last executing test programs:

12m55.284896211s ago: executing program 32 (id=258):
r0 = socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="db4654", 0x3}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x38}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_rdma(0x10, 0x3, 0x14)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x10080, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)

11m7.665168126s ago: executing program 5 (id=494):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020)

11m6.419917327s ago: executing program 5 (id=495):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x18}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x15, 0x2, 0x5, 0x10, 0xff, 0xd, 0x9, 0x8, 0xc, 0x5, 0xc, 0xd, 0x9, 0xa, 0x3, 0xe], 0x1, [0x1ff, 0xc, 0x101, 0x7, 0x688, 0x8001, 0x8, 0x5, 0x927, 0x2e, 0x3200, 0x3, 0x456, 0x6, 0x6, 0xb], [0x3, 0x9, 0x3, 0x0, 0xffff, 0x0, 0x614, 0x3, 0x3, 0xe3, 0xffff, 0x7, 0x5, 0xffff, 0x6, 0xa]}}}}]}, 0x88}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
setpriority(0x2, 0x0, 0x8)
r2 = memfd_secret(0x80000)
r3 = memfd_secret(0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000580)={@loopback, 0x0, 0x0, 0x30, 0x0, [{@empty}, {@empty}, {@initdev}]}})
ftruncate(r3, 0x51a9497)
readahead(r3, 0x7, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
socket$kcm(0x10, 0x2, 0x0)

11m6.236811813s ago: executing program 5 (id=496):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0xffffffff, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x40, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}})

11m2.759644856s ago: executing program 5 (id=502):
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
r0 = socket$kcm(0x29, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0xb, 0x0, &(0x7f0000000000)=0xfffffed7)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, r0, 0xd925000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
pselect6(0x40, &(0x7f0000000100)={0x4000000000000000, 0xffffffffffffffff, 0x8, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x1}, &(0x7f0000000000)={0x1c, 0x26d7, 0x0, 0x0, 0xffbffffffffffffc, 0x0, 0x6, 0x9}, 0x0, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$FIONREAD(r3, 0x5453, 0xfffffffffffffffe)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
syz_open_dev$audion(0x0, 0xe3, 0xa0040)

11m0.120925929s ago: executing program 5 (id=507):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(r0, r0)
setpgid(0x0, r0)
mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB])
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'})

10m52.552286763s ago: executing program 5 (id=520):
r0 = fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$unix(0x1, 0x1, 0x0)
listen(r2, 0x802)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5bab265c}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 8'], 0x9)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '/dev/bus\x0fusb/0\xa7\x96\t\x887R\x8b\xf2\xd7\xec\x1d\xab\x8a0#/00\\x7\a)8+\xbe\xf5\xf1k\xa25\xa23$\x85v~\xd2\x80\xf4\xdeD\xe4\xa0\x19\x12\xcc$\xe7K\x94\x99\xc6\xe9\xb1Mq\xd8\xc6\xb3\x17\xfd%_', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x8a)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x2, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1ecc}], 0x2, 0x10020, 0x0)
socket(0x10, 0x3, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x6, 0x57f9e7cb95d61f1e, 0x8, 0x0, 0x800401}, 0xc)

10m36.260376967s ago: executing program 33 (id=520):
r0 = fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$unix(0x1, 0x1, 0x0)
listen(r2, 0x802)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5bab265c}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 8'], 0x9)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '/dev/bus\x0fusb/0\xa7\x96\t\x887R\x8b\xf2\xd7\xec\x1d\xab\x8a0#/00\\x7\a)8+\xbe\xf5\xf1k\xa25\xa23$\x85v~\xd2\x80\xf4\xdeD\xe4\xa0\x19\x12\xcc$\xe7K\x94\x99\xc6\xe9\xb1Mq\xd8\xc6\xb3\x17\xfd%_', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x8a)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x2, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1ecc}], 0x2, 0x10020, 0x0)
socket(0x10, 0x3, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x6, 0x57f9e7cb95d61f1e, 0x8, 0x0, 0x800401}, 0xc)

10m17.561536586s ago: executing program 4 (id=585):
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0)
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)

10m15.635835504s ago: executing program 4 (id=588):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
rt_sigprocmask(0x2, 0x0, 0x0, 0x0)
r0 = gettid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r0, 0xb, &(0x7f00000000c0)={0x1d, 0xfffff42f, 0x4})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0)
ioctl$RNDADDTOENTCNT(r2, 0x5207, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r3)
write$char_usb(r4, &(0x7f0000000180), 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
pselect6(0x40, &(0x7f0000000340)={0x3, 0x0, 0x200100000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001003, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x3, 0xfffffffffffffffb, 0x3, 0x0, 0xb, 0x80000006, 0xfffffffffffffffe}, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)

10m11.329551452s ago: executing program 4 (id=597):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000050000000000b65c590a000000"], 0x50)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r3, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x618f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20)
r5 = dup(r4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x13c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000240))
write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
sendfile(r5, r5, 0x0, 0xffffffff)

10m7.323541951s ago: executing program 4 (id=605):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$set_reqkey_keyring(0xf, 0xfffffffb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r5, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x300, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}, @TCA_CAKE_RTT={0x8, 0x7, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}}, 0x20008844)

10m5.244687507s ago: executing program 4 (id=607):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000130001000000000000000000070000002e86e4a630b400bf5e869b3444cf3b26d94521b7a4995947eb680490ce6227cc35c9ec5542ebf529cf5c205b7fe401c1bacf4b15a64c6804a6cedd63ffca8ede2a6ea1d1bf0c59cdcdab726224d11135ed2b79543e64ff3370ab2a0af57000bf26a1fc5ed4fb2a9245aac8bc20f234fd5515152d6bcfe668dd8a71ff6becad995ef95da00895890cae8d688c04219fdacac9e867660d54f96988a93be72dd47a94c7d1f1d4da1d2fcfc8e8084ed26446c399b0fc6dd2784752b65d816ad1", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="2f000000b500000000612c"], 0x20)

10m4.222892132s ago: executing program 4 (id=608):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0xa, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0xffff2f88, 0x0, 0xfffffffd, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecf691b59ca8d5410000e7ff", "07a940fd770400000100000500a6959500a37be74189d4401600", [0x10000000000080, 0x76c9]})

9m49.102085217s ago: executing program 34 (id=608):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0xa, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0xffff2f88, 0x0, 0xfffffffd, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecf691b59ca8d5410000e7ff", "07a940fd770400000100000500a6959500a37be74189d4401600", [0x10000000000080, 0x76c9]})

9m4.271284309s ago: executing program 0 (id=706):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7"], 0x10b8}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0xfffe, 0x60}, 'syz0\x00', 0x19})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'tunl0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x9, 0x100, 0x1c, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x7, 0xfffffffa}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x8, 0x700, 0xff, 0x7ff, {{0xe, 0x4, 0x1, 0x14, 0x38, 0x67, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @rr={0x7, 0x3, 0xb7}, @lsrr={0x83, 0xf, 0x46, [@rand_addr=0x64010100, @multicast2, @multicast2]}, @end, @timestamp={0x44, 0x10, 0x54, 0x0, 0x5, [0x6, 0x7, 0x3]}]}}}}})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)

9m1.91219653s ago: executing program 0 (id=709):
syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
keyctl$chown(0x4, 0x0, 0xee01, 0xee00)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1c}}, 0x64000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1100, 0x3, 0x1}, 0x18, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
landlock_restrict_self(r3, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00')

9m0.3723955s ago: executing program 0 (id=711):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000bc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000000103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff0700670200001f000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a8"], &(0x7f0000000100)='GPL\x00'}, 0x94)
umount2(&(0x7f0000000000)='./file0\x00', 0x1)

8m53.683101044s ago: executing program 0 (id=724):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
times(&(0x7f0000000280))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x40, 0x5, 'syz0\x00', 0x10000003}, 0x0, [0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffff52, 0x5, 0x1, 0x8000000000000000, 0x8, 0x0, 0x4000000000000, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x3, 0x0, 0x9, 0x9, 0x2, 0x0, 0x7fffffff, 0x85, 0x3, 0x0, 0xb9e4, 0x0, 0x100000000000000, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x6, 0x6, 0x0, 0x3, 0x61, 0x9, 0xfffffffffffffc, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x200000000000, 0x1, 0xfffffffffffffff8, 0x0, 0x0, 0x4, 0xc000000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0xcb, 0xfffffffffffffffc, 0x0, 0x200, 0x9, 0x5, 0xffff, 0xfffffffffffffff8, 0x5, 0x0, 0x0, 0x10001, 0xebc, 0x0, 0x4000000000000, 0x74c, 0x6, 0x6, 0x400000000067, 0x7, 0x10000000, 0x7fffffff, 0x401, 0x0, 0x1, 0x76e, 0x0, 0x4, 0x5, 0x4, 0x0, 0x1, 0x1, 0xf32, 0x9, 0x2001, 0x0, 0x0, 0x0, 0xa562, 0x0, 0x80000005, 0xffffffffffffffff, 0x0, 0x5, 0x8, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x6, 0xfffffffffffffffb, 0x0, 0x0, 0x8, 0x0, 0x7, 0x4, 0x1553, 0x40, 0x0, 0x1, 0x0, 0xf65]})
unlink(&(0x7f00000002c0)='./file0\x00')
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00')

8m51.979251656s ago: executing program 0 (id=729):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
capset(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000001c0), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)

8m50.636625957s ago: executing program 0 (id=731):
fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x549000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1d)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000340)={0xa8, 0x0, 0x2})
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r5, 0x439, 0xfffffffe, 0x20000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x88}]}, 0x24}}, 0x4004000)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x0, {0x7a}}, 0x14}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil)
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x1})
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x67, 0x37]}}]})
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$sock_proto_private(r8, 0x89e0, 0x0)

8m35.332165005s ago: executing program 35 (id=731):
fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x549000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1d)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000340)={0xa8, 0x0, 0x2})
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r5, 0x439, 0xfffffffe, 0x20000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x88}]}, 0x24}}, 0x4004000)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x0, {0x7a}}, 0x14}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil)
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x1})
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x67, 0x37]}}]})
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$sock_proto_private(r8, 0x89e0, 0x0)

7m25.248697528s ago: executing program 7 (id=859):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x1}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016"], 0x34c}}, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f00000000c0)={r8})
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00')
preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)

7m19.870672703s ago: executing program 7 (id=866):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000bc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
umount2(&(0x7f0000000000)='./file0\x00', 0x1)

7m15.22032646s ago: executing program 7 (id=871):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001e00), &(0x7f0000001e40)=0xc)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x3f, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff6}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @generic={0xb, 0x2, 0xf, 0x71, 0x7fff}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0x4, 0x2, 0xb, 0xffffffffffffffe0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b80)='GPL\x00', 0x7, 0xcd, &(0x7f0000000bc0)=""/205, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000d40)={0x5, 0xa, 0xff, 0x701}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e80)=[{0x0, 0x1, 0xe, 0xb}, {0x1, 0x3, 0x2, 0xb}, {0x3, 0x5, 0xc, 0xa}, {0x5, 0x4, 0x7}, {0x0, 0x3, 0x4}, {0x3, 0x5, 0xa}], 0x10, 0x1}, 0x94)
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400"], 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/81, 0x51, 0x0, &(0x7f0000000780)=""/255, 0xff}, &(0x7f0000000300)=0x40)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x2}}, 0x20)
syz_open_dev$loop(0x0, 0xfa, 0x2000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x2}}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)
r6 = syz_usb_connect$uac1(0x2, 0x115, &(0x7f0000000640)=ANY=[@ANYBLOB="12010003000000406b1d010140000904000000010100000a24010800010201020c2407060100034dd52ecef707240701050004092408050900032e900c24020200000300070001f38c240806f40008dec60924030301010403040904010000010200000904010101010200000c24020103020b0a2ee5f9220d2402020080030016624c95e90724018004030009050109000280020307250104060000090402000001020000090402010101020000112402010703a2000c073fc3d44f756673112402020400fdffcb9910d4f3a85dcc7c0924020104040702e60c2402010f030707d7da751d0a240201980104051f9c0924020102031a006709058209ff0302e00407250100040000000000000000000000000000000485d4dcc0d8e962"], &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x9, 0xd, 0x3, 0x40, 0x2}, 0xc1, &(0x7f0000000200)={0x5, 0xf, 0xc1, 0x3, [@generic={0xa2, 0x10, 0x2, "55769a9f242d57c654a3758027374abeba5df3a2e93bd162b59c85c05dfbc69527e35a1b51023af3c77523a37ad17594e5943fa7250e4188e2eed099504e9c538f65bbfc73c77a752810c0b0c6bbed0377dd8be72436d5e35764f75050edaff1ec56f28655b46fd86018317295ddc9e9fe449487b9d576672bb18f908cec68e1a46bd58efd4dc17ba7e2db8fd8f5c3416099cda60690fcba88eb1fd155a66c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x4, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x7ffff81, 0xf00, 0x100, [0x0]}]}, 0x5, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x202}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x67}}, {0x39, &(0x7f0000000480)=@string={0x39, 0x3, "ae174e44ee175b4a9eb793ba18924cf0bd9a9814ecda64b5670a2138d9cc0f190d6b02ef3bb6cc1cdf4774c5ccecbe51deecb93df76d11"}}]})
syz_usb_control_io(r6, 0x0, 0x0)

7m11.415410047s ago: executing program 7 (id=879):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x1}]}, 0x10)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
ptrace$ARCH_GET_GS(0x1e, r2, 0x0, 0x1004)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}}, 0x0)
sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x21c)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000140)=0x1)
close(r9)
socket$inet_tcp(0x2, 0x1, 0x0)
write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[], 0xffdd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

6m56.751498422s ago: executing program 7 (id=899):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$rds(r4, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
fanotify_init(0x79, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x50}}, 0x0)

6m50.409165576s ago: executing program 7 (id=907):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000880)={0xfffffffd, 0x1, 0x8, 0x8000, 0x10, "c588c203364d75c74c9b84836eae88a902fdf6"})
r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x8840, 0x0)
fcntl$lock(r4, 0x11, &(0x7f0000003c80)={0x2, 0x5, 0x80000000, 0x6})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
futex(&(0x7f000000cffc), 0x5, 0x8, 0x0, &(0x7f0000000000)=0x7, 0x4ffffff)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5})
close(0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x48)
ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, 0x0)

6m33.963785969s ago: executing program 36 (id=907):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000880)={0xfffffffd, 0x1, 0x8, 0x8000, 0x10, "c588c203364d75c74c9b84836eae88a902fdf6"})
r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x8840, 0x0)
fcntl$lock(r4, 0x11, &(0x7f0000003c80)={0x2, 0x5, 0x80000000, 0x6})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
futex(&(0x7f000000cffc), 0x5, 0x8, 0x0, &(0x7f0000000000)=0x7, 0x4ffffff)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5})
close(0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x48)
ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, 0x0)

3m24.562833806s ago: executing program 2 (id=1203):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100))
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_set$pid(0x1, r3, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x21f)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000001, 0x0, 0x200})
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)

3m20.895323842s ago: executing program 2 (id=1208):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4f21, 0x32, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800402}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x5, &(0x7f0000000300)='|', 0x1)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
socket$alg(0x26, 0x5, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18)
connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)

3m7.641795742s ago: executing program 2 (id=1228):
syz_open_dev$tty1(0xc, 0x4, 0x1)

3m6.53471285s ago: executing program 2 (id=1232):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r1 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00')
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
sched_setscheduler(0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001e00), &(0x7f0000001e40)=0xc)
ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0xffffffffffffffff, 0xf})
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x40010)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x2, 0x3}}, 0x20)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r8, 0x1)
connect$bt_rfcomm(r8, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)

3m1.254653426s ago: executing program 2 (id=1241):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x4e)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getpgid(0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@my=0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x2000000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x86}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x1)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{@any, 0x4}, 0x1, 0x0, 0x2ff})
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)

2m57.929702395s ago: executing program 2 (id=1249):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x118}}, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, <r5=>r4, 0x80000})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00')
preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r8, 0x0, 0xc080)
r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5})
sendmsg$IPSET_CMD_RENAME(r0, 0x0, 0x40004)
openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14, &(0x7f0000001280)={&(0x7f0000001200)="18fa1fcea55e9f31627085ffec938f6901977b96a055edacf1f15a4b2e09df82c3862a911771965295e5885bcee5e0493d3cab33c29833102bf3e0240ec6f3f7ff3f51219aaa9cf19e5c7dfb75913ee000a04019bedd996b217df890fb20d7777896ebc21cc4814a7bee1d9961ff34", 0x6f}, 0x1, 0x0, 0x0, 0x20000045}, 0x4004080)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x20880, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)

