last executing test programs:

7m50.755592171s ago: executing program 2 (id=228):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0x22, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0806011886dd06000009bbbbbbbb09bb0180c200000e"], 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0)
r3 = socket$inet6_sctp(0xa, 0x94008d1befcee113, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000100))
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x4e23, 0x2, @remote, 0x7ff}}, {{0xa, 0x4e1f, 0x4, @loopback}}}, 0x108)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0x0, 0x700001b, 0x148, 0xe8, 0x148, 0x198, 0x206, 0x240, 0x198, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0xe8, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ip={@loopback, @rand_addr=0x64010102, 0xffffffff, 0xff, 'caif0\x00', 'wg0\x00', {}, {0xff}, 0x1d, 0x0, 0x78}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(0x0, 0xa5)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000))
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac6433"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg(r4, &(0x7f00000024c0)=[{{&(0x7f0000000500)=@generic={0x23, "41ef70a6493f96548c6772e991d2e709da2174d41450df614c7b98d688e661a1b29a8c059b706bc70885b2ff0f4ead40bdbeb46337ca989e950ae12331f19267f8f0ea634b47a8030073e1ec94e2410ce8287e5487e11994c1fa84627b0281e74be1465e31017d6986fb97fcaeda121d2d887c410e05f321a441404adf67"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)="102788a807ad28d8ec7a40e42a53ebff62a7cebf53fcaebc6c24d10b80846a7102f14cabd9c713036e115a23d1653ac43dc90af4b713546f290b80aa22d9e3", 0x3f}], 0x1, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x13e0}}], 0x4000323, 0xc881)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000)

7m49.255000428s ago: executing program 1 (id=230):
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x181402, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x3, 0x8, 0x800b2, 0xc, "1beb00000e001000000008010100005e0d01fd"})
r1 = syz_open_pts(r0, 0x20800)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44)
syz_clone(0x82200011, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/syz_tun/forwarding\x00', 0x2, 0x0)
write$cgroup_int(r3, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]})
r5 = dup3(r3, r2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f00000000c0)={0x1, 0x0, 0x10000, 0x2000, &(0x7f0000191000/0x2000)=nil, 0x2000})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]})
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000180)={0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="760a000000000000002e68932e000000000018000000009500000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
socket(0xa, 0x801, 0x0)

7m47.071348541s ago: executing program 2 (id=233):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0xfff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(&(0x7f0000000580)=@filename='none\x00', 0x0, &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780), 0x1c3902, 0x0)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000008c0)='addr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
syz_usb_connect(0x5, 0x59, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000940)='source\x00', &(0x7f0000000980)='127.0.0.1:/export\x00', 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x200000)
mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x444a02, 0x8)
socket$kcm(0xa, 0x922000000003, 0x11)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000a}, 0x94)

7m43.375374766s ago: executing program 1 (id=236):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0x22, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0806011886dd06000009bbbbbbbb09bb0180c200000e"], 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280fa00090000000000a84896426b0297b1e91c90a4c047fb35897173d71ed8059c0a8b23456f2cb5ca"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0)
r3 = socket$inet6_sctp(0xa, 0x94008d1befcee113, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000100))
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x4e23, 0x2, @remote, 0x7ff}}, {{0xa, 0x4e1f, 0x4, @loopback}}}, 0x108)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x700001b, 0x148, 0xe8, 0x148, 0x198, 0x206, 0x240, 0x198, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x98, 0xc0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ip={@loopback, @rand_addr=0x64010102, 0xffffffff, 0xff, 'caif0\x00', 'wg0\x00', {}, {0xff}, 0x1d, 0x0, 0x78}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(0x0, 0xa5)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000))
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac6433"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg(r4, &(0x7f00000024c0)=[{{&(0x7f0000000500)=@generic={0x23, "41ef70a6493f96548c6772e991d2e709da2174d41450df614c7b98d688e661a1b29a8c059b706bc70885b2ff0f4ead40bdbeb46337ca989e950ae12331f19267f8f0ea634b47a8030073e1ec94e2410ce8287e5487e11994c1fa84627b0281e74be1465e31017d6986fb97fcaeda121d2d887c410e05f321a441404adf67"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)="102788a807ad28d8ec7a40e42a53ebff62a7cebf53fcaebc6c24d10b80846a7102f14cabd9c713036e115a23d1653ac43dc90af4b713546f290b80aa22d9e3", 0x3f}], 0x1, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x13e0}}], 0x4000323, 0xc881)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000)

7m40.71406798s ago: executing program 1 (id=240):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000002202ec359c1b01cd932f7a1ad652a2705000000000000baeb590000000000fffc050004000000000010000300686173683a69ca5b3bfa"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c08000003060b1090846f02000000000000000000000400050001000700000040acf01e973e3df42a67560bb4d18fbd9e0e174da5d066c20f6ea30e087dfd7eaf352e1a85b5dfab2f90f9cb765186eb62edf5c94d7fe7a5577e351a4d6533d0f53408fee98474d268d1e304c66b3eb7b6573c8e76c2c56a2f6b2cd77dde35556dddcbaf03dd3041ceaff7ec5350f7a3b136b32ff96f78e86c257a62f4e3a379900cb4ae9796de94045106405e05f388613fd08f2a9e15cbab16a67b88f6b948c695c6a8802942764acbcca151ad2d56a2159834bf"], 0x1c}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)='100000', 0x6)
syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/time\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r3, &(0x7f0000000480), 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'ipvlan1\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000e80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0)
ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r3, 0x6}, 0x50)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000600)={<r7=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000640)={0x13, 0x10, 0xfa00, {&(0x7f0000000680), r7, 0x2}}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000a40)={0xda, "1c72de5fef88a81fec1213791a7c6f38474f90cb41448a22916f364ffe0899b3f43a4911c37aa4d46463629edc864de628a46f001a12229b20a3944ce61825da759fad8126f91cd01b55f16bac19e5c6f3c199e0d24a43f6e13dbbb58082c43589d5cfb3de0dbf092b6235b3d7c5db3f43842980ae4ce3666854fce4e3ba5bbf00cd8458652a54621964026583698937412c64acd069e6af0c081a00befada8d6978f73bc28b2106430896ad5933cd03526f13d0938b7fb1e3c0889d1c348cccf40b37754cb4b9a15a64aa863c5ca2deae36898dfd2e49007a6b"})
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x10004004)
r9 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0)
r10 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x418000, 0x3)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3cc3f7d399a11f690cfa7a7c1c13ae4e0e3ad742fa"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
dup3(0xffffffffffffffff, r4, 0x80000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80), &(0x7f0000000cc0), 0x7ff, r11}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000d00)={&(0x7f0000000d40), &(0x7f0000000d80)=""/213, &(0x7f0000000e80), &(0x7f0000000ec0), 0x3, r11}, 0x38)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
syz_usb_connect(0x3, 0x5c, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010002ffffff40c505020000010102030109024a0001010080fa0904000008ffffff0007058102000200070502020002000705830200020007050402000200070585020002000705060200020007058702000200070508020002"], 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000380)='_\x01\x8f\xc7\xae\adX\xfc\x95\xa5\xce\xfa;\xaa<M\xf5\xc9;o\xde\xf71\x8e\x9b\x0f\xfb\xc2\xd3Q=\x98y\xf5W&r\x8b\"\v\x04}/\xa6\x87\xb2Th\xa9\t\xb6?\x83\xcfjX\xdc\xc4}\xac\x8d\xd2*,/\xd9B;\x7f1\x86\x04\x00\x84\xa8u\xb8\x8d\x85\x12\x93N\xcf\x90Q\xd1\x1c\xc0\n\xe8\x1e4Y\x11\xe2\xc1\xde\xc7p\xeb\x8a\x8f\xef~#', &(0x7f00000005c0)='tcp\x00', 0x0)

7m40.380847919s ago: executing program 2 (id=241):
socket$can_bcm(0x1d, 0x2, 0x2)
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff00"], 0x48)
mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @private0, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "3e090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}, @pad1]}]}}}}}, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x8048, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="c323567fea2eb55ab91640ea77eb5f6ae9f6564983ae5689da72d2e7a28657524e863f1102f9bbf99e3f973e4abe7a95eeb4e1e213c0bf915331001e04c028f2dbc32428bb43d87ac6364d93d936435e000aa9cc8dff68141f7e752a1a10d9ec3f0a87583236e7d32f3fa56ba46a6081ee30f26f6c71aca4c7c43bf653cb768932e992", @ANYRES16=r5, @ANYRES8=r3, @ANYRESOCT=r5, @ANYRES64=0x0], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0)

7m38.312761272s ago: executing program 2 (id=243):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0x22, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0806011886dd06000009bbbbbbbb09bb0180c200000e"], 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280fa00090000000000a84896426b0297b1e91c90a4c047fb35897173d71ed8059c0a8b23456f2cb5ca"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0)
r3 = socket$inet6_sctp(0xa, 0x94008d1befcee113, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000100))
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x4e23, 0x2, @remote, 0x7ff}}, {{0xa, 0x4e1f, 0x4, @loopback}}}, 0x108)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0x0, 0x700001b, 0x148, 0xe8, 0x148, 0x198, 0x206, 0x240, 0x198, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0xe8, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ip={@loopback, @rand_addr=0x64010102, 0xffffffff, 0xff, 'caif0\x00', 'wg0\x00', {}, {0xff}, 0x1d, 0x0, 0x78}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(0x0, 0xa5)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000))
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg(r4, &(0x7f00000024c0)=[{{&(0x7f0000000500)=@generic={0x23, "41ef70a6493f96548c6772e991d2e709da2174d41450df614c7b98d688e661a1b29a8c059b706bc70885b2ff0f4ead40bdbeb46337ca989e950ae12331f19267f8f0ea634b47a8030073e1ec94e2410ce8287e5487e11994c1fa84627b0281e74be1465e31017d6986fb97fcaeda121d2d887c410e05f321a441404adf67"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)="102788a807ad28d8ec7a40e42a53ebff62a7cebf53fcaebc6c24d10b80846a7102f14cabd9c713036e115a23d1653ac43dc90af4b713546f290b80aa22d9e3", 0x3f}], 0x1, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x13e0}}], 0x4000323, 0xc881)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000)

7m36.23234145s ago: executing program 1 (id=248):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c08000003060b1090846f02000000000000000000000400050001000700000040acf01e973e3df42a67560bb4d18fbd9e0e174da5d066c20f6ea30e087dfd7eaf352e1a85b5dfab2f90f9cb765186eb62edf5c94d7fe7a5577e351a4d6533d0f53408fee98474d268d1e304c66b3eb7b6573c8e76c2c56a2f6b2cd77dde35556dddcbaf03dd3041ceaff7ec5350f7a3b136b32ff96f78e86c257a62f4e3a379900cb4ae9796de94045106405e05f388613fd08f2a9e15cbab16a67b88f6b948c695c6a8802942764acbcca151ad2d56a2159834bf"], 0x1c}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r1, &(0x7f0000000400)='100000', 0x6)
syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/time\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000480), 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'ipvlan1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000e80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0)
ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r2, 0x6}, 0x50)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000600)={<r6=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000640)={0x13, 0x10, 0xfa00, {&(0x7f0000000680), r6, 0x2}}, 0x18)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000a40)={0xda, "1c72de5fef88a81fec1213791a7c6f38474f90cb41448a22916f364ffe0899b3f43a4911c37aa4d46463629edc864de628a46f001a12229b20a3944ce61825da759fad8126f91cd01b55f16bac19e5c6f3c199e0d24a43f6e13dbbb58082c43589d5cfb3de0dbf092b6235b3d7c5db3f43842980ae4ce3666854fce4e3ba5bbf00cd8458652a54621964026583698937412c64acd069e6af0c081a00befada8d6978f73bc28b2106430896ad5933cd03526f13d0938b7fb1e3c0889d1c348cccf40b37754cb4b9a15a64aa863c5ca2deae36898dfd2e49007a6b"})
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x10004004)
r8 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0)
r9 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x418000, 0x3)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3cc3f7d399a11f690cfa7a7c1c13ae4e0e3ad742fa"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
dup3(0xffffffffffffffff, r3, 0x80000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80), &(0x7f0000000cc0), 0x7ff, r10}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000d00)={&(0x7f0000000d40), &(0x7f0000000d80)=""/213, &(0x7f0000000e80), &(0x7f0000000ec0), 0x3, r10}, 0x38)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
syz_usb_connect(0x3, 0x5c, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010002ffffff40c505020000010102030109024a0001010080fa0904000008ffffff0007058102000200070502020002000705830200020007050402000200070585020002000705060200020007058702000200070508020002"], 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000380)='_\x01\x8f\xc7\xae\adX\xfc\x95\xa5\xce\xfa;\xaa<M\xf5\xc9;o\xde\xf71\x8e\x9b\x0f\xfb\xc2\xd3Q=\x98y\xf5W&r\x8b\"\v\x04}/\xa6\x87\xb2Th\xa9\t\xb6?\x83\xcfjX\xdc\xc4}\xac\x8d\xd2*,/\xd9B;\x7f1\x86\x04\x00\x84\xa8u\xb8\x8d\x85\x12\x93N\xcf\x90Q\xd1\x1c\xc0\n\xe8\x1e4Y\x11\xe2\xc1\xde\xc7p\xeb\x8a\x8f\xef~#', &(0x7f00000005c0)='tcp\x00', 0x0)

7m31.739510707s ago: executing program 1 (id=251):
socket$can_bcm(0x1d, 0x2, 0x2)
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff00"], 0x48)
mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @private0, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "3e090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}, @pad1]}]}}}}}, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x8048, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="c323567fea2eb55ab91640ea77eb5f6ae9f6564983ae5689da72d2e7a28657524e863f1102f9bbf99e3f973e4abe7a95eeb4e1e213c0bf915331001e04c028f2dbc32428bb43d87ac6364d93d936435e000aa9cc8dff68141f7e752a1a10d9ec3f0a87583236e7d32f3fa56ba46a6081ee30f26f6c71aca4c7c43bf653cb768932e992", @ANYBLOB="99061762e348c5774f5a7938c05120d53914d04aa1519eb03dece010d02e65f8ec0ebc6e66684ca7986bbccf1c260bdcd5c1a550eef5330ae0", @ANYRES8=r3, @ANYRESOCT=r5, @ANYRES64=0x0], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0)

7m30.719896495s ago: executing program 1 (id=253):
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x181402, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x3, 0x8, 0x800b2, 0xc, "1beb00000e001000000008010100005e0d01fd"})
r1 = syz_open_pts(r0, 0x20800)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44)
syz_clone(0x82200011, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/syz_tun/forwarding\x00', 0x2, 0x0)
write$cgroup_int(r3, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]})
r5 = dup3(r3, r2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f00000000c0)={0x1, 0x0, 0x10000, 0x2000, &(0x7f0000191000/0x2000)=nil, 0x2000})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]})
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000180)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="760a000000000000002e68932e000000000018000000009500000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r9 = socket(0xa, 0x801, 0x0)
getsockopt(r9, 0x29, 0x40, 0x0, &(0x7f0000001ffc)=0x54)

7m26.449049736s ago: executing program 2 (id=257):
socket$can_bcm(0x1d, 0x2, 0x2)
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff00"], 0x48)
mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @private0, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "3e090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}, @pad1]}]}}}}}, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x8048, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="c323567fea2eb55ab91640ea77eb5f6ae9f6564983ae5689da72d2e7a28657524e863f1102f9bbf99e3f973e4abe7a95eeb4e1e213c0bf915331001e04c028f2dbc32428bb43d87ac6364d93d936435e000aa9cc8dff68141f7e752a1a10d9ec3f0a87583236e7d32f3fa56ba46a6081ee30f26f6c71aca4c7c43bf653cb768932e992", @ANYRES16=r5, @ANYBLOB="99061762e348c5774f5a7938c05120d53914d04aa1519eb03dece010d0", @ANYRES8=r3, @ANYRESOCT=r5, @ANYRES64=0x0], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0)

7m25.175777385s ago: executing program 2 (id=259):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000002202ec359c1b01cd932f7a1ad652a2705000000000000baeb590000000000fffc050004000000000010000300686173683a69ca5b3bfa"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c08000003060b1090846f02000000000000000000000400050001000700000040acf01e973e3df42a67560bb4d18fbd9e0e174da5d066c20f6ea30e087dfd7eaf352e1a85b5dfab2f90f9cb765186eb62edf5c94d7fe7a5577e351a4d6533d0f53408fee98474d268d1e304c66b3eb7b6573c8e76c2c56a2f6b2cd77dde35556dddcbaf03dd3041ceaff7ec5350f7a3b136b32ff96f78e86c257a62f4e3a379900cb4ae9796de94045106405e05f388613fd08f2a9e15cbab16a67b88f6b948c695c6a8802942764acbcca151ad2d56a2159834bf"], 0x1c}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)='100000', 0x6)
syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/time\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r3, &(0x7f0000000480), 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'ipvlan1\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000e80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0)
ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r3, 0x6}, 0x50)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000600)={<r7=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000640)={0x13, 0x10, 0xfa00, {&(0x7f0000000680), r7, 0x2}}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000a40)={0xda, "1c72de5fef88a81fec1213791a7c6f38474f90cb41448a22916f364ffe0899b3f43a4911c37aa4d46463629edc864de628a46f001a12229b20a3944ce61825da759fad8126f91cd01b55f16bac19e5c6f3c199e0d24a43f6e13dbbb58082c43589d5cfb3de0dbf092b6235b3d7c5db3f43842980ae4ce3666854fce4e3ba5bbf00cd8458652a54621964026583698937412c64acd069e6af0c081a00befada8d6978f73bc28b2106430896ad5933cd03526f13d0938b7fb1e3c0889d1c348cccf40b37754cb4b9a15a64aa863c5ca2deae36898dfd2e49007a6b"})
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x10004004)
r9 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0)
r10 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x418000, 0x3)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3cc3f7d399a11f690cfa7a7c1c13ae4e0e3ad742fa"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
dup3(0xffffffffffffffff, r4, 0x80000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80), &(0x7f0000000cc0), 0x7ff, r11}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000d00)={&(0x7f0000000d40), &(0x7f0000000d80)=""/213, &(0x7f0000000e80), &(0x7f0000000ec0), 0x3, r11}, 0x38)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
syz_usb_connect(0x3, 0x5c, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010002ffffff40c505020000010102030109024a0001010080fa0904000008ffffff0007058102000200070502020002000705830200020007050402000200070585020002000705060200020007058702000200070508020002"], 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000380)='_\x01\x8f\xc7\xae\adX\xfc\x95\xa5\xce\xfa;\xaa<M\xf5\xc9;o\xde\xf71\x8e\x9b\x0f\xfb\xc2\xd3Q=\x98y\xf5W&r\x8b\"\v\x04}/\xa6\x87\xb2Th\xa9\t\xb6?\x83\xcfjX\xdc\xc4}\xac\x8d\xd2*,/\xd9B;\x7f1\x86\x04\x00\x84\xa8u\xb8\x8d\x85\x12\x93N\xcf\x90Q\xd1\x1c\xc0\n\xe8\x1e4Y\x11\xe2\xc1\xde\xc7p\xeb\x8a\x8f\xef~#', &(0x7f00000005c0)='tcp\x00', 0x0)

7m14.226252857s ago: executing program 32 (id=253):
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x181402, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x3, 0x8, 0x800b2, 0xc, "1beb00000e001000000008010100005e0d01fd"})
r1 = syz_open_pts(r0, 0x20800)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44)
syz_clone(0x82200011, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/syz_tun/forwarding\x00', 0x2, 0x0)
write$cgroup_int(r3, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]})
r5 = dup3(r3, r2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f00000000c0)={0x1, 0x0, 0x10000, 0x2000, &(0x7f0000191000/0x2000)=nil, 0x2000})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]})
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000180)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="760a000000000000002e68932e000000000018000000009500000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r9 = socket(0xa, 0x801, 0x0)
getsockopt(r9, 0x29, 0x40, 0x0, &(0x7f0000001ffc)=0x54)

