last executing test programs:

11m51.042389665s ago: executing program 32 (id=382):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
add_key$fscrypt_provisioning(&(0x7f0000000740), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000048"], 0x48, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="1b8852c50f6f25b11d073d4d10b5f50200000000e9ad6125b96a7cbc5860fc3b3d2e43eff703a6077ced4d4c4a6a99103271318100591321b69c49e4db737b5b68ca9f19fcdc27f20a91f13ce9321f8413a5db86a504c6a6add99a88715178daaf613cde9e7b8cea3d2ed49f87529b861538cfb69d7dcd8865ac68d8ea4fbc0ecf9dc325b14d3de70d6ff46fd2451091fda82a442d59a850434376317c2bab9cc8d0781297019a4f7ebb08a8afa7b40345209c04546f0a0fa780", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x18, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001bf40)=""/102392, 0x18ff8)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e})
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
bind$tipc(r7, 0x0, 0x0)
close_range(r6, r7, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000001bf00), 0x0, 0x4000010)
ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2})
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYRESDEC=r7], &(0x7f0000000100)='GPL\x00', 0x0, 0x4c, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40)
mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, 0xffffffffffffffff, 0x0)

8m31.339933749s ago: executing program 2 (id=891):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
futex(&(0x7f0000000100), 0xd, 0x1, &(0x7f0000000140)={0x77359400}, 0x0, 0x12)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
futex(&(0x7f00000002c0)=0x2, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x2)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$unix(0x1, 0x3, 0x0)
sendmmsg$unix(r4, &(0x7f0000001d40)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000400)="5d040da2ee30e38e93716a79cb8bc192dc28ad70b2b725789c0ee491c2c973ffe1a8226db7e1be77a45c16ed349c965f279fc5679590d728b7c1b02d9aaffae835cfcade1bd8bb9cab", 0x49}, {&(0x7f0000000c80)="e10c449ccabeb0d39374ba81f81a94a95b2273439554529a412743a4cec9506824c2e7b3ea8c6285a1d287389d6424d78e8b776e30bfd60140f406942165a5904ca05651b487656e05727ba8e15453eea944d58c820c9f0cc1fe987fa4b4dc2da6e46650235b871caef11c619d88aff032b12374b37c1958ea0896a48398b50b81e9c8e6a55be055961f15a6d3a9b2e49ebc238a96830d0489b0df547fd90c14d935a8adb19bb76f39550c1d30b512c6d8b6ab6b8697bac451f5715dd5944bb601b16aad7e7e720d756a44e848ed81f6c2a3eb5c319f6bd30aeb8dacf1bfe8721e4f62bb824bf349945ff2231fa051f3dd3317f5dd2506e475b24968e23425c87e6ad07cd562decb29b7a0bce4bf8c16dd69b63695493fb846c7743eb3216c8bff2367774e14cfea60c15a85de680d931bb85bce346795547777b36a2785ae6586772c9a9b2b3e848345343c8facd8428d7b35435a918ea8b06b126edeea405bd2e82cc266fc3f5e0707a3870f81c282e11a477576ab377deb31a9b1db233df028981c5920899bca948d29237c3efdcf9b2550f4b2eb0c1a91ca8d165ca7324f491e45dabc84412cd7b545f0ecdc2829f5a84b5953a1a704b0e1eb6cf7ee9d109df99bdc84c99820735aef8cdcd66af9aec681e0a5eb3edcd6c1a2dacf0ead3c74229f70c338ffaaaf8682c946d14b1da55c9a0228cb3303c732a00780870819109176d50687f6a5e79778b1213f2bcda3cfb42d81e205cdfc0d46332d4f3857a29efb935e43b9f2706b3f114c97b32f547323481f718186cb1e39ffe2f5564230b118836df9cf2be44ea06b2bd8b34914805f6269650a595d3ee2e0e1e9e5ba4fd118ff010b64221c6aed0a8972939b7d452bc116b99681854bab72505fe9e644c8ce3101d830d94f736a461500facb7c9f074d19f78bdbbf9a224a8922ce4a70f177047c175a118c0d736f6bb096dc941eabc7e75c90022b7034e9a4c809cf0d5cf96eb5dabd56f5cc4289f4a7dfd0c2c06d4f599d2283290afe732591e1ece276ac273c8540d4fbec67768481f34cf997ad35f3d03c895b8fda01a353e625524e094b9ee03b6d58d44fd1bc934de1cfbbfcfc6dc04c489b58f44d456df62c7f0e7d33acf4f07b3840f68f21af46fbfa8dfb2d33c917c4defd1831d0350ad27eb72ea69413ba15e5be41589f33e9347647a7f5a974de44de2db7839f51a131b4e4fd35c448313411fdfac79f6dffc2240508ae4841c3abea91a8a02cf6fe93bfe5bd79d5e6a3f642e0d08adb5ef2049ea0960299972ca85003dd92ccc4668043a83aa279587c0e21f4d7b1f762645cc5a534d2960bbf0a7d9f7c5159ab0b68c4c0e112c427ba9809cef8436a664aeaea55d16f19ed57a8889f7e1ead31970768df1a8ed8f467b610522d7bb122617c11326b5f1248a0d29f8902c41db7d13c6b3e7169ba34fd143ea07fc6decc7ddbce9ea75dec45e4eb4e444047c05aa3eada6b9880c605e0bfa28be5d124b066a4f301ee221fead0c73cda1bc69dcfebba1d9afdbe653274c64b60c75f031c52b02e18b95771c816814886c5c1dfa84cfac5ec1cad7d9f19c5dc56dfd8c2ca1e450169127e18c9152d4258312816d8c4a1611f9866f1023334172aa2f538df255206e22ddcea576d6f147bdfb37f31a123b6b62404fc68c211f6f16e096a7f0e7b01a30aa30784b2d94d03d4b89add1db32edea436ddfa2edc756aa906c4ed4789aef082f8cb5aa840e3b44149a2544c8fb3b887d3484ac6a71bf2e6941fa8fd13a76f2d338664d02651339db79d7f6cd16e8937e7766c5a2ddf12f86e74b393655b160659c64b372885728a248fe79c8b38c80c5d38aa9cdab891cd34ee9f2b66ab48baf11ee8880ac9a0fe0a63059d491ba0282aa860bfccb3a4509f47901ce451cad0f18fa2bcd05625626bb3e942a5fe38635837ac356f55975882542d891cb6c2e88a6ec9e7b41ed0a42545b9f79e537e9cbe7309444d6e39e753d75cd4bf2f5c4dcc3008c711312f5b732b42b1a30a3588c2efa46d522d56d47fe66866176b5daccd78daada03eae740d5a0cb0c25ffed8cfec39b9c3d747ca74259a9f41b9368ded77a1a6186d1e0bd5fcc280066f6b6958de6f51eb20b43e1ca79559eb2f49bb206a74f317aaf985b259852941bce112a68c0272f21a28e4941a02db3277a25bcdf33677d8cd5c63521a801c58263d28ca8081e340f77db6f48adad287e00938264a9053247a36af7b6685a79345c6d693e6869e995cf71baf2dc482af7b86ff3b7348325e56b6686e5619cd8722c3348a258cb6fa71d5ec403830c51043a695509e1c9784b396de18ddf81864874e43af8f4f89893f03a1c8d6ac5eeb9f41a0bba944d081288aff8423c216f25a2c1ab2fea5cf1272f98f5f907ef3e0bcc38cfa8a0626b5d9f318b32733622c03880b296c92a089f61e8637d87951b12b727df1990267fb1c0870e14dea3b0061529d7ef0abd5bd43101343b5221587e99d4854af4cde66670067be4e48b910a2544eb8892c85ea081902f03167002ae4c6851a2b3edbbff6efe17e7138b609111cd839c82112ec427662273f610aca48a836f42529c2c7f538c65949d769864067dd807111376e1660cbcf2363994e0373fa5cf7b7adf0ccf9afb92e9995f038b26e76a8cd7612704f24dd22ea7e299e291cfbd55db43c6dfbf97b28d4bcfed85004cefb3af74f1581caccb8085fc3ad414061971859522a3e0e05ce73f5798bc86c481b69108425792a46153fa768bd2a1da954ba752538d5644249d224f218201cc4a6c0757c4d32766ce1b14f18eeec1279f25447bf5a9b43ccf0d017a430c830f0fadd50d634035c473e22aa6a5cae1ece87b7bd07ed9f843f8666c61fbc725f38f91d9f0cbc3b7f4e27b460246d4e22c79336cdc4987d275cfce2296028bd967153e402b207c1640718117a70409e0950da6e397f0a4e4c5feabf687a36b20115637614e27b34556eefa2c399d0fb8847f56428e2679b1324544ca555301519865f6aaac719b08ecabb0acc0c92948061ac1fa5436ed4a13e5e3e42a567c6f39c7db99dabb923f08456fb5b9c0811764f5e4e5e7186c5fc31525f9ca58a83d526e836b2b54a46ed3bc9502271008b03df914ec7673a8ee8805fe3c6c92bf2b543360bb5e7fb24159c730fe36798ae71bae03d4429122b4a5365f916d767329ba1c87cde86c3fc6319784fbbb7e5d184da35ca5e786033887f0a5514049777611d7357ca2f017cfe14bd794782e3496cea3e20d27800d4efa78189e163ac78788e5933c0c4e31fb4ffd54d9455d2a5ae2f73bae01ebb77a2b2f25411dbc2dd1dfafbb02b7d901e910281ff4752177e06b06142dc7be2e3f2a3b7a8b265ed1eb311747b4e31fb698c458b5576891bb53045c43a2aa0b7fa2f00027214de286bcd4883bf0ce8bad0fce1a068098a4e9dbb18c53f8093e4807d395cbf819c04e591e86096bd75d252941f95ecada01884e0ccde95267faffaff1cd55f415a246e02acad086038b65f6b0a6bde0c64f247ee8ba0ea4722e2f4a03e712f0dbcb89c7c6cf4d88d59abddf8025bc5bdc319a79432ba22ce08c5d101318d6dc8477f521aa043464f84f28a7a9ebeb1bdd12fb421b6d8e97d020465bf47e7e16b5fa2ff0e13aab49c1fab7641d059d1a2d050bef26be3a0f31a5f27eba5d0ecf1c41d0396a80cc490152217bfe0d49cbf6e8ae1aca5b2b8b7191c145d1769471e03c577b600ce004f99b76131195817cd20b410e546484140e7ae22c68827b5b69e47b127832ac6ed32611c0148117ce2557c32bca7b6bd3f1637072fe6a108e2403c4fb21e8fda22fcc739ef6cdc1f5951978c2c874c88782511e676e86b3a41ddb6320a3f37885c3f2f3dc4bb27a16cd4eea4d0afcb534cce0d579ec949ad84742be6e46b453e960146d278f63acdcc15cd2eebdabb5349141ea70e4b61f86a4747eece7c696cd8194fb20cca82afdfc9d38332abee0bad8a12db0bda81857ae9c4e5f757c18dd078261a023256ca49040d13b9ef50eeddaf4bf5c9a7c96fa90a02eb60bbe7c127b616c34064f48ba4d795a1decb736b3cf149aa97c935e9a156e6ebff1ffc7ce8b8961a281a91b0c9014d3261f520a1794f6da609b3a3397b79992d9e3e7a0806230663229bd6bb0a8943f6e19b3e0ae5a8aa04cff39c2358a533992db857e23acf35c809b1e5e85afabe430014616c5604dfbadca7158e85476f4b9ea0029bba748f9d2b023ee2c45d93e677ce7a6128143a5f3ec62e3c80953fbcec536ed83c079f09383e325338d211e6ffaaabc5d17b81c30bd5b6bb69d0fa5f164c7079c91c66b2c7a3370f9882cb27bbac1190eb87134ecfe12ac30a0338d52fdfb44f4363e97ee676b98ee96d30b270984208b0b36cc7597462648601a08a80aec7de48888c44f8256c8633c2b1971e1addb6caec8817f4cdd2bdd3232aaf412211c3f02f7bc449557af3bbd10b07a2d709797eed1e556210fcfc0f6c015b450ba9bcc124c5ae766285460acb388b9882df6e23664af109f287c780278dda9eed5fcf2008c069e4a4905c92e287df3fdf710ffb56e492e072f804eb20717544ce14b0050d6611d335bee2af3a575592e7e242826997552552b7f5800b0fbb69a19567938a313ba74f431091fcc8fc63a210aeee730ecfefd94715937522c4058e84cdc299b4712fe7f40f0d015d27e663d4e99eda02dc9b33dd78ed4eb5d567f2346ecf1bc5d70af6839697f8a70884fb33011d51ba884830243d021554151db5d6d809f685e5bd93412e7954308c643b0210f266309b8f5a1dd7ce7ab17f138787b5cf199f95e2767db186a6a75c5b302dbe4d030a869ecadaf5dc7fb6035e6365daf2a5072188b9da45011d7fba4a96f9876c0c1a8f5640d22f500cb69846804306253a298b55fd7e2b9f15c96ba512599cc06ab357331a8d32b378ce86ff3b5b59c791710dad7122c2063952d26a646f8e0072b46fc5776f3a5c4867f6940defe96689ccbaf0fb0ec27ec401f057a8ac7b0f3e8e012f44739bb6c496f5b4bb854a7d243c1780d5c1a20f52b923d867fadbd1a153911844767a567d4dfcc7e8ff8f5e2e782ddfda15a2d581342ca4e2545d830a7b039e3832032cd6b4935cf3d36f08bd5af3c67b835d1013fb53bfc87ba8538bb991ba734eabff74b347d8d5b4cb2d5819f73ec66ab55a99a26c2b2517733ce3676e760d3a87b4be7bd63b107f71213781f0fd5858c4630d31279ca06c158d5f6c6195ea1d6146a1a7006911744210f85013b4c2c705f101a4d5b324360df3ad521e5927bb514fc9c50b8eb6d54acc3c2efcadad0e4903bf7f705e08b5da46e6e7d31da96e322e079597dd142131b2c6212bd24bbd790594d40078737b134fb07ad5ac78c38eea0b9ea0deb777cd83d0a773a5bfa0057d3da3d5d425cb80a161b71c8a79d9adc281c7fdf2ed18ffe838b327c6d72726b4add2dfe3aa2b82f8f5839d8096cf95ade53d9ece3a49e8e7b4452253e149c400f4d318366ca1c2e3168c49cd0e9017d233d801e144963d4108fce979af825cac5d9b99abadbe53a62f35b52a1c3f58030f6f0a5f6093e78f02ba7265faa3d1805bc700d16e119dc2dcbfca2122965ad9b7234fdd7279760b13452af4d71897b5772e0c3b6c2267a84193e06dd299957fa281b85d3bd9062792423495d6d842f7f625203cbc75234dd7c3cdc688a3eac8bac2ded4c3e2a7804e076f8cf7ef6f4faec2df2dd79c8d3dcc55776ba47a0e86bc", 0x1000}], 0x2, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x30, 0x1, 0x1, [r2, r3, r0, r1, r3, r3, r1, r2]}}], 0x48}}], 0x1, 0x8010)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0)
read$usbmon(r5, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r7, 0x4)
r8 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=<r9=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r9, 0x1, &(0x7f0000000040), 0x0)
copy_file_range(r7, 0x0, r6, 0x0, 0xffffffffa003e459, 0x700000000000000)
r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r10)
add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0)
r11 = add_key$keyring(0x0, &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r11)

8m29.882048102s ago: executing program 2 (id=896):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="1b8852c50f6f25b11d073d4d10b5f50200000000e9ad6125b96a7cbc5860fc3b3d2e43eff703a6077ced4d4c4a6a99103271318100591321b69c49e4db737b5b68ca9f19fcdc27f20a91f13ce9321f8413a5db86a504c6a6add99a88715178daaf613cde9e7b8cea3d2ed49f87529b861538cfb69d7dcd8865ac68d8ea4fbc0ecf9dc325b14d3de70d6ff46fd2451091fda82a442d59a850434376317c2bab9cc8d0781297019a4f7ebb08a8afa7b40345209c04546f0a0fa780", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x18, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
io_uring_setup(0x7a76, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001bf40)=""/102392, 0x18ff8)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e})
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
bind$tipc(r6, 0x0, 0x0)
close_range(r5, r6, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000001bf00)=[{{&(0x7f0000000040)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x80, 0x8000}}], 0x1, 0x4000010)
ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2})

8m28.375765473s ago: executing program 2 (id=899):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x18, 0x2e, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4002805}, 0xc0)

8m28.171931692s ago: executing program 2 (id=900):
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x8040)
ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r0, 0xc0106440, &(0x7f0000000080)={0x1, 0x200, &(0x7f0000000040)})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x45a}], 0x1, 0x1)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, 0x0)
r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/\xd15)\xeatn\xa3\x88\x13i\xb6\x7ft\x95\xd7\x01o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x94\x00\x00\x00\x00\x00\x00\x00g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xef\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xba\xec\x99@\xd2\t\n\xb1o', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
r5 = add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000340)="d4ba6e3a03cbeb296ac1e3acfb8d124810fcd804a0fc9e3f80b0104f18327c7eff76d2f99e086b80d98caca60d304bfa0bd7964fd444e37835ff6c2227a41a5f9a479f5453e4888b738017", 0x4b, 0xfffffffffffffffb)
keyctl$update(0x2, r5, &(0x7f0000000140)="c4", 0x1)
r6 = syz_open_dev$swradio(&(0x7f0000002440), 0x0, 0x2)
ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f0000002480)=0x2)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0xffe0)
r7 = socket$inet6(0xa, 0x5, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd26, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c61"], 0x50}}, 0x4000084)
sendmmsg$inet6(r7, &(0x7f00000044c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="e8", 0x1}], 0x1}}], 0x1, 0x11)

8m27.256785235s ago: executing program 2 (id=903):
r0 = socket(0x80000000000000a, 0x2, 0xffffffff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680))
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0xff)
fchown(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80}}, {{0xa, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20000010)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e)
sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
syz_open_procfs(0x0, &(0x7f0000000380)='io\x00')
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2})
r5 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2)

8m24.096816683s ago: executing program 2 (id=914):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async)
move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async, rerun: 64)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106) (rerun: 64)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000008000/0xa000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000a0f000/0xb000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, 0x0}, 0x68)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100)={[], 0x11}, 0x0, 0x0)

8m8.277984419s ago: executing program 33 (id=914):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async)
move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async, rerun: 64)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106) (rerun: 64)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000008000/0xa000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000a0f000/0xb000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, 0x0}, 0x68)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100)={[], 0x11}, 0x0, 0x0)

7m10.860516238s ago: executing program 1 (id=1083):
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40010, 0x6})
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)

7m9.587909982s ago: executing program 1 (id=1087):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x220002, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000340)={0x28, 0x1, r2, 0x0, &(0x7f00000002c0)="a25dfed090825db2670a10b430f5577ac9c7acd8dc80fd29ed47bbacc040efbc819e7d7c3428c5f3280093eb86b39e71bdd1d4bbdc03f5ac3eda59f2efc91d4d88ccb1f6181365e335aad8e078880a8fb33ef19c4219a05fc505c08f55de059f86fb43f80b7e76", 0x67, 0x7})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x100}}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x3ff, 0xc0}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
syz_open_procfs(0x0, &(0x7f00000003c0)='net/netfilter\x00')
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x4, r2, 0x0, &(0x7f0000000380)="530fa0feb806ff5e53ebeac4048ffe2fce66b88fe12af73e07035eb418c93ebdb18f28a19d2f9a82d45c0a8480642ece722720ce238be1533d1090dfde6a51c48657441a35f34c13e8d3", 0x4a, 0x8a6f})
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

7m7.182910512s ago: executing program 1 (id=1093):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = io_uring_setup(0x458, &(0x7f00000003c0)={0x0, 0x1539, 0x10, 0x2, 0x21c})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002500)='\f', 0x1}], 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x5, 0x0, 0x6, 0x3f, 0x1a, "3eccd25569e20900"})

7m6.20523653s ago: executing program 1 (id=1095):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (fail_nth: 3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x4090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)

7m5.120092969s ago: executing program 1 (id=1096):
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
getpid()
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_usbip_server_init(0x5)
writev(r1, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}})
fcntl$setpipe(r0, 0x407, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffffc28c554a, 0x0, 0x40, 0x8, 0x3, 0x0, 0x0, 0x4, 0x8}}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x34, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x47}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}, @generic="90b24b10"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r0, 0x407, 0x2000000)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0)

7m3.306262005s ago: executing program 1 (id=1104):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf252500000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x6}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80200, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000851}, 0x200c8090)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141103)
clock_nanosleep(0x3, 0x1, 0x0, 0x0)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000500)="f5327bf159b547ac0843c2d15fe0369d7f1873eaae4f0965420937ddae6051fb0d9f240e8c77e8e0e3c6df3ff1ef13831eb42c41def03a79e1e64853b80b359b33b6a03d6d00758e9d18ed1521b5582f7fcd266fd19dd09d892928cbed67a0a334e01f6968545eb2696cf840cd2cbde1e867d0d7e0bd0efcea9399fa387029bf5e790f85f88b13c437b30061e232ce2cb666d6ab3875e8c50e03a6229c5dabc7d21e0476cdf797e92365db055be51b", 0xaf}], 0x1)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

6m47.942757142s ago: executing program 34 (id=1104):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf252500000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x6}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80200, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000851}, 0x200c8090)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141103)
clock_nanosleep(0x3, 0x1, 0x0, 0x0)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000500)="f5327bf159b547ac0843c2d15fe0369d7f1873eaae4f0965420937ddae6051fb0d9f240e8c77e8e0e3c6df3ff1ef13831eb42c41def03a79e1e64853b80b359b33b6a03d6d00758e9d18ed1521b5582f7fcd266fd19dd09d892928cbed67a0a334e01f6968545eb2696cf840cd2cbde1e867d0d7e0bd0efcea9399fa387029bf5e790f85f88b13c437b30061e232ce2cb666d6ab3875e8c50e03a6229c5dabc7d21e0476cdf797e92365db055be51b", 0xaf}], 0x1)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