2m42.874141841s ago: executing program 37 (id=1249):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x118}}, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, <r5=>r4, 0x80000})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00')
preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r8, 0x0, 0xc080)
r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5})
sendmsg$IPSET_CMD_RENAME(r0, 0x0, 0x40004)
openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14, &(0x7f0000001280)={&(0x7f0000001200)="18fa1fcea55e9f31627085ffec938f6901977b96a055edacf1f15a4b2e09df82c3862a911771965295e5885bcee5e0493d3cab33c29833102bf3e0240ec6f3f7ff3f51219aaa9cf19e5c7dfb75913ee000a04019bedd996b217df890fb20d7777896ebc21cc4814a7bee1d9961ff34", 0x6f}, 0x1, 0x0, 0x0, 0x20000045}, 0x4004080)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x20880, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)

40.30909221s ago: executing program 8 (id=1463):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee'}, 0x30)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
rmdir(&(0x7f0000000000)='./file0\x00')
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f00000005c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002580)={0x2020}, 0x2020)
fchmodat(r4, &(0x7f0000000240)='./file0\x00', 0x24)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x3, &(0x7f0000000440)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x19, &(0x7f0000000000)={0x0, 0x20000000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xb5)
r6 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r5)
keyctl$KEYCTL_MOVE(0x1e, r6, r5, 0xfffffffffffffffb, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

37.069203179s ago: executing program 8 (id=1469):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x41)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x918)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
r5 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x40000020)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x10, 0xa}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
ftruncate(r4, 0x8800000)
r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
sendfile(r9, r4, 0x0, 0x558410e9)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
pwrite64(r10, &(0x7f00000002c0)='\v', 0x1, 0x9)

34.937416368s ago: executing program 8 (id=1470):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff})
r8 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r8, &(0x7f0000000340)={0x18, 0x2, {0x80, @loopback}}, 0x1e)
connect$pptp(r8, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e)
sendmmsg(r7, 0x0, 0x0, 0x40840)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084)
r11 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f00000001c0)={@mcast1, 0x75, r10})
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)

33.727942487s ago: executing program 8 (id=1473):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0)
epoll_create1(0x0)
syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000180)="3ccb1da2bceb2c0064bf7c68e79f185f6b363ae9ea6014f30000000000000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}, 0xfffffffffffffd48)
r2 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x1)
write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af"], 0x6)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r7 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[], 0x69)

32.143323368s ago: executing program 8 (id=1474):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000040)="1a000000020000", 0x7)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f00000002c0)=[{0x6, 0x1, 0xe, 0x7ffffffe}]})
shutdown(r0, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000006c00000017d6f5b60a0000000c000000000000010000000050007d0107000000030000130200000003000000ff000000060000000f00000081000000080000000300000009000000000a000003000000040000060400000000000000ff0700000d0000000300000003000000060000000600000000000000003030306100305f", @ANYRESOCT=r2], &(0x7f0000000680)=""/108, 0x8e, 0x6c, 0x0, 0x3}, 0x28)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
r5 = dup3(r3, r4, 0x0)
ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x3, 0x8})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, r5}, 0x94)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)

26.329512124s ago: executing program 8 (id=1484):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x30, r6, 0x100, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x4000805)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x8f, 0x2, 0x53, 0x40, 0xc45, 0x8003, 0xd6bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6e, 0xe4, 0x4e}}]}}]}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466fb19f71e96642faa2300"}]}}}}}}}}, 0x0)

20.720548593s ago: executing program 3 (id=1489):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, 0x0, 0x8880)
mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c0000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044050}, 0x40000c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
syz_open_procfs(r3, &(0x7f0000000200)='clear_refs\x00')
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0)
r5 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000280), 0x200000081, 0x10000)
r7 = dup3(r5, r6, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f0000000100)="ca2e66c68a044e461a1438d443dd266edf07b2e073", &(0x7f0000000440)=""/155, &(0x7f0000000300)="4b5d82b322f8261ba544204433cfc00ae80cc46561dacd34b53bfa7fc2a859804ad34a2e3bc8684c3637e125f158fc355fe1ded8a32c5830e404576e630f8d1c5a661b712bfb6ecf8b89007a198c1871387888e420658c84ca6d42", &(0x7f0000000500)="54ee29019bc4eb099de9a16e31939a4c8f5a3d6279588759804eec580446067bd222ae84b7b629e51230fef805c90c4a32715356f60db8f64441b3bef72d2ab1e23da112ac5f43ba497daa5bcca6a2a2f6af3025b1fea6ee67233d2fcff7cb1a", 0x7fff, r7, 0x4}, 0x38)
ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f0000000180))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4)
r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265272030303030303030303133373433383935333437320a50484f4e454f55540a494d495820274344272030303030303030303030303030303030303030300a4c494e45202753796e746827"], 0xaf)
close(r8)

17.375470147s ago: executing program 1 (id=1494):
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
getpgid(0xffffffffffffffff)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000080), 0x4)
write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000140)='2\x00', 0x2)
r3 = socket(0xa, 0x3, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
signalfd4(r3, &(0x7f00000000c0)={[0x342]}, 0x8, 0x80800)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}, {0xa, 0x4e21, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xb, 0x3, 0xffffffff]}}, 0x5c)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d00090509000000"], 0x0)
r4 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0)
socket$alg(0x26, 0x5, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0)

17.37425094s ago: executing program 3 (id=1495):
getdents(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000003300)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x973c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804)
io_setup(0x5, &(0x7f0000000e80)=<r2=>0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000001580)=[0x0])
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x459b, &(0x7f0000000080)={0x0, 0x5fa5, 0x0, 0x0, 0x10b}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140))
r4 = mmap$IORING_OFF_SQES(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x88013, 0xffffffffffffffff, 0x10000000)
r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x3d, 0x8a, 0x8, 0x2770, 0x9120, 0x6c77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xb0, 0xe2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x3, &(0x7f00000001c0)="10d683597fbda6e2d41bd3325d58ba36acf1b0939f6dbfa35b86097bb75f653592f52f35695eb03d5d8642fa1410b0550361da9be512140aed3b3e3d55ce97f734c00fd110a573b527bf524a5f2e12", 0xe1, 0x0, 0x1})
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfff, r7}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, 0x0, &(0x7f0000000000)=""/85}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
r8 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_int(r8, 0x0, 0x16, 0x0, &(0x7f0000000080))
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r11, 0xc040aed5, &(0x7f0000000000)={0x0, 0x10e000})
ioctl$KVM_GET_DIRTY_LOG(r10, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil})

15.340621761s ago: executing program 6 (id=1498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
iopl(0x3)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x8000000010, 0x5, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20)
r7 = io_uring_setup(0x4c0c, &(0x7f0000000140)={0x0, 0x2637, 0x3c00, 0x2, 0x10001d4})
r8 = eventfd2(0x6, 0x80800)
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000100)={&(0x7f0000000a00)={{@local, 0x1000}, {@host, 0xa000}, 0x400, "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"}, 0x418})
io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000340)=r8, 0x1)
io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0)
mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})

14.234502795s ago: executing program 1 (id=1499):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
syz_open_dev$sg(&(0x7f00000060c0), 0xffffffff, 0x8002)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x3f00, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14)

12.85239524s ago: executing program 1 (id=1501):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
preadv(r6, &(0x7f0000000600)=[{&(0x7f0000000380)=""/116, 0x74}], 0x1, 0x82000001, 0xff)
sendmsg$SMC_PNETID_ADD(r6, 0x0, 0x4000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31003b26d4115a8a1a00000008000540000000020900020073797a310000000008000a40fffffffc08000340000000143c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000021400000011000100000000000005ee4c00000001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
openat(r6, &(0x7f0000000100)='./file0\x00', 0x40000, 0x80)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x2e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x15, 0x2, 'wrr\x00', 0x30, 0x4, 0x68}, 0x2c)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, 0x0, 0x0)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04221f2d"], 0x12)

12.850645336s ago: executing program 6 (id=1511):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
read(r5, &(0x7f0000000080)=""/186, 0xba)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000104010200000000000000000a00000105000100e80000"], 0x24}, 0x1, 0x0, 0x0, 0x24000844}, 0x4000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r7, r8, 0x26, 0x0, @val=@perf_event={0x7}}, 0x18)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r9, r7, 0x4, r7}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x120, 0x24, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0xffea, 0xffe0}, {0xffff, 0xffff}, {0xd, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_RATE={0x6, 0x5, {0xf8, 0x1d}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x51, 0x4, 0x100, 0x100, 0x0, 0x6, 0xfff, 0x4}}, {0xc, 0x2, [0x1, 0xb, 0x8001, 0x6]}}]}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x6, 0xd1, 0x8, 0x1, 0x5, 0x6, 0x8}}, {0x14, 0x2, [0x4, 0x9, 0x81, 0xfff, 0x80, 0x4248, 0x0, 0x4]}}, {{0x1c, 0x1, {0xa, 0xa, 0xe, 0x80, 0x0, 0x8, 0x2, 0x2}}, {0x8, 0x2, [0x5, 0xfff]}}, {{0x1c, 0x1, {0x0, 0xf7, 0xfff2, 0x10000, 0x2, 0x7, 0xffff7fff, 0x3}}, {0xa, 0x2, [0x7fff, 0x6, 0x4]}}, {{0x1c, 0x1, {0x1, 0x2, 0xcfb8, 0x73, 0x0, 0x2, 0x534d, 0x8}}, {0x14, 0x2, [0x3, 0x8, 0x6, 0x5, 0x2, 0x7, 0xf, 0x1f65]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x4048080}, 0x4)

11.188435017s ago: executing program 38 (id=1484):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x30, r6, 0x100, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x4000805)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x8f, 0x2, 0x53, 0x40, 0xc45, 0x8003, 0xd6bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6e, 0xe4, 0x4e}}]}}]}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466fb19f71e96642faa2300"}]}}}}}}}}, 0x0)

10.61685253s ago: executing program 6 (id=1503):
r0 = semget$private(0x0, 0x4, 0x14)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x4049a0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000000))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000001080), 0x4)
sendmsg$kcm(r6, 0x0, 0x4011)
semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000140)=""/28)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000180)=""/81)
r7 = fcntl$dupfd(r6, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304)

10.553160516s ago: executing program 9 (id=1504):
r0 = socket(0x23, 0x80805, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x1)
mknod$loop(0x0, 0x0, 0x1)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8)
listen(r0, 0x0)
connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10)
r5 = socket$inet6(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
socket$pppl2tp(0x18, 0x1, 0x1)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r7, 0x5)

9.40014304s ago: executing program 9 (id=1505):
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x600})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x2}, 0x20)
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f00000000c0), 0x4)
bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)

6.869236646s ago: executing program 9 (id=1506):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x0, 0x80, "1adad9", 0x9, 0xb2})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1})
waitid(0x2, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500))
add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'})
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000)
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x200000000000000)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)

6.792618563s ago: executing program 1 (id=1507):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x4008040, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
r7 = socket(0x840000000002, 0x3, 0xff)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x7ffffffff002, 0x7ffffffff002, 0x0, &(0x7f0000000000/0x4000)=nil)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000880)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f00000005c0)=0xe8)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000006c0)={0x0, <r10=>0x0}, &(0x7f0000000700)=0xc)
setreuid(r9, r10)
ioctl$EVIOCSKEYCODE_V2(r8, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"})
r11 = syz_io_uring_setup(0x79a4, &(0x7f0000000300)={0x0, 0x7de3, 0x100, 0x0, 0x305}, &(0x7f00000000c0), &(0x7f0000000480))
r12 = syz_open_dev$loop(&(0x7f0000000540), 0x5, 0x309000)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
io_uring_register$IORING_REGISTER_FILES(r11, 0x2, &(0x7f0000000580)=[r6, r4, r6, r12, r6, r0, r3, r5], 0x8)

5.72219528s ago: executing program 3 (id=1508):
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x40)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x40400c0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001380)={<r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(0x0, r3)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x4040, 0x11c)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f00000002c0)='./file0\x00')

5.224289481s ago: executing program 9 (id=1509):
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x143040, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x94)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="140004006e696376663000000093a4a30466a7000000610f526400000000"], 0x30}}, 0x0)
r5 = socket$inet(0x2, 0x3, 0xd)
getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000040), 0x4)
setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0)
fsopen(&(0x7f0000000140)='9p\x00', 0x0)

5.197855498s ago: executing program 1 (id=1510):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040)={0x9}, 0x0)
shmget$private(0x0, 0x4000, 0x1, &(0x7f0000558000/0x4000)=nil)
r1 = socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), &(0x7f0000000280))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
eventfd(0xfffff189)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000001c0)={0x1, r0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x10}, 0x18)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1, {[0xffe, 0x0, 0x3]}}, 0x5c)
shmat(0xffffffffffffffff, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, 0x0, &(0x7f0000000540))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)

5.19143589s ago: executing program 6 (id=1512):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
syz_open_dev$sg(&(0x7f00000060c0), 0xffffffff, 0x8002)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x3f00, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14)

4.024819253s ago: executing program 3 (id=1513):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x400, 0x18}, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r8 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002)
writev(r8, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x9, 0x9, 0x0, 0x4800, r5, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="fbff0400", @ANYRES32=r3, @ANYBLOB="000000003db30000185900000200"/24], &(0x7f0000000280)='GPL\x00', 0xc, 0x1000, &(0x7f0000000ac0)=""/4096, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[0xffffffffffffffff, r4, r5, r8, r9], &(0x7f0000000480)=[{0x2, 0x1, 0x7, 0xa}], 0x10, 0x101}, 0x94)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c)

3.922352011s ago: executing program 6 (id=1514):
syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000380)='./file0\x00', r0}, 0x18)
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6)
unshare(0x22020600)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]})
syz_emit_ethernet(0x66, &(0x7f0000000f80)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500005800000000006c907800fffc00000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800"/102], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000240)={r7, @in={{0x2, 0x4e20, @empty}}, 0x1, 0x7fff, 0x8, 0x5, 0x20, 0x99, 0xef}, &(0x7f0000000000)=0x9c)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000400)="544cedcf683ad1813f888d4d9b2952d66e251094cbd43eff23fc84c43e1a313fb70c204b173e9fd8f520120b0536c25aad10871a5b8777747bdd33ea1a077a346d4926687ce6ba9d41db4a06c742f577672d724a8d8047a8a4ff62ec1b5056ec511b38d78f6a415a8ec29ea946a13e9fb8ecca00468dd9ea445dd37674e521f1c99a7b8e7641543fe3306bef1be19984c813c31604dfc7ee123e74d5af7ac48435dd01c9b4cbf0ca2034e3e451bc7e567df1defe9f2e82faca092043f2969663769d7d6ed110c619326f2dc8d4da85ac3d35df5881756e821fd0e31430164b84e5e19ff0591ae38d94", 0xe9}, {&(0x7f0000000180)="ae351301197d99d66f079bc13be0cb3eb2f3fd535baa5d5bd52ad450c17e0c", 0x1f}, {&(0x7f00000001c0)="49009927987dde0713eb3729f08f804cd43aa1fc202decc48ec34f934ddaca16", 0x20}, {&(0x7f0000000300)="e8b845aff82811d02e4260bdc1aba1066401300c3d1443f5b012c847c4d8b8fef61ac162dbbd51eaac96d0ca4868a1", 0x2f}, {&(0x7f0000000340)="959a2f6ab594f93ba148690c30efe5739657f620e07afd037b0181c632", 0x1d}], 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="fc419f0581d0274324255a9177f6d2e21af58ac3992805e2aac341b3a49a87", @ANYRES32=r7], 0x20, 0x4004000}, {&(0x7f00000005c0)=@in6={0xa, 0x4e24, 0x34, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x3}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000006c0)="57782db76c76ebb5b9c43400e1a52e6b17a7879b82d569512f2000c3b17171ddf7b2170ac554d378c5c182347c30702a1b014c2572f8fa860f1780214407e8e53011bc9c207b10e413b384c9271c40f17b224b82221226fed9787688184d173f3ce02abc198b0b127d19c1361c91de12e18d8bfde6de472c14762c66b1da68a81cbb", 0x82}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000007b85f8efe1000084000000070000007f000001ffffffff"], 0x18}], 0x2, 0x40)

