][T15033] Call Trace:
[  816.286214][T15033]  <TASK>
[  816.286221][T15033]  dump_stack_lvl+0x100/0x190
[  816.286253][T15033]  should_fail_ex.cold+0x5/0xa
[  816.286278][T15033]  should_failslab+0xc2/0x120
[  816.286301][T15033]  kmem_cache_alloc_noprof+0x92/0x6a0
[  816.286325][T15033]  ? __pfx_map_id_range_down+0x10/0x10
[  816.286349][T15033]  ? security_inode_alloc+0x3b/0x2c0
[  816.286377][T15033]  security_inode_alloc+0x3b/0x2c0
[  816.286402][T15033]  inode_init_always_gfp+0xc75/0xfb0
[  816.286427][T15033]  alloc_inode+0x8e/0x250
[  816.286443][T15033]  new_inode+0x22/0x1c0
[  816.286467][T15033]  debugfs_create_dir+0xbe/0x440
[  816.286488][T15033]  kvm_dev_ioctl+0x1233/0x1ac0
[  816.286517][T15033]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  816.286544][T15033]  ? selinux_file_ioctl+0x1e0/0x290
[  816.286561][T15033]  ? selinux_file_ioctl+0x1e7/0x290
[  816.286578][T15033]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  816.286602][T15033]  __x64_sys_ioctl+0x18e/0x210
[  816.286622][T15033]  do_syscall_64+0x123/0x7b0
[  816.286643][T15033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  816.286660][T15033] RIP: 0033:0x7f3ff27a8f19
[  816.286674][T15033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  816.286689][T15033] RSP: 002b:00007f3ff3723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  816.286705][T15033] RAX: ffffffffffffffda RBX: 00007f3ff2a25fa0 RCX: 00007f3ff27a8f19
[  816.286715][T15033] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004
[  816.286725][T15033] RBP: 00007f3ff2837f6d R08: 0000000000000000 R09: 0000000000000000
[  816.286735][T15033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  816.286745][T15033] R13: 00007f3ff2a26038 R14: 00007f3ff2a25fa0 R15: 00007ffce3cb41e8
[  816.286769][T15033]  </TASK>
[  816.286815][T15033] debugfs: out of free dentries, can not create directory '15033-5'
[  816.412041][   T31] audit: type=1400 audit(1794317321.870:5270): avc:  denied  { write } for  pid=15018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  816.658254][   T31] audit: type=1400 audit(1794317322.140:5271): avc:  denied  { unmount } for  pid=13909 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  816.702896][  T987] speedtch 10-1:1.0: speedtch_bind: setting interface to  1 failed (-71)!
[  816.702930][  T987] speedtch 10-1:1.0: usbatm_usb_probe: bind failed: -71!
[  816.702964][  T987] speedtch 10-1:1.0: probe with driver speedtch failed with error -71
[  816.735246][  T987] speedtch 10-1:1.1: speedtch_bind: setting interface to  1 failed (-71)!
[  816.735536][  T987] speedtch 10-1:1.1: usbatm_usb_probe: bind failed: -71!
[  816.735573][  T987] speedtch 10-1:1.1: probe with driver speedtch failed with error -71
[  816.745890][   T31] audit: type=1800 audit(1794317322.220:5272): pid=14953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=414237 res=0 errno=-22
[  816.754652][   T31] audit: type=1800 audit(1794317322.220:5273): pid=14953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=414238 res=0 errno=-22
[  816.758482][  T987] usb 10-1: USB disconnect, device number 33
[  816.821135][   T31] audit: type=1800 audit(1794317322.300:5274): pid=14953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=414239 res=0 errno=-22
[  816.959946][   T31] audit: type=1400 audit(1794317322.440:5275): avc:  denied  { read write } for  pid=15037 comm="syz.1.1542" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  816.965204][   T31] audit: type=1400 audit(1794317322.450:5276): avc:  denied  { open } for  pid=15037 comm="syz.1.1542" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  817.000359][   T31] audit: type=1400 audit(1794317322.480:5277): avc:  denied  { write } for  pid=15036 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  817.043090][T15038] ip_tables: iptables: counters copy to user failed while replacing table
[  817.196167][   T31] audit: type=1400 audit(1794317322.680:5278): avc:  denied  { read append } for  pid=15041 comm="syz.3.1544" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  817.495501][T15045] netlink: 'syz.5.1543': attribute type 10 has an invalid length.
[  818.059880][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12
[  818.235371][  T987] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  818.543844][  T987] usb 2-1: New USB device found: idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  818.545127][  T987] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  818.545154][  T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  818.545179][  T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11
[  818.545202][  T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024
[  818.546991][  T987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.547013][  T987] usb 2-1: Product: syz
[  818.547026][  T987] usb 2-1: Manufacturer: syz
[  818.547040][  T987] usb 2-1: SerialNumber: syz
[  818.548713][  T987] usb 2-1: config 0 descriptor??
[  818.549328][T15043] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  819.183333][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1545'.
[  822.268188][T15078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1552'.
[  823.689188][T15096] netlink: 'syz.3.1555': attribute type 10 has an invalid length.
[  823.855182][T14553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  823.855212][T14553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  823.858632][T15096] bridge0: port 2(bridge_slave_1) entered disabled state
[  823.858805][T15096] bridge0: port 1(bridge_slave_0) entered disabled state
[  824.148974][   T31] kauditd_printk_skb: 23 callbacks suppressed
[  824.148993][   T31] audit: type=1400 audit(1794317329.610:5302): avc:  denied  { mount } for  pid=15098 comm="syz.1.1556" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  824.418812][T15110] netlink: 'syz.5.1554': attribute type 10 has an invalid length.
[  824.440258][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1557'.
[  824.457041][ T5884] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  827.159374][   T31] audit: type=1400 audit(1794317332.640:5303): avc:  denied  { write } for  pid=15075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  827.292546][   T31] audit: type=1400 audit(1794317332.780:5304): avc:  denied  { read append } for  pid=15114 comm="syz.9.1560" name="macvtap0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  827.318520][   T31] audit: type=1400 audit(1794317332.780:5305): avc:  denied  { open } for  pid=15114 comm="syz.9.1560" path="/macvtap0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  827.343574][   T31] audit: type=1400 audit(1794317332.830:5306): avc:  denied  { ioctl } for  pid=15114 comm="syz.9.1560" path="/macvtap0" dev="tmpfs" ino=13 ioctlcmd=0xc0385869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  828.761535][   T31] audit: type=1800 audit(1794317333.470:5307): pid=15120 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1559" name="nx_huge_pages" dev="sysfs" ino=53966 res=0 errno=-22
[  829.041101][   T31] audit: type=1400 audit(1794317334.520:5308): avc:  denied  { write } for  pid=15118 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  829.072684][T15125] netlink: 'syz.5.1562': attribute type 10 has an invalid length.
[  829.545557][T15133] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  829.545630][T15133] UDF-fs: Scanning with blocksize 512 failed
[  829.546187][T15133] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  829.546204][T15133] UDF-fs: Scanning with blocksize 1024 failed
[  829.546545][T15133] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  829.546559][T15133] UDF-fs: Scanning with blocksize 2048 failed
[  829.546790][T15133] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  829.546802][T15133] UDF-fs: Scanning with blocksize 4096 failed
[  830.319470][   T31] audit: type=1400 audit(1794317335.030:5309): avc:  denied  { mounton } for  pid=15129 comm="syz.4.1558" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  830.319532][   T31] audit: type=1400 audit(1794317335.030:5310): avc:  denied  { kexec_image_load } for  pid=15129 comm="syz.4.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  830.794411][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1
[  830.842926][T15140] jffs2: notice: (15140) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found.
[  830.852176][   T31] audit: type=1400 audit(1794317336.330:5311): avc:  denied  { write } for  pid=15137 comm="syz.4.1565" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  830.922452][   T31] audit: type=1400 audit(1794317336.380:5312): avc:  denied  { add_name } for  pid=15137 comm="syz.4.1565" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  830.922495][   T31] audit: type=1400 audit(1794317336.400:5313): avc:  denied  { create } for  pid=15137 comm="syz.4.1565" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  830.922531][   T31] audit: type=1400 audit(1794317336.410:5314): avc:  denied  { read write } for  pid=15137 comm="syz.4.1565" name="fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  830.922589][   T31] audit: type=1400 audit(1794317336.410:5315): avc:  denied  { open } for  pid=15137 comm="syz.4.1565" path="/64/mnt/fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  831.501814][   T31] audit: type=1800 audit(1794317336.880:5316): pid=15155 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1566" name="add_local_port" dev="sysfs" ino=21821 res=0 errno=-13
[  832.170676][   T31] audit: type=1800 audit(1794317337.610:5317): pid=15156 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.1569" name="online" dev="sysfs" ino=1342 res=0 errno=-22
[  832.171073][   T31] audit: type=1400 audit(1794317337.620:5318): avc:  denied  { watch_mount watch_reads } for  pid=15150 comm="syz.9.1569" path="/161" dev="tmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  832.826834][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1570'.
[  833.417002][T15170] netlink: 'syz.4.1572': attribute type 10 has an invalid length.
[  833.855892][   T29] rcu_tasks_wait_gp: rcu_tasks grace period number 17 (since boot) is 4106 jiffies old.
[  833.969659][T14553] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  835.493750][   T31] audit: type=1400 audit(1794317340.970:5319): avc:  denied  { write } for  pid=15149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  835.909077][   T31] audit: type=1400 audit(1794317341.390:5320): avc:  denied  { write } for  pid=15184 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  836.052820][   T31] audit: type=1400 audit(1794317341.540:5321): avc:  denied  { map } for  pid=15186 comm="syz.9.1575" path="socket:[57487]" dev="sockfs" ino=57487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  836.053658][   T31] audit: type=1400 audit(1794317341.540:5322): avc:  denied  { cmd } for  pid=15186 comm="iou-wrk-15187" path="socket:[57487]" dev="sockfs" ino=57487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  836.306187][   T31] audit: type=1400 audit(1794317341.790:5323): avc:  denied  { rename } for  pid=15186 comm="syz.9.1575" name="file0" dev="tmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  836.337423][   T31] audit: type=1400 audit(1794317341.790:5324): avc:  denied  { unlink } for  pid=15186 comm="syz.9.1575" name="file0" dev="tmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  836.368132][ T5280] 8021q: adding VLAN 0 to HW filter on device eth18
[  836.480210][   T31] audit: type=1400 audit(1794317341.960:5325): avc:  denied  { create } for  pid=15198 comm="syz.5.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  837.956353][T15200] 8021q: adding VLAN 0 to HW filter on device bond1
[  837.958948][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1577'.
[  837.958960][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1577'.
[  838.063545][T15208] netlink: 'syz.5.1577': attribute type 4 has an invalid length.
[  838.063562][T15208] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1577'.
[  838.193048][   T31] audit: type=1400 audit(1794317343.680:5326): avc:  denied  { getopt } for  pid=15198 comm="syz.5.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  838.218127][T15208] .`: renamed from bond0
[  838.380652][ T5884] IPVS: starting estimator thread 0...
[  838.462209][T15216] IPVS: using max 38 ests per chain, 91200 per kthread
[  838.559422][T15220] FAULT_INJECTION: forcing a failure.