2m29.303110702s ago: executing program 0 (id=1814):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioprio_set$pid(0x3, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r4, 0x20b, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8054}, 0x2000c890)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x74, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xbd}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x74}}, 0x24004004)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x208, 0x2e8, 0x2e8, 0x208, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xf8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0xa}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)
stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8040, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x1}}, {@access_client}, {@cache_none}, {@cachetag={'cachetag', 0x3d, 'nl802154\x00'}}, {@noxattr}, {@ignoreqv}, {@noextend}, {@access_client}, {@access_any}], [{@smackfsroot={'smackfsroot', 0x3d, 'addrtype\x00'}}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@flag='lazytime'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@appraise}, {@euid_eq}, {@euid_lt={'euid<', r8}}]}})
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES64=r5], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r1, &(0x7f0000000dc0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x9, {{0x0, 0xc4}, {0xb5, 0x400, 0x72, 0x400, 0xab, 0x3ff}}}, 0x14)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8], 0x14)
pwrite64(r1, &(0x7f0000000000)="55ec6b6684c21d683e5024cc900a61", 0xf, 0x7fffffff)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'amplc_dio200\x00', [0x100, 0xf, 0xd0, 0x2, 0x3, 0x102, 0x3, 0x80, 0x8, 0xb, 0x0, 0x7, 0x9, 0x405, 0x10001, 0x200, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x32eea534, 0x47, 0xd, 0x7, 0x6a7b, 0x5, 0x0, 0x8]})

2m28.939937413s ago: executing program 0 (id=1817):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x4c090, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000006c0)=@generic={0x1, 0x4, 0x7})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r3=>0x0)
fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
read$FUSE(r1, &(0x7f0000005300)={0x2020, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000007340)={r3, r4, r5}, 0xc)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50)
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}, 0xfffffff0}, {{0x0, 0x0, &(0x7f00000039c0)}}], 0x2, 0x0, 0x0)

2m28.255207791s ago: executing program 3 (id=1821):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000150000000000000000008500000020000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0xf0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m28.21408146s ago: executing program 3 (id=1822):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140), 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840), 0x0, 0xfffffffffffffffe)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000840)={0x3, 0x0, @pic={0x5, 0x81, 0x84, 0x6, 0xf8, 0x1, 0x6, 0xdc, 0x9, 0x0, 0xe, 0x1, 0x9, 0xff, 0x9, 0x1}})
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r8, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40408d1)
setsockopt(r8, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000})
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)

2m27.371064371s ago: executing program 0 (id=1824):
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffffff8c]}, 0x8)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x7)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"})
pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0)
syz_open_pts(r3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20)
fsopen(&(0x7f0000000000)='ceph\x00', 0x1) (async)
r5 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='ip\x00\x03cr\x80e\x83', &(0x7f0000000240)='.\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) (async)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}})

2m27.229577117s ago: executing program 3 (id=1825):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c", 0x1}], 0x1}}], 0x1, 0x8020)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYBLOB="0700050009"], 0x12)

2m27.08097111s ago: executing program 0 (id=1826):
syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x82001)
r0 = socket$inet(0x2, 0x5, 0x0)
r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001580)=""/102378, 0x18fea)
r3 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef)
timer_create(0x3, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000240)={0x0, 0x0, 0x1fffffffc000000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
recvfrom(r3, &(0x7f0000000340)=""/53, 0x35, 0x10100, 0x0, 0x0)
timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd5}, 0x48051)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000002c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e20, @local}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2m25.951468116s ago: executing program 3 (id=1829):
unshare(0x400)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x10001})
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = mq_open(0x0, 0x40, 0xf8, &(0x7f0000000080)={0x8000000000000000, 0x8, 0xd9, 0xc02})
mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000040)="05000000010000", 0x7)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

2m25.914585379s ago: executing program 0 (id=1830):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x38, {0x2, 0x4e22, @empty}, 'ip6gre0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000010327bd7000ffdbdf250200000800000000f9"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, 0x0, 0x4000000)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)

2m25.683415102s ago: executing program 3 (id=1832):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
futex(&(0x7f00000002c0)=0x2, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x2)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000400)="5d040da2ee30e38e93716a79cb8bc192dc28ad70b2b725789c0ee491c2c973ffe1a8226db7e1be77a45c16ed349c965f279fc5679590d728b7c1b02d9aaffae835cfcade1bd8bb9cab", 0x49}, {&(0x7f0000000c80)="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", 0x1000}], 0x2, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x48}}], 0x1, 0x8010)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c)
r2 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0)
read$usbmon(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r4, 0x4)
r5 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r6, 0x1, &(0x7f0000000040), 0x0)
copy_file_range(r4, 0x0, r3, 0x0, 0xffffffffa003e459, 0x700000000000000)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0x0)

2m24.738578317s ago: executing program 0 (id=1835):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="68ee1a376b08799f6243d6d142ef14d2699327d8b66157a6fc2b4ceb1076b88e166f96ccd1c49c418f5586ee085528bfc5124d959abd4aadc80eb65bbc5ee83bbdcb13bd6d6cc6e29e979b83c4393ca3f57c89f9866532a06bc1266a7cc3ecbc40661a0f1611101ceb1f5bbba2f0dfb853ef51e6c361a623af0d209f987cd8a9af4c3fafbb42b9384edfed03d8af396ee44637c05eadfc029c2fa458d1c54b78119797b22f22af86cda9ac764837d38a65fc7ef9541e77fe1e8491fcf824f60181c539c388644a73bac9c4680595931f9f76f4", 0xd3, r2)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32], 0x38}}, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000780)={'erspan0\x00', <r9=>0x0, 0x40, 0x20, 0x82, 0x6, {{0x1a, 0x4, 0x0, 0x7, 0x68, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, {[@timestamp={0x44, 0x8, 0x89, 0x0, 0x1, [0x7ffffffc]}, @generic={0x7, 0x9, "77080ba808b247"}, @ssrr={0x89, 0x1f, 0x3c, [@empty, @remote, @loopback, @loopback, @private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0x6c, 0x0, 0x5, [0x2, 0x1, 0x5]}, @ssrr={0x89, 0x13, 0xb2, [@local, @private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}}})
syz_open_pts(r0, 0x26083)
ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000540)=<r10=>0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@loopback, @in=@remote, 0x4e21, 0xd33, 0x4e21, 0x4037, 0xa, 0xc0, 0x0, 0x83, r9, r10}, {0x3, 0x2, 0xb0e, 0xffffffff, 0x100, 0xfffffffffffffc00, 0xfffffffffffffe00, 0xb0a}, {0x12, 0x10000, 0x101, 0x3}, 0x3, 0x6e6bbb, 0x2, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x3504, 0x0, 0x1, 0x0, 0x2, 0x4, 0x7}}, 0xe8)

2m24.613522097s ago: executing program 3 (id=1836):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="68ee1a376b08799f6243d6d142ef14d2699327d8b66157a6fc2b4ceb1076b88e166f96ccd1c49c418f5586ee085528bfc5124d959abd4aadc80eb65bbc5ee83bbdcb13bd6d6cc6e29e979b83c4393ca3f57c89f9866532a06bc1266a7cc3ecbc40661a0f1611101ceb1f5bbba2f0dfb853ef51e6c361a623af0d209f987cd8a9af4c3fafbb42b9384edfed03d8af396ee44637c05eadfc029c2fa458d1c54b78119797b22f22af86cda9ac764837d38a65fc7ef9541e77fe1e8491fcf824f60181c539c388644a73bac9c4680595931f9f76f4", 0xd3, r2)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32], 0x38}}, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000780)={'erspan0\x00', <r9=>0x0, 0x40, 0x20, 0x82, 0x6, {{0x1a, 0x4, 0x0, 0x7, 0x68, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, {[@timestamp={0x44, 0x8, 0x89, 0x0, 0x1, [0x7ffffffc]}, @generic={0x7, 0x9, "77080ba808b247"}, @ssrr={0x89, 0x1f, 0x3c, [@empty, @remote, @loopback, @loopback, @private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0x6c, 0x0, 0x5, [0x2, 0x1, 0x5]}, @ssrr={0x89, 0x13, 0xb2, [@local, @private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}}})
syz_open_pts(r0, 0x26083)
ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000540)=<r10=>0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@loopback, @in=@remote, 0x4e21, 0xd33, 0x4e21, 0x4037, 0xa, 0xc0, 0x0, 0x83, r9, r10}, {0x3, 0x2, 0xb0e, 0xffffffff, 0x100, 0xfffffffffffffc00, 0xfffffffffffffe00, 0xb0a}, {0x12, 0x10000, 0x101, 0x3}, 0x3, 0x6e6bbb, 0x2, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x3504, 0x0, 0x1, 0x0, 0x2, 0x4, 0x7}}, 0xe8)

2m9.648135081s ago: executing program 35 (id=1835):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="68ee1a376b08799f6243d6d142ef14d2699327d8b66157a6fc2b4ceb1076b88e166f96ccd1c49c418f5586ee085528bfc5124d959abd4aadc80eb65bbc5ee83bbdcb13bd6d6cc6e29e979b83c4393ca3f57c89f9866532a06bc1266a7cc3ecbc40661a0f1611101ceb1f5bbba2f0dfb853ef51e6c361a623af0d209f987cd8a9af4c3fafbb42b9384edfed03d8af396ee44637c05eadfc029c2fa458d1c54b78119797b22f22af86cda9ac764837d38a65fc7ef9541e77fe1e8491fcf824f60181c539c388644a73bac9c4680595931f9f76f4", 0xd3, r2)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32], 0x38}}, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000780)={'erspan0\x00', <r9=>0x0, 0x40, 0x20, 0x82, 0x6, {{0x1a, 0x4, 0x0, 0x7, 0x68, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, {[@timestamp={0x44, 0x8, 0x89, 0x0, 0x1, [0x7ffffffc]}, @generic={0x7, 0x9, "77080ba808b247"}, @ssrr={0x89, 0x1f, 0x3c, [@empty, @remote, @loopback, @loopback, @private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0x6c, 0x0, 0x5, [0x2, 0x1, 0x5]}, @ssrr={0x89, 0x13, 0xb2, [@local, @private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}}})
syz_open_pts(r0, 0x26083)
ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000540)=<r10=>0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@loopback, @in=@remote, 0x4e21, 0xd33, 0x4e21, 0x4037, 0xa, 0xc0, 0x0, 0x83, r9, r10}, {0x3, 0x2, 0xb0e, 0xffffffff, 0x100, 0xfffffffffffffc00, 0xfffffffffffffe00, 0xb0a}, {0x12, 0x10000, 0x101, 0x3}, 0x3, 0x6e6bbb, 0x2, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x3504, 0x0, 0x1, 0x0, 0x2, 0x4, 0x7}}, 0xe8)

2m9.497599422s ago: executing program 36 (id=1836):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="68ee1a376b08799f6243d6d142ef14d2699327d8b66157a6fc2b4ceb1076b88e166f96ccd1c49c418f5586ee085528bfc5124d959abd4aadc80eb65bbc5ee83bbdcb13bd6d6cc6e29e979b83c4393ca3f57c89f9866532a06bc1266a7cc3ecbc40661a0f1611101ceb1f5bbba2f0dfb853ef51e6c361a623af0d209f987cd8a9af4c3fafbb42b9384edfed03d8af396ee44637c05eadfc029c2fa458d1c54b78119797b22f22af86cda9ac764837d38a65fc7ef9541e77fe1e8491fcf824f60181c539c388644a73bac9c4680595931f9f76f4", 0xd3, r2)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32], 0x38}}, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000780)={'erspan0\x00', <r9=>0x0, 0x40, 0x20, 0x82, 0x6, {{0x1a, 0x4, 0x0, 0x7, 0x68, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, {[@timestamp={0x44, 0x8, 0x89, 0x0, 0x1, [0x7ffffffc]}, @generic={0x7, 0x9, "77080ba808b247"}, @ssrr={0x89, 0x1f, 0x3c, [@empty, @remote, @loopback, @loopback, @private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0x6c, 0x0, 0x5, [0x2, 0x1, 0x5]}, @ssrr={0x89, 0x13, 0xb2, [@local, @private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}}})
syz_open_pts(r0, 0x26083)
ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000540)=<r10=>0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@loopback, @in=@remote, 0x4e21, 0xd33, 0x4e21, 0x4037, 0xa, 0xc0, 0x0, 0x83, r9, r10}, {0x3, 0x2, 0xb0e, 0xffffffff, 0x100, 0xfffffffffffffc00, 0xfffffffffffffe00, 0xb0a}, {0x12, 0x10000, 0x101, 0x3}, 0x3, 0x6e6bbb, 0x2, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x3504, 0x0, 0x1, 0x0, 0x2, 0x4, 0x7}}, 0xe8)

2m3.978922822s ago: executing program 7 (id=1904):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x9, 0x4}}, @TCA_U32_SEL={0x74, 0x5, {0xb, 0x8, 0x7, 0x7, 0x0, 0xefdf, 0x2, 0x84c, [{0x4, 0x8000, 0x1, 0x32ec}, {0x9, 0xc3b, 0x80000001, 0x4}, {0xffff, 0x4, 0x2, 0x9}, {0x3, 0x8, 0x5c, 0x4}, {0xc8f, 0x7}, {0x1, 0xeb, 0x401, 0xd}]}}]}}]}, 0xac}}, 0x24040084)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)={0x32, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 'wrr\x00', 0x7, 0xbe, 0x40}, 0x2c)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open$dir(0x0, 0x105000, 0x53)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000000c0)=@req={0x9, 0x8000000, 0x0, 0x8}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
bind$can_raw(r0, &(0x7f00000001c0), 0x10)
sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x3, 0x0, 0x0, 0x0, "eaff00"}, 0x10}, 0x1, 0x0, 0x0, 0x4008044}, 0xd209f6d814827b17)

2m2.784324629s ago: executing program 7 (id=1906):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000540)={0x0, 0x2, 0x98, 0x0, 0x2})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000)
mkdir(&(0x7f0000000280)='./file1\x00', 0x104)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x1c)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)

2m2.448456679s ago: executing program 7 (id=1908):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000001400)={'multiq3\x00', [0x100, 0xf, 0x2, 0x2, 0x1, 0xff, 0x2001, 0x20000000, 0x8, 0xfffffffb, 0x0, 0x7, 0x5, 0x0, 0x10001, 0x7, 0x0, 0x8, 0xeec, 0x401, 0x7, 0x2, 0x8000, 0x9, 0x3, 0x3, 0x7, 0x0, 0x7, 0x7, 0x8]})
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
syz_open_dev$video4linux(0x0, 0xf, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = io_uring_setup(0x1195, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_usb_connect(0x3, 0x35, 0x0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0)
listen(r4, 0x2b4b)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r6 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$netlink(r6, &(0x7f0000001780)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc, &(0x7f0000001500)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="240000002000010028bd7000fddbdf251400f500ff01000000000000000000000000000132ecbcfcd7e1c23f308001332e3c1771b56648c7f489032d9597f0cabd07369b9cdb0d27d11f1bc7b78ae92d5855b384be816ea2078bfd8b6a5a72530a43d1b01fe298b98fc020cb8defd77d17c2bdbc4f93b72727a987881f863ba7fbb2a092716c599efdd5bee14eafadef8585"], 0x24}, {&(0x7f0000000940)={0x234, 0x37, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x3d, 0x50, 0x0, 0x1, [@generic="b624736db654263491eb159b2d5227d6d236e0c4a582daa325ad87c9155092dcfc", @typed={0x8, 0x17, 0x0, 0x0, @u32=0x1ff}, @typed={0xc, 0x3f, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x8c}]}, @nested={0x128, 0x8b, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @pid}, @typed={0x45, 0x18, 0x0, 0x0, @binary="2c81c4c8dcaed5060841870ea721d43e3279f395ea671e7ac1a459a5300f5fde7ae99125d009bba46239d0cfe91437673e2d62523ebb90efe929c09bcdd55715db"}, @typed={0x8, 0x150, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x157, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x4, 0x5a}, @generic="15d34f956e51e496f123fa38b9bc16feb0b5fb010a95c53ba749d87341181199200662e080dc1c486a401cd11f5bdb8f0789dd2686702371b4203af6", @typed={0x77, 0x3b, 0x0, 0x0, @binary="73ddf95deee2b08deedf4307436f51cb85036f0cf18d34a2de51ae5c34f9bc159745b05a1652ab0b07d0916d4824de871238ffd1f3ab8d616c9332878a19a1285472366cca941962cd25c7a7f7e8704ca26a122b582f3e6f3e3c3108c8b18e8f781ca31fd73186725f1a099d0d3a57e27d9d30"}]}, @typed={0x8, 0x1c0, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0xbf2}, @generic="dbe77b8213913dcfcf879632402ac0040d8b73d52d767620d34b60881c5dd40f967de1953c48b00018e0c1773124f9407446f30f2cd2d9be715246cc3d8b5791ebfe4122fc9956c29a60dca274930be50435d36f61c3045a0a1ad2fb26a0b2bc1fcd655412ebd18d51a27d9f56e2c226c508bba22b0ecc2251b93db8c1368dd7cfd66485e353b7b653be1e0a6deab71457656178f50fbde78ac4be1c360ff037ba404825f630cccad35dfcaf32"]}, 0x234}, {&(0x7f0000000d80)={0x1f0, 0x37, 0x118, 0x70bd2a, 0x25dfdbfb, "", [@generic="f44f2c56c34a79964ab5ca94fdfd90832113ee5212cc18020391e8887b302594bfe8b4db3284d86e14a3cbb201311279b0078ae18c7755cbd7c4db17dcd6908c4803e57c7afeb30cd7da4c9a25ebcf78ce206f383af99113d58c0a6bde91295d05d2793b8b48462b3f89e596343dce5e3fc93413bb53fd104aad517f0bd79ff8c8f1618301e5538474393125b5ca6610e4aaffca978040939da1cbece9acff89c2573319a1d55d44783711a816f3d3a03ed3ef9dcadf01da69b0918eef3d97", @typed={0x8, 0xd2, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x114, 0x0, 0x0, @u32=0x400}, @generic="86d993e854a4aad4baa5381ad60b45c249bac22a0c9ecfd324947bf9ad294c13d2b4579d7cc2e3e385e6bb2982f21a2bb98258ef3aef8cbf49a10a874a41918373ce1b204bc72a312bc2287b9d28f9ac019464db725a0a7da38fd8bbd562c33ceff995be45bb039799ca793e2531d6110c11d350ca987b9ddecdc62c7a6a82", @nested={0x8e, 0x17, 0x0, 0x1, [@nested={0x4, 0xd4}, @typed={0x79, 0x10, 0x0, 0x0, @binary="678f624d55a7e9e9c974311df8b107273573075e6f42183e2e03848c19f29de7ef5f5158f0f3dac45219520ef411b92738571aae55743c9e6fb4061398ee4a8a87df864308c30c2ba3063473cb648916de494d73662986c8d491e6f29463b16e3b0e4a0f744112c8e42d89934dff161e91c6cf27a7"}, @generic="f769f2c51323d2eb63aa"]}]}, 0x1f0}, {&(0x7f0000000f80)={0x10, 0x34, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x10}, {&(0x7f00000003c0)={0x1c, 0x39, 0x100, 0x70bd25, 0x25dfdbfd, "", [@nested={0xc, 0xec, 0x0, 0x1, [@typed={0x8, 0x142, 0x0, 0x0, @ipv4=@remote}]}]}, 0x1c}], 0x5, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r3, r2]}}], 0x58, 0x4040001}, 0x4000)
sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000040)=[r1, 0xffffffffffffffff], 0x2)
socket$pppl2tp(0x18, 0x1, 0x1)

2m0.857086047s ago: executing program 7 (id=1911):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600"})
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x1, 0x9, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff03, 0x6, 0x3, 0x0, 0x3, 0x4, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x4, 0x8, 0x4c74, 0x80000003, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x87, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x11, 0x7], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x12b432e8, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0x5, 0x4, 0xb, 0x10003, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x953, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xffff, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x9, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xa3ae, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x100, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x3, 0x26, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffbf000, 0x10000, 0x0, 0x3ff, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff7, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x6, 0x1, 0x6c1b, 0x4, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m59.841091305s ago: executing program 7 (id=1914):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x88, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

1m59.791211532s ago: executing program 7 (id=1915):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
close(r0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x28940c65, 0x2)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

1m44.535608689s ago: executing program 37 (id=1915):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
close(r0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x28940c65, 0x2)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

1m0.503165541s ago: executing program 4 (id=2044):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000250009012cbd7000f9ffffff02000000080003004700000008003f00", @ANYRES32, @ANYBLOB="c66d6691cf29f25e73d51e7eba88417326ce375efc5823a7"], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

58.250381273s ago: executing program 4 (id=2048):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000540)={0x0, 0x2, 0x98, 0x0, 0x2})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000)
mkdir(&(0x7f0000000280)='./file1\x00', 0x104)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x1c)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)

55.648000403s ago: executing program 4 (id=2052):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)

49.361486226s ago: executing program 4 (id=2066):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x38, {0x2, 0x4e22, @empty}, 'ip6gre0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000010327bd7000ffdbdf250200000800000000f9"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r5, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0)

