last executing test programs:

2m39.781791909s ago: executing program 4 (id=1780):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r1], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r4, &(0x7f0000000cc0), 0x0}, 0x20)
socket$netlink(0x10, 0x3, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'})
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)})
socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @random="009765396811"}, 0x10)
close_range(r0, r0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
getsockopt$inet6_buf(r8, 0x29, 0x3d, 0x0, &(0x7f0000000240))
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000100000004b360e464fa99050008000300", @ANYRES32=0x0, @ANYBLOB="0800c300000000000800c40000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2m39.145637186s ago: executing program 4 (id=1782):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
r3 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28)
fcntl$notify(r3, 0x402, 0x8000003d)

2m36.495985591s ago: executing program 4 (id=1790):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)

2m36.41537891s ago: executing program 4 (id=1793):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendto(r2, &(0x7f0000000280)="109f2e", 0x3, 0x10, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r5, &(0x7f0000000000), 0x4003)
r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})

2m33.485968119s ago: executing program 4 (id=1804):
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_procfs(0x0, 0x0)
io_setup(0x6, &(0x7f0000001380))
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sched_setaffinity(r3, 0x7, &(0x7f0000000080)=0x6e)
sendmsg$AUDIT_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x2, 0x70bd2d, 0x25dfdbfe, {0x40, 0x7, 0x1, r3, 0x0, 0x8000, 0x6, 0x10001, 0x0, 0xffff, 0x10}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_io_uring_setup(0x17af, &(0x7f0000000040)={0x0, 0xda82, 0x4, 0x3, 0x68}, &(0x7f00000000c0), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f0000000140)={0xfffffffc, 0xe, 0x9}, 0x0)
socket(0x10, 0x2, 0x0)
r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x12}, 0x2, 0x0)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)

2m32.931691794s ago: executing program 4 (id=1807):
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002)

2m17.581729256s ago: executing program 32 (id=1807):
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002)

12.030904281s ago: executing program 1 (id=2401):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x5, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff}}}, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1)

10.415508329s ago: executing program 1 (id=2403):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000040)={0x2, 0x1, [0x8, 0x0, 0x5, 0x4d, 0x8, 0xffff8000, 0xfffffffc, 0x200]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
epoll_create1(0x0)
epoll_create1(0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='ext4_unlink_enter\x00', r6, 0x0, 0x4}, 0x18)
r7 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r7, &(0x7f00000000c0), 0x10)
sendto$l2tp(r7, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000180)=0x1000, 0x4)
recvfrom$l2tp(r7, 0x0, 0x0, 0x12060, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x42, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="a4c3713c7773ec170f601005e462374f7c264592579548a4b235ad1779df0eb1dd0bd040771ad81388eb006228ce71eb55455c45a4e5daccdc8d12f8295f70ec85bd3a651deaa457ab13c28d5ff40d381876e25ef02add24807bc8525bc51b868f3b49e50debaa599abc68eec4951e8010949ffa69f39905093acd042a6c11c7e381b669a7de2e9b4b9f8a85de9b832a4d944be3cfa44bdb9086878b7cf226dbfd5cbba9a970ffee0748fe1ae695fa5da12723c682f227e39b9b"], 0xb4}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0x1000, 0x1000d6})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0xe000000, 0x9, 0x6, {0x363, 0x9}, 0xfffffffa, 0x5})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

9.087533786s ago: executing program 1 (id=2409):
r0 = userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x22, 0x2, 0x24)
close(r3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0xc45f3000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
ftruncate(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, 0x0)
r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x200)
ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0x79, 0x590})
close(0xffffffffffffffff)
sendmmsg$inet(r4, 0x0, 0x0, 0xf00)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7e, 0x62, 0x5c, 0x8, 0x4e6, 0x5, 0x173, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x0, 0x68, 0x0, [{{0x9, 0x4, 0xa4, 0x2, 0x0, 0x9a, 0xe9, 0x4e, 0x8}}]}}]}}, 0x0)

7.809981892s ago: executing program 2 (id=2416):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
socket$inet_icmp(0x2, 0x2, 0x1)
socket$inet(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x315}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080), 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0})
io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0)

6.658319903s ago: executing program 2 (id=2419):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRESOCT=0x0, @ANYRESOCT=r3], 0x1004)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c0003800800"], 0x38}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r4, 0x5)
accept(r4, 0x0, 0x0)
shutdown(r4, 0x1)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800)

5.422185778s ago: executing program 0 (id=2421):
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)

4.455498691s ago: executing program 1 (id=2424):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, 0xddffffff}) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0xffffffffffffff60, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r3, 0x0, 0x1, 0xffc6}}, 0xffbe) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async)
arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000003c0)) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000180)) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x2c, r6, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x2c}}, 0x0) (async)
r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket(0xa, 0x9050f8351fb8c930, 0x1)
readv(r9, &(0x7f0000003400)=[{&(0x7f0000001080)=""/107, 0x7ffff000}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2)

4.321619089s ago: executing program 0 (id=2425):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000210001002bbd7000ffdbdf25028010390100000438a18b02fa6f11fbfbd5da84100001000800"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(0x0, 0x140, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x2, 0x1}], 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500e2ff00000000bb7ccc2db638ecdcb975607aaad7c13b0bb7fbbb6c999f0c1bb32e5d8dcac681616269f821aa5dc0d11472093bb4b01d06e10b6518a98774a0d09061f06e4d74207f837997c36ab39ecd0c36b7a61721a36eae01eb224c045a38e701a4d196a4c9e14977c4d8d6396d84198d0a7fc83e02c9cc8882112e8ed59e1c0e1f3a00b0c8478dadbd2cc98fbc7153efbacc41497c78726b161ce3c2610bb71a2b0774abd84b26932d1bfac295d893f94ae878f90d909dccd4fe770435a013d09f88"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

4.186210508s ago: executing program 2 (id=2426):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r1], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r4, &(0x7f0000000cc0), 0x0}, 0x20)
socket$netlink(0x10, 0x3, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'})
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)})
socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @random="009765396811"}, 0x10)
close_range(r0, r0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
getsockopt$inet6_buf(r8, 0x29, 0x3d, 0x0, &(0x7f0000000240))
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000100000004b360e464fa99050008000300", @ANYRES32=0x0, @ANYBLOB="0800c300000000000800c40000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

4.107154961s ago: executing program 0 (id=2428):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x20000)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x1, 0xffffffff, 0x2d9, 0x0, 0x4fd, 0x5})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf2504000000080008", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@generic={0xfd, 0x4, 0x1, 0x4, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0xba, &(0x7f0000000180)=""/186, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x1], &(0x7f0000000280)=[{0x2, 0x3, 0x5, 0x7}], 0x10, 0x43, @void, @value}, 0x94)

4.074517027s ago: executing program 5 (id=2429):
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, 0x0)
io_setup(0x6, &(0x7f0000001380))
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sched_setaffinity(r2, 0x7, &(0x7f0000000080)=0x6e)
sendmsg$AUDIT_SET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x2, 0x70bd2d, 0x25dfdbfe, {0x40, 0x7, 0x1, r2, 0x0, 0x8000, 0x6, 0x10001, 0x0, 0xffff, 0x10}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_io_uring_setup(0x17af, &(0x7f0000000040)={0x0, 0xda82, 0x4, 0x3, 0x68}, &(0x7f00000000c0), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, &(0x7f0000000140)={0xfffffffc, 0xe, 0x9}, 0x0)
socket(0x10, 0x2, 0x0)
r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
fsetxattr$security_ima(r4, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x12}, 0x2, 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)

3.710175347s ago: executing program 2 (id=2430):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r2, 0x6, 0x3, 0x0, &(0x7f0000000300))
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000840)={{}, {0x0, 0x989680}}, 0x0)
rt_sigaction(0x3f, &(0x7f0000000940)={0x0, 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80))
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)

3.346417051s ago: executing program 3 (id=2431):
socket$inet_icmp(0x2, 0x2, 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x315}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080), 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0})
io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0)

2.829158334s ago: executing program 5 (id=2432):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4800)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x1, '\x00', {}, 0x388})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1, 0x0, 0x1700}, 0x0)