3.919968026s ago: executing program 1 (id=1515):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x10010, r1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000040)={0x5, 0x745, 0x5, 0xc262, 0x9})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYRES16=r3, @ANYRES16=r5], 0x7c}, 0x1, 0x0, 0x0, 0x20000012}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="370000001000010000000000000000000000000a78000000060a0b04000000000000000002000000500004804c00018011000100666c6f775f6f66666c6f616400000000340002800900010073797a30000000000900010073797a30000000000900010073797a30000000000900010073797a32000000000900010073797a300000000008000a7f61d68f0acb6d69001100010000000000000000000300000a"], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0xa0502, 0x49)
io_setup(0x1, &(0x7f00000016c0)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r9, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}])
sendfile(r5, r6, 0x0, 0x20000023896)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x4e21, 0x18, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0xfffffffc}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

2.284889228s ago: executing program 3 (id=1516):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000bc0)={0xbf, 0x0, 0x1})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5, 0x2}, 0x20)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x1000)
r7 = creat(&(0x7f0000000040)='./file0/file0\x00', 0xecf86c37d530490c)
close(r7)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y=yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})

2.208974978s ago: executing program 6 (id=1517):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18)
r1 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180)=0xfffffffffffffffe, 0x4)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000927000/0x7000)=nil, 0x2)
syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002)
r5 = socket$inet(0x2, 0x3, 0x5)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10)
write$binfmt_elf64(r5, &(0x7f0000000480)=ANY=[], 0x44)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r8, 0x2, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0x4]})
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r9, 0x400455c8, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000010140)=0x9)

2.163734096s ago: executing program 9 (id=1518):
r0 = fsopen(&(0x7f0000000000)='binder\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fcntl$lock(r4, 0x24, &(0x7f0000000180)={0x2, 0x3, 0x10000, 0x3})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
mq_notify(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getitimer(0x0, &(0x7f0000000000))
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth0_to_hsr\x00'}}, 0x1e)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
ioctl$PPPOEIOCSFWD(r6, 0x40047452, &(0x7f0000001180)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 'pim6reg0\x00'}})
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r0, 0x0, 0x8)
fchdir(r7)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)

846.422918ms ago: executing program 3 (id=1519):
r0 = memfd_create(&(0x7f0000000500)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x4}, 0x18)
dup(r0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000040)={0x6, 0x27, 0x3ff, 0xffff, 0x7})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', <r10=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r9, r10, 0x25, 0x4, @val=@tcx}, 0x1c)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c010000100013072abd7000fedbdf2464010102000000000000000000000000fc010000000000000000000000000001000000004e2001020a0000802e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffff0900000000000000000000000000000000000900000000000080000000000000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000200000000000000000000002ebd7000003500000a00000050000000000000001c00040000004e244e200000fe80000000000000000000000000002d600012007266633431406fe29e1efef332b11367f530362867636d2861657329"], 0x16c}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
unshare(0x2040400)
r12 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSREP(r12, 0x40004580, 0xffffffffffffffff)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_emit_ethernet(0x4a, 0x0, 0x0)

0s ago: executing program 9 (id=1520):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80244, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f00000005c0), 0x0, 0x40, &(0x7f0000000080)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @link_local}, 0x14)
socket$inet6(0xa, 0x802, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ppoll(&(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0)
read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc)
syz_usb_disconnect(r0)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0xfffffffffffffffd)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x28)

kernel console output (not intermixed with test programs):