48.390969361s ago: executing program 4 (id=2068):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100)
r2 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r4 = fanotify_init(0x0, 0x0)
dup(r4)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0xffffffff, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x7, 0x0, 0x1, 0x0, 0x400000, 0x7fffffff, 0x400000}, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001f80)=@filter={'filter\x00', 0x42, 0x4, 0x13b0, 0xffffffff, 0x0, 0x10c8, 0x1160, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00', {}, {}, 0x0, 0x3}, 0x74000002, 0x10a0, 0x10c8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x7, {0x6}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x178, 0x1b8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0x6, 0x3, 0x1, 0x0, 'syz1\x00', 0x6, [0x0, 0xff000000, 0xffffffff, 0xff]}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1410)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100d01042abd70000000000006000000262ab2915cd5dbeb5988853cc01527", @ANYRES16=r0, @ANYBLOB="824900800005001808000200000000008adec8420ac8ae73dcce0cd3b93d57000d02cde1140af40e75bdc5373403ccb6b2ba74dcd9abf2a009216b3640c85772a7d2e81ce62f65db4a28e64ffe78abc9a60977c3bcc3d0a320d02f3998d64e925994b47648a1565e97cd1eeb9ad82e3c62c858a1ed67da31ecb74565b3"], 0x40}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}]}, 0x3c}}, 0xc084)

46.291714136s ago: executing program 4 (id=2071):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$setperm(0x5, r6, 0x82004)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000001140)={@private1, r8}, 0x14)
keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r9 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c)

29.87762664s ago: executing program 38 (id=2071):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$setperm(0x5, r6, 0x82004)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000001140)={@private1, r8}, 0x14)
keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r9 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c)

12.620325191s ago: executing program 8 (id=2135):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10, 0x1000, 0x80, 0x7f}, {0x8, 0x0, 0x800, 0x3, 0x2, 0x6}, 0xe72d, 0x2, 0x178d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x3454acd1e6f80a22}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcd2e77eb9cafbc50}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa402, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x1, 0x0, 0x6, 0x6})
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$packet(0x11, 0x3, 0x300)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000440), 0x0, 0x100)
ioctl$CEC_ADAP_G_CAPS(r6, 0xc04c6100, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xf, 0x7ffffffe}]})
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)

9.29001932s ago: executing program 9 (id=2142):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x9002})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
socket$packet(0x11, 0x2, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0)
ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000c80)={0x3, 0x1, 0x15, 0x20, 0x168, &(0x7f0000000880)})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x40, 0x8, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0xb}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r6}, 0x38)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840)

9.152323098s ago: executing program 6 (id=2143):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioprio_set$pid(0x3, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r4, 0x20b, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8054}, 0x2000c890)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x74, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xbd}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x74}}, 0x24004004)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x208, 0x2e8, 0x2e8, 0x208, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xf8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0xa}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)
stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00))
mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8040, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x1}}, {@access_client}, {@cache_none}, {@cachetag={'cachetag', 0x3d, 'nl802154\x00'}}, {@noxattr}, {@ignoreqv}, {@noextend}, {@version_L}, {@access_client}, {@access_any}]}})
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES64=r5], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r1, &(0x7f0000000dc0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x9, {{0x0, 0xc4}, {0xb5, 0x400, 0x72, 0x400, 0xab, 0x3ff}}}, 0x14)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8], 0x14)
pwrite64(r1, &(0x7f0000000000)="55ec6b6684c21d683e5024cc900a61", 0xf, 0x7fffffff)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'amplc_dio200\x00', [0x100, 0xf, 0xd0, 0x2, 0x3, 0x102, 0x3, 0x80, 0x8, 0xb, 0x0, 0x7, 0x9, 0x405, 0x10001, 0x200, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x32eea534, 0x47, 0xd, 0x7, 0x6a7b, 0x5, 0x0, 0x8]})

8.905863424s ago: executing program 8 (id=2144):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="1b8852c50f6f25b11d073d4d10b5f50200000000e9ad6125b96a7cbc5860fc3b3d2e43eff703a6077ced4d4c4a6a99103271318100591321b69c49e4db737b5b68ca9f19fcdc27f20a91f13ce9321f8413a5db86a504c6a6add99a88715178daaf613cde9e7b8cea3d2ed49f87529b861538cfb69d7dcd8865ac68d8ea4fbc0ecf9dc325b14d3de70d6ff46fd2451091fda82a442d59a850434376317c2bab9cc8d0781297019a4f7ebb08a8afa7b40345209c04546f0a0fa780", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x18, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r1 = io_uring_setup(0x7a76, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001bf40)=""/102392, 0x18ff8)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e})
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
bind$tipc(r7, 0x0, 0x0)
close_range(r6, r7, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000001bf00)=[{{&(0x7f0000000040)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000000000100e0ff020000804e673045b8408a3e742fc684441a86687cecca587fa79100007706ed522d96f623981c7dfb53e8c888f78a0468d68756747bd3af937c792ef3bdba79a31afc1d97310dd4180165334a27ad795dc5c3ece97de219871000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES8=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x8000}}], 0x1, 0x4000010)
ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2})

7.353301486s ago: executing program 5 (id=2145):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x10, 0x803, 0x0)
socket$netlink(0x10, 0x3, 0x9)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x3, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x4, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0xae64, 0x0)
ioctl$KVM_SET_PIT2(r7, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]})
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x19, "fef98317e5961ff7d940809ab0ea6acc96e3a2503dc3bd3fe37d58128bbad0f987eb000000800000000034464c086bdd8a0f350000e35a91b80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000ebff0000000000040000000000000000001000", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x7, 0x7]}})
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0x3)
sendmmsg(r3, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0)
set_mempolicy(0x8006, 0x0, 0x5)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

7.008597683s ago: executing program 6 (id=2146):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioprio_set$pid(0x3, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r4, 0x20b, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8054}, 0x2000c890)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x74, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xbd}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x74}}, 0x24004004)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x208, 0x2e8, 0x2e8, 0x208, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xf8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0xa}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)
stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8040, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@cache_none}, {@cachetag={'cachetag', 0x3d, 'nl802154\x00'}}, {@noxattr}, {@ignoreqv}, {@noextend}, {@version_L}, {@access_client}, {@access_any}], [{@smackfsroot={'smackfsroot', 0x3d, 'addrtype\x00'}}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@flag='lazytime'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@appraise}, {@euid_eq}, {@euid_lt={'euid<', r8}}]}})
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES64=r5], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r1, &(0x7f0000000dc0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x9, {{0x0, 0xc4}, {0xb5, 0x400, 0x72, 0x400, 0xab, 0x3ff}}}, 0x14)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8], 0x14)
pwrite64(r1, &(0x7f0000000000)="55ec6b6684c21d683e5024cc900a61", 0xf, 0x7fffffff)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'amplc_dio200\x00', [0x100, 0xf, 0xd0, 0x2, 0x3, 0x102, 0x3, 0x80, 0x8, 0xb, 0x0, 0x7, 0x9, 0x405, 0x10001, 0x200, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x32eea534, 0x47, 0xd, 0x7, 0x6a7b, 0x5, 0x0, 0x8]})

6.825410905s ago: executing program 8 (id=2147):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000250009012cbd7000f9ffffff02000000080003004700000008003f00", @ANYRES32, @ANYBLOB="c66d6691cf29f25e73d51e7eba88417326ce375efc5823a7"], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)

6.734128583s ago: executing program 9 (id=2148):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r1 = gettid()
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f00000000c0))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
nanosleep(&(0x7f0000000040)={0x0, 0x3938700}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r4 = syz_clone3(&(0x7f0000000540)={0x2190000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000140)=<r5=>0x0, {0x6}, &(0x7f0000000340)=""/145, 0x91, &(0x7f0000000400)=""/251, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0x0], 0x5}, 0x58)
timer_create(0x2, &(0x7f00000005c0)={0x0, 0x3c, 0x1, @tid=r5}, &(0x7f0000000600))
migrate_pages(r4, 0x1, &(0x7f0000000300)=0x6, &(0x7f0000000700)=0xffffffffffffffff)
sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38)
r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
fsetxattr(0xffffffffffffffff, &(0x7f0000000740)=@known='trusted.overlay.opaque\x00', &(0x7f0000000780)='\x00', 0x1, 0x1)
listen(r7, 0x204)
r8 = socket$netlink(0x10, 0x3, 0x7)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee000000000000", 0x53}], 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="772f74708e84330ae8bf9d428c77976080538fbf69a99f756ff9340f3dbc50b4285f9d4373ce620d0cd1cf727182cc0c814a80d4cc0a383b3c53292f53e36a36c6171260a516bf84a4c02aab79736ad1c97a9157ae396c2d196f2b8e552c5ec605e4bc29631f1d3acdb4f193f4019570605f5f5f288e842de33064b92fb15e73a34bae359b0fcbcf3dc689791c", 0x8d, 0x20008810, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @mcast1, 0x2}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)

6.518098021s ago: executing program 6 (id=2149):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", <r1=>0xffffffffffffffff})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x1, 0x9, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff03, 0x6, 0x3, 0x0, 0x3, 0x4, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x4, 0x8, 0x4c74, 0x80000003, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x87, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x11, 0x7], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x12b432e8, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0x5, 0x4, 0xb, 0x10003, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x953, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xffff, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x9, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xa3ae, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x100, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x3, 0x26, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffbf000, 0x10000, 0x0, 0x3ff, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff7, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x6, 0x1, 0x6c1b, 0x4, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168", r1})
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, <r9=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r9, 0x0, 0x810003, 0x4b, 0x0, 0x5})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"})
openat(0xffffffffffffff9c, 0x0, 0x5a042, 0x0)
r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x400)
ppoll(&(0x7f0000000500)=[{r10, 0x2002}, {0xffffffffffffffff, 0x2000}], 0x2, &(0x7f0000000580), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)

5.726459225s ago: executing program 5 (id=2150):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
futex(&(0x7f00000002c0)=0x2, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x2)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x48}}], 0x1, 0x8010)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c)
r2 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0)
read$usbmon(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r4, 0x4)
r5 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r6, 0x1, &(0x7f0000000040), 0x0)
copy_file_range(r4, 0x0, r3, 0x0, 0xffffffffa003e459, 0x700000000000000)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0x0)

5.457896149s ago: executing program 6 (id=2151):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", <r1=>0xffffffffffffffff})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x1, 0x9, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff03, 0x6, 0x3, 0x0, 0x3, 0x4, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x4, 0x8, 0x4c74, 0x80000003, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x87, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x11, 0x7], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x12b432e8, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0x5, 0x4, 0xb, 0x10003, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x953, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xffff, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x9, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xa3ae, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x100, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x3, 0x26, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffbf000, 0x10000, 0x0, 0x3ff, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff7, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x6, 0x1, 0x6c1b, 0x4, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168", r1, <r6=>0xffffffffffffffff})
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r8, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r10, 0x0, 0x810003, 0x4b, 0x0, 0x5})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", <r11=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r11})
r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x400)
ppoll(&(0x7f0000000500)=[{r12, 0x2002}, {0xffffffffffffffff, 0x2000}], 0x2, &(0x7f0000000580), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)

5.276146406s ago: executing program 9 (id=2152):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100)
r1 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = fanotify_init(0x0, 0x0)
dup(r3)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0xffffffff, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x7, 0x0, 0x1, 0x0, 0x400000, 0x7fffffff, 0x400000}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100d01042abd70000000000006000000262ab2915cd5dbeb5988853cc01527", @ANYRES16=r0, @ANYBLOB="824900800005001808000200000000008adec8420ac8ae73dcce0cd3b93d57000d02cde1140af40e75bdc5373403ccb6b2ba74dcd9abf2a009216b3640c85772a7d2e81ce62f65db4a28e64ffe78abc9a60977c3bcc3d0a320d02f3998d64e925994b47648a1565e97cd1eeb9ad82e3c62c858a1ed67da31ecb74565b3"], 0x40}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000)
write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}]}, 0x3c}}, 0xc084)

4.203745305s ago: executing program 6 (id=2153):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffff}, 0x6)
write(r2, &(0x7f0000000040)='\t\x00\x00\x00', 0x4)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x7, &(0x7f0000000040)={[0x3]}, 0x8)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
r5 = dup2(r4, r3)
write$snddsp(r5, 0x0, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x5, 0x1}}, 0x28)
tkill(r1, 0xf)
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x161801)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000040)={&(0x7f0000000000), 0x1})
wait4(r1, 0x0, 0x2, 0x0)
tkill(r1, 0x3)
io_setup(0x4, &(0x7f00000003c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r0, 0x0, 0x0, 0x3b0}])
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
recvmsg(r9, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x12120)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001d40)=""/4056, 0xfd8}, {&(0x7f0000002d80)=""/4126, 0x101e}, {&(0x7f0000004700)=""/4066, 0xfe2}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f0000001000)=""/172, 0xac}, {&(0x7f00000002c0)=""/113, 0x71}], 0x6}, 0x32120)
recvmmsg(r9, &(0x7f0000006a80)=[{{&(0x7f0000000100)=@rc={0x1f, @none}, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/9, 0x9}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x3dea93cd}, {{&(0x7f0000000680)=@nfc_llcp, 0x80, &(0x7f0000006940)=[{&(0x7f0000000700)=""/34, 0x22}, {&(0x7f0000000740)=""/77, 0x4d}, {&(0x7f0000000900)=""/223, 0xdf}, {&(0x7f0000000a00)=""/214, 0xd6}, {&(0x7f0000000b00)=""/97, 0x61}, {&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006700)=""/3, 0x3}, {&(0x7f0000006740)=""/149, 0x95}, {&(0x7f0000006800)=""/54, 0x36}, {&(0x7f0000006840)=""/237, 0xed}], 0xa, &(0x7f0000006a00)=""/78, 0x4e}, 0x7}], 0x2, 0x40000020, &(0x7f0000006b00))

4.086802193s ago: executing program 9 (id=2154):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x2108c3, 0x10, 0x27}, 0x18)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000280))
mount_setattr(r0, &(0x7f0000000240)='./file0\x00', 0x8000, &(0x7f00000002c0)={0x78, 0x8, 0xa0000, {r1}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a16500", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1}}}}}}, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6d, 0xc9, 0x4}}}, 0x7)
syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0xd, 0x5}, {0x10, 0x3, 0xc}}]}}, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
eventfd(0x3)
syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x413}}}, 0x7)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000100))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104802a, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0xfffffff2}}, './file0\x00'})

4.085958489s ago: executing program 5 (id=2155):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioprio_set$pid(0x3, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r4, 0x20b, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8054}, 0x2000c890)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x74, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xbd}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x74}}, 0x24004004)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x208, 0x2e8, 0x2e8, 0x208, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xf8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0xa}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)
stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00))
mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8040, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x1}}, {@access_client}, {@cache_none}, {@cachetag={'cachetag', 0x3d, 'nl802154\x00'}}, {@noxattr}, {@ignoreqv}, {@noextend}, {@version_L}, {@access_client}, {@access_any}]}})
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES64=r5], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r1, &(0x7f0000000dc0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x9, {{0x0, 0xc4}, {0xb5, 0x400, 0x72, 0x400, 0xab, 0x3ff}}}, 0x14)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8], 0x14)
pwrite64(r1, &(0x7f0000000000)="55ec6b6684c21d683e5024cc900a61", 0xf, 0x7fffffff)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'amplc_dio200\x00', [0x100, 0xf, 0xd0, 0x2, 0x3, 0x102, 0x3, 0x80, 0x8, 0xb, 0x0, 0x7, 0x9, 0x405, 0x10001, 0x200, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x32eea534, 0x47, 0xd, 0x7, 0x6a7b, 0x5, 0x0, 0x8]})

3.794971846s ago: executing program 9 (id=2156):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x70}, 0x1, 0x7}, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000000c0)=ANY=[], 0x4)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x10, r4}, 0x10)
pipe(&(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x8, 0x4}, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.404026845s ago: executing program 5 (id=2157):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x42})
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
rseq(0x0, 0xfde1, 0x0, 0x0)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000a00))
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)

3.23190312s ago: executing program 8 (id=2158):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xff}, 0x17)

2.463468448s ago: executing program 8 (id=2159):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x10, 0x803, 0x0)
socket$netlink(0x10, 0x3, 0x9)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x3, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x4, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0xae64, 0x0)
ioctl$KVM_SET_PIT2(r7, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]})
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x19, "fef98317e5961ff7d940809ab0ea6acc96e3a2503dc3bd3fe37d58128bbad0f987eb000000800000000034464c086bdd8a0f350000e35a91b80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000ebff0000000000040000000000000000001000", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x7, 0x7]}})
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0x3)
sendmmsg(r3, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0)
set_mempolicy(0x8006, 0x0, 0x5)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

2.274850568s ago: executing program 5 (id=2160):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8919, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x6})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000739fffcfa5f4355eb535b9bdab30ee1b3956e06d630fe644e861e4eb2b59d164e29488b7bb16f15d96306aabd4b22165b98e617009cf3072a6af3cd2ae9817c9b98a4c5387adf41f446ece4b24549562ec6de41f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f00000001c0), &(0x7f0000000880)}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x4000000000000001, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x300, 0x178, 0x178, 0x300, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8)

971.574485ms ago: executing program 5 (id=2161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0x4, 0x4, 0x0, 0x1, 0x1000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200480c4}, 0x4040000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004)
ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000001c0)={0x8, "904c7e39ab6a6558002975c4692ef577055cd4fcda1d8021561b6c7dee707ca3", 0x3, 0x9, 0x450, 0xffffff, 0x4})
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000))
r10 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r10, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r10, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0})
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc)

373.478154ms ago: executing program 9 (id=2162):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000250009012cbd7000f9ffffff02000000080003004700000008003f00", @ANYRES32, @ANYBLOB="c66d6691cf29f25e73d51e7eba88417326ce375efc5823a7"], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap$IORING_OFF_SQ_RING(&(0x7f0000f20000/0x3000)=nil, 0x3000, 0x500000c, 0x5d031, 0xffffffffffffffff, 0x0)
open$dir(&(0x7f00000001c0)='.\x00', 0x18100, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

194.995216ms ago: executing program 8 (id=2163):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

0s ago: executing program 6 (id=2164):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100)
fsopen(&(0x7f0000000080)='qnx4\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = fanotify_init(0x0, 0x0)
dup(r2)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0xffffffff, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x7, 0x0, 0x1, 0x0, 0x400000, 0x7fffffff, 0x400000}, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100d01042abd70000000000006000000262ab2915cd5dbeb5988853cc01527", @ANYRES16=r0, @ANYBLOB="824900800005001808000200000000008adec8420ac8ae73dcce0cd3b93d57000d02cde1140af40e75bdc5373403ccb6b2ba74dcd9abf2a009216b3640c85772a7d2e81ce62f65db4a28e64ffe78abc9a60977c3bcc3d0a320d02f3998d64e925994b47648a1565e97cd1eeb9ad82e3c62c858a1ed67da31ecb74565b3"], 0x40}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000)
write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}]}, 0x3c}}, 0xc084)

kernel console output (not intermixed with test programs):