2.76449963s ago: executing program 2 (id=2433):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4, 0x2], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = gettid()
timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
readv(r2, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/221, 0xdd}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)={0xcc, r5, 0x1, 0x470bd31, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0xa0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3111431790154d0187915d89b296ad25"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81216c89b68fb3bb4b3eb090991304ab"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "58db2fe272ee3e77f9181d560508f719f675efa274d0c817865dae050e294335"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e82d6dc9bf511359279f6b03c296543629f9b043bfb2219d56b185ad69a27bfa"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "043f8367a905e72fba2bb955e6e73545d42ab1685b71a4e018a5e306aeb38b56"}]}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x854}, 0x8014)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$802154_raw(0xffffffffffffffff, 0x0, 0x0)
r7 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
sched_getattr(r7, &(0x7f0000000000)={0x38}, 0x38, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

2.565177596s ago: executing program 3 (id=2434):
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_procfs(0x0, 0x0)
io_setup(0x6, &(0x7f0000001380))
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f0000000080)=0x6e)
sendmsg$AUDIT_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x2, 0x70bd2d, 0x25dfdbfe, {0x40, 0x7, 0x1, 0x0, 0x0, 0x8000, 0x6, 0x10001, 0x0, 0xffff, 0x10}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000000140)={0xfffffffc, 0xe, 0x9}, 0x0)
socket(0x10, 0x2, 0x0)
r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
fsetxattr$security_ima(r4, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x12}, 0x2, 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)

1.713502979s ago: executing program 5 (id=2435):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94)
request_key(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0)

1.43795705s ago: executing program 5 (id=2436):
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000001880)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000001880)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

1.301826906s ago: executing program 1 (id=2437):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_emit_ethernet(0x348, &(0x7f0000000680)={@broadcast, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x27, 0x4, 0x2, 0x9, 0x332, 0x66, 0x0, 0x2a, 0x2f, 0x0, @empty, @private=0xa010102, {[@generic={0x83, 0x4, 'd4'}, @generic={0x82, 0x5, "84a17a"}, @timestamp={0x44, 0x1c, 0xeb, 0x0, 0x4, [0x8, 0x5, 0x8, 0x3, 0x2e, 0x8]}, @timestamp_addr={0x44, 0x2c, 0x27, 0x1, 0x4, [{@broadcast, 0x5}, {@broadcast, 0x6}, {@loopback, 0x6}, {@empty, 0x9}, {@loopback, 0x7f}]}, @ssrr={0x89, 0x1f, 0x42, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @end, @timestamp={0x44, 0x14, 0x2b, 0x0, 0x2, [0xa71, 0x452, 0x800, 0x9]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe6, 0x0, [], "46b9d36be1de40632e7f37f164ee77a8fad4a9e85ae156d7371385a7f46e2ddefef9ce0f1a133638ad5aba18e274754b20d9a81e3d4247e8cc6928191adb3b9a8385c2b85cedb997f98b6c7fc52c0a17f4f508cfb76c934a7fa1b296c93c7566f2fd68ce57d98ee95a8bcb1a05af7221f8a1ed3ee45f3090291786afba74f8c741af86b3f2e9807778df6b6a80ce158230a6ac52e1de86e6dda9bb72734f6f184a19cb621d284394be07ba5732f56beacc24afbb929c8694304494f041b572c8db8495a37c7dcc2cf92db126fc8bc0b54cba5a0f63f811c7488676bdc8d55295236ae0578904"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "535371eb1c45b5e3876b4ddf5ecf16042b2deee0659e6bbc5b42442ce1cf79a82036a6587e6eb48fa759ba18253b7f66e833163f63e0529364f75c9f2da83e05cfdc3d32aecdc1b3f1e48468de4911e5600fc8a33791fd039ca0f7c338cb990172cb8b35c5211596066592f682555659fd430093c25657aa2feaf93bd3d779472777f347af0d1bad8cee4eeaa03bbf77ffa2818d29055b"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "035261082a0fa9103dbad6fba260c5f0083869bd482d5521d7029ee03eddc4b7cb8b16bafffe1e2f2dfb66be61dba2a2e32237aace40654dc1f284cfa5bc23f2d34b4e9b2570fa4e0de229caa0683b8e08f2798139da468d0b44256b4067d2d1da112f73505555c0ca4b6fcfe1dd759fef7c60d528df"}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0x50, 0x2, 0x0, 0x3, 0x6, 0x40}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x6, 0x1, 0x1, 0x3, 0x2, 0x3}, 0x2, {0x4, 0xffff, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "1d63856f46babef452aab15ca706f74c62945e2dbe6011f8a6a3b9213bddb11101377fb1f5afeb474a2816a4dee76f5f86a38a2855d60cb7214620d0b742c19952d663cf44b429d481031ab6c0803299e2eb8107f0251abd15f7e201e53d39"}}}}}}, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x1c3d00, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000018010040"])
sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)="e9bed39c101417d7e467170468da901a", 0x10}, 0x1, 0x0, 0x0, 0x4000890}, 0x20004854)
syz_emit_ethernet(0x56, &(0x7f0000004180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000200600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002017b7607ebff0302100a9fb10381aed29a7e"], 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x19a)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0)
mkdir(&(0x7f0000000140)='./cgroup/../file0\x00', 0x63)
r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x8, 0x1)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="13080000000000000000110000003c00098008000100000000fa070001"], 0x84}}, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8000000)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
truncate(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x3)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r11, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0x35fe7901]})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="e32d0000", @ANYRES16=r8, @ANYBLOB="00082bbd7000fcdbdf25110000004800018044000400200001000a004e21000007ff00000000000000000000ffff7f00000140000000200002000a004e20000001370000000000000000000000000000000001000000600005800c00028001000300000000000c000280080002000700000044000280080001001a0000000800010004000000080004000080030008000400040000000800030020ee000008000400020000000800010014000000080002000600000024000280040004000c00038008000100fdffffff080001000000000004000400040004000c00098008000100f70c0000"], 0xec}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
openat$cgroup_int(r4, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0)

1.301318786s ago: executing program 0 (id=2438):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0)
flock(r0, 0x5)
flock(r0, 0x5)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000240))

1.284994641s ago: executing program 3 (id=2439):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x20008000)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000010c0)}}, 0x18)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = dup(r2)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, &(0x7f0000000500))
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
io_setup(0x23, &(0x7f0000000280))
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe800000", @ANYRES8], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340))
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000001c0)=0x304008000)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000002c0)={0x0, r3})
ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0)

1.248758558s ago: executing program 5 (id=2440):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0xf010000, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}})

1.134127553s ago: executing program 0 (id=2441):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
socket$rds(0x15, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000805}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040))

1.133794666s ago: executing program 5 (id=2442):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e1f, 0x1, 'dh\x00', 0x1, 0x80000005, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36)
r4 = memfd_secret(0x80000)
ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000240)={0x2, 0x2, 0x6, 0x7, 0x4, 0x7, "f01038a0aedfdaed9c8dd638a1376f2d", 0x8, 0xb8, 0x5, 0xfb, 0x9, 0x90, 0x3})
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e736574000018000800044000000000140000001100010000000000000000000000000a0000000000"], 0x68}}, 0x80)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r5], 0x44}}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))

749.672945ms ago: executing program 3 (id=2443):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, <r1=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000084)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f00000003c0)=0x1ff, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000004e23250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x80801)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0)
kcmp(0x0, 0x0, 0x4, r2, r6)
syslog(0x4, 0x0, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

250.003756ms ago: executing program 3 (id=2444):
socket$inet_icmp(0x2, 0x2, 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x315}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080), 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0})
io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0)

158.1094ms ago: executing program 2 (id=2445):
r0 = socket(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = dup(r5)
connect$bt_rfcomm(r6, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="3e2945451b14ad7df8c344652abbef72135c9f404a3d91c42b8244ade62ebc6f3fb1c28c5f08b42a0154", 0x2a}], 0x1, 0x0, 0x0, 0x8000}}], 0x1, 0x20000000)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250a0000005c0009800800020001000000080001000008000008000100070000000800010000080000080001000600000008000200ffffff7f0800020004000000080001007f0000bf0e978fc9ca88e40008000100911f0000"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x487, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x68}}, 0x0)
io_setup(0x281, &(0x7f0000000100)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f0000000a00)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
io_cancel(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f0000000180)="bffedfb2db302240d796c71dfb5b0816582228d43436a2dc5ac407041b4a867b52c94031a15158c5bfce761de78b1a2d075cc4ff165af09fddc73488ea928d4ae1c9450fb7d433de4a434bc3775795d1f5d353f1acf7c3c103601d89bdded74086be0257bcc2f5b03df06d7937cb597d0bed5fd1539bbc65c56c671e1397afb0490702ff27892f232705806c265a43caeeccb9e474a256b940dd84fbe533bf8f2d36f877a9e61a2930e7a0132eef1153acd76edda00c1f65021d73f76623ff06b14463aacd540d25cd1b", 0xca, 0x0, 0x0, 0x3}, &(0x7f0000000040))