[  838.559422][T15220] name failslab, interval 1, probability 0, space 0, times 0
[  838.559450][T15220] CPU: 0 UID: 0 PID: 15220 Comm: syz.5.1580 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  838.559475][T15220] Tainted: [L]=SOFTLOCKUP
[  838.559484][T15220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  838.559494][T15220] Call Trace:
[  838.559501][T15220]  <TASK>
[  838.559508][T15220]  dump_stack_lvl+0x100/0x190
[  838.559543][T15220]  should_fail_ex.cold+0x5/0xa
[  838.559571][T15220]  should_failslab+0xc2/0x120
[  838.559593][T15220]  __kmalloc_node_noprof+0xff/0x870
[  838.559610][T15220]  ? __get_vm_area_node+0x1ff/0x350
[  838.559629][T15220]  ? __get_vm_area_node+0x22b/0x350
[  838.559647][T15220]  ? __vmalloc_node_range_noprof+0x424/0x1440
[  838.559674][T15220]  __vmalloc_node_range_noprof+0x424/0x1440
[  838.559696][T15220]  ? rcu_lock_acquire.constprop.0+0x7/0x30
[  838.559727][T15220]  ? rcu_read_unlock+0x17/0x60
[  838.559751][T15220]  ? kernel_clone+0x176/0x9d0
[  838.559783][T15220]  ? __memcg_slab_post_alloc_hook+0x715/0x10b0
[  838.559811][T15220]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  838.559833][T15220]  ? rcu_is_watching+0x13/0xc0
[  838.559853][T15220]  ? trace_kmem_cache_alloc+0xdd/0x100
[  838.559876][T15220]  ? kernel_clone+0x176/0x9d0
[  838.559896][T15220]  __vmalloc_node_noprof+0xad/0xf0
[  838.559915][T15220]  ? kernel_clone+0x176/0x9d0
[  838.559939][T15220]  copy_process+0x80b/0x88e0
[  838.559963][T15220]  ? __lock_acquire+0x5c0/0x1f40
[  838.559999][T15220]  ? __pfx_copy_process+0x10/0x10
[  838.560021][T15220]  ? find_held_lock+0x2b/0x80
[  838.560051][T15220]  kernel_clone+0x176/0x9d0
[  838.560072][T15220]  ? find_held_lock+0x2b/0x80
[  838.560093][T15220]  ? __pfx_kernel_clone+0x10/0x10
[  838.560120][T15220]  ? ksys_write+0x190/0x250
[  838.560140][T15220]  ? lock_acquire+0x1d1/0x380
[  838.560167][T15220]  __do_sys_clone+0xd9/0x120
[  838.560190][T15220]  ? __pfx___do_sys_clone+0x10/0x10
[  838.560212][T15220]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  838.560245][T15220]  ? ksys_write+0x1ac/0x250
[  838.560264][T15220]  ? __pfx_ksys_write+0x10/0x10
[  838.560289][T15220]  do_syscall_64+0x123/0x7b0
[  838.560314][T15220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.560332][T15220] RIP: 0033:0x7f22cbda8f19
[  838.560347][T15220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  838.560365][T15220] RSP: 002b:00007f22ccbf9fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  838.560383][T15220] RAX: ffffffffffffffda RBX: 00007f22cc025fa0 RCX: 00007f22cbda8f19
[  838.560395][T15220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000648e7000
[  838.560405][T15220] RBP: 00007f22ccbfa090 R08: 0000000000000000 R09: 0000000000000000
[  838.560415][T15220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  838.560424][T15220] R13: 00007f22cc026038 R14: 00007f22cc025fa0 R15: 00007ffd02b64258
[  838.560449][T15220]  </TASK>
[  838.560508][T15220] syz.5.1580: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  838.560560][T15220] CPU: 0 UID: 0 PID: 15220 Comm: syz.5.1580 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  838.560582][T15220] Tainted: [L]=SOFTLOCKUP
[  838.560588][T15220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  838.560598][T15220] Call Trace:
[  838.560604][T15220]  <TASK>
[  838.560612][T15220]  dump_stack_lvl+0x100/0x190
[  838.560644][T15220]  warn_alloc.cold+0x9e/0xb2
[  838.560665][T15220]  ? __pfx_warn_alloc+0x10/0x10
[  838.560689][T15220]  ? dump_stack_lvl+0x17c/0x190
[  838.560714][T15220]  ? rcu_is_watching+0x13/0xc0
[  838.560734][T15220]  ? __kasan_kmalloc+0x8a/0xb0
[  838.560754][T15220]  ? __kmalloc_node_noprof+0x360/0x870
[  838.560776][T15220]  ? __get_vm_area_node+0x1ff/0x350
[  838.560794][T15220]  ? __get_vm_area_node+0x22b/0x350
[  838.560813][T15220]  ? __vmalloc_node_range_noprof+0x424/0x1440
[  838.560839][T15220]  __vmalloc_node_range_noprof+0x107c/0x1440
[  838.560861][T15220]  ? rcu_lock_acquire.constprop.0+0x7/0x30
[  838.560894][T15220]  ? kernel_clone+0x176/0x9d0
[  838.560919][T15220]  ? __memcg_slab_post_alloc_hook+0x715/0x10b0
[  838.560947][T15220]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  838.560971][T15220]  ? rcu_is_watching+0x13/0xc0
[  838.560991][T15220]  ? trace_kmem_cache_alloc+0xdd/0x100
[  838.561014][T15220]  ? kernel_clone+0x176/0x9d0
[  838.561035][T15220]  __vmalloc_node_noprof+0xad/0xf0
[  838.561056][T15220]  ? kernel_clone+0x176/0x9d0
[  838.561081][T15220]  copy_process+0x80b/0x88e0
[  838.561106][T15220]  ? __lock_acquire+0x5c0/0x1f40
[  838.561141][T15220]  ? __pfx_copy_process+0x10/0x10
[  838.561164][T15220]  ? find_held_lock+0x2b/0x80
[  838.561193][T15220]  kernel_clone+0x176/0x9d0
[  838.561214][T15220]  ? find_held_lock+0x2b/0x80
[  838.561236][T15220]  ? __pfx_kernel_clone+0x10/0x10
[  838.561263][T15220]  ? ksys_write+0x190/0x250
[  838.561281][T15220]  ? lock_acquire+0x1d1/0x380
[  838.561309][T15220]  __do_sys_clone+0xd9/0x120
[  838.561332][T15220]  ? __pfx___do_sys_clone+0x10/0x10
[  838.561353][T15220]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  838.561386][T15220]  ? ksys_write+0x1ac/0x250
[  838.561404][T15220]  ? __pfx_ksys_write+0x10/0x10
[  838.561429][T15220]  do_syscall_64+0x123/0x7b0
[  838.561454][T15220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.561469][T15220] RIP: 0033:0x7f22cbda8f19
[  838.561484][T15220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  838.561500][T15220] RSP: 002b:00007f22ccbf9fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  838.561517][T15220] RAX: ffffffffffffffda RBX: 00007f22cc025fa0 RCX: 00007f22cbda8f19
[  838.561529][T15220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000648e7000
[  838.561539][T15220] RBP: 00007f22ccbfa090 R08: 0000000000000000 R09: 0000000000000000
[  838.561549][T15220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  838.561559][T15220] R13: 00007f22cc026038 R14: 00007f22cc025fa0 R15: 00007ffd02b64258
[  838.561584][T15220]  </TASK>
[  838.575010][T15220] Mem-Info:
[  838.575020][T15220] active_anon:27363 inactive_anon:4 isolated_anon:0
[  838.575020][T15220]  active_file:4232 inactive_file:69227 isolated_file:0
[  838.575020][T15220]  unevictable:0 dirty:397 writeback:2
[  838.575020][T15220]  slab_reclaimable:13945 slab_unreclaimable:116805
[  838.575020][T15220]  mapped:38964 shmem:19552 pagetables:1307
[  838.575020][T15220]  sec_pagetables:0 bounce:0
[  838.575020][T15220]  kernel_misc_reclaimable:0
[  838.575020][T15220]  free:1181222 free_pcp:39008 free_cma:0
[  838.575064][T15220] Node 0 active_anon:109452kB inactive_anon:16kB active_file:16928kB inactive_file:276676kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155828kB dirty:1588kB writeback:8kB shmem:78208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13940kB pagetables:5052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  838.575180][T15220] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  838.575223][T15220] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  838.575270][T15220] lowmem_reserve[]: 0 2447 2449 2449 2449
[  838.575356][T15220] Node 0 DMA32 free:775712kB boost:0kB min:33784kB low:42228kB high:50672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:109552kB inactive_anon:16kB active_file:16928kB inactive_file:276676kB unevictable:0kB writepending:1596kB zspages:0kB present:3129332kB managed:2506148kB mlocked:0kB bounce:0kB free_pcp:155996kB local_pcp:137024kB free_cma:0kB
[  838.575405][T15220] lowmem_reserve[]: 0 0 1 1 1
[  838.575434][T15220] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1748kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  838.575532][T15220] lowmem_reserve[]: 0 0 0 0 0
[  838.575561][T15220] Node 1 Normal free:3933816kB boost:0kB min:56092kB low:70112kB high:84132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  838.575607][T15220] lowmem_reserve[]: 0 0 0 0 0
[  838.575633][T15220] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  838.575784][T15220] Node 0 DMA32: 167*4kB (UME) 467*8kB (UM) 1221*16kB (UME) 2397*32kB (UM) 1336*64kB (UME) 602*128kB (UME) 248*256kB (UM) 79*512kB (UME) 83*1024kB (UME) 45*2048kB (UME) 56*4096kB (UM) = 773668kB
[  838.575981][T15220] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  838.578767][T15220] Node 1 Normal: 4*4kB (UM) 1*8kB (U) 10*16kB (UM) 6*32kB (U) 6*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 958*4096kB (M) = 3933816kB
[  838.578929][T15220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  838.578942][T15220] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  838.578953][T15220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  838.579012][T15220] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  838.579024][T15220] 92930 total pagecache pages
[  838.579029][T15220] 0 pages in swap cache
[  838.579034][T15220] Free swap  = 124996kB
[  838.579040][T15220] Total swap = 124996kB
[  838.579046][T15220] 2097051 pages RAM
[  838.579051][T15220] 0 pages HighMem/MovableOnly
[  838.579056][T15220] 438461 pages reserved
[  838.579061][T15220] 0 pages cma reserved
[  838.976643][  T987] iguanair 2-1:0.0: failed to get version
[  838.978934][  T987] iguanair 2-1:0.0: probe with driver iguanair failed with error -110
[  838.994077][   T31] audit: type=1800 audit(1794317344.470:5327): pid=15031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=414500 res=0 errno=-22
[  838.994118][   T31] audit: type=1800 audit(1794317344.470:5328): pid=15031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=414501 res=0 errno=-22
[  839.007327][  T987] usb 2-1: USB disconnect, device number 17
[  839.928583][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1582'.
[  840.540553][T14557] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  840.600682][T15238] netlink: 'syz.3.1583': attribute type 10 has an invalid length.
[  841.835833][   T31] kauditd_printk_skb: 3 callbacks suppressed
[  841.835886][   T31] audit: type=1400 audit(1794317346.730:5332): avc:  denied  { create } for  pid=15241 comm="syz.5.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  841.835992][   T31] audit: type=1400 audit(1794317346.740:5333): avc:  denied  { write } for  pid=15241 comm="syz.5.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  842.075410][   T31] audit: type=1400 audit(1794317347.560:5334): avc:  denied  { write } for  pid=15245 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  842.161466][ T5280] 8021q: adding VLAN 0 to HW filter on device eth19
[  843.263317][   T31] audit: type=1400 audit(1794317348.740:5335): avc:  denied  { map } for  pid=15250 comm="syz.3.1587" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  843.503148][T15261] netlink: 'syz.9.1588': attribute type 10 has an invalid length.
[  844.280876][ T5884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  844.280904][ T5884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  844.934561][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1589'.
[  844.983831][   T31] audit: type=1400 audit(1794317350.470:5336): avc:  denied  { read } for  pid=15262 comm="syz.1.1589" dev="sockfs" ino=57564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  844.992994][T15263] 9pnet_fd: Insufficient options for proto=fd
[  845.111683][   T31] audit: type=1400 audit(1794317350.590:5337): avc:  denied  { getopt } for  pid=15262 comm="syz.1.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  845.138654][   T31] audit: type=1400 audit(1794317350.620:5338): avc:  denied  { write } for  pid=15262 comm="syz.1.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  845.409525][   T31] audit: type=1400 audit(1794317350.890:5339): avc:  denied  { write } for  pid=15254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  846.105412][   T31] audit: type=1400 audit(1794317351.590:5340): avc:  denied  { write } for  pid=15274 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  846.316962][ T5280] 8021q: adding VLAN 0 to HW filter on device eth20
[  846.403032][T15284] netlink: 830 bytes leftover after parsing attributes in process `syz.9.1593'.
[  846.585208][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'.
[  846.747424][   T31] audit: type=1400 audit(1794317352.230:5341): avc:  denied  { create } for  pid=15297 comm="syz.1.1596" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  846.909492][T15300] overlayfs: failed to resolve './file1/file0': -2
[  847.140075][   T31] audit: type=1400 audit(1794317352.590:5342): avc:  denied  { bind } for  pid=15297 comm="syz.1.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  847.140336][   T31] audit: type=1400 audit(1794317352.590:5343): avc:  denied  { accept } for  pid=15297 comm="syz.1.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  847.140566][   T31] audit: type=1400 audit(1794317352.600:5344): avc:  denied  { read } for  pid=15297 comm="syz.1.1596" name="md0" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  847.140854][   T31] audit: type=1400 audit(1794317352.600:5345): avc:  denied  { open } for  pid=15297 comm="syz.1.1596" path="/39/md0" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  847.513168][   T31] audit: type=1400 audit(1794317352.990:5346): avc:  denied  { unlink } for  pid=13909 comm="syz-executor" name="md0" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  848.394624][T15314] netlink: 'syz.5.1586': attribute type 10 has an invalid length.
[  848.573612][   T31] audit: type=1400 audit(1794317354.030:5347): avc:  denied  { write } for  pid=15286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  848.709478][   T31] audit: type=1400 audit(1794317354.160:5348): avc:  denied  { mount } for  pid=15315 comm="syz.1.1600" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  849.031650][   T31] audit: type=1400 audit(1794317354.500:5349): avc:  denied  { write } for  pid=15324 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  849.092123][   T31] audit: type=1400 audit(1794317354.580:5350): avc:  denied  { write } for  pid=15320 comm="syz.5.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  849.231695][ T5826] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  849.266854][T15328] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1601'.
[  849.294958][   T31] audit: type=1400 audit(1794317354.740:5351): avc:  denied  { nlmsg_write } for  pid=15321 comm="syz.3.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  849.414987][ T5826] usb 2-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00
[  849.447742][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.483026][ T5280] 8021q: adding VLAN 0 to HW filter on device eth21
[  849.941866][ T9417] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  849.947074][T15317] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  850.097518][ T9417] usb 6-1: New USB device found: idVendor=104f, idProduct=0004, bcdDevice=1.00
[  850.103550][ T9417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  850.103571][ T9417] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  850.107691][ T9417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  850.107711][ T9417] usb 6-1: Product: syz
[  850.107724][ T9417] usb 6-1: Manufacturer: syz
[  850.125445][ T9417] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected
[  850.141153][ T9417] usb 6-1: iuu_phoenix converter now attached to ttyUSB0
[  851.306867][ T5826] usb 2-1: Firmware version (0.0) predates our first public release.
[  851.306902][ T5826] usb 2-1: Please update to version 0.2 or newer
[  851.358140][T15322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1602'.
[  851.358192][T15322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1602'.
[  851.503639][ T5826] usb 2-1: USB disconnect, device number 18
[  851.507903][T15322] dummy0: entered promiscuous mode
[  851.540684][T15322] team0: entered promiscuous mode
[  851.540702][T15322] team_slave_0: entered promiscuous mode
[  851.540811][T15322] team_slave_1: entered promiscuous mode
[  851.584389][  T987] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  851.662156][ T9417] usb 6-1: USB disconnect, device number 17
[  851.706805][ T9417] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  851.707496][ T9417] iuu_phoenix 6-1:1.0: device disconnected
[  851.743668][  T987] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9374, bcdDevice=1.08
[  851.744715][  T987] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  851.744754][  T987] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8
[  851.746857][  T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.746879][  T987] usb 4-1: Product: syz
[  851.746902][  T987] usb 4-1: Manufacturer: syz
[  851.746915][  T987] usb 4-1: SerialNumber: syz
[  851.940090][T15363] device-mapper: table: 248:11: thin-pool: Error opening metadata block device (-EBUSY)
[  851.940113][T15363] device-mapper: ioctl: error adding target to table
[  851.968808][  T987] ath6kl: Failed to submit usb control message: -71
[  851.968847][  T987] ath6kl: unable to send the bmi data to the device: -71
[  851.968860][  T987] ath6kl: Unable to send get target info: -71
[  852.007929][  T987] ath6kl: Failed to init ath6kl core: -71
[  852.020003][  T987] ath6kl_usb 4-1:1.0: probe with driver ath6kl_usb failed with error -71
[  852.036470][  T987] usb 4-1: USB disconnect, device number 17
[  852.194324][   T31] kauditd_printk_skb: 47 callbacks suppressed
[  852.194336][   T31] audit: type=1400 audit(1794317357.680:5399): avc:  denied  { read } for  pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  852.198410][ T5280] 8021q: adding VLAN 0 to HW filter on device eth22
[  852.392383][   T31] audit: type=1400 audit(1794317357.880:5400): avc:  denied  { read } for  pid=15373 comm="syz.9.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  852.429763][   T31] audit: type=1400 audit(1794317357.910:5401): avc:  denied  { write } for  pid=15373 comm="syz.9.1613" name="loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  852.456427][T15374] loop9: detected capacity change from 0 to 1
[  852.473999][   T31] audit: type=1800 audit(1794317357.950:5402): pid=15353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16009 res=0 errno=-22
[  852.476437][T15374] Dev loop9: unable to read RDB block 1
[  852.476466][T15374]  loop9: unable to read partition table
[  852.476603][T15374] loop9: partition table beyond EOD, truncated
[  852.476882][T15374] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  852.881896][   T31] audit: type=1400 audit(1794317358.350:5403): avc:  denied  { sqpoll } for  pid=15375 comm="syz.5.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  853.552615][   T31] audit: type=1800 audit(1794317359.040:5404): pid=15391 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1616" name="pm_test" dev="sysfs" ino=1415 res=0 errno=-22
[  853.595265][   T31] audit: type=1400 audit(1794317359.080:5405): avc:  denied  { bind } for  pid=15390 comm="syz.5.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  853.781169][   T31] audit: type=1400 audit(1794317359.240:5406): avc:  denied  { setopt } for  pid=15392 comm="syz.4.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  853.781244][   T31] audit: type=1400 audit(1794317359.250:5407): avc:  denied  { read append } for  pid=15392 comm="syz.4.1617" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  853.781287][   T31] audit: type=1400 audit(1794317359.250:5408): avc:  denied  { open } for  pid=15392 comm="syz.4.1617" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  855.320626][ T5280] 8021q: adding VLAN 0 to HW filter on device eth23
[  855.915937][ T5826] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  856.442457][ T5826] usb 4-1: device descriptor read/64, error -71
[  856.511677][  T987] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  856.696408][ T5826] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  856.704985][  T987] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  856.710211][  T987] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  856.710238][  T987] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x8F has invalid wMaxPacketSize 0
[  856.710258][  T987] usb 2-1: config 0 interface 0 has no altsetting 0
[  856.757541][  T987] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  856.757563][  T987] usb 2-1: Product: syz
[  856.757578][  T987] usb 2-1: Manufacturer: syz
[  856.757591][  T987] usb 2-1: SerialNumber: syz
[  856.760998][  T987] usb 2-1: config 0 descriptor??