[T11927] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  668.605254][T11927] CPU: 1 UID: 0 PID: 11927 Comm: syz.5.1480 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  668.605294][T11927] Tainted: [L]=SOFTLOCKUP
[  668.605302][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  668.605315][T11927] Call Trace:
[  668.605324][T11927]  <TASK>
[  668.605332][T11927]  dump_stack_lvl+0x100/0x190
[  668.605364][T11927]  should_fail_ex.cold+0x5/0xa
[  668.605394][T11927]  _copy_from_iter+0x1f4/0x1690
[  668.605430][T11927]  ? __asan_memset+0x23/0x50
[  668.605461][T11927]  ? __pfx__copy_from_iter+0x10/0x10
[  668.605491][T11927]  ? __pfx___alloc_skb+0x10/0x10
[  668.605524][T11927]  netlink_sendmsg+0x808/0xda0
[  668.605559][T11927]  ? __pfx_netlink_sendmsg+0x10/0x10
[  668.605587][T11927]  ? __might_fault+0x30/0x140
[  668.605627][T11927]  ____sys_sendmsg+0x9e1/0xb70
[  668.605654][T11927]  ? __pfx_netlink_sendmsg+0x10/0x10
[  668.605686][T11927]  ? __pfx_____sys_sendmsg+0x10/0x10
[  668.605727][T11927]  ___sys_sendmsg+0x190/0x1e0
[  668.605757][T11927]  ? __pfx____sys_sendmsg+0x10/0x10
[  668.605821][T11927]  __sys_sendmsg+0x170/0x220
[  668.605844][T11927]  ? __pfx___sys_sendmsg+0x10/0x10
[  668.605879][T11927]  ? rcu_is_watching+0x12/0xc0
[  668.605916][T11927]  do_syscall_64+0x10b/0xf80
[  668.605945][T11927]  ? clear_bhb_loop+0x40/0x90
[  668.605971][T11927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.605994][T11927] RIP: 0033:0x7f0a7b99ce59
[  668.606012][T11927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  668.606033][T11927] RSP: 002b:00007f0a7c92e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  668.606053][T11927] RAX: ffffffffffffffda RBX: 00007f0a7bc15fa0 RCX: 00007f0a7b99ce59
[  668.606069][T11927] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000003
[  668.606082][T11927] RBP: 00007f0a7c92e090 R08: 0000000000000000 R09: 0000000000000000
[  668.606096][T11927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  668.606108][T11927] R13: 00007f0a7bc16038 R14: 00007f0a7bc15fa0 R15: 00007ffc4079bb38
[  668.606138][T11927]  </TASK>
[  669.734731][   T29] audit: type=1400 audit(2000000114.250:972): avc:  denied  { listen } for  pid=11928 comm="syz.3.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  670.584371][T11944] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  670.590918][T11944] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  670.599461][T11944] vhci_hcd vhci_hcd.0: Device attached
[  670.644360][T11944] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  670.977832][ T9566] usb 44-1: SetAddress Request (26) to port 0
[  671.023086][ T9566] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd
[  671.734554][T11946] vhci_hcd: connection reset by peer
[  671.815131][ T6361] vhci_hcd vhci_hcd.5: stop threads
[  671.892344][ T6361] vhci_hcd vhci_hcd.5: release socket
[  672.006947][ T6361] vhci_hcd vhci_hcd.5: disconnect device
[  672.380068][T11959] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  672.386615][T11959] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  672.397462][T11959] vhci_hcd vhci_hcd.0: Device attached
[  672.416798][T11962] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  673.152465][T11960] vhci_hcd: connection closed
[  673.184037][ T6360] vhci_hcd vhci_hcd.5: stop threads
[  673.395064][ T6360] vhci_hcd vhci_hcd.5: release socket
[  673.471996][ T6360] vhci_hcd vhci_hcd.5: disconnect device
[  673.501247][   T29] audit: type=1400 audit(2000000118.410:973): avc:  denied  { append } for  pid=11958 comm="syz.7.1488" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  673.777870][   T29] audit: type=1400 audit(2000000118.630:974): avc:  denied  { ioctl } for  pid=11968 comm="syz.0.1490" path="socket:[42035]" dev="sockfs" ino=42035 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  674.253929][T11984] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  674.582022][T11985] overlayfs: failed to resolve './file0': -2
[  674.864178][   T29] audit: type=1400 audit(2000000119.690:975): avc:  denied  { watch } for  pid=11982 comm="syz.6.1495" path="/112/bus/file1" dev="tmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  674.934272][   T29] audit: type=1400 audit(2000000119.690:976): avc:  denied  { watch_sb watch_reads } for  pid=11982 comm="syz.6.1495" path="/112/bus/file1" dev="tmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  676.723102][T12005] xt_hashlimit: max too large, truncated to 1048576
[  676.837416][ T9566] usb 44-1: device descriptor read/8, error -110
[  676.838451][   T29] audit: type=1400 audit(2000000121.140:977): avc:  denied  { setattr } for  pid=12000 comm="syz.5.1502" name="RAWv6" dev="sockfs" ino=42093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  677.081528][ T5621] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  677.090647][   T29] audit: type=1400 audit(2000000121.170:978): avc:  denied  { bind } for  pid=12000 comm="syz.5.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  677.330227][ T5621] usb 4-1: device descriptor read/64, error -71
[  677.337587][ T9566] usb usb44-port1: attempt power cycle
[  677.381140][T12014] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  677.592989][ T5621] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  677.750606][ T5621] usb 4-1: device descriptor read/64, error -71
[  677.780899][ T5622] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  677.780929][ T4929] Bluetooth: hci0: command 0x0c1a tx timeout
[  677.872057][ T5621] usb usb4-port1: attempt power cycle
[  677.935923][ T9566] usb usb44-port1: unable to enumerate USB device
[  678.169064][   T29] audit: type=1400 audit(2000000123.110:979): avc:  denied  { listen } for  pid=12030 comm="syz.5.1510" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  678.308256][   T29] audit: type=1400 audit(2000000123.110:980): avc:  denied  { accept } for  pid=12030 comm="syz.5.1510" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  678.670962][ T5742] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  678.810620][ T5742] usb 8-1: device descriptor read/64, error -71
[  679.009664][T12044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  679.431912][ T5742] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  679.440659][ T9566] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  679.560869][ T5742] usb 8-1: device descriptor read/64, error -71
[  679.660888][ T9566] usb 1-1: device descriptor read/64, error -71
[  679.691688][ T5742] usb usb8-port1: attempt power cycle
[  679.932095][ T9566] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  680.248324][ T5742] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  680.289141][ T5742] usb 8-1: device descriptor read/8, error -71
[  680.320695][ T9566] usb 1-1: device descriptor read/64, error -71
[  680.440972][ T9566] usb usb1-port1: attempt power cycle
[  680.490656][T12068] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  680.541321][ T5742] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  680.863074][ T5742] usb 8-1: device descriptor read/8, error -71
[  680.993054][ T5742] usb usb8-port1: unable to enumerate USB device
[  681.268091][ T9566] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  681.305165][ T9566] usb 1-1: device descriptor read/8, error -71
[  681.523143][   T29] audit: type=1400 audit(2000000126.470:981): avc:  denied  { checkpoint_restore } for  pid=12086 comm="syz.6.1524" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  681.877069][T12106] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  682.046848][T12112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  682.459865][   T29] audit: type=1400 audit(2000000127.400:982): avc:  denied  { write } for  pid=12075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  683.526416][   T29] audit: type=1400 audit(2000000128.470:983): avc:  denied  { write } for  pid=12123 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  685.391274][ T9566] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  685.600019][ T9566] usb 6-1: device descriptor read/64, error -71
[  685.787058][T12141] Cannot find set identified by id 0 to match
[  686.572045][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  687.347201][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1541'.
[  687.366354][T12153] xt_addrtype: ipv6 does not support BROADCAST matching
[  688.749368][   T29] audit: type=1400 audit(2000000133.690:984): avc:  denied  { write } for  pid=12145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  688.944359][ T5845] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  689.481753][   T29] audit: type=1400 audit(2000000134.420:985): avc:  denied  { write } for  pid=12190 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  690.172509][   T29] audit: type=1400 audit(2000000135.120:986): avc:  denied  { bind } for  pid=12208 comm="syz.6.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  690.190724][ T5742] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  690.769247][ T5742] usb 6-1: device descriptor read/64, error -71
[  690.802047][T12220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  691.656319][ T5621] usb 1-1: new low-speed USB device number 62 using dummy_hcd
[  691.719483][ T5742] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  692.067434][ T5621] usb 1-1: unable to get BOS descriptor or descriptor too short
[  692.095519][ T5621] usb 1-1: config 1 has an invalid interface number: 5 but max is 0
[  692.147269][T12232] xt_addrtype: ipv6 does not support BROADCAST matching
[  692.161565][ T5621] usb 1-1: config 1 has no interface number 0
[  692.180756][ T5742] usb 6-1: device descriptor read/64, error -71
[  692.203280][ T5621] usb 1-1: config 1 interface 5 has no altsetting 0
[  692.225439][   T29] audit: type=1400 audit(2000000137.170:987): avc:  denied  { write } for  pid=12212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  692.283922][ T5621] usb 1-1: string descriptor 0 read error: -22
[  692.316729][ T5621] usb 1-1: New USB device found, idVendor=2dee, idProduct=4d22, bcdDevice=f5.d3
[  692.316874][ T5742] usb usb6-port1: attempt power cycle
[  692.367896][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.488181][ T5621] qmi_wwan 1-1:1.5: bogus CDC Union: master=0, slave=0
[  692.534820][   T29] audit: type=1400 audit(2000000137.480:988): avc:  denied  { write } for  pid=12245 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  692.916964][ T5742] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  692.935880][T12222] netlink: 5012 bytes leftover after parsing attributes in process `syz.0.1536'.
[  693.012166][   T29] audit: type=1400 audit(2000000137.940:989): avc:  denied  { read write } for  pid=12221 comm="syz.0.1536" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  693.066813][ T5742] usb 6-1: device descriptor read/8, error -71
[  693.158019][   T29] audit: type=1400 audit(2000000137.940:990): avc:  denied  { open } for  pid=12221 comm="syz.0.1536" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  693.499431][   T29] audit: type=1400 audit(2000000137.950:991): avc:  denied  { read write } for  pid=12221 comm="syz.0.1536" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  693.909469][T12271] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  693.944707][T12269] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  693.951260][T12269] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  693.959299][T12269] vhci_hcd vhci_hcd.0: Device attached
[  693.982820][   T29] audit: type=1400 audit(2000000137.950:992): avc:  denied  { open } for  pid=12221 comm="syz.0.1536" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  694.060110][ T5621] qmi_wwan 1-1:1.5: probe with driver qmi_wwan failed with error -22
[  694.261559][ T5805] usb 46-1: SetAddress Request (14) to port 0
[  694.390221][ T5805] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd
[  694.607097][   T29] audit: type=1400 audit(2000000137.950:993): avc:  denied  { create } for  pid=12248 comm="syz.7.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  694.637349][T12270] vhci_hcd: connection closed
[  694.651107][T12272] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  694.896643][ T6361] vhci_hcd vhci_hcd.6: stop threads
[  695.117335][ T6361] vhci_hcd vhci_hcd.6: release socket
[  695.611437][ T5621] option 1-1:1.5: GSM modem (1-port) converter detected
[  695.622354][ T5621] usb 1-1: USB disconnect, device number 62
[  695.630438][ T5621] option 1-1:1.5: device disconnected
[  695.670865][   T29] audit: type=1400 audit(2000000138.100:994): avc:  denied  { sys_admin } for  pid=12248 comm="syz.7.1556" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  695.692380][ T6361] vhci_hcd vhci_hcd.6: disconnect device
[  695.892276][   T29] audit: type=1400 audit(2000000140.220:995): avc:  denied  { map } for  pid=12273 comm="syz.7.1560" path="socket:[43240]" dev="sockfs" ino=43240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  696.315951][T12295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  697.502757][T12304] xt_addrtype: ipv6 does not support BROADCAST matching
[  697.781973][ T1218] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  697.817657][T12323] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  697.824212][T12323] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  697.832772][T12323] vhci_hcd vhci_hcd.0: Device attached
[  697.862636][T12323] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  698.185368][ T1218] usb 4-1: device descriptor read/64, error -71
[  698.530714][ T1218] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  698.860719][ T1218] usb 4-1: device descriptor read/64, error -71
[  698.892486][T12324] vhci_hcd: connection closed
[  699.003074][ T6358] vhci_hcd vhci_hcd.6: stop threads
[  699.058130][ T1218] usb usb4-port1: attempt power cycle
[  699.224935][ T6358] vhci_hcd vhci_hcd.6: release socket
[  699.341041][ T6358] vhci_hcd vhci_hcd.6: disconnect device
[  699.573675][ T1218] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  699.701757][ T5805] usb 46-1: device descriptor read/8, error -110
[  700.267136][ T1218] usb 4-1: device not accepting address 58, error -71
[  700.530047][ T5805] usb usb46-port1: attempt power cycle
[  701.234685][ T5805] usb usb46-port1: unable to enumerate USB device
[  702.350693][ T1218] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  702.620741][T12364] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  703.063273][ T1218] usb 7-1: device descriptor read/64, error -71
[  703.341602][ T1218] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  703.441129][T12370] xt_addrtype: ipv6 does not support BROADCAST matching
[  703.504487][ T1218] usb 7-1: device descriptor read/64, error -71
[  703.680384][ T1218] usb usb7-port1: attempt power cycle
[  704.197563][T12385] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  705.600216][T12396] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  705.659382][T12398] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  707.469651][   T29] audit: type=1400 audit(2000000152.400:996): avc:  denied  { map } for  pid=12406 comm="syz.5.1590" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  708.618577][   T29] audit: type=1400 audit(2000000153.560:997): avc:  denied  { sys_nice } for  pid=12416 comm="syz.7.1594" capability=23  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  708.696092][T12430] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  709.160111][T12422] xt_addrtype: ipv6 does not support BROADCAST matching
[  710.736938][   T29] audit: type=1400 audit(2000000155.680:998): avc:  denied  { getopt } for  pid=12444 comm="syz.3.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  713.075703][   T29] audit: type=1400 audit(2000000157.720:999): avc:  denied  { setopt } for  pid=12453 comm="syz.3.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  715.089380][T12470] xt_hashlimit: size too large, truncated to 1048576
[  715.212604][   T29] audit: type=1400 audit(2000000160.110:1000): avc:  denied  { write } for  pid=12469 comm="syz.3.1607" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  715.646957][T12474] xt_addrtype: ipv6 does not support BROADCAST matching
[  715.899263][T12481] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  716.476994][T12488] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1610'.
[  716.516154][T12488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1610'.
[  717.163985][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1614'.
[  717.659744][T12507] sit0: entered promiscuous mode
[  717.702073][T12507] netlink: 'syz.7.1600': attribute type 1 has an invalid length.
[  717.715497][T12507] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1600'.
[  718.083041][T12514] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1617'.
[  718.177749][T12514] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1617'.
[  718.642371][T12519] xt_addrtype: ipv6 does not support BROADCAST matching
[  718.823076][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout
[  718.852999][ T4929] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  719.959086][   T29] audit: type=1400 audit(2000000164.870:1001): avc:  denied  { connect } for  pid=12534 comm="syz.3.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  720.236576][T12542] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1624'.
[  720.280102][T12542] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1624'.
[  721.176038][ T6360] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  722.108589][T12567] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  722.730608][ T9566] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  722.768015][T12572] xt_addrtype: ipv6 does not support BROADCAST matching
[  722.870627][ T9566] usb 7-1: device descriptor read/64, error -71
[  723.038329][T12582] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  723.240948][ T9566] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  723.780643][T12591] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1638'.
[  723.829590][T12591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1638'.
[  724.170904][ T9566] usb 7-1: device descriptor read/64, error -71
[  724.337260][ T9566] usb usb7-port1: attempt power cycle
[  726.558729][ T9566] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  726.738939][ T9566] usb 7-1: device descriptor read/8, error -71
[  727.147327][   T29] audit: type=1400 audit(2000000172.090:1002): avc:  denied  { bind } for  pid=12611 comm="syz.6.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  727.619115][T12615] xt_addrtype: ipv6 does not support BROADCAST matching
[  727.859397][   T29] audit: type=1400 audit(2000000172.800:1003): avc:  denied  { read } for  pid=12630 comm="syz.3.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  728.141054][T12637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1648'.
[  728.316176][T12642] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1650'.
[  728.402946][T12642] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1650'.
[  729.926312][T12657] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  729.932866][T12657] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  729.941166][T12657] vhci_hcd vhci_hcd.0: Device attached
[  730.309706][ T1218] usb 40-1: SetAddress Request (33) to port 0
[  730.418127][ T1218] usb 40-1: new SuperSpeed USB device number 33 using vhci_hcd
[  730.795793][T12665] netlink: 2120 bytes leftover after parsing attributes in process `syz.7.1656'.
[  731.832484][T12658] vhci_hcd: connection reset by peer
[  731.869967][   T57] vhci_hcd vhci_hcd.3: stop threads
[  731.925053][T12674] xt_addrtype: ipv6 does not support BROADCAST matching
[  732.027526][   T57] vhci_hcd vhci_hcd.3: release socket
[  732.053368][   T57] vhci_hcd vhci_hcd.3: disconnect device
[  732.588311][ T9566] usb 8-1: new low-speed USB device number 15 using dummy_hcd
[  732.764190][ T9566] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  732.904266][ T4929] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  732.911904][ T4929] Bluetooth: hci0: command 0x0c1a tx timeout
[  733.144188][T12688] tipc: Failed to remove unknown binding: 66,0,0/2126:247879318/247879319
[  733.160370][T12688] tipc: Failed to remove unknown binding: 66,0,0/2126:247879318/247879319
[  733.359613][ T9566] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  733.386363][ T9566] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  733.454643][ T9566] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  733.517053][ T9566] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  733.586760][ T9566] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  733.604457][ T9566] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  733.631042][ T9566] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  733.723558][ T9566] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  734.017167][ T9566] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  734.033795][T12692] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1661'.
[  734.051513][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1661'.
[  734.132297][ T9566] usb 8-1: unable to read config index 2 descriptor/start: -71
[  734.164372][ T9566] usb 8-1: can't read configurations, error -71
[  734.231776][ T5621] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[  735.561801][ T5621] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF
[  735.579503][ T5621] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  735.590742][ T5621] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64
[  735.606683][ T5621] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  735.740587][ T5621] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  735.760238][ T5621] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  735.772588][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  735.792917][ T5621] usb 4-1: SerialNumber: syz
[  736.354905][T12698] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  736.385973][T12717] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  736.392517][T12717] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  736.400618][T12717] vhci_hcd vhci_hcd.0: Device attached
[  736.436611][T12698] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  736.450770][T12717] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  736.560148][ T5621] rndis_host 4-1:1.0: missing RNDIS status endpoint
[  736.660770][ T1218] usb 40-1: device descriptor read/8, error -110
[  736.708888][T12719] vhci_hcd: connection closed
[  736.730941][ T9566] usb 44-1: SetAddress Request (30) to port 0
[  736.773800][ T5845] vhci_hcd vhci_hcd.5: stop threads
[  736.799678][ T5845] vhci_hcd vhci_hcd.5: release socket
[  736.875209][ T5845] vhci_hcd vhci_hcd.5: disconnect device
[  736.894509][ T9566] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd
[  736.995503][ T9566] usb 44-1: enqueue for inactive port 0
[  737.396099][   T29] audit: type=1400 audit(2000000182.340:1004): avc:  denied  { remount } for  pid=12697 comm="syz.3.1662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  737.442383][ T9566] usb usb44-port1: attempt power cycle
[  737.455846][ T5621] usb 4-1: USB disconnect, device number 60
[  737.829446][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1669'.
[  737.996944][   T29] audit: type=1400 audit(2000000182.620:1005): avc:  denied  { setopt } for  pid=12723 comm="syz.7.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  738.182114][ T9566] usb usb44-port1: unable to enumerate USB device
[  738.354007][ T1218] usb usb40-port1: attempt power cycle
[  739.495569][ T1218] usb usb40-port1: unable to enumerate USB device
[  740.599983][   T29] audit: type=1400 audit(2000000185.540:1006): avc:  denied  { getopt } for  pid=12751 comm="syz.7.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  740.639451][   T29] audit: type=1400 audit(2000000185.580:1007): avc:  denied  { getopt } for  pid=12739 comm="syz.6.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  740.982009][ T9566] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  741.140834][ T5734] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  741.217438][ T9566] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  741.290708][ T5734] usb 1-1: device descriptor read/64, error -71
[  741.305540][ T9566] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  741.315365][ T9566] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  741.327019][ T9566] usb 8-1: Product: syz
[  741.342520][ T9566] usb 8-1: Manufacturer: syz
[  741.357008][ T9566] usb 8-1: SerialNumber: syz
[  741.530748][ T5734] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  742.057947][ T5734] usb 1-1: device descriptor read/64, error -71
[  742.098898][ T9566] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  742.197644][ T5734] usb usb1-port1: attempt power cycle
[  742.318548][   T29] audit: type=1804 audit(2000000187.260:1008): pid=12761 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1679" name="/newroot/151/file0" dev="fuse" ino=1 res=1 errno=0
[  742.400735][   T29] audit: type=1400 audit(2000000187.320:1009): avc:  denied  { read write } for  pid=12751 comm="syz.7.1676" name="lp0" dev="devtmpfs" ino=4847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  742.442089][   T29] audit: type=1400 audit(2000000187.380:1010): avc:  denied  { open } for  pid=12751 comm="syz.7.1676" path="/dev/usb/lp0" dev="devtmpfs" ino=4847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  742.538277][T12777] syz.3.1683 (12777): /proc/12777/oom_adj is deprecated, please use /proc/12777/oom_score_adj instead.
[  742.587846][ T5734] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  742.623786][ T5734] usb 1-1: device descriptor read/8, error -71
[  742.924879][ T5734] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  742.976533][ T5734] usb 1-1: device descriptor read/8, error -71