157.726585ms ago: executing program 1 (id=2446):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xbc, 0xfff, 0x6, 0x9, 0xa, "981477e205a524b6a411ea74ec57d285025688"})
creat(&(0x7f0000000040)='./file0\x00', 0x4b)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}, 0x1, 0x7}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a01020200"/16], 0x10}}, 0x0)

136.665845ms ago: executing program 0 (id=2447):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20005004)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x200009, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x3, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x10001, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xb, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93790, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x1, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x80, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x1ff, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r3, 0x4ee7000)
rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000002c0)={0x32, 0x0, 0x6})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}})
ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000440)={r5, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200"}})

0s ago: executing program 3 (id=2448):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 2
[  598.250562][   T30] audit: type=1400 audit(2000000064.020:1013): avc:  denied  { mounton } for  pid=12527 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  598.351639][T12527] lo speed is unknown, defaulting to 1000
[  598.429100][T12534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1899'.
[  598.506582][ T5926] pwc: recv_control_msg error -32 req 02 val 2b00
[  598.518677][ T5926] pwc: recv_control_msg error -32 req 02 val 2700
[  598.531812][ T5926] pwc: recv_control_msg error -32 req 02 val 2c00
[  598.544619][ T5926] pwc: recv_control_msg error -32 req 04 val 1000
[  598.555367][ T5926] pwc: recv_control_msg error -32 req 04 val 1300
[  598.772184][ T5926] pwc: recv_control_msg error -32 req 02 val 2000
[  598.989968][ T5926] pwc: recv_control_msg error -32 req 04 val 1500
[  599.008671][T12527] chnl_net:caif_netlink_parms(): no params data found
[  599.016886][ T5926] pwc: recv_control_msg error -32 req 02 val 2500
[  599.033083][ T5926] pwc: recv_control_msg error -32 req 02 val 2400
[  599.040605][ T5926] pwc: recv_control_msg error -32 req 02 val 2600
[  599.052298][ T5926] pwc: recv_control_msg error -32 req 02 val 2900
[  599.059443][ T5926] pwc: recv_control_msg error -32 req 02 val 2800
[  599.250256][T12550] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1901'.
[  599.655352][ T5926] pwc: recv_control_msg error -71 req 04 val 1200
[  599.687447][ T5926] pwc: Registered as video103.
[  599.704513][ T5872] usb 4-1: USB disconnect, device number 27
[  599.726015][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22
[  599.726314][T12527] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.745332][T12527] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.753694][T12527] bridge_slave_0: entered allmulticast mode
[  599.762133][T12527] bridge_slave_0: entered promiscuous mode
[  599.769432][T12527] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.777715][T12527] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.788877][T12527] bridge_slave_1: entered allmulticast mode
[  599.804021][T12527] bridge_slave_1: entered promiscuous mode
[  599.877178][ T5926] usb 2-1: USB disconnect, device number 34
[  600.142043][T12557] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1903'.
[  600.256297][ T5142] Bluetooth: hci5: command tx timeout
[  600.654539][T12527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  600.667126][T12527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  600.873563][T12527] team0: Port device team_slave_0 added
[  600.898487][T12527] team0: Port device team_slave_1 added
[  601.081637][ T5887] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  601.228280][T12527] batman_adv: batadv0: Adding interface: batadv_slave_0
[  601.247512][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  601.357530][T12527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  601.392571][T12527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  601.405436][T12527] batman_adv: batadv0: Adding interface: batadv_slave_1
[  601.412499][T12527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  601.414684][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  601.438627][T12527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  601.496693][T12527] hsr_slave_0: entered promiscuous mode
[  601.504592][T12527] hsr_slave_1: entered promiscuous mode
[  601.513523][T12527] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  601.523099][T12527] Cannot create hsr debugfs directory
[  601.629880][ T5887] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  601.804010][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.828892][T12580] openvswitch: netlink: IP tunnel dst address not specified
[  601.832174][ T5887] usb 4-1: config 0 descriptor??
[  602.072782][   T30] audit: type=1400 audit(2000000067.760:1014): avc:  denied  { sys_module } for  pid=12579 comm="syz.1.1913" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  602.104015][ T5887] usbhid 4-1:0.0: can't add hid device: -71
[  602.112416][ T5887] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  602.124481][ T5887] usb 4-1: USB disconnect, device number 28
[  602.218088][T12588] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1914'.
[  602.652755][ T5142] Bluetooth: hci5: command tx timeout
[  602.729569][T12527] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  602.742437][T12527] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  602.780966][ T5926] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  602.864320][T12527] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  602.898964][T12527] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  603.010920][ T5926] usb 2-1: device descriptor read/64, error -71
[  603.068396][T12527] 8021q: adding VLAN 0 to HW filter on device bond0
[  603.115186][T12527] 8021q: adding VLAN 0 to HW filter on device team0
[  603.129989][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.137192][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  603.199680][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.206880][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  603.250977][ T5926] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  603.256209][T12609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1920'.
[  603.411333][ T5926] usb 2-1: device descriptor read/64, error -71
[  603.563024][ T5926] usb usb2-port1: attempt power cycle
[  603.787139][T12527] 8021q: adding VLAN 0 to HW filter on device batadv0
[  603.921766][ T5926] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  603.962101][ T5926] usb 2-1: device descriptor read/8, error -71
[  604.211149][ T5926] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  604.317548][ T5926] usb 2-1: device descriptor read/8, error -71
[  604.442319][ T5926] usb usb2-port1: unable to enumerate USB device
[  604.741181][ T5142] Bluetooth: hci5: command tx timeout
[  604.929631][T12527] veth0_vlan: entered promiscuous mode
[  604.975055][T12527] veth1_vlan: entered promiscuous mode
[  605.078895][T12527] veth0_macvtap: entered promiscuous mode
[  605.097718][T12638] block nbd1: shutting down sockets
[  605.132833][T12527] veth1_macvtap: entered promiscuous mode
[  605.178755][T12527] batman_adv: batadv0: Interface activated: batadv_slave_0
[  605.188662][ T5887] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  605.204696][T12527] batman_adv: batadv0: Interface activated: batadv_slave_1
[  605.217642][T12527] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.227942][T12527] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.236875][T12527] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.247898][T12527] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  605.613190][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  605.631452][ T5887] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  605.642465][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.668237][ T5887] usb 4-1: config 0 descriptor??
[  605.687072][ T5887] pwc: Askey VC010 type 2 USB webcam detected.
[  605.939091][T12649] veth0: entered promiscuous mode
[  605.951863][T12649] veth0: left promiscuous mode
[  605.978799][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.071274][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.148691][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.192672][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.327508][T12653] Invalid option length (1048180) for dns_resolver key
[  606.339043][ T5887] pwc: recv_control_msg error -32 req 02 val 2b00
[  606.340982][   T30] audit: type=1400 audit(2000000072.030:1015): avc:  denied  { mounton } for  pid=12527 comm="syz-executor" path="/root/syzkaller.LOxtYu/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  606.373620][   T30] audit: type=1400 audit(2000000072.030:1016): avc:  denied  { mount } for  pid=12527 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  606.390777][ T5887] pwc: recv_control_msg error -32 req 02 val 2700
[  606.417067][T12660] delete_channel: no stack
[  606.494209][ T5887] pwc: recv_control_msg error -32 req 02 val 2c00
[  606.501931][   T30] audit: type=1400 audit(2000000072.150:1017): avc:  denied  { mount } for  pid=12527 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  606.508648][ T5887] pwc: recv_control_msg error -32 req 04 val 1000
[  606.855169][ T5887] pwc: recv_control_msg error -32 req 04 val 1300
[  606.869872][   T30] audit: type=1400 audit(2000000072.150:1018): avc:  denied  { mounton } for  pid=12527 comm="syz-executor" path="/root/syzkaller.LOxtYu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  606.897499][ T5142] Bluetooth: hci5: command tx timeout
[  606.995466][   T30] audit: type=1400 audit(2000000072.150:1019): avc:  denied  { mounton } for  pid=12527 comm="syz-executor" path="/root/syzkaller.LOxtYu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  607.205714][ T5887] pwc: recv_control_msg error -32 req 02 val 2000
