last executing test programs:

4m47.431074912s ago: executing program 2 (id=1875):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000580))
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x5)
fcntl$notify(r2, 0x402, 0x8000003d)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a000000000000020001000020001000000002000000000300"], 0x60}}, 0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x1)
r4 = dup(r3)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000380)=<r6=>0x0, &(0x7f0000000500)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)

4m46.320527379s ago: executing program 1 (id=1876):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4m46.246167251s ago: executing program 3 (id=1877):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
mkdir(0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x3, 0xff)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x400000000000174, 0x4008890)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f)

4m46.073642575s ago: executing program 2 (id=1878):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

4m45.04531303s ago: executing program 1 (id=1879):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101701, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0xd0009412, &(0x7f0000001480)={{r1}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x24, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000280)=[0x0]}, 0x40)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
read$hiddev(r3, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x700, 0x4, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x67, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x4, 0x12, 0x0, 0x7}]}}}}})
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

4m44.730005334s ago: executing program 3 (id=1881):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
mkdir(&(0x7f0000001c00)='./file0\x00', 0x8)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00')
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000010008188040f80f85fcb76f5f586b9483f0000005e0c0000000000000e000a", 0x23}], 0x1}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x26}})
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000380)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000fff305000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000e20800020073797a31000000000900010073717a300000000008000540000000253c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000100003800c000080080003400000000114000000100001000000000000000000de84000a"], 0xc0}}, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0)
r5 = dup(r4)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x5}, {0x1b, 0xffe0}}}, 0x24}}, 0x10)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000140)={0x0, 0x0, 0x9})
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x7})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000480)={0x3, 0x0, 0x98, &(0x7f00000003c0)={0x2, 0x2aa6, 0x3}})
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2)
socket$can_raw(0x1d, 0x3, 0x1)

4m44.696623585s ago: executing program 2 (id=1882):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4m44.506939327s ago: executing program 3 (id=1886):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0)
mkdir(0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x3, 0xff)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x400000000000174, 0x4008890)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f)

4m44.464341694s ago: executing program 4 (id=1887):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
membarrier(0x4, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
pipe(0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1e4}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r6)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x880)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x800000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noxattr}, {@cache_fscache}, {@cachetag={'cachetag', 0x3d, '/dev/ttyS3\x00'}}], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
umount2(&(0x7f0000000540)='.\x00', 0x2)

4m44.387005372s ago: executing program 2 (id=1888):
openat$kvm(0xffffffffffffff9c, 0x0, 0x80003, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
openat$kvm(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440))
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001e80)=ANY=[@ANYBLOB="eb9c91087522e568fa1b58db832cdb0000", @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYBLOB="0500330001000000"], 0x2c}}, 0x80)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
recvmsg$qrtr(r8, 0x0, 0x0, 0x40002002)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

4m44.290027991s ago: executing program 4 (id=1889):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4m43.191661832s ago: executing program 3 (id=1890):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4m43.074590805s ago: executing program 4 (id=1892):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
shutdown(r4, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="019800000000000020001280080001006772650014", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
socket(0x10, 0x3, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)

4m43.039254383s ago: executing program 1 (id=1894):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000"], 0x7c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4m43.008993833s ago: executing program 3 (id=1895):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
membarrier(0x4, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
pipe(0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1e4}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r6)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x880)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
umount2(&(0x7f0000000540)='.\x00', 0x2)

4m42.880096333s ago: executing program 1 (id=1896):
openat$kvm(0xffffffffffffff9c, 0x0, 0x80003, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
openat$kvm(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440))
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001e80)=ANY=[@ANYBLOB="eb9c91087522e568fa1b58db832cdb0000", @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYBLOB="0500330001000000"], 0x2c}}, 0x80)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
recvmsg$qrtr(r8, &(0x7f0000001e40)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f0000000580)=""/224, 0xe0}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f0000000180)=""/138, 0x8a}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f00000008c0)=""/198, 0xc6}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/15, 0xf}], 0xa, &(0x7f0000001a80)=[{0xc0, 0x0, 0x0, ""/171}, {0x30, 0x0, 0x0, ""/30}, {0x68, 0x0, 0x0, ""/87}, {0x88, 0x0, 0x0, ""/118}, {0x20, 0x0, 0x0, ""/15}, {0xc0, 0x0, 0x0, ""/176}, {0xa0, 0x0, 0x0, ""/137}, {0x58, 0x0, 0x0, ""/72}], 0x3b8, 0x100}, 0x38, 0x40002002)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

4m42.813330641s ago: executing program 3 (id=1897):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101701, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0xd0009412, &(0x7f0000001480)={{r1}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x24, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000280)=[0x0]}, 0x40)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
read$hiddev(r3, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x700, 0x4, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x67, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x4, 0x12, 0x0, 0x7}]}}}}})
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

4m42.227837929s ago: executing program 2 (id=1898):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4m42.14567563s ago: executing program 4 (id=1899):
r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040))
r1 = eventfd2(0xff, 0x80001)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r2, 0x2d0634a4)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = userfaultfd(0x801)
r5 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4)
r6 = getpid()
process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]})
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8)
accept4(r2, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0xffffffffffffff60, 0x80800)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r1, 0x1)

4m42.106556756s ago: executing program 1 (id=1900):
socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'dummy0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000008000c00004e07006c001a80540004"], 0x94}}, 0x0)

4m42.046476931s ago: executing program 4 (id=1901):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0)
mkdir(0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x3, 0xff)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x400000000000174, 0x4008890)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f)

4m41.978799391s ago: executing program 2 (id=1902):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4m41.911951928s ago: executing program 1 (id=1903):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0x8}]}, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
mkdir(0x0, 0x184)
r2 = open(&(0x7f00000000c0)='./control\x00', 0x573382, 0x113)
rmdir(&(0x7f0000000280)='./control\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000740)={<r4=>0x0, @initdev, @empty}, &(0x7f0000000780)=0xc)
getpeername$packet(r0, &(0x7f00000007c0)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000800)=0x14)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0xe, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve1\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x1017, 0x4004000, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000440)=ANY=[@ANYBLOB="10020000", @ANYRES16=r1, @ANYBLOB="00042abd7000ffdbdf25010000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000400030058000180140002007465616d5f736c6176655f31000000001400020062617461647630000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006361696630000000000000000000000008000300020000005c2701800800030004000000140002006361696630000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f767469300000000000000000000800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="940002800c00018008000100060000003c00018008000100070000000800010003000000080001000600000008000100030000000800010000000000080001000600000008000100070000000c00018008000100080000003c0001800800010008000000080001000000000008000100000000000800010006000000080001000200000008000100040000000800010007000000040003005800018008000300010000000800030001000000080003000300000008000100", @ANYRES32=r4, @ANYBLOB="080003000200000008000300030000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r5, @ANYBLOB="0800030001000000400001801400020076657468315f766c616e00000000000008000300000000000800030003000000080003000200000008000300020000000800030001000000"], 0x210}, 0x1, 0x0, 0x0, 0x140048c0}, 0x20000000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={<r8=>0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000380)={r8, 0x38, "bf7fa159ea60785a5fcfa8d2d836dbcbaacf8bcee9219a5f2bb4a5f212d2b1d9541653fae56c283d3660069a3a61a1ce38f68f4a4c568f00"}, &(0x7f0000000400)=0x40)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000380))
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0x200, 0x3, {<r10=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x9, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x3, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102386, 0x18ff2)
timer_settime(0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

4m40.688900584s ago: executing program 4 (id=1904):
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x12b, 0x2}}, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r2, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000400)=[{0x34, 0x0, 0x0, 0xfffff038}, {0x80000006, 0x0, 0x0, 0x3}, {0x0, 0xfa, 0xf2, 0x4}, {0xae9, 0xd8, 0x20, 0x8}]}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20044040)
setuid(0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r7, @ANYRES16=r4, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033", @ANYRESDEC=r3, @ANYBLOB], 0xfc}}, 0x0)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c)
r10 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', <r11=>0x0, 0x29, 0x4, 0x0, 0xfffffffd, 0x19, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7800, 0x0, 0x800, 0xbca}})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000480)={@private0, 0x59, r11})
sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0200000000000800000000001000000000000000000000332661ff5fe060b431f1d497f4dfa9a6fa905bdd9e7c75fd8b145dbd17ad8368f00db68c774e3c9f4efba04ac2c5b6bf74392c824203e1b5dd9b0646ef4bd9752d0b60ada313a4514047fb75e7e19a875c16616cf63fc20a1a8bf703f37af8f0d1ee52fe53c698433f7356c6c559eb079726286abc9a5ad2dd4f0c6f78daeca26d675a1a40b5bb7d0c2a987977b03cebe152bc89e3d90baa22b5d20e217515a2afd9f1e853464d3e1e7ca0aa1d3f96c0ce08d600"], 0x10}}, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f00000003c0)={'batadv0\x00', {0x2, 0x4e20, @local}})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
io_uring_setup(0x661e, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')

4m18.849957507s ago: executing program 32 (id=1893):
open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
fcntl$setlease(r1, 0x400, 0x0) (async)
fcntl$setlease(r1, 0x400, 0x0)
mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x8, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
fsopen(&(0x7f00000001c0)='affs\x00', 0x1)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="1201010000f7130870270c936a8d010203010902120001000000000904"], 0x0) (async)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="1201010000f7130870270c936a8d010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="4016060100000042bce74bf6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x6, 0xd0, {0xd0, 0x2, "049559af001183b219b6e04601dc13ba696724dd58d5298d1949c6947fdd6c84c5d06315fcc13afbe7d284e4bb4ca326781fea106587ec525eb5761289479bd5b960ca158598c9781fe3df65d34a71a70d71e68ab34f6dfbeb62c1dc5fddfbf2cb749e35eed57f834129a3a2be80afce84d5dc3b972af82cea0c8f9e3856c317ab6b8e3bac1dc58602ca76c14578ba78b4af130bda334b55f2144834bd8af1d6bc906ead46e573e8d54f619fcf8e240a99e9186ffe4595de88af8a3b6101b194683e563d8eeeea9cc6b2621c802a"}}, 0x0}, &(0x7f00000005c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000d450000001d89c036e49cce9f340300bc3488c167abd6e430baef0af3f2dc07dbe3d849c6f81808c1bcfe1e06e4fb4e050980ca3ccb0828d85ee4dfef6bbfabb8917c47457af2f78ad7"], 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x81, 0x1, "a5"}, 0x0, 0x0, 0x0, 0x0})
chdir(&(0x7f0000001180)='./bus\x00') (async)
chdir(&(0x7f0000001180)='./bus\x00')
mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)

4m18.770951512s ago: executing program 33 (id=1903):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0x8}]}, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
mkdir(0x0, 0x184)
r2 = open(&(0x7f00000000c0)='./control\x00', 0x573382, 0x113)
rmdir(&(0x7f0000000280)='./control\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000740)={<r4=>0x0, @initdev, @empty}, &(0x7f0000000780)=0xc)
getpeername$packet(r0, &(0x7f00000007c0)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000800)=0x14)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0xe, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve1\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x1017, 0x4004000, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000440)=ANY=[@ANYBLOB="10020000", @ANYRES16=r1, @ANYBLOB="00042abd7000ffdbdf25010000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000400030058000180140002007465616d5f736c6176655f31000000001400020062617461647630000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006361696630000000000000000000000008000300020000005c2701800800030004000000140002006361696630000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f767469300000000000000000000800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="940002800c00018008000100060000003c00018008000100070000000800010003000000080001000600000008000100030000000800010000000000080001000600000008000100070000000c00018008000100080000003c0001800800010008000000080001000000000008000100000000000800010006000000080001000200000008000100040000000800010007000000040003005800018008000300010000000800030001000000080003000300000008000100", @ANYRES32=r4, @ANYBLOB="080003000200000008000300030000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r5, @ANYBLOB="0800030001000000400001801400020076657468315f766c616e00000000000008000300000000000800030003000000080003000200000008000300020000000800030001000000"], 0x210}, 0x1, 0x0, 0x0, 0x140048c0}, 0x20000000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={<r8=>0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000380)={r8, 0x38, "bf7fa159ea60785a5fcfa8d2d836dbcbaacf8bcee9219a5f2bb4a5f212d2b1d9541653fae56c283d3660069a3a61a1ce38f68f4a4c568f00"}, &(0x7f0000000400)=0x40)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000380))
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0x200, 0x3, {<r10=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x9, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x3, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102386, 0x18ff2)
timer_settime(0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

4m18.686607922s ago: executing program 34 (id=1902):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4m18.613421046s ago: executing program 35 (id=1897):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101701, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0xd0009412, &(0x7f0000001480)={{r1}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x24, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000280)=[0x0]}, 0x40)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
read$hiddev(r3, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x700, 0x4, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x67, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x4, 0x12, 0x0, 0x7}]}}}}})
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

4m18.535490171s ago: executing program 36 (id=1904):
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x12b, 0x2}}, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r2, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000400)=[{0x34, 0x0, 0x0, 0xfffff038}, {0x80000006, 0x0, 0x0, 0x3}, {0x0, 0xfa, 0xf2, 0x4}, {0xae9, 0xd8, 0x20, 0x8}]}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20044040)
setuid(0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r7, @ANYRES16=r4, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033", @ANYRESDEC=r3, @ANYBLOB], 0xfc}}, 0x0)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c)
r10 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', <r11=>0x0, 0x29, 0x4, 0x0, 0xfffffffd, 0x19, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7800, 0x0, 0x800, 0xbca}})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000480)={@private0, 0x59, r11})
sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0200000000000800000000001000000000000000000000332661ff5fe060b431f1d497f4dfa9a6fa905bdd9e7c75fd8b145dbd17ad8368f00db68c774e3c9f4efba04ac2c5b6bf74392c824203e1b5dd9b0646ef4bd9752d0b60ada313a4514047fb75e7e19a875c16616cf63fc20a1a8bf703f37af8f0d1ee52fe53c698433f7356c6c559eb079726286abc9a5ad2dd4f0c6f78daeca26d675a1a40b5bb7d0c2a987977b03cebe152bc89e3d90baa22b5d20e217515a2afd9f1e853464d3e1e7ca0aa1d3f96c0ce08d600"], 0x10}}, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f00000003c0)={'batadv0\x00', {0x2, 0x4e20, @local}})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
io_uring_setup(0x661e, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')

1m23.809035834s ago: executing program 7 (id=2626):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x74000}], 0x2, 0x101000, 0x0, 0x8)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b5010203010902120001000000000904"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$l2tp(0x2, 0x2, 0x73)
r3 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r3, 0x47bc, 0xeffd, 0x0, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0})
quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r6, 0x401, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xffffffff, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x700, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x80)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x220402, 0x0)

1m22.357392227s ago: executing program 7 (id=2635):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
lsm_get_self_attr(0x65, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000a7e000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000540)="0cc31a4098ddc80dadd3a0aa2bea9050d9f47bcde4cbb8170d3d61aabbdbd869e8a75ab95a3b8e8b960477dbbbbf5cb0fd4a98ea0032d054de676f19c5e1f84def57482d1b3eb94a2a1d3c0a733709610ece6cb54ae7f8c3ed385c3890244d348c9bcfb556ee478845ff23d8a9f2a492531e7c7ce719ef1983bdaf4008386323fc593be590321dbe51aa4ecabebf49ab7edb835efc0f722637337e20cc541399dc617deafa840b68f2b22e5f7c6afb3825871b966ab90a79a4d6d72f29a1e43abdf4d25f6352dfa26c576830c49b18ece887b47c37affa1c3f24fdb0e14151550796aaa09b4669e71d9f4255f63905467b709f7a7185347a078538e4443f0dad324393274e857979db0a9e3894857aacabc2f2ccd9457fda98a520e2b8c83085a206c8aea9dd18a0b66c87b3b61f95fafed84303436c7ae3782f714dc364c10102788b02d3aed05cb29fe974b75e7bf53dfd2554d7b700dcbf24a6fa021732b747a2c7d6d2a649e1ca523f91ba57da29e6e5050da7ec9466884aea64349e0c65b40bd78fe25622a5f854d351fd3282e85e37989b73e1a3b9fe874ad7131850117f285afe15040fd20cd9c861c95b2c1f9844ac1f8b3cd0a7f22269e235866434acb5f4d9d0b64301cd5b4e8c2da68caacd3f7dda0f325120ad99c05a55736067c87cceda7b850758e60ab8829b0dbfdc1ca8322e6716e643e00c2f665781461f08282a0aa366d9927036d685c3a721530dafe21e62906c5710c3214621d6374d9f5eef47eca1e5080e21832e6d639822a3bf99784f7b19e2dfaa7b8ba39dc5212c94585af38e7a50cbf6d619e3f1b8e4c17351203fa037ca4ce7ef32fd8b4387b8583ebd32a0c5aeb05fced1e492670cabc370aba18abe561e2bfcfa6d92c0c3d0419f5f4936772b6a0026a623914f09b04cf5d7c2b3ab010c676e9932f5807240a765b3d92d2bcdd63a91bd0f1c795fe0ecdda5e50ec8fd0a68115986168fb8bb67fa020ed3c416a716fb12d5d918b8522931dcf2bfd0c7bf7d9c56c490c9880309240d0c2cf1a3cafb647e1a9e1fde434cdbcae9eeac3f8c652a85d6aea69b3e9a922cb2727ed8f50e6babd152b96ca623be94c4aedf7e6848650026a7e1df48e00f45714233d9ae79f4e5e13ac220d553da26f7e7bd", 0x337, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r5, &(0x7f0000003680)={0x2020}, 0x2020)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
read$midi(r6, 0x0, 0x14)
close_range(r4, 0xffffffffffffffff, 0x0)

1m22.246685611s ago: executing program 7 (id=2637):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000001000000229f"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_io_uring_setup(0x47d4, &(0x7f0000000180)={0x0, 0x8bb2, 0x1, 0x2, 0x14e}, &(0x7f0000000100), &(0x7f0000000200))
r5 = syz_io_uring_setup(0x233, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf, 0x0, r4}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
init_module(0x0, 0x300, 0x0)
io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000084010000000a000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e61616161006100"], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000140)="dbd5", 0xffffd6c0, r1}, 0x38)