[  744.142558][ T5734] usb usb1-port1: unable to enumerate USB device
[  744.468499][ T9566] usb 8-1: USB disconnect, device number 17
[  744.479080][ T9566] usblp0: removed
[  744.583561][   T29] audit: type=1400 audit(2000000189.530:1011): avc:  denied  { getopt } for  pid=12790 comm="syz.0.1688" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  745.721828][T12807] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1693'.
[  745.886435][   T29] audit: type=1400 audit(2000000190.770:1012): avc:  denied  { getopt } for  pid=12803 comm="syz.5.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  745.906492][T12817] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  745.913015][T12817] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  745.968799][T12817] vhci_hcd vhci_hcd.0: Device attached
[  745.989754][T12815] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  746.213065][T12830] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1697'.
[  746.233207][T12830] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1697'.
[  746.480645][ T9566] usb 34-1: SetAddress Request (43) to port 0
[  746.480735][ T9566] usb 34-1: new SuperSpeed USB device number 43 using vhci_hcd
[  746.524204][T12818] vhci_hcd: connection reset by peer
[  746.529005][   T57] vhci_hcd vhci_hcd.0: stop threads
[  746.529031][   T57] vhci_hcd vhci_hcd.0: release socket
[  746.529110][   T57] vhci_hcd vhci_hcd.0: disconnect device
[  746.820620][T12836] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1701'.
[  746.898355][T12836] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1701'.
[  747.001259][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  749.720717][T12868] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1711'.
[  749.758880][T12868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1711'.
[  750.609687][T12889] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8)
[  750.616234][T12889] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  750.658495][T12879] Cannot find set identified by id 0 to match
[  750.682186][T12892] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  750.693681][T12889] vhci_hcd vhci_hcd.0: Device attached
[  751.230903][ T5805] usb 48-1: SetAddress Request (2) to port 0
[  751.238425][ T5805] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd
[  751.352969][T12890] vhci_hcd: connection reset by peer
[  751.376708][ T6352] vhci_hcd vhci_hcd.7: stop threads
[  751.424441][ T6352] vhci_hcd vhci_hcd.7: release socket
[  751.471639][ T6352] vhci_hcd vhci_hcd.7: disconnect device
[  751.550652][ T9566] usb 34-1: device descriptor read/8, error -110
[  751.951295][ T9566] usb usb34-port1: attempt power cycle
[  752.050901][   T29] audit: type=1400 audit(2000000197.000:1013): avc:  denied  { read } for  pid=12914 comm="syz.5.1722" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  752.173832][   T29] audit: type=1400 audit(2000000197.120:1014): avc:  denied  { getopt } for  pid=12916 comm="syz.7.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  752.220776][   T29] audit: type=1400 audit(2000000197.150:1015): avc:  denied  { setopt } for  pid=12916 comm="syz.7.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  752.273603][ T4929] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  752.360787][ T4929] Bluetooth: hci0: command 0x0c1a tx timeout
[  752.383113][T12923] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1724'.
[  752.416008][T12923] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1724'.
[  752.636716][ T9566] usb usb34-port1: unable to enumerate USB device
[  753.160418][ T6102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  753.653087][T12935] dvmrp1: entered allmulticast mode
[  753.662633][ T5622] Bluetooth: hci0: unexpected event for opcode 0x2062
[  753.670308][ T5622] Bluetooth: hci0: unexpected event for opcode 0x2062
[  755.371794][ T4929] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  756.623313][ T5805] usb 48-1: device descriptor read/8, error -110
[  756.967720][T12955] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1736'.
[  757.092695][ T5805] usb usb48-port1: attempt power cycle
[  757.250768][ T5734] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  757.441210][ T5734] usb 8-1: Using ep0 maxpacket: 32
[  757.455224][ T5734] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  757.479800][ T5734] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.514523][ T5734] usb 8-1: config 0 descriptor??
[  757.719813][ T5622] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  757.770808][ T5622] Bluetooth: hci0: Injecting HCI hardware error event
[  758.007392][ T5805] usb usb48-port1: unable to enumerate USB device
[  758.084619][ T5734] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  758.146814][ T5734] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  758.272111][ T5734] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  758.304567][ T5734] usb 8-1: media controller created
[  758.333272][ T5734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  758.528866][T12972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1742'.
[  759.419666][ T5734] az6027: usb out operation failed. (-71)
[  759.431271][ T5734] stb0899_attach: Driver disabled by Kconfig
[  759.442496][ T5734] az6027: no front-end attached
[  759.442496][ T5734] 
[  759.464100][ T4929] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  759.471146][ T4929] Bluetooth: hci0: hardware error 0x00
[  759.526090][ T5734] az6027: usb out operation failed. (-71)
[  759.552515][ T5734] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  759.599340][ T5734] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input25
[  759.626972][ T5734] dvb-usb: schedule remote query interval to 400 msecs.
[  759.634189][ T5734] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  759.651220][ T5734] usb 8-1: USB disconnect, device number 18
[  759.796784][T12982] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  759.931662][ T5734] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  760.208543][T12989] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  760.289115][T12994] netlink: 'syz.5.1747': attribute type 10 has an invalid length.
[  760.313783][T12994] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1747'.
[  760.334150][   T29] audit: type=1400 audit(2000000205.280:1016): avc:  denied  { append } for  pid=12992 comm="syz.5.1747" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  761.541130][ T4929] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  762.005458][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1750'.
[  763.476908][T13022] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1752'.
[  765.159679][T13037] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  766.441493][ T1218] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  766.833370][ T1218] usb 8-1: unable to get BOS descriptor or descriptor too short
[  766.872114][ T1218] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  766.920852][ T1218] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  766.969162][ T1218] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  767.043413][ T1218] usb 8-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  767.087553][ T1218] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.123112][ T1218] usb 8-1: Product: syz
[  767.183259][ T1218] usb 8-1: Manufacturer: syz
[  767.204449][ T1218] usb 8-1: SerialNumber: syz
[  767.730806][ T1218] usb 8-1: USB disconnect, device number 19
[  768.297704][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1766'.
[  769.062569][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1767'.
[  769.619770][T13076] fuse: Bad value for 'fd'
[  773.882125][   T29] audit: type=1400 audit(2000000218.830:1017): avc:  denied  { map } for  pid=13108 comm="syz.6.1776" path="socket:[45823]" dev="sockfs" ino=45823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  774.203954][   T29] audit: type=1400 audit(2000000218.830:1018): avc:  denied  { read } for  pid=13108 comm="syz.6.1776" path="socket:[45823]" dev="sockfs" ino=45823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  775.434214][   T29] audit: type=1400 audit(2000000220.070:1019): avc:  denied  { write } for  pid=13114 comm="syz.6.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  775.632836][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1779'.
[  775.981595][T13126] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  777.328963][T13141] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1784'.
[  777.367691][T13141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1784'.
[  777.749570][   T29] audit: type=1400 audit(2000000222.690:1020): avc:  denied  { read } for  pid=13145 comm="syz.0.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  777.873644][T13149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1786'.
[  778.013917][T13151] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  778.020451][T13151] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  778.028155][T13151] vhci_hcd vhci_hcd.0: Device attached
[  778.035861][T13151] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  778.045170][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1786'.
[  778.054632][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1786'.
[  778.540663][  T805] usb 44-1: SetAddress Request (34) to port 0
[  778.546836][  T805] usb 44-1: new SuperSpeed USB device number 34 using vhci_hcd
[  779.804012][T13152] vhci_hcd: connection reset by peer
[  779.827423][ T6360] vhci_hcd vhci_hcd.5: stop threads
[  779.863448][ T6360] vhci_hcd vhci_hcd.5: release socket
[  779.908526][ T6360] vhci_hcd vhci_hcd.5: disconnect device
[  782.345538][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'.
[  782.639383][T13189] xt_addrtype: ipv6 does not support BROADCAST matching
[  782.889951][T13204] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  782.896486][T13204] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  782.904275][T13204] vhci_hcd vhci_hcd.0: Device attached
[  782.915572][T13204] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  783.034943][T13207] vhci_hcd: connection closed
[  783.035205][ T6360] vhci_hcd vhci_hcd.6: stop threads
[  783.068672][ T6360] vhci_hcd vhci_hcd.6: release socket
[  783.096369][ T6360] vhci_hcd vhci_hcd.6: disconnect device
[  783.200595][ T1234] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  783.355233][   T29] audit: type=1400 audit(2000000228.300:1021): avc:  denied  { mount } for  pid=13215 comm="syz.0.1805" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  783.368795][ T1234] usb 6-1: config 0 has an invalid interface number: 106 but max is 0
[  783.390317][T13216] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  783.398599][   T29] audit: type=1400 audit(2000000228.340:1022): avc:  denied  { mounton } for  pid=13215 comm="syz.0.1805" path="/357/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  783.415194][ T1234] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  783.455358][ T1234] usb 6-1: config 0 has no interface number 0
[  783.482024][ T1234] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  783.510801][ T1234] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  783.546094][ T1234] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  783.546366][   T29] audit: type=1400 audit(2000000228.490:1023): avc:  denied  { unmount } for  pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  783.570568][ T1234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.620957][  T805] usb 44-1: device descriptor read/8, error -110
[  783.635564][ T1234] usb 6-1: config 0 descriptor??
[  783.785217][ T1234] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  784.671023][ T6350] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  784.681588][  T805] usb usb44-port1: attempt power cycle
[  784.825656][ T6102] usb 6-1: Failed to submit usb control message: -110
[  784.835152][ T6102] usb 6-1: unable to send the bmi data to the device: -110
[  784.841083][   T29] audit: type=1400 audit(2000000229.730:1024): avc:  denied  { setopt } for  pid=13206 comm="syz.5.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  784.864562][ T5621] usb 6-1: USB disconnect, device number 48
[  784.943283][ T6102] usb 6-1: unable to get target info from device
[  784.977228][ T6102] usb 6-1: could not get target info (-110)
[  784.995833][ T6102] usb 6-1: could not probe fw (-110)
[  785.302546][  T805] usb usb44-port1: unable to enumerate USB device
[  786.078333][T13254] xt_addrtype: ipv6 does not support BROADCAST matching
[  786.153967][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1810'.
[  786.308767][T13259] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  786.702917][   T29] audit: type=1400 audit(2000000231.650:1025): avc:  denied  { accept } for  pid=13260 comm="syz.6.1816" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  786.831840][   T29] audit: type=1400 audit(2000000231.780:1026): avc:  denied  { ioctl } for  pid=13265 comm="syz.0.1817" path="socket:[48164]" dev="sockfs" ino=48164 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  788.062145][ T4929] Bluetooth: hci1: ISO packet for unknown connection handle 2730
[  788.123194][T13291] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed
[  788.446065][   T29] audit: type=1400 audit(2000000233.390:1027): avc:  denied  { write } for  pid=13297 comm="syz.0.1826" path="socket:[48305]" dev="sockfs" ino=48305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  788.526255][   T29] audit: type=1400 audit(2000000233.470:1028): avc:  denied  { read } for  pid=13297 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  788.677479][T13302] xt_addrtype: ipv6 does not support BROADCAST matching
[  788.864507][T13309] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  789.795807][   T29] audit: type=1400 audit(2000000234.740:1029): avc:  denied  { read } for  pid=13320 comm="syz.6.1833" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  789.820268][   T29] audit: type=1400 audit(2000000234.740:1030): avc:  denied  { open } for  pid=13320 comm="syz.6.1833" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  789.958990][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1830'.
[  790.845946][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'.
[  790.937501][T13344] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  790.955711][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1836'.
[  791.404754][T13351] xt_addrtype: ipv6 does not support BROADCAST matching
[  792.067471][T13362] ip6erspan0: entered allmulticast mode
[  792.197091][T13364] FAULT_INJECTION: forcing a failure.
[  792.197091][T13364] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  792.229741][T13364] CPU: 1 UID: 0 PID: 13364 Comm: syz.5.1841 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  792.229766][T13364] Tainted: [L]=SOFTLOCKUP
[  792.229771][T13364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  792.229778][T13364] Call Trace:
[  792.229783][T13364]  <TASK>
[  792.229788][T13364]  dump_stack_lvl+0x100/0x190
[  792.229808][T13364]  should_fail_ex.cold+0x5/0xa
[  792.229825][T13364]  _copy_from_user+0x2e/0xd0
[  792.229843][T13364]  get_timespec64+0x8d/0x240
[  792.229857][T13364]  ? __pfx_get_timespec64+0x10/0x10
[  792.229870][T13364]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  792.229892][T13364]  __x64_sys_ppoll+0x189/0x350
[  792.229909][T13364]  ? __pfx___x64_sys_ppoll+0x10/0x10
[  792.229922][T13364]  ? ksys_write+0x1ac/0x250
[  792.229935][T13364]  ? __pfx_ksys_write+0x10/0x10
[  792.229948][T13364]  ? rcu_is_watching+0x12/0xc0
[  792.229968][T13364]  do_syscall_64+0x10b/0xf80
[  792.229984][T13364]  ? clear_bhb_loop+0x40/0x90
[  792.229998][T13364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  792.230009][T13364] RIP: 0033:0x7f0a7b99ce59
[  792.230020][T13364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  792.230032][T13364] RSP: 002b:00007f0a7c92e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  792.230043][T13364] RAX: ffffffffffffffda RBX: 00007f0a7bc15fa0 RCX: 00007f0a7b99ce59
[  792.230051][T13364] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000000
[  792.230058][T13364] RBP: 00007f0a7c92e090 R08: 0000000000000000 R09: 0000000000000000
[  792.230065][T13364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  792.230072][T13364] R13: 00007f0a7bc16038 R14: 00007f0a7bc15fa0 R15: 00007ffc4079bb38
[  792.230087][T13364]  </TASK>
[  794.024077][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1845'.
[  794.824045][T13391] xt_addrtype: ipv6 does not support BROADCAST matching
[  795.944589][T13406] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  796.822998][   T29] audit: type=1400 audit(2000000241.770:1031): avc:  denied  { ioctl } for  pid=13414 comm="syz.7.1855" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  796.880623][ T5621] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  797.480575][ T5621] usb 6-1: Using ep0 maxpacket: 16
[  797.487214][ T5621] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  797.497432][ T5621] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  797.508414][ T5621] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  797.522314][ T5621] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  797.532040][ T5621] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  797.547515][ T5621] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  797.570608][ T5621] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  797.579805][ T5621] usb 6-1: Manufacturer: syz
[  797.596542][ T5621] usb 6-1: config 0 descriptor??
[  798.094704][ T5621] rc_core: IR keymap rc-hauppauge not found
[  798.101002][ T5621] Registered IR keymap rc-empty
[  798.166362][ T5621] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  798.190611][ T5621] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  798.213540][ T5621] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  798.227993][ T5621] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input26
[  798.249440][ T5621] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  798.281873][ T5621] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  798.341055][ T5621] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  798.382992][ T5621] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  798.423427][ T5621] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  798.461877][ T5621] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  798.464670][T13419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  798.498158][T13419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  798.513791][ T5621] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  798.560759][ T5621] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  798.590679][ T5621] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  798.630772][ T5621] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  798.674304][ T5621] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  798.686065][ T5621] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  798.740392][ T5621] usb 6-1: USB disconnect, device number 49
[  799.194321][T13445] xt_addrtype: ipv6 does not support BROADCAST matching
[  799.220606][ T9566] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  799.350582][ T9566] usb 8-1: device descriptor read/64, error -71
[  799.602565][ T9566] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  800.295399][ T9566] usb 8-1: device descriptor read/64, error -71
[  800.590769][ T9566] usb usb8-port1: attempt power cycle
[  800.990613][ T9566] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  801.011306][ T9566] usb 8-1: device descriptor read/8, error -71
[  801.250559][ T9566] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  801.270999][ T9566] usb 8-1: device descriptor read/8, error -71
[  801.385735][ T9566] usb usb8-port1: unable to enumerate USB device
[  801.732428][   T29] audit: type=1400 audit(2000000246.650:1032): avc:  denied  { map } for  pid=13479 comm="syz.6.1869" path="socket:[47708]" dev="sockfs" ino=47708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  801.844842][T13483] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1869'.
[  801.960439][   T29] audit: type=1400 audit(2000000246.650:1033): avc:  denied  { read } for  pid=13479 comm="syz.6.1869" path="socket:[47708]" dev="sockfs" ino=47708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  803.087368][T13493] xt_addrtype: ipv6 does not support BROADCAST matching
[  803.247461][   T29] audit: type=1400 audit(2000000248.190:1034): avc:  denied  { read } for  pid=13502 comm="syz.5.1874" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  803.270417][   T29] audit: type=1400 audit(2000000248.190:1035): avc:  denied  { open } for  pid=13502 comm="syz.5.1874" path="/320/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  803.804505][T13513] xt_cgroup: xt_cgroup: no path or classid specified
[  804.608045][T13527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  804.788896][T13522] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1880'.
[  804.808954][T13522] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1880'.
[  804.828891][   T29] audit: type=1400 audit(2000000249.770:1036): avc:  denied  { read write } for  pid=13529 comm="syz.5.1882" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  804.924752][   T29] audit: type=1400 audit(2000000249.770:1037): avc:  denied  { open } for  pid=13529 comm="syz.5.1882" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  805.094751][T13533] pim6reg9: entered allmulticast mode
[  805.954120][   T29] audit: type=1400 audit(2000000250.890:1038): avc:  denied  { ioctl } for  pid=13541 comm="syz.5.1887" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  806.377852][   T29] audit: type=1400 audit(2000000250.900:1039): avc:  denied  { set_context_mgr } for  pid=13541 comm="syz.5.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  806.616792][   T29] audit: type=1400 audit(2000000250.960:1040): avc:  denied  { map } for  pid=13541 comm="syz.5.1887" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  806.715860][   T29] audit: type=1400 audit(2000000250.960:1041): avc:  denied  { call } for  pid=13541 comm="syz.5.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  806.838447][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  806.866838][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  806.926098][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  806.934191][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  806.946742][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  807.566072][ T4929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  807.589737][ T4929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  807.598941][ T4929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  807.766805][ T4929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  807.776065][ T4929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  807.966048][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1892'.
[  808.423411][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  808.764026][T13576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  809.068622][ T4929] Bluetooth: hci1: command tx timeout
[  809.081426][T13581] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1895'.
[  809.109382][T13581] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1895'.
[  810.340677][ T4929] Bluetooth: hci3: command tx timeout
[  811.031235][T13614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1902'.
[  811.211550][ T4929] Bluetooth: hci1: command tx timeout
[  812.158936][T13623] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1905'.
[  812.271627][T13623] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1905'.
[  812.428560][ T4929] Bluetooth: hci3: command tx timeout
[  812.659055][T13627] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  813.150646][ T5805] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  813.220533][ T5622] Bluetooth: hci1: command tx timeout
[  813.381243][ T5805] usb 6-1: Using ep0 maxpacket: 32
[  813.476243][ T5805] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  813.586206][ T5805] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  813.619518][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.635452][ T5805] usb 6-1: Product: syz
[  813.647430][ T5805] usb 6-1: Manufacturer: syz
[  813.665912][ T5805] usb 6-1: SerialNumber: syz
[  813.680426][ T5805] usb 6-1: config 0 descriptor??
[  813.696164][ T5805] cdc_ether 6-1:0.0: Descriptor too short
[  813.713495][ T5805] usb 6-1: unsupported MDLM descriptors
[  813.731878][T13547] bridge0: port 1(bridge_slave_0) entered blocking state
[  813.763804][T13547] bridge0: port 1(bridge_slave_0) entered disabled state
[  813.796067][T13547] bridge_slave_0: entered allmulticast mode
[  813.814062][T13547] bridge_slave_0: entered promiscuous mode
[  813.832454][T13547] bridge0: port 2(bridge_slave_1) entered blocking state
[  813.850668][T13547] bridge0: port 2(bridge_slave_1) entered disabled state
[  813.859405][T13547] bridge_slave_1: entered allmulticast mode
[  813.882275][T13547] bridge_slave_1: entered promiscuous mode
[  813.889096][T13645] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  813.992456][  T805] usb 6-1: USB disconnect, device number 50
[  814.320271][T13547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  814.353127][T13547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  814.519769][T13547] team0: Port device team_slave_0 added
[  814.543579][T13547] team0: Port device team_slave_1 added
[  814.560654][ T5622] Bluetooth: hci3: command tx timeout
[  814.688866][T13547] batman_adv: batadv0: Adding interface: batadv_slave_0