T11129] usb 9-1: config 0 descriptor??
[  732.122699][T11761] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  733.040974][T11130] usb 9-1: USB disconnect, device number 5
[  737.011011][T11811] tipc: Started in network mode
[  737.016137][T11811] tipc: Node identity 4, cluster identity 4711
[  737.022460][T11811] tipc: Node number set to 4
[  738.661746][T11827] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1131'.
[  738.756589][T11129] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  739.021701][T11129] usb 3-1: Using ep0 maxpacket: 32
[  739.033111][T11129] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  739.083199][T11129] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  739.265932][T11129] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  739.354541][T11129] usb 3-1: Product: syz
[  739.382504][T11129] usb 3-1: Manufacturer: syz
[  739.422872][T11129] usb 3-1: SerialNumber: syz
[  739.429160][T11129] usb 3-1: config 0 descriptor??
[  739.437042][T11823] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  740.400719][T11129] usb 3-1: USB disconnect, device number 23
[  741.712048][   T30] audit: type=1400 audit(1766473643.745:1174): avc:  denied  { ioctl } for  pid=11843 comm="syz.9.1136" path="socket:[33405]" dev="sockfs" ino=33405 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  742.321839][T11129] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  742.845245][T11861] affs: No valid root block on device nullb0
[  742.967625][T11129] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  742.978131][T11129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.990712][T11129] usb 7-1: config 0 descriptor??
[  743.172552][T11866] futex_wake_op: syz.3.1151 tries to shift op by -1; fix this program
[  744.357321][T11859] IPv6: NLM_F_CREATE should be specified when creating new route
[  744.662173][T11129] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  744.856656][T11871] SELinux: failed to load policy
[  745.381042][T11129] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2
[  745.416397][T11129] [drm] Initialized udl on minor 2
[  745.441308][T11853] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1137'.
[  745.511757][   T30] audit: type=1400 audit(1766473647.475:1175): avc:  denied  { getopt } for  pid=11851 comm="syz.6.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  745.609677][T11129] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  745.759282][T11129] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  745.864987][T11130] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  745.944066][T11129] usb 7-1: USB disconnect, device number 8
[  746.006950][T11130] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  747.260413][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  748.273123][   T30] audit: type=1326 audit(1766473650.055:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a4b8f749 code=0x7ffc0000
[  749.419842][   T30] audit: type=1326 audit(1766473650.055:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a4b8f749 code=0x7ffc0000
[  749.505305][   T30] audit: type=1326 audit(1766473650.065:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27a4b8f749 code=0x7ffc0000
[  749.566257][   T30] audit: type=1326 audit(1766473650.065:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a4b8f749 code=0x7ffc0000
[  749.590641][   T30] audit: type=1326 audit(1766473650.065:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a4b8f749 code=0x7ffc0000
[  749.614502][   T30] audit: type=1326 audit(1766473650.065:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27a4b8f749 code=0x7ffc0000
[  749.771894][   T30] audit: type=1326 audit(1766473650.065:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a4b8f749 code=0x7ffc0000
[  750.147361][   T30] audit: type=1326 audit(1766473650.065:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a4b8f749 code=0x7ffc0000
[  750.271751][   T30] audit: type=1326 audit(1766473650.065:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27a4b8f749 code=0x7ffc0000
[  750.320559][   T30] audit: type=1326 audit(1766473650.075:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.2.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a4b8f749 code=0x7ffc0000
[  750.412611][T11901] block nbd6: NBD_DISCONNECT
[  750.499599][T11907] netlink: 107460 bytes leftover after parsing attributes in process `syz.8.1149'.
[  750.630812][ T6305] Bluetooth: hci5: Frame reassembly failed (-84)
[  752.411407][T11130] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  752.592960][T11422] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  752.601707][T11130] usb 3-1: Using ep0 maxpacket: 32
[  752.663692][T11130] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  752.678039][T11130] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  752.687659][T11130] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  752.696165][T11130] usb 3-1: Product: syz
[  752.700389][T11130] usb 3-1: Manufacturer: syz
[  752.705800][T11130] usb 3-1: SerialNumber: syz
[  752.713399][T11130] usb 3-1: config 0 descriptor??
[  752.721741][T11912] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  753.085302][ T9638] usb 3-1: USB disconnect, device number 24
[  754.225363][T11931] /dev/nullb0: Can't open blockdev
[  758.861467][T11963] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  758.988896][  T975] IPVS: starting estimator thread 0...
[  759.054008][T11965] netlink: 'syz.6.1162': attribute type 2 has an invalid length.
[  759.408870][T11964] IPVS: using max 45 ests per chain, 108000 per kthread
[  759.420716][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  759.420736][   T30] audit: type=1400 audit(1766473661.385:1196): avc:  denied  { shutdown } for  pid=11960 comm="syz.2.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  759.802435][T11972] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  759.814189][T11972] cramfs: wrong magic
[  761.131955][ T6306] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  762.227097][T11986] x_tables: ip_tables: osf match: only valid for protocol 6
[  765.488488][T12010] random: crng reseeded on system resumption
[  765.606264][    C0] hrtimer: interrupt took 21912 ns
[  767.202875][   T30] audit: type=1400 audit(1766473668.965:1197): avc:  denied  { bind } for  pid=12017 comm="syz.3.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  767.899679][T12030] comedi comedi0: Minor 3 could not be opened
[  768.372520][   T30] audit: type=1400 audit(1766473670.315:1198): avc:  denied  { read } for  pid=12027 comm="syz.3.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  769.526885][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1178'.
[  770.295927][T12037] ntfs3(nullb0): Primary boot signature is not NTFS.
[  770.327633][T12037] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  770.913561][T12050] siw: device registration error -23
[  772.266544][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'.
[  774.456942][T12076] tmpfs: Bad value for 'mpol'
[  775.779388][   T30] audit: type=1400 audit(1766473677.585:1199): avc:  denied  { accept } for  pid=12066 comm="syz.3.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  776.112683][T12098] overlayfs: failed to resolve './bus': -2
[  776.477311][   T30] audit: type=1400 audit(1766473677.635:1200): avc:  denied  { listen } for  pid=12066 comm="syz.3.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  776.585568][   T30] audit: type=1400 audit(1766473677.655:1201): avc:  denied  { setopt } for  pid=12088 comm="syz.6.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  779.581872][ T6443] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  779.863147][   T30] audit: type=1400 audit(1766473681.905:1202): avc:  denied  { unmount } for  pid=10116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  780.319229][ T6443] usb 7-1: config 0 has an invalid interface number: 249 but max is 0
[  780.330331][ T6443] usb 7-1: config 0 has no interface number 0
[  780.344693][ T6443] usb 7-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  780.362245][ T6443] usb 7-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  780.373889][ T6443] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87
[  780.385046][ T6443] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.718729][ T6443] usb 7-1: config 0 descriptor??
[  780.735750][ T6443] port100 7-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint
[  780.917081][T12143] gfs2: block size(16384) > page size(4096) not supported by filesystem
[  781.160983][ T6443] usb 7-1: USB disconnect, device number 9
[  782.816252][   T30] audit: type=1400 audit(1766473684.275:1203): avc:  denied  { name_bind } for  pid=12149 comm="syz.9.1202" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  784.167515][T12161] delete_channel: no stack
[  784.317405][T12165] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[  784.323937][T12165] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  785.461447][T12165] vhci_hcd vhci_hcd.0: Device attached
[  785.731921][T11129] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  785.741703][T11130] usb 50-1: SetAddress Request (2) to port 0
[  785.747741][T11130] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd
[  785.917680][T11129] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  785.965049][T11129] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  785.995035][T12166] vhci_hcd: connection reset by peer
[  786.004564][T11129] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  786.017816][   T78] vhci_hcd vhci_hcd.8: stop threads
[  786.068908][   T78] vhci_hcd vhci_hcd.8: release socket
[  786.077763][T11129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.089190][   T78] vhci_hcd vhci_hcd.8: disconnect device
[  786.158475][T12170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  786.206313][T11129] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  787.721249][   T30] audit: type=1400 audit(1766473689.755:1204): avc:  denied  { write } for  pid=12190 comm="syz.9.1210" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  788.191841][ T9638] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  788.361742][ T9638] usb 9-1: Using ep0 maxpacket: 16
[  788.394968][ T9638] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  788.431709][ T9638] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  788.471717][ T9638] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  788.497938][ T9638] usb 9-1: config 0 descriptor??
[  788.516894][ T9638] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input17
[  788.606676][T10941] usb 4-1: USB disconnect, device number 16
[  788.681681][ T6443] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  788.855827][   T30] audit: type=1400 audit(1766473690.765:1205): avc:  denied  { bind } for  pid=12195 comm="syz.8.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  789.457606][T12202] input: syz0 as /devices/virtual/input/input18
[  789.849107][ T6443] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  789.886571][ T6443] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  789.918316][ T6443] usb 7-1: config 0 interface 0 has no altsetting 0
[  789.938259][ T6443] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  789.961712][ T6443] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  789.987392][ T6443] usb 7-1: Product: syz
[  789.998234][ T6443] usb 7-1: Manufacturer: syz
[  790.008335][ T6443] usb 7-1: SerialNumber: syz
[  790.026575][ T6443] usb 7-1: config 0 descriptor??
[  790.333074][T12209] netlink: 'syz.3.1214': attribute type 1 has an invalid length.
[  790.583580][ T6443] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22
[  790.692762][T12211] loop2: detected capacity change from 0 to 7
[  791.040340][T11130] usb 50-1: device descriptor read/8, error -110
[  791.094833][T12211] Dev loop2: unable to read RDB block 7
[  791.100525][T12211]  loop2: unable to read partition table
[  791.106382][T12211] loop2: partition table beyond EOD, truncated
[  791.112619][T12211] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  791.219139][ T5170] bcm5974 9-1:0.0: could not read from device
[  791.242582][T11350] udevd[11350]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  791.271103][ T9638] usb 9-1: USB disconnect, device number 6
[  791.278476][ T5170] bcm5974 9-1:0.0: could not read from device
[  791.299387][ T5170] bcm5974 9-1:0.0: could not read from device
[  791.518045][T11130] usb usb50-port1: attempt power cycle
[  791.550150][T12213] lo speed is unknown, defaulting to 1000
[  792.358858][T10941] usb 7-1: USB disconnect, device number 10
[  793.110954][T11130] usb usb50-port1: unable to enumerate USB device
[  795.077588][T10943] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  796.697393][T12247] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1220'.
[  796.721681][T12247] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1220'.
[  796.756674][T12247] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1220'.
[  798.159911][   T30] audit: type=1400 audit(1766473700.175:1206): avc:  denied  { connect } for  pid=12262 comm="syz.3.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  798.535061][ T9638] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  798.658976][   T30] audit: type=1800 audit(1766473700.255:1207): pid=12263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1226" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[  798.791703][ T9638] usb 4-1: device descriptor read/64, error -71
[  798.935955][   T30] audit: type=1400 audit(1766473700.255:1208): avc:  denied  { getopt } for  pid=12262 comm="syz.3.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  799.551861][ T9638] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  799.751573][ T9638] usb 4-1: device descriptor read/64, error -71
[  800.942018][ T9638] usb usb4-port1: attempt power cycle
[  800.952297][   T30] audit: type=1400 audit(1766473702.345:1209): avc:  denied  { bind } for  pid=12276 comm="syz.6.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  801.331808][   T55] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  801.511898][   T55] usb 10-1: Using ep0 maxpacket: 32
[  801.525855][   T55] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  801.555801][   T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.648839][   T55] usb 10-1: config 0 descriptor??
[  802.022456][T12290] binder: 12288:12290 ioctl 400c620e 0 returned -14
[  802.061927][T12290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12290 comm=syz.3.1235
[  802.236358][   T55] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  802.249251][   T55] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  802.262800][   T55] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  802.271935][   T55] usb 10-1: media controller created
[  802.289407][   T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  803.031698][T11129] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  803.309231][   T30] audit: type=1400 audit(1766473705.345:1210): avc:  denied  { append } for  pid=12303 comm="syz.3.1238" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  803.462744][T11129] usb 9-1: Using ep0 maxpacket: 32
[  803.469940][T11129] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  803.523508][   T55] az6027: usb out operation failed. (-71)
[  803.531468][T11129] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  804.061198][   T55] az6027: usb out operation failed. (-71)
[  804.067946][   T55] stb0899_attach: Driver disabled by Kconfig
[  804.074204][   T55] az6027: no front-end attached
[  804.074204][   T55] 
[  804.081915][   T55] az6027: usb out operation failed. (-71)
[  804.088576][   T55] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  804.092038][T11129] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  804.114762][   T55] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input20
[  804.126272][T11129] usb 9-1: Product: syz
[  804.148567][T11129] usb 9-1: Manufacturer: syz
[  804.230403][T11129] usb 9-1: SerialNumber: syz
[  804.242156][T11129] usb 9-1: config 0 descriptor??
[  804.252912][   T55] dvb-usb: schedule remote query interval to 400 msecs.
[  804.272573][T12293] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  804.300445][   T55] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  804.353015][   T55] usb 10-1: USB disconnect, device number 6
[  805.051193][   T30] audit: type=1804 audit(1766473707.085:1211): pid=12310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1240" name="/newroot/147/file0" dev="tmpfs" ino=829 res=1 errno=0
[  805.052897][T12310] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1
[  805.083156][T12310] ref_ctr increment failed for inode: 0x33d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807ab5d5c0
[  805.088857][T11129] usb 9-1: USB disconnect, device number 7
[  805.128289][   T55] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  805.231431][T12314] uprobe: syz.6.1240:12314 failed to unregister, leaking uprobe
[  805.330905][T12292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  807.240516][   T30] audit: type=1400 audit(1766473708.835:1212): avc:  denied  { setopt } for  pid=12325 comm="syz.8.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  807.924725][T12336] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1247'.
[  807.934182][T12336] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1247'.
[  808.472835][T12336] Process accounting resumed
[  808.538427][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  809.119203][T12346] sg_write: data in/out 477/14 bytes for SCSI command 0x0-- guessing data in;
[  809.119203][T12346]    program syz.3.1251 not setting count and/or reply_len properly
[  809.896001][   T30] audit: type=1400 audit(1766473711.925:1213): avc:  denied  { bind } for  pid=12350 comm="syz.2.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  811.173287][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1253'.
[  812.902244][    C1] sd 0:0:1:0: [sda] tag#2457 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  812.912782][    C1] sd 0:0:1:0: [sda] tag#2457 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00
[  813.068350][   T30] audit: type=1326 audit(1766473715.105:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.8.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca778f749 code=0x7ffc0000
[  813.149207][   T30] audit: type=1326 audit(1766473715.105:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.8.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca778f749 code=0x7ffc0000
[  813.256721][   T30] audit: type=1326 audit(1766473715.145:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.8.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feca778df90 code=0x7ffc0000
[  813.336774][   T30] audit: type=1326 audit(1766473715.145:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.8.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca778f749 code=0x7ffc0000
[  813.512836][   T30] audit: type=1326 audit(1766473715.145:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.8.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca778f749 code=0x7ffc0000
[  813.572124][   T30] audit: type=1326 audit(1766473715.145:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.8.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feca778f749 code=0x7ffc0000
[  813.625838][   T30] audit: type=1326 audit(1766473715.145:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.8.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca778f749 code=0x7ffc0000
[  813.687781][   T30] audit: type=1326 audit(1766473715.145:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.8.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca778f749 code=0x7ffc0000
[  813.747707][   T30] audit: type=1326 audit(1766473715.145:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.8.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7feca778f749 code=0x7ffc0000
[  814.667976][ T6443] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  815.569661][T12403] netlink: 107460 bytes leftover after parsing attributes in process `syz.9.1261'.
[  815.661787][ T6443] usb 7-1: Using ep0 maxpacket: 32
[  815.694414][ T6443] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  815.811407][ T6443] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  815.869382][ T6443] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  815.925768][ T6443] usb 7-1: Product: syz
[  815.959811][ T6443] usb 7-1: Manufacturer: syz
[  816.010001][ T6443] usb 7-1: SerialNumber: syz
[  816.156506][ T6443] usb 7-1: config 0 descriptor??
[  816.234818][T12392] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  817.149815][ T6443] usb 7-1: USB disconnect, device number 11
[  817.711899][ T5136] Bluetooth: hci5: command 0x1003 tx timeout
[  817.712187][T11422] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  818.982819][T12391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  820.061679][T10941] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  820.221772][T10941] usb 7-1: Using ep0 maxpacket: 32
[  820.719249][T10941] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  820.740566][T10941] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  820.754397][T10941] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  820.763208][T10941] usb 7-1: Product: syz
[  820.767394][T10941] usb 7-1: Manufacturer: syz
[  820.773314][T10941] usb 7-1: SerialNumber: syz
[  820.792421][T10941] usb 7-1: config 0 descriptor??
[  820.802407][T12418] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  821.127133][  T975] usb 7-1: USB disconnect, device number 12
[  821.155420][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  821.155437][   T30] audit: type=1400 audit(1766473723.195:1255): avc:  denied  { setopt } for  pid=12426 comm="syz.9.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  821.619551][T12417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  822.142886][   T30] audit: type=1400 audit(1766473724.185:1256): avc:  denied  { read } for  pid=12444 comm="syz.3.1268" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  822.195763][   T30] audit: type=1400 audit(1766473724.205:1257): avc:  denied  { open } for  pid=12444 comm="syz.3.1268" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  822.899925][   T30] audit: type=1400 audit(1766473724.205:1258): avc:  denied  { ioctl } for  pid=12444 comm="syz.3.1268" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  823.044428][T12451] tc_dump_action: action bad kind