[  607.331461][   T30] audit: type=1400 audit(2000000072.280:1020): avc:  denied  { mounton } for  pid=12527 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  608.007394][   T30] audit: type=1400 audit(2000000072.280:1021): avc:  denied  { mounton } for  pid=12527 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  608.035323][ T5887] pwc: recv_control_msg error -32 req 04 val 1500
[  608.044840][ T5887] pwc: recv_control_msg error -32 req 02 val 2500
[  608.051726][    T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  608.080178][ T5887] pwc: recv_control_msg error -32 req 02 val 2400
[  608.092506][ T5887] pwc: recv_control_msg error -32 req 02 val 2600
[  608.167302][ T5887] pwc: recv_control_msg error -32 req 02 val 2900
[  608.232354][ T5887] pwc: recv_control_msg error -32 req 02 val 2800
[  608.355588][    T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  608.373896][    T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  608.411021][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  608.434358][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.449975][ T5887] pwc: recv_control_msg error -71 req 04 val 1200
[  608.466636][ T5887] pwc: Registered as video103.
[  608.485306][ T5887] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23
[  608.504100][T12660] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  608.520355][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  608.600570][ T5887] usb 4-1: USB disconnect, device number 29
[  609.662179][T12660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  609.663366][T12682] veth0: entered promiscuous mode
[  609.901907][T12660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  609.961037][T12679] veth0: left promiscuous mode
[  609.996689][T12687] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1942'.
[  610.061661][    T9] usb 2-1: USB disconnect, device number 39
[  610.425328][ T5872] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  610.605109][T12698] veth0: entered promiscuous mode
[  610.613671][T12698] veth0: left promiscuous mode
[  610.759047][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  610.884386][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  610.948591][ T5872] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  611.041839][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.080440][ T5872] usb 4-1: config 0 descriptor??
[  611.303716][ T5872] usbhid 4-1:0.0: can't add hid device: -71
[  611.321530][ T5872] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  611.382455][ T5872] usb 4-1: USB disconnect, device number 30
[  611.419521][   T30] audit: type=1400 audit(2000000077.190:1022): avc:  denied  { ioctl } for  pid=12708 comm="syz.2.1949" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  611.577535][T12706] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  611.642636][   T30] audit: type=1400 audit(2000000077.420:1023): avc:  denied  { listen } for  pid=12705 comm="syz.5.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  611.660986][ T5936] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  611.776696][   T30] audit: type=1400 audit(2000000077.550:1024): avc:  denied  { append } for  pid=12718 comm="syz.5.1953" name="nbd5" dev="devtmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  611.839883][ T5872] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  611.860366][   T30] audit: type=1400 audit(2000000077.580:1025): avc:  denied  { read } for  pid=12718 comm="syz.5.1953" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  611.877555][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  611.910949][ T5936] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  611.920033][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.057392][ T5936] usb 3-1: config 0 descriptor??
[  612.070944][ T5872] usb 2-1: Using ep0 maxpacket: 32
[  612.079981][ T5872] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  612.089641][ T5872] usb 2-1: config 0 has no interface number 0
[  612.098026][ T5872] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  612.542782][   T30] audit: type=1400 audit(2000000078.310:1026): avc:  denied  { read } for  pid=12722 comm="syz.5.1956" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  612.579852][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.604098][ T5872] usb 2-1: Product: syz
[  612.616689][ T5872] usb 2-1: Manufacturer: syz
[  612.627810][   T30] audit: type=1400 audit(2000000078.310:1027): avc:  denied  { open } for  pid=12722 comm="syz.5.1956" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  612.657658][ T5872] usb 2-1: SerialNumber: syz
[  612.680032][ T5872] usb 2-1: config 0 descriptor??
[  612.722647][ T5872] radio-si470x 2-1:0.35: could not find interrupt in endpoint
[  612.756420][ T5872] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5
[  612.924500][ T5872] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  613.487575][ T5872] radio-raremono 2-1:0.35: V4L2 device registered as radio48
[  613.504653][ T2900] block nbd4: Possible stuck request ffff8880268d3b80: control (read@0,4096B). Runtime 30 seconds
[  613.518172][T12737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1959'.
[  613.612182][ T5936] usbhid 3-1:0.0: can't add hid device: -71
[  613.618922][ T5936] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  614.000387][ T5936] usb 3-1: USB disconnect, device number 34
[  614.039676][ T5872] usb 2-1: USB disconnect, device number 40
[  614.052795][ T5872] radio-raremono 2-1:0.35: Thanko's Raremono disconnected
[  614.161067][T12746] delete_channel: no stack
[  615.768531][T12759] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1963'.
[  616.531012][ T5872] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  616.699151][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  616.749760][ T5926] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  616.757397][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  617.110924][ T5872] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  617.120341][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.142136][ T5872] usb 3-1: config 0 descriptor??
[  617.223579][ T5926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  617.323793][ T5926] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  617.335355][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.347652][ T5926] usb 6-1: config 0 descriptor??
[  617.360147][ T5926] pwc: Askey VC010 type 2 USB webcam detected.
[  617.368970][ T5872] usbhid 3-1:0.0: can't add hid device: -71
[  617.386279][ T5872] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  617.639502][ T5872] usb 3-1: USB disconnect, device number 35
[  617.834266][ T5926] pwc: recv_control_msg error -32 req 02 val 2b00
[  617.841899][ T5926] pwc: recv_control_msg error -32 req 02 val 2700
[  618.001505][ T5926] pwc: recv_control_msg error -32 req 02 val 2c00
[  618.411845][ T5926] pwc: recv_control_msg error -32 req 04 val 1000
[  618.481278][ T5926] pwc: recv_control_msg error -32 req 04 val 1300
[  618.592196][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1975'.
[  618.604212][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1975'.
[  618.725496][ T5926] pwc: recv_control_msg error -32 req 02 val 2000
[  618.949549][ T5926] pwc: recv_control_msg error -32 req 04 val 1500
[  618.963031][ T5926] pwc: recv_control_msg error -32 req 02 val 2500
[  618.970428][ T5926] pwc: recv_control_msg error -32 req 02 val 2400
[  618.979606][ T5926] pwc: recv_control_msg error -32 req 02 val 2600
[  618.988370][ T5926] pwc: recv_control_msg error -32 req 02 val 2900
[  618.997332][ T5926] pwc: recv_control_msg error -32 req 02 val 2800
[  619.485565][ T5926] pwc: recv_control_msg error -71 req 04 val 1200
[  619.495875][ T5926] pwc: Registered as video103.
[  619.503872][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24
[  619.524846][ T5926] usb 6-1: USB disconnect, device number 2
[  619.839257][T12807] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1977'.
[  620.883429][T12819] input: syz0 as /devices/virtual/input/input25
[  621.409825][T12823] Invalid option length (1048180) for dns_resolver key
[  621.421704][T12827] block nbd1: shutting down sockets
[  621.594509][T12833] veth0: entered promiscuous mode
[  621.609350][T12833] veth0: left promiscuous mode
[  621.789237][T12832] Invalid option length (315) for dns_resolver key
[  622.160862][T12845] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1990'.
[  622.890544][T12857] block nbd3: shutting down sockets
[  622.904897][T12859] block nbd1: shutting down sockets
[  623.158366][   T30] audit: type=1400 audit(2000000088.930:1028): avc:  denied  { bind } for  pid=12861 comm="syz.2.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  623.194385][   T30] audit: type=1400 audit(2000000088.960:1029): avc:  denied  { getopt } for  pid=12861 comm="syz.2.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  623.963486][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  623.969834][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  624.178369][T12877] Invalid option length (315) for dns_resolver key
[  624.251022][ T5991] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  624.412913][ T5991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  624.440492][ T5991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  624.461250][ T5926] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  624.478737][ T5991] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  624.507020][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.546559][ T5991] usb 2-1: config 0 descriptor??
[  624.635407][ T5926] usb 6-1: Using ep0 maxpacket: 32
[  624.669899][ T5926] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  624.721096][ T5926] usb 6-1: config 0 has no interface number 0
[  624.753103][ T5926] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  624.919299][ T5991] usbhid 2-1:0.0: can't add hid device: -71
[  624.925777][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.934935][ T5991] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  624.943015][ T5926] usb 6-1: Product: syz
[  624.947203][ T5926] usb 6-1: Manufacturer: syz
[  624.955132][ T5991] usb 2-1: USB disconnect, device number 41
[  624.965438][ T5926] usb 6-1: SerialNumber: syz
[  624.971049][ T5872] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  624.981862][ T5926] usb 6-1: config 0 descriptor??