7m8.563361874s ago: executing program 33 (id=259):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000002202ec359c1b01cd932f7a1ad652a2705000000000000baeb590000000000fffc050004000000000010000300686173683a69ca5b3bfa"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c08000003060b1090846f02000000000000000000000400050001000700000040acf01e973e3df42a67560bb4d18fbd9e0e174da5d066c20f6ea30e087dfd7eaf352e1a85b5dfab2f90f9cb765186eb62edf5c94d7fe7a5577e351a4d6533d0f53408fee98474d268d1e304c66b3eb7b6573c8e76c2c56a2f6b2cd77dde35556dddcbaf03dd3041ceaff7ec5350f7a3b136b32ff96f78e86c257a62f4e3a379900cb4ae9796de94045106405e05f388613fd08f2a9e15cbab16a67b88f6b948c695c6a8802942764acbcca151ad2d56a2159834bf"], 0x1c}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)='100000', 0x6)
syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/time\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r3, &(0x7f0000000480), 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'ipvlan1\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000e80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0)
ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r3, 0x6}, 0x50)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000600)={<r7=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000640)={0x13, 0x10, 0xfa00, {&(0x7f0000000680), r7, 0x2}}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000a40)={0xda, "1c72de5fef88a81fec1213791a7c6f38474f90cb41448a22916f364ffe0899b3f43a4911c37aa4d46463629edc864de628a46f001a12229b20a3944ce61825da759fad8126f91cd01b55f16bac19e5c6f3c199e0d24a43f6e13dbbb58082c43589d5cfb3de0dbf092b6235b3d7c5db3f43842980ae4ce3666854fce4e3ba5bbf00cd8458652a54621964026583698937412c64acd069e6af0c081a00befada8d6978f73bc28b2106430896ad5933cd03526f13d0938b7fb1e3c0889d1c348cccf40b37754cb4b9a15a64aa863c5ca2deae36898dfd2e49007a6b"})
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x10004004)
r9 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0)
r10 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x418000, 0x3)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3cc3f7d399a11f690cfa7a7c1c13ae4e0e3ad742fa"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
dup3(0xffffffffffffffff, r4, 0x80000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80), &(0x7f0000000cc0), 0x7ff, r11}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000d00)={&(0x7f0000000d40), &(0x7f0000000d80)=""/213, &(0x7f0000000e80), &(0x7f0000000ec0), 0x3, r11}, 0x38)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
syz_usb_connect(0x3, 0x5c, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010002ffffff40c505020000010102030109024a0001010080fa0904000008ffffff0007058102000200070502020002000705830200020007050402000200070585020002000705060200020007058702000200070508020002"], 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000380)='_\x01\x8f\xc7\xae\adX\xfc\x95\xa5\xce\xfa;\xaa<M\xf5\xc9;o\xde\xf71\x8e\x9b\x0f\xfb\xc2\xd3Q=\x98y\xf5W&r\x8b\"\v\x04}/\xa6\x87\xb2Th\xa9\t\xb6?\x83\xcfjX\xdc\xc4}\xac\x8d\xd2*,/\xd9B;\x7f1\x86\x04\x00\x84\xa8u\xb8\x8d\x85\x12\x93N\xcf\x90Q\xd1\x1c\xc0\n\xe8\x1e4Y\x11\xe2\xc1\xde\xc7p\xeb\x8a\x8f\xef~#', &(0x7f00000005c0)='tcp\x00', 0x0)

3m2.645820361s ago: executing program 0 (id=656):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000800)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000800)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r2, &(0x7f0000000840)='\x00', 0x1, 0x0, &(0x7f0000000880)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000008c0)=0x81, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./trace/current_tracer\x00', 0x2, 0x0)
preadv(r3, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/237, 0xed}], 0x1, 0xf, 0x94b8) (async)
preadv(r3, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/237, 0xed}], 0x1, 0xf, 0x94b8)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000ac0)={0x8, 'wg2\x00', {'gre0\x00'}, 0x7})
recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0xf8d}], 0x1, 0x10122, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@updpolicy={0xb8, 0x13, 0x100, 0x1, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x1, 0x0, 0xee01}, {0x9, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50, 0x6b4d}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)
syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010403010902240001000000000904ed0002ff5d810009050303000000050009058a0300c0"], 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x8, 0x20, 0xcc, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0xf, {{0x9, 0x24, 0x6, 0x0, 0x0, "de2bfd9b"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x4, 0x2, 0xfa}, [@obex={0x5, 0x24, 0x15, 0xe0e6}, @mdlm={0x15, 0x24, 0x12, 0x9}, @country_functional={0x6, 0x24, 0x7, 0x7f, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x4, 0x8}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x43, 0x3, 0xd9, 0xc7, 0x2}, 0x2b, &(0x7f0000000100)={0x5, 0xf, 0x2b, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x4, 0xf00, 0x7, [0x7f8000, 0xc000, 0xffc030]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa0, 0x7f, 0xe, 0x1000, 0xf}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x860}}, {0xf9, &(0x7f0000000180)=@string={0xf9, 0x3, "312bc030ee97d16263fcf769f83150545222f60207fd690b2102b9f5ee52ab1d78f221e8d690b241e354ff2ecfcae7e004fca477174c0420163e9bd41d27cb54ff519d166cce14c7e2bad29ae88219faa201574cb531e2251ee23504b895c6d1a28950e1a009a77e4ada1281f988af9b37b53c0b4064e60420f2889c13e68504bca74613a77c3db97824a9cb1645151bb30b50b8ed8a780aad399a85c76d7e5e5b679b5592b7e192f3270589e36f4675cff46b9e2f929d6180e954083d47008b906855b657a4bc46668b606ef925cf240403ddaef56130e269ea91988c4ed3aa1750ec9137dd584f97ac1234934409eef6ef2049cdf12b"}}, {0xf5, &(0x7f0000000280)=@string={0xf5, 0x3, "9c0e75038ca952f3c64727e729236e3793935687823c22250787ed0c22f81c473fb6bf36bddb4bd26c2cd503eb1655775aca559cf73fe2f0496195916ce1f0e4ae90725be0ddb330d123a9734c6fe4c01d6236b1b3afb43f8e43eec06dd9f884ec2bcf506e338230a0972fc89babf7b5e60e4af0f6726f43b551417b05b41d7c3d7c42ab6cba912de346d0ea2949504db4713578064725993ba07d20489802de49bfc64d16e66eafcd24ab715ef30c45989195a3b02772a708f3efc0b6b93e836d9b9dfd90c894b177ebcd410f9df43716ff8589f99af4f7ea948280ddeb1c21ff15a9fa24b8f59ef601402890e3c98adba402"}}]}) (async)
syz_usb_connect$cdc_ecm(0x6, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x8, 0x20, 0xcc, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0xf, {{0x9, 0x24, 0x6, 0x0, 0x0, "de2bfd9b"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x4, 0x2, 0xfa}, [@obex={0x5, 0x24, 0x15, 0xe0e6}, @mdlm={0x15, 0x24, 0x12, 0x9}, @country_functional={0x6, 0x24, 0x7, 0x7f, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x4, 0x8}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x43, 0x3, 0xd9, 0xc7, 0x2}, 0x2b, &(0x7f0000000100)={0x5, 0xf, 0x2b, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x4, 0xf00, 0x7, [0x7f8000, 0xc000, 0xffc030]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa0, 0x7f, 0xe, 0x1000, 0xf}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x860}}, {0xf9, &(0x7f0000000180)=@string={0xf9, 0x3, "312bc030ee97d16263fcf769f83150545222f60207fd690b2102b9f5ee52ab1d78f221e8d690b241e354ff2ecfcae7e004fca477174c0420163e9bd41d27cb54ff519d166cce14c7e2bad29ae88219faa201574cb531e2251ee23504b895c6d1a28950e1a009a77e4ada1281f988af9b37b53c0b4064e60420f2889c13e68504bca74613a77c3db97824a9cb1645151bb30b50b8ed8a780aad399a85c76d7e5e5b679b5592b7e192f3270589e36f4675cff46b9e2f929d6180e954083d47008b906855b657a4bc46668b606ef925cf240403ddaef56130e269ea91988c4ed3aa1750ec9137dd584f97ac1234934409eef6ef2049cdf12b"}}, {0xf5, &(0x7f0000000280)=@string={0xf5, 0x3, "9c0e75038ca952f3c64727e729236e3793935687823c22250787ed0c22f81c473fb6bf36bddb4bd26c2cd503eb1655775aca559cf73fe2f0496195916ce1f0e4ae90725be0ddb330d123a9734c6fe4c01d6236b1b3afb43f8e43eec06dd9f884ec2bcf506e338230a0972fc89babf7b5e60e4af0f6726f43b551417b05b41d7c3d7c42ab6cba912de346d0ea2949504db4713578064725993ba07d20489802de49bfc64d16e66eafcd24ab715ef30c45989195a3b02772a708f3efc0b6b93e836d9b9dfd90c894b177ebcd410f9df43716ff8589f99af4f7ea948280ddeb1c21ff15a9fa24b8f59ef601402890e3c98adba402"}}]})

3m2.594536942s ago: executing program 6 (id=657):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="e2", 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1f, 0x9, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000001c0)=""/157}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f00000002c0), &(0x7f0000000400)=""/75}, 0x20)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0x18, 0xfe, "6249ee9b7fd6d4c942af98e2ea72267710012dce"}]]}, 0x40}}, 0x40)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@xino_off}, {@redirect_dir_nofollow}], [], 0x2c})
chdir(&(0x7f0000000580)='./file0\x00')
lchown(&(0x7f00000005c0)='./cgroup\x00', 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_flags=0x1000})

3m2.403134632s ago: executing program 6 (id=658):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000400)=0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x17f, 0x4, 0x11, 0x1, 0x8}, &(0x7f0000000040)=0x9c)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003480), 0x81402, 0x0)
ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000001c0)=0x8)
write(r0, &(0x7f0000000380)='10000', 0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x10000008})
write(r5, &(0x7f0000000200)='1', 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r7, &(0x7f0000000280)='0', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x1, 0x0, 0x0, 0x41100}, 0x94)

3m0.892962501s ago: executing program 6 (id=661):
socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000440)='dummy_udc', 0x9)

3m0.800545374s ago: executing program 4 (id=662):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) (fail_nth: 1)

2m59.805936515s ago: executing program 6 (id=664):
r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800})
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000400)={0x0, 0x1}, 0x0)

2m59.697084625s ago: executing program 6 (id=665):
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x181402, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x3, 0x8, 0x800b2, 0xc, "1beb00000e001000000008010100005e0d01fd"})
r1 = syz_open_pts(r0, 0x20800)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44)
syz_clone(0x82200011, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/syz_tun/forwarding\x00', 0x2, 0x0)
write$cgroup_int(r3, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]})
r5 = dup3(r3, r2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f00000000c0)={0x1, 0x0, 0x10000, 0x2000, &(0x7f0000191000/0x2000)=nil, 0x2000})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="760a000000000000002e68932e000000000018000000009500000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r9 = socket(0xa, 0x801, 0x0)
getsockopt(r9, 0x29, 0x40, 0x0, 0x0)

2m59.448495407s ago: executing program 0 (id=666):
r0 = syz_open_dev$media(0x0, 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
pselect6(0x40, &(0x7f0000001540)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, 0x0, &(0x7f00000015c0)={0x0, 0x3938700}, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x3, 0x0, 0x7fff2000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

2m59.227384852s ago: executing program 0 (id=667):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f0000000180)=ANY=[])
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0)
syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000040)='\x00')
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "3a91210c", {0x1, 0x101, 0x9, 0x3, 0x9}})
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, "0f4e68d2", {0x3, 0x103, 0x0, 0x8, 0x0, 0x2, 0x1}})

2m58.856295761s ago: executing program 6 (id=668):
syz_open_dev$media(0x0, 0x7fdffffe, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000000c0)={0x2, 0x0, [{0x10, 0x0, 0x10000000001780}, {0x10, 0x0, 0x8}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000003c0), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000400), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000440), 0x0, 0x3111c0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000500)={'@\x00', 0x0, 0x6, 0x3, 0x2, 0x1, "ff0000c8e29b15e5a8c8c7ffff00", '\x00\x00\a\x00', "020500", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff0200", "f7ffffffffffffffbdf9a2c5"]})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x4, &(0x7f0000000640)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x13}, [@ldst={0x4, 0x0, 0x4, 0x5}]}, &(0x7f0000000680)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8}, 0x8, 0x10, &(0x7f0000000700), 0x10}, 0x94)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000740)={0x0, 0x3, 0x2000000000000002, 0x1})
r7 = syz_open_dev$I2C(&(0x7f0000000780), 0x0, 0x0)
ioctl$I2C_PEC(r7, 0x708, 0x6)
openat$vcs(0xffffffffffffff9c, 0x0, 0x101000, 0x0)

2m58.63940532s ago: executing program 4 (id=670):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000380)={0x20, 0x0, 0x1a, 0x0, &(0x7f0000000100)=[{}, {}]})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000440)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0xe, r1, 0x0, &(0x7f0000000040)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x6})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c})
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, <r3=>0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)})
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000})
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, <r5=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, <r6=>0x0, 0x0, 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1})
close(r5)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1})
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10})
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1})
close(r0)

2m58.004069475s ago: executing program 4 (id=672):
socket$can_bcm(0x1d, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @private0, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x15, "3e090e541b64f22a8982d3f5aaacd21a0ca186608b"}, @pad1]}]}}}}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x8048, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="c323567fea2eb55ab91640ea77eb5f6ae9f6564983ae5689da72d2e7a28657524e863f1102f9bbf99e3f973e4abe7a95eeb4e1e213c0bf915331001e04c028f2dbc32428bb43d87ac6364d93d936435e000aa9cc8dff68141f7e752a1a10d9ec3f0a87583236e7d32f3fa56ba46a6081ee30f26f6c71aca4c7c43bf653cb768932e992", @ANYRES16, @ANYBLOB="99061762e348c5774f5a7938c05120d53914d04aa1519eb03dece010d02e65f8ec0ebc6e66684ca7986bbccf1c260bdcd5c1a550eef5330ae0", @ANYRES8=r3, @ANYRESOCT, @ANYRES64=0x0], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0)

2m57.059957743s ago: executing program 4 (id=674):
socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000440)='dummy_udc.', 0xa)

2m56.508290998s ago: executing program 4 (id=677):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000002280)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x100}, 'syz0\x00', 0x2f})
ioctl$UI_DEV_CREATE(r3, 0x5501)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x2020)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10)

2m50.58285888s ago: executing program 0 (id=679):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x30004800)
setns(0xc9, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xac, 0x4400)
ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/175)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x803, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000180)={@dev, @local, @broadcast}, &(0x7f00000001c0)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000500), 0x40000000000009f, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x70, 0x3, "", [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x3, 0x4, 0x9b}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x110, 0x3, 0x7f, 0x4, 0xff, 0x9}, 0x16, &(0x7f0000000780)={0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x38, 0x1, 0x12, 0x3, 0x9}]}, 0x5, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x98, &(0x7f0000000800)=@string={0x98, 0x3, "6856d096988d8795582b480724a4ff2c318f1e772150feb0041b9660ed1930a26fbaaeaf1807a33af3c2075a5b7f0c6fe2cd46d97f498779e0b7fed8d81958490cb43622a9cfa9c8468c51d209238f11c57fe004de664116d7829119601927b78371b3fade87e0a8f3ba27d0de5d75668b44c9d5e26142dfcd18facdac983e129d7acaffee35c0dee252e59fed2179b63ec4db5c817d"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x430}}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./dev/ttyGS0\x00', 0x2, 0x0)
write(r3, 0x0, 0x0)

2m48.0347827s ago: executing program 4 (id=680):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r5, &(0x7f0000002500)=""/102392, 0x18ff8)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f000001b500)='io\x00')
read$FUSE(r6, &(0x7f000001b540)={0x2020, 0x0, 0x0, <r7=>0x0, <r8=>0x0}, 0x120a)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x0, r7, 0x0, r7, r8, 0x80, 0xcf6}, 0x0, 0x0, 0x5, 0x7, 0x7, 0x9, 0xf2c, 0x1, 0x2, 0x3ff, r3, r4})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f000001d580)={0x0, 0x0, "020000b74e00"})
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f000001d5c0)={0x0, 0x0, &(0x7f000001d600)={&(0x7f000001d640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4044811}, 0xc080)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f000001d680)={&(0x7f000001d6c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000001d700)={&(0x7f000001d740)=ANY=[@ANYBLOB="4c000000530410022c9d7000fddbdf2513007cff19fadb6270b6521a8eb3bfecf43afc0bb0de635a9cb9e50109d98728e3f297c48c125689f9774d084f3215bb95bdbcda0100000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004841}, 0x20044000)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f000001d7c0)={0x0, 0x0, 0x0}, 0x80)
shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f000001d800)={0x0, 0x0, &(0x7f000001d840)={&(0x7f000001d880)=ANY=[@ANYBLOB="3c1000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5bbf0100000000001c0012800b00010062726964676500000c0002800500190000000000"], 0x3c}}, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4204, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000001500)=""/4096, 0x1000})

2m40.473086124s ago: executing program 34 (id=668):
syz_open_dev$media(0x0, 0x7fdffffe, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000000c0)={0x2, 0x0, [{0x10, 0x0, 0x10000000001780}, {0x10, 0x0, 0x8}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000003c0), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000400), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000440), 0x0, 0x3111c0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000500)={'@\x00', 0x0, 0x6, 0x3, 0x2, 0x1, "ff0000c8e29b15e5a8c8c7ffff00", '\x00\x00\a\x00', "020500", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff0200", "f7ffffffffffffffbdf9a2c5"]})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x4, &(0x7f0000000640)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x13}, [@ldst={0x4, 0x0, 0x4, 0x5}]}, &(0x7f0000000680)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8}, 0x8, 0x10, &(0x7f0000000700), 0x10}, 0x94)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000740)={0x0, 0x3, 0x2000000000000002, 0x1})
r7 = syz_open_dev$I2C(&(0x7f0000000780), 0x0, 0x0)
ioctl$I2C_PEC(r7, 0x708, 0x6)
openat$vcs(0xffffffffffffff9c, 0x0, 0x101000, 0x0)

2m40.104165545s ago: executing program 0 (id=683):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00')
close_range(r0, 0xffffffffffffffff, 0x0)

2m32.119000828s ago: executing program 0 (id=686):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x143942, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
waitid(0x2, r1, &(0x7f0000000180), 0x4, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000380), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x8, 0x0, 0x7fff0000}]})
timer_create(0x3, 0x0, &(0x7f0000000480)=<r4=>0x0)
timer_getoverrun(r4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', r5, 0x4, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a00)={'syzkaller1\x00', 0xc201})
r6 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_read(r6, 0x1, 0x0, 0x0)
syz_usb_ep_read(r6, 0x1, 0x0, 0x0)
syz_usb_ep_read(r6, 0x1, 0x0, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000a40)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000947800040a0300050200000000000000000002d58838068b91000000"], 0x4e)

2m30.693814923s ago: executing program 35 (id=680):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r5, &(0x7f0000002500)=""/102392, 0x18ff8)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f000001b500)='io\x00')
read$FUSE(r6, &(0x7f000001b540)={0x2020, 0x0, 0x0, <r7=>0x0, <r8=>0x0}, 0x120a)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x0, r7, 0x0, r7, r8, 0x80, 0xcf6}, 0x0, 0x0, 0x5, 0x7, 0x7, 0x9, 0xf2c, 0x1, 0x2, 0x3ff, r3, r4})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f000001d580)={0x0, 0x0, "020000b74e00"})
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f000001d5c0)={0x0, 0x0, &(0x7f000001d600)={&(0x7f000001d640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4044811}, 0xc080)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f000001d680)={&(0x7f000001d6c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000001d700)={&(0x7f000001d740)=ANY=[@ANYBLOB="4c000000530410022c9d7000fddbdf2513007cff19fadb6270b6521a8eb3bfecf43afc0bb0de635a9cb9e50109d98728e3f297c48c125689f9774d084f3215bb95bdbcda0100000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004841}, 0x20044000)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f000001d7c0)={0x0, 0x0, 0x0}, 0x80)
shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f000001d800)={0x0, 0x0, &(0x7f000001d840)={&(0x7f000001d880)=ANY=[@ANYBLOB="3c1000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5bbf0100000000001c0012800b00010062726964676500000c0002800500190000000000"], 0x3c}}, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4204, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000001500)=""/4096, 0x1000})

2m15.201084379s ago: executing program 36 (id=686):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x143942, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
waitid(0x2, r1, &(0x7f0000000180), 0x4, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000380), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x8, 0x0, 0x7fff0000}]})
timer_create(0x3, 0x0, &(0x7f0000000480)=<r4=>0x0)
timer_getoverrun(r4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', r5, 0x4, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a00)={'syzkaller1\x00', 0xc201})
r6 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_read(r6, 0x1, 0x0, 0x0)
syz_usb_ep_read(r6, 0x1, 0x0, 0x0)
syz_usb_ep_read(r6, 0x1, 0x0, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000a40)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000947800040a0300050200000000000000000002d58838068b91000000"], 0x4e)

2m13.485792681s ago: executing program 5 (id=694):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x75, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x4, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd, 0x0, 0x4}}}}}]}}]}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file2\x00', 0x0)
setuid(0xee01)
r1 = getpid()
prlimit64(r1, 0x7, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file2\x00', 0x1b, 0x8)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0)

2m1.893383386s ago: executing program 5 (id=696):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1})
r3 = socket$unix(0x1, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3}, {0xfff1, 0x7}, {0x0, 0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x8004)
sendmsg$nl_route_sched(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0x3, 0xffff}, {0x9, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r4 = openat(0xffffffffffffffff, 0x0, 0x290143, 0x80)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r5 = getpgid(0x0)
r6 = syz_pidfd_open(r5, 0x0)
r7 = pidfd_getfd(r6, r6, 0x0)
setns(r7, 0x66020000)
mount$9p_fd(0x0, &(0x7f00000004c0)='.\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x80001)
move_mount(r8, &(0x7f0000000580)='.\x00', r4, &(0x7f00000005c0)='./file0\x00', 0x2)
mount$bind(&(0x7f0000000600)='.\x00', &(0x7f0000000640)='./file0/../file0\x00', 0x0, 0x145091, 0x0)
umount2(&(0x7f0000000680)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000180)=@md0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0)
setsockopt(r3, 0x107, 0x1, &(0x7f00000002c0)='\x00\x00\x00\x00\x00', 0x5)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0xfffffffffffffe5d}], 0x1, 0x0, 0xffffffffffffffd3}, 0x40008c5)
r10 = openat$kvm(0xffffff9c, &(0x7f00000003c0), 0x41, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)