1m20.759211489s ago: executing program 7 (id=2642):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x34fe}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'})
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301)
iopl(0x3) (async)
mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) (async)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f00000000c0)={0x1, 0x1})
ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x4) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f00000001c0), 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) (async)
r3 = getpid()
sched_setaffinity(r3, 0x39, &(0x7f0000000240)=0x9)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x280200, 0x0) (async)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000008c002, 0x0)
r6 = dup(r5)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ(r8, 0xaea2, 0xffffffffffffffff) (async)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ(r9, 0xaea2, 0x2)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
process_mrelease(r6, 0x0)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async)
write(r10, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000004000000000800040001000000", 0x24)

1m20.671125703s ago: executing program 7 (id=2644):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1m20.359219192s ago: executing program 7 (id=2649):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2004)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, <r2=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2000000000000158, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r4=>0x0})
capset(&(0x7f0000000240)={0x20071026, r4}, &(0x7f00000003c0)={0x62, 0x0, 0x5, 0x7, 0x4, 0x8001})
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x5)
fcntl$notify(r5, 0x402, 0x8000003d)
ftruncate(r0, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmmsg(r7, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}, {{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/234, 0xea}, {&(0x7f0000000740)=""/219, 0xdb}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/248, 0xf8}], 0x5, &(0x7f0000000040)}, 0x6}], 0x40001b2, 0x712, 0x0)
sendfile(r6, r0, 0x0, 0x578410eb)

1m5.050185438s ago: executing program 37 (id=2649):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2004)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, <r2=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2000000000000158, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r4=>0x0})
capset(&(0x7f0000000240)={0x20071026, r4}, &(0x7f00000003c0)={0x62, 0x0, 0x5, 0x7, 0x4, 0x8001})
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x5)
fcntl$notify(r5, 0x402, 0x8000003d)
ftruncate(r0, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmmsg(r7, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}, {{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/234, 0xea}, {&(0x7f0000000740)=""/219, 0xdb}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/248, 0xf8}], 0x5, &(0x7f0000000040)}, 0x6}], 0x40001b2, 0x712, 0x0)
sendfile(r6, r0, 0x0, 0x578410eb)

24.620405091s ago: executing program 5 (id=2806):
fanotify_init(0x8, 0x800)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0))
socket$kcm(0x2d, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0)
writev(r0, &(0x7f0000000040), 0x2)

24.39281315s ago: executing program 9 (id=2808):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000200)={&(0x7f000038a000/0x4000)=nil, 0x9, 0x1, 0x84})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x29, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x20, {0x0, 0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)
read$char_usb(r2, 0x0, 0x0)
read$char_usb(r2, &(0x7f0000000100)=""/74, 0x4a)
r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_usb_disconnect(r1)
r9 = io_uring_setup(0x3454, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)

23.207920133s ago: executing program 8 (id=2810):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r4, 0x7, &(0x7f0000000080)=0x6e)
io_uring_setup(0xaab, 0x0)
getgroups(0x27, &(0x7f0000002540))
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
shutdown(r7, 0x1)
listen(0xffffffffffffffff, 0x20000005)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240040b97d31024d9c15c19ab65bcea6ea7d0000", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050026bd7000000000000f00000008002a402907fea4cc1442ad94a9e1", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x20000014)
r8 = socket(0xf, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="8405c6e794d2e3283a900300cb0b163a82", 0x11}, {&(0x7f0000000500)="3ced0c74c75350f4a590e15c307b5def62d66a822819e8954bece548af7533ad00ff782394aea71d67540bff3344afddeb649fb2237bd5a4a8d4e0c53c77dbef29e3ea8c516cba69d6010d2ee33c017d7ce5b51a33355a87507452669ad0d9f678816157b29600ab24120082d6af74b89e4ff25431a5b0dafc227ec787ad5506b07a88b58c348abcee579db72318618d42ebf8b5b0b50bab33215377a935f0977f869a", 0xa3}, {&(0x7f0000000680)="9eba947b6ae15dffd068752294a0e568afc5f3174702656085bbe8eead657ffd3407793a7658bfd0651a68eeea9e3f26bebf33759073fb5360ef9c466b38ed92bd272a8c3a5deaad01ef9e65468c4211f19322b0fda27006598f2d37f1cdee613bf614fc49bec47d9125454ea01aa7d50192928887dc6fffcda41086a22e53ea74bcad3bbb69b5e1c83387bc7adf55fe08d240b61482d4d1ccc54c4e9d21852b27427a87d0d9c3a51eb01a49dbc1914011e76c2287fb6efef4600a61b192adf3ee15e3e6f2a76773b55e14b0f4b33d4cafb519d17e645e16d85fe9", 0xdb}, {&(0x7f0000000780)="44fb4f13aed59bedabff482085c06d0da4b34ad5ec2ec2f874a22f9088686f9b4a261fc531e6a3ddf911175544c183c791335fdfd282d4112b0a289ad75ae9d1578ae0949c503cc51c28116a5ef2b6ccf23a67f4815a01c4f5fb8db8dda5fc177c162f3b2f34919ebfe59bcfcbe922d130ca25f08fb7e553d688d4dfc4719951b7b51d121e5c432a7df9b14595b396d4b4f6ff0a30198192a3adce13be23a12631ee", 0xa2}], 0x4, 0x0, 0x0, 0x10}, 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x2, 0x1, 0x0, 0x6}, 0x20)
socket$inet(0x2, 0x5, 0x3ff)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)

22.98578993s ago: executing program 6 (id=2811):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000001140)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)

22.435482493s ago: executing program 5 (id=2812):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

22.277129539s ago: executing program 5 (id=2814):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[])
ioctl$KVM_GET_VCPU_EVENTS(r5, 0xc048aeca, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0xffffffff)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}], 0x3}, 0x4}], 0x2, 0x60, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x14)
ioctl$TIOCSETD(r8, 0x5423, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

22.149324446s ago: executing program 8 (id=2815):
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x1010, 0xffffffffffffffff, 0xa)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x8004)
pipe2$watch_queue(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x4001ff}]})
close_range(r3, r4, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
creat(&(0x7f00000002c0)='./file0\x00', 0x6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500), 0x0, 0xff8e}}, 0x3c)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @nfc={0x27, r1, 0xffffffffffffffff, 0x3}, @xdp={0x2c, 0x7, r6, 0x19}, 0x0, 0x0, 0x0, 0x0, 0x9bb, &(0x7f0000000000)='ip6_vti0\x00', 0x3, 0x1, 0x3})

20.706997725s ago: executing program 0 (id=2817):
fanotify_init(0x8, 0x800)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0))
socket$kcm(0x2d, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0)
writev(r0, &(0x7f0000000040), 0x2)

20.693462696s ago: executing program 8 (id=2818):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xb, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00', "5ff9dfc8791532b8"}, 0x28)
sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000540)="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", 0x105}, {&(0x7f0000000280)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588aaf9dce463cb08890097ea29302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfff", 0x7a}, {&(0x7f0000000d00)="7ab285d32f60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1", 0xcd}, {&(0x7f0000001700)="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", 0xbe4}, {&(0x7f00000006c0)="156f35eda3eaf40347c8fcb457593de1fc6e333cc2b86d11cefa6387fed76e61b0bad40d6f6de18452f2ede01ca44de9ed7fa9f1b85663b4edb341e4540122b84005f5ec9cc3b5421dcddec26cc9ff01000000000000b42062e393bbfaa8aac292e2b2fd6c964add609061bb4b97eaf3531f806ffa0d4f71a64ebc154a23b362c2c4b378dfab3e9bfdc247daff233df606f602b0c135c48d08e99b43f7f1cfea3c58b3714b5b8d6d4c", 0xa9}, {&(0x7f0000000a80)="163c76999ae42cc5ecc01af351fb70e6e11409c5d3a344799b070cdd740699f7a1cc0fc12379c717a07625de3c464c8c0023f101be14eb4db316dd831fbd717de366fc76377e2ec18bc7a3a84d197df7", 0x50}], 0x8}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0)

20.491882879s ago: executing program 5 (id=2819):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4008, 0x959e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]})
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
write$P9_RMKDIR(r6, 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f0000000240)={0xc, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000300)={0x28, 0x4, r7, 0x0, &(0x7f0000000280)="d831ccbd244ff7048524faaa44b0358fac8949f0b9441e0e4237f6d990a3f82c2db6ad7986e5971fa1c2624a222ce64160b4f85f73cdc0d5d1b0ea79b8177e1775cacc8994fc83a01e99ac1afc83f2003b3de61e373416c02276b6eed447f748aaafbd5a402cb7b99ad041b2cb54085511d2bb5e20995bee", 0x78, 0x40000000})

19.789878403s ago: executing program 8 (id=2820):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000000000001f"], 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x844)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20000910)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet(0x2, 0x3, 0x2)
socket$inet6(0xa, 0x80002, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
msgsnd(0x0, &(0x7f0000000300)=ANY=[], 0x8, 0x800)
kexec_load(0xfffffffffffffffd, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
mq_open(0x0, 0x840, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="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", 0x15e}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002905000034", @ANYRESOCT=r1], 0x18}}], 0x1, 0x24044051)

19.789481086s ago: executing program 6 (id=2821):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf200000000000000700000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x2c}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

19.646483559s ago: executing program 0 (id=2822):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x28, 0x0, &(0x7f0000000540)=[@acquire={0x40046305, 0x2}, @dead_binder_done, @acquire_done={0x40106309, 0x3}], 0x78, 0x0, &(0x7f0000000580)="f627baf03bb738642e52abe889bd82253cad51d8021c4ff1e50a5634a54e95521c00b738844f15d1a075afe63e0004aca8ce6b6860bf0539b0388f8ee6ff942c417c76deb0a0af403fb851fa558cfafc4a79ca2a355e8d7d3f501807c5e6c08eef4e9b818b29e472dd096f9af3edb34bbefec7746cec1c24"})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40000)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x4030bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

19.17992437s ago: executing program 6 (id=2823):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x28, 0x0, &(0x7f0000000540)=[@acquire={0x40046305, 0x2}, @dead_binder_done, @acquire_done={0x40106309, 0x3}], 0x78, 0x0, &(0x7f0000000580)="f627baf03bb738642e52abe889bd82253cad51d8021c4ff1e50a5634a54e95521c00b738844f15d1a075afe63e0004aca8ce6b6860bf0539b0388f8ee6ff942c417c76deb0a0af403fb851fa558cfafc4a79ca2a355e8d7d3f501807c5e6c08eef4e9b818b29e472dd096f9af3edb34bbefec7746cec1c24"})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40000)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x4030bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

17.531661881s ago: executing program 9 (id=2824):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

17.408431152s ago: executing program 0 (id=2825):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
sendmmsg(r1, &(0x7f0000003c00)=[{{&(0x7f0000000200)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="d596ff04c79a22183c75bab064d8", 0xe}], 0x1}}], 0x1, 0x40840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x9, 0x2, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0)
setrlimit(0x7, &(0x7f0000000200)={0x5, 0xb})
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
signalfd(r0, &(0x7f0000000440)={[0x8000]}, 0x8)

16.853865687s ago: executing program 5 (id=2826):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

16.788105535s ago: executing program 0 (id=2827):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x40000005, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mknod$loop(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
fadvise64(0xffffffffffffffff, 0xff, 0x8000000000000001, 0x5)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe30}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x800, 0x7)
mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a962, 0x2, 0x201, 0x7fff, 0x48cd, 0xfffffffffffffffc, 0x80000001})

16.787265592s ago: executing program 9 (id=2828):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

16.699636682s ago: executing program 5 (id=2829):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[])
ioctl$KVM_GET_VCPU_EVENTS(r5, 0xc048aeca, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0xffffffff)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}], 0x3}, 0x4}], 0x2, 0x60, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x14)
ioctl$TIOCSETD(r8, 0x5423, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

16.698422132s ago: executing program 8 (id=2830):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4008, 0x959e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]})

16.55532327s ago: executing program 6 (id=2831):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xb, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00', "5ff9dfc8791532b8"}, 0x28)
sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000540)="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", 0x105}, {&(0x7f0000000280)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588aaf9dce463cb08890097ea29302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfff", 0x7a}, {&(0x7f0000000d00)="7ab285d32f60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1372c18", 0xd0}, {&(0x7f0000001700)="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", 0xbe4}, {&(0x7f00000006c0)="156f35eda3eaf40347c8fcb457593de1fc6e333cc2b86d11cefa6387fed76e61b0bad40d6f6de18452f2ede01ca44de9ed7fa9f1b85663b4edb341e4540122b84005f5ec9cc3b5421dcddec26cc9ff01000000000000b42062e393bbfaa8aac292e2b2fd6c964add609061bb4b97eaf3531f806ffa0d4f71a64ebc154a23b362c2c4b378dfab3e9bfdc247daff233df606f602b0c135c48d08e99b43f7f1cfea3c58b3714b5b8d6d4c", 0xa9}, {&(0x7f0000000a80)="163c76999ae42cc5ecc01af351fb70e6e11409c5d3a344799b070cdd740699f7a1cc0fc12379c717a07625de3c464c8c0023f101be14eb4db316dd831fbd717de366fc76377e2ec18bc7a3a84d197df7", 0x50}], 0x8}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0)

16.157133521s ago: executing program 6 (id=2832):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000001140)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)

15.637376331s ago: executing program 0 (id=2833):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
openat$vsock(0xffffffffffffff9c, 0x0, 0x230801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48804}, 0x90)
chdir(0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000240)={{0x20000000004, 0x2c2}, {0x0, 0xe}, 0xfffffffd, 0x1})
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r2, @ANYBLOB="461fa5ed80d7f7ed7e21a1c0129bd59a0c1c712dacd7d1cf7afd2d542c851565193a3973fd2c5d36336e6ff8a76f5870e7a52209869d23f9a28ce6292c6b1d05a246f5b73445dc8760408e8b1476a8f171d5d429a0201aef98f44b78646f957e94cef1024a57ef2824435c5bc30e5d57d2243253417777288861f85017f9e5a0728baf2d3f7c39f5bca0ad2fbd2c5a57aca2aa22e63a64df0ef5", @ANYBLOB="11fe8dcb928a75ca31f3310adde1"])
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800)
gettid()
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f00000005c0)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default]}, 0x48)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r4, &(0x7f0000000440)={{0x6, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r4, 0x80)
accept$netrom(r3, 0x0, 0x0)

15.636464478s ago: executing program 9 (id=2834):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x40000005, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mknod$loop(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
fadvise64(0xffffffffffffffff, 0xff, 0x8000000000000001, 0x5)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe30}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x800, 0x7)
mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a962, 0x2, 0x201, 0x7fff, 0x48cd, 0xfffffffffffffffc, 0x80000001})

15.34648581s ago: executing program 8 (id=2835):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = mq_open(&(0x7f0000000100)='&$)+@*^\x00', 0x80, 0x110, &(0x7f0000000140)={0x6, 0x1, 0x3ff, 0x8})
clock_gettime(0x0, &(0x7f0000000240)={<r4=>0x0, <r5=>0x0})
mq_timedsend(r3, &(0x7f0000000200)="5b0f229fe4577fc645402312c0982972971f3cef083ffa2bc5a3761014fe55f969e023d5837195", 0x27, 0x8, &(0x7f0000000280)={r4, r5+60000000})
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c)
unshare(0x68040200)
brk(0x689d80000000)

14.463285693s ago: executing program 9 (id=2836):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
mkdir(0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x3, 0xff)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008890)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f)

14.047279086s ago: executing program 0 (id=2837):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
sendmmsg(r2, &(0x7f0000003c00)=[{{&(0x7f0000000200)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="d596ff04c79a22183c75bab064d8", 0xe}], 0x1}}], 0x1, 0x40840)
sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x9, 0x2, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0)
setrlimit(0x7, &(0x7f0000000200)={0x5, 0xb})
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
signalfd(r0, &(0x7f0000000440)={[0x8000]}, 0x8)

10.551231385s ago: executing program 9 (id=2838):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
mkdir(0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x3, 0xff)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008890)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f)

0s ago: executing program 6 (id=2839):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0xc9d68689ab008576, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x0, 0x7f, 0x18}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x20000044)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x59, "c729e27800d699611bee952b401b87a77108f07df122579402845aad0a48640121fdcea2d8c12caa5929d212f05063619c11f106632479dd7abcbfeddd527e543f92af031cdcc0470b91e065b88b2c7b605bc7551661c30913"}, 0x0})

kernel console output (not intermixed with test programs):