[  625.004457][ T5926] radio-si470x 6-1:0.35: could not find interrupt in endpoint
[  625.012424][ T5926] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5
[  625.041974][T12888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2004'.
[  625.162249][ T5872] usb 4-1: Using ep0 maxpacket: 32
[  625.363823][ T5872] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  625.417838][ T5926] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  625.440925][ T5872] usb 4-1: config 0 has no interface number 0
[  625.459997][ T5872] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  625.475579][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.484207][ T5872] usb 4-1: Product: syz
[  625.488423][ T5872] usb 4-1: Manufacturer: syz
[  625.496981][ T5872] usb 4-1: SerialNumber: syz
[  625.505039][ T5872] usb 4-1: config 0 descriptor??
[  625.520228][ T5872] radio-si470x 4-1:0.35: could not find interrupt in endpoint
[  625.528043][ T5872] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5
[  625.600660][ T5926] radio-raremono 6-1:0.35: V4L2 device registered as radio48
[  625.755045][ T5872] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  625.812154][ T5926] usb 6-1: USB disconnect, device number 3
[  625.894611][ T5926] radio-raremono 6-1:0.35: Thanko's Raremono disconnected
[  625.970763][ T5872] videodev: could not get a free minor
[  625.976447][ T5872] radio-raremono 4-1:0.35: could not register video device
[  626.074144][ T5872] radio-raremono 4-1:0.35: probe with driver radio-raremono failed with error -23
[  626.185578][ T5872] usbhid 4-1:0.35: couldn't find an input interrupt endpoint
[  626.292506][ T5872] usb 4-1: USB disconnect, device number 31
[  627.616643][T12911] veth0: entered promiscuous mode
[  627.631664][T12911] veth0: left promiscuous mode
[  628.026767][T12918] ip6tnl2: entered promiscuous mode
[  628.282625][ T5926] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  628.316743][T12926] veth0: entered promiscuous mode
[  628.348702][T12926] veth0: left promiscuous mode
[  628.589501][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  628.631205][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  628.680436][ T5926] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  628.765550][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.866404][ T5926] usb 6-1: config 0 descriptor??
[  629.112709][T12938] delete_channel: no stack
[  629.280960][ T5926] usbhid 6-1:0.0: can't add hid device: -71
[  629.292011][ T5926] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  629.315059][T12942] Invalid option length (315) for dns_resolver key
[  629.337008][ T5926] usb 6-1: USB disconnect, device number 4
[  629.901437][    T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  630.056800][    T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  630.086510][    T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  630.136214][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  630.247214][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.281288][T12941] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  630.765685][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  631.531612][T12938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  631.554305][T12938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  631.673023][T12961] veth0: entered promiscuous mode
[  631.682560][T12961] veth0: left promiscuous mode
[  632.482610][ T5926] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  632.657977][T12936] delete_channel: no stack
[  632.670469][    T9] usb 4-1: USB disconnect, device number 32
[  632.734684][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  632.748877][ T5926] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  632.808042][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.828274][ T5926] usb 3-1: config 0 descriptor??
[  632.874932][ T5926] pwc: Askey VC010 type 2 USB webcam detected.
[  632.989885][T12982] veth0: entered promiscuous mode
[  633.307787][T12981] veth0: left promiscuous mode
[  633.480906][ T5926] pwc: recv_control_msg error -32 req 02 val 2b00
[  633.696679][ T5926] pwc: recv_control_msg error -32 req 02 val 2700
[  633.711619][ T5926] pwc: recv_control_msg error -32 req 02 val 2c00
[  633.724534][ T5926] pwc: recv_control_msg error -32 req 04 val 1000
[  633.742093][ T5926] pwc: recv_control_msg error -32 req 04 val 1300
[  634.472283][ T5926] pwc: recv_control_msg error -32 req 02 val 2000
[  634.580899][ T5991] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  634.761532][ T5887] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  634.794594][ T5926] pwc: recv_control_msg error -32 req 04 val 1500
[  634.802910][ T5926] pwc: recv_control_msg error -32 req 02 val 2500
[  634.810641][ T5926] pwc: recv_control_msg error -32 req 02 val 2400
[  634.830891][ T5926] pwc: recv_control_msg error -32 req 02 val 2600
[  634.838067][ T5926] pwc: recv_control_msg error -32 req 02 val 2900
[  634.845442][ T5926] pwc: recv_control_msg error -32 req 02 val 2800
[  634.891149][ T5991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  635.017196][ T5991] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  635.116156][ T5926] pwc: recv_control_msg error -71 req 04 val 1200
[  635.181729][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.291148][ T5926] pwc: Registered as video103.
[  635.310681][ T5991] usb 2-1: config 0 descriptor??
[  635.320907][ T5872] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  635.342734][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26
[  635.370892][ T5887] usb 4-1: Using ep0 maxpacket: 32
[  635.389982][ T5887] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  635.399913][ T5926] usb 3-1: USB disconnect, device number 36
[  635.418132][ T5887] usb 4-1: config 0 has no interface number 0
[  635.445888][ T5887] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  635.466538][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.480092][ T5887] usb 4-1: Product: syz
[  635.485145][ T5887] usb 4-1: Manufacturer: syz
[  635.490405][ T5887] usb 4-1: SerialNumber: syz
[  635.503629][ T5887] usb 4-1: config 0 descriptor??
[  635.543612][ T5887] radio-si470x 4-1:0.35: could not find interrupt in endpoint
[  635.568613][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  635.583765][ T5887] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5
[  635.587090][ T5872] usb 6-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  635.624379][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.656416][ T5872] usb 6-1: config 0 descriptor??
[  635.735452][ T5887] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  635.937205][ T5887] radio-raremono 4-1:0.35: V4L2 device registered as radio48
[  635.997639][ T5926] usb 3-1: new low-speed USB device number 37 using dummy_hcd
[  636.048073][ T5991] usbhid 2-1:0.0: can't add hid device: -71
[  636.058096][ T5991] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  636.072804][ T5991] usb 2-1: USB disconnect, device number 42
[  636.140476][ T5939] usb 4-1: USB disconnect, device number 33
[  636.151911][ T5939] radio-raremono 4-1:0.35: Thanko's Raremono disconnected
[  636.161167][ T5926] usb 3-1: device descriptor read/64, error -71
[  636.299939][ T5872] usbhid 6-1:0.0: can't add hid device: -71
[  636.308210][ T5872] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  636.325220][ T5872] usb 6-1: USB disconnect, device number 5
[  636.420988][ T5926] usb 3-1: new low-speed USB device number 38 using dummy_hcd
[  636.551116][ T5926] usb 3-1: device descriptor read/64, error -71
[  636.661506][ T5926] usb usb3-port1: attempt power cycle
[  637.856794][T13039] veth0: entered promiscuous mode
[  637.862059][T13039] veth0: left promiscuous mode
[  637.867051][ T5926] usb 3-1: new low-speed USB device number 39 using dummy_hcd
[  637.924096][ T5926] usb 3-1: device descriptor read/8, error -71
[  639.489126][ T5926] usb 3-1: new low-speed USB device number 40 using dummy_hcd
[  639.658002][ T5926] usb 3-1: device descriptor read/8, error -71
[  639.842128][T13063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2060'.
[  640.119680][ T5926] usb usb3-port1: unable to enumerate USB device
[  640.257621][T13065] veth0: entered promiscuous mode
[  640.266062][T13065] veth0: left promiscuous mode
[  640.666334][T13079] /dev/nullb0: Can't lookup blockdev
[  640.880904][ T5926] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  641.120127][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.138711][ T5926] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  641.156296][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.253263][T13096] veth0: entered promiscuous mode
[  641.262964][T13096] veth0: left promiscuous mode
[  641.446704][T13098] delete_channel: no stack
[  641.511886][ T5926] usb 4-1: config 0 descriptor??
[  641.701309][T13100] nbd2: detected capacity change from 0 to 4294967296
[  641.717340][T13105] Invalid option length (1048180) for dns_resolver key
[  641.727816][T13106] block nbd2: shutting down sockets
[  641.771598][    C0] blk_print_req_error: 74 callbacks suppressed
[  641.771613][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  641.786894][    C0] buffer_io_error: 72 callbacks suppressed
[  641.786904][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  641.801962][ T7262] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  641.811796][ T7262] Buffer I/O error on dev nbd2, logical block 0, async page read
[  641.824405][ T7262] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  641.835601][ T7262] Buffer I/O error on dev nbd2, logical block 0, async page read
[  641.840905][ T5872] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  641.844462][ T7262] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  641.861839][ T7262] Buffer I/O error on dev nbd2, logical block 0, async page read
[  641.872128][ T7262] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  641.895420][ T7262] Buffer I/O error on dev nbd2, logical block 0, async page read
[  641.908690][ T7262] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  641.918996][ T7262] Buffer I/O error on dev nbd2, logical block 0, async page read
[  642.047417][ T7262] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  642.070532][ T7262] Buffer I/O error on dev nbd2, logical block 0, async page read