[  814.695982][T13547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  815.196191][T13547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  815.250780][T13547] batman_adv: batadv0: Adding interface: batadv_slave_1
[  815.257853][T13547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  815.284810][T13547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  815.300722][ T5622] Bluetooth: hci1: command tx timeout
[  815.381426][T13557] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.399352][T13557] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.416984][T13557] bridge_slave_0: entered allmulticast mode
[  815.445315][T13557] bridge_slave_0: entered promiscuous mode
[  815.524685][T13557] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.542645][T13557] bridge0: port 2(bridge_slave_1) entered disabled state
[  815.560982][T13557] bridge_slave_1: entered allmulticast mode
[  815.584651][T13557] bridge_slave_1: entered promiscuous mode
[  815.671412][T13557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  815.691311][ T6352] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  815.735735][T13557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  815.805046][T13547] hsr_slave_0: entered promiscuous mode
[  815.821635][T13547] hsr_slave_1: entered promiscuous mode
[  815.838183][T13547] debugfs: 'hsr0' already exists in 'hsr'
[  815.849162][T13547] Cannot create hsr debugfs directory
[  815.946445][T13557] team0: Port device team_slave_0 added
[  816.429881][T13557] team0: Port device team_slave_1 added
[  816.520489][T13557] batman_adv: batadv0: Adding interface: batadv_slave_0
[  816.581438][ T5622] Bluetooth: hci3: command tx timeout
[  816.611394][T13557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  816.647998][   T29] audit: type=1326 audit(2000000261.590:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13677 comm="syz.5.1919" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a7b99ce59 code=0x0
[  816.678987][T13557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  816.695731][T13557] batman_adv: batadv0: Adding interface: batadv_slave_1
[  816.703113][T13557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  816.735334][T13557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  816.807498][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1919'.
[  817.166899][T13682] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  817.292268][T13557] hsr_slave_0: entered promiscuous mode
[  817.302164][T13557] hsr_slave_1: entered promiscuous mode
[  817.315510][T13557] debugfs: 'hsr0' already exists in 'hsr'
[  817.321718][T13557] Cannot create hsr debugfs directory
[  817.852926][T13547] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  817.867432][T13547] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  817.876294][T13547] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  817.902811][T13547] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  817.913130][T13547] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  817.936772][T13547] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  817.945756][T13692] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  817.957907][T13547] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  817.974205][T13547] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  818.118562][T13547] 8021q: adding VLAN 0 to HW filter on device bond0
[  818.137696][T13547] 8021q: adding VLAN 0 to HW filter on device team0
[  818.164438][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state
[  818.171562][ T6352] bridge0: port 1(bridge_slave_0) entered forwarding state
[  818.344772][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state
[  818.351904][ T6356] bridge0: port 2(bridge_slave_1) entered forwarding state
[  818.526677][T13557] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  818.548444][T13557] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  818.560214][T13557] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  818.583952][T13557] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  818.613700][T13557] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  818.652623][T13557] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  818.691735][T13557] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  818.723094][T13557] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  819.125401][T13557] 8021q: adding VLAN 0 to HW filter on device bond0
[  819.198891][T13557] 8021q: adding VLAN 0 to HW filter on device team0
[  819.256161][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  819.263351][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  819.296790][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  819.303973][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  819.473347][   T29] audit: type=1400 audit(2000000264.410:1043): avc:  denied  { ioctl } for  pid=13713 comm="syz.6.1923" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  819.838132][T13547] 8021q: adding VLAN 0 to HW filter on device batadv0
[  819.900598][ T5719] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  820.043164][T13557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  820.062609][ T5719] usb 7-1: Using ep0 maxpacket: 16
[  820.083036][ T5719] usb 7-1: unable to get BOS descriptor or descriptor too short
[  820.108875][ T5719] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  820.131303][ T5719] usb 7-1: config 1 interface 0 has no altsetting 0
[  820.154128][ T5719] usb 7-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.40
[  820.171576][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.184704][ T5719] usb 7-1: Product: syz
[  820.190367][ T5719] usb 7-1: Manufacturer: syz
[  820.197261][T13547] veth0_vlan: entered promiscuous mode
[  820.203321][ T5719] usb 7-1: SerialNumber: syz
[  820.224402][T13547] veth1_vlan: entered promiscuous mode
[  820.270172][T13547] veth0_macvtap: entered promiscuous mode
[  820.292832][T13547] veth1_macvtap: entered promiscuous mode
[  820.326313][T13547] batman_adv: batadv0: Interface activated: batadv_slave_0
[  820.345498][T13547] batman_adv: batadv0: Interface activated: batadv_slave_1
[  820.369198][   T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  820.378677][   T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  820.399244][   T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  820.416920][   T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  820.430991][T13557] veth0_vlan: entered promiscuous mode
[  820.492939][ T5719] usbhid 7-1:1.0: can't add hid device: -71
[  820.495738][T13557] veth1_vlan: entered promiscuous mode
[  820.511387][ T5719] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  820.527925][ T5719] usb 7-1: USB disconnect, device number 20
[  820.747367][T13753] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1926'.
[  820.918374][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1926'.
[  821.064348][T13557] veth0_macvtap: entered promiscuous mode
[  821.085311][T13557] veth1_macvtap: entered promiscuous mode
[  821.098168][ T6366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  821.120774][ T6366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  821.230069][T13557] batman_adv: batadv0: Interface activated: batadv_slave_0
[  821.261741][ T6352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  821.276130][ T6352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  821.326452][T13761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  821.468150][T13557] batman_adv: batadv0: Interface activated: batadv_slave_1
[  821.575468][ T5845] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  821.598254][ T5845] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  821.627248][ T5845] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  821.645477][ T5845] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  821.713235][T13764] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  822.712334][T13768] xt_addrtype: ipv6 does not support BROADCAST matching
[  823.058513][  T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  823.097265][  T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  823.412320][T13776] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  823.553582][ T6358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  823.573758][ T6358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  823.660749][ T5621] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  823.701845][T13776] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  823.729778][T13776] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  823.770440][T13776] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  823.815815][ T5621] usb 7-1: device descriptor read/64, error -71
[  823.922099][T13795] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.1935'.
[  823.969384][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1935'.
[  824.142113][T13776] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  824.159083][T13776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  824.171612][T13776] usb 6-1: Product: syz
[  824.183945][T13776] usb 6-1: Manufacturer: syz
[  824.190569][ T5621] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  824.209242][T13776] usb 6-1: SerialNumber: syz
[  824.343671][ T5621] usb 7-1: device descriptor read/64, error -71
[  824.479701][ T5621] usb usb7-port1: attempt power cycle
[  824.496046][T13776] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  824.922308][T13776] usb 6-1: USB disconnect, device number 51
[  825.036263][T13776] usblp0: removed
[  825.102490][   T29] audit: type=1400 audit(2000000270.050:1044): avc:  denied  { connect } for  pid=13780 comm="syz.5.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  825.130597][ T5621] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  825.203081][ T5621] usb 7-1: device descriptor read/8, error -71
[  825.310134][T13806] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input27
[  825.530663][ T5621] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  825.604604][ T5621] usb 7-1: device descriptor read/8, error -71
[  825.751131][ T5621] usb usb7-port1: unable to enumerate USB device
[  827.207976][T13830] xt_addrtype: ipv6 does not support BROADCAST matching
[  827.603348][T13838] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  827.796850][T13841] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.1946'.
[  827.832821][T13841] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1946'.
[  829.237559][T13863] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  830.331356][T13861] loop5: detected capacity change from 0 to 2640
[  830.345097][T13861] buffer_io_error: 10 callbacks suppressed
[  830.345109][T13861] Buffer I/O error on dev loop5, logical block 0, async page read
[  830.433759][T13861] Buffer I/O error on dev loop5, logical block 0, async page read
[  830.463207][T13861] Buffer I/O error on dev loop5, logical block 0, async page read
[  830.550826][T13861]  loop5: unable to read partition table
[  830.572471][T13871] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  830.590073][T13861] loop_reread_partitions: partition scan of loop5 (3„¾‚³˜) failed (rc=-5)
[  830.632910][T13871] Buffer I/O error on dev loop5, logical block 1, lost async page write
[  830.668335][   T29] audit: type=1400 audit(2000000275.510:1045): avc:  denied  { accept } for  pid=13860 comm="syz.9.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  830.820147][T13871] Buffer I/O error on dev loop5, logical block 2, lost async page write
[  830.874575][ T4978] Buffer I/O error on dev loop5, logical block 4, lost async page write
[  830.884900][T13871] Buffer I/O error on dev loop5, logical block 3, lost async page write
[  830.928293][ T4978] Buffer I/O error on dev loop5, logical block 5, lost async page write
[  830.975201][ T4978] Buffer I/O error on dev loop5, logical block 6, lost async page write
[  831.000723][ T1218] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  831.171344][ T1218] usb 9-1: device descriptor read/64, error -71
[  831.341662][ T4978] ldm_validate_partition_table(): Disk read failed.
[  831.393829][ T4978] Dev loop5: unable to read RDB block 0
[  831.441702][ T4978]  loop5: unable to read partition table
[  831.450706][ T1218] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  831.705537][ T1218] usb 9-1: device descriptor read/64, error -71
[  831.751107][ T4929] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  831.766164][ T4929] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  831.775615][ T4929] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  831.789326][ T4929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  831.800981][ T4929] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  831.833670][ T1218] usb usb9-port1: attempt power cycle
[  832.175610][T13890] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  832.192391][ T1218] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  832.261193][ T1218] usb 9-1: device descriptor read/8, error -71
[  832.551506][ T1218] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  832.590641][T13776] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  832.630886][ T1218] usb 9-1: device descriptor read/8, error -71
[  832.784166][ T1218] usb usb9-port1: unable to enumerate USB device
[  832.802798][T13776] usb 10-1: Using ep0 maxpacket: 32
[  832.837430][T13776] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  832.882399][T13776] usb 10-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  832.933114][T13776] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.968001][T13776] usb 10-1: Product: syz
[  833.001433][T13776] usb 10-1: Manufacturer: syz
[  833.024010][T13776] usb 10-1: SerialNumber: syz
[  833.083437][T13776] usb 10-1: config 0 descriptor??
[  833.111242][T13776] cdc_ether 10-1:0.0: Descriptor too short
[  833.155380][T13776] usb 10-1: unsupported MDLM descriptors
[  833.336921][T13776] usb 10-1: USB disconnect, device number 2
[  833.860966][ T5622] Bluetooth: hci6: command tx timeout
[  835.152851][T13885] bridge0: port 1(bridge_slave_0) entered blocking state
[  835.160196][T13885] bridge0: port 1(bridge_slave_0) entered disabled state
[  835.167876][T13885] bridge_slave_0: entered allmulticast mode
[  835.175752][T13885] bridge_slave_0: entered promiscuous mode
[  835.185523][T13885] bridge0: port 2(bridge_slave_1) entered blocking state
[  835.192943][T13885] bridge0: port 2(bridge_slave_1) entered disabled state
[  835.200320][T13885] bridge_slave_1: entered allmulticast mode
[  835.209442][T13885] bridge_slave_1: entered promiscuous mode
[  835.825612][T13885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  836.044124][ T5622] Bluetooth: hci6: command tx timeout
[  836.112009][T13885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  836.353884][T13885] team0: Port device team_slave_0 added
[  836.391718][T13885] team0: Port device team_slave_1 added
[  836.504380][T13885] batman_adv: batadv0: Adding interface: batadv_slave_0
[  836.526451][T13885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  836.593864][T13885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  836.627238][T13885] batman_adv: batadv0: Adding interface: batadv_slave_1
[  836.748902][T13885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  836.810990][T13885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  836.850324][T13962] binder: 13961:13962 ioctl c0306201 2000000001c0 returned -14
[  836.870745][T13962] binder: 13961:13962 unknown command 0
[  836.882833][T13962] binder: 13961:13962 ioctl c0306201 2000000002c0 returned -22
[  837.077608][T13885] hsr_slave_0: entered promiscuous mode
[  837.289949][T13885] hsr_slave_1: entered promiscuous mode
[  838.134295][ T5622] Bluetooth: hci6: command tx timeout
[  838.231084][T13885] debugfs: 'hsr0' already exists in 'hsr'
[  838.256436][T13885] Cannot create hsr debugfs directory
[  838.507560][T13981] FAULT_INJECTION: forcing a failure.
[  838.507560][T13981] name failslab, interval 1, probability 0, space 0, times 0
[  838.520268][T13981] CPU: 1 UID: 0 PID: 13981 Comm: syz.9.1977 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  838.520311][T13981] Tainted: [L]=SOFTLOCKUP
[  838.520320][T13981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  838.520332][T13981] Call Trace:
[  838.520340][T13981]  <TASK>
[  838.520349][T13981]  dump_stack_lvl+0x100/0x190
[  838.520381][T13981]  should_fail_ex.cold+0x5/0xa
[  838.520412][T13981]  should_failslab+0xc2/0x120
[  838.520438][T13981]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  838.520471][T13981]  ? dst_alloc+0x99/0x1a0
[  838.520502][T13981]  ? __pfx_ip6_dst_gc+0x10/0x10
[  838.520525][T13981]  dst_alloc+0x99/0x1a0
[  838.520554][T13981]  ip6_pol_route+0x948/0x1230
[  838.520586][T13981]  ? __pfx_ip6_pol_route+0x10/0x10
[  838.520614][T13981]  ? ip6t_do_table+0xbed/0x1c90
[  838.520639][T13981]  ? __local_bh_enable_ip+0x9e/0x120
[  838.520670][T13981]  ? ip6t_do_table+0xc1d/0x1c90
[  838.520707][T13981]  ? __pfx_ip6_pol_route_input+0x10/0x10
[  838.520735][T13981]  fib6_rule_lookup+0x52f/0x720
[  838.520764][T13981]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  838.520792][T13981]  ? __pfx_ip6t_do_table+0x10/0x10
[  838.520821][T13981]  ? nf_nat_ipv6_fn+0xff/0x2d0
[  838.520843][T13981]  ? __pfx_nf_nat_ipv6_fn+0x10/0x10
[  838.520873][T13981]  ip6_route_input+0x662/0xc50
[  838.520907][T13981]  ? __pfx_ip6_route_input+0x10/0x10
[  838.520957][T13981]  ? nf_hook.constprop.0+0x2e3/0x750
[  838.520978][T13981]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  838.521006][T13981]  ip6_rcv_finish_core.isra.0+0x1b1/0x1260
[  838.521036][T13981]  ipv6_rcv+0x1e8/0x3d0
[  838.521058][T13981]  ? __pfx_ipv6_rcv+0x10/0x10
[  838.521077][T13981]  __netif_receive_skb_one_core+0x12d/0x1e0
[  838.521108][T13981]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  838.521142][T13981]  ? lock_acquire+0x1b1/0x370
[  838.521178][T13981]  __netif_receive_skb+0x1f/0x120
[  838.521210][T13981]  netif_receive_skb+0x13b/0x7f0
[  838.521238][T13981]  ? tun_build_skb.constprop.0+0x9b5/0x18f0
[  838.521270][T13981]  ? __pfx_netif_receive_skb+0x10/0x10
[  838.521319][T13981]  tun_rx_batched.isra.0+0x3f6/0x750
[  838.521351][T13981]  ? __pfx_tun_rx_batched.isra.0+0x10/0x10
[  838.521388][T13981]  ? rcu_is_watching+0x12/0xc0
[  838.521420][T13981]  ? tun_get_user+0x1cc8/0x3c20
[  838.521452][T13981]  tun_get_user+0x1e31/0x3c20
[  838.521492][T13981]  ? __pfx_tun_get_user+0x10/0x10
[  838.521523][T13981]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  838.521558][T13981]  ? find_held_lock+0x2b/0x80
[  838.521577][T13981]  ? tun_get+0x191/0x370
[  838.521600][T13981]  ? tun_get+0x191/0x370
[  838.521632][T13981]  tun_chr_write_iter+0xdc/0x200
[  838.521663][T13981]  vfs_write+0x6ac/0x1070
[  838.521689][T13981]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  838.521721][T13981]  ? __pfx_vfs_write+0x10/0x10
[  838.521744][T13981]  ? find_held_lock+0x2b/0x80
[  838.521784][T13981]  ksys_write+0x12a/0x250
[  838.521808][T13981]  ? __pfx_ksys_write+0x10/0x10
[  838.521834][T13981]  ? rcu_is_watching+0x12/0xc0
[  838.521868][T13981]  do_syscall_64+0x10b/0xf80
[  838.521897][T13981]  ? clear_bhb_loop+0x40/0x90
[  838.521922][T13981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.521942][T13981] RIP: 0033:0x7f309295d68e
[  838.521959][T13981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  838.521978][T13981] RSP: 002b:00007f30938cdfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  838.522000][T13981] RAX: ffffffffffffffda RBX: 00007f30938ce6c0 RCX: 00007f309295d68e
[  838.522013][T13981] RDX: 000000000000004a RSI: 0000200000000340 RDI: 00000000000000c8
[  838.522025][T13981] RBP: 00007f30938ce090 R08: 0000000000000000 R09: 0000000000000000
[  838.522038][T13981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  838.522052][T13981] R13: 00007f3092c16038 R14: 00007f3092c15fa0 R15: 00007ffd3f961208
[  838.522082][T13981]  </TASK>
[  840.102417][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1978'.
[  840.190597][ T5622] Bluetooth: hci6: command tx timeout
[  840.257991][T13991] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  840.395715][T13994] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1984'.
[  842.074683][T13885] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.330968][ T5621] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[  842.343656][T14018] block nbd9: NBD_DISCONNECT
[  842.344797][T13885] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.514054][ T5621] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  842.525178][ T5621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.541899][ T5621] usb 6-1: Product: syz
[  842.546213][ T5621] usb 6-1: Manufacturer: syz
[  842.551721][ T5621] usb 6-1: SerialNumber: syz
[  842.558984][ T5621] usb 6-1: config 0 descriptor??
[  842.610130][T13885] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.670583][ T1234] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  842.712696][T13885] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.740336][T14024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  842.740847][ T1218] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  842.784177][ T5621] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  842.840563][ T1234] usb 9-1: Using ep0 maxpacket: 8
[  842.861546][ T1234] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  842.884108][ T1234] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.910354][ T1234] usb 9-1: Product: syz
[  842.928048][ T1234] usb 9-1: Manufacturer: syz
[  842.944081][ T1234] usb 9-1: SerialNumber: syz
[  842.952548][ T1218] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  842.974959][ T1234] usb 9-1: config 0 descriptor??
[  842.992646][ T1218] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  843.028502][ T1218] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  843.057422][T13885] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  843.066405][ T1218] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  843.080590][ T1218] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.088889][ T1218] usb 10-1: Product: syz
[  843.093946][ T1218] usb 10-1: Manufacturer: syz
[  843.098715][ T1218] usb 10-1: SerialNumber: syz
[  843.105511][T13885] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  843.125994][ T1218] usb 10-1: config 0 descriptor??
[  843.129720][T13885] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  843.132342][T14018] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  843.163282][T13885] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  843.182684][T13885] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  843.193600][ T1234] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  843.208077][T13885] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  843.232103][T13885] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  843.255273][T13885] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  843.262735][ T1218] rc_core: IR keymap rc-streamzap not found
[  843.268885][ T1218] Registered IR keymap rc-empty
[  843.278502][ T1218] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  843.341625][ T1218] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input28
[  843.438992][T13885] 8021q: adding VLAN 0 to HW filter on device bond0
[  843.518055][T13885] 8021q: adding VLAN 0 to HW filter on device team0
[  843.551260][T10588] bridge0: port 1(bridge_slave_0) entered blocking state
[  843.558436][T10588] bridge0: port 1(bridge_slave_0) entered forwarding state
[  843.605906][T10588] bridge0: port 2(bridge_slave_1) entered blocking state
[  843.613151][T10588] bridge0: port 2(bridge_slave_1) entered forwarding state
[  844.033179][T14017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  844.045724][T14017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  844.538166][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1989'.
[  846.162934][ T5621] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  846.163918][ T1234] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  846.418057][ T5621] usb 6-1: USB disconnect, device number 52
[  846.583314][T14048] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  846.630009][T14039] syz.8.1989 (14039): drop_caches: 2
[  846.639488][T13776] usb 10-1: USB disconnect, device number 3
[  846.704368][T14018] block nbd9: Disconnected due to user request.
[  846.723246][ T5845] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  846.770614][T14018] block nbd9: shutting down sockets
[  846.935841][ T9566] usb 9-1: USB disconnect, device number 6
[  847.245187][T13885] 8021q: adding VLAN 0 to HW filter on device batadv0
[  847.424368][T14065] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  847.776208][T14072] xt_cgroup: xt_cgroup: no path or classid specified
[  848.951974][T13885] veth0_vlan: entered promiscuous mode
[  849.474691][T13885] veth1_vlan: entered promiscuous mode
[  849.921102][T14092] netlink: 5204 bytes leftover after parsing attributes in process `syz.9.1999'.
[  850.044255][T13885] veth0_macvtap: entered promiscuous mode
[  850.205929][T13885] veth1_macvtap: entered promiscuous mode
[  850.285995][T13885] batman_adv: batadv0: Interface activated: batadv_slave_0
[  851.281663][T13885] batman_adv: batadv0: Interface activated: batadv_slave_1
[  851.553513][T14096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  851.598631][T14096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  851.668921][T14096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  851.713050][T14096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  852.452684][T13776] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  852.588429][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  852.615250][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  852.631436][T13776] usb 10-1: Using ep0 maxpacket: 32