[  856.791883][ T9806] usb 10-1: new full-speed USB device number 34 using dummy_hcd
[  856.799620][  T987] usb 2-1: selecting invalid altsetting 0
[  856.851658][ T5826] usb 4-1: device descriptor read/64, error -71
[  856.948799][ T9806] usb 10-1: unable to get BOS descriptor or descriptor too short
[  856.951201][ T9806] usb 10-1: not running at top speed; connect to a high speed hub
[  856.951426][ T9806] usb 10-1: New USB device found: idVendor=0582, idProduct=0044, bcdDevice=0.40
[  856.969206][ T5826] usb usb4-port1: attempt power cycle
[  857.027338][ T9806] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  857.060166][ T9806] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.060194][ T9806] usb 10-1: Product: syz
[  857.060254][ T9806] usb 10-1: Manufacturer: syz
[  857.060290][ T9806] usb 10-1: SerialNumber: syz
[  857.172954][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  857.172993][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  857.236404][   T31] kauditd_printk_skb: 85 callbacks suppressed
[  857.236419][   T31] audit: type=1400 audit(1794317362.720:5494): avc:  denied  { read } for  pid=15452 comm="syz.5.1628" dev="nsfs" ino=4026533721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  857.236556][   T31] audit: type=1400 audit(1794317362.720:5495): avc:  denied  { open } for  pid=15452 comm="syz.5.1628" path="net:[4026533721]" dev="nsfs" ino=4026533721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  857.236717][   T31] audit: type=1400 audit(1794317362.720:5496): avc:  denied  { create } for  pid=15452 comm="syz.5.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  857.302347][   T31] audit: type=1800 audit(1794317362.720:5497): pid=15279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=415680 res=0 errno=-22
[  857.331507][   T31] audit: type=1400 audit(1794317362.820:5498): avc:  denied  { ioctl } for  pid=15452 comm="syz.5.1628" path="socket:[58720]" dev="sockfs" ino=58720 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  857.449815][ T5826] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  857.465288][   T31] audit: type=1800 audit(1794317362.930:5499): pid=15279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=415683 res=0 errno=-22
[  857.505158][ T5826] usb 4-1: device descriptor read/8, error -71
[  857.590149][   T31] audit: type=1800 audit(1794317363.070:5500): pid=15353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=415839 res=0 errno=-22
[  857.651417][   T31] audit: type=1800 audit(1794317363.130:5501): pid=15458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=415792 res=0 errno=-22
[  857.757168][   T31] audit: type=1800 audit(1794317363.230:5502): pid=15353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=415871 res=0 errno=-22
[  857.790146][ T5826] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  857.823165][   T31] audit: type=1800 audit(1794317363.300:5503): pid=15353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=415846 res=0 errno=-22
[  857.867657][ T5826] usb 4-1: device descriptor read/8, error -71
[  857.972005][ T5826] usb usb4-port1: unable to enumerate USB device
[  858.213959][   T25] usb 2-1: USB disconnect, device number 19
[  858.314731][ T9806] usb 10-1: interface 3 not found
[  858.368928][ T9806] usb 10-1: USB disconnect, device number 34
[  860.401900][ T5826] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  860.531647][ T5826] usb 2-1: device descriptor read/64, error -71
[  860.782039][ T5826] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  860.912201][ T5826] usb 2-1: device descriptor read/64, error -71
[  861.027994][ T5826] usb usb2-port1: attempt power cycle
[  861.290606][T15508] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring
[  861.391386][ T5826] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  861.416380][ T5826] usb 2-1: device descriptor read/8, error -71
[  861.679988][ T5826] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  861.716428][ T5826] usb 2-1: device descriptor read/8, error -71
[  861.835318][ T5826] usb usb2-port1: unable to enumerate USB device
[  862.522152][T15553] FAULT_INJECTION: forcing a failure.
[  862.522152][T15553] name failslab, interval 1, probability 0, space 0, times 0
[  862.522181][T15553] CPU: 0 UID: 0 PID: 15553 Comm: syz.3.1647 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  862.522205][T15553] Tainted: [L]=SOFTLOCKUP
[  862.522211][T15553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  862.522222][T15553] Call Trace:
[  862.522228][T15553]  <TASK>
[  862.522236][T15553]  dump_stack_lvl+0x100/0x190
[  862.522271][T15553]  should_fail_ex.cold+0x5/0xa
[  862.522300][T15553]  should_failslab+0xc2/0x120
[  862.522323][T15553]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  862.522342][T15553]  ? __alloc_skb+0x5b7/0x710
[  862.522362][T15553]  ? __alloc_skb+0x140/0x710
[  862.522387][T15553]  __alloc_skb+0x140/0x710
[  862.522407][T15553]  ? __alloc_skb+0x5b7/0x710
[  862.522428][T15553]  ? __pfx___alloc_skb+0x10/0x10
[  862.522457][T15553]  netlink_alloc_large_skb+0x69/0x150
[  862.522487][T15553]  netlink_sendmsg+0x755/0x10c0
[  862.522515][T15553]  ? __pfx_netlink_sendmsg+0x10/0x10
[  862.522547][T15553]  ? selinux_socket_sendmsg+0x198/0x2f0
[  862.522583][T15553]  ? ____sys_sendmsg+0xa99/0xc30
[  862.522609][T15553]  ____sys_sendmsg+0xa99/0xc30
[  862.522634][T15553]  ? __pfx_netlink_sendmsg+0x10/0x10
[  862.522659][T15553]  ? __pfx_____sys_sendmsg+0x10/0x10
[  862.522693][T15553]  ? lock_acquire+0x1d1/0x380
[  862.522717][T15553]  ? get_pid_task+0x2a/0x250
[  862.522737][T15553]  ___sys_sendmsg+0x190/0x1e0
[  862.522757][T15553]  ? __pfx____sys_sendmsg+0x10/0x10
[  862.522775][T15553]  ? get_pid_task+0x106/0x250
[  862.522801][T15553]  ? find_held_lock+0x2b/0x80
[  862.522838][T15553]  __sys_sendmsg+0x160/0x210
[  862.522862][T15553]  ? __pfx___sys_sendmsg+0x10/0x10
[  862.522900][T15553]  do_syscall_64+0x123/0x7b0
[  862.522925][T15553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.522942][T15553] RIP: 0033:0x7fe9feba8f19
[  862.522957][T15553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  862.522974][T15553] RSP: 002b:00007fe9ff9ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  862.522993][T15553] RAX: ffffffffffffffda RBX: 00007fe9fee25fa0 RCX: 00007fe9feba8f19
[  862.523005][T15553] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  862.523017][T15553] RBP: 00007fe9ff9ca090 R08: 0000000000000000 R09: 0000000000000000
[  862.523028][T15553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  862.523038][T15553] R13: 00007fe9fee26038 R14: 00007fe9fee25fa0 R15: 00007ffeac591b88
[  862.523064][T15553]  </TASK>
[  863.683786][   T31] kauditd_printk_skb: 43 callbacks suppressed
[  863.683804][   T31] audit: type=1400 audit(1794317368.956:5547): avc:  denied  { read } for  pid=15561 comm="syz.3.1649" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  863.683845][   T31] audit: type=1400 audit(1794317368.956:5548): avc:  denied  { open } for  pid=15561 comm="syz.3.1649" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  863.791074][   T31] audit: type=1400 audit(1794317369.096:5549): avc:  denied  { mount } for  pid=15561 comm="syz.3.1649" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  863.806302][   T31] audit: type=1400 audit(1794317369.096:5550): avc:  denied  { mount } for  pid=15561 comm="syz.3.1649" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  863.858424][   T31] audit: type=1400 audit(1794317369.152:5551): avc:  denied  { unmount } for  pid=13909 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  863.907054][   T31] audit: type=1400 audit(1794317369.199:5552): avc:  denied  { write } for  pid=15531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  864.082457][T15574] FAULT_INJECTION: forcing a failure.
[  864.082457][T15574] name failslab, interval 1, probability 0, space 0, times 0
[  864.082476][T15574] CPU: 1 UID: 0 PID: 15574 Comm: syz.9.1650 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  864.082492][T15574] Tainted: [L]=SOFTLOCKUP
[  864.082496][T15574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  864.082503][T15574] Call Trace:
[  864.082507][T15574]  <TASK>
[  864.082512][T15574]  dump_stack_lvl+0x100/0x190
[  864.082532][T15574]  should_fail_ex.cold+0x5/0xa
[  864.082549][T15574]  should_failslab+0xc2/0x120
[  864.082563][T15574]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  864.082574][T15574]  ? __alloc_skb+0x5b7/0x710
[  864.082587][T15574]  ? __alloc_skb+0x140/0x710
[  864.082602][T15574]  __alloc_skb+0x140/0x710
[  864.082613][T15574]  ? __alloc_skb+0x5b7/0x710
[  864.082625][T15574]  ? __pfx___alloc_skb+0x10/0x10
[  864.082637][T15574]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  864.082653][T15574]  netlink_alloc_large_skb+0x69/0x150
[  864.082669][T15574]  netlink_sendmsg+0x755/0x10c0
[  864.082686][T15574]  ? __pfx_netlink_sendmsg+0x10/0x10
[  864.082703][T15574]  ? selinux_socket_sendmsg+0x198/0x2f0
[  864.082721][T15574]  ? ____sys_sendmsg+0xa99/0xc30
[  864.082736][T15574]  ____sys_sendmsg+0xa99/0xc30
[  864.082752][T15574]  ? __pfx_netlink_sendmsg+0x10/0x10
[  864.082768][T15574]  ? __pfx_____sys_sendmsg+0x10/0x10
[  864.082788][T15574]  ? lock_acquire+0x1d1/0x380
[  864.082802][T15574]  ? get_pid_task+0x2a/0x250
[  864.082814][T15574]  ___sys_sendmsg+0x190/0x1e0
[  864.082825][T15574]  ? __pfx____sys_sendmsg+0x10/0x10
[  864.082836][T15574]  ? get_pid_task+0x106/0x250
[  864.082851][T15574]  ? find_held_lock+0x2b/0x80
[  864.082872][T15574]  __sys_sendmsg+0x160/0x210
[  864.082886][T15574]  ? __pfx___sys_sendmsg+0x10/0x10
[  864.082907][T15574]  do_syscall_64+0x123/0x7b0
[  864.082922][T15574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  864.082933][T15574] RIP: 0033:0x7f8ed6fa8f19
[  864.082943][T15574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  864.082953][T15574] RSP: 002b:00007f8ed7e99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  864.082964][T15574] RAX: ffffffffffffffda RBX: 00007f8ed7225fa0 RCX: 00007f8ed6fa8f19
[  864.082971][T15574] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003
[  864.082977][T15574] RBP: 00007f8ed7e99090 R08: 0000000000000000 R09: 0000000000000000
[  864.082984][T15574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  864.082990][T15574] R13: 00007f8ed7226038 R14: 00007f8ed7225fa0 R15: 00007fff53e91518
[  864.083004][T15574]  </TASK>
[  864.413470][   T31] audit: type=1400 audit(1794317369.676:5553): avc:  denied  { write } for  pid=15577 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  864.559936][   T31] audit: type=1400 audit(1794317369.816:5554): avc:  denied  { unmount } for  pid=13993 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  864.594341][   T31] audit: type=1400 audit(1794317369.844:5555): avc:  denied  { unmount } for  pid=13993 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  864.685049][   T31] audit: type=1400 audit(1794317369.919:5556): avc:  denied  { ioctl } for  pid=15585 comm="syz.9.1656" path="/dev/video1" dev="devtmpfs" ino=929 ioctlcmd=0xc0145608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  864.827367][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  864.827414][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  864.949663][T15593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1659'.
[  865.913495][T15611] netlink: 'syz.4.1654': attribute type 10 has an invalid length.
[  868.468411][   T25] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[  869.335631][   T25] usb 10-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01
[  869.354037][   T25] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  869.354054][   T25] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  869.377207][   T25] usb 10-1: string descriptor 0 read error: -22
[  869.377343][   T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.385570][   T31] kauditd_printk_skb: 21 callbacks suppressed
[  869.385584][   T31] audit: type=1800 audit(1794317374.326:5578): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=416386 res=0 errno=-22
[  869.406651][   T31] audit: type=1800 audit(1794317374.354:5579): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=416415 res=0 errno=-22
[  869.415003][   T31] audit: type=1800 audit(1794317374.354:5580): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=416393 res=0 errno=-22
[  869.415038][   T31] audit: type=1800 audit(1794317374.354:5581): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=416394 res=0 errno=-22
[  869.423970][   T31] audit: type=1400 audit(1794317374.354:5582): avc:  denied  { write } for  pid=15635 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  869.428102][   T31] audit: type=1800 audit(1794317374.354:5583): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=416395 res=0 errno=-22
[  869.437951][   T25] etas_es58x 10-1:1.0: Starting (null) (null) (Serial Number (null))
[  869.527210][   T25] etas_es58x 10-1:1.0: could not retrieve the product info string
[  869.532102][   T31] audit: type=1800 audit(1794317374.466:5584): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=416435 res=0 errno=-22
[  869.607316][   T31] audit: type=1800 audit(1794317374.531:5585): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=416452 res=0 errno=-22
[  869.618057][   T31] audit: type=1800 audit(1794317374.541:5586): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=416457 res=0 errno=-22
[  869.623083][   T31] audit: type=1800 audit(1794317374.541:5587): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=416436 res=0 errno=-22
[  869.687419][T15628] FAULT_INJECTION: forcing a failure.
[  869.687419][T15628] name failslab, interval 1, probability 0, space 0, times 0
[  869.687447][T15628] CPU: 1 UID: 0 PID: 15628 Comm: syz.9.1667 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  869.687471][T15628] Tainted: [L]=SOFTLOCKUP
[  869.687478][T15628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  869.687489][T15628] Call Trace:
[  869.687501][T15628]  <TASK>
[  869.687508][T15628]  dump_stack_lvl+0x100/0x190
[  869.687543][T15628]  should_fail_ex.cold+0x5/0xa
[  869.687571][T15628]  should_failslab+0xc2/0x120
[  869.687592][T15628]  __kmalloc_cache_noprof+0x91/0x6d0
[  869.687618][T15628]  ? dummy_urb_enqueue+0xa3/0x8b0
[  869.687642][T15628]  dummy_urb_enqueue+0xa3/0x8b0
[  869.687660][T15628]  ? usb_hcd_map_urb_for_dma+0x28a/0x1190
[  869.687692][T15628]  usb_hcd_submit_urb+0x268/0x2140
[  869.687722][T15628]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  869.687746][T15628]  usb_submit_urb+0x827/0x19b0
[  869.687769][T15628]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  869.687792][T15628]  es58x_open+0x441/0xab0
[  869.687808][T15628]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  869.687845][T15628]  ? __pfx_es58x_open+0x10/0x10
[  869.687862][T15628]  ? notifier_call_chain+0x31b/0x3f0
[  869.687888][T15628]  ? __pfx_es58x_open+0x10/0x10
[  869.687905][T15628]  __dev_open+0x3ad/0x8f0
[  869.687933][T15628]  ? __pfx___dev_open+0x10/0x10
[  869.687961][T15628]  ? __local_bh_enable_ip+0xa5/0x120
[  869.687984][T15628]  __dev_change_flags+0x596/0x850
[  869.688006][T15628]  ? __pfx___dev_change_flags+0x10/0x10
[  869.688035][T15628]  netif_change_flags+0x8d/0x160
[  869.688060][T15628]  dev_change_flags+0xba/0x260
[  869.688087][T15628]  devinet_ioctl+0x110b/0x1f10
[  869.688113][T15628]  ? __pfx_devinet_ioctl+0x10/0x10
[  869.688134][T15628]  ? _copy_from_user+0x59/0xd0
[  869.688162][T15628]  inet_ioctl+0x3aa/0x3f0
[  869.688185][T15628]  ? __pfx_inet_ioctl+0x10/0x10
[  869.688223][T15628]  ? tomoyo_path_number_perm+0x188/0x580
[  869.688260][T15628]  sock_do_ioctl+0x118/0x280
[  869.688288][T15628]  ? __pfx_sock_do_ioctl+0x10/0x10
[  869.688315][T15628]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  869.688348][T15628]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  869.688367][T15628]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  869.688390][T15628]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  869.688415][T15628]  sock_ioctl+0x599/0x6b0
[  869.688434][T15628]  ? __pfx_sock_ioctl+0x10/0x10
[  869.688459][T15628]  ? selinux_file_ioctl+0x1e0/0x290
[  869.688478][T15628]  ? selinux_file_ioctl+0x1e7/0x290
[  869.688504][T15628]  ? __pfx_sock_ioctl+0x10/0x10
[  869.688523][T15628]  __x64_sys_ioctl+0x18e/0x210
[  869.688546][T15628]  do_syscall_64+0x123/0x7b0
[  869.688571][T15628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  869.688591][T15628] RIP: 0033:0x7f8ed6fa8f19
[  869.688607][T15628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  869.688623][T15628] RSP: 002b:00007f8ed7e99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  869.688642][T15628] RAX: ffffffffffffffda RBX: 00007f8ed7225fa0 RCX: 00007f8ed6fa8f19
[  869.688655][T15628] RDX: 0000200000000200 RSI: 0000000000008914 RDI: 0000000000000004
[  869.688665][T15628] RBP: 00007f8ed7e99090 R08: 0000000000000000 R09: 0000000000000000
[  869.688677][T15628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  869.688687][T15628] R13: 00007f8ed7226038 R14: 00007f8ed7225fa0 R15: 00007fff53e91518
[  869.688713][T15628]  </TASK>
[  869.691630][T15628] etas_es58x 10-1:1.0: es58x_alloc_rx_urbs: Could not setup any rx URBs
[  870.144430][   T25] usb 10-1: USB disconnect, device number 35
[  870.277766][   T25] etas_es58x 10-1:1.0: Disconnecting (null) (null)
[  870.804399][T15653] »»»»»»: renamed from vlan0
[  870.806685][T15643] FAULT_INJECTION: forcing a failure.