[  642.080416][ T7262] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  642.092095][ T7262] Buffer I/O error on dev nbd2, logical block 0, async page read
[  642.099995][ T7262] ldm_validate_partition_table(): Disk read failed.
[  642.170936][T13111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2075'.
[  642.534900][ T7262] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  642.566352][ T5872] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  642.577737][ T5872] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  642.599070][ T5872] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  642.608993][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.625799][ T7262] Buffer I/O error on dev nbd2, logical block 0, async page read
[  642.636298][T13102] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  642.659256][ T5872] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  642.675821][ T7262] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  642.769997][ T7262] Buffer I/O error on dev nbd2, logical block 0, async page read
[  642.791120][ T7262] Dev nbd2: unable to read RDB block 0
[  642.798301][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2078'.
[  642.991955][ T7262]  nbd2: unable to read partition table
[  643.018767][ T5926] usbhid 4-1:0.0: can't add hid device: -71
[  643.031114][ T5926] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  643.067223][ T7262] ldm_validate_partition_table(): Disk read failed.
[  643.167858][ T7262] Dev nbd2: unable to read RDB block 0
[  643.175377][ T7262]  nbd2: unable to read partition table
[  643.190652][ T5926] usb 4-1: USB disconnect, device number 34
[  643.487541][T13123] veth0: entered promiscuous mode
[  643.497182][T13123] veth0: left promiscuous mode
[  643.570126][T13098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.626744][T13098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.899504][ T2900] block nbd4: Possible stuck request ffff8880268d3b80: control (read@0,4096B). Runtime 60 seconds
[  644.877018][T13148] Invalid option length (1048180) for dns_resolver key
[  645.206251][ T5887] usb 2-1: USB disconnect, device number 43
[  645.437009][T13157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2088'.
[  646.395242][T13161] loop6: detected capacity change from 0 to 524287999
[  646.417698][T13161] ldm_validate_partition_table(): Disk read failed.
[  646.427770][T13161] Dev loop6: unable to read RDB block 0
[  646.436833][T13161]  loop6: unable to read partition table
[  646.446735][T13161] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  647.203347][T13168] veth0: entered promiscuous mode
[  647.208533][T13168] veth0: left promiscuous mode
[  647.255351][T13170] veth0: entered promiscuous mode
[  647.266740][T13170] veth0: left promiscuous mode
[  647.311423][    T9] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  647.361590][ T5887] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  647.473124][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  647.521619][ T5887] usb 2-1: Using ep0 maxpacket: 32
[  647.664302][ T5887] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  647.824280][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  647.840142][ T5887] usb 2-1: config 0 has no interface number 0
[  648.126442][    T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  648.136512][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.147643][ T5887] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  648.166356][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.190752][    T9] usb 6-1: config 0 descriptor??
[  648.219787][ T5887] usb 2-1: Product: syz
[  648.225028][ T5887] usb 2-1: Manufacturer: syz
[  648.235875][ T5887] usb 2-1: SerialNumber: syz
[  648.289326][ T5887] usb 2-1: config 0 descriptor??
[  648.316144][ T5887] usb 2-1: can't set config #0, error -71
[  648.333106][ T5887] usb 2-1: USB disconnect, device number 44
[  648.476681][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  648.520287][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  648.578292][T13200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2101'.
[  648.814755][    T9] usb 6-1: USB disconnect, device number 6
[  649.409778][T13209] delete_channel: no stack
[  649.586435][T13214] veth0: entered promiscuous mode
[  649.596035][T13214] veth0: left promiscuous mode
[  650.111988][T13229] delete_channel: no stack
[  650.854788][ T5872] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  651.345872][T10063] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  652.062294][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  652.284241][T10063] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  652.407948][T13256] veth0: entered promiscuous mode
[  652.425686][T13256] veth0: left promiscuous mode
[  652.557136][T10063] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  652.637315][T10063] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  652.647379][T10063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.695447][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  652.719385][ T5872] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  652.736291][T13239] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  652.770973][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.054517][T10063] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  653.201064][T13229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  653.212441][T13229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  653.247717][ T5872] usb 6-1: config 0 descriptor??
[  653.481432][ T5887] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  653.491444][ T5872] usbhid 6-1:0.0: can't add hid device: -71
[  653.625334][T13274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2126'.
[  653.625888][ T5872] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  653.643748][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2126'.
[  653.681376][ T5872] usb 6-1: USB disconnect, device number 7
[  653.711601][ T5887] usb 3-1: Using ep0 maxpacket: 8
[  653.728117][ T5887] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  653.738088][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.783798][ T5887] usb 3-1: config 0 descriptor??
[  655.359923][ T5991] usb 2-1: USB disconnect, device number 45
[  655.378387][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2132'.
[  655.395587][T13294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2132'.
[  655.850999][ T5991] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  656.232993][T13310] delete_channel: no stack
[  656.287204][ T5991] usb 2-1: Using ep0 maxpacket: 32
[  656.314386][ T5991] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  656.325400][ T5991] usb 2-1: config 0 has no interface number 0
[  656.334110][ T5991] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  656.347335][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.355562][ T5991] usb 2-1: Product: syz
[  656.365673][ T5991] usb 2-1: Manufacturer: syz
[  656.384098][ T5991] usb 2-1: SerialNumber: syz
[  656.405341][ T5991] usb 2-1: config 0 descriptor??
[  656.420341][ T5991] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  656.509512][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2138'.
[  656.542613][T13314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2138'.
[  656.635195][ T5991] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  656.709506][ T5991] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  657.136218][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  657.139355][T10063] usb 2-1: USB disconnect, device number 46
[  657.200169][ T5887] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  657.213732][T10063] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  657.230598][ T5887] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  657.264736][T10063] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  657.280536][ T5887] asix 3-1:0.0: probe with driver asix failed with error -71
[  657.298578][T10063] quatech2 2-1:0.51: device disconnected
[  657.324603][ T5887] usb 3-1: USB disconnect, device number 41
[  657.511555][ T5872] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  657.784209][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  657.800869][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  657.816974][ T5872] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  657.854666][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.939781][ T5872] usb 4-1: config 0 descriptor??
[  658.250452][ T5872] usbhid 4-1:0.0: can't add hid device: -71
[  658.259131][ T5872] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  658.273662][ T5872] usb 4-1: USB disconnect, device number 35
[  659.670769][T13350] loop6: detected capacity change from 0 to 524287999
[  659.683160][T13350] buffer_io_error: 39 callbacks suppressed
[  659.683189][T13350] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.698745][T13350] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.707575][T13350] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.717568][T13350] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.726414][T13350] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.735471][T13350] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.744447][T13350] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.753152][T13350] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.762784][T13350] ldm_validate_partition_table(): Disk read failed.
[  659.769832][T13350] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.779213][T13350] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.789384][T13350] Dev loop6: unable to read RDB block 0
[  659.797664][T13350]  loop6: unable to read partition table
[  659.806333][T13350] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  660.398294][T13366] loop6: detected capacity change from 0 to 524287999
[  660.406260][T13366] ldm_validate_partition_table(): Disk read failed.
[  660.411755][T10063] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  660.416925][T13366] Dev loop6: unable to read RDB block 0
[  660.426627][T13366]  loop6: unable to read partition table
[  660.444483][T13366] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  660.973565][ T7262] ldm_validate_partition_table(): Disk read failed.
[  660.980623][ T7262] Dev loop6: unable to read RDB block 0
[  660.988977][ T7262]  loop6: unable to read partition table