 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13583 comm="syz.5.2376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x0
[  476.874110][    T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  477.042365][    T9] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.064354][    T9] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  477.099454][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  477.108691][    T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  477.131207][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.153606][    T9] usb 7-1: config 0 descriptor??
[  477.367079][T13591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.376616][T13591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.394812][T13591] Invalid ELF header magic: != ELF
[  477.411292][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  477.417520][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  477.458998][    T9] usb 7-1: USB disconnect, device number 15
[  478.447667][   T30] audit: type=1400 audit(2000000242.160:751): avc:  denied  { set_context_mgr } for  pid=13642 comm="syz.5.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  478.471719][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2393'.
[  478.665304][   T30] audit: type=1326 audit(2000000242.380:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.6.2396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5479d8e969 code=0x0
[  478.787755][T13661] netlink: 'syz.7.2397': attribute type 21 has an invalid length.
[  479.839527][T13703] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  479.930498][ T1841] IPVS: starting estimator thread 0...
[  480.050519][T13707] IPVS: using max 39 ests per chain, 93600 per kthread
[  480.436534][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2407'.
[  480.589360][T13736] Invalid ELF header magic: != ELF
[  481.132693][   T30] audit: type=1326 audit(2000000244.850:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.8.2414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc91e98e969 code=0x0
[  481.333478][   T30] audit: type=1400 audit(2000000245.030:754): avc:  denied  { read write } for  pid=13769 comm="syz.6.2416" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  481.375946][   T30] audit: type=1400 audit(2000000245.030:755): avc:  denied  { open } for  pid=13769 comm="syz.6.2416" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  481.420178][   T30] audit: type=1400 audit(2000000245.080:756): avc:  denied  { ioctl } for  pid=13769 comm="syz.6.2416" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  482.419711][T13778] netlink: 'syz.7.2419': attribute type 10 has an invalid length.
[  482.505801][T13778] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2419'.
[  482.819914][T13802] nfs: Unknown parameter '
[  482.819914][T13802] '
[  482.932512][ T5822] Bluetooth: hci5: command 0x0406 tx timeout
[  482.940356][ T5822] Bluetooth: hci6: command 0x0406 tx timeout
[  482.949187][ T5827] Bluetooth: hci7: command 0x0406 tx timeout
[  482.961473][ T5822] Bluetooth: hci3: command 0x0406 tx timeout
[  483.125928][T13806] Invalid ELF header magic: != ELF
[  483.309311][T13807] netlink: 'syz.8.2425': attribute type 16 has an invalid length.
[  483.317331][T13807] netlink: 'syz.8.2425': attribute type 17 has an invalid length.
[  483.367606][T13812] overlayfs: missing 'lowerdir'
[  484.337481][T13822] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  484.450358][ T5818] Bluetooth: hci8: command 0x0405 tx timeout
[  484.557521][T13838] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2432'.
[  484.656664][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  484.701517][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  484.709641][ T5899] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  485.021921][T13860] Dead loop on virtual device ip6_vti0, fix it urgently!
[  485.560775][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  485.575340][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  485.682899][T13881] netlink: 'syz.8.2438': attribute type 16 has an invalid length.
[  485.691019][T13881] netlink: 'syz.8.2438': attribute type 17 has an invalid length.
[  485.744248][T13882] overlayfs: missing 'lowerdir'
[  486.144142][T13886] netlink: ct family unspecified
[  486.166452][T13886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  486.365838][T13888] FAULT_INJECTION: forcing a failure.
[  486.365838][T13888] name failslab, interval 1, probability 0, space 0, times 0
[  486.383855][T13888] CPU: 1 UID: 0 PID: 13888 Comm: syz.5.2439 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) 
[  486.383883][T13888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  486.383893][T13888] Call Trace:
[  486.383900][T13888]  <TASK>
[  486.383906][T13888]  dump_stack_lvl+0x16c/0x1f0
[  486.383935][T13888]  should_fail_ex+0x512/0x640
[  486.383956][T13888]  ? fs_reclaim_acquire+0xae/0x150
[  486.383982][T13888]  ? tomoyo_encode2+0x100/0x3e0
[  486.384005][T13888]  should_failslab+0xc2/0x120
[  486.384023][T13888]  __kmalloc_noprof+0xd2/0x510
[  486.384055][T13888]  tomoyo_encode2+0x100/0x3e0
[  486.384082][T13888]  tomoyo_encode+0x29/0x50
[  486.384104][T13888]  tomoyo_realpath_from_path+0x18f/0x6e0
[  486.384130][T13888]  ? tomoyo_profile+0x47/0x60
[  486.384148][T13888]  tomoyo_path_number_perm+0x245/0x580
[  486.384167][T13888]  ? tomoyo_path_number_perm+0x237/0x580
[  486.384189][T13888]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  486.384211][T13888]  ? find_held_lock+0x2b/0x80
[  486.384253][T13888]  ? find_held_lock+0x2b/0x80
[  486.384272][T13888]  ? hook_file_ioctl_common+0x145/0x410
[  486.384294][T13888]  ? __fget_files+0x20e/0x3c0
[  486.384325][T13888]  security_file_ioctl+0x9b/0x240
[  486.384350][T13888]  __x64_sys_ioctl+0xb7/0x200
[  486.384374][T13888]  do_syscall_64+0xcd/0x260
[  486.384398][T13888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.384415][T13888] RIP: 0033:0x7f079b38e969
[  486.384429][T13888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  486.384445][T13888] RSP: 002b:00007f079c1bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  486.384461][T13888] RAX: ffffffffffffffda RBX: 00007f079b5b6080 RCX: 00007f079b38e969
[  486.384472][T13888] RDX: 0000200000000040 RSI: 00000000c028aa05 RDI: 0000000000000005
[  486.384482][T13888] RBP: 00007f079c1bb090 R08: 0000000000000000 R09: 0000000000000000
[  486.384491][T13888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  486.384500][T13888] R13: 0000000000000000 R14: 00007f079b5b6080 R15: 00007ffe474d13c8
[  486.384523][T13888]  </TASK>
[  486.384579][T13888] ERROR: Out of memory at tomoyo_realpath_from_path.
[  487.748311][T13924] netlink: 'syz.5.2452': attribute type 16 has an invalid length.
[  487.756524][T13924] netlink: 'syz.5.2452': attribute type 17 has an invalid length.
[  487.870784][   T24] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  487.892170][T13924] overlayfs: missing 'lowerdir'
[  488.160627][   T24] usb 10-1: Using ep0 maxpacket: 8
[  488.264911][   T24] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[  488.404795][   T24] usb 10-1: config 0 has no interface number 0
[  488.608365][   T24] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  488.625197][   T24] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  488.638313][   T24] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  488.649651][   T24] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  488.713087][   T24] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  488.930479][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  489.186114][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.205486][   T24] usb 10-1: config 0 descriptor??
[  489.661336][   T24] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  489.729678][   T24] usb 10-1: USB disconnect, device number 21
[  489.773152][ T5865] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  489.774656][   T24] ldusb 10-1:0.55: LD USB Device #0 now disconnected
[  489.940382][ T5865] usb 6-1: Using ep0 maxpacket: 32
[  489.971123][ T5865] usb 6-1: config index 0 descriptor too short (expected 2596, got 36)
[  489.979430][ T5865] usb 6-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[  490.002992][ T5865] usb 6-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[  490.055548][ T5865] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[  490.143797][ T5865] usb 6-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice=82.aa
[  490.184416][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.218290][ T5865] usb 6-1: Product: syz
[  490.250901][ T5865] usb 6-1: Manufacturer: syz
[  490.290448][ T5865] usb 6-1: SerialNumber: syz
[  491.101114][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  491.258059][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2461'.
[  491.344877][ T5865] usb 6-1: rejected 1 configuration due to insufficient available bus power
[  491.360293][ T5865] usb 6-1: no configuration chosen from 1 choice
[  491.880655][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2463'.
[  491.889658][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2463'.
[  491.934924][T14004] gretap0: entered promiscuous mode
[  492.021670][T14004] batadv_slave_1: entered promiscuous mode
[  492.717755][ T5944] usb 6-1: USB disconnect, device number 16
[  492.720748][T14031] infiniband syz!: set active
[  492.728613][T14031] infiniband syz!: added team_slave_0
[  492.818773][T14031] RDS/IB: syz!: added
[  492.823735][T14031] smc: adding ib device syz! with port count 1
[  492.830333][T14031] smc:    ib device syz! port 1 has pnetid 
[  493.111411][T14048] netlink: 'syz.8.2467': attribute type 3 has an invalid length.
[  493.430442][   T24] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  493.550437][ T5944] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  493.734832][   T24] usb 9-1: Using ep0 maxpacket: 16
[  493.752057][   T24] usb 9-1: config 0 has an invalid interface number: 126 but max is 0
[  493.770299][   T24] usb 9-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config
[  494.242356][ T5944] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.285339][   T24] usb 9-1: config 0 has no interface number 0
[  494.393874][   T24] usb 9-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  494.494968][ T5944] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  494.544363][   T24] usb 9-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  494.577219][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0
[  494.618340][ T5944] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  494.631347][   T24] usb 9-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  494.645108][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.660358][   T24] usb 9-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 25970, setting to 1024
[  494.682071][   T24] usb 9-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  494.693091][ T5944] usb 6-1: config 0 descriptor??
[  494.723923][   T24] usb 9-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  494.758870][   T24] usb 9-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  494.762834][   T30] audit: type=1400 audit(2000000258.480:757): avc:  denied  { bind } for  pid=14064 comm="syz.7.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  494.769560][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.801005][   T30] audit: type=1400 audit(2000000258.510:758): avc:  denied  { listen } for  pid=14064 comm="syz.7.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  494.821848][   T24] usb 9-1: config 0 descriptor??
[  494.828962][T14048] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  494.840831][T14048] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  494.846103][   T30] audit: type=1400 audit(2000000258.510:759): avc:  denied  { read } for  pid=14064 comm="syz.7.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  494.849186][T14068] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2474'.
[  494.884447][   T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  494.910043][T14050] Invalid ELF header magic: != ELF
[  494.934007][ T5944] usbhid 6-1:0.0: can't add hid device: -71
[  494.949147][ T5944] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  494.990144][ T5944] usb 6-1: USB disconnect, device number 17
[  495.095840][ T5899] usb 9-1: USB disconnect, device number 18
[  495.181252][T14079] nfs: Unknown parameter ''
[  495.212189][   T30] audit: type=1400 audit(2000000258.930:760): avc:  denied  { write } for  pid=14077 comm="syz.9.2476" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  495.215267][T14078] SELinux:  policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c
[  495.253365][T14078] SELinux: failed to load policy
[  495.263394][   T30] audit: type=1400 audit(2000000258.930:761): avc:  denied  { load_policy } for  pid=14077 comm="syz.9.2476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  496.224993][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  496.530489][ T2147] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  496.605358][    C1] raw-gadget.0 gadget.8: ignoring, device is not running
[  496.760360][ T2147] usb 9-1: device descriptor read/64, error -32
[  497.140980][ T2147] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  497.295556][T14120] nfs: Unknown parameter '
[  497.295556][T14120] '
[  497.315062][ T2147] usb 9-1: Using ep0 maxpacket: 16
[  497.385932][ T2147] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  497.416737][ T2147] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  497.425443][ T2147] usb 9-1: Product: syz
[  497.429829][ T2147] usb 9-1: Manufacturer: syz
[  497.434833][ T2147] usb 9-1: SerialNumber: syz
[  497.456675][ T2147] usb 9-1: config 0 descriptor??
[  497.490447][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  497.824064][ T2147] usb 9-1: USB disconnect, device number 20
[  498.243579][T14130] fuse: Bad value for 'user_id'
[  498.248690][T14130] fuse: Bad value for 'user_id'
[  498.560449][   T30] audit: type=1326 audit(2000000262.270:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz.5.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7ffc0000
[  498.603421][T14143] gfs2: not a GFS2 filesystem
[  498.670387][   T30] audit: type=1326 audit(2000000262.270:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz.5.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7ffc0000
[  498.778781][   T30] audit: type=1326 audit(2000000262.310:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz.5.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f079b38e969 code=0x7ffc0000
[  498.851463][T14148] netlink: 'syz.9.2493': attribute type 10 has an invalid length.
[  498.952312][T14148] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2493'.
[  499.690361][   T30] audit: type=1326 audit(2000000262.319:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz.5.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7ffc0000
[  499.720459][   T30] audit: type=1326 audit(2000000262.319:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz.5.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7ffc0000
[  499.814492][T14156] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2493'.
[  500.034694][T12643] udevd[12643]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  500.149357][T12643] udevd[12643]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  501.733580][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  502.132156][T14205] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2504'.
[  502.344137][T14205] erspan0: entered allmulticast mode
[  502.705075][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  502.705092][   T30] audit: type=1400 audit(2000000266.419:772): avc:  denied  { watch_mount } for  pid=14214 comm="syz.6.2507" path="/118" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  502.727274][T14215] xt_policy: output policy not valid in PREROUTING and INPUT
[  502.990496][ T5809] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  503.191860][ T5809] usb 10-1: Using ep0 maxpacket: 16
[  503.234713][ T5809] usb 10-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6
[  503.244533][   T30] audit: type=1400 audit(2000000266.949:773): avc:  denied  { write } for  pid=14233 comm="syz.8.2511" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  503.278552][ T5809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.293966][ T5809] usb 10-1: Product: syz
[  503.304214][   T30] audit: type=1400 audit(2000000266.949:774): avc:  denied  { open } for  pid=14233 comm="syz.8.2511" path="/112/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  503.336112][ T5809] usb 10-1: Manufacturer: syz
[  503.341912][ T5809] usb 10-1: SerialNumber: syz
[  503.381182][ T5809] usb 10-1: config 0 descriptor??
[  503.389227][ T5809] safe_serial 10-1:0.0: safe_serial converter detected
[  503.407615][   T30] audit: type=1400 audit(2000000266.989:775): avc:  denied  { ioctl } for  pid=14226 comm="syz.5.2510" path="socket:[38355]" dev="sockfs" ino=38355 ioctlcmd=0x89ff scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  503.462225][ T5809] usb 10-1: safe_serial converter now attached to ttyUSB0
[  503.494724][   T30] audit: type=1400 audit(2000000266.989:776): avc:  denied  { map } for  pid=14233 comm="syz.8.2511" path="pipe:[38411]" dev="pipefs" ino=38411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  503.554775][T14241] FAULT_INJECTION: forcing a failure.
[  503.554775][T14241] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  503.622385][T14241] CPU: 1 UID: 0 PID: 14241 Comm: syz.6.2512 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) 
[  503.622413][T14241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  503.622423][T14241] Call Trace:
[  503.622429][T14241]  <TASK>
[  503.622436][T14241]  dump_stack_lvl+0x16c/0x1f0
[  503.622464][T14241]  should_fail_ex+0x512/0x640
[  503.622489][T14241]  _copy_to_user+0x32/0xd0
[  503.622514][T14241]  simple_read_from_buffer+0xcb/0x170
[  503.622540][T14241]  proc_fail_nth_read+0x197/0x270
[  503.622565][T14241]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  503.622590][T14241]  ? rw_verify_area+0xcf/0x680
[  503.622610][T14241]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  503.622635][T14241]  vfs_read+0x1de/0xc70
[  503.622660][T14241]  ? __pfx___mutex_lock+0x10/0x10
[  503.622682][T14241]  ? __pfx_vfs_read+0x10/0x10
[  503.622712][T14241]  ? __fget_files+0x20e/0x3c0
[  503.622743][T14241]  ksys_read+0x12a/0x240
[  503.622766][T14241]  ? __pfx_ksys_read+0x10/0x10
[  503.622787][T14241]  ? rcu_is_watching+0x12/0xc0
[  503.622813][T14241]  do_syscall_64+0xcd/0x260
[  503.622837][T14241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.622853][T14241] RIP: 0033:0x7f5479d8d37c
[  503.622866][T14241] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  503.622882][T14241] RSP: 002b:00007f547ac14030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  503.622899][T14241] RAX: ffffffffffffffda RBX: 00007f5479fb5fa0 RCX: 00007f5479d8d37c
[  503.622909][T14241] RDX: 000000000000000f RSI: 00007f547ac140a0 RDI: 0000000000000008
[  503.622919][T14241] RBP: 00007f547ac14090 R08: 0000000000000000 R09: 0000000000000005
[  503.622928][T14241] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  503.622937][T14241] R13: 0000000000000000 R14: 00007f5479fb5fa0 R15: 00007ffc29d1b718
[  503.622959][T14241]  </TASK>
[  503.933880][T11417] usb 10-1: USB disconnect, device number 22
[  504.086035][T11417] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0
[  504.103420][T11417] safe_serial 10-1:0.0: device disconnected
[  504.364364][T14269] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2517'.
[  504.790009][T14288] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  504.880322][ T5902] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  505.031672][ T5902] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  505.041702][ T5809] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  505.053865][ T5902] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  505.067321][ T5902] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  505.077289][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.180404][ T5809] usb 9-1: device descriptor read/64, error -71
[  505.220417][  T949] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  505.310706][ T5902] usb 7-1: usb_control_msg returned -32
[  505.324749][ T5902] usbtmc 7-1:16.0: can't read capabilities
[  505.359616][ T5126] block nbd4: Receive control failed (result -104)
[  505.384559][  T949] usb 6-1: Using ep0 maxpacket: 32