[  824.209455][ T5136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  824.231024][ T5136] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  824.324650][ T5136] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  824.343396][ T5136] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  824.351018][ T5136] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  824.371394][T11422] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  824.381993][T11422] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  824.391131][T11422] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  824.404225][T11422] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  824.416018][T11422] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  824.483726][T12462] lo speed is unknown, defaulting to 1000
[  825.816986][T12471] netdevsim netdevsim9 netdevsim0: entered allmulticast mode
[  825.838637][T12471] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  825.875068][T12472] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  825.970595][T12477] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1276'.
[  826.626666][T11422] Bluetooth: hci5: command tx timeout
[  826.700445][ T5889] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  827.064263][ T5889] usb 7-1: Using ep0 maxpacket: 32
[  827.071824][ T6299] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  827.100535][ T5889] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  827.211989][T12400] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  827.290771][ T5889] usb 7-1: config 0 has no interface number 0
[  827.329348][T11881] udevd[11881]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  827.348086][ T5889] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  827.522383][T12400] usb 4-1: Using ep0 maxpacket: 32
[  827.599759][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.615709][T11350] udevd[11350]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  827.625492][T12400] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  827.643225][ T5889] usb 7-1: Product: syz
[  827.657871][ T5889] usb 7-1: Manufacturer: syz
[  827.683461][T12400] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  827.699853][ T5889] usb 7-1: SerialNumber: syz
[  827.731836][T12400] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  827.743981][ T5889] usb 7-1: config 0 descriptor??
[  827.810338][T12400] usb 4-1: Product: syz
[  827.816524][ T5889] smsc95xx v2.0.0
[  827.820182][ T5889] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  827.840477][T12400] usb 4-1: Manufacturer: syz
[  827.849181][T12400] usb 4-1: SerialNumber: syz
[  827.866224][ T5889] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22
[  827.899996][T12400] usb 4-1: config 0 descriptor??
[  827.935376][T12483] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  828.087064][T12462] chnl_net:caif_netlink_parms(): no params data found
[  828.453704][T12400] usb 4-1: USB disconnect, device number 20
[  828.671980][T11422] Bluetooth: hci5: command tx timeout
[  828.938635][T12482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  829.166005][T12462] bridge0: port 1(bridge_slave_0) entered blocking state
[  829.200285][T12462] bridge0: port 1(bridge_slave_0) entered disabled state
[  829.223530][T12462] bridge_slave_0: entered allmulticast mode
[  829.286736][T12462] bridge_slave_0: entered promiscuous mode
[  829.335514][T12462] bridge0: port 2(bridge_slave_1) entered blocking state
[  829.396552][T12462] bridge0: port 2(bridge_slave_1) entered disabled state
[  829.437185][T12462] bridge_slave_1: entered allmulticast mode
[  829.642740][T12462] bridge_slave_1: entered promiscuous mode
[  830.271062][T12522] tmpfs: Bad value for 'mpol'
[  830.437888][T12462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  830.611829][   T30] audit: type=1400 audit(1766473733.612:1259): avc:  denied  { ioctl } for  pid=12520 comm="syz.9.1285" path="socket:[36625]" dev="sockfs" ino=36625 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  830.752096][T11422] Bluetooth: hci5: command tx timeout
[  830.890689][T12462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  832.001362][   T30] audit: type=1400 audit(1766473734.872:1260): avc:  denied  { bind } for  pid=12521 comm="syz.8.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  832.148595][T12462] team0: Port device team_slave_0 added
[  832.244908][T12462] team0: Port device team_slave_1 added
[  832.261773][ T5889] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  832.300898][T12400] usb 7-1: USB disconnect, device number 13
[  832.481692][ T5889] usb 10-1: Using ep0 maxpacket: 32
[  832.488927][ T5889] usb 10-1: config 0 has an invalid interface number: 157 but max is 0
[  832.498088][ T5889] usb 10-1: config 0 has no interface number 0
[  833.015936][T11422] Bluetooth: hci5: command tx timeout
[  833.022805][T12545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31988 sclass=netlink_route_socket pid=12545 comm=syz.6.1288
[  833.032473][ T5889] usb 10-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=1b.b7
[  833.067150][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.142663][T11129] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  833.413750][ T5889] usb 10-1: Product: syz
[  833.418019][ T5889] usb 10-1: Manufacturer: syz
[  833.473173][ T5889] usb 10-1: SerialNumber: syz
[  833.492583][ T5889] usb 10-1: config 0 descriptor??
[  833.514609][ T5889] mct_u232 10-1:0.157: MCT U232 converter detected
[  833.524083][T11129] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  833.532663][ T5889] mct_u232 ttyUSB0: expected endpoint missing
[  833.555501][T11129] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  833.592449][T11129] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.623172][T11129] usb 9-1: config 0 descriptor??
[  833.629062][T12543] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  833.888098][T12556] netlink: 'syz.3.1290': attribute type 10 has an invalid length.
[  834.873925][T12556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  835.041352][T12462] batman_adv: batadv0: Adding interface: batadv_slave_0
[  835.054229][T12462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  835.100140][T12539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  835.133981][T12539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  835.161990][T12462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  835.230981][T11129] usbhid 9-1:0.0: can't add hid device: -71
[  835.236558][T12462] batman_adv: batadv0: Adding interface: batadv_slave_1
[  835.263393][T12462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  835.300201][T12568] Bluetooth: MGMT ver 1.23
[  835.368987][T12462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  835.724017][  T975] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  836.199315][T11129] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  836.207927][T11130] usb 10-1: USB disconnect, device number 7
[  836.215412][T11130] mct_u232 10-1:0.157: device disconnected
[  836.224483][T11129] usb 9-1: USB disconnect, device number 8
[  836.250428][T12462] hsr_slave_0: entered promiscuous mode
[  836.292812][T12462] hsr_slave_1: entered promiscuous mode
[  836.934595][  T975] usb 4-1: Using ep0 maxpacket: 32
[  838.209382][   T30] audit: type=1400 audit(1766473739.562:1261): avc:  denied  { setopt } for  pid=12569 comm="syz.9.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  838.292053][   T30] audit: type=1400 audit(1766473739.562:1262): avc:  denied  { read } for  pid=12569 comm="syz.9.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  838.341297][  T975] usb 4-1: unable to read config index 0 descriptor/start: -71
[  838.393481][  T975] usb 4-1: can't read configurations, error -71
[  839.448956][   T30] audit: type=1400 audit(1766473742.492:1263): avc:  denied  { append } for  pid=12581 comm="syz.9.1297" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  840.533711][T12594] bridge0: entered promiscuous mode
[  840.565377][T12594] bridge0: entered allmulticast mode
[  840.832920][T12581] [U] é
[  843.912692][   T30] audit: type=1400 audit(1766473746.552:1264): avc:  denied  { mounton } for  pid=12631 comm="syz.8.1303" path="/syzcgroup/unified/syz8" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  843.984585][T12638] futex_wake_op: syz.6.1304 tries to shift op by -1; fix this program
[  844.292766][T12640] usb usb8: usbfs: process 12640 (syz.6.1304) did not claim interface 12 before use
[  844.357519][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1304'.
[  844.672100][   T30] audit: type=1400 audit(1766473747.722:1265): avc:  denied  { write } for  pid=12643 comm="syz.6.1307" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  845.118448][T12655] Cannot find set identified by id 0 to match
[  845.208238][T11130] usb 4-1: new low-speed USB device number 23 using dummy_hcd
[  845.453452][T11130] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  845.525151][T11130] usb 4-1: config 0 has no interfaces?
[  845.530685][T11130] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  845.572858][T11130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  845.585097][T11130] usb 4-1: config 0 descriptor??
[  847.884666][    T9] usb 4-1: USB disconnect, device number 23
[  849.266031][ T6302] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.775625][ T6302] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  850.294873][T12462] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  850.499823][T12462] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  850.839834][ T6302] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  850.866678][T12462] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  851.196618][T12707] netlink: 'syz.9.1311': attribute type 10 has an invalid length.
[  851.209105][T12707] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1311'.
[  851.218689][T12462] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  851.284020][T12705] bridge0: entered promiscuous mode
[  851.294521][T12707] dummy0: entered promiscuous mode
[  851.303312][T12707] bridge0: port 3(dummy0) entered blocking state
[  851.315811][T12707] bridge0: port 3(dummy0) entered disabled state
[  851.327401][T12707] dummy0: entered allmulticast mode
[  851.460531][ T6302] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.552551][T11130] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  851.588870][T12701] bridge0: left promiscuous mode
[  851.727190][T11130] usb 10-1: config 0 interface 0 has no altsetting 0
[  851.743559][T11130] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  851.790308][T11130] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.838439][T11130] usb 10-1: config 0 descriptor??
[  851.875226][T12462] 8021q: adding VLAN 0 to HW filter on device bond0
[  851.904076][T12462] 8021q: adding VLAN 0 to HW filter on device team0
[  851.939352][T11306] bridge0: port 1(bridge_slave_0) entered blocking state
[  851.946542][T11306] bridge0: port 1(bridge_slave_0) entered forwarding state
[  852.113435][T11306] bridge0: port 2(bridge_slave_1) entered blocking state
[  852.120677][T11306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  852.627185][T11130]  (null): keene_cmd_main failed (-110)
[  852.638185][T11130] video4linux radio48: keene_cmd_main failed (-32)
[  852.652426][ T6302] bridge_slave_1: left allmulticast mode
[  852.660486][T11130] radio-keene 10-1:0.0: V4L2 device registered as radio48
[  852.668678][ T6302] bridge_slave_1: left promiscuous mode
[  852.697162][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state
[  852.719650][ T6302] bridge_slave_0: left allmulticast mode
[  852.782777][ T6302] bridge_slave_0: left promiscuous mode
[  852.798920][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state
[  853.591565][   T30] audit: type=1400 audit(1766473756.622:1266): avc:  denied  { setopt } for  pid=12736 comm="syz.3.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  853.649214][   T30] audit: type=1400 audit(1766473756.632:1267): avc:  denied  { create } for  pid=12736 comm="syz.3.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  853.734867][   T30] audit: type=1400 audit(1766473756.632:1268): avc:  denied  { create } for  pid=12736 comm="syz.3.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  853.817366][   T30] audit: type=1400 audit(1766473756.632:1269): avc:  denied  { write } for  pid=12736 comm="syz.3.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  853.890986][   T30] audit: type=1400 audit(1766473756.632:1270): avc:  denied  { read } for  pid=12736 comm="syz.3.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  853.944520][   T30] audit: type=1400 audit(1766473756.722:1271): avc:  denied  { ioctl } for  pid=12697 comm="syz.9.1311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  854.028671][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1317'.
[  854.046423][   T30] audit: type=1400 audit(1766473756.732:1272): avc:  denied  { search } for  pid=12742 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  854.126868][   T30] audit: type=1400 audit(1766473756.732:1273): avc:  denied  { search } for  pid=12742 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  854.269349][   T30] audit: type=1400 audit(1766473756.732:1274): avc:  denied  { search } for  pid=12742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  854.292802][   T30] audit: type=1400 audit(1766473756.732:1275): avc:  denied  { search } for  pid=12742 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  854.918315][ T5875] usb 10-1: USB disconnect, device number 8
[  855.463121][ T6302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  855.482500][ T6302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  855.495924][ T6302] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  855.524332][ T6302] bond0 (unregistering): Released all slaves
[  856.570169][T12726] bridge_slave_1: left allmulticast mode
[  856.578851][T12726] bridge_slave_1: left promiscuous mode
[  856.585118][T12726] bridge0: port 2(bridge_slave_1) entered disabled state
[  856.600074][T12726] bridge_slave_0: left allmulticast mode
[  856.605975][T12726] bridge_slave_0: left promiscuous mode
[  856.612053][T12726] bridge0: port 1(bridge_slave_0) entered disabled state
[  856.955397][T12462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  856.981660][T12462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  858.396180][T12783] tipc: Enabled bearer <eth:gre0>, priority 10
[  859.122939][ T6051] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  859.345184][   T30] kauditd_printk_skb: 41 callbacks suppressed
[  859.345217][   T30] audit: type=1400 audit(1766473762.382:1317): avc:  denied  { prog_load } for  pid=12798 comm="syz.3.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  859.732627][   T30] audit: type=1400 audit(1766473762.382:1318): avc:  denied  { bpf } for  pid=12798 comm="syz.3.1322" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  859.755726][   T30] audit: type=1400 audit(1766473762.722:1319): avc:  denied  { search } for  pid=12803 comm="sed" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  859.781139][   T30] audit: type=1400 audit(1766473762.722:1320): avc:  denied  { read } for  pid=12803 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  859.811098][   T30] audit: type=1400 audit(1766473762.722:1321): avc:  denied  { open } for  pid=12803 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  859.915643][   T30] audit: type=1400 audit(1766473762.722:1322): avc:  denied  { getattr } for  pid=12803 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  859.951718][   T30] audit: type=1400 audit(1766473762.972:1323): avc:  denied  { read write } for  pid=5812 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  860.030524][T12462] 8021q: adding VLAN 0 to HW filter on device batadv0
[  860.092487][   T30] audit: type=1400 audit(1766473762.972:1324): avc:  denied  { open } for  pid=5812 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  860.221908][   T30] audit: type=1400 audit(1766473762.972:1325): avc:  denied  { ioctl } for  pid=5812 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  860.251234][T12462] veth0_vlan: entered promiscuous mode
[  860.292267][T12462] veth1_vlan: entered promiscuous mode
[  860.360761][   T30] audit: type=1400 audit(1766473763.352:1326): avc:  denied  { read } for  pid=12810 comm="syz.3.1327" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  860.446385][T12462] veth0_macvtap: entered promiscuous mode
[  860.467231][T12462] veth1_macvtap: entered promiscuous mode
[  860.623146][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  860.630560][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_0
[  860.712543][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  860.719970][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_1
[  860.753873][ T6302] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  860.761939][ T6302] batman_adv: batadv0: Removing interface: virt_wifi0
[  860.787755][T12821] futex_wake_op: syz.9.1325 tries to shift op by -1; fix this program
[  861.165961][ T6302] veth1_macvtap: left promiscuous mode
[  861.192144][ T6302] veth0_macvtap: left promiscuous mode
[  861.351298][ T6302] veth1_vlan: left promiscuous mode
[  861.523194][ T6302] veth0_vlan: left promiscuous mode
[  862.051045][T12835] siw: device registration error -23
[  863.038094][ T5889] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  863.197115][T12850] 9p: Bad value for 'rfdno'
[  863.260290][ T5889] usb 10-1: Using ep0 maxpacket: 32
[  863.285582][ T5889] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  863.357369][ T5889] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  863.413623][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  863.461293][ T5889] usb 10-1: Product: syz
[  863.496372][ T5889] usb 10-1: Manufacturer: syz
[  863.520302][ T5889] usb 10-1: SerialNumber: syz
[  863.617348][ T5889] usb 10-1: config 0 descriptor??
[  863.660364][T12839] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  864.734582][   T30] kauditd_printk_skb: 42 callbacks suppressed
[  864.734600][   T30] audit: type=1400 audit(1766473767.352:1369): avc:  denied  { ioctl } for  pid=12852 comm="syz.3.1332" path="socket:[37830]" dev="sockfs" ino=37830 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  864.802010][   T30] audit: type=1400 audit(1766473767.442:1370): avc:  denied  { mounton } for  pid=12852 comm="syz.3.1332" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  864.905514][   T30] audit: type=1400 audit(1766473767.952:1371): avc:  denied  { prog_run } for  pid=12858 comm="syz.8.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  865.031027][ T5889] usb 10-1: USB disconnect, device number 9
[  865.042362][   T30] audit: type=1400 audit(1766473768.022:1372): avc:  denied  { create } for  pid=12837 comm="syz.9.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  865.437522][   T30] audit: type=1400 audit(1766473768.342:1373): avc:  denied  { write } for  pid=12858 comm="syz.8.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  865.461732][   T30] audit: type=1400 audit(1766473768.362:1374): avc:  denied  { create } for  pid=12858 comm="syz.8.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  865.487152][   T30] audit: type=1400 audit(1766473768.402:1375): avc:  denied  { append } for  pid=12858 comm="syz.8.1333" name="sg0" dev="devtmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  865.569311][   T30] audit: type=1400 audit(1766473768.402:1376): avc:  denied  { open } for  pid=12858 comm="syz.8.1333" path="/dev/sg0" dev="devtmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  865.594631][   T30] audit: type=1400 audit(1766473768.462:1377): avc:  denied  { ioctl } for  pid=12858 comm="syz.8.1333" path="/dev/sg0" dev="devtmpfs" ino=794 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  865.621457][   T30] audit: type=1400 audit(1766473768.612:1378): avc:  denied  { create } for  pid=12837 comm="syz.9.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  867.438045][ T6302] team0 (unregistering): Port device team_slave_1 removed
[  867.495963][ T6306] smc: removing ib device syz2
[  867.496030][ T6302] team0 (unregistering): Port device team_slave_0 removed
[  868.022592][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1328'.
[  868.108874][ T5875] syz2: Port: 1 Link DOWN
[  868.255143][T12462] batman_adv: batadv0: Interface activated: batadv_slave_0
[  868.315139][T12462] batman_adv: batadv0: Interface activated: batadv_slave_1
[  868.354902][ T6286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  868.384820][ T6286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  868.494842][ T6286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  868.545577][T12878] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  868.605787][ T6286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  868.729513][T12860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  869.752815][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  869.752831][   T30] audit: type=1400 audit(1766473772.352:1393): avc:  denied  { allowed } for  pid=12883 comm="syz.9.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  869.957741][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  869.981539][   T30] audit: type=1400 audit(1766473772.352:1394): avc:  denied  { map } for  pid=12883 comm="syz.9.1338" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  870.061829][   T30] audit: type=1400 audit(1766473772.362:1395): avc:  denied  { read write } for  pid=12883 comm="syz.9.1338" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  870.186345][   T30] audit: type=1400 audit(1766473772.452:1396): avc:  denied  { execute } for  pid=12883 comm="syz.9.1338" path="/76/blkio.bfq.io_service_bytes" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  870.337341][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  870.381844][   T30] audit: type=1400 audit(1766473772.532:1397): avc:  denied  { write } for  pid=12883 comm="syz.9.1338" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  870.411830][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  870.468063][   T30] audit: type=1400 audit(1766473772.532:1398): avc:  denied  { connect } for  pid=12883 comm="syz.9.1338" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  870.520600][   T30] audit: type=1400 audit(1766473772.532:1399): avc:  denied  { name_connect } for  pid=12883 comm="syz.9.1338" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  870.610729][   T30] audit: type=1400 audit(1766473773.312:1400): avc:  denied  { unmount } for  pid=8419 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  871.100858][   T30] audit: type=1400 audit(1766473773.362:1401): avc:  denied  { unmount } for  pid=8419 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  871.226542][   T30] audit: type=1400 audit(1766473773.432:1402): avc:  denied  { read write } for  pid=12892 comm="syz.9.1340" name="sg0" dev="devtmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  871.233327][T12905] netlink: 2716 bytes leftover after parsing attributes in process `syz.3.1335'.