1m48.856785043s ago: executing program 5 (id=699):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, 0x0, 0x0, 0x0)

1m42.41990925s ago: executing program 5 (id=700):
fsopen(&(0x7f0000000180)='pvfs2\x00', 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c0, 0x260, 0x130, 0x260, 0x0, 0x98, 0x328, 0x328, 0x328, 0x328, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'xfrm0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'dummy0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x8, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xff, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x29a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1m36.708547622s ago: executing program 5 (id=702):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r2, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x20088c4)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbb1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x90}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

1m30.527172005s ago: executing program 5 (id=704):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xb, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x800000, 0x3800})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000)}, &(0x7f0000000300)={&(0x7f0000002000), 0x0, 0x1, 0x0, 0x4}}, 0x1)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0xfffffffe)
userfaultfd(0x80801)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000240)=0x8)
readv(r1, &(0x7f0000000280)=[{&(0x7f0000000340)=""/105, 0x69}], 0x1)
r3 = socket(0x10, 0x2, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0xfffffffe, 0xffffffff}, 0xfffffbfe, 0x0, 0x0, 0x4, 0x9, 0x11, 0x40, 0x0, 0x4, 0x0, {0x0, 0x8000, 0xfffffffc, 0x0, 0x3, 0x8}}}}]}, 0x78}}, 0x0)
pipe2(&(0x7f0000000580)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4000)
readv(r6, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/215, 0xd7}], 0x1)
writev(r7, &(0x7f0000000700)=[{&(0x7f0000000740)="19", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000)
setns(0xc9, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, 0x0, 0x0)
r9 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r9, &(0x7f0000000780)={&(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
r11 = socket(0x15, 0x3, 0x32)
sendmsg$inet6(r11, &(0x7f0000000880)={&(0x7f00000008c0)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c, 0x0}, 0x20008b88)
sendmsg$kcm(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000a00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

1m13.89171614s ago: executing program 37 (id=704):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xb, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x800000, 0x3800})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000)}, &(0x7f0000000300)={&(0x7f0000002000), 0x0, 0x1, 0x0, 0x4}}, 0x1)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0xfffffffe)
userfaultfd(0x80801)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000240)=0x8)
readv(r1, &(0x7f0000000280)=[{&(0x7f0000000340)=""/105, 0x69}], 0x1)
r3 = socket(0x10, 0x2, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0xfffffffe, 0xffffffff}, 0xfffffbfe, 0x0, 0x0, 0x4, 0x9, 0x11, 0x40, 0x0, 0x4, 0x0, {0x0, 0x8000, 0xfffffffc, 0x0, 0x3, 0x8}}}}]}, 0x78}}, 0x0)
pipe2(&(0x7f0000000580)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4000)
readv(r6, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/215, 0xd7}], 0x1)
writev(r7, &(0x7f0000000700)=[{&(0x7f0000000740)="19", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000)
setns(0xc9, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, 0x0, 0x0)
r9 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r9, &(0x7f0000000780)={&(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
r11 = socket(0x15, 0x3, 0x32)
sendmsg$inet6(r11, &(0x7f0000000880)={&(0x7f00000008c0)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c, 0x0}, 0x20008b88)
sendmsg$kcm(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000a00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

53.262097542s ago: executing program 3 (id=713):
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
socket$inet(0x2, 0x1, 0x6)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000700)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_open_procfs(0x0, &(0x7f0000000780)='net/softnet_stat\x00')
connect$unix(r3, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000840), 0x318, 0x0)
recvmmsg(r3, &(0x7f0000000880), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000a80)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000ac0)='bridge_slave_1\x00', 0x10)
signalfd4(0xffffffffffffffff, &(0x7f0000000b00)={[0xfffffffffffffff7]}, 0x8, 0x80000)
sendmmsg(r6, &(0x7f0000000b40), 0x800001d, 0x810)

44.450974345s ago: executing program 3 (id=714):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8})
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3)

38.522599457s ago: executing program 3 (id=715):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000a00)=0x15)
ioctl$TCFLSH(r3, 0x80044704, 0x20001100)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x67f7, {0x1, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffd, 0xfffffefd, 0xfffffffe, {0x44, 0x0, 0x7fffffff, 0x2, 0xb, 0xfdbb, 0x1, 0xffffffff, 0x4, 0x2000, 0xa8, 0x0, 0x0, 0x8001, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$loop(&(0x7f0000000680), 0xffff, 0x14f600)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r5, &(0x7f0000000700), 0xe09)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000740)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})
r6 = eventfd2(0x2000003, 0x0)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r6, 0x7fc, 0x2, r6})
ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0)
ioctl$KVM_SET_PIT2(r2, 0xae71, &(0x7f0000000480)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]})
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x8801)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f00000009c0)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r8, 0x0)
listen(r8, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='GPL\x00', 0x4, 0xb7, &(0x7f0000000c80)=""/183, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000d80), 0x8, 0x10, &(0x7f0000000dc0)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000e80)={r10, &(0x7f0000000ec0), &(0x7f0000000f00)=@tcp6=r8}, 0x20)
recvfrom(r8, &(0x7f0000000f40)=""/4080, 0xff0, 0x0, 0x0, 0x0)

26.383553688s ago: executing program 3 (id=716):
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)

22.630417118s ago: executing program 3 (id=717):
fsopen(&(0x7f0000000180)='pvfs2\x00', 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

17.039733497s ago: executing program 3 (id=718):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0xc0)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x2b, @broadcast, 0x4e24, 0x2, 'rr\x00', 0x11, 0x7, 0x6b}, {@rand_addr=0x64010100, 0x4e23, 0x0, 0x9, 0x80000000, 0x6}}, 0x44)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00)
io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db})
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001000000406d0432c500000000000109022400010000f04909040008010300030009210000000122070009058103ffd5000f05d381debcee20a328465ce122b22c0cee2b793f4614afdca459c4fbfa3147309345c1fa9f267925b794c2546d728f5680006a5148c7f0eea2ca35c9acf7dec11e"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="f308e1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xeec, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0xe74, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_ACT={0xe5c, 0x3, [@m_pedit={0xe58, 0x11, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x400, 0x5, 0x5, 0x7fff}, 0xe, 0x1}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x8003, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0xfffffffe}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x7ffffffe, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x3, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0xfffc, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x6, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x3, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x4, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x9, 0x6, "2fcdfb7fd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xeec}}, 0x800)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd37, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x13}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_EMATCHES={0x8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
socket$nl_netfilter(0x10, 0x3, 0xc)

0s ago: executing program 38 (id=718):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0xc0)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x2b, @broadcast, 0x4e24, 0x2, 'rr\x00', 0x11, 0x7, 0x6b}, {@rand_addr=0x64010100, 0x4e23, 0x0, 0x9, 0x80000000, 0x6}}, 0x44)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00)
io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db})
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001000000406d0432c500000000000109022400010000f04909040008010300030009210000000122070009058103ffd5000f05d381debcee20a328465ce122b22c0cee2b793f4614afdca459c4fbfa3147309345c1fa9f267925b794c2546d728f5680006a5148c7f0eea2ca35c9acf7dec11e"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="f308e1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xeec, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0xe74, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_ACT={0xe5c, 0x3, [@m_pedit={0xe58, 0x11, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x400, 0x5, 0x5, 0x7fff}, 0xe, 0x1}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x8003, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0xfffffffe}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x7ffffffe, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x3, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0xfffc, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x6, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x3, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x4, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x9, 0x6, "2fcdfb7fd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xeec}}, 0x800)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd37, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x13}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_EMATCHES={0x8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