[  505.397762][  T949] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  505.423374][ T5809] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  505.430324][  T949] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  505.442947][  T949] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  505.461982][  T949] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  505.471723][  T949] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  505.481026][  T949] usb 6-1: Product: syz
[  505.486858][  T949] usb 6-1: Manufacturer: syz
[  505.491639][  T949] usb 6-1: SerialNumber: syz
[  505.512299][  T949] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input27
[  505.702199][ T5809] usb 9-1: device descriptor read/64, error -71
[  505.777133][T11417] usb 6-1: USB disconnect, device number 18
[  505.811047][ T5809] usb usb9-port1: attempt power cycle
[  505.816563][   T30] audit: type=1326 audit(2000000269.529:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7ffc0000
[  505.861385][  T949] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  505.865129][   T30] audit: type=1326 audit(2000000269.529:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f079b38d2d0 code=0x7ffc0000
[  505.870937][T11417] appletouch 6-1:1.0: input: appletouch disconnected
[  505.912098][   T30] audit: type=1326 audit(2000000269.529:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  506.014000][   T30] audit: type=1326 audit(2000000269.529:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  506.039155][   T30] audit: type=1326 audit(2000000269.529:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  506.090354][  T949] usb 10-1: Using ep0 maxpacket: 16
[  506.102695][  T949] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  506.118201][  T949] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  506.148394][  T949] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  506.158167][  T949] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.166700][  T949] usb 10-1: Product: syz
[  506.183233][  T949] usb 10-1: Manufacturer: syz
[  506.205772][  T949] usb 10-1: SerialNumber: syz
[  506.210405][ T5809] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  506.222510][  T949] usb 10-1: config 0 descriptor??
[  506.240884][ T5809] usb 9-1: device descriptor read/8, error -71
[  506.241538][T11417] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  506.420420][T11417] usb 6-1: device descriptor read/64, error -71
[  506.490346][ T5809] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  506.504826][  T949] appledisplay 10-1:0.0: Error while getting initial brightness: -110
[  506.517795][  T949] appledisplay 10-1:0.0: probe with driver appledisplay failed with error -110
[  506.571559][ T5809] usb 9-1: device descriptor read/8, error -71
[  506.645022][ T5944] usb 10-1: USB disconnect, device number 23
[  506.670351][T11417] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  506.685220][ T5809] usb usb9-port1: unable to enumerate USB device
[  506.896704][T11417] usb 6-1: device descriptor read/64, error -71
[  507.030677][T11417] usb usb6-port1: attempt power cycle
[  507.203494][T14358] erspan0: entered allmulticast mode
[  507.855634][T11417] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  507.867804][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  507.867826][   T30] audit: type=1400 audit(2000000271.589:805): avc:  denied  { append } for  pid=14367 comm="syz.9.2532" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  507.933142][T11417] usb 6-1: device descriptor read/8, error -71
[  508.438334][   T30] audit: type=1400 audit(2000000271.619:806): avc:  denied  { map } for  pid=14367 comm="syz.9.2532" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  508.466651][T14375] syz.8.2533: attempt to access beyond end of device
[  508.466651][T14375] loop17: rw=4096, sector=2, nr_sectors = 2 limit=0
[  508.587278][T14375] EXT4-fs (loop17): unable to read superblock
[  508.614568][   T30] audit: type=1400 audit(2000000271.619:807): avc:  denied  { write execute } for  pid=14367 comm="syz.9.2532" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  508.639016][    C0] vkms_vblank_simulate: vblank timer overrun
[  508.735853][   T30] audit: type=1326 audit(2000000271.649:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  508.759189][    C0] vkms_vblank_simulate: vblank timer overrun
[  508.829964][T14385] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  509.231786][   T30] audit: type=1326 audit(2000000271.649:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.5.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  509.255129][    C0] vkms_vblank_simulate: vblank timer overrun
[  509.460521][ T5865] usb 7-1: USB disconnect, device number 16
[  510.001554][   T30] audit: type=1400 audit(2000000273.709:810): avc:  denied  { getopt } for  pid=14401 comm="syz.6.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  510.020961][    C0] vkms_vblank_simulate: vblank timer overrun
[  510.027410][    T9] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[  510.112118][T14400] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2541'.
[  510.206131][T14400] erspan0: entered allmulticast mode
[  510.210911][    T9] usb 9-1: config 0 has an invalid interface number: 3 but max is 0
[  510.229691][    T9] usb 9-1: config 0 has no interface number 0
[  510.241162][   T30] audit: type=1326 audit(2000000273.959:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7ffc0000
[  510.292920][    T9] usb 9-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  510.309041][    T9] usb 9-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  510.344038][   T30] audit: type=1326 audit(2000000273.999:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f079b38e969 code=0x7ffc0000
[  510.368657][    T9] usb 9-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  510.390083][    T9] usb 9-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  510.421575][   T30] audit: type=1326 audit(2000000273.999:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7ffc0000
[  510.447515][    T9] usb 9-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[  510.481969][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.503470][   T30] audit: type=1326 audit(2000000273.999:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f079b38d2d0 code=0x7ffc0000
[  510.537132][    T9] usb 9-1: config 0 descriptor??
[  510.542326][ T5865] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  510.564481][    T9] hub 9-1:0.3: bad descriptor, ignoring hub
[  510.585096][    T9] hub 9-1:0.3: probe with driver hub failed with error -5
[  510.590568][ T5902] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  510.593221][    T9] sierra 9-1:0.3: Sierra USB modem converter detected
[  511.360648][ T5902] usb 10-1: Using ep0 maxpacket: 32
[  511.361054][ T5865] usb 6-1: Using ep0 maxpacket: 8
[  511.612799][ T5902] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  511.632734][ T5865] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  511.642297][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  511.700734][ T5902] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.722759][ T5902] usb 10-1: config 0 descriptor??
[  511.762495][ T5902] gspca_main: nw80x-2.14.0 probing 055f:d001
[  511.786776][ T5865] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  511.817717][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  511.898344][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  511.935904][ T5865] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  511.960506][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  511.963839][T14430] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2546'.
[  512.050501][ T5865] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  512.149080][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  512.244184][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  512.276807][ T5865] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  512.305428][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  512.457609][ T5865] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  512.494293][T14446] nfs: Unknown parameter '
[  512.494293][T14446] '
[  512.792734][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  512.891023][ T5902] gspca_nw80x: reg_r err -110
[  512.897450][ T5902] nw80x 10-1:0.0: probe with driver nw80x failed with error -110
[  512.910446][    T9] usb 9-1: Sierra USB modem converter now attached to ttyUSB0
[  512.951367][ T5865] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  512.971580][T14453] netlink: 'syz.8.2554': attribute type 10 has an invalid length.
[  513.009690][    T9] usb 9-1: Sierra USB modem converter now attached to ttyUSB1
[  513.034532][T14447] SELinux: failed to load policy
[  513.044414][T14453] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2554'.
[  513.056270][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  513.056309][   T30] audit: type=1326 audit(2000000276.779:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  513.110114][ T5865] usb 6-1: string descriptor 0 read error: -22
[  513.125642][ T5865] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  513.138397][    T9] usb 9-1: USB disconnect, device number 25
[  513.175482][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.191253][T14453] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2554'.
[  513.230087][    T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  513.258068][   T30] audit: type=1326 audit(2000000276.809:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  513.294683][    T9] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  513.303588][ T5865] usb 6-1: can't set config #168, error -71
[  513.331879][   T30] audit: type=1326 audit(2000000276.819:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  513.363017][ T5865] usb 6-1: USB disconnect, device number 23
[  513.375808][    T9] sierra 9-1:0.3: device disconnected
[  513.395663][   T30] audit: type=1326 audit(2000000276.819:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  513.419332][   T30] audit: type=1326 audit(2000000276.819:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  513.444027][   T30] audit: type=1326 audit(2000000276.819:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  513.468615][   T30] audit: type=1326 audit(2000000276.819:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  513.492087][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  513.706876][T12643] udevd[12643]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  513.797732][   T30] audit: type=1326 audit(2000000276.819:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  514.218862][    T9] usb 10-1: USB disconnect, device number 24
[  514.258844][   T30] audit: type=1326 audit(2000000276.819:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  514.286653][T14475] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2559'.
[  514.297667][   T30] audit: type=1326 audit(2000000276.819:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f079b38e56b code=0x7ffc0000
[  514.333519][T14482] bond2: entered promiscuous mode
[  514.352666][T14482] bond2: entered allmulticast mode
[  514.358325][T14482] 8021q: adding VLAN 0 to HW filter on device bond2
[  514.830045][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2564'.
[  514.836874][T14510] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2566'.
[  515.062088][ T5863] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  515.231099][ T5863] usb 7-1: Using ep0 maxpacket: 8
[  515.261075][ T5863] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13
[  515.299280][ T5863] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  515.450328][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.478752][ T5863] usb 7-1: Product: syz
[  515.498433][ T5863] usb 7-1: Manufacturer: syz
[  515.539573][ T5863] usb 7-1: SerialNumber: syz
[  515.569109][ T5863] usb 7-1: config 0 descriptor??
[  515.594333][ T5863] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  515.890553][   T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  516.062162][   T24] usb 6-1: Using ep0 maxpacket: 16
[  516.080614][   T24] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  516.098382][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.108210][   T24] usb 6-1: Product: syz
[  516.116529][   T24] usb 6-1: Manufacturer: syz
[  516.123421][   T24] usb 6-1: SerialNumber: syz
[  516.130754][T11417] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  516.167567][   T24] usb 6-1: config 0 descriptor??
[  516.180841][   T24] ums-onetouch 6-1:0.0: USB Mass Storage device detected
[  516.290911][T11417] usb 10-1: Using ep0 maxpacket: 32
[  516.313476][T11417] usb 10-1: config 0 has an invalid interface number: 199 but max is 0
[  516.334170][T11417] usb 10-1: config 0 has no interface number 0
[  516.346607][T11417] usb 10-1: config 0 interface 199 has no altsetting 0
[  516.363991][T11417] usb 10-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77
[  516.380326][T11417] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.388832][T11417] usb 10-1: Product: syz
[  516.389010][   T24] usb 6-1: USB disconnect, device number 24
[  516.398708][T11417] usb 10-1: Manufacturer: syz
[  516.411536][T11417] usb 10-1: SerialNumber: syz
[  516.435548][T11417] usb 10-1: config 0 descriptor??
[  516.452360][T14514] netlink: 'syz.8.2568': attribute type 11 has an invalid length.
[  516.465425][T11417] usbtouchscreen 10-1:0.199: probe with driver usbtouchscreen failed with error -32
[  516.683660][    T9] usb 10-1: USB disconnect, device number 25
[  517.735087][T14580] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2578'.
[  518.240365][    T9] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  518.442003][    T9] usb 6-1: config 1 descriptor has 1 excess byte, ignoring
[  518.457507][    T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4
[  518.479857][    T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  518.495086][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  518.513890][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.530357][    T9] usb 6-1: Product: syz
[  518.538935][    T9] usb 6-1: Manufacturer: syz
[  518.548369][    T9] usb 6-1: SerialNumber: syz
[  518.890109][ T5863] gspca_zc3xx: reg_w_i err -71
[  518.924256][T14562] [U] 
[  518.986030][ T5863] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  519.035783][ T5863] usb 7-1: USB disconnect, device number 17
[  519.129896][T14616] netlink: 'syz.9.2583': attribute type 10 has an invalid length.
[  519.159422][T14616] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2583'.
[  519.325618][T14619] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2583'.
[  520.077563][T11796] udevd[11796]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  520.970740][T11417] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  521.169379][    T9] usb 6-1: 0:10 : does not exist
[  521.214797][    T9] usb 6-1: 0:36 : does not exist
[  521.277646][    T9] usb 6-1: USB disconnect, device number 25
[  521.305331][T11417] usb 10-1: Using ep0 maxpacket: 8
[  521.319676][T14660] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2590'.
[  521.329016][T11417] usb 10-1: config 7 has an invalid interface number: 102 but max is 2
[  521.329044][T11417] usb 10-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config
[  521.329059][T11417] usb 10-1: config 7 has 1 interface, different from the descriptor's value: 3
[  521.329078][T11417] usb 10-1: config 7 has no interface number 0
[  521.329109][T11417] usb 10-1: config 7 interface 102 altsetting 255 endpoint 0x3 has invalid maxpacket 25431, setting to 1024
[  521.483313][T11417] usb 10-1: config 7 interface 102 altsetting 255 has an endpoint descriptor with address 0xB9, changing to 0x89
[  521.581072][T11417] usb 10-1: config 7 interface 102 altsetting 255 endpoint 0x89 has an invalid bInterval 85, changing to 10
[  521.618001][T11417] usb 10-1: config 7 interface 102 altsetting 255 endpoint 0x89 has invalid maxpacket 42313, setting to 1024
[  521.769716][T11417] usb 10-1: config 7 interface 102 has no altsetting 0
[  522.076020][ T5864] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  522.273040][T11417] usb 10-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=13.6f
[  522.298317][T11417] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.320570][T11417] usb 10-1: Product: syz
[  522.324906][T11417] usb 10-1: Manufacturer: 爞⨣䈅꼖⯑曻阍ᇴ虌᥋窋ජ옜䔄焒鴤瑂Ꝅ履庰硕ૂꓰ尗䖖⇑켳ꪟ꯲
[  522.362302][T11417] usb 10-1: SerialNumber: syz
[  522.400928][T14650] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  522.495889][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  522.495907][   T30] audit: type=1400 audit(2000000286.209:854): avc:  denied  { read } for  pid=14684 comm="syz.8.2595" path="socket:[40128]" dev="sockfs" ino=40128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  522.570490][ T5864] usb 7-1: Using ep0 maxpacket: 16
[  522.591695][ T5864] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  522.611913][ T5864] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  522.653988][ T5864] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  522.686953][T14690] syz_tun: entered allmulticast mode
[  522.751721][ T5864] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  522.926091][ T5864] usb 7-1: config 7 interface 0 has no altsetting 0
[  522.994859][ T5864] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  523.051334][T11417] usb 10-1: Invalid firmware size=520.
[  523.064936][T11417] usb 10-1: USB disconnect, device number 26
[  523.150436][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.211532][T14681] syz_tun: left allmulticast mode
[  523.557800][T14708] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  523.575694][T14708] PKCS7: Only support pkcs7_signedData type
[  523.669492][T14709] nfs: Unknown parameter ''
[  523.702368][ T5864] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.0/0003:0458:5010.0009/input/input31
[  523.722395][   T30] audit: type=1400 audit(2000000287.439:855): avc:  denied  { map } for  pid=14707 comm="syz.5.2600" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  523.777144][ T5864] kye 0003:0458:5010.0009: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0
[  524.486713][   T30] audit: type=1400 audit(2000000287.619:856): avc:  denied  { write } for  pid=14669 comm="syz.6.2592" name="file0" dev="tmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  524.511186][   T30] audit: type=1400 audit(2000000287.619:857): avc:  denied  { open } for  pid=14669 comm="syz.6.2592" path="/135/file0" dev="tmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  524.533861][    C0] vkms_vblank_simulate: vblank timer overrun
[  524.574857][ T5864] usb 7-1: USB disconnect, device number 18
[  524.655647][   T30] audit: type=1400 audit(2000000287.629:858): avc:  denied  { ioctl } for  pid=14669 comm="syz.6.2592" path="/135/file0" dev="tmpfs" ino=739 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  524.759594][T14717] fido_id[14717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  524.803363][   T30] audit: type=1400 audit(2000000288.269:859): avc:  denied  { call } for  pid=14707 comm="syz.5.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  524.880338][   T30] audit: type=1400 audit(2000000288.269:860): avc:  denied  { transfer } for  pid=14707 comm="syz.5.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  524.899574][    C0] vkms_vblank_simulate: vblank timer overrun
[  525.145200][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2606'.
[  525.476007][   T30] audit: type=1400 audit(2000000289.089:861): avc:  denied  { watch } for  pid=14721 comm="syz.9.2604" path="/133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  525.520559][    C0] vkms_vblank_simulate: vblank timer overrun
[  525.672178][   T30] audit: type=1400 audit(2000000289.099:862): avc:  denied  { watch_sb watch_reads } for  pid=14721 comm="syz.9.2604" path="/133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  525.717778][    C0] vkms_vblank_simulate: vblank timer overrun
[  525.997861][   T30] audit: type=1400 audit(2000000289.649:863): avc:  denied  { write } for  pid=14740 comm="syz.8.2609" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  528.498359][T14757] erspan0: left allmulticast mode
[  529.117238][T14757] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  529.258282][T14757] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  529.662124][T14779] SELinux: failed to load policy
[  529.790772][  T949] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  529.937486][T14757] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  529.954330][  T949] usb 6-1: Using ep0 maxpacket: 16
[  530.348355][T14757] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.357520][T14757] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.374376][T14757] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.475288][  T949] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  530.499002][  T949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.507259][  T949] usb 6-1: Product: syz