[  660.997328][T13368] ldm_validate_partition_table(): Disk read failed.
[  661.004797][T13368] Dev loop6: unable to read RDB block 0
[  661.015335][T13368]  loop6: unable to read partition table
[  661.021527][T10063] usb 3-1: Using ep0 maxpacket: 8
[  661.022965][T10063] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  661.033679][T13368] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  661.067827][T10063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.108484][T10063] usb 3-1: config 0 descriptor??
[  661.212054][T13378] delete_channel: no stack
[  661.460498][ T5887] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  661.638934][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  661.651685][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  661.673608][ T5887] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  661.689968][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.729972][ T5887] usb 2-1: config 0 descriptor??
[  662.113902][ T5887] usbhid 2-1:0.0: can't add hid device: -71
[  662.119936][ T5887] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  662.194178][ T5887] usb 2-1: USB disconnect, device number 47
[  663.105847][T13399] veth0: entered promiscuous mode
[  663.120399][T13399] veth0: left promiscuous mode
[  664.477382][T10063] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  664.711280][T10063] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  664.754432][T10063] asix 3-1:0.0: probe with driver asix failed with error -71
[  664.773639][T10063] usb 3-1: USB disconnect, device number 42
[  665.831067][ T5872] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  665.893535][ T5879] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  666.001038][ T5872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  666.048138][T13445] delete_channel: no stack
[  666.065882][ T5872] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  666.145972][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.164480][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  666.171849][ T5872] usb 3-1: config 0 descriptor??
[  666.175795][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  666.212609][ T5872] pwc: Askey VC010 type 2 USB webcam detected.
[  666.226591][ T5879] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  666.353003][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.401967][ T5879] usb 6-1: config 0 descriptor??
[  666.481118][ T5991] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  666.627577][ T5879] usbhid 6-1:0.0: can't add hid device: -71
[  666.637770][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00
[  666.649449][ T5872] pwc: recv_control_msg error -32 req 02 val 2700
[  666.656634][ T5991] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  666.677485][ T5872] pwc: recv_control_msg error -32 req 02 val 2c00
[  666.697426][ T5879] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  666.704091][ T5991] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  666.723259][ T5872] pwc: recv_control_msg error -32 req 04 val 1000
[  666.735957][ T5879] usb 6-1: USB disconnect, device number 8
[  666.742867][ T5872] pwc: recv_control_msg error -32 req 04 val 1300
[  666.749479][ T5991] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  666.774684][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.869120][T13446] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  666.885452][ T5991] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  666.960127][ T5872] pwc: recv_control_msg error -32 req 02 val 2000
[  667.124433][T13445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.133369][T13445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.173529][ T5872] pwc: recv_control_msg error -32 req 04 val 1500
[  667.181580][ T5872] pwc: recv_control_msg error -32 req 02 val 2500
[  667.189075][ T5872] pwc: recv_control_msg error -32 req 02 val 2400
[  667.197064][ T5872] pwc: recv_control_msg error -32 req 02 val 2600
[  667.205612][ T5872] pwc: recv_control_msg error -32 req 02 val 2900
[  667.214131][ T5872] pwc: recv_control_msg error -32 req 02 val 2800
[  667.426545][ T5872] pwc: recv_control_msg error -71 req 04 val 1200
[  667.469373][T13462] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2186'.
[  667.926296][T13464] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  667.932202][ T5872] pwc: Registered as video103.
[  668.000587][ T5872] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27
[  668.157360][ T5872] usb 3-1: USB disconnect, device number 43
[  668.569690][T13481] /dev/nullb0: Can't lookup blockdev
[  668.664161][T13484] Invalid option length (1048180) for dns_resolver key
[  668.899035][T13483] XFS (nullb0): Invalid superblock magic number
[  668.984335][T13495] loop6: detected capacity change from 0 to 524287999
[  669.007211][T13495] buffer_io_error: 56 callbacks suppressed
[  669.007243][T13495] Buffer I/O error on dev loop6, logical block 0, async page read
[  669.027340][T13495] Buffer I/O error on dev loop6, logical block 0, async page read
[  669.038352][T13495] Buffer I/O error on dev loop6, logical block 0, async page read
[  669.050222][T13495] Buffer I/O error on dev loop6, logical block 0, async page read
[  669.063337][T13495] Buffer I/O error on dev loop6, logical block 0, async page read
[  669.076959][T13495] Buffer I/O error on dev loop6, logical block 0, async page read
[  669.089213][T13495] Buffer I/O error on dev loop6, logical block 0, async page read
[  669.100022][T13495] Buffer I/O error on dev loop6, logical block 0, async page read
[  669.110327][T13495] ldm_validate_partition_table(): Disk read failed.
[  669.119340][T13495] Buffer I/O error on dev loop6, logical block 0, async page read
[  669.129557][T13495] Buffer I/O error on dev loop6, logical block 0, async page read
[  669.140824][T13495] Dev loop6: unable to read RDB block 0
[  669.157215][T13495]  loop6: unable to read partition table
[  669.167731][T13495] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  669.535845][   T30] audit: type=1400 audit(2000000135.310:1030): avc:  denied  { bind } for  pid=13502 comm="syz.3.2199" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  669.693065][   T30] audit: type=1400 audit(2000000135.310:1031): avc:  denied  { name_bind } for  pid=13502 comm="syz.3.2199" src=20128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  669.981217][T13509] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2200'.
[  670.501489][   T30] audit: type=1400 audit(2000000135.310:1032): avc:  denied  { node_bind } for  pid=13502 comm="syz.3.2199" saddr=10.1.1.0 src=20128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  670.660928][ T5872] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  670.772884][ T5926] usb 2-1: USB disconnect, device number 48
[  670.881680][ T5872] usb 6-1: Using ep0 maxpacket: 8
[  670.934274][ T5872] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  671.047775][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.066692][ T5872] usb 6-1: config 0 descriptor??
[  671.080088][   T30] audit: type=1400 audit(2000000136.850:1033): avc:  denied  { ioctl } for  pid=13524 comm="syz.0.2204" path="socket:[39682]" dev="sockfs" ino=39682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  671.151338][ T5887] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  671.185985][   T30] audit: type=1400 audit(2000000136.850:1034): avc:  denied  { connect } for  pid=13524 comm="syz.0.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  671.605158][   T30] audit: type=1400 audit(2000000136.860:1035): avc:  denied  { write } for  pid=13524 comm="syz.0.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  672.345618][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  672.356755][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  672.374817][ T5887] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  672.384845][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.395386][ T5887] usb 4-1: Product: syz
[  672.399770][ T5887] usb 4-1: Manufacturer: syz
[  672.405499][ T5887] usb 4-1: SerialNumber: syz
[  672.453479][T13539] loop6: detected capacity change from 0 to 524287999
[  672.463820][T13539] ldm_validate_partition_table(): Disk read failed.
[  672.472266][T13539] Dev loop6: unable to read RDB block 0
[  672.480560][T13539]  loop6: unable to read partition table
[  672.488011][T13539] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  672.863998][ T7262] ldm_validate_partition_table(): Disk read failed.
[  672.885010][ T7262] Dev loop6: unable to read RDB block 0
[  672.898611][ T7262]  loop6: unable to read partition table
[  672.985213][T13539] ldm_validate_partition_table(): Disk read failed.
[  673.154572][T13539] Dev loop6: unable to read RDB block 0
[  673.165483][T13539]  loop6: unable to read partition table
[  673.259669][T13539] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  673.438439][T13520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  673.448376][T13520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  673.498843][T13549] veth0: entered promiscuous mode
[  673.504522][T13549] veth0: left promiscuous mode
[  673.516158][T13550] Invalid option length (1048180) for dns_resolver key
[  673.646298][   T30] audit: type=1400 audit(2000000139.420:1036): avc:  denied  { read } for  pid=13519 comm="syz.3.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  673.673104][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'.
[  673.684104][   T30] audit: type=1400 audit(2000000139.460:1037): avc:  denied  { create } for  pid=13519 comm="syz.3.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  673.776999][   T30] audit: type=1400 audit(2000000139.550:1038): avc:  denied  { open } for  pid=13519 comm="syz.3.2203" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  673.855475][   T30] audit: type=1400 audit(2000000139.580:1039): avc:  denied  { read write } for  pid=5828 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  674.133107][ T5872] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  674.143995][ T5872] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  674.157918][ T5887] usb 4-1: cannot find UAC_HEADER
[  674.158307][ T5872] asix 6-1:0.0: probe with driver asix failed with error -71
[  674.174054][ T5872] usb 6-1: USB disconnect, device number 9