g 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  385.255540][ T5692] usb 4-1: config 0 interface 0 has no altsetting 0
[  385.255634][ T5692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.682233][ T5692] usb 4-1: config 0 descriptor??
[  386.038508][ T5726] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  386.338271][ T5726] usb 5-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[  386.425528][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.425813][ T5726] usb 5-1: Product: syz
[  386.426987][ T5726] usb 5-1: Manufacturer: syz
[  386.448828][ T5726] usb 5-1: SerialNumber: syz
[  386.724568][ T5726] digi_acceleport 5-1:1.0: Digi 2 port USB adapter converter detected
[  386.900412][ T5726] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB0
[  386.962137][ T5726] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB1
[  386.990207][ T5726] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB2
[  387.042710][ T5726] usb 5-1: USB disconnect, device number 12
[  387.087224][ T5692] usbhid 4-1:0.0: can't add hid device: -71
[  387.087312][ T5692] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  387.116198][ T5726] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0
[  387.180867][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'.
[  387.275518][ T8277] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  387.280926][ T8277] netlink: 'syz.0.427': attribute type 11 has an invalid length.
[  387.281015][ T8277] netlink: 220 bytes leftover after parsing attributes in process `syz.0.427'.
[  387.416970][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.5.426'.
[  387.704329][ T5726] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1
[  387.726371][ T5692] usb 4-1: USB disconnect, device number 9
[  387.787202][   T30] audit: type=1400 audit(1792426128.570:315): avc:  denied  { write } for  pid=8227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  388.029117][ T5726] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2
[  388.127547][ T5726] digi_acceleport 5-1:1.0: device disconnected
[  388.401498][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'.
[  388.609996][ T8289] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  388.616084][ T8289] netlink: 'syz.3.428': attribute type 11 has an invalid length.
[  388.616138][ T8289] netlink: 220 bytes leftover after parsing attributes in process `syz.3.428'.
[  388.897805][   T30] audit: type=1400 audit(1792426129.690:316): avc:  denied  { write } for  pid=8285 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  390.292934][   T30] audit: type=1400 audit(1792426131.070:317): avc:  denied  { mmap_zero } for  pid=8302 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  391.643951][   T30] audit: type=1400 audit(1792426131.650:318): avc:  denied  { map } for  pid=8302 comm="syz.3.432" path="socket:[19719]" dev="sockfs" ino=19719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  394.004038][   T30] audit: type=1400 audit(1792426134.790:319): avc:  denied  { write } for  pid=8314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  395.042204][   T30] audit: type=1400 audit(1792426135.830:320): avc:  denied  { write } for  pid=8329 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  396.017123][ T5600] Bluetooth: hci5: command 0x0406 tx timeout
[  398.477147][ T5726] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  398.637153][ T5726] usb 7-1: Using ep0 maxpacket: 32
[  398.640218][ T5726] usb 7-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  398.642117][ T5726] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  398.642183][ T5726] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  398.642219][ T5726] usb 7-1: config 0 interface 0 has no altsetting 0
[  398.642344][ T5726] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.650686][ T5726] usb 7-1: config 0 descriptor??
[  399.377335][   T30] audit: type=1400 audit(1792426140.160:321): avc:  denied  { write } for  pid=8341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  399.687197][ T5692] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  399.837171][ T5692] usb 6-1: Using ep0 maxpacket: 32
[  399.837991][ T5692] usb 6-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  399.839090][ T5692] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  399.839121][ T5692] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  399.839146][ T5692] usb 6-1: config 0 interface 0 has no altsetting 0
[  399.839231][ T5692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.845324][ T5692] usb 6-1: config 0 descriptor??
[  399.951520][   T30] audit: type=1400 audit(1792426140.740:322): avc:  denied  { write } for  pid=8380 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  400.709060][ T5726] usbhid 7-1:0.0: can't add hid device: -71
[  400.709553][ T5726] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  400.835544][ T5726] usb 7-1: USB disconnect, device number 7
[  401.138338][ T5610] Bluetooth: hci3: command 0x0406 tx timeout
[  402.166221][   T30] audit: type=1400 audit(1792426142.950:323): avc:  denied  { name_bind } for  pid=8391 comm="syz.4.441" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  402.166269][   T30] audit: type=1400 audit(1792426142.950:324): avc:  denied  { name_bind } for  pid=8391 comm="syz.4.441" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  402.321201][ T5692] usbhid 6-1:0.0: can't add hid device: -71
[  402.321269][ T5692] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  402.329025][ T5692] usb 6-1: USB disconnect, device number 3
[  402.432113][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.449'.
[  403.237113][ T1230] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  403.387524][ T5712] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  403.408589][ T1230] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  403.419751][ T1230] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  403.419775][ T1230] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  403.419792][ T1230] usb 6-1: config 0 interface 0 has no altsetting 0
[  403.419811][ T1230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.426184][ T1230] usb 6-1: config 0 descriptor??
[  403.426926][ T8403] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  403.491115][ T5692] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  403.560633][ T5712] usb 7-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  403.564564][ T5712] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  403.564588][ T5712] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  403.564605][ T5712] usb 7-1: config 0 interface 0 has no altsetting 0
[  403.564628][ T5712] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.622107][ T5712] usb 7-1: config 0 descriptor??
[  403.623823][ T8404] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  403.641868][ T5692] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  403.645645][ T5692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.661958][ T5692] usb 4-1: config 0 descriptor??
[  403.677489][ T5692] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  404.078863][ T5712] logitech-djreceiver 0003:046D:C532.0003: unknown main item tag 0x0
[  404.078921][ T5712] logitech-djreceiver 0003:046D:C532.0003: unknown main item tag 0x0
[  404.078944][ T5712] logitech-djreceiver 0003:046D:C532.0003: unknown main item tag 0x0
[  404.078964][ T5712] logitech-djreceiver 0003:046D:C532.0003: unknown main item tag 0x0
[  404.078985][ T5712] logitech-djreceiver 0003:046D:C532.0003: unknown main item tag 0x0
[  404.079004][ T5712] logitech-djreceiver 0003:046D:C532.0003: unknown main item tag 0x0
[  404.079044][ T5712] logitech-djreceiver 0003:046D:C532.0003: unknown main item tag 0x0
[  405.635154][ T1230] usbhid 6-1:0.0: can't add hid device: -71
[  405.635237][ T1230] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  405.658156][ T1230] usb 6-1: USB disconnect, device number 4
[  406.981009][   T29] usb 7-1: USB disconnect, device number 8
[  407.060531][ T5692] gspca_stv06xx: I2C: Read error writing address: -71
[  407.066309][ T5692] usb 4-1: USB disconnect, device number 10
[  407.577202][   T29] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  407.753853][   T29] usb 7-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  407.773759][   T29] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.773915][   T29] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  407.773946][   T29] usb 7-1: config 0 interface 0 has no altsetting 0
[  407.774455][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.891187][   T29] usb 7-1: config 0 descriptor??
[  407.914953][ T8437] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  408.800610][   T29] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0
[  408.800641][   T29] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0
[  408.800663][   T29] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0
[  411.485476][ T5738] usb 7-1: USB disconnect, device number 9
[  413.049621][   T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  413.177941][ T5692] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  413.197652][   T29] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  413.198712][   T29] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  413.198739][   T29] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  413.198764][   T29] usb 6-1: config 0 interface 0 has no altsetting 0
[  413.198793][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.203105][   T29] usb 6-1: config 0 descriptor??
[  413.238070][ T8467] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  413.418671][ T5692] usb 7-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[  413.421231][ T5692] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.421256][ T5692] usb 7-1: Product: syz
[  413.421271][ T5692] usb 7-1: Manufacturer: syz
[  413.421285][ T5692] usb 7-1: SerialNumber: syz
[  414.773919][ T5692] digi_acceleport 7-1:1.0: Digi 2 port USB adapter converter detected
[  414.811851][ T5692] usb 7-1: Digi 2 port USB adapter converter now attached to ttyUSB0
[  414.836574][ T5692] usb 7-1: Digi 2 port USB adapter converter now attached to ttyUSB1
[  414.861113][ T5692] usb 7-1: Digi 2 port USB adapter converter now attached to ttyUSB2
[  414.878967][   T29] usbhid 6-1:0.0: can't add hid device: -71
[  414.879053][   T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  414.886519][   T29] usb 6-1: USB disconnect, device number 5
[  415.678227][   T29] usb 7-1: USB disconnect, device number 10
[  415.931114][   T29] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0
[  416.052361][   T29] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1
[  416.148697][   T29] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2
[  416.191664][   T29] digi_acceleport 7-1:1.0: device disconnected
[  418.667165][   T29] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  418.987193][ T5712] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  419.108630][   T29] usb 7-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[  419.126307][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.126334][   T29] usb 7-1: Product: syz
[  419.126348][   T29] usb 7-1: Manufacturer: syz
[  419.126361][   T29] usb 7-1: SerialNumber: syz
[  419.152971][   T29] digi_acceleport 7-1:1.0: Digi 2 port USB adapter converter detected
[  419.165603][ T5712] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  419.182918][   T29] usb 7-1: Digi 2 port USB adapter converter now attached to ttyUSB0
[  419.183420][ T5712] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.183476][ T5712] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  419.183521][ T5712] usb 4-1: config 0 interface 0 has no altsetting 0
[  419.183625][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.237413][ T5712] usb 4-1: config 0 descriptor??
[  419.244399][   T29] usb 7-1: Digi 2 port USB adapter converter now attached to ttyUSB1
[  419.245804][ T8499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  419.262897][   T29] usb 7-1: Digi 2 port USB adapter converter now attached to ttyUSB2
[  419.491392][   T29] usb 7-1: USB disconnect, device number 11
[  419.528278][   T29] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0
[  419.531904][   T29] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1
[  419.559159][   T29] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2
[  419.560187][   T29] digi_acceleport 7-1:1.0: device disconnected
[  419.705311][ T5712] hid_parser_main: 4 callbacks suppressed
[  419.705335][ T5712] logitech-djreceiver 0003:046D:C532.0005: unknown main item tag 0x0
[  419.705365][ T5712] logitech-djreceiver 0003:046D:C532.0005: unknown main item tag 0x0
[  419.705386][ T5712] logitech-djreceiver 0003:046D:C532.0005: unknown main item tag 0x0
[  419.705406][ T5712] logitech-djreceiver 0003:046D:C532.0005: unknown main item tag 0x0
[  419.705424][ T5712] logitech-djreceiver 0003:046D:C532.0005: unknown main item tag 0x0
[  419.705444][ T5712] logitech-djreceiver 0003:046D:C532.0005: unknown main item tag 0x0
[  419.705464][ T5712] logitech-djreceiver 0003:046D:C532.0005: unknown main item tag 0x0
[  420.937381][   T29] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  421.400180][ T5712] usb 4-1: USB disconnect, device number 11
[  421.647914][   T29] usb 7-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[  421.654318][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.654346][   T29] usb 7-1: Product: syz
[  421.654361][   T29] usb 7-1: Manufacturer: syz
[  421.654374][   T29] usb 7-1: SerialNumber: syz
[  421.745028][   T29] digi_acceleport 7-1:1.0: Digi 2 port USB adapter converter detected
[  421.784409][   T29] usb 7-1: Digi 2 port USB adapter converter now attached to ttyUSB0
[  421.822592][   T29] usb 7-1: Digi 2 port USB adapter converter now attached to ttyUSB1
[  421.886933][   T29] usb 7-1: Digi 2 port USB adapter converter now attached to ttyUSB2
[  422.127256][ T5692] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  422.212206][   T29] usb 7-1: USB disconnect, device number 12
[  422.280248][ T5692] usb 6-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[  422.331280][ T5692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.331365][ T5692] usb 6-1: Product: syz
[  422.331432][ T5692] usb 6-1: Manufacturer: syz
[  422.331497][ T5692] usb 6-1: SerialNumber: syz
[  422.554307][   T29] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0
[  422.668628][   T29] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1
[  422.822502][   T29] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2
[  422.873101][ T5692] digi_acceleport 6-1:1.0: Digi 2 port USB adapter converter detected
[  422.943248][   T29] digi_acceleport 7-1:1.0: device disconnected
[  423.020772][ T5692] usb 6-1: Digi 2 port USB adapter converter now attached to ttyUSB0
[  423.063202][ T5692] usb 6-1: Digi 2 port USB adapter converter now attached to ttyUSB1
[  423.100012][ T5692] usb 6-1: Digi 2 port USB adapter converter now attached to ttyUSB2
[  424.150929][ T5738] usb 6-1: USB disconnect, device number 6
[  424.194003][ T5738] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0
[  424.210861][ T5738] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1
[  424.234792][ T5738] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2
[  424.238543][ T5738] digi_acceleport 6-1:1.0: device disconnected
[  424.617133][ T1230] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  424.782992][ T1230] usb 7-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  424.783995][ T1230] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.784020][ T1230] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  424.784038][ T1230] usb 7-1: config 0 interface 0 has no altsetting 0
[  424.784058][ T1230] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.809470][ T1230] usb 7-1: config 0 descriptor??
[  424.844629][ T8541] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  426.292917][ T1230] logitech-djreceiver 0003:046D:C532.0006: unknown main item tag 0x0
[  426.292944][ T1230] logitech-djreceiver 0003:046D:C532.0006: unknown main item tag 0x0
[  426.292960][ T1230] logitech-djreceiver 0003:046D:C532.0006: unknown main item tag 0x0
[  426.292977][ T1230] logitech-djreceiver 0003:046D:C532.0006: unknown main item tag 0x0
[  426.292996][ T1230] logitech-djreceiver 0003:046D:C532.0006: unknown main item tag 0x0
[  426.293016][ T1230] logitech-djreceiver 0003:046D:C532.0006: unknown main item tag 0x0
[  426.293036][ T1230] logitech-djreceiver 0003:046D:C532.0006: unknown main item tag 0x0
[  426.307426][ T5692] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  426.490316][ T5692] usb 5-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[  426.496772][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.496801][ T5692] usb 5-1: Product: syz
[  426.496816][ T5692] usb 5-1: Manufacturer: syz
[  426.496830][ T5692] usb 5-1: SerialNumber: syz
[  426.546334][ T5692] digi_acceleport 5-1:1.0: Digi 2 port USB adapter converter detected
[  426.573635][ T5692] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB0
[  426.586421][ T5692] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB1
[  426.604394][ T5692] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB2
[  428.032906][ T5692] usb 5-1: USB disconnect, device number 13
[  428.060878][ T1230] usb 7-1: USB disconnect, device number 13
[  428.096414][ T5692] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0
[  428.110164][ T5692] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1
[  428.140227][ T5692] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2
[  428.141226][ T5692] digi_acceleport 5-1:1.0: device disconnected
[  428.230384][   T30] audit: type=1400 audit(1792426169.020:325): avc:  denied  { search } for  pid=8560 comm="syz.4.485" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  428.230503][   T30] audit: type=1400 audit(1792426169.020:326): avc:  denied  { search } for  pid=8560 comm="syz.4.485" name="per_cpu" dev="tracefs" ino=3445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  428.230629][   T30] audit: type=1400 audit(1792426169.020:327): avc:  denied  { search } for  pid=8560 comm="syz.4.485" name="cpu0" dev="tracefs" ino=3446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  428.232459][   T30] audit: type=1400 audit(1792426169.020:328): avc:  denied  { read } for  pid=8560 comm="syz.4.485" name="trace_pipe_raw" dev="tracefs" ino=3449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  428.232769][   T30] audit: type=1400 audit(1792426169.020:329): avc:  denied  { open } for  pid=8560 comm="syz.4.485" path="/106/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  433.740142][ T5821] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  433.891062][ T5821] usb 7-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  433.896592][ T5821] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  433.896623][ T5821] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  433.896639][ T5821] usb 7-1: config 0 interface 0 has no altsetting 0
[  433.896657][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.931007][ T5821] usb 7-1: config 0 descriptor??
[  433.932065][ T8588] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  433.997122][ T5692] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  434.147810][ T5692] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  434.148588][ T5692] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.148607][ T5692] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  434.148622][ T5692] usb 6-1: config 0 interface 0 has no altsetting 0
[  434.148640][ T5692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.150166][ T5692] usb 6-1: config 0 descriptor??
[  434.150584][ T8598] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  434.376932][ T5821] logitech-djreceiver 0003:046D:C532.0007: unknown main item tag 0x0
[  434.376968][ T5821] logitech-djreceiver 0003:046D:C532.0007: unknown main item tag 0x0
[  434.393658][ T5821] logitech-djreceiver 0003:046D:C532.0007: unknown main item tag 0x0
[  434.393711][ T5821] logitech-djreceiver 0003:046D:C532.0007: unknown main item tag 0x0
[  434.393734][ T5821] logitech-djreceiver 0003:046D:C532.0007: unknown main item tag 0x0
[  434.393756][ T5821] logitech-djreceiver 0003:046D:C532.0007: unknown main item tag 0x0
[  434.393778][ T5821] logitech-djreceiver 0003:046D:C532.0007: unknown main item tag 0x0
[  434.585357][ T5692] logitech-djreceiver 0003:046D:C532.0008: unknown main item tag 0x0
[  434.585388][ T5692] logitech-djreceiver 0003:046D:C532.0008: unknown main item tag 0x0
[  434.585410][ T5692] logitech-djreceiver 0003:046D:C532.0008: unknown main item tag 0x0
[  434.847319][ T5692] usb 6-1: USB disconnect, device number 7
[  436.727733][   T29] usb 7-1: USB disconnect, device number 14
[  436.964260][   T30] audit: type=1400 audit(1792426177.750:330): avc:  denied  { ioctl } for  pid=8612 comm="syz.6.498" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  439.284982][   T30] audit: type=1400 audit(1792426180.070:331): avc:  denied  { ioctl } for  pid=8614 comm="syz.0.499" path="/dev/radio0" dev="devtmpfs" ino=951 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  439.660046][ T5738] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  440.019022][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  440.019073][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  440.248678][ T5738] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  440.250763][ T5738] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.250794][ T5738] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  440.250819][ T5738] usb 4-1: config 0 interface 0 has no altsetting 0
[  440.250846][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.253383][ T5738] usb 4-1: config 0 descriptor??
[  440.254094][ T8626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  441.359706][ T5711] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  441.365720][ T5738] hid_parser_main: 4 callbacks suppressed
[  441.365742][ T5738] logitech-djreceiver 0003:046D:C532.0009: unknown main item tag 0x0
[  441.365765][ T5738] logitech-djreceiver 0003:046D:C532.0009: unknown main item tag 0x0
[  441.365785][ T5738] logitech-djreceiver 0003:046D:C532.0009: unknown main item tag 0x0
[  441.365805][ T5738] logitech-djreceiver 0003:046D:C532.0009: unknown main item tag 0x0
[  441.365826][ T5738] logitech-djreceiver 0003:046D:C532.0009: unknown main item tag 0x0
[  441.365847][ T5738] logitech-djreceiver 0003:046D:C532.0009: unknown main item tag 0x0
[  441.365868][ T5738] logitech-djreceiver 0003:046D:C532.0009: unknown main item tag 0x0
[  441.509748][ T5711] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  441.510620][ T5711] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.510649][ T5711] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  441.510674][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0
[  441.510695][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.512374][ T5711] usb 5-1: config 0 descriptor??
[  441.514280][ T8635] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  441.687386][ T1230] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  441.777350][ T5738] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  441.837784][ T1230] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  441.838727][ T1230] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.838746][ T1230] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  441.838762][ T1230] usb 6-1: config 0 interface 0 has no altsetting 0
[  441.838778][ T1230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.840743][ T1230] usb 6-1: config 0 descriptor??
[  441.841901][ T8642] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  441.926708][ T5711] logitech-djreceiver 0003:046D:C532.000A: unknown main item tag 0x0
[  441.926740][ T5711] logitech-djreceiver 0003:046D:C532.000A: unknown main item tag 0x0
[  441.926762][ T5711] logitech-djreceiver 0003:046D:C532.000A: unknown main item tag 0x0
[  441.953351][ T5738] usb 7-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[  441.956518][ T5738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.956544][ T5738] usb 7-1: Product: syz
[  441.956559][ T5738] usb 7-1: Manufacturer: syz
[  441.956573][ T5738] usb 7-1: SerialNumber: syz
[  441.975676][ T5738] digi_acceleport 7-1:1.0: Digi 2 port USB adapter converter detected
[  441.988769][ T5738] usb 7-1: Digi 2 port USB adapter converter now attached to ttyUSB0
[  441.993584][ T5738] usb 7-1: Digi 2 port USB adapter converter now attached to ttyUSB1
[  441.998087][ T5738] usb 7-1: Digi 2 port USB adapter converter now attached to ttyUSB2
[  442.160639][   T29] usb 5-1: USB disconnect, device number 14
[  442.192815][ T5738] usb 7-1: USB disconnect, device number 15
[  442.206366][ T5738] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0
[  442.215050][ T5738] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1
[  442.217965][ T5738] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2
[  442.219018][ T5738] digi_acceleport 7-1:1.0: device disconnected
[  442.644285][ T1230] usb 4-1: USB disconnect, device number 12
[  442.978117][ T5738] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  443.017151][   T29] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  443.107121][ T1230] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  443.127527][ T5738] usb 5-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[  443.128979][ T5738] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  443.129018][ T5738] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  443.130156][ T5738] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8
[  443.134376][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.134399][ T5738] usb 5-1: Product: syz
[  443.134565][ T5738] usb 5-1: Manufacturer: syz
[  443.134579][ T5738] usb 5-1: SerialNumber: syz
[  443.148459][ T5738] digi_acceleport 5-1:1.0: required endpoints missing
[  443.209465][   T29] usb 7-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  443.212501][   T29] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.212533][   T29] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  443.212558][   T29] usb 7-1: config 0 interface 0 has no altsetting 0
[  443.212586][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.262783][ T1230] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  443.274217][   T29] usb 7-1: config 0 descriptor??
[  443.274790][ T8658] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  443.276874][ T1230] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.276894][ T1230] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  443.276909][ T1230] usb 4-1: config 0 interface 0 has no altsetting 0
[  443.276927][ T1230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.294611][ T1230] usb 4-1: config 0 descriptor??
[  443.295741][ T8659] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  443.385028][ T5738] usb 5-1: USB disconnect, device number 15
[  443.562944][ T5711] usb 6-1: USB disconnect, device number 8
[  444.410288][   T29] usb 7-1: USB disconnect, device number 16