[  530.511763][  T949] usb 6-1: Manufacturer: syz
[  530.517041][  T949] usb 6-1: SerialNumber: syz
[  530.578670][  T949] r8152-cfgselector 6-1: Unknown version 0x0000
[  530.585133][  T949] r8152-cfgselector 6-1: config 0 descriptor??
[  530.599938][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  530.599957][   T30] audit: type=1326 audit(2000000294.279:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.8.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91e98e969 code=0x7fc00000
[  530.629736][    C0] vkms_vblank_simulate: vblank timer overrun
[  530.637735][T14786] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2616'.
[  530.986286][T14781] FAULT_INJECTION: forcing a failure.
[  530.986286][T14781] name failslab, interval 1, probability 0, space 0, times 0
[  531.050676][T14781] CPU: 0 UID: 0 PID: 14781 Comm: syz.5.2615 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) 
[  531.050703][T14781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  531.050713][T14781] Call Trace:
[  531.050718][T14781]  <TASK>
[  531.050725][T14781]  dump_stack_lvl+0x16c/0x1f0
[  531.050751][T14781]  should_fail_ex+0x512/0x640
[  531.050768][T14781]  ? fs_reclaim_acquire+0xae/0x150
[  531.050795][T14781]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  531.050816][T14781]  should_failslab+0xc2/0x120
[  531.050832][T14781]  __kmalloc_noprof+0xd2/0x510
[  531.050860][T14781]  tomoyo_realpath_from_path+0xc2/0x6e0
[  531.050883][T14781]  ? tomoyo_profile+0x47/0x60
[  531.050899][T14781]  tomoyo_path_number_perm+0x245/0x580
[  531.050916][T14781]  ? tomoyo_path_number_perm+0x237/0x580
[  531.050936][T14781]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  531.050955][T14781]  ? find_held_lock+0x2b/0x80
[  531.050992][T14781]  ? find_held_lock+0x2b/0x80
[  531.051010][T14781]  ? hook_file_ioctl_common+0x145/0x410
[  531.051033][T14781]  ? __fget_files+0x20e/0x3c0
[  531.051062][T14781]  security_file_ioctl+0x9b/0x240
[  531.051084][T14781]  __x64_sys_ioctl+0xb7/0x200
[  531.051106][T14781]  do_syscall_64+0xcd/0x260
[  531.051131][T14781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.051146][T14781] RIP: 0033:0x7f079b38e969
[  531.051161][T14781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  531.051177][T14781] RSP: 002b:00007f079c1dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  531.051193][T14781] RAX: ffffffffffffffda RBX: 00007f079b5b5fa0 RCX: 00007f079b38e969
[  531.051204][T14781] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e
[  531.051213][T14781] RBP: 00007f079c1dc090 R08: 0000000000000000 R09: 0000000000000000
[  531.051222][T14781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  531.051231][T14781] R13: 0000000000000000 R14: 00007f079b5b5fa0 R15: 00007ffe474d13c8
[  531.051254][T14781]  </TASK>
[  531.051277][T14781] ERROR: Out of memory at tomoyo_realpath_from_path.
[  531.501626][T14811] netlink: 'syz.6.2623': attribute type 10 has an invalid length.
[  531.591448][T14811] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2623'.
[  531.635537][  T949] r8152-cfgselector 6-1: Unknown version 0x0000
[  531.665321][  T949] r8152-cfgselector 6-1: bad CDC descriptors
[  531.729601][  T949] r8152-cfgselector 6-1: USB disconnect, device number 26
[  531.759123][T14811] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2623'.
[  531.927889][T14836] FAULT_INJECTION: forcing a failure.
[  531.927889][T14836] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  531.969943][T14836] CPU: 1 UID: 0 PID: 14836 Comm: syz.9.2628 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) 
[  531.969968][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  531.969978][T14836] Call Trace:
[  531.969983][T14836]  <TASK>
[  531.969990][T14836]  dump_stack_lvl+0x16c/0x1f0
[  531.970024][T14836]  should_fail_ex+0x512/0x640
[  531.970054][T14836]  _copy_from_user+0x2e/0xd0
[  531.970074][T14836]  kstrtouint_from_user+0xd6/0x1d0
[  531.970090][T14836]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  531.970106][T14836]  ? __lock_acquire+0xaa4/0x1ba0
[  531.970140][T14836]  proc_fail_nth_write+0x83/0x250
[  531.970170][T14836]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  531.970197][T14836]  vfs_write+0x25c/0x1180
[  531.970218][T14836]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  531.970246][T14836]  ? __pfx___mutex_lock+0x10/0x10
[  531.970266][T14836]  ? __pfx_vfs_write+0x10/0x10
[  531.970291][T14836]  ? __fget_files+0x20e/0x3c0
[  531.970322][T14836]  ksys_write+0x12a/0x240
[  531.970344][T14836]  ? __pfx_ksys_write+0x10/0x10
[  531.970364][T14836]  ? rcu_is_watching+0x12/0xc0
[  531.970395][T14836]  do_syscall_64+0xcd/0x260
[  531.970417][T14836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.970431][T14836] RIP: 0033:0x7f8f6258d41f
[  531.970443][T14836] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  531.970457][T14836] RSP: 002b:00007f8f63375030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  531.970471][T14836] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f6258d41f
[  531.970480][T14836] RDX: 0000000000000001 RSI: 00007f8f633750a0 RDI: 0000000000000006
[  531.970488][T14836] RBP: 00007f8f63375090 R08: 0000000000000000 R09: 0000000000000000
[  531.970497][T14836] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  531.970505][T14836] R13: 0000000000000000 R14: 00007f8f627b5fa0 R15: 00007ffe488f7348
[  531.970524][T14836]  </TASK>
[  532.280034][T14840] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2629'.
[  532.316992][T11796] udevd[11796]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  532.507867][T14854] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  532.540605][   T30] audit: type=1400 audit(2000000296.249:867): avc:  denied  { name_bind } for  pid=14847 comm="syz.5.2631" path="socket:[40457]" dev="sockfs" ino=40457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  532.553450][T14849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.584231][T14849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.179842][   T30] audit: type=1400 audit(2000000296.889:868): avc:  denied  { read write } for  pid=14872 comm="syz.8.2636" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  533.217907][   T30] audit: type=1400 audit(2000000296.889:869): avc:  denied  { open } for  pid=14872 comm="syz.8.2636" path="/141/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  533.294632][   T30] audit: type=1400 audit(2000000297.009:870): avc:  denied  { module_load } for  pid=14874 comm="syz.7.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  533.791666][   T30] audit: type=1326 audit(2000000297.509:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14885 comm="syz.5.2639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x0
[  534.708575][T14910] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2643'.
[  535.319685][T14915] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  535.480663][  T949] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  535.563147][T14941] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2651'.
[  535.672786][  T949] usb 9-1: Using ep0 maxpacket: 16
[  535.684336][  T949] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  535.713666][  T949] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  535.746293][  T949] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  535.826240][  T949] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.849828][  T949] usb 9-1: config 0 descriptor??
[  536.020392][T14951] netlink: 'syz.6.2652': attribute type 16 has an invalid length.
[  536.028391][T14951] netlink: 'syz.6.2652': attribute type 17 has an invalid length.
[  536.120920][T14951] overlayfs: failed to resolve './file1': -2
[  536.745327][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  536.785402][  T949] usbhid 9-1:0.0: can't add hid device: -71
[  536.793155][  T949] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  536.805271][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  536.812741][  T949] usb 9-1: USB disconnect, device number 26
[  537.674500][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  538.261943][T14973] xt_HMARK: spi-set and port-set can't be combined
[  538.276129][ T5944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  538.309929][T14974] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2657'.
[  538.496632][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2656'.
[  538.506196][T14975] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2656'.
[  538.613508][T14975] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  538.623459][T14975] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  538.632329][T14975] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  538.641177][T14975] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  538.850653][   T30] audit: type=1400 audit(2000000302.539:872): avc:  denied  { getopt } for  pid=14978 comm="syz.9.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  538.871375][T14983] xt_HMARK: spi-set and port-set can't be combined
[  538.941238][   T30] audit: type=1400 audit(2000000302.549:873): avc:  denied  { map } for  pid=14978 comm="syz.9.2659" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  540.218759][   T30] audit: type=1400 audit(2000000303.929:874): avc:  denied  { create } for  pid=14978 comm="syz.9.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  541.221262][T15023] xt_HMARK: spi-set and port-set can't be combined
[  541.577236][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2667'.
[  541.586415][T15027] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2667'.
[  541.673558][T15027] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  541.682432][T15027] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  541.691264][T15027] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  541.701014][T15027] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  541.935849][T15032] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2668'.
[  542.155476][T15037] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  542.200432][ T5944] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  542.487457][ T5944] usb 9-1: Using ep0 maxpacket: 16
[  542.915752][ T5944] usb 9-1: config 0 has an invalid interface number: 49 but max is 0
[  543.735634][ T5944] usb 9-1: config 0 has no interface number 0
[  543.790741][ T5944] usb 9-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  543.911105][ T5944] usb 9-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9
[  543.940302][ T5944] usb 9-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  544.023838][ T5944] usb 9-1: string descriptor 0 read error: -71
[  544.030137][ T5944] usb 9-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  544.072705][ T5944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.121088][ T5944] usb 9-1: config 0 descriptor??
[  544.152105][ T5944] usb 9-1: can't set config #0, error -71
[  544.195007][ T5944] usb 9-1: USB disconnect, device number 27
[  545.206533][T15090] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2680'.
[  545.852713][ T5944] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  546.063362][ T5944] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  546.130482][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  546.218810][ T5944] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  546.308608][ T5944] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  546.614762][ T5944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.735821][T15094] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  546.749265][ T5944] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  547.131443][   T30] audit: type=1800 audit(2000000310.849:875): pid=15124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.6.2686" name="/newroot/160/bus" dev="tmpfs" ino=874 res=0 errno=0
[  547.154885][T15127] Invalid ELF header magic: != ELF
[  547.216344][ T5944] usb 10-1: USB disconnect, device number 27
[  547.853286][T15145] __vm_enough_memory: pid: 15145, comm: syz.8.2688, bytes: 21199604740096 not enough memory for the allocation
[  548.401132][T15153] erofs (device nullb0): cannot find valid erofs superblock
[  549.098734][T15152] netdevsim netdevsim6: Direct firmware load for .
[  549.098734][T15152]  failed with error -2
[  549.258511][   T30] audit: type=1400 audit(2000000312.969:876): avc:  denied  { firmware_load } for  pid=15136 comm="syz.6.2690" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  549.758780][T15152] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  549.758780][T15152] 
[  550.428418][T15179] netlink: 161716 bytes leftover after parsing attributes in process `syz.5.2696'.
[  550.438611][T15179] netlink: zone id is out of range
[  552.657843][   T30] audit: type=1400 audit(2000000316.369:877): avc:  denied  { write } for  pid=15195 comm="syz.5.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  552.658024][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2701'.
[  552.777045][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2701'.
[  552.797852][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  552.808098][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  552.818334][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  552.827575][   T30] audit: type=1400 audit(2000000316.369:878): avc:  denied  { nlmsg_write } for  pid=15195 comm="syz.5.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  552.859181][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  552.871877][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  553.370320][   T30] audit: type=1400 audit(2000000317.079:879): avc:  denied  { search } for  pid=15210 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  553.442697][   T30] audit: type=1400 audit(2000000317.079:880): avc:  denied  { read } for  pid=15210 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  553.517374][   T30] audit: type=1400 audit(2000000317.079:881): avc:  denied  { open } for  pid=15210 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  553.593839][   T30] audit: type=1400 audit(2000000317.079:882): avc:  denied  { getattr } for  pid=15210 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  553.703225][   T30] audit: type=1400 audit(2000000317.109:883): avc:  denied  { prog_load } for  pid=15204 comm="syz.6.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  553.753755][   T30] audit: type=1400 audit(2000000317.109:884): avc:  denied  { bpf } for  pid=15204 comm="syz.6.2703" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  553.807361][   T30] audit: type=1400 audit(2000000317.119:885): avc:  denied  { getattr } for  pid=15210 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  553.836360][   T30] audit: type=1400 audit(2000000317.219:886): avc:  denied  { read write } for  pid=11312 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  554.252570][T15218] nbd9: detected capacity change from 0 to 4294967296
[  554.410149][T15199] block nbd9: shutting down sockets
[  554.508980][T11796] blk_print_req_error: 27 callbacks suppressed
[  554.509023][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  554.866647][T11796] buffer_io_error: 310 callbacks suppressed
[  554.867263][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read
[  554.932019][ T5818] Bluetooth: hci0: command tx timeout
[  555.258027][ T6872] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  555.267610][ T6872] Buffer I/O error on dev nbd9, logical block 0, async page read
[  555.282650][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  555.442783][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read
[  555.601239][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  555.791641][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read
[  555.824029][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  555.833203][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read
[  555.842661][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  555.851932][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read
[  555.859932][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  555.870345][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read
[  555.880473][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  555.889534][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read
[  555.906368][T11796] ldm_validate_partition_table(): Disk read failed.
[  555.913236][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  555.923306][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read
[  555.941011][T11796] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  555.962214][T11796] Buffer I/O error on dev nbd9, logical block 0, async page read
[  556.239368][T11796] Dev nbd9: unable to read RDB block 0
[  556.255984][T11796]  nbd9: unable to read partition table
[  556.294785][T11796] ldm_validate_partition_table(): Disk read failed.
[  556.295957][T15230] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2707'.
[  556.313487][T11796] Dev nbd9: unable to read RDB block 0
[  556.319458][T11796]  nbd9: unable to read partition table
[  556.487776][T15240] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2709'.
[  557.013504][ T5818] Bluetooth: hci0: command tx timeout
[  557.439002][T12437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  557.470837][T12437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  557.482665][T12437] bond0 (unregistering): Released all slaves
[  557.665685][   T30] kauditd_printk_skb: 61 callbacks suppressed
[  557.665696][   T30] audit: type=1400 audit(2000000321.379:948): avc:  denied  { module_request } for  pid=15200 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  557.830907][   T30] audit: type=1400 audit(2000000321.539:949): avc:  denied  { create } for  pid=15284 comm="syz.5.2715" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  557.852501][    C0] vkms_vblank_simulate: vblank timer overrun
[  557.891935][T15200] chnl_net:caif_netlink_parms(): no params data found
[  557.931224][   T30] audit: type=1400 audit(2000000321.579:950): avc:  denied  { ioctl } for  pid=15284 comm="syz.5.2715" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=42460 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  557.957242][    C0] vkms_vblank_simulate: vblank timer overrun
[  558.096366][   T30] audit: type=1400 audit(2000000321.779:951): avc:  denied  { create } for  pid=15288 comm="syz.6.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  558.118222][   T30] audit: type=1400 audit(2000000321.809:952): avc:  denied  { setopt } for  pid=15288 comm="syz.6.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  558.222362][   T30] audit: type=1400 audit(2000000321.849:953): avc:  denied  { execmem } for  pid=15288 comm="syz.6.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  558.443950][   T30] audit: type=1400 audit(2000000322.089:954): avc:  denied  { bind } for  pid=15288 comm="syz.6.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  559.101012][ T5818] Bluetooth: hci0: command tx timeout
[  559.442398][   T30] audit: type=1400 audit(2000000322.089:955): avc:  denied  { name_bind } for  pid=15288 comm="syz.6.2716" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  559.470166][   T30] audit: type=1400 audit(2000000322.089:956): avc:  denied  { node_bind } for  pid=15288 comm="syz.6.2716" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  559.522868][   T30] audit: type=1400 audit(2000000322.099:957): avc:  denied  { write } for  pid=15288 comm="syz.6.2716" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  559.628802][T15200] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.668395][T15200] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.678834][T15200] bridge_slave_0: entered allmulticast mode
[  559.688362][T15200] bridge_slave_0: entered promiscuous mode
[  559.702766][T15200] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.817488][T15200] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.825708][T15200] bridge_slave_1: entered allmulticast mode
[  559.869752][T15200] bridge_slave_1: entered promiscuous mode
[  560.773063][T15314] Invalid ELF header magic: != ELF
[  560.989161][T15200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  561.130949][T15200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  561.172469][ T5818] Bluetooth: hci0: command tx timeout
[  561.206110][T12437] hsr_slave_0: left promiscuous mode
[  561.259375][T12437] hsr_slave_1: left promiscuous mode
[  561.283439][T15339] overlay: filesystem on ./bus not supported as upperdir
[  561.312686][T12437] batman_adv: batadv0: Removing interface: batadv_slave_0
[  561.353189][T12437] batman_adv: batadv0: Removing interface: batadv_slave_1
[  561.484051][T12437] batman_adv: batadv0: Removing interface: macvtap0