[  852.642393][T14108] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  852.655701][T13776] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  852.691585][T13776] usb 10-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  852.728142][T13776] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.762542][T13776] usb 10-1: Product: syz
[  852.776878][T13776] usb 10-1: Manufacturer: syz
[  852.783401][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  852.797091][T13776] usb 10-1: SerialNumber: syz
[  852.806539][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  852.832214][T13776] usb 10-1: config 0 descriptor??
[  852.869805][T13776] cdc_ether 10-1:0.0: Descriptor too short
[  852.897683][T13776] usb 10-1: unsupported MDLM descriptors
[  852.937615][T14112] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  852.944139][T14112] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  852.952536][T14112] vhci_hcd vhci_hcd.0: Device attached
[  852.959864][T14112] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  853.152452][T13776] usb 10-1: USB disconnect, device number 4
[  853.199729][T14114] vhci_hcd: connection closed
[  853.203679][ T6354] vhci_hcd vhci_hcd.6: stop threads
[  853.243171][ T1234] usb 46-1: SetAddress Request (19) to port 0
[  853.261563][ T6354] vhci_hcd vhci_hcd.6: release socket
[  853.268647][ T1234] usb 46-1: new SuperSpeed USB device number 19 using vhci_hcd
[  853.290891][ T6354] vhci_hcd vhci_hcd.6: disconnect device
[  853.315817][ T1234] usb 46-1: enqueue for inactive port 0
[  853.827445][ T1234] usb usb46-port1: attempt power cycle
[  854.347123][T14129] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  854.607438][ T1234] usb usb46-port1: unable to enumerate USB device
[  855.720526][T14139] xt_connbytes: Forcing CT accounting to be enabled
[  855.727180][T14139] Cannot find set identified by id 0 to match
[  856.151758][   T29] audit: type=1326 audit(2000000301.100:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.5.2011" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a7b99ce59 code=0x0
[  857.279990][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2011'.
[  857.453545][T14148] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  858.951725][T14160] set match dimension is over the limit!
[  859.311747][T14156] loop4: detected capacity change from 0 to 7
[  859.347771][    C1] blk_print_req_error: 10 callbacks suppressed
[  859.347791][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  859.363153][    C1] buffer_io_error: 339 callbacks suppressed
[  859.363164][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  859.403862][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  859.413049][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  859.422330][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  859.431504][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  859.447607][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  859.456813][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  859.465096][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  859.474261][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  859.487872][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  859.497061][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  859.508155][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  859.517322][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  859.525219][T14156] ldm_validate_partition_table(): Disk read failed.
[  859.551533][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  859.560773][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  859.573779][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  859.582952][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  859.612278][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  859.621444][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  859.634391][T14156] Dev loop4: unable to read RDB block 0
[  859.645458][T14156]  loop4: unable to read partition table
[  859.655148][T14156] loop4: partition table beyond EOD, truncated
[  859.679981][T14156] loop_reread_partitions: partition scan of loop4 (þùƒå–÷Ù@€š°êjÌ–ã¢P=ý?ã}X‹ºÐù‡ë) failed (rc=-5)
[  859.733094][ T4978] ldm_validate_partition_table(): Disk read failed.
[  859.759569][ T4978] Dev loop4: unable to read RDB block 0
[  859.777418][ T4978]  loop4: unable to read partition table
[  859.792157][ T4978] loop4: partition table beyond EOD, truncated
[  859.947541][T14168] xt_cgroup: xt_cgroup: no path or classid specified
[  861.588018][T14174] Cannot find set identified by id 0 to match
[  863.565692][T14187] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  865.906434][T14200] netlink: 'syz.8.2027': attribute type 1 has an invalid length.
[  866.179667][T14202] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  866.219409][T14202] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  866.293456][T14211] fuse: Unknown parameter '&~}18446744073709551615'
[  866.376289][T14215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  866.452113][T14204] bond1: (slave bridge1): Enslaving as an active interface with a down link
[  866.630101][T14200] macvlan2: entered promiscuous mode
[  866.665093][T14200] macvlan2: entered allmulticast mode
[  866.883639][T14200] bond1: entered promiscuous mode
[  867.063761][T14200] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  867.141547][T14200] bond1: left promiscuous mode
[  867.701973][T14229] loop4: detected capacity change from 0 to 7
[  867.710152][   T29] audit: type=1326 audit(2000000312.650:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.6.2031" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f082a19ce59 code=0x0
[  867.755627][    C1] blk_print_req_error: 20 callbacks suppressed
[  867.755639][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  867.770940][    C1] buffer_io_error: 20 callbacks suppressed
[  867.770951][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  867.801256][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  867.810396][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  867.821805][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  867.830949][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  867.839632][T14239] FAULT_INJECTION: forcing a failure.
[  867.839632][T14239] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  867.853283][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  867.853307][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  867.875964][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  867.882190][T14239] CPU: 0 UID: 0 PID: 14239 Comm: syz.8.2032 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  867.882223][T14239] Tainted: [L]=SOFTLOCKUP
[  867.882230][T14239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  867.882242][T14239] Call Trace:
[  867.882250][T14239]  <TASK>
[  867.882258][T14239]  dump_stack_lvl+0x100/0x190
[  867.882289][T14239]  should_fail_ex.cold+0x5/0xa
[  867.882317][T14239]  _copy_from_user+0x2e/0xd0
[  867.882349][T14239]  copy_msghdr_from_user+0x9f/0x4f0
[  867.882378][T14239]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  867.882411][T14239]  ? __lock_acquire+0x4a5/0x2630
[  867.882442][T14239]  ___sys_recvmsg+0xdd/0x1a0
[  867.882470][T14239]  ? __pfx____sys_recvmsg+0x10/0x10
[  867.882500][T14239]  ? find_held_lock+0x2b/0x80
[  867.882537][T14239]  do_recvmmsg+0x301/0x760
[  867.882572][T14239]  ? __pfx_do_recvmmsg+0x10/0x10
[  867.882598][T14239]  ? ksys_write+0x190/0x250
[  867.882626][T14239]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  867.882655][T14239]  ? kernel_write+0x653/0x6c0
[  867.882684][T14239]  ? __fget_files+0x21f/0x3d0
[  867.882716][T14239]  __x64_sys_recvmmsg+0x22a/0x280
[  867.882740][T14239]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  867.882765][T14239]  ? rcu_is_watching+0x12/0xc0
[  867.882799][T14239]  do_syscall_64+0x10b/0xf80
[  867.882825][T14239]  ? clear_bhb_loop+0x40/0x90
[  867.882850][T14239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.882871][T14239] RIP: 0033:0x7fc93259ce59
[  867.882888][T14239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  867.882907][T14239] RSP: 002b:00007fc9333ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  867.882926][T14239] RAX: ffffffffffffffda RBX: 00007fc932816180 RCX: 00007fc93259ce59
[  867.882940][T14239] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000008
[  867.882952][T14239] RBP: 00007fc9333ce090 R08: 0000000000000000 R09: 0000000000000000
[  867.882965][T14239] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001
[  867.882977][T14239] R13: 00007fc932816218 R14: 00007fc932816180 R15: 00007fff80c084c8
[  867.883005][T14239]  </TASK>
[  868.094807][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  868.118333][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  868.125879][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2031'.
[  868.127513][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  868.170363][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  868.179544][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  868.187442][T14229] ldm_validate_partition_table(): Disk read failed.
[  868.255076][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  868.264269][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  868.276157][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  868.285324][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  868.294074][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  868.303219][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  868.321373][T14229] Dev loop4: unable to read RDB block 0
[  868.368857][T14229]  loop4: unable to read partition table
[  868.394181][T14229] loop4: partition table beyond EOD, truncated
[  868.449817][T14229] loop_reread_partitions: partition scan of loop4 (þùƒå–÷Ù@€š°êjÌ–ã¢P=ý?ã}X‹ºÐù‡ë) failed (rc=-5)
[  869.020679][T14247] Cannot find set identified by id 0 to match
[  869.867394][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  870.637695][   T29] audit: type=1400 audit(2000000315.580:1048): avc:  denied  { bind } for  pid=14252 comm="syz.4.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  870.833939][   T29] audit: type=1400 audit(2000000315.780:1049): avc:  denied  { open } for  pid=14254 comm="syz.9.2036" path="/dev/ptyr7" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  870.870574][  T805] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  872.012073][  T805] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  872.106924][  T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.150236][  T805] usb 5-1: Product: syz
[  872.179368][  T805] usb 5-1: Manufacturer: syz
[  872.201512][  T805] usb 5-1: SerialNumber: syz
[  872.239346][  T805] r8152-cfgselector 5-1: Unknown version 0x0000
[  872.273216][  T805] r8152-cfgselector 5-1: config 0 descriptor??
[  872.298597][T14262] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.2038'.
[  872.425055][T14262] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2038'.
[  874.259415][  T805] r8152-cfgselector 5-1: Unknown version 0x0000
[  874.341016][  T805] r8152-cfgselector 5-1: No union descriptors
[  874.476985][  T805] r8152-cfgselector 5-1: USB disconnect, device number 22
[  876.767744][T14287] loop4: detected capacity change from 0 to 7
[  876.806583][    C1] blk_print_req_error: 10 callbacks suppressed
[  876.806601][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  876.822033][    C1] buffer_io_error: 10 callbacks suppressed
[  876.822050][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  876.844984][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  876.854193][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  876.864068][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  876.873208][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  876.884615][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  876.893765][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  876.904843][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  876.913984][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  876.925075][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  876.934258][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  876.942275][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  876.951468][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  876.960400][T14287] ldm_validate_partition_table(): Disk read failed.
[  877.026289][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  877.035478][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  877.044315][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  877.053478][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  877.071804][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  877.081046][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  877.099088][T14287] Dev loop4: unable to read RDB block 0
[  877.243460][T14287]  loop4: unable to read partition table
[  877.362576][ T5622] Bluetooth: hci5: Unable to find connection with handle 0x00c8
[  877.375237][ T5741] IPVS: starting estimator thread 0...
[  877.759730][T14287] loop4: partition table beyond EOD, truncated
[  877.770748][T14287] loop_reread_partitions: partition scan of loop4 (þùƒå–÷Ù@€š°êjÌ–ã¢P=ý?ã}X‹ºÐù‡ë) failed (rc=-5)
[  877.848043][ T6360] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  877.859226][T14305] IPVS: using max 64 ests per chain, 153600 per kthread
[  878.333383][T14314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  881.205510][   T29] audit: type=1400 audit(2000000326.150:1050): avc:  denied  { ioctl } for  pid=14330 comm="syz.5.2055" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  881.571248][T14334] FAULT_INJECTION: forcing a failure.
[  881.571248][T14334] name failslab, interval 1, probability 0, space 0, times 0
[  881.584514][T14334] CPU: 1 UID: 0 PID: 14334 Comm: syz.9.2056 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  881.584546][T14334] Tainted: [L]=SOFTLOCKUP
[  881.584554][T14334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  881.584566][T14334] Call Trace:
[  881.584573][T14334]  <TASK>
[  881.584580][T14334]  dump_stack_lvl+0x100/0x190
[  881.584600][T14334]  should_fail_ex.cold+0x5/0xa
[  881.584617][T14334]  ? tomoyo_encode2+0xfb/0x3c0
[  881.584633][T14334]  should_failslab+0xc2/0x120
[  881.584646][T14334]  __kmalloc_noprof+0xe0/0x850
[  881.584663][T14334]  ? d_absolute_path+0x136/0x1b0
[  881.584678][T14334]  tomoyo_encode2+0xfb/0x3c0
[  881.584696][T14334]  tomoyo_encode+0x29/0x50
[  881.584712][T14334]  tomoyo_realpath_from_path+0x18c/0x690
[  881.584731][T14334]  tomoyo_path_number_perm+0x23c/0x580
[  881.584744][T14334]  ? tomoyo_path_number_perm+0x22e/0x580
[  881.584759][T14334]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  881.584792][T14334]  ? trace_reschedule_exit.constprop.0+0x6b/0x220
[  881.584821][T14334]  ? hook_file_ioctl_common+0x149/0x410
[  881.584848][T14334]  ? __x64_sys_ioctl+0x94/0x210
[  881.584860][T14334]  ? security_file_ioctl+0x18/0x230
[  881.584876][T14334]  security_file_ioctl+0xd3/0x230
[  881.584891][T14334]  __x64_sys_ioctl+0xb7/0x210
[  881.584905][T14334]  do_syscall_64+0x10b/0xf80
[  881.584921][T14334]  ? clear_bhb_loop+0x40/0x90
[  881.584935][T14334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.584947][T14334] RIP: 0033:0x7f309299ce59
[  881.584957][T14334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  881.584968][T14334] RSP: 002b:00007f30938ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  881.584980][T14334] RAX: ffffffffffffffda RBX: 00007f3092c16090 RCX: 00007f309299ce59
[  881.584988][T14334] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000005
[  881.584994][T14334] RBP: 00007f30938ad090 R08: 0000000000000000 R09: 0000000000000000
[  881.585001][T14334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  881.585008][T14334] R13: 00007f3092c16128 R14: 00007f3092c16090 R15: 00007ffd3f961208
[  881.585023][T14334]  </TASK>
[  881.585166][T14334] ERROR: Out of memory at tomoyo_realpath_from_path.
[  882.740389][   T29] audit: type=1800 audit(2000000327.680:1051): pid=14343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.2059" name="bus" dev="tmpfs" ino=184 res=0 errno=0
[  882.989428][T14343] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2059'.
[  885.911634][T14366] tmpfs: Unknown parameter 'od'
[  886.810643][T14378] xt_cgroup: xt_cgroup: no path or classid specified
[  887.813521][T14387] xt_cgroup: xt_cgroup: no path or classid specified
[  889.541680][ T1218] IPVS: starting estimator thread 0...
[  889.740150][T14398] IPVS: using max 36 ests per chain, 86400 per kthread
[  890.117707][   T29] audit: type=1326 audit(2000000335.060:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.2073" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a7b99ce59 code=0x0
[  890.274548][T14413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2073'.
[  890.926785][T14415] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  891.716815][T14428] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2076'.
[  892.391566][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2077'.
[  892.529436][T14431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  893.279451][ T5741] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  893.723610][T14445] xt_cgroup: xt_cgroup: no path or classid specified
[  893.763054][ T5741] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  893.805223][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.874821][ T5741] usb 6-1: Product: syz
[  893.912563][ T5741] usb 6-1: Manufacturer: syz
[  893.948088][ T5741] usb 6-1: SerialNumber: syz
[  894.998655][ T5741] usb 6-1: config 0 descriptor??
[  895.103434][ T5734] IPVS: starting estimator thread 0...
[  895.212494][ T5741] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 053
[  895.290932][T14450] IPVS: using max 32 ests per chain, 76800 per kthread
[  895.376539][ T5741]  (null): failure setting delay to 10us
[  895.401238][ T5741] i2c-tiny-usb 6-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  895.455140][ T5741] usb 6-1: USB disconnect, device number 53
[  896.694200][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2087'.
[  896.737533][T14472] fuse: Unknown parameter '00000000000000000000004'
[  896.858300][T14473] No source specified
[  898.333632][T14478] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2088'.
[  898.381302][T14478] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2088'.
[  898.730557][ T5741] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  898.921020][ T5741] usb 7-1: Using ep0 maxpacket: 32
[  898.955315][ T5741] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  898.969361][T14480] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  899.011289][ T5741] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  899.087742][ T5741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  899.135413][ T5741] usb 7-1: Product: syz
[  899.154332][ T5741] usb 7-1: Manufacturer: syz
[  899.180192][ T5741] usb 7-1: SerialNumber: syz
[  899.229826][ T5741] usb 7-1: config 0 descriptor??
[  899.271572][ T5741] cdc_ether 7-1:0.0: Descriptor too short
[  899.328444][ T5741] usb 7-1: unsupported MDLM descriptors
[  899.526125][ T1234] usb 7-1: USB disconnect, device number 25
[  900.896331][T14501] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8)
[  900.902881][T14501] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  900.911648][T14501] vhci_hcd vhci_hcd.0: Device attached
[  900.932744][T14501] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  901.251531][ T1234] usb 50-1: SetAddress Request (2) to port 0
[  901.326491][ T1234] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd
[  901.694256][T14502] vhci_hcd: connection reset by peer
[  901.779574][ T6350] vhci_hcd vhci_hcd.8: stop threads
[  901.886745][ T6350] vhci_hcd vhci_hcd.8: release socket
[  902.010123][ T6350] vhci_hcd vhci_hcd.8: disconnect device
[  902.372495][T14507] xt_cgroup: xt_cgroup: no path or classid specified
[  903.387528][T14511] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  905.349070][T14517] binder: 14516:14517 ioctl c0306201 2000000001c0 returned -14
[  906.457464][T14528] binder: BINDER_SET_CONTEXT_MGR already set
[  906.493033][T14528] binder: 14527:14528 ioctl 4018620d 200000000040 returned -16
[  906.508162][ T4929] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  906.525907][ T4929] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  906.536976][ T4929] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  906.548822][ T4929] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  906.557324][ T4929] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  906.582203][ T1234] usb 50-1: device descriptor read/8, error -110
[  906.763052][  T805] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  906.995085][ T1234] usb usb50-port1: attempt power cycle
[  907.430548][  T805] usb 6-1: Using ep0 maxpacket: 32
[  907.442231][  T805] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  907.476475][  T805] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  907.492505][  T805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.513124][  T805] usb 6-1: Product: syz
[  907.527978][  T805] usb 6-1: Manufacturer: syz
[  907.534522][  T805] usb 6-1: SerialNumber: syz
[  907.549488][  T805] usb 6-1: config 0 descriptor??
[  907.557470][  T805] cdc_ether 6-1:0.0: Descriptor too short
[  907.566543][  T805] usb 6-1: unsupported MDLM descriptors
[  907.651030][T13776] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  907.769151][ T5719] usb 6-1: USB disconnect, device number 54
[  907.780607][T13776] usb 10-1: device descriptor read/64, error -71
[  907.820037][T14555] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  907.921996][ T1234] usb usb50-port1: unable to enumerate USB device
[  908.040651][T13776] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  908.230616][T13776] usb 10-1: device descriptor read/64, error -71
[  908.351568][T13776] usb usb10-port1: attempt power cycle
[  908.562373][T14562] loop4: detected capacity change from 0 to 7
[  908.605191][    C0] blk_print_req_error: 10 callbacks suppressed
[  908.605203][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  908.620525][    C0] buffer_io_error: 10 callbacks suppressed
[  908.620542][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  908.657721][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  908.666953][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  908.677122][ T4929] Bluetooth: hci7: command tx timeout
[  908.687680][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  908.696866][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  908.707536][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  908.716794][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  908.726230][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  908.735463][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  908.744982][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  908.754158][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  908.764072][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  908.773268][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  908.781269][T14562] ldm_validate_partition_table(): Disk read failed.
[  908.794373][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  908.803558][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  908.811594][T13776] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  908.814510][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  908.828327][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  908.841419][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  908.850612][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  908.862892][T14562] Dev loop4: unable to read RDB block 0
[  908.888106][T14562]  loop4: unable to read partition table
[  908.895709][T14562] loop4: partition table beyond EOD, truncated
[  908.908241][T13776] usb 10-1: device descriptor read/8, error -71
[  908.924391][T14562] loop_reread_partitions: partition scan of loop4 (þùƒå–÷Ù@€š°êjÌ–ã¢P=ý?ã}X‹ºÐù‡ë) failed (rc=-5)
[  909.157215][T14529] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.165447][T14529] bridge0: port 1(bridge_slave_0) entered disabled state
[  909.173556][T13776] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  909.173717][T14529] bridge_slave_0: entered allmulticast mode
[  909.195085][T14529] bridge_slave_0: entered promiscuous mode
[  909.206745][T14529] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.215584][T14529] bridge0: port 2(bridge_slave_1) entered disabled state
[  909.223338][T14529] bridge_slave_1: entered allmulticast mode
[  909.231144][T14529] bridge_slave_1: entered promiscuous mode
[  909.237822][T13776] usb 10-1: device descriptor read/8, error -71
[  909.254855][T14571] xt_hashlimit: size too large, truncated to 1048576
[  909.276993][T14529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  909.295299][T14529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  909.381161][T13776] usb usb10-port1: unable to enumerate USB device
[  909.395434][T14529] team0: Port device team_slave_0 added
[  909.522077][T14529] team0: Port device team_slave_1 added
[  910.286179][T14529] batman_adv: batadv0: Adding interface: batadv_slave_0
[  910.294473][T14529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  910.453842][T14529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  910.567268][T14529] batman_adv: batadv0: Adding interface: batadv_slave_1
[  910.601290][T14529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  910.744799][ T4929] Bluetooth: hci7: command tx timeout