[  871.262966][T12905] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  871.627251][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.657060][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  874.068136][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1345'.
[  874.089918][T11129] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  874.442838][T11129] usb 9-1: config 0 has an invalid interface number: 249 but max is 0
[  874.634307][T11129] usb 9-1: config 0 has no interface number 0
[  874.812609][T11129] usb 9-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  874.871774][T11129] usb 9-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  875.204043][T11129] usb 9-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87
[  875.222916][T11129] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.372698][T11129] usb 9-1: config 0 descriptor??
[  875.384623][T11129] usb 9-1: can't set config #0, error -71
[  876.478311][ T6302] IPVS: stop unused estimator thread 0...
[  876.662008][T11129] usb 9-1: USB disconnect, device number 9
[  876.996768][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  876.996801][   T30] audit: type=1400 audit(1766473779.982:1430): avc:  denied  { read } for  pid=12937 comm="syz.8.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  877.216578][   T30] audit: type=1400 audit(1766473780.002:1431): avc:  denied  { mount } for  pid=12937 comm="syz.8.1347" name="/" dev="autofs" ino=38527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  877.377666][   T30] audit: type=1400 audit(1766473780.422:1432): avc:  denied  { unmount } for  pid=10116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  877.504633][   T30] audit: type=1400 audit(1766473780.452:1433): avc:  denied  { map } for  pid=12920 comm="syz.6.1342" path="socket:[38530]" dev="sockfs" ino=38530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  878.107755][   T30] audit: type=1400 audit(1766473780.982:1434): avc:  denied  { create } for  pid=12949 comm="syz.8.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  878.307441][   T30] audit: type=1400 audit(1766473780.992:1435): avc:  denied  { setopt } for  pid=12949 comm="syz.8.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  878.634195][   T30] audit: type=1400 audit(1766473781.062:1436): avc:  denied  { write } for  pid=12949 comm="syz.8.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  878.799284][   T30] audit: type=1400 audit(1766473781.192:1437): avc:  denied  { create } for  pid=12952 comm="syz.1.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  879.418392][   T30] audit: type=1400 audit(1766473781.192:1438): avc:  denied  { read write } for  pid=12952 comm="syz.1.1343" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  879.479429][   T30] audit: type=1400 audit(1766473781.192:1439): avc:  denied  { open } for  pid=12952 comm="syz.1.1343" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  882.358998][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  882.359029][   T30] audit: type=1400 audit(1766473785.332:1450): avc:  denied  { create } for  pid=12987 comm="syz.1.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  882.750912][   T30] audit: type=1400 audit(1766473785.342:1451): avc:  denied  { getopt } for  pid=12987 comm="syz.1.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  882.816798][   T30] audit: type=1400 audit(1766473785.342:1452): avc:  denied  { write } for  pid=12987 comm="syz.1.1357" name="radio4" dev="devtmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  882.842936][   T30] audit: type=1400 audit(1766473785.342:1453): avc:  denied  { write } for  pid=12987 comm="syz.1.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  882.867267][   T30] audit: type=1400 audit(1766473785.342:1454): avc:  denied  { write } for  pid=12987 comm="syz.1.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  883.021907][   T30] audit: type=1400 audit(1766473785.352:1455): avc:  denied  { setopt } for  pid=12987 comm="syz.1.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  883.191951][   T30] audit: type=1400 audit(1766473785.352:1456): avc:  denied  { read } for  pid=12987 comm="syz.1.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  884.013327][   T30] audit: type=1400 audit(1766473785.772:1457): avc:  denied  { read write } for  pid=12968 comm="syz.3.1352" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  884.148323][   T30] audit: type=1400 audit(1766473785.772:1458): avc:  denied  { open } for  pid=12968 comm="syz.3.1352" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  884.271185][   T30] audit: type=1400 audit(1766473785.792:1459): avc:  denied  { ioctl } for  pid=12968 comm="syz.3.1352" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  884.493320][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1359'.
[  885.292029][T11129] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  885.514108][T11129] usb 10-1: Using ep0 maxpacket: 16
[  885.529102][T13022] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(15)
[  885.533283][T11129] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  885.535736][T13022] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  885.592785][T13003] fuse: Bad value for 'fd'
[  885.596531][T13022] vhci_hcd vhci_hcd.0: Device attached
[  885.597337][T13025] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(18)
[  885.609458][T13025] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  885.621734][T11129] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  885.665690][T11129] usb 10-1: Product: syz
[  885.673433][T13022] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(17)
[  885.677516][T11129] usb 10-1: Manufacturer: syz
[  885.680064][T13022] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  885.700903][T13022] vhci_hcd vhci_hcd.0: Device attached
[  885.714797][T13025] vhci_hcd vhci_hcd.0: Device attached
[  885.720981][T11129] usb 10-1: SerialNumber: syz
[  885.735021][T13033] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(20)
[  885.741654][T13033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  885.750837][T13033] vhci_hcd vhci_hcd.0: Device attached
[  885.755013][T11129] r8152-cfgselector 10-1: Unknown version 0x0000
[  885.812437][T11129] r8152-cfgselector 10-1: config 0 descriptor??
[  885.832502][T11129] hub 10-1:0.0: bad descriptor, ignoring hub
[  885.853578][T11129] hub 10-1:0.0: probe with driver hub failed with error -5
[  885.861768][T10941] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[  885.953040][T13033] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  885.977479][T13033] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  886.001905][T13022] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(22)
[  886.008547][T13022] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  886.022057][T13025] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(26)
[  886.028717][T13025] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  886.071884][T13025] vhci_hcd vhci_hcd.0: Device attached
[  886.072855][T13045] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  886.092374][T13022] vhci_hcd vhci_hcd.0: Device attached
[  886.247910][T13042] vhci_hcd: connection closed
[  886.249912][ T6051] vhci_hcd vhci_hcd.6: stop threads
[  886.261906][T13040] vhci_hcd: connection closed
[  886.261981][T13035] vhci_hcd: connection closed
[  886.268286][T13026] vhci_hcd: connection closed
[  886.273394][T13031] vhci_hcd: connection closed
[  886.278236][T13023] vhci_hcd: connection reset by peer
[  886.311936][T11129] r8152-cfgselector 10-1: USB disconnect, device number 10
[  886.427073][ T6051] vhci_hcd vhci_hcd.6: release socket
[  887.145078][ T6051] vhci_hcd vhci_hcd.6: disconnect device
[  887.313685][ T6051] vhci_hcd vhci_hcd.6: stop threads
[  887.333636][ T6051] vhci_hcd vhci_hcd.6: release socket
[  887.365966][ T6051] vhci_hcd vhci_hcd.6: disconnect device
[  887.408058][ T6051] vhci_hcd vhci_hcd.6: stop threads
[  887.415235][ T6051] vhci_hcd vhci_hcd.6: release socket
[  887.465138][ T6051] vhci_hcd vhci_hcd.6: disconnect device
[  887.488445][ T6051] vhci_hcd vhci_hcd.6: stop threads
[  887.506927][ T6051] vhci_hcd vhci_hcd.6: release socket
[  887.719518][ T6051] vhci_hcd vhci_hcd.6: disconnect device
[  887.735246][ T6051] vhci_hcd vhci_hcd.6: stop threads
[  887.760151][ T6051] vhci_hcd vhci_hcd.6: release socket
[  888.252327][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  888.252364][   T30] audit: type=1400 audit(1766473791.262:1469): avc:  denied  { read write } for  pid=13059 comm="syz.1.1363" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  888.776355][ T6051] vhci_hcd vhci_hcd.6: disconnect device
[  889.303871][ T6051] vhci_hcd vhci_hcd.6: stop threads
[  889.344135][ T6051] vhci_hcd vhci_hcd.6: release socket
[  889.399989][ T6051] vhci_hcd vhci_hcd.6: disconnect device
[  889.414133][   T30] audit: type=1400 audit(1766473791.262:1470): avc:  denied  { open } for  pid=13059 comm="syz.1.1363" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  889.501318][   T30] audit: type=1400 audit(1766473791.502:1471): avc:  denied  { create } for  pid=13059 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  889.707576][   T30] audit: type=1400 audit(1766473792.312:1472): avc:  denied  { unmount } for  pid=12462 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  889.886348][T13080] sp0: Synchronizing with TNC
[  890.172546][   T30] audit: type=1400 audit(1766473792.352:1473): avc:  denied  { create } for  pid=13068 comm="syz.9.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  890.246801][T13077] random: crng reseeded on system resumption
[  890.397630][   T30] audit: type=1404 audit(1766473792.752:1474): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  890.500630][   T30] audit: type=1400 audit(1766473792.752:1475): avc:  denied  { ioctl } for  pid=13070 comm="syz.1.1364" path="/dev/video7" dev="devtmpfs" ino=951 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0
[  890.641857][   T30] audit: type=1400 audit(1766473792.832:1476): avc:  denied  { create } for  pid=13068 comm="syz.9.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  890.811101][   T30] audit: type=1404 audit(1766473793.252:1477): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  890.874297][   T30] audit: type=1400 audit(1766473793.292:1478): avc:  denied  { read } for  pid=13070 comm="syz.1.1364" dev="nsfs" ino=4026532817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  891.003957][T10941] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  891.074624][T10943] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  892.671673][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'.
[  892.803206][T13098] ieee802154 phy0 wpan0: encryption failed: -22
[  893.306620][   T30] kauditd_printk_skb: 73 callbacks suppressed
[  893.306661][   T30] audit: type=1400 audit(1766473796.352:1552): avc:  denied  { read write } for  pid=13114 comm="syz.3.1372" name="sg0" dev="devtmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  893.493135][T13125] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  893.634260][   T30] audit: type=1400 audit(1766473796.382:1553): avc:  denied  { open } for  pid=13114 comm="syz.3.1372" path="/dev/sg0" dev="devtmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  893.661808][   T55] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  893.831268][   T30] audit: type=1400 audit(1766473796.422:1554): avc:  denied  { ioctl } for  pid=13114 comm="syz.3.1372" path="/dev/sg0" dev="devtmpfs" ino=794 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  894.009367][   T55] usb 2-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config
[  894.031058][   T30] audit: type=1400 audit(1766473796.422:1555): avc:  denied  { write } for  pid=13121 comm="syz.1.1385" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  894.095646][   T55] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  894.183183][   T55] usb 2-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00
[  894.251712][   T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.287509][   T55] usb 2-1: config 0 descriptor??
[  894.317428][   T55] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  894.336888][   T30] audit: type=1400 audit(1766473797.382:1556): avc:  denied  { add_name } for  pid=13088 comm="dhcpcd-run-hook" name="resolv.conf.eth1.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  894.427487][   T30] audit: type=1400 audit(1766473797.412:1557): avc:  denied  { create } for  pid=13088 comm="dhcpcd-run-hook" name="resolv.conf.eth1.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  894.670290][   T30] audit: type=1400 audit(1766473797.412:1558): avc:  denied  { write } for  pid=13088 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.dhcp" dev="tmpfs" ino=6625 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  895.004366][   T30] audit: type=1400 audit(1766473797.412:1559): avc:  denied  { append } for  pid=13088 comm="dhcpcd-run-hook" name="resolv.conf.eth1.dhcp" dev="tmpfs" ino=6625 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  895.007912][T13136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  895.033548][T13136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  895.241759][   T30] audit: type=1400 audit(1766473797.582:1560): avc:  denied  { map_create } for  pid=13129 comm="syz.8.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  895.311939][   T30] audit: type=1400 audit(1766473797.592:1561): avc:  denied  { create } for  pid=13129 comm="syz.8.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  896.319457][T13141] use of bytesused == 0 is deprecated and will be removed in the future,
[  896.338636][T13141] use the actual size instead.
[  896.550570][   T55] usb 2-1: USB disconnect, device number 6
[  896.765958][T13163] Cannot find add_set index 0 as target
[  897.091734][   T55] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  897.271814][   T55] usb 2-1: Using ep0 maxpacket: 32
[  897.317754][   T55] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  897.377173][   T55] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  897.505956][   T55] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  897.990082][   T55] usb 2-1: Product: syz
[  897.998418][   T55] usb 2-1: Manufacturer: syz
[  898.006742][   T55] usb 2-1: SerialNumber: syz
[  898.019899][   T55] usb 2-1: config 0 descriptor??
[  898.052003][T13167] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  898.333483][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  898.333494][   T30] audit: type=1400 audit(1766473801.382:1581): avc:  denied  { write } for  pid=13166 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  898.383782][   T30] audit: type=1400 audit(1766473801.402:1582): avc:  denied  { create } for  pid=13166 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  898.403537][   T30] audit: type=1400 audit(1766473801.422:1583): avc:  denied  { bind } for  pid=13182 comm="syz.9.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  898.440008][   T30] audit: type=1400 audit(1766473801.422:1584): avc:  denied  { setopt } for  pid=13182 comm="syz.9.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  898.465912][   T30] audit: type=1400 audit(1766473801.422:1585): avc:  denied  { allowed } for  pid=13182 comm="syz.9.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  898.494505][T10941] usb 2-1: USB disconnect, device number 7
[  898.629699][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1382'.
[  898.650678][   T30] audit: type=1400 audit(1766473801.692:1586): avc:  denied  { read } for  pid=13182 comm="syz.9.1382" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  898.910449][   T30] audit: type=1400 audit(1766473801.692:1587): avc:  denied  { open } for  pid=13182 comm="syz.9.1382" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  899.798390][   T30] audit: type=1400 audit(1766473802.842:1588): avc:  denied  { setopt } for  pid=13208 comm="syz.6.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  899.885611][   T30] audit: type=1400 audit(1766473802.882:1589): avc:  denied  { setopt } for  pid=13208 comm="syz.6.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  900.889105][   T30] audit: type=1400 audit(1766473802.962:1590): avc:  denied  { bind } for  pid=13214 comm="syz.8.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  901.173845][T13187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  901.341765][T11129] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  901.532905][T11129] usb 4-1: Using ep0 maxpacket: 32
[  901.554052][T11129] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  901.595252][T11129] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  901.624832][T11129] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  901.661746][T11129] usb 4-1: Product: syz
[  901.669537][T11129] usb 4-1: Manufacturer: syz
[  901.691744][T11129] usb 4-1: SerialNumber: syz
[  901.727610][T11129] usb 4-1: config 0 descriptor??
[  901.983923][T13221] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  902.335771][T11129] usb 4-1: USB disconnect, device number 24
[  903.895945][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  903.895961][   T30] audit: type=1400 audit(1766473806.932:1602): avc:  denied  { create } for  pid=13253 comm="syz.6.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  904.436074][   T30] audit: type=1400 audit(1766473807.432:1603): avc:  denied  { create } for  pid=13248 comm="syz.9.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  904.628784][T13221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  904.806907][   T30] audit: type=1400 audit(1766473807.752:1604): avc:  denied  { write } for  pid=13253 comm="syz.6.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  905.159470][   T30] audit: type=1400 audit(1766473808.182:1605): avc:  denied  { write } for  pid=13248 comm="syz.9.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  905.221496][T13254] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  907.602180][   T30] audit: type=1400 audit(1766473810.082:1606): avc:  denied  { ioctl } for  pid=13274 comm="syz.8.1398" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  907.606586][  T975] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  907.810553][   T30] audit: type=1400 audit(1766473810.082:1607): avc:  denied  { set_context_mgr } for  pid=13274 comm="syz.8.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  909.434543][   T30] audit: type=1400 audit(1766473810.172:1608): avc:  denied  { bind } for  pid=13274 comm="syz.8.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  909.574753][   T30] audit: type=1400 audit(1766473810.172:1609): avc:  denied  { node_bind } for  pid=13274 comm="syz.8.1398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  909.626419][   T30] audit: type=1400 audit(1766473811.742:1610): avc:  denied  { bind } for  pid=13283 comm="syz.9.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  909.672141][  T975] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  909.677424][   T30] audit: type=1400 audit(1766473811.752:1611): avc:  denied  { connect } for  pid=13283 comm="syz.9.1399" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  909.732306][  T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  909.802933][  T975] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  909.873312][  T975] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  909.910106][  T975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  909.937795][  T975] usb 7-1: Product: syz
[  909.958281][   T30] audit: type=1400 audit(1766473811.762:1612): avc:  denied  { write } for  pid=13283 comm="syz.9.1399" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  910.010742][  T975] usb 7-1: Manufacturer: syz
[  910.032708][  T975] usb 7-1: SerialNumber: syz
[  910.064155][T13301] fuse: Bad value for 'fd'
[  910.071196][  T975] usb 7-1: config 0 descriptor??
[  910.198321][   T30] audit: type=1400 audit(1766473812.352:1613): avc:  denied  { create } for  pid=13264 comm="syz.6.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  910.261969][T13295] hub 1-0:1.0: USB hub found
[  910.439007][  T975] usb 7-1: USB disconnect, device number 14
[  910.464166][   T30] audit: type=1400 audit(1766473813.072:1614): avc:  denied  { write } for  pid=13276 comm="syz.1.1401" name="snmp6" dev="proc" ino=4026533643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  910.530610][T12186] udevd[12186]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  910.730293][T13295] hub 1-0:1.0: 1 port detected
[  910.927887][   T30] audit: type=1400 audit(1766473813.132:1615): avc:  denied  { ioctl } for  pid=13276 comm="syz.1.1401" path="socket:[40049]" dev="sockfs" ino=40049 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  911.311782][T13316] Cannot find set identified by id 0 to match
[  912.002353][   T30] audit: type=1400 audit(1766473814.582:1616): avc:  denied  { name_bind } for  pid=13294 comm="syz.3.1404" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  912.091718][   T30] audit: type=1400 audit(1766473814.582:1617): avc:  denied  { node_bind } for  pid=13294 comm="syz.3.1404" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  912.232286][T10941] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  912.411682][T10941] usb 9-1: Using ep0 maxpacket: 32
[  912.452475][T10941] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[  912.547979][T10941] usb 9-1: config 0 has no interface number 0
[  912.614601][T10941] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  912.704933][T10941] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  912.782501][T10941] usb 9-1: Product: syz
[  912.799008][T10941] usb 9-1: Manufacturer: syz
[  912.827126][T10941] usb 9-1: SerialNumber: syz
[  912.857999][T10941] usb 9-1: config 0 descriptor??
[  912.885097][T10941] smsc95xx v2.0.0
[  912.905210][T10941] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  912.938692][T10941] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -22
[  913.280561][T10941] usb 9-1: USB disconnect, device number 10