[  561.750383][ T5865] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  562.030298][ T5865] usb 9-1: Using ep0 maxpacket: 32
[  562.037077][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  562.048278][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  562.058405][ T5865] usb 9-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  562.067704][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.117511][ T5865] usb 9-1: config 0 descriptor??
[  562.720755][ T5865] hkems 0003:2006:0118.000A: hidraw0: USB HID v0.03 Device [HID 2006:0118] on usb-dummy_hcd.8-1/input0
[  562.743103][ T5865] hkems 0003:2006:0118.000A: no inputs found
[  562.759437][ T5865] hkems 0003:2006:0118.000A: force feedback init failed
[  562.777576][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  563.250313][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  563.250332][   T30] audit: type=1400 audit(2000000326.849:988): avc:  denied  { accept } for  pid=15349 comm="syz.6.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  563.544364][T12437] team0 (unregistering): Port device team_slave_1 removed
[  563.620087][T12437] team0 (unregistering): Port device team_slave_0 removed
[  563.635072][   T36] smc: removing ib device syz!
[  563.910062][   T30] audit: type=1400 audit(2000000327.619:989): avc:  denied  { ioctl } for  pid=15356 comm="syz.6.2728" path="socket:[43054]" dev="sockfs" ino=43054 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  565.004873][   T24] usb 9-1: USB disconnect, device number 28
[  565.012934][T15200] team0: Port device team_slave_0 added
[  565.022045][T15344] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2725'.
[  565.132450][T15200] team0: Port device team_slave_1 added
[  565.257442][   T30] audit: type=1400 audit(2000000328.879:990): avc:  denied  { append } for  pid=15369 comm="syz.5.2730" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  565.427399][   T30] audit: type=1400 audit(2000000328.879:991): avc:  denied  { ioctl } for  pid=15369 comm="syz.5.2730" path="socket:[43132]" dev="sockfs" ino=43132 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  565.476036][   T30] audit: type=1400 audit(2000000329.169:992): avc:  denied  { mount } for  pid=15377 comm="syz.6.2732" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  565.539397][   T30] audit: type=1400 audit(2000000329.239:993): avc:  denied  { read } for  pid=15383 comm="syz.8.2733" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  565.587260][T15388] fuse: Unknown parameter '000000000000000000000110x000000000000000b'
[  565.847031][   T30] audit: type=1400 audit(2000000329.299:995): avc:  denied  { read write } for  pid=15377 comm="syz.6.2732" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  566.005199][   T30] audit: type=1400 audit(2000000329.299:996): avc:  denied  { open } for  pid=15377 comm="syz.6.2732" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  566.051498][T15200] batman_adv: batadv0: Adding interface: batadv_slave_0
[  566.058504][T15200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  566.084770][T15381] Invalid ELF header magic: != ELF
[  566.125978][   T30] audit: type=1400 audit(2000000329.299:997): avc:  denied  { mounton } for  pid=15377 comm="syz.6.2732" path="/172/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  566.188406][T15200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  566.333853][   T30] audit: type=1400 audit(2000000329.239:994): avc:  denied  { open } for  pid=15383 comm="syz.8.2733" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  566.358476][T15395] tipc: Started in network mode
[  566.370630][T15395] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  566.409773][T15395] tipc: Enabled bearer <udp:s>, priority 10
[  566.427045][T15200] batman_adv: batadv0: Adding interface: batadv_slave_1
[  566.474179][T15200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  566.770592][T15200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  567.532243][ T5863] tipc: Node number set to 4269801488
[  567.560612][T15200] hsr_slave_0: entered promiscuous mode
[  567.677522][T15200] hsr_slave_1: entered promiscuous mode
[  568.238220][ T5863] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  568.358897][T15429] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2741'.
[  568.372884][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  568.372915][   T30] audit: type=1400 audit(2000000332.069:1017): avc:  denied  { create } for  pid=15423 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  568.789029][ T5863] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  568.905932][T15428] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2740'.
[  568.953785][   T30] audit: type=1400 audit(2000000332.069:1018): avc:  denied  { setopt } for  pid=15423 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  568.974000][ T5863] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  569.034557][T15434] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  569.056090][ T5863] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  569.164423][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2744'.
[  569.180457][   T30] audit: type=1400 audit(2000000332.069:1019): avc:  denied  { create } for  pid=15423 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  569.208751][ T5863] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  569.269021][ T5863] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  569.280177][   T30] audit: type=1400 audit(2000000332.069:1020): avc:  denied  { write } for  pid=15423 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  569.308956][ T5863] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.425498][   T30] audit: type=1400 audit(2000000332.089:1021): avc:  denied  { connect } for  pid=15423 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  569.519093][T15445] FAULT_INJECTION: forcing a failure.
[  569.519093][T15445] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  569.532579][T15445] CPU: 1 UID: 0 PID: 15445 Comm: syz.6.2743 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) 
[  569.532604][T15445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  569.532613][T15445] Call Trace:
[  569.532619][T15445]  <TASK>
[  569.532625][T15445]  dump_stack_lvl+0x16c/0x1f0
[  569.532653][T15445]  should_fail_ex+0x512/0x640
[  569.532678][T15445]  should_fail_alloc_page+0xe7/0x130
[  569.532698][T15445]  prepare_alloc_pages+0x3c2/0x610
[  569.532724][T15445]  __alloc_frozen_pages_noprof+0x18f/0x23a0
[  569.532755][T15445]  ? lockdep_hardirqs_on+0x7c/0x110
[  569.532783][T15445]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  569.532811][T15445]  ? _parse_integer_limit+0x17f/0x1d0
[  569.532832][T15445]  ? _kstrtoull+0x145/0x200
[  569.532847][T15445]  ? __pfx__kstrtoull+0x10/0x10
[  569.532870][T15445]  ? rcu_is_watching+0x12/0xc0
[  569.532889][T15445]  ? irqentry_exit+0x3b/0x90
[  569.532908][T15445]  ? lockdep_hardirqs_on+0x7c/0x110
[  569.532933][T15445]  ? iovec_from_user+0x108/0x140
[  569.532955][T15445]  __alloc_pages_noprof+0xb/0x1b0
[  569.532980][T15445]  ___kmalloc_large_node+0x82/0x1e0
[  569.532999][T15445]  ? __import_iovec+0x438/0x660
[  569.533023][T15445]  __kmalloc_large_node_noprof+0x1c/0x70
[  569.533046][T15445]  __kmalloc_noprof.cold+0xc/0x61
[  569.533074][T15445]  iovec_from_user+0x108/0x140
[  569.533099][T15445]  process_vm_rw+0x2c5/0x360
[  569.533116][T15445]  ? __pfx_process_vm_rw+0x10/0x10
[  569.533140][T15445]  ? ksys_write+0x190/0x240
[  569.533184][T15445]  ? ksys_write+0x1b9/0x240
[  569.533206][T15445]  ? __pfx_ksys_write+0x10/0x10
[  569.533232][T15445]  __x64_sys_process_vm_writev+0xe2/0x1c0
[  569.533249][T15445]  ? do_syscall_64+0x91/0x260
[  569.533271][T15445]  ? lockdep_hardirqs_on+0x7c/0x110
[  569.533292][T15445]  do_syscall_64+0xcd/0x260
[  569.533315][T15445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.533331][T15445] RIP: 0033:0x7f5479d8e969
[  569.533343][T15445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  569.533359][T15445] RSP: 002b:00007f547abd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  569.533374][T15445] RAX: ffffffffffffffda RBX: 00007f5479fb6160 RCX: 00007f5479d8e969
[  569.533385][T15445] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000221
[  569.533394][T15445] RBP: 00007f547abd2090 R08: 000000000000023a R09: 0000000000000000
[  569.533404][T15445] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001
[  569.533413][T15445] R13: 0000000000000000 R14: 00007f5479fb6160 R15: 00007ffc29d1b718
[  569.533435][T15445]  </TASK>
[  569.911726][   T30] audit: type=1400 audit(2000000332.159:1022): avc:  denied  { write } for  pid=15423 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  569.932257][   T30] audit: type=1400 audit(2000000332.419:1023): avc:  denied  { getopt } for  pid=15423 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  569.952757][ T5863] usb 9-1: config 0 descriptor??
[  569.959471][T15420] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  569.970901][ T5126] Bluetooth: hci8: command 0x0405 tx timeout
[  569.993241][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2744'.
[  570.267040][   T30] audit: type=1400 audit(2000000333.899:1024): avc:  denied  { ioctl } for  pid=15415 comm="syz.8.2738" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  570.428401][T15455] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000004��00000000000000000000'
[  570.487042][ T5863] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd
[  570.529394][ T5863] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  570.539497][T15458] syz_tun: entered allmulticast mode
[  570.567706][   T30] audit: type=1400 audit(2000000333.969:1025): avc:  denied  { read write } for  pid=11314 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  570.602178][ T5863] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  570.728256][ T5863] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  570.901861][   T30] audit: type=1400 audit(2000000333.969:1026): avc:  denied  { open } for  pid=11314 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  571.052797][ T5865] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  571.273522][ T5865] usb 6-1: Using ep0 maxpacket: 16
[  571.288231][T15452] syz_tun: left allmulticast mode
[  571.358096][ T5865] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  571.399029][ T5865] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  571.484441][ T5865] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  571.520062][ T5865] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  571.777569][ T5865] usb 6-1: config 7 interface 0 has no altsetting 0
[  571.789896][ T5865] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  571.829643][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.880710][    T9] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  572.052581][    T9] usb 7-1: not running at top speed; connect to a high speed hub
[  572.064156][    T9] usb 7-1: config 6 has an invalid interface number: 146 but max is 2
[  572.084720][    T9] usb 7-1: config 6 has an invalid descriptor of length 67, skipping remainder of the config
[  572.133890][    T9] usb 7-1: config 6 has 1 interface, different from the descriptor's value: 3
[  572.160974][ T5863] usb 9-1: reset high-speed USB device number 29 using dummy_hcd
[  572.182496][    T9] usb 7-1: config 6 has no interface number 0
[  572.206692][    T9] usb 7-1: config 6 interface 146 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  572.218432][T15200] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  572.256652][    T9] usb 7-1: config 6 interface 146 has no altsetting 0
[  572.257067][T15200] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  572.293303][    T9] usb 7-1: New USB device found, idVendor=13d3, idProduct=f84d, bcdDevice=4f.ad
[  572.304171][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.315108][T15200] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  572.337223][T15200] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  572.355770][    T9] usb 7-1: Product: 貆笠렒သῠG㯈跞襈矜墢왓ꄂ㬣ى㚞絬姇ᡜꆐ洛덊宋뽞Ӈ׹挓鬩㑈יּ뭰ᐥ菚㐭馇滸鼛呂≚下
[  572.428543][    T9] usb 7-1: Manufacturer: ཮ʏ헮刿𥉉죅쾻ჰ☒А滋輱ȝ㬜黖넗풉酙ꑶಖ〧냰⥿嗉꼥᷌⨞ᦍ⌷뀐壭ⓢﮫ횀۱䠱⢢ꍯ耢ꛌ⮵쓯쮳ړ뀞䶷룉㿞ₛ๕臃鯎땼沼Ὑ궨돎໅ꢭ십꽒ஶ苦婗ꥶ痃돩鞓텦桟⨡䦏枷=ണ㮪簇ೄ껨踰䲶渲앯䋬௚諦
[  573.347938][    T9] usb 7-1: SerialNumber: ᫉㍰ƀ鬖⹮쳰ꚛ㏒⼆㕓肹ᜪ爧㕘뗄飖饗뿇䚡딘ﻃ媪ᚊ䕳ູ牔擳鶟뀑൨㸂婱嚛㻵턟堈曁뇌㕦嵣꙾誀鷒멯㍦蕖咃幃䴃ᎄ櫹쥄ኾ쓗㩭粮쯱䍓豷빅뛞쪀﷘שׂ큏恉᥵꼓绰￿夾됉껙қ䵱鶡섋ị퍃
[  573.394989][ T5865] usbhid 6-1:7.0: can't add hid device: -71
[  573.406865][ T5865] usbhid 6-1:7.0: probe with driver usbhid failed with error -71
[  573.471141][ T5865] usb 6-1: USB disconnect, device number 27
[  573.549107][T15200] 8021q: adding VLAN 0 to HW filter on device bond0
[  573.591871][   T30] kauditd_printk_skb: 55 callbacks suppressed
[  573.591887][   T30] audit: type=1400 audit(2000000337.309:1082): avc:  denied  { create } for  pid=15496 comm="syz.8.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  573.609745][T15200] 8021q: adding VLAN 0 to HW filter on device team0
[  573.639509][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.646725][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  573.649523][   T30] audit: type=1400 audit(2000000337.339:1083): avc:  denied  { bind } for  pid=15496 comm="syz.8.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  573.803416][T15501] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2751'.
[  574.031363][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  574.038511][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  574.053054][   T30] audit: type=1400 audit(2000000337.339:1084): avc:  denied  { setopt } for  pid=15496 comm="syz.8.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  574.072151][ T5899] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  574.116477][   T30] audit: type=1400 audit(2000000337.339:1085): avc:  denied  { accept } for  pid=15496 comm="syz.8.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  574.141878][T15200] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  574.170365][T15200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  574.220845][   T30] audit: type=1400 audit(2000000337.339:1086): avc:  denied  { write } for  pid=15496 comm="syz.8.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  574.269275][ T5899] usb 10-1: Using ep0 maxpacket: 32
[  574.297974][ T5899] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  574.298568][   T30] audit: type=1400 audit(2000000337.339:1087): avc:  denied  { read } for  pid=15496 comm="syz.8.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  574.359432][ T5899] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  574.379809][   T30] audit: type=1400 audit(2000000337.349:1088): avc:  denied  { create } for  pid=15482 comm="syz.6.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  574.422236][ T5864] usb 9-1: USB disconnect, device number 29
[  574.460360][ T5899] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  574.476809][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2756'.
[  574.521206][   T30] audit: type=1400 audit(2000000337.449:1089): avc:  denied  { create } for  pid=15482 comm="syz.6.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  574.556911][ T5899] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  574.573898][   T30] audit: type=1400 audit(2000000337.459:1090): avc:  denied  { getopt } for  pid=15482 comm="syz.6.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  574.600641][ T5899] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  574.636393][ T5899] usb 10-1: Product: syz
[  574.644708][   T30] audit: type=1400 audit(2000000337.459:1091): avc:  denied  { read write } for  pid=15482 comm="syz.6.2751" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  574.660529][ T5899] usb 10-1: Manufacturer: syz
[  574.704269][ T5899] usb 10-1: SerialNumber: syz
[  574.810389][ T5899] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input33
[  574.989285][T15200] 8021q: adding VLAN 0 to HW filter on device batadv0
[  575.082754][T11546] usb 10-1: USB disconnect, device number 28
[  575.082888][    C1] appletouch 10-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  575.184081][T15200] veth0_vlan: entered promiscuous mode
[  575.261038][T11546] appletouch 10-1:1.0: input: appletouch disconnected
[  575.522782][    T9] usb 7-1: USB disconnect, device number 19
[  575.566462][T15200] veth1_vlan: entered promiscuous mode
[  575.674951][T15200] veth0_macvtap: entered promiscuous mode
[  575.705373][T15200] veth1_macvtap: entered promiscuous mode
[  576.569370][T15200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.622172][T15200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.633401][T15200] batman_adv: batadv0: Interface activated: batadv_slave_0
[  576.662499][T15200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.687057][T15200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.743104][T15200] batman_adv: batadv0: Interface activated: batadv_slave_1
[  577.098218][    T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  577.135853][T15548] block device autoloading is deprecated and will be removed.
[  577.150945][T15548] syz.8.2762: attempt to access beyond end of device
[  577.150945][T15548] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  577.254193][T15200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  577.283895][    T9] usb 7-1: config 0 has no interfaces?
[  577.586582][    T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  577.696001][T15200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  578.033799][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.119924][T15200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  578.166795][    T9] usb 7-1: Product: syz
[  578.378349][T15200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  578.380293][    T9] usb 7-1: Manufacturer: syz
[  578.498567][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.548346][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  578.555846][    T9] usb 7-1: SerialNumber: syz
[  578.566139][    T9] usb 7-1: config 0 descriptor??
[  578.724269][ T6696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.789146][ T6696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  578.943434][   T30] kauditd_printk_skb: 38 callbacks suppressed
[  578.943451][   T30] audit: type=1400 audit(2000000342.659:1130): avc:  denied  { mounton } for  pid=15200 comm="syz-executor" path="/root/syzkaller.601xXw/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  579.474692][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2760'.
[  579.521417][   T30] audit: type=1400 audit(2000000342.709:1131): avc:  denied  { mount } for  pid=15200 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  579.531405][T15577] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2760'.
[  579.552881][   T30] audit: type=1400 audit(2000000342.719:1132): avc:  denied  { mount } for  pid=15200 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  579.625563][T15580] ALSA: mixer_oss: invalid index 40000
[  579.707183][   T30] audit: type=1400 audit(2000000342.719:1133): avc:  denied  { mounton } for  pid=15200 comm="syz-executor" path="/root/syzkaller.601xXw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  579.734014][    C0] vkms_vblank_simulate: vblank timer overrun
[  579.893643][   T30] audit: type=1400 audit(2000000342.719:1134): avc:  denied  { mounton } for  pid=15200 comm="syz-executor" path="/root/syzkaller.601xXw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=44190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  579.921277][    C0] vkms_vblank_simulate: vblank timer overrun
[  579.942940][   T30] audit: type=1400 audit(2000000342.719:1135): avc:  denied  { read write } for  pid=15541 comm="syz.6.2760" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  579.967828][    C0] vkms_vblank_simulate: vblank timer overrun
[  579.979902][   T30] audit: type=1400 audit(2000000342.719:1136): avc:  denied  { open } for  pid=15541 comm="syz.6.2760" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  580.004699][    C0] vkms_vblank_simulate: vblank timer overrun
[  580.016479][   T30] audit: type=1400 audit(2000000342.719:1137): avc:  denied  { ioctl } for  pid=15541 comm="syz.6.2760" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  580.049056][   T30] audit: type=1400 audit(2000000343.209:1138): avc:  denied  { write } for  pid=15570 comm="syz.9.2766" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  580.077392][   T30] audit: type=1400 audit(2000000343.229:1139): avc:  denied  { unmount } for  pid=15200 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  580.097182][    C0] vkms_vblank_simulate: vblank timer overrun
[  581.046280][T11546] usb 7-1: USB disconnect, device number 20
[  582.418715][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2774'.