[  870.806685][T15643] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  870.806706][T15643] CPU: 0 UID: 0 PID: 15643 Comm: syz.3.1671 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  870.806730][T15643] Tainted: [L]=SOFTLOCKUP
[  870.806734][T15643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  870.806744][T15643] Call Trace:
[  870.806751][T15643]  <TASK>
[  870.806758][T15643]  dump_stack_lvl+0x100/0x190
[  870.806792][T15643]  should_fail_ex.cold+0x5/0xa
[  870.806818][T15643]  core_sys_select+0x938/0xc20
[  870.806837][T15643]  ? __pfx_core_sys_select+0x10/0x10
[  870.806849][T15643]  ? find_held_lock+0x2b/0x80
[  870.806861][T15643]  ? get_pid_task+0xfc/0x250
[  870.806885][T15643]  ? __pfx_set_user_sigmask+0x10/0x10
[  870.806905][T15643]  ? __mutex_unlock_slowpath+0x35d/0x930
[  870.806931][T15643]  do_pselect.constprop.0+0x238/0x270
[  870.806955][T15643]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  870.806976][T15643]  ? xfd_validate_state+0x129/0x190
[  870.806997][T15643]  __x64_sys_pselect6+0x149/0x1c0
[  870.807013][T15643]  do_syscall_64+0x123/0x7b0
[  870.807027][T15643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.807043][T15643] RIP: 0033:0x7fe9feba8f19
[  870.807058][T15643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  870.807075][T15643] RSP: 002b:00007fe9ff988028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  870.807092][T15643] RAX: ffffffffffffffda RBX: 00007fe9fee26180 RCX: 00007fe9feba8f19
[  870.807104][T15643] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000040
[  870.807115][T15643] RBP: 00007fe9ff988090 R08: 0000000000000000 R09: 0000000000000000
[  870.807121][T15643] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001
[  870.807127][T15643] R13: 00007fe9fee26218 R14: 00007fe9fee26180 R15: 00007ffeac591b88
[  870.807142][T15643]  </TASK>
[  870.984266][T15654] bridge0: port 4(syz_tun) entered blocking state
[  870.984339][T15654] bridge0: port 4(syz_tun) entered disabled state
[  870.984428][T15654] syz_tun: entered allmulticast mode
[  871.614663][T15678] FAULT_INJECTION: forcing a failure.
[  871.614663][T15678] name failslab, interval 1, probability 0, space 0, times 0
[  871.614691][T15678] CPU: 0 UID: 0 PID: 15678 Comm: syz.5.1678 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  871.614716][T15678] Tainted: [L]=SOFTLOCKUP
[  871.614723][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  871.614734][T15678] Call Trace:
[  871.614741][T15678]  <TASK>
[  871.614748][T15678]  dump_stack_lvl+0x100/0x190
[  871.614782][T15678]  should_fail_ex.cold+0x5/0xa
[  871.614811][T15678]  should_failslab+0xc2/0x120
[  871.614833][T15678]  kmem_cache_alloc_noprof+0x92/0x6a0
[  871.614861][T15678]  ? netlink_deliver_tap+0x103/0xb50
[  871.614884][T15678]  ? skb_clone+0x187/0x3f0
[  871.614912][T15678]  skb_clone+0x187/0x3f0
[  871.614936][T15678]  netlink_deliver_tap+0x82f/0xb50
[  871.614966][T15678]  netlink_unicast+0x708/0x950
[  871.615000][T15678]  ? __pfx_netlink_unicast+0x10/0x10
[  871.615032][T15678]  netlink_sendmsg+0x9ac/0x10c0
[  871.615061][T15678]  ? __pfx_netlink_sendmsg+0x10/0x10
[  871.615092][T15678]  ? selinux_socket_sendmsg+0x198/0x2f0
[  871.615123][T15678]  ? ____sys_sendmsg+0xa99/0xc30
[  871.615148][T15678]  ____sys_sendmsg+0xa99/0xc30
[  871.615174][T15678]  ? __pfx_netlink_sendmsg+0x10/0x10
[  871.615201][T15678]  ? __pfx_____sys_sendmsg+0x10/0x10
[  871.615235][T15678]  ? lock_acquire+0x1d1/0x380
[  871.615260][T15678]  ? get_pid_task+0x2a/0x250
[  871.615280][T15678]  ___sys_sendmsg+0x190/0x1e0
[  871.615300][T15678]  ? __pfx____sys_sendmsg+0x10/0x10
[  871.615318][T15678]  ? get_pid_task+0x106/0x250
[  871.615347][T15678]  ? find_held_lock+0x2b/0x80
[  871.615384][T15678]  __sys_sendmsg+0x160/0x210
[  871.615411][T15678]  ? __pfx___sys_sendmsg+0x10/0x10
[  871.615449][T15678]  do_syscall_64+0x123/0x7b0
[  871.615475][T15678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  871.615493][T15678] RIP: 0033:0x7f22cbda8f19
[  871.615508][T15678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  871.615525][T15678] RSP: 002b:00007f22ccbfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  871.615543][T15678] RAX: ffffffffffffffda RBX: 00007f22cc025fa0 RCX: 00007f22cbda8f19
[  871.615555][T15678] RDX: 0000000004040080 RSI: 0000200000000200 RDI: 0000000000000003
[  871.615566][T15678] RBP: 00007f22ccbfa090 R08: 0000000000000000 R09: 0000000000000000
[  871.615577][T15678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  871.615588][T15678] R13: 00007f22cc026038 R14: 00007f22cc025fa0 R15: 00007ffd02b64258
[  871.615615][T15678]  </TASK>
[  871.663607][   T25] usb 10-1: new full-speed USB device number 36 using dummy_hcd
[  871.837429][   T25] usb 10-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  871.849916][   T25] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  871.849943][   T25] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  871.849965][   T25] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64
[  871.849985][   T25] usb 10-1: config 0 interface 0 has no altsetting 0
[  871.862284][   T25] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  871.862304][   T25] usb 10-1: Product: syz
[  871.862318][   T25] usb 10-1: Manufacturer: syz
[  871.862331][   T25] usb 10-1: SerialNumber: syz
[  871.882305][   T25] usb 10-1: config 0 descriptor??
[  871.884569][T15673] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  871.992508][   T25] usb 10-1: selecting invalid altsetting 0
[  873.094137][ T8795] usb 10-1: USB disconnect, device number 36
[  873.225165][T15689] udevd[15689]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  873.259050][T15690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=15690 comm=syz.4.1682
[  873.259143][T15690] FAULT_INJECTION: forcing a failure.
[  873.259143][T15690] name failslab, interval 1, probability 0, space 0, times 0
[  873.259165][T15690] CPU: 1 UID: 0 PID: 15690 Comm: syz.4.1682 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  873.259188][T15690] Tainted: [L]=SOFTLOCKUP
[  873.259195][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  873.259206][T15690] Call Trace:
[  873.259213][T15690]  <TASK>
[  873.259220][T15690]  dump_stack_lvl+0x100/0x190
[  873.259252][T15690]  should_fail_ex.cold+0x5/0xa
[  873.259283][T15690]  should_failslab+0xc2/0x120
[  873.259305][T15690]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  873.259323][T15690]  ? __alloc_skb+0x5b7/0x710
[  873.259344][T15690]  ? __alloc_skb+0x140/0x710
[  873.259367][T15690]  __alloc_skb+0x140/0x710
[  873.259386][T15690]  ? __alloc_skb+0x5b7/0x710
[  873.259406][T15690]  ? __pfx___alloc_skb+0x10/0x10
[  873.259433][T15690]  netlink_ack+0x117/0xba0
[  873.259471][T15690]  netlink_rcv_skb+0x333/0x420
[  873.259495][T15690]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  873.259522][T15690]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  873.259553][T15690]  ? netlink_deliver_tap+0x1ae/0xb50
[  873.259581][T15690]  netlink_unicast+0x668/0x950
[  873.259610][T15690]  ? __pfx_netlink_unicast+0x10/0x10
[  873.259640][T15690]  netlink_sendmsg+0x9ac/0x10c0
[  873.259669][T15690]  ? __pfx_netlink_sendmsg+0x10/0x10
[  873.259699][T15690]  ? selinux_socket_sendmsg+0x198/0x2f0
[  873.259728][T15690]  ? ____sys_sendmsg+0xa99/0xc30
[  873.259752][T15690]  ____sys_sendmsg+0xa99/0xc30
[  873.259776][T15690]  ? __pfx_netlink_sendmsg+0x10/0x10
[  873.259800][T15690]  ? __pfx_____sys_sendmsg+0x10/0x10
[  873.259832][T15690]  ? lock_acquire+0x1d1/0x380
[  873.259854][T15690]  ? get_pid_task+0x2a/0x250
[  873.259873][T15690]  ___sys_sendmsg+0x190/0x1e0
[  873.259892][T15690]  ? __pfx____sys_sendmsg+0x10/0x10
[  873.259909][T15690]  ? get_pid_task+0x106/0x250
[  873.259937][T15690]  ? find_held_lock+0x2b/0x80
[  873.259971][T15690]  __sys_sendmsg+0x160/0x210
[  873.259993][T15690]  ? __pfx___sys_sendmsg+0x10/0x10
[  873.260030][T15690]  do_syscall_64+0x123/0x7b0
[  873.260055][T15690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.260073][T15690] RIP: 0033:0x7f07bd3a8f19
[  873.260088][T15690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  873.260104][T15690] RSP: 002b:00007f07be2d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  873.260122][T15690] RAX: ffffffffffffffda RBX: 00007f07bd625fa0 RCX: 00007f07bd3a8f19
[  873.260134][T15690] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  873.260145][T15690] RBP: 00007f07be2d4090 R08: 0000000000000000 R09: 0000000000000000
[  873.260155][T15690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  873.260165][T15690] R13: 00007f07bd626038 R14: 00007f07bd625fa0 R15: 00007ffea9acf378
[  873.260191][T15690]  </TASK>
[  873.762311][T14549] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  873.802658][T15698] netlink: 'syz.5.1680': attribute type 10 has an invalid length.
[  874.398520][T14555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  874.398550][T14555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  875.189022][   T31] kauditd_printk_skb: 25 callbacks suppressed
[  875.189040][   T31] audit: type=1400 audit(1794317379.752:5613): avc:  denied  { create } for  pid=15710 comm="syz.9.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  875.190948][   T31] audit: type=1400 audit(1794317379.752:5614): avc:  denied  { setopt } for  pid=15710 comm="syz.9.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  875.218416][   T31] audit: type=1400 audit(1794317379.761:5615): avc:  denied  { ioctl } for  pid=15710 comm="syz.9.1685" path="socket:[59217]" dev="sockfs" ino=59217 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  875.218445][   T31] audit: type=1400 audit(1794317379.761:5616): avc:  denied  { bind } for  pid=15710 comm="syz.9.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  875.242001][   T31] audit: type=1400 audit(1794317379.789:5617): avc:  denied  { write } for  pid=15707 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  876.000569][T14553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  876.000611][T14553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  876.061437][T15709] netlink: 'syz.3.1684': attribute type 10 has an invalid length.
[  876.116094][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9
[  876.189144][   T31] audit: type=1400 audit(1794317380.696:5618): avc:  denied  { read write } for  pid=15717 comm="syz.4.1686" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  876.214642][   T31] audit: type=1400 audit(1794317380.715:5619): avc:  denied  { open } for  pid=15717 comm="syz.4.1686" path="/dev/input/event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  876.240272][   T31] audit: type=1400 audit(1794317380.743:5620): avc:  denied  { ioctl } for  pid=15717 comm="syz.4.1686" path="/dev/input/event0" dev="devtmpfs" ino=917 ioctlcmd=0x40044591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  876.293658][T15727] FAULT_INJECTION: forcing a failure.
[  876.293658][T15727] name failslab, interval 1, probability 0, space 0, times 0
[  876.293683][T15727] CPU: 1 UID: 0 PID: 15727 Comm: syz.9.1690 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  876.293708][T15727] Tainted: [L]=SOFTLOCKUP
[  876.293715][T15727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  876.293729][T15727] Call Trace:
[  876.293736][T15727]  <TASK>
[  876.293744][T15727]  dump_stack_lvl+0x100/0x190
[  876.293779][T15727]  should_fail_ex.cold+0x5/0xa
[  876.293808][T15727]  should_failslab+0xc2/0x120
[  876.293832][T15727]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  876.293851][T15727]  ? find_held_lock+0x2b/0x80
[  876.293871][T15727]  ? alloc_io_context+0x21/0x2f0
[  876.293896][T15727]  alloc_io_context+0x21/0x2f0
[  876.293914][T15727]  set_task_ioprio+0x499/0x670
[  876.293937][T15727]  __do_sys_ioprio_set+0x968/0xb30
[  876.293970][T15727]  do_syscall_64+0x123/0x7b0
[  876.293995][T15727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.294014][T15727] RIP: 0033:0x7f8ed6fa8f19
[  876.294030][T15727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  876.294048][T15727] RSP: 002b:00007f8ed7e99028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb
[  876.294066][T15727] RAX: ffffffffffffffda RBX: 00007f8ed7225fa0 RCX: 00007f8ed6fa8f19
[  876.294078][T15727] RDX: 0000000000004000 RSI: 000000000000029d RDI: 0000000000000002
[  876.294089][T15727] RBP: 00007f8ed7e99090 R08: 0000000000000000 R09: 0000000000000000
[  876.294101][T15727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  876.294112][T15727] R13: 00007f8ed7226038 R14: 00007f8ed7225fa0 R15: 00007fff53e91518
[  876.294138][T15727]  </TASK>
[  876.375766][T15724] netlink: 'syz.4.1686': attribute type 15 has an invalid length.
[  876.375782][T15724] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1686'.