[  913.543928][T13341] siw: device registration error -23
[  915.040433][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  915.040451][   T30] audit: type=1400 audit(1766473817.612:1625): avc:  denied  { setopt } for  pid=13342 comm="syz.6.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  915.422284][   T30] audit: type=1400 audit(1766473817.632:1626): avc:  denied  { ioctl } for  pid=13342 comm="syz.6.1408" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  916.145237][   T55] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  916.341728][   T55] usb 2-1: Using ep0 maxpacket: 32
[  916.373982][   T55] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  916.401136][   T55] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  916.548355][   T55] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  916.641989][   T30] audit: type=1400 audit(1766473819.672:1627): avc:  denied  { create } for  pid=13358 comm="syz.8.1412" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  917.036596][   T55] usb 2-1: Product: syz
[  917.063921][   T55] usb 2-1: Manufacturer: syz
[  917.083508][   T55] usb 2-1: SerialNumber: syz
[  917.118686][   T55] usb 2-1: config 0 descriptor??
[  917.142394][T13350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  917.173700][   T30] audit: type=1400 audit(1766473820.222:1628): avc:  denied  { create } for  pid=13364 comm="syz.3.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  917.314613][   T30] audit: type=1400 audit(1766473820.252:1629): avc:  denied  { setopt } for  pid=13364 comm="syz.3.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  917.338224][   T30] audit: type=1400 audit(1766473820.342:1630): avc:  denied  { unlink } for  pid=10116 comm="syz-executor" name="file0" dev="tmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  917.478492][T10941] usb 2-1: USB disconnect, device number 8
[  918.878956][T13383] xt_NFQUEUE: number of total queues is 0
[  919.153367][   T30] audit: type=1400 audit(1766473822.202:1631): avc:  denied  { map } for  pid=13384 comm="syz.6.1409" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  919.563447][   T30] audit: type=1400 audit(1766473822.222:1632): avc:  denied  { execute } for  pid=13384 comm="syz.6.1409" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  919.647591][T13349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  920.149927][   T30] audit: type=1400 audit(1766473822.822:1633): avc:  denied  { read write } for  pid=13391 comm="syz.8.1418" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  920.292095][   T30] audit: type=1400 audit(1766473822.822:1634): avc:  denied  { open } for  pid=13391 comm="syz.8.1418" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  920.684336][   T30] audit: type=1400 audit(1766473822.962:1635): avc:  denied  { watch watch_reads } for  pid=13391 comm="syz.8.1418" path="/120" dev="tmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  920.965784][T13404] xt_ecn: cannot match TCP bits for non-tcp packets
[  921.131702][   T30] audit: type=1400 audit(1766473823.032:1636): avc:  denied  { create } for  pid=13391 comm="syz.8.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  921.181784][   T30] audit: type=1400 audit(1766473824.042:1637): avc:  denied  { bind } for  pid=13401 comm="syz.6.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  921.267317][   T30] audit: type=1400 audit(1766473824.052:1638): avc:  denied  { setopt } for  pid=13401 comm="syz.6.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  921.328185][   T30] audit: type=1400 audit(1766473824.082:1639): avc:  denied  { bind } for  pid=13401 comm="syz.6.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  921.452956][   T30] audit: type=1400 audit(1766473824.502:1640): avc:  denied  { getopt } for  pid=13407 comm="syz.9.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  921.571091][   T55] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  921.853535][T13413] bridge0: port 3(dummy0) entered blocking state
[  921.860002][T13413] bridge0: port 3(dummy0) entered listening state
[  921.866992][T13413] bridge0: port 2(bridge_slave_1) entered blocking state
[  921.874158][T13413] bridge0: port 2(bridge_slave_1) entered listening state
[  921.881506][T13413] bridge0: port 1(bridge_slave_0) entered blocking state
[  921.888780][T13413] bridge0: port 1(bridge_slave_0) entered listening state
[  922.066667][T13413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  922.125341][   T30] audit: type=1400 audit(1766473824.752:1641): avc:  denied  { shutdown } for  pid=13407 comm="syz.9.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  922.158395][T13412] ceph: No mds server is up or the cluster is laggy
[  922.165548][ T5965] libceph: connect (1)[c::]:6789 error -101
[  922.177908][ T5965] libceph: mon0 (1)[c::]:6789 connect error
[  922.228109][   T55] usb 2-1: config 0 has an invalid interface number: 249 but max is 0
[  922.240751][   T55] usb 2-1: config 0 has no interface number 0
[  922.247290][   T55] usb 2-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  922.265684][   T55] usb 2-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  922.387956][   T55] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87
[  922.455027][   T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.516552][   T55] usb 2-1: config 0 descriptor??
[  922.553282][   T55] port100 2-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint
[  922.741133][   T30] audit: type=1400 audit(1766473825.782:1642): avc:  denied  { firmware_load } for  pid=13418 comm="syz.9.1421" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  922.808069][  T975] usb 2-1: USB disconnect, device number 9
[  923.341464][   T55] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  923.383771][T13419] kvm: kvm [13418]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  923.422007][T13419] kvm: kvm [13418]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  923.502551][T13427] atomic_op ffff88802a5ad198 conn xmit_atomic 0000000000000000
[  923.563316][   T55] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  923.752357][   T55] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  923.775586][   T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.327972][   T55] usb 4-1: Product: syz
[  924.345600][   T55] usb 4-1: Manufacturer: syz
[  924.369098][   T55] usb 4-1: SerialNumber: syz
[  924.416869][   T55] usb 4-1: config 0 descriptor??
[  924.536380][   T55] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected
[  924.577509][   T55] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[  924.587539][   T55] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22
[  924.857169][T13441] siw: device registration error -23
[  925.321998][ T6029] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  925.522414][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  925.522452][   T30] audit: type=1400 audit(1766473828.542:1652): avc:  denied  { getopt } for  pid=13424 comm="syz.3.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  925.834765][   T30] audit: type=1400 audit(1766473828.552:1653): avc:  denied  { write } for  pid=13424 comm="syz.3.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  925.987839][T10941] usb 4-1: USB disconnect, device number 25
[  926.011085][T10941] garmin_gps 4-1:0.0: device disconnected
[  926.221994][   T55] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  926.384167][   T30] audit: type=1400 audit(1766473829.212:1654): avc:  denied  { ioctl } for  pid=13455 comm="syz.9.1431" path="socket:[40303]" dev="sockfs" ino=40303 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  926.470538][   T30] audit: type=1400 audit(1766473829.322:1655): avc:  denied  { mount } for  pid=13455 comm="syz.9.1431" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  926.510265][   T30] audit: type=1400 audit(1766473829.552:1656): avc:  denied  { unmount } for  pid=10688 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  926.544292][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'.
[  926.571690][   T55] usb 9-1: Using ep0 maxpacket: 32
[  926.602790][   T55] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  926.670894][   T55] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  926.693457][   T55] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  926.707913][   T55] usb 9-1: Product: syz
[  926.723528][   T55] usb 9-1: Manufacturer: syz
[  926.738728][   T30] audit: type=1400 audit(1766473829.732:1657): avc:  denied  { execute } for  pid=13459 comm="syz.9.1433" name="file2" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  926.771172][   T30] audit: type=1400 audit(1766473829.732:1658): avc:  denied  { execute_no_trans } for  pid=13459 comm="syz.9.1433" path="/99/file2" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  926.801388][   T55] usb 9-1: SerialNumber: syz
[  926.854112][   T55] usb 9-1: config 0 descriptor??
[  926.897712][T13453] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  927.853959][   T30] audit: type=1400 audit(1766473830.902:1659): avc:  denied  { sys_module } for  pid=13452 comm="syz.8.1430" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  927.899112][ T5938] usb 9-1: USB disconnect, device number 11
[  928.666686][   T30] audit: type=1400 audit(1766473831.562:1660): avc:  denied  { ioctl } for  pid=13477 comm="syz.9.1437" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  929.362120][   T30] audit: type=1400 audit(1766473831.882:1661): avc:  denied  { mounton } for  pid=13477 comm="syz.9.1437" path="/100/file0" dev="tmpfs" ino=550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  929.471360][T13489] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  930.708540][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  930.708561][   T30] audit: type=1400 audit(1766473833.742:1663): avc:  denied  { write } for  pid=13490 comm="syz.1.1438" path="socket:[41238]" dev="sockfs" ino=41238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  931.035293][   T30] audit: type=1400 audit(1766473833.752:1664): avc:  denied  { create } for  pid=13490 comm="syz.1.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  931.076979][T13452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  931.447154][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  931.459401][   T30] audit: type=1400 audit(1766473833.792:1665): avc:  denied  { write } for  pid=13490 comm="syz.1.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  931.859505][T13509] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1439'.
[  932.583743][   T30] audit: type=1400 audit(1766473835.632:1666): avc:  denied  { getopt } for  pid=13494 comm="syz.9.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  932.710303][T13507] Cannot find set identified by id 0 to match
[  932.988248][   T30] audit: type=1400 audit(1766473835.682:1667): avc:  denied  { mounton } for  pid=13505 comm="syz.8.1443" path="/syzcgroup/unified/syz8" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  936.761730][   T30] audit: type=1404 audit(1766473839.782:1668): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  936.973664][   T30] audit: type=1404 audit(1766473839.852:1669): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  937.031846][   T30] audit: type=1400 audit(1766473839.882:1670): avc:  denied  { name_bind } for  pid=13556 comm="syz.6.1450" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  937.088066][   T30] audit: type=1400 audit(1766473839.882:1671): avc:  denied  { read append } for  pid=13556 comm="syz.6.1450" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  937.149272][T13562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1448'.
[  937.171763][   T30] audit: type=1400 audit(1766473839.882:1672): avc:  denied  { open } for  pid=13556 comm="syz.6.1450" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  937.260926][   T30] audit: type=1400 audit(1766473839.882:1673): avc:  denied  { ioctl } for  pid=13556 comm="syz.6.1450" path="/dev/comedi3" dev="devtmpfs" ino=1279 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  937.395668][   T30] audit: type=1400 audit(1766473839.952:1674): avc:  denied  { read write } for  pid=8419 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  937.448991][   T30] audit: type=1400 audit(1766473839.952:1675): avc:  denied  { open } for  pid=8419 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  937.525498][   T30] audit: type=1400 audit(1766473839.952:1676): avc:  denied  { ioctl } for  pid=8419 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  937.610357][   T30] audit: type=1400 audit(1766473840.012:1677): avc:  denied  { search } for  pid=13558 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  938.231032][T13570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13570 comm=syz.8.1455
[  939.411602][T13579] xt_NFQUEUE: number of total queues is 0
[  941.799691][   T30] kauditd_printk_skb: 39 callbacks suppressed
[  941.799705][   T30] audit: type=1400 audit(1766473843.212:1717): avc:  denied  { read write } for  pid=13586 comm="syz.9.1453" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  941.834354][   T30] audit: type=1400 audit(1766473843.212:1718): avc:  denied  { open } for  pid=13586 comm="syz.9.1453" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  942.101946][   T30] audit: type=1400 audit(1766473843.222:1719): avc:  denied  { mounton } for  pid=13586 comm="syz.9.1453" path="/103/file0" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  942.333948][   T30] audit: type=1400 audit(1766473843.242:1720): avc:  denied  { mount } for  pid=13586 comm="syz.9.1453" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  942.485225][   T30] audit: type=1400 audit(1766473843.412:1721): avc:  denied  { create } for  pid=13586 comm="syz.9.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  942.575516][   T30] audit: type=1400 audit(1766473844.922:1722): avc:  denied  { remove_name } for  pid=13580 comm="rm" name="resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=6896 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  942.667431][   T30] audit: type=1400 audit(1766473844.922:1723): avc:  denied  { unlink } for  pid=13580 comm="rm" name="resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=6896 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  942.716982][   T30] audit: type=1400 audit(1766473845.022:1725): avc:  denied  { create } for  pid=13581 comm="syz.3.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  942.834891][ T5965] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  943.056862][T13609] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1466'.
[  943.139848][T13610] IPVS: set_ctl: invalid protocol: 46 172.30.1.7:21
[  943.406242][   T30] audit: type=1400 audit(1766473844.962:1724): avc:  denied  { unmount } for  pid=10688 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  943.427437][   T30] audit: type=1400 audit(1766473845.532:1726): avc:  denied  { write } for  pid=13581 comm="syz.3.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  943.486543][   T55] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  944.503762][T10941] IPVS: starting estimator thread 0...
[  944.636071][T13615] IPVS: using max 62 ests per chain, 148800 per kthread
[  944.901792][   T55] usb 9-1: Using ep0 maxpacket: 32
[  944.903979][T13622] Cannot find set identified by id 0 to match
[  945.246771][ T5965] usb 4-1: device descriptor read/all, error -71
[  945.272883][   T55] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  945.323775][   T55] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  945.357250][   T55] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  945.412788][   T55] usb 9-1: Product: syz
[  945.431817][   T55] usb 9-1: Manufacturer: syz
[  945.436457][   T55] usb 9-1: SerialNumber: syz
[  945.549416][   T55] usb 9-1: config 0 descriptor??
[  945.911400][   T55] usb 9-1: can't set config #0, error -71
[  946.399567][   T55] usb 9-1: USB disconnect, device number 12
[  947.269163][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  947.269182][   T30] audit: type=1400 audit(1766473849.792:1750): avc:  denied  { execute } for  pid=13626 comm="syz.3.1459" dev="tmpfs" ino=1498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  947.647591][   T30] audit: type=1400 audit(1766473849.792:1751): avc:  denied  { execute_no_trans } for  pid=13626 comm="syz.3.1459" path=2F6D656D66643A5B0BDB58AE5B1AADD16D64C8854858A9250C1A2CE29CB4D7BCF1B386E22F4F70D0A2821E623B28B5E16AC80CE58917EE7C4A903D35EDCFD3AED20711A9A55EFFF595D271258ADA05202864656C6574656429 dev="tmpfs" ino=1498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  947.864671][   T30] audit: type=1400 audit(1766473849.842:1752): avc:  denied  { module_request } for  pid=13626 comm="syz.3.1459" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  947.966134][T13652] ubi: mtd0 is already attached to ubi31
[  948.484271][   T30] audit: type=1400 audit(1766473850.242:1753): avc:  denied  { mount } for  pid=13626 comm="syz.3.1459" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  948.571336][   T30] audit: type=1400 audit(1766473850.512:1754): avc:  denied  { search } for  pid=13605 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  948.908173][   T30] audit: type=1400 audit(1766473850.522:1755): avc:  denied  { search } for  pid=13605 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  948.931961][   T30] audit: type=1400 audit(1766473850.522:1756): avc:  denied  { search } for  pid=13605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  948.956077][   T30] audit: type=1400 audit(1766473850.522:1757): avc:  denied  { getattr } for  pid=13605 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  948.982227][   T30] audit: type=1400 audit(1766473850.542:1758): avc:  denied  { add_name } for  pid=13605 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  949.005349][   T30] audit: type=1400 audit(1766473850.542:1759): avc:  denied  { create } for  pid=13605 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  949.311922][ T5136] Bluetooth: hci5: command 0x0406 tx timeout
[  951.241080][T13666] lo speed is unknown, defaulting to 1000
[  951.872848][    C1] bridge0: port 3(dummy0) entered learning state
[  952.511705][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  952.518945][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  953.786161][   T30] kauditd_printk_skb: 64 callbacks suppressed
[  953.786178][   T30] audit: type=1400 audit(1766473856.832:1824): avc:  denied  { create } for  pid=13682 comm="syz.6.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  954.099912][   T30] audit: type=1400 audit(1766473856.922:1825): avc:  denied  { bind } for  pid=13682 comm="syz.6.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  954.177309][   T30] audit: type=1400 audit(1766473856.992:1826): avc:  denied  { name_bind } for  pid=13682 comm="syz.6.1472" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  954.306002][   T30] audit: type=1400 audit(1766473856.992:1827): avc:  denied  { node_bind } for  pid=13682 comm="syz.6.1472" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  954.819904][   T30] audit: type=1400 audit(1766473857.862:1828): avc:  denied  { map_write } for  pid=13696 comm="syz.6.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  954.983215][T13699] lo speed is unknown, defaulting to 1000
[  955.048075][   T30] audit: type=1400 audit(1766473858.002:1829): avc:  denied  { execute } for  pid=13696 comm="syz.6.1475" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=40780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  955.219642][   T30] audit: type=1400 audit(1766473858.262:1830): avc:  denied  { read } for  pid=13696 comm="syz.6.1475" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  955.427766][   T30] audit: type=1400 audit(1766473858.262:1831): avc:  denied  { open } for  pid=13696 comm="syz.6.1475" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  955.647865][   T30] audit: type=1400 audit(1766473858.262:1832): avc:  denied  { ioctl } for  pid=13696 comm="syz.6.1475" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  955.723630][   T30] audit: type=1400 audit(1766473858.292:1833): avc:  denied  { setopt } for  pid=13707 comm="syz.3.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  955.751960][T12400] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  955.814046][T13697] openvswitch: netlink: Message has 2712 unknown bytes.
[  955.924274][T12400] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  955.944703][T12400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  955.976662][T12400] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  956.015749][T12400] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  956.045533][T12400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.171747][T12400] usb 4-1: Product: syz
[  956.176281][T12400] usb 4-1: Manufacturer: syz
[  956.180899][T12400] usb 4-1: SerialNumber: syz
[  956.733148][T12400] usb 4-1: config 0 descriptor??
[  957.051978][ T6299] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  957.914143][T12400] usb 4-1: USB disconnect, device number 28
[  958.378509][T13734] usb usb8: usbfs: process 13734 (syz.1.1478) did not claim interface 0 before use
[  959.624591][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  959.624609][   T30] audit: type=1400 audit(1766473862.152:1855): avc:  denied  { read write } for  pid=13730 comm="syz.6.1479" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  959.753260][   T30] audit: type=1400 audit(1766473862.152:1856): avc:  denied  { ioctl open } for  pid=13730 comm="syz.6.1479" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  959.803210][   T30] audit: type=1400 audit(1766473862.162:1857): avc:  denied  { ioctl } for  pid=13730 comm="syz.6.1479" path="socket:[41575]" dev="sockfs" ino=41575 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  959.830510][   T30] audit: type=1400 audit(1766473862.162:1858): avc:  denied  { mounton } for  pid=13730 comm="syz.6.1479" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  960.255877][   T30] audit: type=1400 audit(1766473863.292:1859): avc:  denied  { set_context_mgr } for  pid=13740 comm="syz.1.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  960.308541][T13741] binder: BINDER_SET_CONTEXT_MGR already set
[  960.326952][T13741] binder: 13740:13741 ioctl 4018620d 200000004a80 returned -16
[  960.375867][   T30] audit: type=1400 audit(1766473863.352:1860): avc:  denied  { create } for  pid=13738 comm="syz.9.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  960.679482][T13750] Cannot find del_set index 4 as target