[  582.802596][ T5863] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  583.080394][ T5863] usb 7-1: Using ep0 maxpacket: 32
[  583.100154][ T5863] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  583.121902][ T5863] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  583.138637][ T5863] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  583.154322][ T5863] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  583.163835][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  583.176922][ T5863] usb 7-1: Product: syz
[  583.188894][ T5863] usb 7-1: Manufacturer: syz
[  583.230357][ T5863] usb 7-1: SerialNumber: syz
[  583.279168][ T5863] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input34
[  583.627034][ T5863] usb 7-1: USB disconnect, device number 21
[  583.633171][    C1] appletouch 7-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  583.755542][ T5863] appletouch 7-1:1.0: input: appletouch disconnected
[  584.487120][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  584.487130][   T30] audit: type=1400 audit(2000000348.199:1154): avc:  denied  { create } for  pid=15660 comm="syz.5.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  584.873963][   T30] audit: type=1400 audit(2000000348.289:1155): avc:  denied  { setopt } for  pid=15660 comm="syz.5.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  584.957552][   T30] audit: type=1400 audit(2000000348.569:1156): avc:  denied  { create } for  pid=15664 comm="syz.8.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  584.982806][   T30] audit: type=1400 audit(2000000348.629:1157): avc:  denied  { setopt } for  pid=15664 comm="syz.8.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  585.007529][   T30] audit: type=1400 audit(2000000348.629:1158): avc:  denied  { write } for  pid=15664 comm="syz.8.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  585.061079][   T30] audit: type=1400 audit(2000000348.629:1159): avc:  denied  { create } for  pid=15664 comm="syz.8.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  585.107153][   T30] audit: type=1400 audit(2000000348.629:1160): avc:  denied  { bind } for  pid=15664 comm="syz.8.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  585.128407][   T30] audit: type=1400 audit(2000000348.629:1161): avc:  denied  { setopt } for  pid=15664 comm="syz.8.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  585.154781][   T30] audit: type=1326 audit(2000000348.639:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.8.2786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc91e98e969 code=0x0
[  585.192603][   T30] audit: type=1400 audit(2000000348.749:1163): avc:  denied  { write } for  pid=15664 comm="syz.8.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  585.274295][T11546] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  585.390780][T15682] ubi31: attaching mtd0
[  585.402239][T15682] ubi31: scanning is finished
[  585.407073][T15682] ubi31: empty MTD device detected
[  585.490643][T11546] usb 10-1: Using ep0 maxpacket: 32
[  585.518254][T11546] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  585.568366][T11546] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  585.575546][T15682] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  585.587878][T15682] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  585.595425][T15682] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  585.599407][T11546] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  585.618114][T15682] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  585.627460][T15682] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  585.634816][T15682] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  585.666619][T15682] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3220878802
[  585.672174][T11546] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  585.689821][T11546] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  585.704669][T15682] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  585.721515][T15693] ubi31: background thread "ubi_bgt31d" started, PID 15693
[  585.742264][T15696] FAULT_INJECTION: forcing a failure.
[  585.742264][T15696] name failslab, interval 1, probability 0, space 0, times 0
[  585.755188][T11546] usb 10-1: Product: syz
[  585.787626][T11546] usb 10-1: Manufacturer: syz
[  585.809844][T11546] usb 10-1: SerialNumber: syz
[  585.816248][T15696] CPU: 0 UID: 0 PID: 15696 Comm: syz.8.2792 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) 
[  585.816273][T15696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  585.816284][T15696] Call Trace:
[  585.816289][T15696]  <TASK>
[  585.816295][T15696]  dump_stack_lvl+0x16c/0x1f0
[  585.816324][T15696]  should_fail_ex+0x512/0x640
[  585.816349][T15696]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  585.816379][T15696]  should_failslab+0xc2/0x120
[  585.816397][T15696]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  585.816422][T15696]  ? __alloc_skb+0x2b2/0x380
[  585.816443][T15696]  __alloc_skb+0x2b2/0x380
[  585.816458][T15696]  ? __pfx___alloc_skb+0x10/0x10
[  585.816476][T15696]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  585.816501][T15696]  netlink_alloc_large_skb+0x69/0x130
[  585.816522][T15696]  netlink_sendmsg+0x6a1/0xdd0
[  585.816545][T15696]  ? __pfx_netlink_sendmsg+0x10/0x10
[  585.816574][T15696]  ____sys_sendmsg+0xa95/0xc70
[  585.816598][T15696]  ? copy_msghdr_from_user+0x10a/0x160
[  585.816615][T15696]  ? __pfx_____sys_sendmsg+0x10/0x10
[  585.816647][T15696]  ___sys_sendmsg+0x134/0x1d0
[  585.816666][T15696]  ? __pfx____sys_sendmsg+0x10/0x10
[  585.816706][T15696]  __sys_sendmsg+0x16d/0x220
[  585.816724][T15696]  ? __pfx___sys_sendmsg+0x10/0x10
[  585.816755][T15696]  ? rcu_is_watching+0x12/0xc0
[  585.816782][T15696]  do_syscall_64+0xcd/0x260
[  585.816803][T15696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.816818][T15696] RIP: 0033:0x7fc91e98e969
[  585.816831][T15696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  585.816846][T15696] RSP: 002b:00007fc91f8a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  585.816864][T15696] RAX: ffffffffffffffda RBX: 00007fc91ebb5fa0 RCX: 00007fc91e98e969
[  585.816874][T15696] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003
[  585.816883][T15696] RBP: 00007fc91f8a7090 R08: 0000000000000000 R09: 0000000000000000
[  585.816893][T15696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  585.816902][T15696] R13: 0000000000000000 R14: 00007fc91ebb5fa0 R15: 00007ffd02053ba8
[  585.816924][T15696]  </TASK>
[  586.211765][T11546] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input35
[  586.400319][ T5863] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  586.580336][ T5863] usb 9-1: Using ep0 maxpacket: 32
[  586.645536][ T5863] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  586.802666][ T5863] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  586.817780][T15718] ieee802154 phy0 wpan0: encryption failed: -22
[  586.842104][T11417] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  586.844710][ T5863] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  586.874832][T11546] usb 10-1: USB disconnect, device number 29
[  586.905810][ T5863] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  586.926445][ T5863] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  586.951344][T11546] appletouch 10-1:1.0: input: appletouch disconnected
[  586.961949][ T5863] usb 9-1: Product: syz
[  586.969300][ T5863] usb 9-1: Manufacturer: syz
[  586.987537][ T5863] usb 9-1: SerialNumber: syz
[  587.008977][ T5863] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input36
[  587.055515][T11417] usb 1-1: unable to get BOS descriptor or descriptor too short
[  587.081989][T11417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  587.110351][T11417] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  587.124885][T11417] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  587.148170][T11417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.157715][    T9] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[  587.168660][T11417] usb 1-1: Product: syz
[  587.175181][T11417] usb 1-1: Manufacturer: syz
[  587.211616][T11417] usb 1-1: SerialNumber: syz
[  587.225979][T11417] smsusb:smsusb_probe: board id=8, interface number 0
[  587.228378][ T5863] usb 9-1: USB disconnect, device number 30
[  587.239676][T11417] smsusb:smsusb_probe: Device initialized with return code -19
[  587.321915][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  587.334426][    T9] usb 7-1: config 0 has no interfaces?
[  587.335255][ T5863] appletouch 9-1:1.0: input: appletouch disconnected
[  587.342584][    T9] usb 7-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7
[  587.356910][    T9] usb 7-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[  587.365738][    T9] usb 7-1: Product: syz
[  587.370041][    T9] usb 7-1: Manufacturer: syz
[  587.377214][    T9] usb 7-1: SerialNumber: syz
[  587.386681][    T9] usb 7-1: config 0 descriptor??
[  587.470816][ T5899] usb 1-1: USB disconnect, device number 10
[  587.595531][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x7
[  587.657466][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  587.665997][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  587.678199][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  587.687935][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  587.723392][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  587.748867][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  587.862084][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  587.889136][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  588.007564][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  588.460961][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  588.472185][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  588.505223][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  588.684784][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  588.712683][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  588.851333][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  588.972589][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2802'.
[  588.981707][T15754] netlink: 'syz.0.2802': attribute type 5 has an invalid length.
[  588.994475][T15754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2802'.
[  589.002010][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  589.017299][T15754] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  589.490686][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  589.498182][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  589.513734][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  589.521390][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  589.528850][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  589.610914][T15754] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  589.635517][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  589.670346][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  589.681790][    T9] hid-generic 0001:0000:0000.000C: unknown main item tag 0x0
[  589.718083][    T9] hid-generic 0001:0000:0000.000C: hidraw0: <UNKNOWN> HID vffffff.ff Device [syz0] on syz0
[  589.739978][T15754] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  589.815533][T15768] fido_id[15768]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  589.892002][T15754] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  590.392607][T15754] geneve2: entered promiscuous mode
[  590.440410][T15754] geneve2: entered allmulticast mode
[  590.718309][    T9] usb 7-1: USB disconnect, device number 22
[  590.790089][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  590.790105][   T30] audit: type=1400 audit(2000000354.499:1190): avc:  denied  { create } for  pid=15774 comm="syz.8.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  591.292989][T15795] xt_HMARK: spi-set and port-set can't be combined
[  591.611496][ T5818] block nbd5: Receive control failed (result -104)
[  591.620348][ T5899] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[  591.754175][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2809'.
[  591.763297][T15800] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2809'.
[  591.857546][T15800] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  591.866396][T15800] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  591.875187][T15800] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  591.883895][T15800] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  592.010320][ T5899] usb 10-1: Using ep0 maxpacket: 16
[  592.026566][ T5899] usb 10-1: config index 0 descriptor too short (expected 16456, got 72)
[  592.035241][ T5899] usb 10-1: config 0 has an invalid interface number: 125 but max is 1
[  592.045770][ T5899] usb 10-1: config 0 has an invalid interface number: 125 but max is 1
[  592.054417][ T5899] usb 10-1: config 0 has an invalid interface number: 125 but max is 1
[  592.079629][ T5899] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2
[  592.120503][ T5899] usb 10-1: config 0 has no interface number 0
[  592.157307][ T5899] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  592.189011][ T5899] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  592.220990][ T5899] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  592.274730][ T5899] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  592.318871][ T5899] usb 10-1: config 0 interface 125 has no altsetting 0
[  592.337604][ T5899] usb 10-1: config 0 interface 125 has no altsetting 2
[  592.374743][ T5899] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  592.454096][   T30] audit: type=1400 audit(2000000356.159:1191): avc:  denied  { connect } for  pid=15807 comm="syz.8.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  592.538978][   T30] audit: type=1400 audit(2000000356.219:1192): avc:  denied  { shutdown } for  pid=15807 comm="syz.8.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  592.809335][ T5899] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.817567][ T5899] usb 10-1: Product: syz
[  592.821893][ T5899] usb 10-1: Manufacturer: syz
[  592.826617][ T5899] usb 10-1: SerialNumber: syz
[  592.881772][ T5899] usb 10-1: config 0 descriptor??
[  592.909756][ T5899] usb 10-1: selecting invalid altsetting 2
[  593.128727][T15798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  593.140768][T11546] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  593.201502][T15798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.580420][T11546] usb 7-1: Using ep0 maxpacket: 32
[  593.587933][T11546] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  593.698278][T11546] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  593.844816][T11546] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  593.866897][T11546] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  593.884091][T11546] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  594.108095][T15842] xt_connbytes: Forcing CT accounting to be enabled
[  594.115200][T15842] Cannot find set identified by id 0 to match
[  594.393382][ T5899] get_1284_register timeout
[  594.398018][ T5899] uss720 10-1:0.125: probe with driver uss720 failed with error -5
[  594.406023][    C0] usb 10-1: async_complete: urb error -104
[  594.406134][    C0] usb 10-1: async_complete: urb error -104
[  594.406225][    C0] usb 10-1: async_complete: urb error -104
[  594.406314][    C0] usb 10-1: async_complete: urb error -104
[  594.446418][   T30] audit: type=1400 audit(2000000357.669:1193): avc:  denied  { mounton } for  pid=15834 comm="syz.0.2816" path="/9/file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  594.497516][T11546] usb 7-1: Product: syz
[  594.511007][T11546] usb 7-1: Manufacturer: syz
[  594.515689][T11546] usb 7-1: SerialNumber: syz
[  594.638778][T11546] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input37
[  594.883968][ T5126] Bluetooth: hci0: command 0x0405 tx timeout
[  594.948123][    C0] appletouch 7-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  594.958237][T11546] usb 7-1: USB disconnect, device number 23
[  595.241075][T11546] appletouch 7-1:1.0: input: appletouch disconnected
[  595.338587][   T30] audit: type=1400 audit(2000000359.039:1194): avc:  denied  { bind } for  pid=15852 comm="syz.5.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  595.654469][   T30] audit: type=1400 audit(2000000359.299:1195): avc:  denied  { load_policy } for  pid=15852 comm="syz.5.2819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  596.107217][T15858] SELinux: failed to load policy
[  596.970297][   T30] audit: type=1400 audit(2000000360.659:1196): avc:  denied  { kexec_image_load } for  pid=15860 comm="syz.8.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  597.453487][T15869] audit: audit_backlog=65 > audit_backlog_limit=64
[  597.460387][T15869] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  597.462274][   T30] audit: type=1326 audit(2000000361.109:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15852 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7fc00000
[  597.492405][T15869] audit: backlog limit exceeded
[  597.726320][    T9] usb 10-1: USB disconnect, device number 30
[  597.736082][   T30] audit: type=1326 audit(2000000361.109:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15852 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f079b38e969 code=0x7fc00000
[  597.768592][   T30] audit: type=1326 audit(2000000361.109:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15852 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7fc00000
[  597.959526][   T30] audit: type=1326 audit(2000000361.109:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15852 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7fc00000
[  597.986456][   T30] audit: type=1326 audit(2000000361.109:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15852 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7fc00000
[  598.350441][   T30] audit: type=1326 audit(2000000361.109:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15852 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b38e969 code=0x7fc00000
[  599.527322][T15903] SELinux: failed to load policy
[  600.090937][   T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  600.270750][   T24] usb 7-1: Using ep0 maxpacket: 32
[  600.297797][   T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  600.337295][   T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  600.374951][   T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  600.492408][   T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  600.492561][T15924] nfs: Unknown parameter '
[  600.492561][T15924] '
[  600.502084][   T24] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  600.730341][   T24] usb 7-1: Product: syz
[  600.745065][   T24] usb 7-1: Manufacturer: syz
[  600.749712][   T24] usb 7-1: SerialNumber: syz
[  600.900042][   T24] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input38
[  601.138203][   T24] usb 7-1: USB disconnect, device number 24
[  601.416683][   T24] appletouch 7-1:1.0: input: appletouch disconnected
[  602.656308][   T30] kauditd_printk_skb: 138 callbacks suppressed
[  602.656327][   T30] audit: type=1400 audit(2000000365.389:1341): avc:  denied  { read } for  pid=15928 comm="syz.9.2836" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  608.069345][T11314] sched: DL replenish lagged too much
[  608.852375][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  608.852547][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  609.823133][   T30] audit: type=1400 audit(2000000365.389:1342): avc:  denied  { open } for  pid=15928 comm="syz.9.2836" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  619.094870][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  623.314896][   T30] audit: type=1400 audit(2000000365.389:1343): avc:  denied  { name_bind } for  pid=15928 comm="syz.9.2836" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  624.511250][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  625.433941][   T30] audit: type=1400 audit(2000000365.389:1344): avc:  denied  { node_bind } for  pid=15928 comm="syz.9.2836" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  642.895679][   T30] audit: type=1400 audit(2000000365.389:1345): avc:  denied  { write } for  pid=15928 comm="syz.9.2836" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  736.852258][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  745.240174][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  745.247160][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P15920/1:b..l P5899/1:b..l P11316/1:b..l P15934/1:b..l
[  745.259132][    C0] rcu: 	(detected by 0, t=10503 jiffies, g=59689, q=377 ncpus=2)