[  910.774730][T14585] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  912.409591][T14529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  912.443149][   T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  912.679167][T14529] hsr_slave_0: entered promiscuous mode
[  912.863276][ T4929] Bluetooth: hci7: command tx timeout
[  912.906864][T14529] hsr_slave_1: entered promiscuous mode
[  912.922275][T14529] debugfs: 'hsr0' already exists in 'hsr'
[  912.942247][T14529] Cannot create hsr debugfs directory
[  913.425388][T14600] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  913.621530][T13776] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  913.800811][T13776] usb 10-1: device descriptor read/64, error -71
[  914.071762][T13776] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  914.595522][T14529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.610766][T13776] usb 10-1: device descriptor read/64, error -71
[  914.720905][T13776] usb usb10-port1: attempt power cycle
[  915.000304][ T4929] Bluetooth: hci7: command tx timeout
[  915.395315][T14529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.651877][T13776] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  915.692206][T13776] usb 10-1: device descriptor read/8, error -71
[  915.780382][T14624] binder: BINDER_SET_CONTEXT_MGR already set
[  915.800407][T14624] binder: 14623:14624 ioctl 4018620d 200000000040 returned -16
[  915.813347][T14529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.951214][T13776] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  916.013477][T13776] usb 10-1: device descriptor read/8, error -71
[  916.167208][T13776] usb usb10-port1: unable to enumerate USB device
[  916.347091][T14529] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  916.752970][T14642] FAULT_INJECTION: forcing a failure.
[  916.752970][T14642] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  916.753061][T14642] CPU: 0 UID: 0 PID: 14642 Comm: syz.6.2125 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  916.753090][T14642] Tainted: [L]=SOFTLOCKUP
[  916.753098][T14642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  916.753111][T14642] Call Trace:
[  916.753118][T14642]  <TASK>
[  916.753127][T14642]  dump_stack_lvl+0x100/0x190
[  916.753157][T14642]  should_fail_ex.cold+0x5/0xa
[  916.753196][T14642]  _copy_from_user+0x2e/0xd0
[  916.753228][T14642]  copy_msghdr_from_user+0x9f/0x4f0
[  916.753258][T14642]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  916.753286][T14642]  ? do_raw_spin_unlock+0x145/0x1e0
[  916.753325][T14642]  ? __pfx_debug_object_activate+0x10/0x10
[  916.753359][T14642]  ___sys_sendmsg+0x106/0x1e0
[  916.753389][T14642]  ? __pfx____sys_sendmsg+0x10/0x10
[  916.753451][T14642]  __sys_sendmsg+0x170/0x220
[  916.753474][T14642]  ? __pfx___sys_sendmsg+0x10/0x10
[  916.753513][T14642]  ? rcu_is_watching+0x12/0xc0
[  916.753548][T14642]  do_syscall_64+0x10b/0xf80
[  916.753579][T14642]  ? clear_bhb_loop+0x40/0x90
[  916.753604][T14642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  916.753627][T14642] RIP: 0033:0x7f082a19ce59
[  916.753644][T14642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  916.753664][T14642] RSP: 002b:00007f082affd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  916.753684][T14642] RAX: ffffffffffffffda RBX: 00007f082a416090 RCX: 00007f082a19ce59
[  916.753698][T14642] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 0000000000000004
[  916.753711][T14642] RBP: 00007f082affd090 R08: 0000000000000000 R09: 0000000000000000
[  916.753724][T14642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  916.753736][T14642] R13: 00007f082a416128 R14: 00007f082a416090 R15: 00007ffe178b1588
[  916.753765][T14642]  </TASK>
[  922.250837][T14675] xt_cgroup: xt_cgroup: no path or classid specified
[  923.179072][T14677] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  923.215977][T14529] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  923.263794][T14529] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  923.294340][T14529] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  923.468126][T14529] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  923.969372][T14529] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  924.045138][T14529] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  924.109214][T14529] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  924.138297][   T29] audit: type=1400 audit(2000000369.080:1053): avc:  denied  { setattr } for  pid=14683 comm="syz.9.2137" path="/dev/input/event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  924.285519][T14529] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  924.513574][T14693] input: syz1 as /devices/virtual/input/input29
[  926.083356][T14529] 8021q: adding VLAN 0 to HW filter on device bond0
[  926.654560][T14712] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  926.738938][T14529] 8021q: adding VLAN 0 to HW filter on device team0
[  927.027010][T14720] xt_addrtype: ipv6 does not support BROADCAST matching
[  927.095279][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state
[  927.102486][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  928.341163][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  928.348324][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  928.582443][T14728] xt_addrtype: ipv6 does not support BROADCAST matching
[  931.308792][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  931.369884][T14771] cgroup2: Unknown parameter 'fd'
[  931.383925][   T29] audit: type=1400 audit(2000000376.330:1054): avc:  denied  { write } for  pid=14770 comm="syz.9.2154" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  931.675324][T14775] xt_addrtype: ipv6 does not support BROADCAST matching
[  931.780990][ T5734] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  931.990100][ T5734] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  932.359874][T14529] 8021q: adding VLAN 0 to HW filter on device batadv0
[  932.818451][T14529] veth0_vlan: entered promiscuous mode
[  932.869762][T14529] veth1_vlan: entered promiscuous mode
[  932.914633][T14529] veth0_macvtap: entered promiscuous mode
[  932.925935][T14529] veth1_macvtap: entered promiscuous mode
[  933.085318][T14529] batman_adv: batadv0: Interface activated: batadv_slave_0
[  933.420753][T14802] set match dimension is over the limit!
[  934.270205][T14773] Bluetooth: hci1: command 0x0406 tx timeout
[  934.277390][T14773] Bluetooth: hci3: command 0x0406 tx timeout
[  934.305993][T14529] batman_adv: batadv0: Interface activated: batadv_slave_1
[  934.356365][ T6102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  934.376277][ T6102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  934.422592][ T6102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  934.436753][ T6102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  935.369964][T14808] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  935.475217][ T5622] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  935.485146][ T5622] Bluetooth: hci3: Injecting HCI hardware error event
[  935.500886][ T4929] Bluetooth: hci3: hardware error 0x00
[  935.781456][   T30] INFO: task syz.0.1835:13339 blocked for more than 143 seconds.
[  935.789581][   T30]       Tainted: G             L      syzkaller #0
[  936.225714][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  936.292509][ T6360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  936.314139][   T30] task:syz.0.1835      state:D stack:28456 pid:13339 tgid:13334 ppid:5613   task_flags:0x400140 flags:0x00080002
[  936.365082][ T6360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  936.390205][   T30] Call Trace:
[  936.432780][   T30]  <TASK>
[  936.445134][   T30]  __schedule+0x1295/0x67a0
[  936.463747][   T30]  ? __pfx___schedule+0x10/0x10
[  936.480229][   T30]  ? find_held_lock+0x2b/0x80
[  936.494996][   T30]  ? schedule+0x2bf/0x390
[  936.519229][   T30]  schedule+0xdd/0x390
[  936.532757][   T30]  schedule_timeout+0x1b2/0x280
[  936.548349][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  936.562860][   T30]  ? __wait_for_common+0x2da/0x4c0
[  936.576564][   T30]  ? rcu_is_watching+0x12/0xc0
[  936.600410][   T30]  __wait_for_common+0x2e7/0x4c0
[  936.613576][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  936.639216][   T30]  ? __pfx___wait_for_common+0x10/0x10
[  936.663752][   T30]  ? find_held_lock+0x2b/0x80
[  936.687561][   T30]  ? __flush_work+0x928/0xcb0
[  936.710716][   T30]  ? __flush_work+0x928/0xcb0
[  936.731204][   T30]  ? __flush_work+0x4ca/0xcb0
[  936.753476][   T30]  __flush_work+0x7c7/0xcb0
[  936.770987][   T30]  ? __pfx___flush_work+0x10/0x10
[  936.795863][   T30]  ? __pfx_wq_barrier_func+0x10/0x10
[  936.817568][   T30]  ? __pfx___might_resched+0x10/0x10
[  936.846947][   T30]  ? rcu_is_watching+0x12/0xc0
[  936.861369][   T30]  p9_fd_close+0x299/0x5a0
[  936.873835][   T30]  p9_client_create+0x678/0xd40
[  936.888347][   T30]  ? __pfx_p9_client_create+0x10/0x10
[  936.904727][   T30]  ? lockdep_init_map_type+0x5c/0x250
[  936.910512][   T30]  ? __raw_spin_lock_init+0x3a/0x110
[  936.924110][T14821] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2161'.
[  936.924328][   T30]  v9fs_session_init+0x3c/0xd20
[  936.942235][   T30]  ? kasan_save_track+0x14/0x30
[  936.947410][   T30]  v9fs_get_tree+0xb8/0xb50
[  936.985672][   T30]  ? rcu_is_watching+0x12/0xc0
[  937.012178][   T30]  ? __pfx_v9fs_get_tree+0x10/0x10
[  937.018225][   T30]  ? bpf_lsm_capable+0x9/0x10
[  937.023876][   T30]  ? security_capable+0x80/0x260
[  937.029202][   T30]  vfs_get_tree+0x92/0x320
[  937.045570][   T30]  path_mount+0x7d0/0x23d0
[  937.050382][   T30]  ? __pfx_path_mount+0x10/0x10
[  937.056326][   T30]  ? lockdep_hardirqs_on+0x78/0x100
[  937.106388][   T30]  ? putname+0xb1/0x110
[  937.111375][   T30]  ? kmem_cache_free+0x127/0x6c0
[  937.118350][   T30]  ? __x64_sys_mount+0x293/0x310
[  937.125971][   T30]  __x64_sys_mount+0x293/0x310
[  937.135232][   T30]  ? __pfx___x64_sys_mount+0x10/0x10
[  937.143071][   T30]  ? rcu_is_watching+0x12/0xc0
[  937.147869][   T30]  do_syscall_64+0x10b/0xf80
[  937.153330][   T30]  ? clear_bhb_loop+0x40/0x90
[  937.158039][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.165082][   T30] RIP: 0033:0x7f3835f9ce59
[  937.169506][   T30] RSP: 002b:00007f38341d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  937.179399][   T30] RAX: ffffffffffffffda RBX: 00007f3836216180 RCX: 00007f3835f9ce59
[  937.188041][   T30] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000000000000000
[  937.196650][   T30] RBP: 00007f3836032d6f R08: 0000200000000100 R09: 0000000000000000
[  937.205735][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  937.214300][   T30] R13: 00007f3836216218 R14: 00007f3836216180 R15: 00007ffc0d339868
[  937.223176][   T30]  </TASK>
[  937.226719][   T30] INFO: task syz.3.1836:13342 blocked for more than 144 seconds.
[  937.236219][   T30]       Tainted: G             L      syzkaller #0
[  937.245932][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  937.256028][   T30] task:syz.3.1836      state:D stack:28456 pid:13342 tgid:13337 ppid:5616   task_flags:0x400140 flags:0x00080002
[  937.268764][   T30] Call Trace:
[  937.272649][   T30]  <TASK>
[  937.275584][   T30]  __schedule+0x1295/0x67a0
[  937.280086][   T30]  ? __pfx___schedule+0x10/0x10
[  937.285628][   T30]  ? find_held_lock+0x2b/0x80
[  937.290318][   T30]  ? schedule+0x2bf/0x390
[  937.295307][   T30]  schedule+0xdd/0x390
[  937.299407][   T30]  schedule_timeout+0x1b2/0x280
[  937.305791][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  937.312144][   T30]  ? __wait_for_common+0x2da/0x4c0
[  937.317380][   T30]  ? rcu_is_watching+0x12/0xc0
[  937.322759][   T30]  __wait_for_common+0x2e7/0x4c0
[  937.327697][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  937.333809][   T30]  ? __pfx___wait_for_common+0x10/0x10
[  937.339271][   T30]  ? find_held_lock+0x2b/0x80
[  937.345620][   T30]  ? __flush_work+0x928/0xcb0
[  937.350369][   T30]  ? __flush_work+0x928/0xcb0
[  937.355741][   T30]  ? __flush_work+0x4ca/0xcb0
[  937.361222][   T30]  __flush_work+0x7c7/0xcb0
[  937.365796][   T30]  ? __pfx___flush_work+0x10/0x10
[  937.371656][   T30]  ? __pfx_wq_barrier_func+0x10/0x10
[  937.376979][   T30]  ? __pfx___might_resched+0x10/0x10
[  937.380521][ T5734] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  937.383792][   T30]  ? rcu_is_watching+0x12/0xc0
[  937.397365][   T30]  p9_fd_close+0x299/0x5a0
[  937.404425][   T30]  p9_client_create+0x678/0xd40
[  937.409290][   T30]  ? __pfx_p9_client_create+0x10/0x10
[  937.415387][   T30]  ? lockdep_init_map_type+0x5c/0x250
[  937.421382][   T30]  ? __raw_spin_lock_init+0x3a/0x110
[  937.426700][   T30]  v9fs_session_init+0x3c/0xd20
[  937.432289][   T30]  ? kasan_save_track+0x14/0x30
[  937.437168][   T30]  v9fs_get_tree+0xb8/0xb50
[  937.442322][   T30]  ? rcu_is_watching+0x12/0xc0
[  937.448129][   T30]  ? __pfx_v9fs_get_tree+0x10/0x10
[  937.453930][   T30]  ? bpf_lsm_capable+0x9/0x10
[  937.458628][   T30]  ? security_capable+0x80/0x260
[  937.464847][   T30]  vfs_get_tree+0x92/0x320
[  937.469300][   T30]  path_mount+0x7d0/0x23d0
[  937.474405][   T30]  ? __pfx_path_mount+0x10/0x10
[  937.479268][   T30]  ? lockdep_hardirqs_on+0x78/0x100
[  937.487603][   T30]  ? putname+0xb1/0x110
[  937.492399][   T30]  ? kmem_cache_free+0x127/0x6c0
[  937.497363][   T30]  ? __x64_sys_mount+0x293/0x310
[  937.504094][   T30]  __x64_sys_mount+0x293/0x310
[  937.509784][   T30]  ? __pfx___x64_sys_mount+0x10/0x10
[  937.516227][   T30]  ? rcu_is_watching+0x12/0xc0
[  937.521622][   T30]  do_syscall_64+0x10b/0xf80
[  937.526237][   T30]  ? clear_bhb_loop+0x40/0x90
[  937.531928][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.537844][   T30] RIP: 0033:0x7f22a299ce59
[  937.542947][   T30] RSP: 002b:00007f22a3790028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  937.553197][   T30] RAX: ffffffffffffffda RBX: 00007f22a2c16180 RCX: 00007f22a299ce59
[  937.562098][   T30] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000000000000000
[  937.562186][ T5734] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  937.570129][   T30] RBP: 00007f22a2a32d6f R08: 0000200000000100 R09: 0000000000000000
[  937.570149][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  937.582131][ T5734] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  937.589232][   T30] R13: 00007f22a2c16218 R14: 00007f22a2c16180 R15: 00007ffd44746118
[  937.597319][ T5734] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  937.613694][ T5734] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  937.624046][   T30]  </TASK>
[  937.630902][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  937.638600][   T30] 
[  937.638600][   T30] Showing all locks held in the system:
[  937.643623][ T5734] usb 6-1: Product: syz
[  937.651743][   T30] 1 lock held by pool_workqueue_/3:
[  937.669595][   T30]  #0: ffffffff8e7f12e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  937.704072][ T4929] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  937.713446][T14529] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht'
[  937.758886][ T5734] usb 6-1: Manufacturer: syz
[  937.765548][ T5734] usb 6-1: SerialNumber: syz
[  937.780399][ T5734] usb 6-1: config 0 descriptor??
[  937.786722][T14824] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  937.800406][T14824] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  937.811963][ T5734] usb 6-1: ucan: probing device on interface #0
[  937.824076][   T30] 1 lock held by khungtaskd/30:
[  937.835595][   T30]  #0: ffffffff8e7e57a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  937.870522][   T30] 2 locks held by getty/5369:
[  937.876807][   T30]  #0: ffff8880336f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  937.901271][   T30]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0
[  937.923461][   T30] 2 locks held by kworker/0:5/5727:
[  937.940480][   T30]  #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[  937.951499][   T30]  #1: ffffc90003057d08 (p9_poll_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[  937.962644][   T30] 5 locks held by kworker/0:6/5734:
[  937.968941][   T30]  #0: ffff888022eb5d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[  937.980247][   T30]  #1: ffffc90004e37d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[  937.993242][   T30]  #2: ffff88802b6581d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[  938.002569][   T30]  #3: ffff8880592ea1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[  938.012193][   T30]  #4: ffff8880876621a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[  938.023145][ T5734] usb 6-1: ucan: device protocol version 2359299 is not supported
[  938.032833][ T5734] usb 6-1: ucan: probe failed; try to update the device firmware
[  938.040874][   T30] 3 locks held by kworker/u8:12/6350:
[  938.050242][   T30]  #0: ffff8880331f8940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[  938.066281][   T30]  #1: ffffc900056afd08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[  938.081894][   T30]  #2: ffffffff9060d6a0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360
[  938.091889][   T30] 1 lock held by syz.4.2071/14405:
[  938.098328][   T30] 3 locks held by syz-executor/14529:
[  938.104543][   T30]  #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  938.116224][   T30]  #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800
[  938.128021][   T30]  #2: ffffffff9060d6a0 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x3276/0x4570
[  938.138349][   T30] 2 locks held by syz.5.2155/14783:
[  938.146302][   T30] 2 locks held by syz.6.2164/14816:
[  938.155525][   T30]  #0: ffff88802da55110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_release+0x29e/0x420
[  938.166370][   T30]  #1: ffff88802da922b8 (&dev->mutex#2){+.+.}-{4:4}, at: input_close_device+0x46/0x290
[  938.176372][   T30] 2 locks held by syz.5.2161/14820:
[  938.183145][   T30]  #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  938.191674][   T30]  #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800
[  938.200823][   T30] 3 locks held by syz.5.2161/14821:
[  938.206181][   T30]  #0: ffffffff8f998b28 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0
[  938.216576][   T30]  #1: ffffffff9060d6a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380
[  938.226613][   T30]  #2: ffffffff8e7f12e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  938.236704][   T30] 1 lock held by syz.5.2161/14822:
[  938.241922][   T30]  #0: ffffffff9060d6a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90
[  938.251528][   T30] 2 locks held by syz.5.2161/14823:
[  938.256750][   T30]  #0: ffff8880506c36e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990
[  938.267990][   T30]  #1: ffffffff9060d6a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x18f/0x1f0
[  938.276973][   T30] 
[  938.327489][   T30] =============================================
[  938.327489][   T30] 
[  938.336111][   T30] NMI backtrace for cpu 0
[  938.336128][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  938.336154][   T30] Tainted: [L]=SOFTLOCKUP
[  938.336160][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  938.336171][   T30] Call Trace:
[  938.336179][   T30]  <TASK>
[  938.336187][   T30]  dump_stack_lvl+0x100/0x190
[  938.336216][   T30]  nmi_cpu_backtrace.cold+0x12d/0x151
[  938.336246][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  938.336274][   T30]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  938.336302][   T30]  sys_info+0x141/0x190
[  938.336339][   T30]  watchdog+0xcb1/0x1030
[  938.336371][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  938.336400][   T30]  ? __pfx_watchdog+0x10/0x10
[  938.336426][   T30]  ? __kthread_parkme+0x18c/0x230
[  938.336452][   T30]  ? kthread+0x13a/0x450
[  938.336475][   T30]  ? __pfx_watchdog+0x10/0x10
[  938.336498][   T30]  kthread+0x370/0x450
[  938.336523][   T30]  ? __pfx_kthread+0x10/0x10
[  938.336549][   T30]  ret_from_fork+0x72b/0xd50
[  938.336578][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  938.336613][   T30]  ? __switch_to+0x800/0x1100
[  938.336647][   T30]  ? __pfx_kthread+0x10/0x10
[  938.336673][   T30]  ret_from_fork_asm+0x1a/0x30
[  938.336718][   T30]  </TASK>
[  938.336727][   T30] Sending NMI from CPU 0 to CPUs 1:
[  938.474538][    C1] NMI backtrace for cpu 1
[  938.474557][    C1] CPU: 1 UID: 0 PID: 6352 Comm: kworker/u8:13 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  938.474587][    C1] Tainted: [L]=SOFTLOCKUP
[  938.474594][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  938.474609][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  938.474641][    C1] RIP: 0010:__lock_acquire+0x390/0x2630
[  938.474666][    C1] Code: 45 31 c0 e9 f9 fc ff ff 90 e8 ac d6 11 03 85 c0 74 10 44 8b 15 e1 97 f3 0e 45 85 d2 0f 84 51 0f 00 00 90 31 c0 48 8b 54 24 68 <65> 48 2b 15 f0 c4 26 12 0f 85 65 1c 00 00 48 83 c4 70 5b 5d 41 5c
[  938.474683][    C1] RSP: 0018:ffffc9000569f538 EFLAGS: 00000002
[  938.474696][    C1] RAX: 0000000000000001 RBX: ffff8880327ad630 RCX: 0000000000000004
[  938.474708][    C1] RDX: 7fff08584ac7fd00 RSI: 00000000a32af9e3 RDI: 00000000da25219e
[  938.474720][    C1] RBP: ffff8880327aca00 R08: 0000000036fa27bb R09: 0000000000000007
[  938.474731][    C1] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000
[  938.474742][    C1] R13: 0000000000000007 R14: 0000000000000004 R15: 0455b981a3cab9f6
[  938.474754][    C1] FS:  0000000000000000(0000) GS:ffff88812446d000(0000) knlGS:0000000000000000
[  938.474771][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  938.474782][    C1] CR2: 0000001b332ffff8 CR3: 0000000073472000 CR4: 00000000003526f0
[  938.474794][    C1] Call Trace:
[  938.474800][    C1]  <TASK>
[  938.474811][    C1]  ? lock_acquire+0x1b1/0x370
[  938.474836][    C1]  lock_acquire+0x1b1/0x370
[  938.474858][    C1]  ? unwind_next_frame+0xbd/0x2090
[  938.474885][    C1]  ? unwind_next_frame+0x3be/0x2090
[  938.474910][    C1]  ? unwind_next_frame+0x3be/0x2090
[  938.474938][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  938.474959][    C1]  unwind_next_frame+0xd1/0x2090
[  938.474985][    C1]  ? unwind_next_frame+0xbd/0x2090
[  938.475011][    C1]  ? kasan_save_stack+0x30/0x50
[  938.475029][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  938.475051][    C1]  arch_stack_walk+0x94/0xf0
[  938.475078][    C1]  ? kasan_save_stack+0x30/0x50
[  938.475097][    C1]  stack_trace_save+0x8e/0xc0
[  938.475114][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  938.475134][    C1]  ? kfree_skbmem+0x19a/0x210
[  938.475158][    C1]  ? stack_trace_save+0x8e/0xc0
[  938.475175][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  938.475194][    C1]  kasan_save_stack+0x30/0x50
[  938.475209][    C1]  ? kasan_save_stack+0x30/0x50
[  938.475243][    C1]  kasan_save_track+0x14/0x30
[  938.475259][    C1]  __kasan_slab_alloc+0x89/0x90
[  938.475277][    C1]  kmem_cache_alloc_node_noprof+0x25a/0x6f0
[  938.475306][    C1]  ? __alloc_skb+0x140/0x710
[  938.475323][    C1]  __alloc_skb+0x140/0x710
[  938.475338][    C1]  ? __alloc_skb+0x5b7/0x710
[  938.475352][    C1]  ? __pfx___alloc_skb+0x10/0x10
[  938.475369][    C1]  ? kfree_skbmem+0x19f/0x210
[  938.475393][    C1]  nsim_dev_trap_report_work+0x2af/0xd20
[  938.475424][    C1]  process_one_work+0xa0e/0x1980
[  938.475453][    C1]  ? __pfx_process_one_work+0x10/0x10
[  938.475480][    C1]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  938.475508][    C1]  worker_thread+0x5ef/0xe50
[  938.475536][    C1]  ? kthread+0x13a/0x450
[  938.475556][    C1]  ? __pfx_worker_thread+0x10/0x10
[  938.475583][    C1]  kthread+0x370/0x450
[  938.475603][    C1]  ? __pfx_kthread+0x10/0x10
[  938.475625][    C1]  ret_from_fork+0x72b/0xd50
[  938.475647][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  938.475670][    C1]  ? __switch_to+0x800/0x1100
[  938.475697][    C1]  ? __pfx_kthread+0x10/0x10
[  938.475719][    C1]  ret_from_fork_asm+0x1a/0x30
[  938.475751][    C1]  </TASK>
[  938.872171][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  938.879072][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  938.889758][   T30] Tainted: [L]=SOFTLOCKUP
[  938.894079][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  938.904137][   T30] Call Trace:
[  938.907415][   T30]  <TASK>
[  938.910346][   T30]  dump_stack_lvl+0x100/0x190
[  938.915020][   T30]  vpanic+0x552/0x970
[  938.919022][   T30]  ? __pfx_vpanic+0x10/0x10
[  938.923542][   T30]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  938.929709][   T30]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  938.935875][   T30]  panic+0xd1/0xe0
[  938.939601][   T30]  ? __pfx_panic+0x10/0x10
[  938.944016][   T30]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  938.950159][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  938.956314][   T30]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  938.962455][   T30]  ? watchdog.cold+0x1ec/0x234
[  938.967206][   T30]  ? watchdog+0xcc1/0x1030
[  938.971610][   T30]  watchdog.cold+0x1fd/0x234
[  938.976205][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  938.982007][   T30]  ? __pfx_watchdog+0x10/0x10
[  938.986680][   T30]  ? __kthread_parkme+0x18c/0x230
[  938.991724][   T30]  ? kthread+0x13a/0x450
[  938.995953][   T30]  ? __pfx_watchdog+0x10/0x10
[  939.000616][   T30]  kthread+0x370/0x450
[  939.004679][   T30]  ? __pfx_kthread+0x10/0x10
[  939.009255][   T30]  ret_from_fork+0x72b/0xd50
[  939.013833][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  939.018933][   T30]  ? __switch_to+0x800/0x1100
[  939.023603][   T30]  ? __pfx_kthread+0x10/0x10
[  939.028180][   T30]  ret_from_fork_asm+0x1a/0x30
[  939.032945][   T30]  </TASK>
[  939.036374][   T30] Kernel Offset: disabled
[  939.040678][   T30] Rebooting in 86400 seconds..