[  447.297972][ T8529] usb 4-1: USB disconnect, device number 13
[  448.767141][ T8529] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  448.931646][ T8529] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  448.933994][ T8529] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  448.934027][ T8529] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  448.934052][ T8529] usb 6-1: config 0 interface 0 has no altsetting 0
[  448.934081][ T8529] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.988078][ T8529] usb 6-1: config 0 descriptor??
[  448.989518][ T8688] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  450.051708][ T8529] hid_parser_main: 25 callbacks suppressed
[  450.051731][ T8529] logitech-djreceiver 0003:046D:C532.000E: unknown main item tag 0x0
[  450.051757][ T8529] logitech-djreceiver 0003:046D:C532.000E: unknown main item tag 0x0
[  450.051778][ T8529] logitech-djreceiver 0003:046D:C532.000E: unknown main item tag 0x0
[  450.051800][ T8529] logitech-djreceiver 0003:046D:C532.000E: unknown main item tag 0x0
[  450.051820][ T8529] logitech-djreceiver 0003:046D:C532.000E: unknown main item tag 0x0
[  450.051875][ T8529] logitech-djreceiver 0003:046D:C532.000E: unknown main item tag 0x0
[  450.051896][ T8529] logitech-djreceiver 0003:046D:C532.000E: unknown main item tag 0x0
[  450.121866][ T5712] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  450.269031][ T5712] usb 5-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[  450.272797][ T5712] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  450.272825][ T5712] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  450.279780][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.279805][ T5712] usb 5-1: Product: syz
[  450.279818][ T5712] usb 5-1: Manufacturer: syz
[  450.279831][ T5712] usb 5-1: SerialNumber: syz
[  450.291173][ T5712] digi_acceleport 5-1:1.0: Digi 2 port USB adapter converter detected
[  450.321580][ T5712] digi_acceleport 5-1:1.0: probe with driver digi_acceleport failed with error -22
[  450.658908][ T5712] usb 5-1: USB disconnect, device number 16
[  452.820163][ T5712] usb 6-1: USB disconnect, device number 9
[  453.036035][ T8529] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  453.512104][ T8529] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  453.557608][ T8529] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  453.557644][ T8529] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  453.557670][ T8529] usb 5-1: config 0 interface 0 has no altsetting 0
[  453.557700][ T8529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.684114][ T8529] usb 5-1: config 0 descriptor??
[  453.737422][ T8711] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  454.161900][ T5712] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  454.238052][ T8529] logitech-djreceiver 0003:046D:C532.000F: unknown main item tag 0x0
[  454.238150][ T8529] logitech-djreceiver 0003:046D:C532.000F: unknown main item tag 0x0
[  454.238212][ T8529] logitech-djreceiver 0003:046D:C532.000F: unknown main item tag 0x0
[  454.708741][ T5712] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  455.831851][ T5712] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.831880][ T5712] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  455.831896][ T5712] usb 4-1: config 0 interface 0 has no altsetting 0
[  455.831914][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.833235][ T5712] usb 4-1: config 0 descriptor??
[  455.833964][ T8719] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  457.989817][ T5738] usb 5-1: USB disconnect, device number 17
[  459.378697][ T5712] usbhid 4-1:0.0: can't add hid device: -71
[  459.378785][ T5712] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  459.395921][ T5712] usb 4-1: USB disconnect, device number 14
[  461.325241][ T8764] input: syz1 as /devices/virtual/input/input5
[  461.733824][   T30] audit: type=1400 audit(1792426202.070:332): avc:  denied  { read write } for  pid=8762 comm="syz.4.543" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  461.733878][   T30] audit: type=1400 audit(1792426202.070:333): avc:  denied  { open } for  pid=8762 comm="syz.4.543" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  461.733916][   T30] audit: type=1400 audit(1792426202.080:334): avc:  denied  { ioctl } for  pid=8762 comm="syz.4.543" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  466.962516][   T30] audit: type=1400 audit(1792426207.370:335): avc:  denied  { ioctl } for  pid=8811 comm="syz.4.544" path="socket:[21103]" dev="sockfs" ino=21103 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  471.191314][ T5821] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  472.646899][ T5821] usb 4-1: device descriptor read/all, error -71
[  477.891024][ T8891] input: syz1 as /devices/virtual/input/input6
[  479.038123][ T1216] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  481.540239][ T1216] usb 5-1: device descriptor read/all, error -71
[  482.601904][ T5712] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  482.777613][ T5712] usb 7-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  482.778522][ T5712] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  482.778552][ T5712] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  482.778578][ T5712] usb 7-1: config 0 interface 0 has no altsetting 0
[  482.778608][ T5712] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.780992][ T5712] usb 7-1: config 0 descriptor??
[  482.783955][ T8919] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  483.493299][ T5712] hid_parser_main: 4 callbacks suppressed
[  483.493324][ T5712] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0
[  483.493349][ T5712] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0
[  483.493371][ T5712] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0
[  483.493392][ T5712] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0
[  483.493413][ T5712] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0
[  483.493436][ T5712] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0
[  483.493457][ T5712] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0
[  485.878640][ T5692] usb 7-1: USB disconnect, device number 17
[  486.787789][ T5712] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  486.869917][ T1216] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  486.958375][ T5712] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  486.961142][ T5712] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  486.961174][ T5712] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  486.961198][ T5712] usb 4-1: config 0 interface 0 has no altsetting 0
[  486.961226][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.964174][ T5712] usb 4-1: config 0 descriptor??
[  487.020103][ T8940] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  487.035215][ T1216] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  487.046550][ T1216] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.046578][ T1216] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  487.046600][ T1216] usb 6-1: config 0 interface 0 has no altsetting 0
[  487.046626][ T1216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.052587][ T1216] usb 6-1: config 0 descriptor??
[  487.060640][ T8947] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  487.128216][ T5738] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  487.306064][ T5738] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  487.306950][ T5738] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.307017][ T5738] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  487.307064][ T5738] usb 5-1: config 0 interface 0 has no altsetting 0
[  487.307088][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.309433][ T5738] usb 5-1: config 0 descriptor??
[  487.318253][ T8952] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  487.440803][ T5712] logitech-djreceiver 0003:046D:C532.0011: unknown main item tag 0x0
[  487.440858][ T5712] logitech-djreceiver 0003:046D:C532.0011: unknown main item tag 0x0
[  487.440880][ T5712] logitech-djreceiver 0003:046D:C532.0011: unknown main item tag 0x0
[  488.387446][ T5738] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  488.538533][ T5738] usb 7-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  488.541894][ T5738] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  488.541925][ T5738] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  488.541941][ T5738] usb 7-1: config 0 interface 0 has no altsetting 0
[  488.541959][ T5738] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.543380][ T5738] usb 7-1: config 0 descriptor??
[  488.543834][ T8962] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  488.811635][ T5692] usb 4-1: USB disconnect, device number 17
[  489.954295][ T5738] hid_parser_main: 18 callbacks suppressed
[  489.954322][ T5738] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0
[  489.954345][ T5738] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0
[  489.954366][ T5738] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0
[  489.954386][ T5738] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0
[  489.954405][ T5738] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0
[  489.954425][ T5738] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0
[  489.954446][ T5738] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0
[  490.273958][ T5738] usb 6-1: USB disconnect, device number 10
[  490.290443][ T5692] usb 5-1: USB disconnect, device number 20
[  492.830635][ T8529] usb 7-1: USB disconnect, device number 18
[  495.207077][ T8529] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  495.346831][ T5692] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  496.532049][ T8529] usb 7-1: device descriptor read/all, error -71
[  498.507142][  T983] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  498.528536][ T5692] usb 4-1: device descriptor read/all, error -71
[  498.597093][ T5711] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  498.721744][  T983] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  498.723973][  T983] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  498.724005][  T983] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  498.724031][  T983] usb 6-1: config 0 interface 0 has no altsetting 0
[  498.724057][  T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.725544][  T983] usb 6-1: config 0 descriptor??
[  498.726191][ T9020] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  498.979855][ T5711] usb 7-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  498.986522][ T5711] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  498.986555][ T5711] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  498.986581][ T5711] usb 7-1: config 0 interface 0 has no altsetting 0
[  498.986609][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.038079][ T5711] usb 7-1: config 0 descriptor??
[  499.040547][ T9022] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  499.202315][  T983] logitech-djreceiver 0003:046D:C532.0015: unknown main item tag 0x0
[  499.202347][  T983] logitech-djreceiver 0003:046D:C532.0015: unknown main item tag 0x0
[  499.202366][  T983] logitech-djreceiver 0003:046D:C532.0015: unknown main item tag 0x0
[  499.202379][  T983] logitech-djreceiver 0003:046D:C532.0015: unknown main item tag 0x0
[  499.202393][  T983] logitech-djreceiver 0003:046D:C532.0015: unknown main item tag 0x0
[  499.202406][  T983] logitech-djreceiver 0003:046D:C532.0015: unknown main item tag 0x0
[  499.202420][  T983] logitech-djreceiver 0003:046D:C532.0015: unknown main item tag 0x0
[  499.512908][ T5711] logitech-djreceiver 0003:046D:C532.0016: unknown main item tag 0x0
[  499.512944][ T5711] logitech-djreceiver 0003:046D:C532.0016: unknown main item tag 0x0
[  499.512978][ T5711] logitech-djreceiver 0003:046D:C532.0016: unknown main item tag 0x0
[  501.458391][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  501.458427][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  502.006549][ T1216] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  502.077213][ T5738] usb 6-1: USB disconnect, device number 11
[  502.472547][ T1216] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  502.477668][ T1216] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  502.477692][ T1216] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  502.477707][ T1216] usb 5-1: config 0 interface 0 has no altsetting 0
[  502.477725][ T1216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.492057][ T1216] usb 5-1: config 0 descriptor??
[  502.492572][ T9044] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  502.581619][ T5692] usb 7-1: USB disconnect, device number 21
[  505.621835][   T30] audit: type=1400 audit(1792426246.250:336): avc:  denied  { setopt } for  pid=9055 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  505.621885][   T30] audit: type=1400 audit(1792426246.250:337): avc:  denied  { bind } for  pid=9055 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  505.621905][   T30] audit: type=1400 audit(1792426246.250:338): avc:  denied  { write } for  pid=9055 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  506.685782][ T5692] usb 5-1: USB disconnect, device number 21
[  509.892152][   T30] audit: type=1400 audit(1792426250.680:339): avc:  denied  { ioctl } for  pid=9092 comm="syz.5.627" path="socket:[22651]" dev="sockfs" ino=22651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  509.910049][ T9096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.627'.
[  509.937494][   T30] audit: type=1400 audit(1792426250.730:340): avc:  denied  { create } for  pid=9092 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  509.939585][   T30] audit: type=1400 audit(1792426250.730:341): avc:  denied  { setopt } for  pid=9092 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  510.021012][   T30] audit: type=1400 audit(1792426250.810:342): avc:  denied  { create } for  pid=9092 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  510.023394][   T30] audit: type=1400 audit(1792426250.810:343): avc:  denied  { ioctl } for  pid=9092 comm="syz.5.627" path="socket:[22655]" dev="sockfs" ino=22655 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  510.024181][   T30] audit: type=1400 audit(1792426250.810:344): avc:  denied  { bind } for  pid=9092 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  510.025811][ T9096] netlink: 14 bytes leftover after parsing attributes in process `syz.5.627'.
[  510.100200][   T30] audit: type=1400 audit(1792426250.890:345): avc:  denied  { map } for  pid=9092 comm="syz.5.627" path="socket:[22652]" dev="sockfs" ino=22652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  510.260950][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.630'.
[  510.264743][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.630'.
[  510.448619][ T5711] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  511.247807][ T5711] usb 7-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  511.248939][ T5711] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  511.248970][ T5711] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  511.248995][ T5711] usb 7-1: config 0 interface 0 has no altsetting 0
[  511.249031][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.255097][ T5711] usb 7-1: config 0 descriptor??
[  511.359123][ T9108] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  511.711695][ T1216] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  511.869185][ T1216] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  511.870945][ T1216] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  511.871011][ T1216] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  511.871050][ T1216] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  511.871074][ T1216] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  511.871108][ T1216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.330951][ T9126] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  512.330971][ T9126] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  512.433986][ T9126] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  512.434008][ T9126] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  512.465467][ T9126] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  512.473161][ T9126] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  512.538789][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  512.538803][   T30] audit: type=1400 audit(1792426253.330:347): avc:  denied  { write } for  pid=9127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  512.788711][   T30] audit: type=1400 audit(1792426253.580:348): avc:  denied  { write } for  pid=9143 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  513.056689][ T9126] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  513.056711][ T9126] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  513.123608][ T9126] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  513.123629][ T9126] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  513.385816][ T5711] usbhid 7-1:0.0: can't add hid device: -71
[  513.385872][ T5711] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  513.410217][ T5711] usb 7-1: USB disconnect, device number 22
[  513.575637][ T9156] FAULT_INJECTION: forcing a failure.
[  513.575637][ T9156] name failslab, interval 1, probability 0, space 0, times 1
[  513.575667][ T9156] CPU: 0 UID: 0 PID: 9156 Comm: syz.4.638 Not tainted syzkaller #0 PREEMPT(full) 
[  513.575688][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  513.575698][ T9156] Call Trace:
[  513.575705][ T9156]  <TASK>
[  513.575712][ T9156]  dump_stack_lvl+0x100/0x190
[  513.575744][ T9156]  should_fail_ex.cold+0x5/0xa
[  513.575770][ T9156]  should_failslab+0xc2/0x120
[  513.575798][ T9156]  __kmalloc_noprof+0xfc/0x840
[  513.575819][ T9156]  ? rcu_is_watching+0x13/0xc0
[  513.575845][ T9156]  ? tomoyo_realpath_from_path+0xb6/0x690
[  513.575870][ T9156]  tomoyo_realpath_from_path+0xb6/0x690
[  513.575892][ T9156]  tomoyo_path_number_perm+0x23c/0x580
[  513.575916][ T9156]  ? tomoyo_path_number_perm+0x22e/0x580
[  513.575940][ T9156]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  513.575974][ T9156]  ? __lock_acquire+0x5c0/0x1f40
[  513.576008][ T9156]  ? __fget_files+0x34/0x3d0
[  513.576035][ T9156]  ? find_held_lock+0x2b/0x80
[  513.576062][ T9156]  ? hook_file_ioctl_common+0x140/0x440
[  513.576088][ T9156]  ? __fget_files+0x21f/0x3d0
[  513.576124][ T9156]  security_file_ioctl+0xd3/0x230
[  513.576154][ T9156]  __x64_sys_ioctl+0xb7/0x210
[  513.576179][ T9156]  do_syscall_64+0x123/0x790
[  513.576207][ T9156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.576225][ T9156] RIP: 0033:0x7faf60b9e559
[  513.576241][ T9156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  513.576258][ T9156] RSP: 002b:00007faf61a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  513.576276][ T9156] RAX: ffffffffffffffda RBX: 00007faf60e25fa0 RCX: 00007faf60b9e559
[  513.576288][ T9156] RDX: 0000200000000000 RSI: 00000000c020660b RDI: 0000000000000003
[  513.576300][ T9156] RBP: 00007faf61a37090 R08: 0000000000000000 R09: 0000000000000000
[  513.576311][ T9156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  513.576322][ T9156] R13: 00007faf60e26038 R14: 00007faf60e25fa0 R15: 00007fff1a64fdd8
[  513.576346][ T9156]  </TASK>
[  513.576354][ T9156] ERROR: Out of memory at tomoyo_realpath_from_path.
[  513.670673][   T30] audit: type=1400 audit(1792426254.460:349): avc:  denied  { create } for  pid=9153 comm="syz.6.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  513.671045][   T30] audit: type=1400 audit(1792426254.460:350): avc:  denied  { write } for  pid=9153 comm="syz.6.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  513.671250][   T30] audit: type=1400 audit(1792426254.460:351): avc:  denied  { nlmsg_write } for  pid=9153 comm="syz.6.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  514.794160][ T9157] netlink: 168 bytes leftover after parsing attributes in process `syz.6.637'.
[  514.808428][ T5738] usb 4-1: USB disconnect, device number 20
[  515.106633][   T30] audit: type=1400 audit(1792426255.890:352): avc:  denied  { create } for  pid=9166 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  515.138882][   T30] audit: type=1400 audit(1792426255.930:353): avc:  denied  { ioctl } for  pid=9166 comm="syz.4.641" path="socket:[22793]" dev="sockfs" ino=22793 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  515.304111][   T30] audit: type=1400 audit(1792426256.000:354): avc:  denied  { write } for  pid=9145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  515.304164][   T30] audit: type=1400 audit(1792426256.070:355): avc:  denied  { write } for  pid=9173 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  515.459807][   T30] audit: type=1400 audit(1792426256.230:356): avc:  denied  { write } for  pid=9166 comm="syz.4.641" name="mtdblock0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  515.964656][ T9187] FAULT_INJECTION: forcing a failure.
[  515.964656][ T9187] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  515.964679][ T9187] CPU: 1 UID: 0 PID: 9187 Comm: syz.6.644 Not tainted syzkaller #0 PREEMPT(full) 
[  515.964692][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  515.964698][ T9187] Call Trace:
[  515.964702][ T9187]  <TASK>
[  515.964707][ T9187]  dump_stack_lvl+0x100/0x190
[  515.964735][ T9187]  should_fail_ex.cold+0x5/0xa
[  515.964750][ T9187]  ? prepare_alloc_pages+0x16d/0x5b0
[  515.964769][ T9187]  should_fail_alloc_page+0xeb/0x140
[  515.964786][ T9187]  prepare_alloc_pages+0x1f0/0x5b0
[  515.964805][ T9187]  ? down_write+0x146/0x1f0
[  515.964818][ T9187]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  515.964834][ T9187]  ? process_measurement+0x1f4/0x2350
[  515.964854][ T9187]  ? __lock_acquire+0x5c0/0x1f40
[  515.964870][ T9187]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  515.964883][ T9187]  ? __lock_acquire+0x5c0/0x1f40
[  515.964897][ T9187]  ? lock_acquire+0x1d1/0x380
[  515.964910][ T9187]  ? unwind_next_frame+0xbd/0x2090
[  515.964928][ T9187]  ? lock_acquire+0x1d1/0x380
[  515.964940][ T9187]  ? is_bpf_text_address+0x25/0x1a0
[  515.964958][ T9187]  ? is_bpf_text_address+0x8a/0x1a0
[  515.964977][ T9187]  ? vma_is_special_huge+0x23f/0x2d0
[  515.964994][ T9187]  ? __pfx_vma_is_special_huge+0x10/0x10
[  515.965011][ T9187]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  515.965027][ T9187]  ? policy_nodemask+0xed/0x4f0
[  515.965045][ T9187]  alloc_pages_mpol+0x201/0x550
[  515.965063][ T9187]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  515.965081][ T9187]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[  515.965095][ T9187]  alloc_pages_noprof+0x1a/0x160
[  515.965108][ T9187]  __pmd_alloc+0x3b/0x950
[  515.965125][ T9187]  __handle_mm_fault+0xa9d/0x2f60
[  515.965140][ T9187]  ? __pfx___handle_mm_fault+0x10/0x10
[  515.965150][ T9187]  ? __pfx_mt_find+0x10/0x10
[  515.965168][ T9187]  ? find_vma+0xbf/0x140
[  515.965182][ T9187]  ? __pfx_find_vma+0x10/0x10
[  515.965197][ T9187]  handle_mm_fault+0x363/0xa20
[  515.965211][ T9187]  do_user_addr_fault+0x745/0x12f0
[  515.965230][ T9187]  exc_page_fault+0x6f/0xd0
[  515.965247][ T9187]  asm_exc_page_fault+0x26/0x30
[  515.965258][ T9187] RIP: 0010:__put_user_4+0xd/0x30
[  515.965273][ T9187] Code: 66 89 01 31 c9 0f 01 ca e9 00 ed 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d7 ec 03 00 0f 1f 80 00 00 00 00 90 90 90
[  515.965285][ T9187] RSP: 0018:ffffc90009b3fe10 EFLAGS: 00050246
[  515.965294][ T9187] RAX: 000000000000002b RBX: 0000000000000000 RCX: 0000000000000000
[  515.965301][ T9187] RDX: ffff888060052580 RSI: ffffffff8262a361 RDI: ffffffff8c625680
[  515.965308][ T9187] RBP: 1ffff92001367fc6 R08: 000000000004d970 R09: 00000000000001d0
[  515.965315][ T9187] R10: 0000000000000200 R11: 0000000000000000 R12: 000000000000002b
[  515.965321][ T9187] R13: 000000000000002c R14: 0000000000000002 R15: dffffc0000000000
[  515.965332][ T9187]  ? __might_fault+0x111/0x140
[  515.965345][ T9187]  __sys_socketpair+0x120/0x5b0
[  515.965363][ T9187]  ? __pfx___sys_socketpair+0x10/0x10
[  515.965381][ T9187]  ? __pfx_ksys_write+0x10/0x10
[  515.965397][ T9187]  __x64_sys_socketpair+0x96/0x100
[  515.965412][ T9187]  ? lockdep_hardirqs_on+0x7d/0x110
[  515.965428][ T9187]  do_syscall_64+0x123/0x790
[  515.965445][ T9187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.965456][ T9187] RIP: 0033:0x7fceab99e559
[  515.965470][ T9187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  515.965481][ T9187] RSP: 002b:00007fceac902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  515.965491][ T9187] RAX: ffffffffffffffda RBX: 00007fceabc25fa0 RCX: 00007fceab99e559
[  515.965498][ T9187] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  515.965504][ T9187] RBP: 00007fceac902090 R08: 0000000000000000 R09: 0000000000000000
[  515.965510][ T9187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  515.965516][ T9187] R13: 00007fceabc26038 R14: 00007fceabc25fa0 R15: 00007ffcfcc36d68
[  515.965531][ T9187]  </TASK>
[  516.794878][ T9201] FAULT_INJECTION: forcing a failure.
[  516.794878][ T9201] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  516.794907][ T9201] CPU: 1 UID: 0 PID: 9201 Comm: syz.6.646 Not tainted syzkaller #0 PREEMPT(full) 
[  516.794920][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  516.794927][ T9201] Call Trace:
[  516.794931][ T9201]  <TASK>
[  516.794936][ T9201]  dump_stack_lvl+0x100/0x190
[  516.794957][ T9201]  should_fail_ex.cold+0x5/0xa
[  516.794973][ T9201]  _copy_from_user+0x2e/0xd0
[  516.794990][ T9201]  copy_msghdr_from_user+0x9f/0x4c0
[  516.795007][ T9201]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  516.795025][ T9201]  ? __lock_acquire+0x5c0/0x1f40
[  516.795042][ T9201]  ___sys_recvmsg+0xdd/0x1a0
[  516.795059][ T9201]  ? __pfx____sys_recvmsg+0x10/0x10
[  516.795075][ T9201]  ? lock_acquire+0x1d1/0x380
[  516.795098][ T9201]  __x64_sys_recvmsg+0x19a/0x260
[  516.795110][ T9201]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  516.795130][ T9201]  do_syscall_64+0x123/0x790
[  516.795148][ T9201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.795160][ T9201] RIP: 0033:0x7fceab99e559
[  516.795169][ T9201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  516.795180][ T9201] RSP: 002b:00007fceac902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  516.795192][ T9201] RAX: ffffffffffffffda RBX: 00007fceabc25fa0 RCX: 00007fceab99e559
[  516.795199][ T9201] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000004
[  516.795205][ T9201] RBP: 00007fceac902090 R08: 0000000000000000 R09: 0000000000000000
[  516.795212][ T9201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  516.795218][ T9201] R13: 00007fceabc26038 R14: 00007fceabc25fa0 R15: 00007ffcfcc36d68
[  516.795232][ T9201]  </TASK>
[  518.268483][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  518.268501][   T30] audit: type=1400 audit(1792426259.060:364): avc:  denied  { getopt } for  pid=9210 comm="syz.3.648" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  518.475308][ T9221] FAULT_INJECTION: forcing a failure.