[  960.911414][   T30] audit: type=1400 audit(1766473863.682:1861): avc:  denied  { read write } for  pid=13745 comm="syz.3.1483" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  961.093100][   T30] audit: type=1400 audit(1766473863.682:1862): avc:  denied  { open } for  pid=13745 comm="syz.3.1483" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  961.173471][   T30] audit: type=1400 audit(1766473863.702:1863): avc:  denied  { mounton } for  pid=13745 comm="syz.3.1483" path="/335/file1" dev="tmpfs" ino=1807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  961.197302][ T5875] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  961.265647][   T30] audit: type=1400 audit(1766473863.812:1864): avc:  denied  { read } for  pid=13745 comm="syz.3.1483" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  961.363276][ T5875] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  961.383486][ T5875] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0
[  961.436881][ T5875] usb 4-1: config 0 interface 0 has no altsetting 0
[  961.475591][ T5875] usb 4-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00
[  961.531070][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.745309][T13759] xt_ecn: cannot match TCP bits for non-tcp packets
[  961.853522][T11130] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  961.972587][ T5875] usb 4-1: config 0 descriptor??
[  962.335011][ T5875] usbhid 4-1:0.0: can't add hid device: -22
[  962.357972][ T5875] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[  962.423947][T11130] usb 9-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb
[  962.435406][T11130] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.464489][T11130] usb 9-1: Product: syz
[  962.484526][T11130] usb 9-1: Manufacturer: syz
[  962.501484][T11130] usb 9-1: SerialNumber: syz
[  962.509015][T11130] usb 9-1: config 0 descriptor??
[  962.523232][T11130] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  963.042433][T11130] gspca_sn9c2028: read1 error -110
[  963.053426][T11130] gspca_sn9c2028: read1 error -32
[  963.065295][T11130] gspca_sn9c2028: read1 error -32
[  963.076858][T11130] sn9c2028 9-1:0.0: probe with driver sn9c2028 failed with error -32
[  963.337240][ T5875] usb 4-1: USB disconnect, device number 29
[  965.238306][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  965.238345][   T30] audit: type=1400 audit(1766473868.282:1883): avc:  denied  { unmount } for  pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  965.569712][   T30] audit: type=1400 audit(1766473868.402:1884): avc:  denied  { ioctl } for  pid=13764 comm="syz.9.1487" path="socket:[41661]" dev="sockfs" ino=41661 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  966.739609][T13781] 9pnet_fd: Insufficient options for proto=fd
[  966.788062][   T30] audit: type=1400 audit(1766473868.442:1885): avc:  denied  { append } for  pid=13764 comm="syz.9.1487" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  966.947186][   T30] audit: type=1400 audit(1766473868.482:1886): avc:  denied  { create } for  pid=13764 comm="syz.9.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  966.980924][   T30] audit: type=1400 audit(1766473869.162:1887): avc:  denied  { name_bind } for  pid=13776 comm="syz.6.1490" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  967.738640][   T30] audit: type=1400 audit(1766473869.752:1888): avc:  denied  { module_request } for  pid=13776 comm="syz.6.1490" kmod="nfnetlink-subsys-169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  967.869597][   T30] audit: type=1400 audit(1766473869.782:1889): avc:  denied  { read } for  pid=13775 comm="syz.1.1488" dev="sockfs" ino=41670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  967.879098][T13788] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  967.901359][T13790] fuse: Unknown parameter 'fd0x0000000000000004'
[  967.909599][T13788] ALSA: mixer_oss: invalid index 1374389
[  968.141717][   T30] audit: type=1400 audit(1766473870.732:1890): avc:  denied  { create } for  pid=13784 comm="syz.3.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  968.321546][   T30] audit: type=1400 audit(1766473870.942:1891): avc:  denied  { mounton } for  pid=13789 comm="syz.1.1492" path="/31/file0" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  968.421666][   T30] audit: type=1400 audit(1766473871.222:1892): avc:  denied  { read write } for  pid=13791 comm="syz.9.1493" name="sg0" dev="devtmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  968.703028][T13793] siw: device registration error -23
[  969.323082][ T5965] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  969.491668][ T5965] usb 4-1: Using ep0 maxpacket: 8
[  969.516676][ T5965] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  969.542314][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.564018][ T5965] usb 4-1: Product: syz
[  969.582917][ T5965] usb 4-1: Manufacturer: syz
[  969.599873][ T5965] usb 4-1: SerialNumber: syz
[  969.622277][ T5965] usb 4-1: config 0 descriptor??
[  969.641672][T11130] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  969.663256][ T5965] gspca_main: sq905-2.14.0 probing 2770:9120
[  970.953153][ T5965] gspca_sq905: sq905_command: usb_control_msg failed (-110)
[  970.981778][ T5965] sq905 4-1:0.0: probe with driver sq905 failed with error -110
[  971.023331][T11130] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  971.043549][T11130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  971.075969][T11130] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  971.093639][T11130] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  971.109304][T11130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  971.127561][T11130] usb 2-1: Product: syz
[  971.137709][T11130] usb 2-1: Manufacturer: syz
[  971.151283][T11130] usb 2-1: SerialNumber: syz
[  971.166912][T11130] usb 2-1: config 0 descriptor??
[  971.432885][T11130] usb 2-1: USB disconnect, device number 10
[  971.710492][T13735] udevd[13735]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  971.974609][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  971.974628][   T30] audit: type=1400 audit(1766473875.012:1895): avc:  denied  { load_policy } for  pid=13839 comm="syz.6.1498" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  972.103037][   T30] audit: type=1400 audit(1766473875.102:1896): avc:  denied  { ioctl } for  pid=13839 comm="syz.6.1498" path="socket:[42050]" dev="sockfs" ino=42050 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  972.294820][T13840] SELinux: failed to load policy
[  972.399654][T13848] siw: device registration error -23
[  972.611733][ T5965] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  972.781685][ T5965] usb 10-1: Using ep0 maxpacket: 32
[  972.794515][ T5965] usb 10-1: config 0 has an invalid interface number: 10 but max is 0
[  972.820008][ T5965] usb 10-1: config 0 has no interface number 0
[  972.844071][ T5965] usb 10-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.df
[  972.871533][ T5965] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.900167][ T5965] usb 10-1: Product: syz
[  972.917215][ T5965] usb 10-1: Manufacturer: syz
[  972.935971][ T5965] usb 10-1: SerialNumber: syz
[  972.987905][ T5965] usb 10-1: config 0 descriptor??
[  974.974861][   T30] audit: type=1400 audit(1766473877.802:1897): avc:  denied  { create } for  pid=13863 comm="syz.6.1511" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  974.976598][T13868] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  975.004136][T13868] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock
[  975.013087][T13868] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  975.020923][T13868] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock
[  975.048703][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1511'.
[  975.171462][T13874] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1501'.
[  975.282065][T13875] IPVS: set_ctl: invalid protocol: 46 172.30.1.2:21
[  975.329176][T11422] Bluetooth: hci5: Malformed HCI Event: 0x22
[  975.681820][   T30] audit: type=1400 audit(1766473878.442:1898): avc:  denied  { unlink } for  pid=8419 comm="syz-executor" name="file0" dev="tmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  975.757710][ T5889] usb 10-1: USB disconnect, device number 11
[  976.326982][T13880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13880 comm=syz.9.1504
[  976.851856][   T30] audit: type=1400 audit(1766473879.352:1899): avc:  denied  { listen } for  pid=13876 comm="syz.9.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  976.947428][   T30] audit: type=1400 audit(1766473879.362:1900): avc:  denied  { connect } for  pid=13876 comm="syz.9.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  978.260327][   T30] audit: type=1400 audit(1766473880.202:1901): avc:  denied  { setopt } for  pid=13879 comm="syz.6.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  978.311736][   T30] audit: type=1400 audit(1766473880.852:1902): avc:  denied  { ioctl } for  pid=13883 comm="syz.9.1505" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=42121 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  978.372683][ T5136] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  978.396670][ T5136] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  978.405681][ T5136] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  978.422234][ T5136] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  978.429679][ T5136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  978.733246][   T30] audit: type=1400 audit(1766473880.932:1903): avc:  denied  { setopt } for  pid=13883 comm="syz.9.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  978.870736][   T30] audit: type=1400 audit(1766473881.422:1904): avc:  denied  { ioctl } for  pid=13891 comm="syz-executor" path="socket:[42123]" dev="sockfs" ino=42123 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  978.929785][   T30] audit: type=1400 audit(1766473881.502:1905): avc:  denied  { mounton } for  pid=13891 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  978.981710][   T30] audit: type=1400 audit(1766473881.972:1906): avc:  denied  { create } for  pid=13883 comm="syz.9.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  979.051990][   T30] audit: type=1400 audit(1766473881.972:1907): avc:  denied  { connect } for  pid=13883 comm="syz.9.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  979.132940][   T30] audit: type=1400 audit(1766473881.972:1908): avc:  denied  { bind } for  pid=13883 comm="syz.9.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  980.181934][   T30] audit: type=1400 audit(1766473883.112:1909): avc:  denied  { read } for  pid=13897 comm="syz.1.1507" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  980.451795][   T30] audit: type=1400 audit(1766473883.122:1910): avc:  denied  { ioctl } for  pid=13897 comm="syz.1.1507" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  980.511739][ T5136] Bluetooth: hci4: command tx timeout
[  980.540010][ T5821] usb 4-1: USB disconnect, device number 30
[  980.588340][T13905] 9p: Bad value for 'rfdno'
[  981.170420][T13891] lo speed is unknown, defaulting to 1000
[  981.951678][    C1] bridge0: port 3(dummy0) entered forwarding state
[  981.958212][    C1] bridge0: topology change detected, propagating
[  982.592666][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  982.599935][    C1] bridge0: topology change detected, propagating
[  982.606502][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  982.613735][    C1] bridge0: topology change detected, propagating
[  982.623445][ T5136] Bluetooth: hci4: command tx timeout
[  983.717762][T13932] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1513'.
[  983.731451][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  983.731468][   T30] audit: type=1400 audit(1766473885.942:1916): avc:  denied  { append } for  pid=13927 comm="syz.6.1514" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  983.813793][   T30] audit: type=1400 audit(1766473886.722:1917): avc:  denied  { bind } for  pid=13928 comm="syz.3.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  983.919719][   T30] audit: type=1400 audit(1766473886.722:1918): avc:  denied  { name_bind } for  pid=13928 comm="syz.3.1513" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  983.942754][   T30] audit: type=1400 audit(1766473886.722:1919): avc:  denied  { node_bind } for  pid=13928 comm="syz.3.1513" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  983.964695][   T30] audit: type=1400 audit(1766473886.762:1920): avc:  denied  { write } for  pid=13928 comm="syz.3.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  984.046086][   T30] audit: type=1400 audit(1766473886.762:1921): avc:  denied  { nlmsg_write } for  pid=13928 comm="syz.3.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  984.295646][T13934] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1515'.
[  984.397419][   T30] audit: type=1400 audit(1766473887.422:1922): avc:  denied  { execute } for  pid=13942 comm="syz.3.1516" name="file1" dev="tmpfs" ino=1844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  984.672322][ T5136] Bluetooth: hci4: command tx timeout
[  984.941768][   T30] audit: type=1400 audit(1766473887.432:1923): avc:  denied  { execute_no_trans } for  pid=13942 comm="syz.3.1516" path="/341/file1" dev="tmpfs" ino=1844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  985.444919][T13961] audit: audit_backlog=65 > audit_backlog_limit=64
[  985.459972][T13961] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  986.832387][ T5136] Bluetooth: hci4: command tx timeout
[  992.837428][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1091.361588][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1091.368587][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P13966/1:b..l
[ 1091.377180][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=55709, q=496 ncpus=2)
[ 1091.384889][    C1] task:modprobe        state:R  running task     stack:25752 pid:13966 tgid:13966 ppid:6299   task_flags:0x40000c flags:0x00080000
[ 1091.399783][    C1] Call Trace:
[ 1091.403077][    C1]  <TASK>
[ 1091.406018][    C1]  ? __schedule+0x10b9/0x6150
[ 1091.410721][    C1]  __schedule+0x1139/0x6150
[ 1091.415242][    C1]  ? __lock_acquire+0x436/0x2890
[ 1091.420189][    C1]  ? __pfx___schedule+0x10/0x10
[ 1091.425046][    C1]  ? mark_held_locks+0x49/0x80
[ 1091.429814][    C1]  preempt_schedule_irq+0x51/0x90
[ 1091.434839][    C1]  irqentry_exit+0x1d8/0x8c0
[ 1091.439434][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1091.445411][    C1] RIP: 0010:unwind_next_frame+0x1f6/0x20b0
[ 1091.451233][    C1] Code: 89 c3 39 d0 0f 83 17 16 00 00 48 ba 00 00 00 00 00 fc ff df 89 c1 48 8d 3c 8d 0c 9c dc 91 49 89 f8 49 c1 e8 03 45 0f b6 04 10 <48> 89 fa 83 e2 07 83 c2 03 44 38 c2 7c 2f 45 84 c0 74 2a 48 89 4c
[ 1091.470853][    C1] RSP: 0018:ffffc9000dc7f5c0 EFLAGS: 00000a07
[ 1091.476921][    C1] RAX: 0000000000007b2e RBX: 0000000000000001 RCX: 0000000000007b2e
[ 1091.484888][    C1] RDX: dffffc0000000000 RSI: 00000000000a7c15 RDI: ffffffff91de88c4
[ 1091.492870][    C1] RBP: ffffc9000dc7f678 R08: 0000000000000000 R09: 000000002d64dbdc
[ 1091.500850][    C1] R10: 0000000000000002 R11: 0000000000007b2e R12: ffffc9000dc7f680
[ 1091.508835][    C1] R13: ffffc9000dc7f630 R14: ffffc9000dc7f665 R15: ffffffff817b2e91
[ 1091.516815][    C1]  ? mmput+0x61/0x70
[ 1091.520741][    C1]  ? mmput+0x62/0x70
[ 1091.524648][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1091.530800][    C1]  arch_stack_walk+0x94/0x100
[ 1091.535489][    C1]  ? mmput+0x62/0x70
[ 1091.539396][    C1]  stack_trace_save+0x8e/0xc0
[ 1091.544071][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1091.549445][    C1]  ? __lock_acquire+0x436/0x2890
[ 1091.554398][    C1]  ? __put_anon_vma+0x114/0x3a0
[ 1091.559266][    C1]  ? unlink_anon_vmas+0x58a/0x820
[ 1091.564309][    C1]  kasan_save_stack+0x33/0x60
[ 1091.568985][    C1]  ? kasan_save_stack+0x33/0x60
[ 1091.573836][    C1]  ? kasan_save_track+0x14/0x30
[ 1091.578687][    C1]  ? kasan_save_free_info+0x3b/0x60
[ 1091.583893][    C1]  ? __kasan_slab_free+0x5f/0x80
[ 1091.588831][    C1]  ? kmem_cache_free+0x2d8/0x770
[ 1091.593765][    C1]  ? unlink_anon_vmas+0x458/0x820
[ 1091.598799][    C1]  ? free_pgtables+0x1d7/0xc10
[ 1091.603564][    C1]  ? exit_mmap+0x3f1/0xb60
[ 1091.607979][    C1]  ? __mmput+0x12a/0x410
[ 1091.612223][    C1]  ? mmput+0x62/0x70
[ 1091.616158][    C1]  kasan_save_track+0x14/0x30
[ 1091.620833][    C1]  kasan_save_free_info+0x3b/0x60
[ 1091.625867][    C1]  __kasan_slab_free+0x5f/0x80
[ 1091.630632][    C1]  kmem_cache_free+0x2d8/0x770
[ 1091.635403][    C1]  ? unlink_anon_vmas+0x458/0x820
[ 1091.640445][    C1]  ? unlink_anon_vmas+0x458/0x820
[ 1091.645486][    C1]  unlink_anon_vmas+0x458/0x820
[ 1091.650352][    C1]  free_pgtables+0x1d7/0xc10
[ 1091.654950][    C1]  ? __pfx_free_pgtables+0x10/0x10
[ 1091.660069][    C1]  ? __pfx_down_write+0x10/0x10
[ 1091.665018][    C1]  exit_mmap+0x3f1/0xb60
[ 1091.669268][    C1]  ? __pfx_exit_mmap+0x10/0x10
[ 1091.674042][    C1]  ? __lock_acquire+0x436/0x2890
[ 1091.679093][    C1]  ? arch_uprobe_clear_state+0x16/0x150
[ 1091.684667][    C1]  __mmput+0x12a/0x410
[ 1091.688759][    C1]  mmput+0x62/0x70
[ 1091.692486][    C1]  do_exit+0x7d7/0x2bd0
[ 1091.696642][    C1]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1091.701674][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1091.706269][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1091.711031][    C1]  do_group_exit+0xd3/0x2a0
[ 1091.715533][    C1]  __x64_sys_exit_group+0x3e/0x50
[ 1091.720555][    C1]  x64_sys_call+0x151c/0x1740
[ 1091.725235][    C1]  do_syscall_64+0xcd/0xf80
[ 1091.729745][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1091.735643][    C1] RIP: 0033:0x7f7e6e4d66c5
[ 1091.740050][    C1] RSP: 002b:00007ffd0fac1ff8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[ 1091.748459][    C1] RAX: ffffffffffffffda RBX: 00007f7e6e5d7fe8 RCX: 00007f7e6e4d66c5
[ 1091.756426][    C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001
[ 1091.764388][    C1] RBP: 0000000000000001 R08: 00007ffd0fac1f88 R09: 0000000000000000
[ 1091.772349][    C1] R10: 00007ffd0fac1e20 R11: 0000000000000202 R12: 0000000000000000
[ 1091.780312][    C1] R13: 0000000000000001 R14: 00007f7e6e5d6680 R15: 00007f7e6e5d8000
[ 1091.788301][    C1]  </TASK>
[ 1091.791312][    C1] rcu: rcu_preempt kthread starved for 10172 jiffies! g55709 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 1091.802503][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1091.812461][    C1] rcu: RCU grace-period kthread stack dump:
[ 1091.818335][    C1] task:rcu_preempt     state:R  running task     stack:28360 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1091.831843][    C1] Call Trace:
[ 1091.835112][    C1]  <TASK>
[ 1091.838046][    C1]  ? __schedule+0x10b9/0x6150
[ 1091.842720][    C1]  __schedule+0x1139/0x6150
[ 1091.847241][    C1]  ? __pfx___schedule+0x10/0x10
[ 1091.852084][    C1]  ? find_held_lock+0x2b/0x80
[ 1091.856768][    C1]  ? schedule+0x2d7/0x3a0
[ 1091.861101][    C1]  schedule+0xe7/0x3a0
[ 1091.865167][    C1]  schedule_timeout+0x123/0x290
[ 1091.870013][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1091.875379][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1091.880663][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1091.886475][    C1]  ? prepare_to_swait_event+0xf5/0x480
[ 1091.891935][    C1]  rcu_gp_fqs_loop+0x1ea/0xaf0
[ 1091.896709][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1091.901995][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1091.907198][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1091.912135][    C1]  ? rcu_gp_cleanup+0x7c1/0xe90
[ 1091.916993][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1091.922808][    C1]  rcu_gp_kthread+0x26d/0x380
[ 1091.927490][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1091.932691][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1091.937449][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1091.942651][    C1]  ? __kthread_parkme+0x19e/0x250
[ 1091.947676][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1091.952883][    C1]  kthread+0x3c5/0x780
[ 1091.956972][    C1]  ? __pfx_kthread+0x10/0x10
[ 1091.961560][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1091.966315][    C1]  ? __pfx_kthread+0x10/0x10
[ 1091.970901][    C1]  ret_from_fork+0x983/0xb10
[ 1091.975490][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1091.980600][    C1]  ? __switch_to+0x7af/0x10d0
[ 1091.985278][    C1]  ? __pfx_kthread+0x10/0x10
[ 1091.989874][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1091.994664][    C1]  </TASK>
[ 1091.997674][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1092.003999][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1092.014503][    C1] Tainted: [L]=SOFTLOCKUP
[ 1092.018822][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1092.028872][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1092.034511][    C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 <e9> cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1092.054112][    C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6
[ 1092.060174][    C1] RAX: 0000000004d76d7b RBX: 0000000000000001 RCX: ffffffff8b7816d9
[ 1092.068134][    C1] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400
[ 1092.076100][    C1] RBP: ffffed1003b59498 R08: 0000000000000001 R09: ffffed10170a673d
[ 1092.084065][    C1] R10: ffff8880b85339eb R11: ffff88801dacaff0 R12: 0000000000000001
[ 1092.092028][    C1] R13: ffff88801daca4c0 R14: ffffffff9088b4d0 R15: 0000000000000000
[ 1092.099988][    C1] FS:  0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000
[ 1092.108915][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1092.115493][    C1] CR2: 00007f21e894b36b CR3: 0000000077ac5000 CR4: 00000000003526f0
[ 1092.123459][    C1] Call Trace:
[ 1092.126730][    C1]  <TASK>
[ 1092.129650][    C1]  default_idle+0x13/0x20
[ 1092.133993][    C1]  default_idle_call+0x6c/0xb0
[ 1092.138760][    C1]  do_idle+0x38d/0x510
[ 1092.142836][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1092.147439][    C1]  cpu_startup_entry+0x4f/0x60
[ 1092.152209][    C1]  start_secondary+0x21d/0x2d0
[ 1092.156970][    C1]  ? __pfx_start_secondary+0x10/0x10
[ 1092.162257][    C1]  common_startup_64+0x13e/0x148
[ 1092.167208][    C1]  </TASK>
[ 1092.622137][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1093.086940][ T6301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)