[  876.385341][   T31] audit: type=1400 audit(1794317380.874:5621): avc:  denied  { write } for  pid=15717 comm="syz.4.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  876.395486][T15724] Invalid source name
[  876.395941][   T31] audit: type=1400 audit(1794317380.884:5622): avc:  denied  { mounton } for  pid=15717 comm="syz.4.1686" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  877.213099][T15748] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  878.611387][ T9417] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  878.772606][ T9417] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40
[  878.773895][ T9417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  878.773936][ T9417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.980386][ T9417] usb 2-1: config 0 descriptor??
[  879.263019][ T9417] usbhid 2-1:0.0: can't add hid device: -71
[  879.263085][ T9417] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  879.293544][ T9417] usb 2-1: USB disconnect, device number 24
[  879.406930][T15776] FAULT_INJECTION: forcing a failure.
[  879.406930][T15776] name failslab, interval 1, probability 0, space 0, times 0
[  879.406951][T15776] CPU: 1 UID: 0 PID: 15776 Comm: syz.9.1701 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  879.406968][T15776] Tainted: [L]=SOFTLOCKUP
[  879.406971][T15776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  879.406978][T15776] Call Trace:
[  879.406982][T15776]  <TASK>
[  879.406987][T15776]  dump_stack_lvl+0x100/0x190
[  879.407008][T15776]  should_fail_ex.cold+0x5/0xa
[  879.407025][T15776]  should_failslab+0xc2/0x120
[  879.407039][T15776]  __kmalloc_noprof+0xfc/0x840
[  879.407049][T15776]  ? rcu_is_watching+0x13/0xc0
[  879.407062][T15776]  ? tomoyo_realpath_from_path+0xb6/0x690
[  879.407078][T15776]  tomoyo_realpath_from_path+0xb6/0x690
[  879.407093][T15776]  tomoyo_mount_acl+0x1b6/0x8b0
[  879.407103][T15776]  ? is_bpf_text_address+0x8a/0x1a0
[  879.407117][T15776]  ? is_bpf_text_address+0x8a/0x1a0
[  879.407131][T15776]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  879.407148][T15776]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  879.407158][T15776]  ? kernel_text_address+0x8d/0x100
[  879.407171][T15776]  ? unwind_get_return_address+0x59/0xa0
[  879.407184][T15776]  ? arch_stack_walk+0xa6/0xf0
[  879.407202][T15776]  ? __lock_acquire+0x5c0/0x1f40
[  879.407223][T15776]  ? tomoyo_mount_permission+0x1f6/0x460
[  879.407236][T15776]  ? tomoyo_domain+0xb2/0x150
[  879.407249][T15776]  ? tomoyo_profile+0x47/0x60
[  879.407263][T15776]  tomoyo_mount_permission+0x214/0x460
[  879.407274][T15776]  ? tomoyo_mount_permission+0x1f6/0x460
[  879.407285][T15776]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  879.407305][T15776]  security_sb_mount+0xdd/0x270
[  879.407322][T15776]  path_mount+0x158/0x2850
[  879.407340][T15776]  ? __pfx_path_mount+0x10/0x10
[  879.407356][T15776]  ? lockdep_hardirqs_on+0x7d/0x110
[  879.407370][T15776]  ? putname+0xb1/0x110
[  879.407383][T15776]  ? kmem_cache_free+0x127/0x6c0
[  879.407403][T15776]  ? __x64_sys_mount+0x293/0x310
[  879.407425][T15776]  __x64_sys_mount+0x293/0x310
[  879.407441][T15776]  ? __pfx___x64_sys_mount+0x10/0x10
[  879.407461][T15776]  do_syscall_64+0x123/0x7b0
[  879.407476][T15776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  879.407488][T15776] RIP: 0033:0x7f8ed6fa8f19
[  879.407498][T15776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  879.407508][T15776] RSP: 002b:00007f8ed7e99028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  879.407518][T15776] RAX: ffffffffffffffda RBX: 00007f8ed7225fa0 RCX: 00007f8ed6fa8f19
[  879.407525][T15776] RDX: 00002000000001c0 RSI: 0000200000000140 RDI: 00002000000000c0
[  879.407532][T15776] RBP: 00007f8ed7e99090 R08: 0000000000000000 R09: 0000000000000000
[  879.407538][T15776] R10: 0000000000008410 R11: 0000000000000246 R12: 0000000000000001
[  879.407544][T15776] R13: 00007f8ed7226038 R14: 00007f8ed7225fa0 R15: 00007fff53e91518
[  879.407559][T15776]  </TASK>
[  879.407577][T15776] ERROR: Out of memory at tomoyo_realpath_from_path.
[  880.624871][ T9417] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  880.948025][   T31] kauditd_printk_skb: 18 callbacks suppressed
[  880.948043][   T31] audit: type=1400 audit(1794317385.140:5641): avc:  denied  { write } for  pid=15782 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  881.115335][   T31] audit: type=1400 audit(1794317385.299:5642): avc:  denied  { append } for  pid=15786 comm="syz.3.1703" name="loop0" dev="devtmpfs" ino=3288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  881.352994][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1704'.
[  881.393726][   T31] audit: type=1400 audit(1794317385.514:5643): avc:  denied  { ioctl } for  pid=15785 comm="syz.5.1704" path="socket:[59716]" dev="sockfs" ino=59716 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  881.394011][   T31] audit: type=1400 audit(1794317385.542:5644): avc:  denied  { search } for  pid=15785 comm="syz.5.1704" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  881.394185][   T31] audit: type=1400 audit(1794317385.542:5645): avc:  denied  { read } for  pid=15785 comm="syz.5.1704" name="trace" dev="tracefs" ino=1390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  881.394405][   T31] audit: type=1400 audit(1794317385.542:5646): avc:  denied  { open } for  pid=15785 comm="syz.5.1704" path="/87/trace/trace" dev="tracefs" ino=1390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  881.766017][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10
[  881.878018][   T31] audit: type=1400 audit(1794317386.010:5647): avc:  denied  { create } for  pid=15794 comm="syz.1.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  881.913945][   T31] audit: type=1400 audit(1794317386.048:5648): avc:  denied  { connect } for  pid=15794 comm="syz.1.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  881.986225][   T31] audit: type=1400 audit(1794317386.113:5649): avc:  denied  { write } for  pid=15794 comm="syz.1.1706" path="socket:[59722]" dev="sockfs" ino=59722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  881.986359][   T31] audit: type=1400 audit(1794317386.113:5650): avc:  denied  { write } for  pid=15794 comm="syz.1.1706" laddr=172.20.20.170 lport=55949 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  882.485130][T15808] 9p: Bad value for 'debug'
[  882.578096][ T9417] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  882.953587][ T9417] usb 2-1: New USB device found: idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  882.960931][ T9417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.960954][ T9417] usb 2-1: Product: syz
[  882.960968][ T9417] usb 2-1: Manufacturer: syz
[  882.961012][ T9417] usb 2-1: SerialNumber: syz
[  882.963779][ T9417] usb 2-1: config 0 descriptor??
[  882.976015][ T9417] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 026
[  882.994174][ T8795] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[  883.154903][ T8795] usb 10-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00
[  883.165860][ T8795] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  883.165889][ T8795] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  883.165917][ T8795] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  883.165964][ T8795] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  883.178634][ T8795] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.178654][ T8795] usb 10-1: Product: syz
[  883.178667][ T8795] usb 10-1: Manufacturer: syz
[  883.178703][ T8795] usb 10-1: SerialNumber: syz
[  883.189233][T15804] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  883.189348][T15804] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  883.237649][ T8795] ims_pcu 10-1:1.1: Failed to allocate memory for read buffer
[  883.262868][ T8795] ims_pcu 10-1:1.1: probe with driver ims_pcu failed with error -12
[  883.480230][ T9417]  (null): failure reading functionality
[  883.582362][ T8795] usb 10-1: USB disconnect, device number 37
[  883.644280][ T9417] i2c i2c-1: connected i2c-tiny-usb device
[  883.817866][ T5747] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  883.978179][ T5747] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  883.980538][ T5747] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  883.980565][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  883.980586][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  883.980600][ T5747] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  883.980619][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.998069][ T5747] usb 4-1: config 0 descriptor??
[  884.010814][T15827] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  884.130726][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11
[  884.172130][ T8795] usb 2-1: USB disconnect, device number 26
[  884.276932][T15827] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  884.285627][T15827] ip_tables: iptables: counters copy to user failed while replacing table
[  884.581488][ T5747] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  884.581525][ T5747] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  884.581546][ T5747] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  884.581567][ T5747] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  884.581587][ T5747] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  884.581606][ T5747] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  884.581624][ T5747] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  884.581643][ T5747] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  884.581663][ T5747] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  884.581682][ T5747] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  884.759987][ T5747] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  884.821292][T15827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  884.821531][T15827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  885.010957][ T5747] usb 4-1: USB disconnect, device number 22
[  885.112447][T15846] fido_id[15846]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  885.384646][T15856] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  885.384665][T15856] UDF-fs: Scanning with blocksize 512 failed
[  885.385053][T15856] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  885.385067][T15856] UDF-fs: Scanning with blocksize 1024 failed
[  885.385283][T15856] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  885.385297][T15856] UDF-fs: Scanning with blocksize 2048 failed
[  885.385470][T15856] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  885.385483][T15856] UDF-fs: Scanning with blocksize 4096 failed
[  886.647403][   T31] kauditd_printk_skb: 55 callbacks suppressed
[  886.647421][   T31] audit: type=1800 audit(1794317390.473:5706): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=396842 res=0 errno=-22
[  886.659363][   T31] audit: type=1800 audit(1794317390.482:5707): pid=15570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=396846 res=0 errno=-22
[  886.664603][   T31] audit: type=1800 audit(1794317390.482:5708): pid=15570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=396850 res=0 errno=-22
[  886.670005][   T31] audit: type=1800 audit(1794317390.482:5709): pid=15570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=396849 res=0 errno=-22
[  886.671458][   T31] audit: type=1800 audit(1794317390.482:5710): pid=15570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=396852 res=0 errno=-22
[  886.938808][T15865] sysfs: Unknown parameter 'trans'
[  886.940329][   T31] audit: type=1400 audit(1794317390.753:5711): avc:  denied  { remount } for  pid=15861 comm="syz.9.1718" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  886.945665][   T31] audit: type=1400 audit(1794317390.753:5712): avc:  denied  { write } for  pid=15862 comm="syz.3.1719" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  887.069627][T15866] netlink: 'syz.3.1719': attribute type 1 has an invalid length.
[  887.537112][   T31] audit: type=1800 audit(1794317391.277:5713): pid=15868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.1718" name="arp_ip_target" dev="sysfs" ino=278257 res=0 errno=-22
[  888.330988][   T31] audit: type=1400 audit(1794317392.054:5714): avc:  denied  { mount } for  pid=15863 comm="syz.1.1720" name="/" dev="gadgetfs" ino=7719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  888.331891][   T31] audit: type=1400 audit(1794317392.054:5715): avc:  denied  { write } for  pid=15832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  888.517706][T15883] netlink: 'syz.3.1719': attribute type 10 has an invalid length.
[  888.517726][T15883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1719'.
[  888.580823][T15876] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  888.597050][T15886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1720'.
[  888.731297][T15866] 8021q: adding VLAN 0 to HW filter on device bond1
[  888.993153][T15873] bond1: (slave veth3): Enslaving as an active interface with a down link
[  889.157607][T15877] bond1: (slave dummy0): making interface the new active one
[  889.242737][T15901] Invalid ELF header magic: != ELF
[  889.654342][T15877] dummy0: entered promiscuous mode
[  889.677482][T15877] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  889.738990][T15883] bond1: (slave dummy0): Releasing active interface
[  891.105870][T15916] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  891.105991][T15916] block device autoloading is deprecated and will be removed.
[  892.249406][T15926] netlink: 'syz.1.1728': attribute type 10 has an invalid length.
[  892.758174][ T6036] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  892.778310][T15926] bridge0: port 2(bridge_slave_1) entered disabled state
[  892.778774][T15926] bridge0: port 1(bridge_slave_0) entered disabled state
[  892.803625][T15926] bridge0: port 2(bridge_slave_1) entered blocking state
[  892.803721][T15926] bridge0: port 2(bridge_slave_1) entered forwarding state
[  892.803966][T15926] bridge0: port 1(bridge_slave_0) entered blocking state
[  892.804160][T15926] bridge0: port 1(bridge_slave_0) entered forwarding state
[  892.848139][T15926] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  893.600712][   T31] kauditd_printk_skb: 19 callbacks suppressed
[  893.600729][   T31] audit: type=1400 audit(1794317396.984:5735): avc:  denied  { write } for  pid=15909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  893.649557][   T31] audit: type=1800 audit(1794317397.021:5736): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=21366 res=0 errno=-22
[  893.686299][   T31] audit: type=1800 audit(1794317397.049:5737): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=21395 res=0 errno=-22
[  893.996417][T15949] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  893.996437][T15949] UDF-fs: Scanning with blocksize 512 failed
[  893.996810][T15949] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  893.996825][T15949] UDF-fs: Scanning with blocksize 1024 failed
[  893.997645][T15949] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  893.997662][T15949] UDF-fs: Scanning with blocksize 2048 failed
[  893.997863][T15949] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  893.997877][T15949] UDF-fs: Scanning with blocksize 4096 failed
[  895.528571][   T31] audit: type=1400 audit(1794317398.780:5738): avc:  denied  { write } for  pid=15952 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  895.689439][T15957] gadgetfs: bound to dummy_udc driver
[  896.228454][ T8795] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  896.228921][    C1] gadgetfs: connected
[  896.229405][ T8795] gadgetfs: disconnected
[  896.443609][T15953] gadgetfs: suspended from state 2
[  896.680575][ T8795] usb 2-1: device not accepting address 27, error -71
[  898.131122][   T31] audit: type=1400 audit(1794317401.222:5739): avc:  denied  { mount } for  pid=15968 comm="syz.9.1735" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  898.414160][   T31] audit: type=1400 audit(1794317401.484:5740): avc:  denied  { unmount } for  pid=10555 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  898.439185][   T31] audit: type=1400 audit(1794317401.512:5741): avc:  denied  { connect } for  pid=15975 comm="syz.1.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  898.726707][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'.
[  899.032155][T15987] netlink: 'syz.4.1740': attribute type 10 has an invalid length.
[  900.579469][   T31] audit: type=1800 audit(1794317403.514:5742): pid=15993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1741" name="new_array" dev="sysfs" ino=61919 res=0 errno=-13
[  900.626117][T15993] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  900.744194][   T31] audit: type=1800 audit(1794317403.663:5743): pid=15993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1741" name="level" dev="sysfs" ino=413284 res=0 errno=-22
[  900.763955][   T31] audit: type=1800 audit(1794317403.663:5744): pid=15993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1741" name="raid_disks" dev="sysfs" ino=413288 res=0 errno=-22
[  900.834491][   T31] audit: type=1400 audit(1794317403.757:5745): avc:  denied  { write } for  pid=15972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  900.864202][   T31] audit: type=1800 audit(1794317403.757:5746): pid=15997 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1741" name="component_size" dev="sysfs" ino=413291 res=0 errno=-22
[  900.913818][   T31] audit: type=1800 audit(1794317403.823:5747): pid=15993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1741" name="new_dev" dev="sysfs" ino=413294 res=0 errno=-13
[  901.591070][T16010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1744'.