[  745.266855][    C0] task:syz.0.2837      state:R  running task     stack:27608 pid:15934 tgid:15930 ppid:15200  task_flags:0x40044c flags:0x00004006
[  745.281430][    C0] Call Trace:
[  745.284711][    C0]  <TASK>
[  745.287623][    C0]  __schedule+0x116f/0x5de0
[  745.292135][    C0]  ? __pfx___schedule+0x10/0x10
[  745.296997][    C0]  ? do_raw_spin_lock+0x12c/0x2b0
[  745.302117][    C0]  ? find_held_lock+0x2b/0x80
[  745.306799][    C0]  ? preempt_schedule_thunk+0x16/0x30
[  745.312183][    C0]  preempt_schedule_common+0x44/0xc0
[  745.317518][    C0]  preempt_schedule_thunk+0x16/0x30
[  745.322726][    C0]  _raw_spin_unlock+0x3e/0x50
[  745.327414][    C0]  unmap_page_range+0xf08/0x4320
[  745.332383][    C0]  ? __pfx_unmap_page_range+0x10/0x10
[  745.337775][    C0]  ? mas_next_slot+0x12d3/0x21b0
[  745.342992][    C0]  ? uprobe_munmap+0x20/0x5c0
[  745.347681][    C0]  unmap_single_vma+0x194/0x2a0
[  745.352548][    C0]  unmap_vmas+0x22c/0x490
[  745.356895][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  745.361834][    C0]  ? mas_next_slot+0x12d3/0x21b0
[  745.366773][    C0]  exit_mmap+0x1b9/0xb90
[  745.371025][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  745.375813][    C0]  ? __lock_acquire+0xaa4/0x1ba0
[  745.380879][    C0]  __mmput+0x12a/0x410
[  745.384952][    C0]  mmput+0x62/0x70
[  745.388653][    C0]  do_exit+0x9d1/0x2c30
[  745.392798][    C0]  ? __pfx___might_resched+0x10/0x10
[  745.398100][    C0]  ? __pfx_do_exit+0x10/0x10
[  745.402694][    C0]  ? do_raw_spin_lock+0x12c/0x2b0
[  745.407734][    C0]  ? find_held_lock+0x2b/0x80
[  745.412423][    C0]  do_group_exit+0xd3/0x2a0
[  745.416921][    C0]  get_signal+0x2673/0x26d0
[  745.421415][    C0]  ? percpu_counter_add_batch+0xb8/0x1f0
[  745.427066][    C0]  ? __pfx_get_signal+0x10/0x10
[  745.431932][    C0]  ? find_held_lock+0x2b/0x80
[  745.436673][    C0]  arch_do_signal_or_restart+0x8f/0x7d0
[  745.442558][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  745.448723][    C0]  ? fd_install+0x244/0x750
[  745.453258][    C0]  syscall_exit_to_user_mode+0x150/0x2a0
[  745.458878][    C0]  do_syscall_64+0xda/0x260
[  745.463378][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  745.469284][    C0] RIP: 0033:0x7fcd9018e969
[  745.473770][    C0] RSP: 002b:00007fcd91029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  745.482196][    C0] RAX: 0000000000000003 RBX: 00007fcd903b5fa0 RCX: 00007fcd9018e969
[  745.490175][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a
[  745.498236][    C0] RBP: 00007fcd90210ab1 R08: 0000000000000000 R09: 0000000000000000
[  745.506309][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  745.514313][    C0] R13: 0000000000000001 R14: 00007fcd903b5fa0 R15: 00007fff2c84bd28
[  745.522315][    C0]  </TASK>
[  745.525392][    C0] task:syz-executor    state:R  running task     stack:23976 pid:11316 tgid:11316 ppid:11310  task_flags:0x400140 flags:0x00000000
[  745.538996][    C0] Call Trace:
[  745.542264][    C0]  <TASK>
[  745.545204][    C0]  __schedule+0x116f/0x5de0
[  745.549837][    C0]  ? __lock_acquire+0x5ca/0x1ba0
[  745.554789][    C0]  ? __pfx___schedule+0x10/0x10
[  745.559624][    C0]  ? mark_held_locks+0x49/0x80
[  745.564558][    C0]  preempt_schedule_irq+0x51/0x90
[  745.569679][    C0]  irqentry_exit+0x36/0x90
[  745.574116][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  745.580088][    C0] RIP: 0010:lock_acquire+0x62/0x350
[  745.585312][    C0] Code: ee 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 52 f4 ec 0e 0f 82 74 02 00 00 8b 35 ea 23 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 ee 0b 12 0f 85 c7 02 00 00 48 83 c4
[  745.605540][    C0] RSP: 0018:ffffc900039df808 EFLAGS: 00000206
[  745.611611][    C0] RAX: 0000000000000046 RBX: ffffffff8e3bf5c0 RCX: 000000005a3aa682
[  745.619571][    C0] RDX: 0000000000000000 RSI: ffffffff8dbbbf57 RDI: ffffffff8bf483a0
[  745.627534][    C0] RBP: 0000000000000002 R08: 5266d60a7c66fcff R09: 0000000000000000
[  745.635504][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[  745.643462][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  745.651459][    C0]  ? unwind_next_frame+0x3f4/0x20a0
[  745.656666][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  745.662819][    C0]  unwind_next_frame+0xd1/0x20a0
[  745.667761][    C0]  ? unwind_next_frame+0xbd/0x20a0
[  745.672873][    C0]  ? __sys_socket+0x14d/0x260
[  745.677550][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  745.683693][    C0]  arch_stack_walk+0x94/0x100
[  745.688390][    C0]  ? __sys_socket+0x14d/0x260
[  745.693164][    C0]  stack_trace_save+0x8e/0xc0
[  745.697837][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  745.703215][    C0]  ? __lock_acquire+0x5ca/0x1ba0
[  745.708184][    C0]  ? __lock_acquire+0x5ca/0x1ba0
[  745.713139][    C0]  save_stack+0x160/0x1f0
[  745.717838][    C0]  ? __pfx_save_stack+0x10/0x10
[  745.722682][    C0]  ? __free_frozen_pages+0x69d/0xff0
[  745.728006][    C0]  ? __put_partials+0x16d/0x1c0
[  745.732882][    C0]  ? qlist_free_all+0x4e/0x120
[  745.737623][    C0]  ? kasan_quarantine_reduce+0x195/0x1e0
[  745.743242][    C0]  ? __kasan_slab_alloc+0x69/0x90
[  745.748276][    C0]  ? kmem_cache_alloc_noprof+0x1cb/0x3b0
[  745.753922][    C0]  ? sk_prot_alloc+0x60/0x2a0
[  745.758613][    C0]  ? sk_alloc+0x36/0xc20
[  745.762839][    C0]  ? inet_create+0x3a1/0x1090
[  745.767522][    C0]  ? __sock_create+0x335/0x8d0
[  745.772293][    C0]  ? __sys_socket+0x14d/0x260
[  745.776965][    C0]  ? page_ext_put+0x3e/0xd0
[  745.781489][    C0]  __reset_page_owner+0x84/0x1a0
[  745.786436][    C0]  __free_frozen_pages+0x69d/0xff0
[  745.791575][    C0]  __put_partials+0x16d/0x1c0
[  745.796432][    C0]  qlist_free_all+0x4e/0x120
[  745.801046][    C0]  kasan_quarantine_reduce+0x195/0x1e0
[  745.806516][    C0]  __kasan_slab_alloc+0x69/0x90
[  745.811384][    C0]  kmem_cache_alloc_noprof+0x1cb/0x3b0
[  745.816854][    C0]  ? sk_prot_alloc+0x60/0x2a0
[  745.821551][    C0]  sk_prot_alloc+0x60/0x2a0
[  745.826059][    C0]  sk_alloc+0x36/0xc20
[  745.830108][    C0]  inet_create+0x3a1/0x1090
[  745.834609][    C0]  ? inet_create+0x93/0x1090
[  745.839216][    C0]  __sock_create+0x335/0x8d0
[  745.843816][    C0]  __sys_socket+0x14d/0x260
[  745.848326][    C0]  ? __pfx___sys_socket+0x10/0x10
[  745.853341][    C0]  ? rcu_is_watching+0x12/0xc0
[  745.858117][    C0]  __x64_sys_socket+0x72/0xb0
[  745.862813][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  745.868023][    C0]  do_syscall_64+0xcd/0x260
[  745.872517][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  745.878408][    C0] RIP: 0033:0x7f8f62590887
[  745.882818][    C0] RSP: 002b:00007ffe488f6fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029
[  745.891314][    C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8f62590887
[  745.899284][    C0] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[  745.907274][    C0] RBP: 00007ffe488f770c R08: 00007ffe488f702c R09: 00007ffe488f7417
[  745.915238][    C0] R10: 00007ffe488f7080 R11: 0000000000000202 R12: 00007f8f62780e40
[  745.923205][    C0] R13: 00000000000927c0 R14: 0000000000092d31 R15: 00007f8f62783000
[  745.931189][    C0]  </TASK>
[  745.934207][    C0] task:kworker/0:6     state:R  running task     stack:23080 pid:5899  tgid:5899  ppid:2      task_flags:0x4208060 flags:0x00004000
[  745.947778][    C0] Workqueue: events_power_efficient gc_worker
[  745.953838][    C0] Call Trace:
[  745.957112][    C0]  <TASK>
[  745.960042][    C0]  __schedule+0x116f/0x5de0
[  745.964551][    C0]  ? __pfx___schedule+0x10/0x10
[  745.969390][    C0]  ? debug_object_activate+0x2ec/0x4c0
[  745.974940][    C0]  ? mark_held_locks+0x49/0x80
[  745.979712][    C0]  preempt_schedule_irq+0x51/0x90
[  745.984732][    C0]  irqentry_exit+0x36/0x90
[  745.989211][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  745.995177][    C0] RIP: 0010:gc_worker+0x2d5/0x16e0
[  746.000292][    C0] Code: 00 00 48 c7 c7 c8 a1 85 90 e8 57 76 04 f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 d5 99 27 f8 58 48 85 db 0f 85 d4 0f 00 00 <e8> 56 9e 27 f8 8b 1d 30 1d f2 06 41 89 dc 31 ff 41 83 e4 01 44 89
[  746.019916][    C0] RSP: 0018:ffffc9000404fb60 EFLAGS: 00000293
[  746.026004][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89938fc9
[  746.033969][    C0] RDX: ffff888030b00000 RSI: ffffffff89938fd8 RDI: 0000000000000007
[  746.041941][    C0] RBP: ffffffff9afaca4c R08: 0000000000000007 R09: 0000000000000000
[  746.050065][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888024400000
[  746.058125][    C0] R13: 0000000000040000 R14: dffffc0000000000 R15: 000000000000179f
[  746.066114][    C0]  ? gc_worker+0xe19/0x16e0
[  746.070609][    C0]  ? gc_worker+0xe28/0x16e0
[  746.075127][    C0]  ? __pfx_gc_worker+0x10/0x10
[  746.079897][    C0]  ? rcu_is_watching+0x12/0xc0
[  746.084685][    C0]  process_one_work+0x9cc/0x1b70
[  746.089633][    C0]  ? __pfx_defense_work_handler+0x10/0x10
[  746.095349][    C0]  ? __pfx_process_one_work+0x10/0x10
[  746.100768][    C0]  ? assign_work+0x1a0/0x250
[  746.105369][    C0]  worker_thread+0x6c8/0xf10
[  746.109946][    C0]  ? __pfx_worker_thread+0x10/0x10
[  746.115053][    C0]  kthread+0x3c2/0x780
[  746.119125][    C0]  ? __pfx_kthread+0x10/0x10
[  746.123733][    C0]  ? __pfx_kthread+0x10/0x10
[  746.128336][    C0]  ? __pfx_kthread+0x10/0x10
[  746.132942][    C0]  ? __pfx_kthread+0x10/0x10
[  746.137524][    C0]  ? rcu_is_watching+0x12/0xc0
[  746.142275][    C0]  ? __pfx_kthread+0x10/0x10
[  746.146872][    C0]  ret_from_fork+0x45/0x80
[  746.151286][    C0]  ? __pfx_kthread+0x10/0x10
[  746.155917][    C0]  ret_from_fork_asm+0x1a/0x30
[  746.160703][    C0]  </TASK>
[  746.163730][    C0] task:dhcpcd-run-hook state:R  running task     stack:25672 pid:15920 tgid:15920 ppid:5480   task_flags:0x400000 flags:0x00004002
[  746.177224][    C0] Call Trace:
[  746.180492][    C0]  <TASK>
[  746.183441][    C0]  __schedule+0x116f/0x5de0
[  746.187960][    C0]  ? find_held_lock+0x2b/0x80
[  746.192666][    C0]  ? is_bpf_text_address+0x94/0x1a0
[  746.197862][    C0]  ? __pfx___schedule+0x10/0x10
[  746.202722][    C0]  ? mark_held_locks+0x49/0x80
[  746.207511][    C0]  preempt_schedule_irq+0x51/0x90
[  746.212555][    C0]  irqentry_exit+0x36/0x90
[  746.216948][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  746.222917][    C0] RIP: 0010:lock_acquire+0x62/0x350
[  746.228129][    C0] Code: ee 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 52 f4 ec 0e 0f 82 74 02 00 00 8b 35 ea 23 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 ee 0b 12 0f 85 c7 02 00 00 48 83 c4
[  746.247840][    C0] RSP: 0018:ffffc90004cdf7c0 EFLAGS: 00000206
[  746.253919][    C0] RAX: 0000000000000046 RBX: ffffffff8e3bf5c0 RCX: 00000000bbabe528
[  746.261885][    C0] RDX: 0000000000000000 RSI: ffffffff8dbbbf57 RDI: ffffffff8bf483a0
[  746.269869][    C0] RBP: 0000000000000002 R08: afdc9d0852442f86 R09: 0000000000000000
[  746.277840][    C0] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000
[  746.285828][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  746.293808][    C0]  ? lock_acquire+0x179/0x350
[  746.298498][    C0]  page_ext_get+0x36/0x1a0
[  746.302928][    C0]  ? page_ext_get+0x25/0x1a0
[  746.307559][    C0]  __reset_page_owner+0x2b/0x1a0
[  746.312529][    C0]  __free_frozen_pages+0x69d/0xff0
[  746.317639][    C0]  __put_partials+0x16d/0x1c0
[  746.322325][    C0]  qlist_free_all+0x4e/0x120
[  746.326924][    C0]  kasan_quarantine_reduce+0x195/0x1e0
[  746.332410][    C0]  __kasan_slab_alloc+0x69/0x90
[  746.337265][    C0]  kmem_cache_alloc_noprof+0x1cb/0x3b0
[  746.342729][    C0]  ? vm_area_dup+0x25/0x760
[  746.347244][    C0]  vm_area_dup+0x25/0x760
[  746.351621][    C0]  copy_process+0x7f67/0x91a0
[  746.356348][    C0]  ? __pfx_copy_process+0x10/0x10
[  746.361397][    C0]  kernel_clone+0xfc/0x960
[  746.365847][    C0]  ? __lock_acquire+0xaa4/0x1ba0
[  746.370797][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  746.375826][    C0]  __do_sys_clone+0xce/0x120
[  746.380410][    C0]  ? __pfx___do_sys_clone+0x10/0x10
[  746.385627][    C0]  ? rcu_is_watching+0x12/0xc0
[  746.390405][    C0]  do_syscall_64+0xcd/0x260
[  746.394909][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.400887][    C0] RIP: 0033:0x7ff0a1a50636
[  746.405315][    C0] RSP: 002b:00007ffeac209f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  746.413729][    C0] RAX: ffffffffffffffda RBX: 00007ffeac209f48 RCX: 00007ff0a1a50636
[  746.421702][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  746.429672][    C0] RBP: 000055fbc9d0e5e0 R08: 0000000000000000 R09: 0000000000000000
[  746.437649][    C0] R10: 00007ff0a18b6f50 R11: 0000000000000246 R12: 000055fbc9d1caa8
[  746.445616][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  746.453612][    C0]  </TASK>
[  746.456631][    C0] rcu: rcu_preempt kthread starved for 9717 jiffies! g59689 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  746.467730][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  746.477695][    C0] rcu: RCU grace-period kthread stack dump:
[  746.483597][    C0] task:rcu_preempt     state:R  running task     stack:27608 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  746.497127][    C0] Call Trace:
[  746.500421][    C0]  <TASK>
[  746.503361][    C0]  __schedule+0x116f/0x5de0
[  746.507897][    C0]  ? __pfx___schedule+0x10/0x10
[  746.512757][    C0]  ? find_held_lock+0x2b/0x80
[  746.517430][    C0]  ? schedule+0x2d7/0x3a0
[  746.521753][    C0]  schedule+0xe7/0x3a0
[  746.525836][    C0]  schedule_timeout+0x123/0x290
[  746.530687][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  746.536057][    C0]  ? __pfx_process_timeout+0x10/0x10
[  746.541350][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  746.547157][    C0]  ? prepare_to_swait_event+0xf5/0x480
[  746.552613][    C0]  rcu_gp_fqs_loop+0x1ea/0xb00
[  746.557389][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  746.562685][    C0]  ? rcu_gp_cleanup+0x7c1/0xd90
[  746.567537][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  746.573336][    C0]  rcu_gp_kthread+0x270/0x380
[  746.578023][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  746.583228][    C0]  ? rcu_is_watching+0x12/0xc0
[  746.587997][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  746.593188][    C0]  ? __kthread_parkme+0x19e/0x250
[  746.598234][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  746.603451][    C0]  kthread+0x3c2/0x780
[  746.607519][    C0]  ? __pfx_kthread+0x10/0x10
[  746.612097][    C0]  ? __pfx_kthread+0x10/0x10
[  746.616686][    C0]  ? __pfx_kthread+0x10/0x10
[  746.621277][    C0]  ? __pfx_kthread+0x10/0x10
[  746.625865][    C0]  ? rcu_is_watching+0x12/0xc0
[  746.630643][    C0]  ? __pfx_kthread+0x10/0x10
[  746.635250][    C0]  ret_from_fork+0x45/0x80
[  746.639678][    C0]  ? __pfx_kthread+0x10/0x10
[  746.644268][    C0]  ret_from_fork_asm+0x1a/0x30
[  746.649020][    C0]  </TASK>
[  746.652042][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  746.658365][    C0] Sending NMI from CPU 0 to CPUs 1:
[  746.663579][    C1] NMI backtrace for cpu 1
[  746.663593][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) 
[  746.663612][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  746.663619][    C1] RIP: 0010:__kasan_check_byte+0x0/0x50
[  746.663640][    C1] Code: fe ff ff 48 8d 42 ff 48 89 c3 e9 89 fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 41 54 49 89 f4 55 48 89 fd 53 e8 0d 1f 00 00 89 c3 84
[  746.663654][    C1] RSP: 0018:ffffc90000a081d8 EFLAGS: 00000002
[  746.663667][    C1] RAX: 0000000000000001 RBX: ffff8880352bd9f0 RCX: 0000000000000002
[  746.663676][    C1] RDX: 0000000000000000 RSI: ffffffff8a166a80 RDI: ffff8880352bd9f0
[  746.663685][    C1] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000
[  746.663692][    C1] R10: ffffffff9084f617 R11: 0000000000000000 R12: 0000000000000001
[  746.663701][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  746.663710][    C1] FS:  0000000000000000(0000) GS:ffff888124ae1000(0000) knlGS:0000000000000000
[  746.663724][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  746.663733][    C1] CR2: 00007fcd91028f98 CR3: 00000000216b6000 CR4: 00000000003526f0
[  746.663743][    C1] Call Trace:
[  746.663748][    C1]  <IRQ>
[  746.663752][    C1]  lock_acquire+0xfc/0x350
[  746.663773][    C1]  ? nf_hook_slow+0x132/0x200
[  746.663798][    C1]  ip6_finish_output2+0x19c0/0x2020
[  746.663820][    C1]  ? ip6_finish_output+0x3f9/0x1360
[  746.663840][    C1]  ip6_finish_output+0x3f9/0x1360
[  746.663858][    C1]  ip6_output+0x1f9/0x540
[  746.663874][    C1]  ? __pfx_ip6_output+0x10/0x10
[  746.663890][    C1]  ip6_local_out+0xcd/0x4a0
[  746.663911][    C1]  synproxy_send_tcp_ipv6+0x59e/0x680
[  746.663930][    C1]  ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10
[  746.663948][    C1]  ? __cookie_v6_init_sequence+0x2d3/0x3c0
[  746.663968][    C1]  synproxy_send_client_synack_ipv6+0x635/0x7e0
[  746.663986][    C1]  ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10
[  746.664001][    C1]  ? nft_socket_eval+0x324/0xb20
[  746.664019][    C1]  nft_synproxy_do_eval+0x93b/0xd80
[  746.664038][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  746.664055][    C1]  ? __lock_acquire+0xaa4/0x1ba0
[  746.664076][    C1]  ? __lock_acquire+0xaa4/0x1ba0
[  746.664095][    C1]  ? __pfx_nft_synproxy_eval+0x10/0x10
[  746.664113][    C1]  nft_do_chain+0x2e6/0x1920
[  746.664129][    C1]  ? ip6t_do_table+0xbf0/0x1be0
[  746.664147][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  746.664172][    C1]  ? __pfx_nf_nat_ipv6_fn+0x10/0x10
[  746.664192][    C1]  nft_do_chain_inet+0x18a/0x340
[  746.664208][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  746.664223][    C1]  ? nf_log_ip6_packet+0x1e0/0x230
[  746.664240][    C1]  ? lock_acquire+0x179/0x350
[  746.664260][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  746.664274][    C1]  nf_hook_slow+0xbb/0x200
[  746.664293][    C1]  nf_hook.constprop.0+0x422/0x750
[  746.664310][    C1]  ? __pfx_ip6_input_finish+0x10/0x10
[  746.664327][    C1]  ? __pfx_nf_hook.constprop.0+0x10/0x10
[  746.664346][    C1]  ? __pfx_ip6_input_finish+0x10/0x10
[  746.664365][    C1]  ip6_input+0xe0/0x2f0
[  746.664381][    C1]  ? __pfx_ip6_input+0x10/0x10
[  746.664398][    C1]  ipv6_rcv+0x265/0x680
[  746.664430][    C1]  ? __pfx_ipv6_rcv+0x10/0x10
[  746.664446][    C1]  __netif_receive_skb_one_core+0x12d/0x1e0
[  746.664467][    C1]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  746.664488][    C1]  ? lock_acquire+0x179/0x350
[  746.664509][    C1]  ? process_backlog+0x3f0/0x15e0
[  746.664527][    C1]  __netif_receive_skb+0x1d/0x160
[  746.664546][    C1]  process_backlog+0x442/0x15e0
[  746.664567][    C1]  __napi_poll.constprop.0+0xb7/0x550
[  746.664586][    C1]  ? rcu_is_watching+0x12/0xc0
[  746.664604][    C1]  net_rx_action+0xa97/0x1010
[  746.664620][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  746.664640][    C1]  ? sched_balance_domains+0x283/0xee0
[  746.664666][    C1]  handle_softirqs+0x216/0x8e0
[  746.664685][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  746.664702][    C1]  __irq_exit_rcu+0x109/0x170
[  746.664718][    C1]  irq_exit_rcu+0x9/0x30
[  746.664733][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  746.664751][    C1]  </IRQ>
[  746.664755][    C1]  <TASK>
[  746.664760][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  746.664775][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  746.664793][    C1] Code: 25 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 1a 1d 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  746.664805][    C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6
[  746.664822][    C1] RAX: 00000000035a8781 RBX: 0000000000000001 RCX: ffffffff8b6cd419
[  746.664831][    C1] RDX: 0000000000000000 RSI: ffffffff8dbe1547 RDI: ffffffff8bf483a0
[  746.664840][    C1] RBP: ffffed1003b5d488 R08: 0000000000000001 R09: ffffed10170a65bd
[  746.664849][    C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001
[  746.664857][    C1] R13: ffff88801daea440 R14: ffffffff9084f610 R15: 0000000000000000
[  746.664869][    C1]  ? ct_kernel_exit+0x139/0x190
[  746.664889][    C1]  default_idle+0x13/0x20
[  746.664907][    C1]  default_idle_call+0x6d/0xb0
[  746.664925][    C1]  do_idle+0x391/0x510
[  746.664941][    C1]  ? __pfx_do_idle+0x10/0x10
[  746.664957][    C1]  ? trace_sched_exit_tp+0x31/0x130
[  746.664977][    C1]  cpu_startup_entry+0x4f/0x60
[  746.664993][    C1]  start_secondary+0x21d/0x2b0
[  746.665014][    C1]  ? __pfx_start_secondary+0x10/0x10
[  746.665036][    C1]  common_startup_64+0x13e/0x148
[  746.665057][    C1]  </TASK>
[  747.334424][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  754.044626][ T1293] ieee802154 phy0 wpan0: encryption failed: -22