[  518.475308][ T9221] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  518.475348][ T9221] CPU: 0 UID: 0 PID: 9221 Comm: syz.6.651 Not tainted syzkaller #0 PREEMPT(full) 
[  518.475375][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  518.475389][ T9221] Call Trace:
[  518.475397][ T9221]  <TASK>
[  518.475406][ T9221]  dump_stack_lvl+0x100/0x190
[  518.475447][ T9221]  should_fail_ex.cold+0x5/0xa
[  518.475481][ T9221]  _copy_from_user+0x2e/0xd0
[  518.475516][ T9221]  do_replace+0x3f7/0x490
[  518.475544][ T9221]  ? __pfx_do_replace+0x10/0x10
[  518.475582][ T9221]  ? bpf_lsm_capable+0x9/0x10
[  518.475604][ T9221]  ? security_capable+0x80/0x260
[  518.475637][ T9221]  do_ebt_set_ctl+0x55a/0x670
[  518.475666][ T9221]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  518.475696][ T9221]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  518.475731][ T9221]  ? __pfx_sock_has_perm+0x10/0x10
[  518.475764][ T9221]  ? nf_sockopt_find.isra.0+0x222/0x290
[  518.475796][ T9221]  nf_setsockopt+0x8d/0xf0
[  518.475826][ T9221]  ip_setsockopt+0xcb/0xf0
[  518.475862][ T9221]  raw_setsockopt+0x60/0x1b0
[  518.475895][ T9221]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  518.475928][ T9221]  do_sock_setsockopt+0xf3/0x1d0
[  518.475960][ T9221]  __sys_setsockopt+0x195/0x220
[  518.475989][ T9221]  __x64_sys_setsockopt+0xbd/0x160
[  518.476011][ T9221]  ? do_syscall_64+0xae/0x790
[  518.476051][ T9221]  ? lockdep_hardirqs_on+0x7d/0x110
[  518.476085][ T9221]  do_syscall_64+0x123/0x790
[  518.476121][ T9221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.476145][ T9221] RIP: 0033:0x7fceab99e559
[  518.476164][ T9221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  518.476186][ T9221] RSP: 002b:00007fceac8e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  518.476209][ T9221] RAX: ffffffffffffffda RBX: 00007fceabc26090 RCX: 00007fceab99e559
[  518.476224][ T9221] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000009
[  518.476238][ T9221] RBP: 00007fceac8e0090 R08: 0000000000000298 R09: 0000000000000000
[  518.476251][ T9221] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001
[  518.476265][ T9221] R13: 00007fceabc26128 R14: 00007fceabc26090 R15: 00007ffcfcc36d68
[  518.476296][ T9221]  </TASK>
[  519.079279][ T9227] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  519.089390][ T9229] iommufd_mock iommufd_mock0: Adding to iommu group 1
[  519.440795][   T30] audit: type=1400 audit(1792426260.230:365): avc:  denied  { bind } for  pid=9242 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  519.445834][   T30] audit: type=1400 audit(1792426260.230:366): avc:  denied  { name_bind } for  pid=9242 comm="syz.0.656" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  519.446722][   T30] audit: type=1400 audit(1792426260.230:367): avc:  denied  { node_bind } for  pid=9242 comm="syz.0.656" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  519.450465][   T30] audit: type=1400 audit(1792426260.240:368): avc:  denied  { write } for  pid=9242 comm="syz.0.656" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  519.450506][   T30] audit: type=1400 audit(1792426260.240:369): avc:  denied  { connect } for  pid=9242 comm="syz.0.656" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  519.450536][   T30] audit: type=1400 audit(1792426260.240:370): avc:  denied  { name_connect } for  pid=9242 comm="syz.0.656" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  519.457349][   T30] audit: type=1400 audit(1792426260.240:371): avc:  denied  { read } for  pid=9242 comm="syz.0.656" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  519.463276][   T30] audit: type=1400 audit(1792426260.240:372): avc:  denied  { unlink } for  pid=9247 comm="syz.6.657" name="#4f" dev="tmpfs" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  519.474345][ T9248] evm: overlay not supported
[  519.477378][ T8529] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  519.598518][   T30] audit: type=1400 audit(1792426260.370:373): avc:  denied  { write } for  pid=9211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  519.664845][ T8529] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  519.691495][ T8529] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  519.691527][ T8529] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  519.691544][ T8529] usb 4-1: config 0 interface 0 has no altsetting 0
[  519.691562][ T8529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.694683][ T8529] usb 4-1: config 0 descriptor??
[  519.734427][ T9236] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  520.867626][ T8529] hid_parser_main: 11 callbacks suppressed
[  520.867653][ T8529] logitech-djreceiver 0003:046D:C532.0018: unknown main item tag 0x0
[  520.867681][ T8529] logitech-djreceiver 0003:046D:C532.0018: unknown main item tag 0x0
[  520.867706][ T8529] logitech-djreceiver 0003:046D:C532.0018: unknown main item tag 0x0
[  520.867731][ T8529] logitech-djreceiver 0003:046D:C532.0018: unknown main item tag 0x0
[  520.871025][ T8529] logitech-djreceiver 0003:046D:C532.0018: unknown main item tag 0x0
[  520.871054][ T8529] logitech-djreceiver 0003:046D:C532.0018: unknown main item tag 0x0
[  520.871077][ T8529] logitech-djreceiver 0003:046D:C532.0018: unknown main item tag 0x0
[  520.975853][ T9257] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  523.193157][ T9303] FAULT_INJECTION: forcing a failure.
[  523.193157][ T9303] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  523.193187][ T9303] CPU: 1 UID: 0 PID: 9303 Comm: syz.4.662 Not tainted syzkaller #0 PREEMPT(full) 
[  523.193207][ T9303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  523.193217][ T9303] Call Trace:
[  523.193226][ T9303]  <TASK>
[  523.193233][ T9303]  dump_stack_lvl+0x100/0x190
[  523.193265][ T9303]  should_fail_ex.cold+0x5/0xa
[  523.193289][ T9303]  _copy_from_user+0x2e/0xd0
[  523.193316][ T9303]  copy_msghdr_from_user+0x9f/0x4c0
[  523.193343][ T9303]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  523.193373][ T9303]  ? lock_acquire+0x1d1/0x380
[  523.193395][ T9303]  ? get_pid_task+0x2a/0x250
[  523.193422][ T9303]  ___sys_sendmsg+0x106/0x1e0
[  523.193446][ T9303]  ? __pfx____sys_sendmsg+0x10/0x10
[  523.193469][ T9303]  ? get_pid_task+0x106/0x250
[  523.193501][ T9303]  ? find_held_lock+0x2b/0x80
[  523.193543][ T9303]  __sys_sendmsg+0x160/0x210
[  523.193562][ T9303]  ? __pfx___sys_sendmsg+0x10/0x10
[  523.193593][ T9303]  do_syscall_64+0x123/0x790
[  523.193624][ T9303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.193642][ T9303] RIP: 0033:0x7faf60b9e559
[  523.193658][ T9303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  523.193674][ T9303] RSP: 002b:00007faf61a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  523.193693][ T9303] RAX: ffffffffffffffda RBX: 00007faf60e25fa0 RCX: 00007faf60b9e559
[  523.193705][ T9303] RDX: 000000000000c000 RSI: 0000200000000380 RDI: 0000000000000003
[  523.193716][ T9303] RBP: 00007faf61a37090 R08: 0000000000000000 R09: 0000000000000000
[  523.193726][ T9303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  523.193737][ T9303] R13: 00007faf60e26038 R14: 00007faf60e25fa0 R15: 00007fff1a64fdd8
[  523.193761][ T9303]  </TASK>
[  523.198506][ T8529] usb 4-1: USB disconnect, device number 21
[  523.413995][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  523.414013][   T30] audit: type=1400 audit(1792426264.200:379): avc:  denied  { create } for  pid=9308 comm="syz.3.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  523.438675][   T30] audit: type=1400 audit(1792426264.210:380): avc:  denied  { write } for  pid=9290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  523.580655][   T30] audit: type=1400 audit(1792426264.350:381): avc:  denied  { write } for  pid=9308 comm="syz.3.669" name="sg0" dev="devtmpfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  523.580864][   T30] audit: type=1400 audit(1792426264.350:382): avc:  denied  { open } for  pid=9308 comm="syz.3.669" path="/dev/sg0" dev="devtmpfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  523.580972][   T30] audit: type=1400 audit(1792426264.360:383): avc:  denied  { ioctl } for  pid=9308 comm="syz.3.669" path="/dev/sg0" dev="devtmpfs" ino=1186 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  523.911024][ T9311] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  524.036166][   T30] audit: type=1400 audit(1792426264.820:384): avc:  denied  { write } for  pid=9320 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  524.066682][ T9324] FAULT_INJECTION: forcing a failure.
[  524.066682][ T9324] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  524.066716][ T9324] CPU: 1 UID: 0 PID: 9324 Comm: syz.5.673 Not tainted syzkaller #0 PREEMPT(full) 
[  524.066739][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  524.066752][ T9324] Call Trace:
[  524.066760][ T9324]  <TASK>
[  524.066768][ T9324]  dump_stack_lvl+0x100/0x190
[  524.066806][ T9324]  should_fail_ex.cold+0x5/0xa
[  524.066844][ T9324]  _copy_from_user+0x2e/0xd0
[  524.066874][ T9324]  __sys_bpf+0x2f5/0x4a30
[  524.066905][ T9324]  ? __pfx___sys_bpf+0x10/0x10
[  524.066927][ T9324]  ? find_held_lock+0x2b/0x80
[  524.066959][ T9324]  ? get_pid_task+0xfc/0x250
[  524.066982][ T9324]  ? get_pid_task+0xfc/0x250
[  524.067011][ T9324]  ? find_held_lock+0x2b/0x80
[  524.067046][ T9324]  ? rcu_read_lock_any_held+0x6a/0x90
[  524.067066][ T9324]  ? find_held_lock+0x2b/0x80
[  524.067093][ T9324]  ? ksys_write+0x190/0x250
[  524.067118][ T9324]  ? ksys_write+0x190/0x250
[  524.067141][ T9324]  ? lock_acquire+0x1d1/0x380
[  524.067182][ T9324]  ? fput+0x7c/0x100
[  524.067209][ T9324]  ? ksys_write+0x1ac/0x250
[  524.067237][ T9324]  ? __x64_sys_bpf+0xce/0x140
[  524.067259][ T9324]  __x64_sys_bpf+0xce/0x140
[  524.067283][ T9324]  ? do_syscall_64+0xae/0x790
[  524.067315][ T9324]  do_syscall_64+0x123/0x790
[  524.067346][ T9324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.067367][ T9324] RIP: 0033:0x7f222359e559
[  524.067386][ T9324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  524.067405][ T9324] RSP: 002b:00007f2224392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  524.067427][ T9324] RAX: ffffffffffffffda RBX: 00007f2223825fa0 RCX: 00007f222359e559
[  524.067440][ T9324] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  524.067452][ T9324] RBP: 00007f2224392090 R08: 0000000000000000 R09: 0000000000000000
[  524.067465][ T9324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  524.067476][ T9324] R13: 00007f2223826038 R14: 00007f2223825fa0 R15: 00007fffb1518dc8
[  524.067504][ T9324]  </TASK>
[  525.287916][   T30] audit: type=1400 audit(1792426266.080:385): avc:  denied  { getopt } for  pid=9333 comm="syz.5.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  525.334310][ T9331] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x148000
[  525.334336][ T9331] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  525.334355][ T9331] raw: 057ff00000000000 0000000000000000 dead000000000122 0000000000000000
[  525.334369][ T9331] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  525.334378][ T9331] page dumped because: unmovable page
[  525.334386][ T9331] page_owner tracks the page as allocated
[  525.334391][ T9331] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1528958165
[  525.334413][ T9331]  register_early_stack+0x74/0xaf
[  525.334434][ T9331]  init_page_owner+0x4c/0xa40
[  525.334451][ T9331]  page_ext_init+0x71d/0x780
[  525.334472][ T9331]  mm_core_init+0x229/0x270
[  525.334487][ T9331] page_owner free stack trace missing
[  525.340155][   T30] audit: type=1400 audit(1792426266.130:386): avc:  denied  { read } for  pid=4950 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  525.340203][   T30] audit: type=1400 audit(1792426266.130:387): avc:  denied  { search } for  pid=4950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  525.340238][   T30] audit: type=1400 audit(1792426266.130:388): avc:  denied  { write search } for  pid=4950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  529.114650][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  529.114693][   T30] audit: type=1400 audit(1792426269.860:400): avc:  denied  { create } for  pid=9333 comm="syz.5.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  529.970527][ T9343] input: syz0 as /devices/virtual/input/input7
[  536.626611][   T30] audit: type=1400 audit(1792426277.400:401): avc:  denied  { append } for  pid=9355 comm="syz.0.679" name="event2" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  538.015214][ T9356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.082950][ T9356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  545.298508][   T30] audit: type=1400 audit(1792426286.060:402): avc:  denied  { write } for  pid=9378 comm="syz.0.683" name="snmp" dev="proc" ino=4026533257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  546.180046][ T5712] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  546.444593][ T5712] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  546.551039][ T5712] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  546.551075][ T5712] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024
[  546.551093][ T5712] usb 6-1: config 0 interface 0 has no altsetting 0
[  546.551184][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.953600][ T5712] usb 6-1: config 0 descriptor??
[  548.801278][ T5712] usb 6-1: can't set config #0, error -71
[  549.169358][ T5712] usb 6-1: USB disconnect, device number 12
[  552.182670][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  552.198360][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  552.222991][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  552.289583][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  552.325161][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  553.086905][ T5600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  553.107723][ T5600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  553.117659][ T5600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  553.204072][ T5600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  553.249816][ T5600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  553.640265][   T30] audit: type=1400 audit(1792426294.420:403): avc:  denied  { mounton } for  pid=9387 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  555.387484][ T5610] Bluetooth: hci4: command tx timeout
[  557.459188][ T5610] Bluetooth: hci4: command tx timeout
[  559.293430][ T9399] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  559.541120][ T5610] Bluetooth: hci4: command tx timeout
[  561.619511][ T5610] Bluetooth: hci4: command tx timeout
[  562.921140][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  562.921625][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  563.455100][ T5600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  563.477795][ T5600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  563.488156][ T5600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  563.524468][ T5600] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  563.544933][ T5600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  565.697842][ T5610] Bluetooth: hci6: command tx timeout
[  565.718797][ T9414] FAULT_INJECTION: forcing a failure.
[  565.718797][ T9414] name failslab, interval 1, probability 0, space 0, times 0
[  565.718864][ T9414] CPU: 0 UID: 0 PID: 9414 Comm: syz.5.692 Not tainted syzkaller #0 PREEMPT(full) 
[  565.718898][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  565.718921][ T9414] Call Trace:
[  565.718967][ T9414]  <TASK>
[  565.719015][ T9414]  dump_stack_lvl+0x100/0x190
[  565.719134][ T9414]  should_fail_ex.cold+0x5/0xa
[  565.719317][ T9414]  should_failslab+0xc2/0x120
[  565.719441][ T9414]  __kmalloc_cache_noprof+0x91/0x6d0
[  565.719581][ T9414]  ? copy_mount_options+0x55/0x190
[  565.719758][ T9414]  copy_mount_options+0x55/0x190
[  565.719967][ T9414]  __x64_sys_mount+0x1ab/0x310
[  565.720078][ T9414]  ? __pfx___x64_sys_mount+0x10/0x10
[  565.720393][ T9414]  do_syscall_64+0x123/0x790
[  565.720580][ T9414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.720621][ T9414] RIP: 0033:0x7f222359e559
[  565.720688][ T9414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.720714][ T9414] RSP: 002b:00007f2224392028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  565.720749][ T9414] RAX: ffffffffffffffda RBX: 00007f2223825fa0 RCX: 00007f222359e559
[  565.720770][ T9414] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000
[  565.720790][ T9414] RBP: 00007f2224392090 R08: 0000200000004380 R09: 0000000000000000
[  565.720810][ T9414] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  565.720830][ T9414] R13: 00007f2223826038 R14: 00007f2223825fa0 R15: 00007fffb1518dc8
[  565.721283][ T9414]  </TASK>
[  567.785717][ T5610] Bluetooth: hci6: command tx timeout
[  569.875045][ T5610] Bluetooth: hci6: command tx timeout
[  571.939683][ T5610] Bluetooth: hci6: command tx timeout
[  572.431982][ T1230] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  572.678236][ T1230] usb 6-1: Using ep0 maxpacket: 16
[  572.709523][ T1230] usb 6-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00
[  572.831881][ T1230] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  572.831929][ T1230] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  572.831964][ T1230] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  572.832002][ T1230] usb 6-1: config 0 interface 0 has no altsetting 0
[  572.832144][ T1230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.109427][ T1230] usb 6-1: config 0 descriptor??
[  579.474593][ T1230] usb 6-1: string descriptor 0 read error: -71
[  579.828596][ T1230] usbhid 6-1:0.0: can't add hid device: -71
[  579.829251][ T1230] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  580.241016][ T5600] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  580.273199][ T5600] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  580.275260][ T1230] usb 6-1: USB disconnect, device number 13
[  580.284062][ T5600] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  580.311254][ T5600] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  580.363743][ T5600] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  582.500650][ T5600] Bluetooth: hci7: command tx timeout
[  582.993205][ T9387] rxe_eth0 speed is unknown, defaulting to 1000
[  584.577297][ T5600] Bluetooth: hci7: command tx timeout
[  586.658011][ T5600] Bluetooth: hci7: command tx timeout
[  587.912546][ T6234] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.743078][ T5600] Bluetooth: hci7: command tx timeout
[  590.560640][ T6234] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.556147][ T6234] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.664167][  T983] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  594.917970][  T983] usb 4-1: Using ep0 maxpacket: 16
[  594.988566][  T983] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  595.102801][  T983] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  595.102843][  T983] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  595.102869][  T983] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  595.102898][  T983] usb 4-1: config 0 interface 0 has no altsetting 0
[  595.103086][  T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.380416][  T983] usb 4-1: config 0 descriptor??
[  595.608835][ T6234] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.796467][   T30] audit: type=1400 audit(1792426337.550:404): avc:  denied  { write } for  pid=9452 comm="syz.3.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  597.292439][  T983] hid (null): unknown global tag 0xc
[  597.292481][  T983] hid (null): report_id 3323596431 is invalid
[  597.292500][  T983] hid (null): unknown global tag 0xe
[  597.292534][  T983] hid (null): unknown global tag 0xe
[  597.292557][  T983] hid (null): unknown global tag 0xe
[  597.292627][  T983] hid (null): unknown global tag 0x63
[  597.292657][  T983] hid (null): unknown global tag 0xe
[  597.292676][  T983] hid (null): global environment stack underflow
[  597.292714][  T983] hid (null): unknown global tag 0xc
[  597.356202][  T983] hid (null): unknown global tag 0xe4
[  597.719114][  T983] usb 4-1: USB disconnect, device number 22
[  602.663880][   T30] audit: type=1400 audit(1792426343.440:405): avc:  denied  { read } for  pid=5263 comm="dhcpcd" name="n60" dev="tmpfs" ino=3072 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  602.693311][   T30] audit: type=1400 audit(1792426343.460:406): avc:  denied  { open } for  pid=5263 comm="dhcpcd" path="/run/udev/data/n60" dev="tmpfs" ino=3072 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  602.749057][   T30] audit: type=1400 audit(1792426343.500:407): avc:  denied  { getattr } for  pid=5263 comm="dhcpcd" path="/run/udev/data/n60" dev="tmpfs" ino=3072 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  602.749861][ T9467] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  606.584920][ T6234] bridge_slave_1: left allmulticast mode
[  606.584986][ T6234] bridge_slave_1: left promiscuous mode
[  606.600242][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.873806][ T6234] bridge_slave_0: left allmulticast mode
[  606.873854][ T6234] bridge_slave_0: left promiscuous mode
[  606.896706][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.856691][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  612.880288][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  612.887580][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  612.934292][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  612.959081][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  615.059315][ T5610] Bluetooth: hci0: command tx timeout
[  615.832087][   T30] audit: type=1400 audit(1792426356.610:408): avc:  denied  { read write } for  pid=9491 comm="syz.5.704" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  615.919177][   T30] audit: type=1400 audit(1792426356.670:409): avc:  denied  { open } for  pid=9491 comm="syz.5.704" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  616.335013][   T30] audit: type=1400 audit(1792426357.110:410): avc:  denied  { ioctl } for  pid=9491 comm="syz.5.704" path="socket:[24945]" dev="sockfs" ino=24945 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  617.138026][ T5610] Bluetooth: hci0: command tx timeout
[  617.216376][   T30] audit: type=1400 audit(1792426358.000:411): avc:  denied  { create } for  pid=9491 comm="syz.5.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  618.549116][ T6234] bond0 (unregistering): Released all slaves
[  619.219405][ T5610] Bluetooth: hci0: command tx timeout
[  619.822876][ T6234] bond1 (unregistering): Released all slaves
[  620.607731][   T30] audit: type=1400 audit(1792426361.380:412): avc:  denied  { create } for  pid=9503 comm="syz.3.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  620.963324][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  620.979361][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  620.984195][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  620.993144][ T6234] bond2 (unregistering): Released all slaves
[  621.019084][ T5600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  621.026914][ T5600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  621.111341][   T30] audit: type=1400 audit(1792426361.850:413): avc:  denied  { write } for  pid=9503 comm="syz.3.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  621.298410][ T5600] Bluetooth: hci0: command tx timeout
[  622.170456][ T6234] bond3 (unregistering): Released all slaves
[  622.960584][ T6234] bond4 (unregistering): Released all slaves
[  623.297338][ T5600] Bluetooth: hci1: command tx timeout
[  623.808320][ T6234] bond5 (unregistering): Released all slaves
[  624.392008][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  624.392490][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  624.693619][ T6234] bond6 (unregistering): Released all slaves
[  624.853331][   T30] audit: type=1400 audit(1792426365.640:414): avc:  denied  { write } for  pid=9476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  624.856038][   T30] audit: type=1400 audit(1792426365.640:415): avc:  denied  { create } for  pid=9476 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  624.933965][   T30] audit: type=1400 audit(1792426365.720:416): avc:  denied  { write } for  pid=9476 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.link" dev="tmpfs" ino=3083 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  624.970788][   T30] audit: type=1400 audit(1792426365.720:417): avc:  denied  { append } for  pid=9476 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" dev="tmpfs" ino=3083 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  625.141407][ T6234] bond7 (unregistering): Released all slaves
[  625.380116][ T5600] Bluetooth: hci1: command tx timeout
[  625.612595][ T6234] bond8 (unregistering): Released all slaves
[  625.774886][   T30] audit: type=1400 audit(1792426366.530:418): avc:  denied  { ioctl } for  pid=9517 comm="syz.3.707" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  626.284451][ T6234] bond9 (unregistering): Released all slaves
[  627.096893][ T6234] bond10 (unregistering): Released all slaves
[  627.458143][ T5600] Bluetooth: hci1: command tx timeout
[  627.890011][ T6234] bond11 (unregistering): Released all slaves
[  629.065562][ T6234] bond12 (unregistering): Released all slaves
[  629.382178][   T30] audit: type=1400 audit(1792426370.160:419): avc:  denied  { write } for  pid=9522 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  629.411034][   T30] audit: type=1400 audit(1792426370.170:420): avc:  denied  { unlink } for  pid=9522 comm="rm" name="resolv.conf.eth9.link" dev="tmpfs" ino=3083 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  629.544034][ T5600] Bluetooth: hci1: command tx timeout
[  630.175838][ T6234] bond13 (unregistering): Released all slaves
[  631.354827][ T6234] bond14 (unregistering): Released all slaves
[  632.453655][ T6234] bond15 (unregistering): Released all slaves
[  632.733060][ T9529] FAULT_INJECTION: forcing a failure.
[  632.733060][ T9529] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  632.733104][ T9529] CPU: 0 UID: 0 PID: 9529 Comm: syz.3.710 Not tainted syzkaller #0 PREEMPT(full) 
[  632.733129][ T9529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  632.733146][ T9529] Call Trace:
[  632.733168][ T9529]  <TASK>
[  632.733195][ T9529]  dump_stack_lvl+0x100/0x190
[  632.733342][ T9529]  should_fail_ex.cold+0x5/0xa
[  632.733594][ T9529]  _copy_from_user+0x2e/0xd0
[  632.733688][ T9529]  uinput_ioctl_handler.isra.0+0x1469/0x1d20
[  632.733775][ T9529]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  632.733821][ T9529]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  632.733921][ T9529]  ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10
[  632.734005][ T9529]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  632.734621][ T9529]  ? selinux_file_ioctl+0x13b/0x290
[  632.734667][ T9529]  ? selinux_file_ioctl+0xb6/0x290
[  632.734758][ T9529]  ? __pfx_uinput_ioctl+0x10/0x10