[  901.764484][   T31] audit: type=1400 audit(1794317404.515:5748): avc:  denied  { append } for  pid=16007 comm="syz.4.1744" name="uprobe_events" dev="tracefs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  902.253913][   T31] audit: type=1400 audit(1794317405.076:5749): avc:  denied  { write } for  pid=16006 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  902.395095][   T31] audit: type=1800 audit(1794317405.216:5750): pid=16013 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.1745" name="new_array" dev="sysfs" ino=61919 res=0 errno=-13
[  902.438585][   T31] audit: type=1800 audit(1794317405.245:5751): pid=16013 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.1745" name="level" dev="sysfs" ino=392275 res=0 errno=-22
[  902.563293][T16017] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  902.770169][T16017] md: could not open device unknown-block(1,2).
[  902.903819][T16015] 
[  902.906153][T16015] ======================================================
[  902.913140][T16015] WARNING: possible circular locking dependency detected
[  902.920139][T16015] syzkaller #0 Tainted: G             L     
[  902.926083][T16015] ------------------------------------------------------
[  902.933066][T16015] syz.9.1745/16015 is trying to acquire lock:
[  902.939096][T16015] ffffffff90be6120 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0
[  902.948106][T16015] 
[  902.948106][T16015] but task is already holding lock:
[  902.955437][T16015] ffff8880226be358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: new_dev_store+0x2cf/0x8e0
[  902.965058][T16015] 
[  902.965058][T16015] which lock already depends on the new lock.
[  902.965058][T16015] 
[  902.975454][T16015] 
[  902.975454][T16015] the existing dependency chain (in reverse order) is:
[  902.984456][T16015] 
[  902.984456][T16015] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}:
[  902.992704][T16015]        lock_acquire+0x1d1/0x380
[  902.997731][T16015]        __mutex_lock+0x19f/0x1c10
[  903.002839][T16015]        md_alloc+0x3d0/0x10c0
[  903.007575][T16015]        md_alloc_and_put+0x16/0xb0
[  903.012753][T16015]        add_named_array+0x27d/0x3a0
[  903.018007][T16015]        param_attr_store+0x199/0x300
[  903.023353][T16015]        module_attr_store+0x58/0x80
[  903.028608][T16015]        sysfs_kf_write+0xf2/0x150
[  903.033692][T16015]        kernfs_fop_write_iter+0x3e0/0x5f0
[  903.039470][T16015]        vfs_write+0x6af/0x1040
[  903.044291][T16015]        ksys_write+0x12a/0x250
[  903.049108][T16015]        do_syscall_64+0x123/0x7b0
[  903.054191][T16015]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.060577][T16015] 
[  903.060577][T16015] -> #1 (disks_mutex){+.+.}-{4:4}:
[  903.067836][T16015]        lock_acquire+0x1d1/0x380
[  903.072835][T16015]        __mutex_lock+0x19f/0x1c10
[  903.077921][T16015]        md_alloc+0x3e/0x10c0
[  903.082565][T16015]        md_probe+0x73/0xf0
[  903.087048][T16015]        blk_probe_dev+0x149/0x1e0
[  903.092129][T16015]        blk_request_module+0x16/0xc0
[  903.097474][T16015]        blkdev_get_no_open+0x9b/0xf0
[  903.102813][T16015]        blkdev_open+0x141/0x4f0
[  903.107720][T16015]        do_dentry_open+0x674/0x1470
[  903.112975][T16015]        vfs_open_consume+0xcc/0x460
[  903.118232][T16015]        path_openat+0x1547/0x23f0
[  903.123322][T16015]        do_file_open+0x20e/0x430
[  903.128343][T16015]        do_sys_openat2+0x163/0x1d0
[  903.133529][T16015]        __x64_sys_openat+0x12d/0x210
[  903.138882][T16015]        do_syscall_64+0x123/0x7b0
[  903.143966][T16015]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.150348][T16015] 
[  903.150348][T16015] -> #0 (major_names_lock){+.+.}-{4:4}:
[  903.158051][T16015]        check_prev_add+0xeb/0xe60
[  903.163136][T16015]        __lock_acquire+0x1528/0x1f40
[  903.168483][T16015]        lock_acquire+0x1d1/0x380
[  903.173479][T16015]        __mutex_lock+0x19f/0x1c10
[  903.178561][T16015]        blk_probe_dev+0x28/0x1e0
[  903.183569][T16015]        blk_request_module+0x16/0xc0
[  903.188911][T16015]        blkdev_get_no_open+0x9b/0xf0
[  903.194252][T16015]        bdev_file_open_by_dev+0x70/0x210
[  903.199940][T16015]        md_import_device+0x120/0x360
[  903.205282][T16015]        new_dev_store+0x42a/0x8e0
[  903.210368][T16015]        md_attr_store+0x1c5/0x330
[  903.215448][T16015]        sysfs_kf_write+0xf2/0x150
[  903.220531][T16015]        kernfs_fop_write_iter+0x3e0/0x5f0
[  903.226309][T16015]        vfs_write+0x6af/0x1040
[  903.231127][T16015]        ksys_write+0x12a/0x250
[  903.235948][T16015]        do_syscall_64+0x123/0x7b0
[  903.241030][T16015]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.247422][T16015] 
[  903.247422][T16015] other info that might help us debug this:
[  903.247422][T16015] 
[  903.257615][T16015] Chain exists of:
[  903.257615][T16015]   major_names_lock --> disks_mutex --> &mddev->reconfig_mutex
[  903.257615][T16015] 
[  903.270955][T16015]  Possible unsafe locking scenario:
[  903.270955][T16015] 
[  903.278372][T16015]        CPU0                    CPU1
[  903.283704][T16015]        ----                    ----
[  903.289040][T16015]   lock(&mddev->reconfig_mutex);
[  903.294043][T16015]                                lock(disks_mutex);
[  903.300599][T16015]                                lock(&mddev->reconfig_mutex);
[  903.308108][T16015]   lock(major_names_lock);
[  903.312581][T16015] 
[  903.312581][T16015]  *** DEADLOCK ***
[  903.312581][T16015] 
[  903.320689][T16015] locks held by syz.9.1745/16015: 5, on CPU#1:
[  903.326807][T16015]  #0: ffff88802ba662b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  903.335822][T16015]  #1: ffff88807fda2478 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  903.344755][T16015]  #2: ffff88802f35a480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  903.354457][T16015]  #3: ffff888056f0aa58 (kn->active#78){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  903.364424][T16015]  #4: ffff8880226be358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: new_dev_store+0x2cf/0x8e0
[  903.374472][T16015] 
[  903.374472][T16015] stack backtrace:
[  903.380330][T16015] CPU: 1 UID: 0 PID: 16015 Comm: syz.9.1745 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  903.391233][T16015] Tainted: [L]=SOFTLOCKUP
[  903.395526][T16015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  903.405558][T16015] Call Trace:
[  903.408808][T16015]  <TASK>
[  903.411713][T16015]  dump_stack_lvl+0x100/0x190
[  903.416369][T16015]  print_circular_bug.cold+0x178/0x1be
[  903.421803][T16015]  check_noncircular+0x146/0x160
[  903.426717][T16015]  check_prev_add+0xeb/0xe60
[  903.431290][T16015]  ? trace_mm_page_alloc+0x164/0x1c0
[  903.436545][T16015]  __lock_acquire+0x1528/0x1f40
[  903.441371][T16015]  lock_acquire+0x1d1/0x380
[  903.445847][T16015]  ? blk_probe_dev+0x28/0x1e0
[  903.450508][T16015]  ? __pfx___might_resched+0x10/0x10
[  903.455765][T16015]  ? ksys_write+0x12a/0x250
[  903.460238][T16015]  __mutex_lock+0x19f/0x1c10
[  903.464801][T16015]  ? blk_probe_dev+0x28/0x1e0
[  903.469447][T16015]  ? blk_probe_dev+0x28/0x1e0
[  903.474096][T16015]  ? lock_acquire+0x1d1/0x380
[  903.478746][T16015]  ? find_inode_fast+0xa5/0xa30
[  903.483576][T16015]  ? find_held_lock+0x2b/0x80
[  903.488225][T16015]  ? __pfx___mutex_lock+0x10/0x10
[  903.493222][T16015]  ? find_inode_fast+0x1fa/0xa30
[  903.498132][T16015]  ? blk_probe_dev+0x28/0x1e0
[  903.502780][T16015]  blk_probe_dev+0x28/0x1e0
[  903.507264][T16015]  blk_request_module+0x16/0xc0
[  903.512088][T16015]  blkdev_get_no_open+0x9b/0xf0
[  903.516908][T16015]  bdev_file_open_by_dev+0x70/0x210
[  903.522077][T16015]  md_import_device+0x120/0x360
[  903.526901][T16015]  new_dev_store+0x42a/0x8e0
[  903.531460][T16015]  ? do_raw_spin_lock+0x128/0x260
[  903.536452][T16015]  ? __pfx_new_dev_store+0x10/0x10
[  903.541531][T16015]  ? md_attr_store+0x195/0x330
[  903.546266][T16015]  ? md_attr_store+0x195/0x330
[  903.551007][T16015]  md_attr_store+0x1c5/0x330
[  903.555580][T16015]  ? __pfx_md_attr_store+0x10/0x10
[  903.560673][T16015]  sysfs_kf_write+0xf2/0x150
[  903.565247][T16015]  kernfs_fop_write_iter+0x3e0/0x5f0
[  903.570502][T16015]  ? __pfx_sysfs_kf_write+0x10/0x10
[  903.575672][T16015]  vfs_write+0x6af/0x1040
[  903.579971][T16015]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  903.585747][T16015]  ? __pfx_vfs_write+0x10/0x10
[  903.590479][T16015]  ? find_held_lock+0x2b/0x80
[  903.595128][T16015]  ksys_write+0x12a/0x250
[  903.599428][T16015]  ? __pfx_ksys_write+0x10/0x10
[  903.604250][T16015]  do_syscall_64+0x123/0x7b0
[  903.608813][T16015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.614676][T16015] RIP: 0033:0x7f8ed6fa8f19
[  903.619061][T16015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  903.638636][T16015] RSP: 002b:00007f8ed7e78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  903.647016][T16015] RAX: ffffffffffffffda RBX: 00007f8ed7226090 RCX: 00007f8ed6fa8f19
[  903.654956][T16015] RDX: 0000000000000016 RSI: 0000200000000440 RDI: 0000000000000007
[  903.662905][T16015] RBP: 00007f8ed7037f6d R08: 0000000000000000 R09: 0000000000000000
[  903.670856][T16015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  903.678798][T16015] R13: 00007f8ed7226128 R14: 00007f8ed7226090 R15: 00007fff53e91518
[  903.686743][T16015]  </TASK>
[  903.864119][T16015] block device autoloading is deprecated and will be removed.
[  903.966347][T16018] md: could not open device unknown-block(1,19).
[  904.146181][T16031] netlink: 'syz.3.1748': attribute type 10 has an invalid length.
[  906.427919][T15466] syz.5.1629 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  906.427950][T15466] CPU: 0 UID: 0 PID: 15466 Comm: syz.5.1629 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  906.427976][T15466] Tainted: [L]=SOFTLOCKUP
[  906.427982][T15466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  906.427991][T15466] Call Trace:
[  906.427996][T15466]  <TASK>
[  906.428003][T15466]  dump_stack_lvl+0x100/0x190
[  906.428034][T15466]  dump_header+0xfb/0x606
[  906.428054][T15466]  oom_kill_process.cold+0xd/0x380
[  906.428075][T15466]  out_of_memory+0x343/0x14c0
[  906.428103][T15466]  ? __pfx_out_of_memory+0x10/0x10
[  906.428128][T15466]  ? rcu_is_watching+0x13/0xc0
[  906.428148][T15466]  mem_cgroup_out_of_memory+0xc6/0x130
[  906.428166][T15466]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  906.428185][T15466]  ? do_raw_spin_unlock+0x145/0x1e0
[  906.428203][T15466]  ? _raw_spin_unlock+0x28/0x50
[  906.428222][T15466]  try_charge_memcg+0x779/0xf30
[  906.428248][T15466]  ? __pfx_try_charge_memcg+0x10/0x10
[  906.428271][T15466]  ? rcu_read_unlock+0x17/0x60
[  906.428292][T15466]  ? rcu_is_watching+0x11/0xc0
[  906.428310][T15466]  ? lock_release+0x24d/0x310
[  906.428332][T15466]  ? rcu_read_unlock+0x17/0x60
[  906.428354][T15466]  ? rcu_is_watching+0x13/0xc0
[  906.428376][T15466]  ? rcu_read_unlock+0x17/0x60
[  906.428402][T15466]  ? lock_release+0x24d/0x310
[  906.428429][T15466]  charge_memcg+0x1ae/0x210
[  906.428454][T15466]  __mem_cgroup_charge+0x2b/0x1c0
[  906.428482][T15466]  shmem_alloc_and_add_folio+0x451/0xd40
[  906.428508][T15466]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  906.428532][T15466]  ? shmem_allowable_huge_orders+0x1d7/0x470
[  906.428553][T15466]  shmem_get_folio_gfp+0x758/0x1af0
[  906.428574][T15466]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  906.428593][T15466]  ? filemap_map_pages+0x1155/0x1f10
[  906.428619][T15466]  shmem_fault+0x1fb/0xa30
[  906.428637][T15466]  ? __pfx_shmem_fault+0x10/0x10
[  906.428659][T15466]  ? __pfx_filemap_map_pages+0x10/0x10
[  906.428693][T15466]  ? __pfx_filemap_map_pages+0x10/0x10
[  906.428717][T15466]  __do_fault+0x10b/0x440
[  906.428738][T15466]  do_fault+0xb3f/0x1890
[  906.428755][T15466]  ? __pfx_do_fault+0x10/0x10
[  906.428771][T15466]  ? rcu_read_unlock+0x2d/0xb0
[  906.428791][T15466]  ? lock_release+0x24d/0x310
[  906.428815][T15466]  __handle_mm_fault+0x1858/0x2f40
[  906.428839][T15466]  ? __pfx___handle_mm_fault+0x10/0x10
[  906.428859][T15466]  ? __pfx_follow_page_pte+0x10/0x10
[  906.428888][T15466]  ? find_vma+0xbf/0x140
[  906.428914][T15466]  handle_mm_fault+0x363/0xa30
[  906.428936][T15466]  __get_user_pages+0x7ca/0x1d50
[  906.428963][T15466]  ? up_write+0x2dc/0x5b0
[  906.428979][T15466]  ? __pfx___get_user_pages+0x10/0x10
[  906.429002][T15466]  ? lock_acquire+0x31e/0x380
[  906.429024][T15466]  ? __kernel_write_iter+0x52a/0x920
[  906.429042][T15466]  get_dump_page+0x27e/0x3d0
[  906.429068][T15466]  ? __pfx_get_dump_page+0x10/0x10
[  906.429093][T15466]  ? dump_user_range+0x7e0/0xe90
[  906.429113][T15466]  ? lock_release+0x24d/0x310
[  906.429135][T15466]  ? kasan_check_range+0x12/0x1e0
[  906.429160][T15466]  dump_user_range+0x19c/0xe90
[  906.429181][T15466]  ? __pfx_dump_user_range+0x10/0x10
[  906.429204][T15466]  ? elf_coredump_extra_notes_write+0xbb/0x450
[  906.429229][T15466]  ? __pfx_elf_coredump_extra_notes_write+0x10/0x10
[  906.429253][T15466]  ? __pfx_writenote+0x10/0x10
[  906.429277][T15466]  elf_core_dump+0x2d8e/0x3d50
[  906.429305][T15466]  ? __pfx_elf_core_dump+0x10/0x10
[  906.429323][T15466]  ? kasan_save_stack+0x3f/0x50
[  906.429340][T15466]  ? kasan_save_stack+0x30/0x50
[  906.429357][T15466]  ? kasan_save_track+0x14/0x30
[  906.429375][T15466]  ? __kasan_kmalloc+0xaa/0xb0
[  906.429393][T15466]  ? coredump_write+0x37b/0x1c20
[  906.429412][T15466]  ? do_coredump.constprop.0+0x9bb/0x25e0
[  906.429432][T15466]  ? vfs_coredump+0x9b0/0x1180
[  906.429452][T15466]  ? asm_exc_page_fault+0x26/0x30
[  906.429469][T15466]  ? 0xffffffffff600000
[  906.429495][T15466]  ? lock_acquire+0x1d1/0x380
[  906.429518][T15466]  ? do_coredump.constprop.0+0x9bb/0x25e0
[  906.429542][T15466]  ? coredump_write+0xd88/0x1c20
[  906.429561][T15466]  coredump_write+0xd88/0x1c20
[  906.429585][T15466]  ? __pfx_coredump_write+0x10/0x10
[  906.429608][T15466]  ? __pfx_make_vfsuid+0x10/0x10
[  906.429630][T15466]  do_coredump.constprop.0+0x9bb/0x25e0
[  906.429653][T15466]  ? __pfx_do_coredump.constprop.0+0x10/0x10
[  906.429688][T15466]  ? __lock_acquire+0x5c0/0x1f40
[  906.429713][T15466]  ? trace_kmalloc+0xeb/0x110
[  906.429731][T15466]  ? __kasan_kmalloc+0xaa/0xb0
[  906.429748][T15466]  ? __kmalloc_noprof+0x350/0x840
[  906.429765][T15466]  ? lock_acquire+0x1d1/0x380
[  906.429787][T15466]  ? do_raw_spin_lock+0x128/0x260
[  906.429803][T15466]  ? find_held_lock+0x2b/0x80
[  906.429821][T15466]  ? vfs_coredump+0x6f8/0x1180
[  906.429841][T15466]  ? rcu_is_watching+0x13/0xc0
[  906.429862][T15466]  vfs_coredump+0x9b0/0x1180
[  906.429883][T15466]  ? __pfx_vfs_coredump+0x10/0x10
[  906.429913][T15466]  ? rcu_is_watching+0x13/0xc0
[  906.429934][T15466]  get_signal+0x1fba/0x22e0
[  906.429961][T15466]  ? __pfx_get_signal+0x10/0x10
[  906.429981][T15466]  ? __pfx_force_sig_fault+0x10/0x10
[  906.430004][T15466]  arch_do_signal_or_restart+0x91/0x7e0
[  906.430023][T15466]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  906.430046][T15466]  irqentry_exit+0x542/0xab0
[  906.430069][T15466]  asm_exc_page_fault+0x26/0x30
[  906.430085][T15466] RIP: 0033:0x7f22cbda8f19
[  906.430103][T15466] Code: Unable to access opcode bytes at 0x7f22cbda8eef.