[  632.734876][ T9529]  __x64_sys_ioctl+0x18e/0x210
[  632.735065][ T9529]  do_syscall_64+0x123/0x790
[  632.735169][ T9529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.735216][ T9529] RIP: 0033:0x7ff257d9e559
[  632.735284][ T9529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  632.735307][ T9529] RSP: 002b:00007ff258bdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  632.735342][ T9529] RAX: ffffffffffffffda RBX: 00007ff258025fa0 RCX: 00007ff257d9e559
[  632.735361][ T9529] RDX: 0000000000000000 RSI: 00000000401c5504 RDI: 0000000000000003
[  632.735380][ T9529] RBP: 00007ff258bdd090 R08: 0000000000000000 R09: 0000000000000000
[  632.735399][ T9529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  632.735418][ T9529] R13: 00007ff258026038 R14: 00007ff258025fa0 R15: 00007fff5fc8edd8
[  632.735855][ T9529]  </TASK>
[  633.641412][ T6234] bond16 (unregistering): Released all slaves
[  634.631229][ T6234] bond17 (unregistering): Released all slaves
[  635.472425][ T6234] bond18 (unregistering): Released all slaves
[  635.636642][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  635.657478][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  635.675182][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  635.692418][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  635.706727][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  636.340952][ T9535] syz.3.711 uses obsolete (PF_INET,SOCK_PACKET)
[  636.634165][ T9535] netlink: 'syz.3.711': attribute type 1 has an invalid length.
[  636.635240][ T9535] netlink: 'syz.3.711': attribute type 1 has an invalid length.
[  636.635274][ T9535] netlink: 196 bytes leftover after parsing attributes in process `syz.3.711'.
[  636.635308][ T9535] netlink: 'syz.3.711': attribute type 1 has an invalid length.
[  636.941722][ T5610] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  636.960632][ T5610] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  636.990906][ T5610] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  636.992775][ T6234] bond19 (unregistering): Released all slaves
[  637.064963][ T5610] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  637.085880][ T5610] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  637.788152][ T5610] Bluetooth: hci3: command tx timeout
[  639.217753][ T5610] Bluetooth: hci8: command tx timeout
[  639.521339][ T9405] rxe_eth0 speed is unknown, defaulting to 1000
[  639.756570][ T9494] netlink: 128 bytes leftover after parsing attributes in process `syz.5.704'.
[  639.855488][ T9494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  639.858529][ T5610] Bluetooth: hci3: command tx timeout
[  640.140324][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9
[  641.308404][ T5610] Bluetooth: hci8: command tx timeout
[  641.957103][ T5610] Bluetooth: hci3: command tx timeout
[  643.388710][ T5610] Bluetooth: hci8: command tx timeout
[  644.025145][ T5610] Bluetooth: hci3: command tx timeout
[  645.469280][ T5610] Bluetooth: hci8: command tx timeout
[  668.195371][   T30] audit: type=1400 audit(1792426408.960:421): avc:  denied  { append } for  pid=9589 comm="syz.3.715" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  670.392108][ T9591] loop5: detected capacity change from 0 to 7
[  670.655866][ T9591] Dev loop5: unable to read RDB block 7
[  670.655937][ T9591]  loop5: unable to read partition table
[  670.679333][ T9591] loop5: partition table beyond EOD, truncated
[  670.679374][ T9591] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  675.555606][ T5600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  675.609961][ T9389] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  675.614378][ T9389] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  675.652398][ T9389] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  675.669768][ T9389] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  677.620478][ T9389] Bluetooth: hci4: command 0x0406 tx timeout
[  678.186529][ T9536] rxe_eth0 speed is unknown, defaulting to 1000
[  678.418318][ T5600] Bluetooth: hci5: command tx timeout
[  680.497588][ T5600] Bluetooth: hci5: command tx timeout
[  681.844840][   T30] audit: type=1400 audit(1792426422.610:422): avc:  denied  { write } for  pid=9574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  682.578749][ T5600] Bluetooth: hci5: command tx timeout
[  684.657131][ T5600] Bluetooth: hci5: command tx timeout
[  685.802307][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  685.802786][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  685.829229][ T9604] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  685.876216][ T9604] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  685.883940][ T9604] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  685.928413][ T9604] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  685.956076][ T9604] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  687.858641][ T5600] Bluetooth: hci6: command 0x0406 tx timeout
[  688.103053][ T5600] Bluetooth: hci7: command tx timeout
[  688.707152][   T30] audit: type=1400 audit(1792426429.490:423): avc:  denied  { write } for  pid=9620 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  690.178015][ T9389] Bluetooth: hci7: command tx timeout
[  692.246038][ T5711] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  692.246819][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  692.262955][ T9389] Bluetooth: hci7: command tx timeout
[  692.529895][ T5711] usb 4-1: device descriptor read/64, error -32
[  692.926453][ T5711] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  692.950244][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  693.130161][ T5711] usb 4-1: device descriptor read/64, error -32
[  693.240583][ T5711] usb usb4-port1: attempt power cycle
[  693.772791][ T5711] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  693.808545][    C0] raw-gadget.0 gadget.3: failed to queue control event
[  693.810877][ T5711] usb 4-1: device descriptor read/8, error -32
[  693.964746][ T5711] raw-gadget.0 gadget.3: failed to queue suspend event
[  693.980121][ T5711] raw-gadget.0 gadget.3: failed to queue reset event
[  694.061270][ T5711] raw-gadget.0 gadget.3: failed to queue resume event
[  694.141477][ T5711] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  694.169269][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  694.173369][ T5711] usb 4-1: device descriptor read/8, error -32
[  694.283426][ T5711] raw-gadget.0 gadget.3: failed to queue suspend event
[  694.284615][ T5711] usb usb4-port1: unable to enumerate USB device
[  694.337202][ T9389] Bluetooth: hci7: command tx timeout
[  700.690105][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  700.720020][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  700.725298][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  700.783953][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  700.840717][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  703.467327][ T9389] Bluetooth: hci0: command tx timeout
[  703.471064][ T9389] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  703.483758][ T9389] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  703.493225][ T9389] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  703.551263][ T9389] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  703.560846][ T9389] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  705.547510][ T9389] Bluetooth: hci0: command tx timeout
[  706.152755][ T5263] 8021q: adding VLAN 0 to HW filter on device eth10
[  706.268388][ T9389] Bluetooth: hci9: command tx timeout
[  707.628037][ T9389] Bluetooth: hci0: command tx timeout
[  708.337273][ T9389] Bluetooth: hci9: command tx timeout
[  709.698263][ T9389] Bluetooth: hci0: command tx timeout
[  710.417512][ T9389] Bluetooth: hci9: command tx timeout
[  712.497820][ T9389] Bluetooth: hci9: command tx timeout
[  716.270338][ T5600] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  716.285132][ T5600] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  716.294424][ T5600] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  716.318646][ T5600] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  716.334803][ T5600] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  717.231134][ T6234] hsr_slave_0: left promiscuous mode
[  717.400139][ T6234] hsr_slave_1: left promiscuous mode
[  717.548848][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  717.548891][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_0
[  717.713459][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  717.713507][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_1
[  718.144752][ T6234] veth1_macvtap: left promiscuous mode
[  718.169357][ T6234] veth0_macvtap: left promiscuous mode
[  718.214049][ T6234] veth1_vlan: left promiscuous mode
[  718.215092][ T6234] veth0_vlan: left promiscuous mode
[  718.835271][ T5600] Bluetooth: hci10: command tx timeout
[  720.897887][ T5600] Bluetooth: hci10: command tx timeout
[  722.977771][ T5600] Bluetooth: hci10: command tx timeout
[  725.069375][ T5600] Bluetooth: hci10: command tx timeout
[  733.938752][ T9389] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  733.960080][ T9389] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  733.980098][ T9389] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  734.005980][ T9389] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  734.025129][ T9389] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  736.177728][ T5600] Bluetooth: hci11: command tx timeout
[  737.051552][   T30] audit: type=1400 audit(1792426477.830:424): avc:  denied  { write } for  pid=9676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  737.822538][ T6234] team0 (unregistering): Port device team_slave_1 removed
[  738.257769][ T5600] Bluetooth: hci11: command tx timeout
[  738.561168][ T6234] team0 (unregistering): Port device team_slave_0 removed
[  739.807826][   T30] audit: type=1400 audit(1792426480.590:425): avc:  denied  { write } for  pid=9697 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  740.347311][ T5600] Bluetooth: hci11: command tx timeout
[  741.718567][ T9389] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  741.725749][ T9389] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  741.748982][ T9389] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  741.782826][ T9389] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  741.792861][ T9389] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  742.421979][ T9389] Bluetooth: hci11: command tx timeout
[  743.948027][ T9389] Bluetooth: hci2: command tx timeout
[  744.185842][ T9389] Bluetooth: hci1: command 0x0406 tx timeout
[  745.567656][ T9530] rxe_eth0 speed is unknown, defaulting to 1000
[  746.017397][ T5600] Bluetooth: hci2: command tx timeout
[  746.681913][ T5263] 8021q: adding VLAN 0 to HW filter on device eth11
[  746.806608][ T9629] raw-gadget.0 gadget.3: failed to queue disconnect event
[  747.263620][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  747.264108][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  748.100345][ T5600] Bluetooth: hci2: command tx timeout
[  750.190125][ T5600] Bluetooth: hci2: command tx timeout
[  759.542028][ T9604] Bluetooth: hci3: command 0x0406 tx timeout
[  759.548051][ T9604] Bluetooth: hci8: command 0x0406 tx timeout
[  767.826392][ T6234] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.061352][ T9389] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  768.100117][ T9389] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  768.128906][ T9389] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  768.152848][ T9389] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  768.189868][ T9389] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  770.338081][ T5600] Bluetooth: hci12: command tx timeout
[  770.617589][ T5600] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  770.634901][ T5600] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  770.654874][ T5600] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  770.666759][ T5600] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  770.760298][ T5600] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  771.155019][ T6234] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.433483][ T5600] Bluetooth: hci12: command tx timeout
[  772.898326][ T5600] Bluetooth: hci13: command tx timeout
[  774.345074][ T6234] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.507493][ T5600] Bluetooth: hci12: command tx timeout
[  774.987612][ T5600] Bluetooth: hci13: command tx timeout
[  776.577474][ T5600] Bluetooth: hci12: command tx timeout
[  777.068477][ T5600] Bluetooth: hci13: command tx timeout
[  777.740826][ T6234] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.147948][ T5600] Bluetooth: hci13: command tx timeout
[  780.941479][ T9389] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  780.974179][ T9389] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  780.996178][ T9389] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  781.066464][ T9389] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  781.088475][ T9389] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  783.219368][ T5600] Bluetooth: hci14: command tx timeout
[  785.300040][ T5600] Bluetooth: hci14: command tx timeout
[  787.387666][ T5600] Bluetooth: hci14: command tx timeout
[  789.457204][ T5600] Bluetooth: hci14: command tx timeout
[  792.469984][ T9506] rxe_eth0 speed is unknown, defaulting to 1000
[  797.804557][ T6234] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.285652][   T30] audit: type=1400 audit(1792426539.070:426): avc:  denied  { write } for  pid=9735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  800.659350][ T9389] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  800.675328][ T9389] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  800.687458][ T9389] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  800.726170][ T9389] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  800.750325][ T9389] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  802.900463][ T9389] Bluetooth: hci0: command tx timeout
[  803.826343][ T6234] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  804.989942][ T9389] Bluetooth: hci0: command tx timeout
[  805.077760][ T6234] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  805.434372][   T30] audit: type=1400 audit(1792426546.210:427): avc:  denied  { write } for  pid=9793 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  807.044391][ T6234] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.063476][ T9389] Bluetooth: hci0: command tx timeout
[  808.409570][ T5600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  808.440998][ T5600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  808.456198][ T5600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  808.475197][ T5600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  808.489622][ T5600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  808.691829][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  808.692314][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  809.140701][ T9389] Bluetooth: hci0: command tx timeout
[  810.095319][ T5263] 8021q: adding VLAN 0 to HW filter on device eth12
[  810.658495][ T9389] Bluetooth: hci4: command tx timeout
[  812.739420][ T9389] Bluetooth: hci4: command tx timeout
[  814.819282][ T9389] Bluetooth: hci4: command tx timeout
[  815.670212][ T6234] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.898788][ T9389] Bluetooth: hci4: command tx timeout
[  817.298821][ T6234] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.004216][ T6234] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.834098][ T6234] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  822.674442][ T5600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  822.700539][ T5600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  822.705718][ T5600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  822.780817][ T5600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  822.811802][ T5600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  824.814878][ T9736] rxe_eth0 speed is unknown, defaulting to 1000
[  825.059063][ T9389] Bluetooth: hci5: command tx timeout
[  825.202208][ T9389] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  825.225399][ T9389] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  825.241041][ T9389] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  825.301942][ T9389] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  825.333098][ T9389] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  827.138031][ T5600] Bluetooth: hci5: command tx timeout
[  827.477985][ T5600] Bluetooth: hci7: command tx timeout
[  829.230261][ T5600] Bluetooth: hci5: command tx timeout
[  829.544366][ T5600] Bluetooth: hci7: command tx timeout
[  831.300975][ T5600] Bluetooth: hci5: command tx timeout
[  831.620053][ T5600] Bluetooth: hci7: command tx timeout
[  833.698527][ T5600] Bluetooth: hci7: command tx timeout
[  835.685258][ T9389] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  835.718438][ T9389] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  835.722743][ T9389] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  835.765155][ T9389] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  835.796451][ T9389] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  838.507705][ T5600] Bluetooth: hci9: command tx timeout
[  839.112385][   T30] audit: type=1400 audit(1792426579.890:428): avc:  denied  { write } for  pid=9823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  840.578620][ T5600] Bluetooth: hci9: command tx timeout
[  841.883318][   T30] audit: type=1400 audit(1792426582.670:429): avc:  denied  { write } for  pid=9861 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  842.660082][ T5600] Bluetooth: hci9: command tx timeout
[  844.738465][ T5600] Bluetooth: hci9: command tx timeout
[  846.366643][ T5263] 8021q: adding VLAN 0 to HW filter on device eth13
[  850.215240][ T6234] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.303016][ T6234] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  854.124057][ T6234] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  855.471927][ T6234] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.824624][ T9389] Bluetooth: hci11: command 0x0406 tx timeout
[  858.763578][ T9389] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  858.781808][ T9389] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  858.802891][ T9389] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  858.826750][ T9389] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  858.852524][ T9389] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  860.977256][ T5600] Bluetooth: hci10: command tx timeout
[  863.080247][ T5600] Bluetooth: hci10: command tx timeout
[  863.103879][ T6234] bridge_slave_1: left allmulticast mode
[  863.103922][ T6234] bridge_slave_1: left promiscuous mode
[  863.110201][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.376539][ T6234] bridge_slave_0: left allmulticast mode
[  863.376591][ T6234] bridge_slave_0: left promiscuous mode
[  863.381801][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state
[  864.228464][ T6234] bridge_slave_1: left allmulticast mode
[  864.228512][ T6234] bridge_slave_1: left promiscuous mode
[  864.230539][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state
[  864.442636][ T6234] bridge_slave_0: left allmulticast mode
[  864.442704][ T6234] bridge_slave_0: left promiscuous mode
[  864.457289][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state
[  865.147843][ T5600] Bluetooth: hci10: command tx timeout
[  865.151907][ T6234] bridge_slave_1: left allmulticast mode
[  865.151952][ T6234] bridge_slave_1: left promiscuous mode
[  865.155733][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state
[  865.368819][ T6234] bridge_slave_0: left allmulticast mode
[  865.368877][ T6234] bridge_slave_0: left promiscuous mode
[  865.370825][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.078866][ T6234] bridge_slave_1: left allmulticast mode
[  866.078930][ T6234] bridge_slave_1: left promiscuous mode
[  866.080932][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state
[  866.301880][ T6234] bridge_slave_0: left allmulticast mode
[  866.301949][ T6234] bridge_slave_0: left promiscuous mode
[  866.311513][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state
[  867.058253][ T5600] Bluetooth: hci2: command 0x0406 tx timeout
[  867.221180][ T9389] Bluetooth: hci10: command tx timeout
[  868.597458][ T5600] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  868.644806][ T5600] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  868.672101][ T5600] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  868.687935][ T5600] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  868.700566][ T5600] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  868.754400][   T30] audit: type=1400 audit(1792426609.540:430): avc:  denied  { write } for  pid=9879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  870.131448][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  870.131921][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  870.827608][ T9389] Bluetooth: hci15: command tx timeout
[  872.560140][   T30] audit: type=1400 audit(1792426613.350:431): avc:  denied  { write } for  pid=9907 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  872.897160][ T9389] Bluetooth: hci15: command tx timeout
[  874.978925][ T9389] Bluetooth: hci15: command tx timeout
[  876.373992][ T6234] bond1 (unregistering): Released all slaves
[  877.057456][ T9389] Bluetooth: hci15: command tx timeout
[  877.063348][ T6234] bond0 (unregistering): Released all slaves
[  877.665748][ T6234] bond2 (unregistering): Released all slaves
[  878.266696][ T6234] bond3 (unregistering): Released all slaves
[  878.936404][ T6234] bond4 (unregistering): Released all slaves
[  879.544240][ T6234] bond5 (unregistering): Released all slaves
[  880.069386][ T6234] bond6 (unregistering): Released all slaves
[  880.135758][ T5600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  880.155239][ T5600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  880.173384][ T5600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  880.202002][ T5600] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  880.211530][ T5600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  881.094303][ T6234] bond7 (unregistering): Released all slaves
[  881.552636][ T6234] bond8 (unregistering): Released all slaves
[  882.127822][ T5600] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  882.146824][ T5600] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  882.155272][ T5600] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  882.187283][ T5600] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  882.195483][ T5600] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  882.338720][ T5600] Bluetooth: hci6: command tx timeout
[  882.509606][ T6234] bond9 (unregistering): Released all slaves
[  882.839455][ T6234] bond10 (unregistering): Released all slaves
[  883.568292][ T6234] bond11 (unregistering): Released all slaves
[  884.155406][ T6234] bond12 (unregistering): Released all slaves
[  884.417854][ T9389] Bluetooth: hci8: command tx timeout
[  884.427181][ T9389] Bluetooth: hci6: command tx timeout
[  884.482304][ T6234] bond13 (unregistering): Released all slaves
[  884.754338][ T6234] bond14 (unregistering): Released all slaves
[  885.014610][ T6234] bond15 (unregistering): Released all slaves
[  885.265186][ T6234] bond16 (unregistering): Released all slaves
[  885.556562][ T6234] bond17 (unregistering): Released all slaves
[  886.130481][ T6234] bond18 (unregistering): Released all slaves
[  886.303276][ T6234] bond19 (unregistering): Released all slaves
[  886.506640][ T5600] Bluetooth: hci8: command tx timeout
[  886.519764][ T9389] Bluetooth: hci6: command tx timeout
[  888.068692][ T6234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  888.109933][ T6234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  888.158810][ T6234] bond0 (unregistering): Released all slaves
[  888.264361][ T6234] bond1 (unregistering): Released all slaves
[  888.579321][ T9389] Bluetooth: hci6: command tx timeout
[  888.579433][ T9389] Bluetooth: hci8: command tx timeout
[  888.622788][ T6234] bond2 (unregistering): Released all slaves
[  889.492302][ T9389] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  889.529595][ T9389] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  889.538651][ T9389] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  889.571136][ T9389] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  889.580925][ T9389] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  890.658394][ T5600] Bluetooth: hci8: command tx timeout
[  891.334135][ T6234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  891.405461][ T6234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  891.456244][ T6234] bond0 (unregistering): Released all slaves
[  891.531116][ T6234] bond1 (unregistering): Released all slaves
[  891.686085][ T6234] bond2 (unregistering): Released all slaves
[  891.701351][ T5600] Bluetooth: hci16: command tx timeout
[  891.904907][ T6234] bond3 (unregistering): Released all slaves
[  892.110535][ T6234] bond4 (unregistering): Released all slaves
[  892.320819][ T6234] bond5 (unregistering): Released all slaves
[  892.493537][ T6234] bond6 (unregistering): Released all slaves
[  892.662099][ T5600] Bluetooth: hci12: command 0x0406 tx timeout
[  892.765190][ T6234] bond7 (unregistering): Released all slaves
[  892.924526][ T6234] bond8 (unregistering): Released all slaves
[  893.090539][ T6234] bond9 (unregistering): Released all slaves
[  893.293730][ T6234] bond10 (unregistering): Released all slaves
[  893.520097][ T6234] bond11 (unregistering): Released all slaves
[  893.722045][ T6234] bond12 (unregistering): Released all slaves
[  893.780373][ T9389] Bluetooth: hci16: command tx timeout
[  893.901506][ T6234] bond13 (unregistering): Released all slaves
[  894.112636][ T6234] bond14 (unregistering): Released all slaves
[  894.287419][ T6234] bond15 (unregistering): Released all slaves
[  894.494457][ T6234] bond16 (unregistering): Released all slaves
[  894.700101][ T6234] bond17 (unregistering): Released all slaves
[  894.884765][ T6234] bond18 (unregistering): Released all slaves
[  895.093845][ T6234] bond19 (unregistering): Released all slaves
[  895.248320][ T6234] bond20 (unregistering): Released all slaves
[  895.452988][ T6234] bond21 (unregistering): Released all slaves
[  895.656779][ T6234] bond22 (unregistering): Released all slaves
[  895.867991][ T5600] Bluetooth: hci16: command tx timeout
[  896.137541][ T6234] bond23 (unregistering): Released all slaves
[  896.481579][ T6234] bond24 (unregistering): Released all slaves
[  897.694612][ T6234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  897.782428][ T5600] Bluetooth: hci13: command 0x0406 tx timeout