[  906.430111][T15466] RSP: 002b:00007f22ccbf9ef8 EFLAGS: 00010246
[  906.430127][T15466] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f22cbda8f19
[  906.430138][T15466] RDX: 00007f22ccbf9f10 RSI: 0000000000000058 RDI: 00007f22ccbf9f10
[  906.430149][T15466] RBP: 00007f22cbe37f6d R08: 0000000000000000 R09: 0000000000000058
[  906.430160][T15466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  906.430170][T15466] R13: 00007f22cc026038 R14: 00007f22cc025fa0 R15: 00007ffd02b64258
[  906.430185][T15466]  </TASK>
[  906.499546][T15466] memory: usage 307200kB, limit 307200kB, failcnt 22533
[  906.499561][T15466] memory+swap: usage 431980kB, limit 9007199254740988kB, failcnt 0
[  906.499571][T15466] kmem: usage 2792kB, limit 9007199254740988kB, failcnt 0
[  906.499580][T15466] Memory cgroup stats for /syz5:
[  906.499695][T15466] cache 311648256
[  906.499703][T15466] rss 65536
[  906.499708][T15466] rss_huge 0
[  906.499713][T15466] shmem 311648256
[  906.499719][T15466] mapped_file 219697152
[  906.499740][T15466] dirty 0
[  906.499745][T15466] writeback 0
[  906.499751][T15466] workingset_refault_anon 0
[  906.499756][T15466] workingset_refault_file 0
[  906.499762][T15466] swap 127774720
[  906.499768][T15466] swapcached 0
[  906.499773][T15466] pgpgin 1131779
[  906.499778][T15466] pgpgout 1055677
[  906.499784][T15466] pgfault 379175
[  906.499789][T15466] pgmajfault 2
[  906.499794][T15466] inactive_anon 41082880
[  906.499800][T15466] active_anon 270630912
[  906.499805][T15466] inactive_file 0
[  906.499811][T15466] active_file 0
[  906.499816][T15466] unevictable 0
[  906.499821][T15466] hierarchical_memory_limit 314572800
[  906.499828][T15466] hierarchical_memsw_limit 9223372036854771712
[  906.499834][T15466] total_cache 311648256
[  906.499839][T15466] total_rss 65536
[  906.499844][T15466] total_rss_huge 0
[  906.499850][T15466] total_shmem 311648256
[  906.499855][T15466] total_mapped_file 219697152
[  906.499868][T15466] total_dirty 0
[  906.499887][T15466] total_writeback 0
[  906.499893][T15466] total_workingset_refault_anon 0
[  906.499899][T15466] total_workingset_refault_file 0
[  906.499905][T15466] total_swap 127774720
[  906.499910][T15466] total_swapcached 0
[  906.499916][T15466] total_pgpgin 1131779
[  906.499921][T15466] total_pgpgout 1055677
[  906.499927][T15466] total_pgfault 379175
[  906.499932][T15466] total_pgmajfault 2
[  906.499938][T15466] total_inactive_anon 41082880
[  906.499944][T15466] total_active_anon 270630912
[  906.499949][T15466] total_inactive_file 0
[  906.499955][T15466] total_active_file 0
[  906.499961][T15466] total_unevictable 0
[  906.499966][T15466] anon_cost 0
[  906.499971][T15466] file_cost 0
[  906.499977][T15466] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1616,pid=15396,uid=0
[  906.500057][T15466] Memory cgroup out of memory: Killed process 15396 (syz.5.1616) total-vm:163704kB, anon-rss:0kB, file-rss:0kB, shmem-rss:115312kB, UID:0 pgtables:252kB oom_score_adj:1000
[  906.578428][T15818] syz.5.1710 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  906.578478][T15818] CPU: 1 UID: 0 PID: 15818 Comm: syz.5.1710 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  906.578500][T15818] Tainted: [L]=SOFTLOCKUP
[  906.578506][T15818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  906.578515][T15818] Call Trace:
[  906.578520][T15818]  <TASK>
[  906.578525][T15818]  dump_stack_lvl+0x100/0x190
[  906.578552][T15818]  dump_header+0xfb/0x606
[  906.578568][T15818]  oom_kill_process.cold+0xd/0x380
[  906.578586][T15818]  out_of_memory+0x343/0x14c0
[  906.578611][T15818]  ? __pfx_out_of_memory+0x10/0x10
[  906.578632][T15818]  ? rcu_is_watching+0x13/0xc0
[  906.578650][T15818]  mem_cgroup_out_of_memory+0xc6/0x130
[  906.578666][T15818]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  906.578683][T15818]  ? do_raw_spin_unlock+0x145/0x1e0
[  906.578699][T15818]  ? _raw_spin_unlock+0x28/0x50
[  906.578715][T15818]  try_charge_memcg+0x779/0xf30
[  906.578736][T15818]  ? __pfx_try_charge_memcg+0x10/0x10
[  906.578755][T15818]  ? rcu_read_unlock+0x17/0x60
[  906.578774][T15818]  ? rcu_is_watching+0x11/0xc0
[  906.578790][T15818]  ? lock_release+0x24d/0x310
[  906.578809][T15818]  ? rcu_read_unlock+0x17/0x60
[  906.578827][T15818]  ? rcu_is_watching+0x13/0xc0
[  906.578843][T15818]  ? rcu_read_unlock+0x17/0x60
[  906.578861][T15818]  ? lock_release+0x24d/0x310
[  906.578881][T15818]  charge_memcg+0x1ae/0x210
[  906.578901][T15818]  __mem_cgroup_charge+0x2b/0x1c0
[  906.578922][T15818]  shmem_alloc_and_add_folio+0x451/0xd40
[  906.578941][T15818]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  906.578957][T15818]  ? shmem_allowable_huge_orders+0x1d7/0x470
[  906.578976][T15818]  shmem_get_folio_gfp+0x758/0x1af0
[  906.578994][T15818]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  906.579011][T15818]  ? filemap_map_pages+0x1155/0x1f10
[  906.579034][T15818]  shmem_fault+0x1fb/0xa30
[  906.579050][T15818]  ? __pfx_shmem_fault+0x10/0x10
[  906.579067][T15818]  ? __pfx_filemap_map_pages+0x10/0x10
[  906.579090][T15818]  ? __pfx_filemap_map_pages+0x10/0x10
[  906.579110][T15818]  __do_fault+0x10b/0x440
[  906.579130][T15818]  do_fault+0xb3f/0x1890
[  906.579145][T15818]  ? __pfx_do_fault+0x10/0x10
[  906.579159][T15818]  ? rcu_read_unlock+0x2d/0xb0
[  906.579175][T15818]  ? lock_release+0x24d/0x310
[  906.579200][T15818]  __handle_mm_fault+0x1858/0x2f40
[  906.579219][T15818]  ? __pfx___handle_mm_fault+0x10/0x10
[  906.579235][T15818]  ? __pfx_follow_page_pte+0x10/0x10
[  906.579260][T15818]  ? find_vma+0xbf/0x140
[  906.579281][T15818]  handle_mm_fault+0x363/0xa30
[  906.579300][T15818]  __get_user_pages+0x7ca/0x1d50
[  906.579322][T15818]  ? up_write+0x2dc/0x5b0
[  906.579335][T15818]  ? __pfx___get_user_pages+0x10/0x10
[  906.579355][T15818]  ? lock_acquire+0x31e/0x380
[  906.579375][T15818]  ? __kernel_write_iter+0x52a/0x920
[  906.579393][T15818]  get_dump_page+0x27e/0x3d0
[  906.579413][T15818]  ? __pfx_get_dump_page+0x10/0x10
[  906.579434][T15818]  ? dump_user_range+0x7e0/0xe90
[  906.579450][T15818]  ? lock_release+0x24d/0x310
[  906.579472][T15818]  dump_user_range+0x19c/0xe90
[  906.579490][T15818]  ? __pfx_dump_user_range+0x10/0x10
[  906.579509][T15818]  ? elf_coredump_extra_notes_write+0xbb/0x450
[  906.579530][T15818]  ? __pfx_elf_coredump_extra_notes_write+0x10/0x10
[  906.579550][T15818]  ? __pfx_writenote+0x10/0x10
[  906.579569][T15818]  elf_core_dump+0x2d8e/0x3d50
[  906.579592][T15818]  ? __pfx_elf_core_dump+0x10/0x10
[  906.579609][T15818]  ? kasan_save_stack+0x3f/0x50
[  906.579624][T15818]  ? kasan_save_stack+0x30/0x50
[  906.579638][T15818]  ? kasan_save_track+0x14/0x30
[  906.579652][T15818]  ? __kasan_kmalloc+0xaa/0xb0
[  906.579666][T15818]  ? coredump_write+0x37b/0x1c20
[  906.579681][T15818]  ? do_coredump.constprop.0+0x9bb/0x25e0
[  906.579698][T15818]  ? vfs_coredump+0x9b0/0x1180
[  906.579714][T15818]  ? asm_exc_page_fault+0x26/0x30
[  906.579730][T15818]  ? 0xffffffffff600000
[  906.579752][T15818]  ? lock_acquire+0x1d1/0x380
[  906.579771][T15818]  ? do_coredump.constprop.0+0x9bb/0x25e0
[  906.579790][T15818]  ? coredump_write+0xd88/0x1c20
[  906.579806][T15818]  coredump_write+0xd88/0x1c20
[  906.579825][T15818]  ? __pfx_coredump_write+0x10/0x10
[  906.579845][T15818]  ? __pfx_make_vfsuid+0x10/0x10
[  906.579864][T15818]  do_coredump.constprop.0+0x9bb/0x25e0
[  906.579883][T15818]  ? __pfx_do_coredump.constprop.0+0x10/0x10
[  906.579908][T15818]  ? __lock_acquire+0x5c0/0x1f40
[  906.579927][T15818]  ? trace_kmalloc+0xeb/0x110
[  906.579943][T15818]  ? __kasan_kmalloc+0xaa/0xb0
[  906.579957][T15818]  ? __kmalloc_noprof+0x350/0x840
[  906.579972][T15818]  ? lock_acquire+0x1d1/0x380
[  906.579991][T15818]  ? do_raw_spin_lock+0x128/0x260
[  906.580004][T15818]  ? find_held_lock+0x2b/0x80
[  906.580020][T15818]  ? vfs_coredump+0x6f8/0x1180
[  906.580036][T15818]  ? rcu_is_watching+0x13/0xc0
[  906.580053][T15818]  vfs_coredump+0x9b0/0x1180
[  906.580071][T15818]  ? __pfx_vfs_coredump+0x10/0x10
[  906.580098][T15818]  ? rcu_is_watching+0x13/0xc0
[  906.580117][T15818]  get_signal+0x1fba/0x22e0
[  906.580138][T15818]  ? __pfx_get_signal+0x10/0x10
[  906.580155][T15818]  ? __pfx_force_sig_fault+0x10/0x10
[  906.580174][T15818]  arch_do_signal_or_restart+0x91/0x7e0
[  906.580195][T15818]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  906.580217][T15818]  irqentry_exit+0x542/0xab0
[  906.580235][T15818]  asm_exc_page_fault+0x26/0x30
[  906.580250][T15818] RIP: 0033:0x7f22cbda8f19
[  906.580265][T15818] Code: Unable to access opcode bytes at 0x7f22cbda8eef.
[  906.580272][T15818] RSP: 002b:00007f22ccbf9ef8 EFLAGS: 00010246
[  906.580285][T15818] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f22cbda8f19
[  906.580295][T15818] RDX: 00007f22ccbf9f10 RSI: 0000000000000058 RDI: 00007f22ccbf9f10
[  906.580305][T15818] RBP: 00007f22cbe37f6d R08: 0000000000000000 R09: 0000000000000058
[  906.580315][T15818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  906.580324][T15818] R13: 00007f22cc026038 R14: 00007f22cc025fa0 R15: 00007ffd02b64258
[  906.580339][T15818]  </TASK>
[  906.601391][T15818] memory: usage 307200kB, limit 307200kB, failcnt 22584
[  906.601406][T15818] memory+swap: usage 431980kB, limit 9007199254740988kB, failcnt 0
[  906.601415][T15818] kmem: usage 2768kB, limit 9007199254740988kB, failcnt 0
[  906.601424][T15818] Memory cgroup stats for /syz5:
[  906.601538][T15818] cache 311648256
[  906.601545][T15818] rss 65536
[  906.601550][T15818] rss_huge 0
[  906.601555][T15818] shmem 311648256
[  906.601561][T15818] mapped_file 211509248
[  906.601566][T15818] dirty 0
[  906.601571][T15818] writeback 0
[  906.601577][T15818] workingset_refault_anon 0
[  906.601582][T15818] workingset_refault_file 0
[  906.601588][T15818] swap 127774720
[  906.601593][T15818] swapcached 0
[  906.601598][T15818] pgpgin 1131779
[  906.601604][T15818] pgpgout 1055677
[  906.601609][T15818] pgfault 379175
[  906.601615][T15818] pgmajfault 2
[  906.601620][T15818] inactive_anon 41082880
[  906.601626][T15818] active_anon 270630912
[  906.601631][T15818] inactive_file 0
[  906.601643][T15818] active_file 0
[  906.601663][T15818] unevictable 0
[  906.601668][T15818] hierarchical_memory_limit 314572800
[  906.601674][T15818] hierarchical_memsw_limit 9223372036854771712
[  906.601681][T15818] total_cache 311648256
[  906.601686][T15818] total_rss 65536
[  906.601691][T15818] total_rss_huge 0
[  906.601696][T15818] total_shmem 311648256
[  906.601702][T15818] total_mapped_file 211509248
[  906.601707][T15818] total_dirty 0
[  906.601713][T15818] total_writeback 0
[  906.601718][T15818] total_workingset_refault_anon 0
[  906.601723][T15818] total_workingset_refault_file 0
[  906.601729][T15818] total_swap 127774720
[  906.601735][T15818] total_swapcached 0
[  906.601740][T15818] total_pgpgin 1131779
[  906.601745][T15818] total_pgpgout 1055677
[  906.601751][T15818] total_pgfault 379175
[  906.601756][T15818] total_pgmajfault 2
[  906.601761][T15818] total_inactive_anon 41082880
[  906.601767][T15818] total_active_anon 270630912
[  906.601773][T15818] total_inactive_file 0
[  906.601778][T15818] total_active_file 0
[  906.601791][T15818] total_unevictable 0
[  906.601810][T15818] anon_cost 0
[  906.601816][T15818] file_cost 0
[  906.601822][T15818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1629,pid=15466,uid=0
[  906.601880][T15818] Memory cgroup out of memory: Killed process 15466 (syz.5.1629) total-vm:163704kB, anon-rss:0kB, file-rss:0kB, shmem-rss:76424kB, UID:0 pgtables:176kB oom_score_adj:1000
[  906.669519][T15818] syz.5.1710 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  906.669546][T15818] CPU: 1 UID: 0 PID: 15818 Comm: syz.5.1710 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  906.669567][T15818] Tainted: [L]=SOFTLOCKUP
[  906.669573][T15818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  906.669582][T15818] Call Trace:
[  906.669587][T15818]  <TASK>
[  906.669593][T15818]  dump_stack_lvl+0x100/0x190
[  906.669619][T15818]  dump_header+0xfb/0x606
[  906.669638][T15818]  oom_kill_process.cold+0xd/0x380
[  906.669656][T15818]  out_of_memory+0x343/0x14c0
[  906.669679][T15818]  ? __pfx_out_of_memory+0x10/0x10
[  906.669701][T15818]  ? rcu_is_watching+0x13/0xc0
[  906.669718][T15818]  mem_cgroup_out_of_memory+0xc6/0x130
[  906.669735][T15818]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  906.669752][T15818]  ? do_raw_spin_unlock+0x145/0x1e0
[  906.669766][T15818]  ? _raw_spin_unlock+0x28/0x50
[  906.669783][T15818]  try_charge_memcg+0x779/0xf30
[  906.669804][T15818]  ? __pfx_try_charge_memcg+0x10/0x10
[  906.669823][T15818]  ? rcu_read_unlock+0x17/0x60
[  906.669842][T15818]  ? rcu_is_watching+0x11/0xc0
[  906.669857][T15818]  ? lock_release+0x24d/0x310
[  906.669876][T15818]  ? rcu_read_unlock+0x17/0x60
[  906.669894][T15818]  ? rcu_is_watching+0x13/0xc0
[  906.669909][T15818]  ? rcu_read_unlock+0x17/0x60
[  906.669928][T15818]  ? lock_release+0x24d/0x310
[  906.669948][T15818]  charge_memcg+0x1ae/0x210
[  906.669967][T15818]  __mem_cgroup_charge+0x2b/0x1c0
[  906.669988][T15818]  shmem_alloc_and_add_folio+0x451/0xd40
[  906.670006][T15818]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  906.670022][T15818]  ? shmem_allowable_huge_orders+0x1d7/0x470
[  906.670040][T15818]  shmem_get_folio_gfp+0x758/0x1af0
[  906.670059][T15818]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  906.670075][T15818]  ? filemap_map_pages+0x1155/0x1f10
[  906.670098][T15818]  shmem_fault+0x1fb/0xa30
[  906.670115][T15818]  ? __pfx_shmem_fault+0x10/0x10
[  906.670131][T15818]  ? __pfx_filemap_map_pages+0x10/0x10
[  906.670155][T15818]  ? __pfx_filemap_map_pages+0x10/0x10
[  906.670176][T15818]  __do_fault+0x10b/0x440
[  906.670202][T15818]  do_fault+0xb3f/0x1890
[  906.670216][T15818]  ? __pfx_do_fault+0x10/0x10
[  906.670231][T15818]  ? rcu_read_unlock+0x2d/0xb0
[  906.670247][T15818]  ? lock_release+0x24d/0x310
[  906.670268][T15818]  __handle_mm_fault+0x1858/0x2f40
[  906.670287][T15818]  ? __pfx___handle_mm_fault+0x10/0x10
[  906.670304][T15818]  ? __pfx_follow_page_pte+0x10/0x10
[  906.670329][T15818]  ? find_vma+0xbf/0x140
[  906.670350][T15818]  handle_mm_fault+0x363/0xa30
[  906.670369][T15818]  __get_user_pages+0x7ca/0x1d50
[  906.670391][T15818]  ? up_write+0x2dc/0x5b0
[  906.670405][T15818]  ? __pfx___get_user_pages+0x10/0x10
[  906.670424][T15818]  ? lock_acquire+0x31e/0x380
[  906.670443][T15818]  ? __kernel_write_iter+0x52a/0x920
[  906.670461][T15818]  get_dump_page+0x27e/0x3d0
[  906.670481][T15818]  ? __pfx_get_dump_page+0x10/0x10
[  906.670502][T15818]  ? dump_user_range+0x7e0/0xe90
[  906.670518][T15818]  ? lock_release+0x24d/0x310
[  906.670539][T15818]  dump_user_range+0x19c/0xe90
[  906.670558][T15818]  ? __pfx_dump_user_range+0x10/0x10
[  906.670577][T15818]  ? elf_coredump_extra_notes_write+0xbb/0x450
[  906.670597][T15818]  ? __pfx_elf_coredump_extra_notes_write+0x10/0x10
[  906.670616][T15818]  ? __pfx_writenote+0x10/0x10
[  906.670636][T15818]  elf_core_dump+0x2d8e/0x3d50
[  906.670659][T15818]  ? __pfx_elf_core_dump+0x10/0x10
[  906.670676][T15818]  ? kasan_save_stack+0x3f/0x50
[  906.670691][T15818]  ? kasan_save_stack+0x30/0x50
[  906.670705][T15818]  ? kasan_save_track+0x14/0x30
[  906.670719][T15818]  ? __kasan_kmalloc+0xaa/0xb0
[  906.670733][T15818]  ? coredump_write+0x37b/0x1c20
[  906.670749][T15818]  ? do_coredump.constprop.0+0x9bb/0x25e0
[  906.670766][T15818]  ? vfs_coredump+0x9b0/0x1180
[  906.670782][T15818]  ? asm_exc_page_fault+0x26/0x30
[  906.670797][T15818]  ? 0xffffffffff600000
[  906.670820][T15818]  ? lock_acquire+0x1d1/0x380
[  906.670838][T15818]  ? do_coredump.constprop.0+0x9bb/0x25e0
[  906.670858][T15818]  ? coredump_write+0xd88/0x1c20
[  906.670874][T15818]  coredump_write+0xd88/0x1c20
[  906.670894][T15818]  ? __pfx_coredump_write+0x10/0x10
[  906.670913][T15818]  ? __pfx_make_vfsuid+0x10/0x10
[  906.670932][T15818]  do_coredump.constprop.0+0x9bb/0x25e0
[  906.670951][T15818]  ? __pfx_do_coredump.constprop.0+0x10/0x10
[  906.670976][T15818]  ? __lock_acquire+0x5c0/0x1f40
[  906.670996][T15818]  ? trace_kmalloc+0xeb/0x110
[  906.671011][T15818]  ? __kasan_kmalloc+0xaa/0xb0
[  906.671026][T15818]  ? __kmalloc_noprof+0x350/0x840
[  906.671041][T15818]  ? lock_acquire+0x1d1/0x380
[  906.671059][T15818]  ? do_raw_spin_lock+0x128/0x260
[  906.671073][T15818]  ? find_held_lock+0x2b/0x80
[  906.671088][T15818]  ? vfs_coredump+0x6f8/0x1180
[  906.671104][T15818]  ? rcu_is_watching+0x13/0xc0
[  906.671121][T15818]  vfs_coredump+0x9b0/0x1180
[  906.671139][T15818]  ? __pfx_vfs_coredump+0x10/0x10
[  906.671165][T15818]  ? rcu_is_watching+0x13/0xc0
[  906.671187][T15818]  get_signal+0x1fba/0x22e0
[  906.671208][T15818]  ? __pfx_get_signal+0x10/0x10
[  906.671224][T15818]  ? __pfx_force_sig_fault+0x10/0x10
[  906.671243][T15818]  arch_do_signal_or_restart+0x91/0x7e0
[  906.671260][T15818]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  906.671281][T15818]  irqentry_exit+0x542/0xab0
[  906.671299][T15818]  asm_exc_page_fault+0x26/0x30
[  906.671313][T15818] RIP: 0033:0x7f22cbda8f19
[  906.671329][T15818] Code: Unable to access opcode bytes at 0x7f22cbda8eef.
[  906.671336][T15818] RSP: 002b:00007f22ccbf9ef8 EFLAGS: 00010246
[  906.671349][T15818] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f22cbda8f19
[  906.671359][T15818] RDX: 00007f22ccbf9f10 RSI: 0000000000000058 RDI: 00007f22ccbf9f10
[  906.671368][T15818] RBP: 00007f22cbe37f6d R08: 0000000000000000 R09: 0000000000000058
[  906.671378][T15818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  906.671387][T15818] R13: 00007f22cc026038 R14: 00007f22cc025fa0 R15: 00007ffd02b64258
[  906.671402][T15818]  </TASK>
[  906.698786][T15818] memory: usage 307200kB, limit 307200kB, failcnt 22618
[  906.698800][T15818] memory+swap: usage 431980kB, limit 9007199254740988kB, failcnt 0
[  906.698810][T15818] kmem: usage 2768kB, limit 9007199254740988kB, failcnt 0
[  906.698819][T15818] Memory cgroup stats for /syz5:
[  906.698931][T15818] cache 311648256
[  906.698939][T15818] rss 65536
[  906.698944][T15818] rss_huge 0
[  906.698949][T15818] shmem 311648256
[  906.698954][T15818] mapped_file 190267392
[  906.698960][T15818] dirty 0
[  906.698965][T15818] writeback 0
[  906.698970][T15818] workingset_refault_anon 0
[  906.698976][T15818] workingset_refault_file 0
[  906.698982][T15818] swap 127774720
[  906.698987][T15818] swapcached 0
[  906.698993][T15818] pgpgin 1131779
[  906.699018][T15818] pgpgout 1055677
[  906.699024][T15818] pgfault 379176
[  906.699029][T15818] pgmajfault 2
[  906.699034][T15818] inactive_anon 41082880
[  906.699040][T15818] active_anon 270630912
[  906.699046][T15818] inactive_file 0
[  906.699051][T15818] active_file 0
[  906.699057][T15818] unevictable 0
[  906.699062][T15818] hierarchical_memory_limit 314572800
[  906.699068][T15818] hierarchical_memsw_limit 9223372036854771712
[  906.699075][T15818] total_cache 311648256
[  906.699080][T15818] total_rss 65536
[  906.699085][T15818] total_rss_huge 0
[  906.699091][T15818] total_shmem 311648256
[  906.699096][T15818] total_mapped_file 190267392
[  906.699102][T15818] total_dirty 0
[  906.699108][T15818] total_writeback 0
[  906.699113][T15818] total_workingset_refault_anon 0
[  906.699119][T15818] total_workingset_refault_file 0
[  906.699125][T15818] total_swap 127774720
[  906.699130][T15818] total_swapcached 0
[  906.699136][T15818] total_pgpgin 1131779
[  906.699162][T15818] total_pgpgout 1055677
[  906.699167][T15818] total_pgfault 379176
[  906.699173][T15818] total_pgmajfault 2
[  906.699183][T15818] total_inactive_anon 41082880
[  906.699189][T15818] total_active_anon 270630912
[  906.699194][T15818] total_inactive_file 0
[  906.699200][T15818] total_active_file 0
[  906.699205][T15818] total_unevictable 0
[  906.699210][T15818] anon_cost 0
[  906.699215][T15818] file_cost 0
[  906.699221][T15818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1710,pid=15818,uid=0
[  906.699276][T15818] Memory cgroup out of memory: Killed process 15818 (syz.5.1710) total-vm:163704kB, anon-rss:4kB, file-rss:0kB, shmem-rss:22812kB, UID:0 pgtables:72kB oom_score_adj:1000
[  907.097082][   T31] kauditd_printk_skb: 19 callbacks suppressed
[  907.097096][   T31] audit: type=1400 audit(1794317409.604:5771): avc:  denied  { write } for  pid=16058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  907.716222][   T31] audit: type=1400 audit(1794317410.184:5772): avc:  denied  { write } for  pid=16069 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  909.034630][   T31] audit: type=1400 audit(1794317411.419:5773): avc:  denied  { write } for  pid=16072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  909.208017][   T31] audit: type=1400 audit(1794317411.587:5774): avc:  denied  { write } for  pid=16083 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  909.701512][T15396] syz.5.1616 (15396) used greatest stack depth: 18856 bytes left
[  909.738012][T15466] syz.5.1629 (15466) used greatest stack depth: 17664 bytes left
[  909.776435][   T31] audit: type=1400 audit(1794317412.111:5775): avc:  denied  { write } for  pid=16086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  909.938759][   T31] audit: type=1400 audit(1794317412.261:5776): avc:  denied  { write } for  pid=16097 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  910.110181][   T31] audit: type=1800 audit(1794317412.420:5777): pid=5280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dhcpc_t op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=417048 res=0 errno=-22
[  910.333007][   T31] audit: type=1400 audit(1794317412.635:5778): avc:  denied  { write } for  pid=16102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  910.408318][   T31] audit: type=1400 audit(1794317412.701:5779): avc:  denied  { write } for  pid=16113 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  910.608865][   T31] audit: type=1400 audit(1794317412.897:5780): avc:  denied  { write } for  pid=16115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  912.511943][   T31] kauditd_printk_skb: 8 callbacks suppressed
[  912.511959][   T31] audit: type=1400 audit(1794317414.675:5789): avc:  denied  { write } for  pid=16180 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  912.825332][T16001] syz.9.1743 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  912.825986][T16001] CPU: 1 UID: 0 PID: 16001 Comm: syz.9.1743 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  912.826010][T16001] Tainted: [L]=SOFTLOCKUP
[  912.826016][T16001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  912.826026][T16001] Call Trace:
[  912.826031][T16001]  <TASK>
[  912.826038][T16001]  dump_stack_lvl+0x100/0x190
[  912.826071][T16001]  dump_header+0xfb/0x606
[  912.826089][T16001]  oom_kill_process.cold+0xd/0x380
[  912.826108][T16001]  out_of_memory+0x343/0x14c0
[  912.826141][T16001]  ? __pfx_out_of_memory+0x10/0x10
[  912.826165][T16001]  ? rcu_is_watching+0x13/0xc0
[  912.826185][T16001]  mem_cgroup_out_of_memory+0xc6/0x130
[  912.826204][T16001]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  912.826223][T16001]  ? do_raw_spin_unlock+0x145/0x1e0
[  912.826241][T16001]  ? _raw_spin_unlock+0x28/0x50
[  912.826260][T16001]  try_charge_memcg+0x779/0xf30