[  897.814220][ T6234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  897.851235][ T6234] bond0 (unregistering): Released all slaves
[  897.949353][ T9389] Bluetooth: hci16: command tx timeout
[  898.011243][ T6234] bond1 (unregistering): Released all slaves
[  898.250608][ T6234] bond2 (unregistering): Released all slaves
[  898.413519][ T6234] bond3 (unregistering): Released all slaves
[  898.600454][ T6234] bond4 (unregistering): Released all slaves
[  899.434497][ T9756] rxe_eth0 speed is unknown, defaulting to 1000
[  899.788999][ T5263] 8021q: adding VLAN 0 to HW filter on device eth14
[  908.018382][ T9389] Bluetooth: hci14: command 0x0406 tx timeout
[  921.712204][ T9604] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  921.730275][ T9604] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  921.739173][ T9604] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  921.780481][ T9604] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  921.793969][ T9604] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  923.388605][ T5600] Bluetooth: hci0: command 0x0406 tx timeout
[  924.107953][ T9389] Bluetooth: hci17: command tx timeout
[  925.063451][ T9743] rxe_eth0 speed is unknown, defaulting to 1000
[  926.177383][ T9389] Bluetooth: hci17: command tx timeout
[  928.258205][ T9389] Bluetooth: hci17: command tx timeout
[  928.877108][   T30] audit: type=1400 audit(1792426669.660:432): avc:  denied  { write } for  pid=9964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  929.742258][ T5600] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  929.772697][ T5600] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  929.782273][ T5600] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  929.805602][ T5600] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  929.832670][ T5600] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  930.347048][ T5600] Bluetooth: hci17: command tx timeout
[  931.595034][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  931.595509][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  931.947450][ T9389] Bluetooth: hci18: command tx timeout
[  933.365967][   T30] audit: type=1400 audit(1792426674.150:433): avc:  denied  { write } for  pid=9999 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  933.707744][ T9389] Bluetooth: hci4: command 0x0406 tx timeout
[  934.017473][ T5600] Bluetooth: hci18: command tx timeout
[  936.099669][ T5600] Bluetooth: hci18: command tx timeout
[  936.682314][ T5263] 8021q: adding VLAN 0 to HW filter on device eth15
[  938.198006][ T5600] Bluetooth: hci18: command tx timeout
[  942.955776][ T9687] rxe_eth0 speed is unknown, defaulting to 1000
[  944.164554][ T9389] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  944.176681][ T9389] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  944.204748][ T9389] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  944.242832][ T9389] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  944.263473][ T9389] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  946.348815][ T9389] Bluetooth: hci10: command tx timeout
[  947.505724][ T5610] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  947.525661][ T5610] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  947.539014][ T5610] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  947.575887][ T5610] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  947.600646][ T5610] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  948.179791][   T32] INFO: task syz-executor:9530 blocked for more than 143 seconds.
[  948.179833][   T32]       Tainted: G             L      syzkaller #0
[  948.179858][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  948.179880][   T32] task:syz-executor    state:D stack:24408 pid:9530  tgid:9530  ppid:1      task_flags:0x400140 flags:0x00080003
[  948.179959][   T32] Call Trace:
[  948.179969][   T32]  <TASK>
[  948.180052][   T32]  __schedule+0x1259/0x6920
[  948.180526][   T32]  ? lock_acquire+0x1d1/0x380
[  948.180652][   T32]  ? __pfx___schedule+0x10/0x10
[  948.180707][   T32]  ? find_held_lock+0x2b/0x80
[  948.180848][   T32]  ? schedule+0x225/0x2c0
[  948.181143][   T32]  schedule+0xdd/0x2c0
[  948.181284][   T32]  schedule_preempt_disabled+0x13/0x30
[  948.181362][   T32]  rwsem_down_write_slowpath+0x4c2/0x12a0
[  948.181598][   T32]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  948.182093][   T32]  ? __pfx___might_resched+0x10/0x10
[  948.182371][   T32]  down_write+0x1c0/0x1f0
[  948.182437][   T32]  ? __pfx_down_write+0x10/0x10
[  948.182753][   T32]  rdma_dev_exit_net+0x174/0x6b0
[  948.182899][   T32]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  948.182992][   T32]  ? __pfx___might_resched+0x10/0x10
[  948.183061][   T32]  ? __pfx_cfg80211_pernet_exit+0x10/0x10
[  948.183139][   T32]  ? mutex_is_locked+0x17/0x60
[  948.183251][   T32]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  948.183367][   T32]  ops_undo_list+0x2ee/0xab0
[  948.183608][   T32]  ? __pfx_ops_undo_list+0x10/0x10
[  948.183821][   T32]  ? ops_init+0x2fa/0x5f0
[  948.183957][   T32]  setup_net+0x1fa/0x3a0
[  948.184094][   T32]  ? __pfx_setup_net+0x10/0x10
[  948.184413][   T32]  copy_net_ns+0x345/0x7a0
[  948.184629][   T32]  create_new_namespaces+0x3ea/0xac0
[  948.184887][   T32]  unshare_nsproxy_namespaces+0xf2/0x220
[  948.185043][   T32]  ksys_unshare+0x4a2/0xb30
[  948.185196][   T32]  ? __pfx_ksys_unshare+0x10/0x10
[  948.185278][   T32]  ? __pfx_do_faccessat+0x10/0x10
[  948.185314][   T32]  ? __pfx_fput_close_sync+0x10/0x10
[  948.185646][   T32]  __x64_sys_unshare+0x31/0x40
[  948.185755][   T32]  do_syscall_64+0x123/0x790
[  948.185865][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.185914][   T32] RIP: 0033:0x7fe3bf59f827
[  948.185994][   T32] RSP: 002b:00007ffd4b956cc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[  948.186032][   T32] RAX: ffffffffffffffda RBX: 00007fe3bf825f40 RCX: 00007fe3bf59f827
[  948.186055][   T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  948.186077][   T32] RBP: 00007fe3bf8267b8 R08: 0000000000000000 R09: 0000000000000000
[  948.186100][   T32] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  948.186123][   T32] R13: 0000000000000003 R14: 00007ffd4b956f08 R15: 0000000000000000
[  948.186580][   T32]  </TASK>
[  948.186633][   T32] 
[  948.186633][   T32] Showing all locks held in the system:
[  948.186661][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[  948.186687][   T32]  #0: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  948.384029][   T32] locks held by syslogd/4950: 1, last CPU#1:
[  948.384054][   T32]  #0: ffff88807ef585f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30
[  948.384169][   T32] locks held by getty/5361: 2, on CPU#0:
[  948.384189][   T32]  #0: ffff8880257d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wa
** replaying previous printk message **
[  948.384189][   T32]  #0: ffff8880257d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  948.384313][   T32]  #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  948.384444][   T32] locks held by kworker/u9:2/5600: 3, on CPU#0:
[  948.384464][   T32]  #0: ffff888037f60140 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  948.384534][   T32]  #1: ffffc90004027d08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  948.384616][   T32]  #2: ffff888055fb4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x180/0x4c0
[  948.384725][   T32] locks held by kworker/0:6/5738: 2, last CPU#0:
[  948.384745][   T32]  #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  948.384856][   T32]  #1: ffffc90004ac7d08 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  948.384982][   T32] locks held by kworker/u8:20/6216: 3, last CPU#1:
[  948.385010][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  948.385107][   T32]  #1: ffffc90006537d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  948.385183][   T32]  #2: ffff8880247bb258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20
[  948.385275][   T32] locks held by kworker/u8:24/6227: 2, on CPU#0:
[  948.385293][   T32]  #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  948.394105][   T32]  #1: ffffc90006267d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  948.394182][   T32] locks held by kworker/u8:29/6234: 4, on CPU#0:
[  948.394199][   T32]  #0: ffff88801e2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  948.394287][   T32]  #1: ffffc90006e17d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  948.394387][   T32]  #2: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[  948.394508][   T32]  #3: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0
[  948.394651][   T32] locks held by kworker/u8:44/8414: 3, last CPU#1:
[  948.394676][   T32]  #0: ffff888035ddc140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  948.394742][   T32]  #1: ffffc900038cfd08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  948.394823][   T32]  #2: ffff88807fba19c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x50f/0x7d0
[  948.394930][   T32] locks held by kworker/u9:0/9389: 3, on CPU#1:
[  948.394949][   T32]  #0: ffff888037ad0140 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  948.395062][   T32]  #1: ffffc90003be7d08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  948.395184][   T32]  #2: ffff888056890ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x180/0x4c0
[  948.395299][   T32] locks held by syz-executor/9506: 2, on CPU#1:
[  948.395314][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.395389][   T32]  #1: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0
[  948.422419][   T32] locks held by syz-executor/9530: 2, on CPU#1:
[  948.422445][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.422594][   T32]  #1: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0
[  948.422669][   T32] locks held by syz-executor/9687: 5, last CPU#1:
[  948.422686][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.422774][   T32]  #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590
[  948.422873][   T32]  #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590
[  948.422985][   T32]  #3: ffff88802de79020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820
[  948.423116][   T32]  #4: ffff88801e2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x38/0xaa0
[  948.423220][   T32] locks held by syz-executor/9699: 4, on CPU#0:
[  948.423235][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.423313][   T32]  #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590
[  948.423402][   T32]  #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590
[  948.423504][   T32]  #3: ffff88802de79020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820
[  948.423623][   T32] locks held by syz-executor/9736: 2, on CPU#0:
[  948.423645][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.423781][   T32]  #1: ffffffff918e45e8
[  948.427374][ T9604] Bluetooth: hci10: command tx timeout
[  948.436045][   T32]  (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0
[  948.436143][   T32] locks held by syz-executor/9743: 5, last CPU#1:
[  948.436166][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.436297][   T32]  #1: ffffffff91cd5fc0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0
[  948.436371][   T32]  #2: ffff88801e2c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120
[  948.436457][   T32]  #3: ffff88801e2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120
[  948.436555][   T32]  #4: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[  948.436670][   T32] locks held by syz-executor/9756: 2, on CPU#1:
[  948.436691][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.436864][   T32]  #1: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0
[  948.436948][   T32] locks held by syz-executor/9787: 3, on CPU#0:
[  948.436966][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.437068][   T32]  #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590
[  948.437179][   T32]  #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590
[  948.437304][   T32] locks held by syz-executor/9799: 3, on CPU#0:
[  948.437327][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.437428][   T32]  #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590
[  948.450870][   T32]  #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590
[  948.450971][   T32] locks held by syz-executor/9826: 3, on CPU#0:
[  948.450991][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.451105][   T32]  #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590
[  948.451226][   T32]  #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590
[  948.451368][   T32] locks held by syz-executor/9834: 3, on CPU#0:
[  948.451394][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.451542][   T32]  #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590
[  948.451619][   T32]  #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590
[  948.451715][   T32] locks held by syz-executor/9851: 3, on CPU#1:
[  948.451735][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.451850][   T32]  #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590
[  948.451975][   T32]  #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590
[  948.452124][   T32] locks held by syz-executor/9900: 3, on CPU#1:
[  948.452151][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.452259][   T32]  #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590
[  948.464725][   T32]  #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590
[  948.464824][   T32] locks held by syz-executor/9911: 3, on CPU#1:
[  948.464845][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.464958][   T32]  #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590
[  948.465087][   T32]  #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590
[  948.465184][   T32] locks held by syz-executor/9916: 3, on CPU#0:
[  948.465200][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.465279][   T32]  #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590
[  948.465371][   T32]  #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590
[  948.465475][   T32] locks held by syz-executor/9922: 3, on CPU#1:
[  948.465496][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.465617][   T32]  #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590
[  948.465747][   T32]  #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590
[  948.465816][   T32] locks held by syz-executor/9977: 3, on CPU#1:
[  948.465832][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.465919][   T32]  #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590
[  948.466020][   T32]  #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590
[  948.495286][   T32] locks held by syz-executor/9992: 3, on CPU#1:
[  948.495317][   T32]  #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0
[  948.495437][   T32]  #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590
[  948.495512][   T32]  #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590
[  948.495602][   T32] locks held by modprobe/10023: 2, last CPU#1:
[  948.495620][   T32]  #0: ffff88801f740340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00
[  948.495730][   T32]  #1: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x25/0x1a0
[  948.495853][   T32] locks held by sed/10026: 2, last CPU#1:
[  948.495875][   T32]  #0: ffff88803825a800 (&mm->mmap_lock){++++}-{4:4}, at: vm_brk_flags+0x210/0x620
[  948.496014][   T32]  #1: ffff88808f763070 (&anon_vma->rwsem){++++}-{4:4}, at: validate_mm+0x1f1/0x4e0
[  948.496131][   T32] 
[  948.496141][   T32] =============================================
[  948.496141][   T32] 
[  948.496154][   T32] NMI backtrace for cpu 1
[  948.496173][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  948.496202][   T32] Tainted: [L]=SOFTLOCKUP
[  948.496215][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  948.496231][   T32] Call Trace:
[  948.496258][   T32]  <TASK>
[  948.496286][   T32]  dump_stack_lvl+0x100/0x190
[  948.496446][   T32]  nmi_cpu_backtrace.cold+0x12d/0x151
[  948.496580][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  948.496632][   T32]  nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[  948.496749][   T32]  sys_info+0x141/0x190
[  948.496838][   T32]  watchdog+0xcb1/0x1030
[  948.497066][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  948.497133][   T32]  ? __pfx_watchdog+0x10/0x10
[  948.497243][   T32]  ? __kthread_parkme+0x18f/0x230
[  948.497442][   T32]  ? kthread+0x13a/0x450
[  948.497475][   T32]  ? __pfx_watchdog+0x10/0x10
[  948.497508][   T32]  kthread+0x373/0x450
[  948.497563][   T32]  ? __pfx_kthread+0x10/0x10
[  948.497684][   T32]  ret_from_fork+0x730/0xd60
[  948.497825][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  948.497958][   T32]  ? __switch_to+0x800/0x10f0
[  948.498046][   T32]  ? __pfx_kthread+0x10/0x10
[  948.498188][   T32]  ret_from_fork_asm+0x1a/0x30
[  948.498681][   T32]  </TASK>
[  948.500087][   T32] Sending NMI from CPU 1 to CPUs 0:
[  948.500122][    C0] NMI backtrace for cpu 0
[  948.500138][    C0] CPU: 0 UID: 0 PID: 31 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  948.500160][    C0] Tainted: [L]=SOFTLOCKUP
[  948.500168][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  948.500178][    C0] RIP: 0010:write_comp_data+0x90/0xa0
[  948.500204][    C0] Code: 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 4c 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 <c3> cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90
[  948.500219][    C0] RSP: 0018:ffffc90000006d80 EFLAGS: 00000246
[  948.500236][    C0] RAX: 0000000000000000 RBX: 1ffff92000000db7 RCX: ffffffff820eed4f
[  948.500248][    C0] RDX: 0000000000000506 RSI: 000000dcd7668e8b RDI: ffff888020ab0000
[  948.500260][    C0] RBP: 0000000000000554 R08: 0000000000000006 R09: 000000dcd7668e8b
[  948.500271][    C0] R10: 000000dcd7668e8b R11: 00000000000ad76d R12: ffffc90000006fb8
[  948.500283][    C0] R13: ffff88801d095000 R14: ffff88807b042000 R15: 0000000000000000
[  948.500295][    C0] FS:  0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000
[  948.500312][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  948.500324][    C0] CR2: 00007ffc74dfcd80 CR3: 00000000384ed000 CR4: 00000000003526f0
[  948.500336][    C0] Call Trace:
[  948.500345][    C0]  <IRQ>
[  948.500352][    C0]  check_buffer+0x31f/0x820
[  948.500418][    C0]  ? __pfx_check_buffer+0x10/0x10
[  948.500443][    C0]  ? check_buffer+0x13f/0x820
[  948.500520][    C0]  ? __pfx_trace_clock_local+0x10/0x10
[  948.500578][    C0]  __rb_reserve_next.constprop.0+0x486/0x1640
[  948.500687][    C0]  ring_buffer_lock_reserve+0x49a/0x1220
[  948.500753][    C0]  ? ring_buffer_lock_reserve+0x4bb/0x1220
[  948.500821][    C0]  ? __pfx_ring_buffer_lock_reserve+0x10/0x10
[  948.500949][    C0]  trace_event_buffer_lock_reserve+0x123/0x6f0
[  948.501019][    C0]  trace_event_buffer_reserve+0x1f9/0x350
[  948.501079][    C0]  trace_event_raw_event_lock_acquire+0x12c/0x330
[  948.501132][    C0]  ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10
[  948.501199][    C0]  ? lock_acquire+0x1d1/0x380
[  948.501283][    C0]  lock_acquire+0xe7/0x380
[  948.501312][    C0]  ? unwind_next_frame+0xbd/0x2090
[  948.501343][    C0]  ? unwind_next_frame+0x3be/0x2090
[  948.501373][    C0]  ? unwind_next_frame+0x3be/0x2090
[  948.501421][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  948.501458][    C0]  unwind_next_frame+0xd1/0x2090
[  948.501486][    C0]  ? unwind_next_frame+0xbd/0x2090
[  948.501521][    C0]  ? nbcon_emit_one+0x15c/0x2b0
[  948.501575][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  948.501611][    C0]  arch_stack_walk+0x94/0xf0
[  948.501679][    C0]  ? nbcon_emit_one+0x15c/0x2b0
[  948.501742][    C0]  stack_trace_save+0x8e/0xc0
[  948.501775][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  948.501861][    C0]  kasan_save_stack+0x30/0x50
[  948.501889][    C0]  ? kasan_save_stack+0x30/0x50
[  948.501913][    C0]  ? kasan_save_track+0x14/0x30
[  948.501937][    C0]  ? __kasan_slab_alloc+0x89/0x90
[  948.501962][    C0]  ? kmem_cache_alloc_lru_noprof+0x265/0x6a0
[  948.501988][    C0]  ? xas_alloc+0x350/0x460
[  948.502012][    C0]  ? xas_create+0x75a/0x14e0
[  948.502038][    C0]  ? xas_store+0x9e/0x1a30
[  948.502057][    C0]  ? __xa_store+0x16a/0x2c0
[  948.502076][    C0]  ? xa_store+0x34/0x50
[  948.502096][    C0]  ? hsr_get_seq_block+0x31a/0x510
[  948.502116][    C0]  ? hsr_check_duplicate.isra.0+0x7f/0x120
[  948.502136][    C0]  ? hsr_forward_skb+0xc13/0x2a30
[  948.502160][    C0]  ? send_hsr_supervision_frame+0x696/0xbc0
[  948.502182][    C0]  ? hsr_announce+0x169/0x3e0
[  948.502204][    C0]  ? call_timer_fn+0x198/0x5f0
[  948.502226][    C0]  ? __run_timers+0x757/0xb00
[  948.502248][    C0]  ? run_timer_base+0x114/0x190
[  948.502270][    C0]  ? run_timer_softirq+0x1a/0x50
[  948.502293][    C0]  ? handle_softirqs+0x1e6/0x9d0
[  948.502316][    C0]  ? __irq_exit_rcu+0x16a/0x210
[  948.502338][    C0]  ? irq_exit_rcu+0x9/0x30
[  948.502359][    C0]  ? sysvec_apic_timer_interrupt+0xa3/0xc0
[  948.502385][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  948.502408][    C0]  ? _raw_spin_unlock_irqrestore+0x31/0x80
[  948.502433][    C0]  ? nbcon_emit_one+0x15c/0x2b0
[  948.502656][    C0]  kasan_save_track+0x14/0x30
[  948.502688][    C0]  __kasan_slab_alloc+0x89/0x90
[  948.502735][    C0]  kmem_cache_alloc_lru_noprof+0x265/0x6a0
[  948.502777][    C0]  ? xas_alloc+0x350/0x460
[  948.502849][    C0]  xas_alloc+0x350/0x460
[  948.502909][    C0]  xas_create+0x75a/0x14e0
[  948.502976][    C0]  ? trace_event_buffer_commit+0x20a/0xa80
[  948.503055][    C0]  xas_store+0x9e/0x1a30
[  948.503101][    C0]  ? __lock_acquire+0x5c0/0x1f40
[  948.503181][    C0]  __xa_store+0x16a/0x2c0
[  948.503231][    C0]  ? __pfx___xa_store+0x10/0x10
[  948.503253][    C0]  ? lock_acquire+0x1d1/0x380
[  948.503307][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  948.503399][    C0]  xa_store+0x34/0x50
[  948.503439][    C0]  hsr_get_seq_block+0x31a/0x510
[  948.503494][    C0]  ? __pfx_hsr_get_seq_block+0x10/0x10
[  948.503579][    C0]  hsr_check_duplicate.isra.0+0x7f/0x120
[  948.503615][    C0]  ? __pfx_hsr_register_frame_out+0x10/0x10
[  948.503636][    C0]  hsr_forward_skb+0xc13/0x2a30
[  948.503713][    C0]  ? __pfx_hsr_forward_skb+0x10/0x10
[  948.503737][    C0]  ? lock_acquire+0x1d1/0x380
[  948.503802][    C0]  ? __asan_memset+0x23/0x50
[  948.503840][    C0]  ? __skb_pad+0x252/0x600
[  948.503902][    C0]  send_hsr_supervision_frame+0x696/0xbc0
[  948.503963][    C0]  ? __pfx_send_hsr_supervision_frame+0x10/0x10
[  948.503985][    C0]  hsr_announce+0x169/0x3e0
[  948.504019][    C0]  ? __pfx_hsr_announce+0x10/0x10
[  948.504068][    C0]  ? trace_event_raw_event_lock+0x1e2/0x2b0
[  948.504125][    C0]  ? __pfx_hsr_announce+0x10/0x10
[  948.504146][    C0]  call_timer_fn+0x198/0x5f0
[  948.504193][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  948.504252][    C0]  ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40
[  948.504294][    C0]  ? rcu_is_watching+0x13/0xc0
[  948.504358][    C0]  ? __pfx_hsr_announce+0x10/0x10
[  948.504379][    C0]  __run_timers+0x757/0xb00
[  948.504469][    C0]  ? __pfx___run_timers+0x10/0x10
[  948.504534][    C0]  ? lock_acquire+0x1d1/0x380
[  948.504608][    C0]  ? _raw_spin_lock_irq+0x45/0x50
[  948.504678][    C0]  run_timer_base+0x114/0x190
[  948.504711][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  948.504772][    C0]  run_timer_softirq+0x1a/0x50
[  948.504797][    C0]  handle_softirqs+0x1e6/0x9d0
[  948.504867][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  948.504898][    C0]  ? _raw_spin_unlock+0x28/0x50
[  948.504927][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  948.504976][    C0]  __irq_exit_rcu+0x16a/0x210
[  948.505009][    C0]  irq_exit_rcu+0x9/0x30
[  948.505032][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  948.505065][    C0]  </IRQ>
[  948.505072][    C0]  <TASK>
[  948.505088][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  948.505113][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  948.505139][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 1a 10 f6 48 89 df e8 fe 70 10 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 85 54 ff f5 65 48 83 3d f4 32 b6 09 00 74 16 5b
[  948.505155][    C0] RSP: 0018:ffffc90000a77ca8 EFLAGS: 00000246
[  948.505171][    C0] RAX: 0000000000000002 RBX: ffffffff9cc7e660 RCX: 0000000000000000
[  948.505182][    C0] RDX: 0000000000000001 RSI: ffffffff8e3e3b01 RDI: ffffffff8c625680
[  948.505194][    C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000
[  948.505205][    C0] R10: 0000000000000001 R11: 205d323354202020 R12: 1ffff9200014ef98
[  948.505216][    C0] R13: ffffffff90bda1e0 R14: 0000000000000001 R15: 0000000000000000
[  948.505337][    C0]  nbcon_emit_one+0x15c/0x2b0
[  948.505370][    C0]  ? __pfx_nbcon_emit_one+0x10/0x10
[  948.505455][    C0]  nbcon_kthread_func+0x613/0x7d0
[  948.505528][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  948.505605][    C0]  ? __kthread_parkme+0x18f/0x230
[  948.505667][    C0]  ? kthread+0x13a/0x450
[  948.505692][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  948.505714][    C0]  kthread+0x373/0x450
[  948.505746][    C0]  ? __pfx_kthread+0x10/0x10
[  948.505795][    C0]  ret_from_fork+0x730/0xd60
[  948.505839][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  948.505884][    C0]  ? __switch_to+0x800/0x10f0
[  948.505924][    C0]  ? __pfx_kthread+0x10/0x10
[  948.505972][    C0]  ret_from_fork_asm+0x1a/0x30
[  948.506104][    C0]  </TASK>
[  948.555119][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  950.488466][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  950.499185][   T32] Tainted: [L]=SOFTLOCKUP
[  950.503524][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  950.513616][   T32] Call Trace:
[  950.516918][   T32]  <TASK>
[  950.519858][   T32]  dump_stack_lvl+0x100/0x190
[  950.524638][   T32]  vpanic+0x553/0x970
[  950.528694][   T32]  ? __pfx_vpanic+0x10/0x10
[  950.533518][   T32]  panic+0xd1/0xe0
[  950.537329][   T32]  ? __pfx_panic+0x10/0x10
[  950.542058][   T32]  ? nmi_trigger_cpumask_backtrace+0x263/0x2a0
[  950.548261][   T32]  ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0
[  950.554439][   T32]  ? watchdog.cold+0x1ec/0x234
[  950.559339][   T32]  watchdog.cold+0x1fd/0x234
[  950.564221][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  950.570077][   T32]  ? __pfx_watchdog+0x10/0x10
[  950.574847][   T32]  ? __kthread_parkme+0x18f/0x230
[  950.580107][   T32]  ? kthread+0x13a/0x450
[  950.584408][   T32]  ? __pfx_watchdog+0x10/0x10
[  950.589108][   T32]  kthread+0x373/0x450
[  950.593214][   T32]  ? __pfx_kthread+0x10/0x10
[  950.597920][   T32]  ret_from_fork+0x730/0xd60
[  950.602642][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  950.607933][   T32]  ? __switch_to+0x800/0x10f0
[  950.612689][   T32]  ? __pfx_kthread+0x10/0x10
[  950.617403][   T32]  ret_from_fork_asm+0x1a/0x30
[  950.622640][   T32]  </TASK>
[  950.625870][   T32] Kernel Offset: disabled
[  950.630210][   T32] Rebooting in 86400 seconds..