[  674.269320][T13562] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2212'.
[  674.717043][ T2900] block nbd4: Possible stuck request ffff8880268d3b80: control (read@0,4096B). Runtime 90 seconds
[  674.732428][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  674.732437][   T30] audit: type=1400 audit(2000000140.510:1053): avc:  denied  { write } for  pid=13560 comm="syz.0.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  674.812623][   T30] audit: type=1400 audit(2000000140.510:1054): avc:  denied  { read } for  pid=13560 comm="syz.0.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  674.833927][   T30] audit: type=1400 audit(2000000140.590:1055): avc:  denied  { ioctl } for  pid=13560 comm="syz.0.2213" path="socket:[39806]" dev="sockfs" ino=39806 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  674.923860][ T5887] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  674.952243][   T30] audit: type=1400 audit(2000000140.730:1056): avc:  denied  { create } for  pid=13564 comm="syz.3.2215" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  675.007949][ T5887] usb 4-1: USB disconnect, device number 36
[  675.047515][ T7262] udevd[7262]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  675.062639][   T30] audit: type=1400 audit(2000000140.760:1057): avc:  denied  { ioctl } for  pid=13565 comm="syz.1.2214" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  675.137176][T13580] delete_channel: no stack
[  675.297643][   T30] audit: type=1400 audit(2000000140.770:1058): avc:  denied  { read } for  pid=13565 comm="syz.1.2214" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  675.609768][   T30] audit: type=1400 audit(2000000140.770:1059): avc:  denied  { open } for  pid=13565 comm="syz.1.2214" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  675.636522][   T30] audit: type=1400 audit(2000000140.770:1060): avc:  denied  { ioctl } for  pid=13565 comm="syz.1.2214" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  675.661753][    C1] vkms_vblank_simulate: vblank timer overrun
[  675.671573][   T30] audit: type=1400 audit(2000000140.780:1061): avc:  denied  { read append } for  pid=13565 comm="syz.1.2214" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  675.694767][    C1] vkms_vblank_simulate: vblank timer overrun
[  675.735586][   T30] audit: type=1400 audit(2000000140.780:1062): avc:  denied  { open } for  pid=13565 comm="syz.1.2214" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  675.759117][    C1] vkms_vblank_simulate: vblank timer overrun
[  676.188041][ T5872] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  676.221474][T13596] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2224'.
[  676.241840][ T5991] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  676.766794][ T5991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  676.828244][ T5991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  677.041947][ T5991] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  677.051936][ T5872] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  677.099934][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.109282][ T5872] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  677.129811][ T5872] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  677.141714][ T5991] usb 2-1: config 0 descriptor??
[  677.147747][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.151811][T13601] /dev/nullb0: Can't lookup blockdev
[  677.181385][T13586] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  677.222199][ T5872] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  677.468455][T13605] hub 8-0:1.0: USB hub found
[  677.474818][T13605] hub 8-0:1.0: 1 port detected
[  677.814774][ T5991] usbhid 2-1:0.0: can't add hid device: -71
[  677.854993][T13580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  677.864042][T13580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  677.884311][ T5991] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  677.945811][ T5991] usb 2-1: USB disconnect, device number 49
[  679.318221][ T5887] usb 4-1: USB disconnect, device number 37
[  679.511606][ T5879] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  679.624082][T13638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2239'.
[  679.686154][T13639] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2235'.
[  680.114403][ T5879] usb 2-1: Using ep0 maxpacket: 16
[  680.150397][ T5879] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  680.161039][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.175229][ T5879] usb 2-1: Product: syz
[  680.186051][ T5879] usb 2-1: Manufacturer: syz
[  680.192537][ T5879] usb 2-1: SerialNumber: syz
[  680.299385][ T5879] usb 2-1: config 0 descriptor??
[  680.396696][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2243'.
[  680.408503][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2243'.
[  680.583444][T13656] Invalid option length (1048180) for dns_resolver key
[  680.631020][ T5872] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  680.690894][ T5991] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  680.752170][   T30] kauditd_printk_skb: 67 callbacks suppressed
[  680.752202][   T30] audit: type=1400 audit(2000000146.450:1130): avc:  denied  { ioctl } for  pid=13649 comm="syz.3.2243" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=41039 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  680.899599][ T5991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  681.440680][ T5879] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  681.441308][ T5872] usb 3-1: device descriptor read/64, error -71
[  681.462754][ T5991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  681.473093][   T30] audit: type=1400 audit(2000000147.120:1131): avc:  denied  { getopt } for  pid=13659 comm="syz.0.2246" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  681.489674][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  681.493598][ T5991] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  681.493625][ T5991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.494716][   T30] audit: type=1400 audit(2000000147.170:1132): avc:  denied  { create } for  pid=13659 comm="syz.0.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  681.532252][ T5879] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  681.543224][ T5991] usb 6-1: config 0 descriptor??
[  681.560558][   T30] audit: type=1400 audit(2000000147.170:1133): avc:  denied  { shutdown } for  pid=13659 comm="syz.0.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  681.582512][   T30] audit: type=1400 audit(2000000147.170:1134): avc:  denied  { setopt } for  pid=13659 comm="syz.0.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  681.607001][ T5879] usb 2-1: media controller created
[  681.645357][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  681.718959][T13667] delete_channel: no stack
[  681.723900][ T5872] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  681.871273][ T5872] usb 3-1: device descriptor read/64, error -71
[  682.075822][ T5991] usbhid 6-1:0.0: can't add hid device: -71
[  682.083013][ T5991] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  682.100923][ T5991] usb 6-1: USB disconnect, device number 10
[  682.172637][ T5872] usb usb3-port1: attempt power cycle
[  682.200040][T13671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2249'.
[  682.234825][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2249'.
[  682.244797][ T5879] zl10353_read_register: readreg error (reg=127, ret==0)
[  682.256839][ T5879] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  682.266282][ T5879] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  682.293308][   T30] audit: type=1400 audit(2000000148.070:1135): avc:  denied  { create } for  pid=13670 comm="syz.3.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  682.344804][   T30] audit: type=1400 audit(2000000148.090:1136): avc:  denied  { getopt } for  pid=13670 comm="syz.3.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  682.386977][T13671] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2249'.
[  682.531181][ T5872] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  682.682438][ T5872] usb 3-1: device descriptor read/8, error -71
[  682.961277][ T5872] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  683.176424][ T5872] usb 3-1: device descriptor read/8, error -71
[  683.232048][ T5887] usb 2-1: USB disconnect, device number 50
[  683.252038][   T30] audit: type=1400 audit(2000000149.030:1137): avc:  denied  { ioctl } for  pid=13683 comm="syz.3.2252" path="socket:[41089]" dev="sockfs" ino=41089 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  683.277873][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2252'.
[  683.337712][ T5887] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  683.354005][ T5872] usb usb3-port1: unable to enumerate USB device
[  683.620461][T13688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2253'.
[  685.173460][ T5991] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  685.391168][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  685.398162][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  685.401460][   T30] audit: type=1400 audit(2000000150.690:1138): avc:  denied  { bind } for  pid=13702 comm="syz.3.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  685.810245][   T30] audit: type=1400 audit(2000000150.690:1139): avc:  denied  { name_bind } for  pid=13702 comm="syz.3.2258" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  685.858126][   T30] audit: type=1400 audit(2000000150.690:1140): avc:  denied  { node_bind } for  pid=13702 comm="syz.3.2258" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  685.909963][   T30] audit: type=1400 audit(2000000150.700:1141): avc:  denied  { write } for  pid=13702 comm="syz.3.2258" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  685.961105][   T30] audit: type=1400 audit(2000000150.700:1142): avc:  denied  { connect } for  pid=13702 comm="syz.3.2258" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  686.383321][   T30] audit: type=1400 audit(2000000150.700:1143): avc:  denied  { name_connect } for  pid=13702 comm="syz.3.2258" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  686.405798][   T30] audit: type=1400 audit(2000000151.740:1144): avc:  denied  { ioctl } for  pid=13714 comm="syz.5.2262" path="socket:[40585]" dev="sockfs" ino=40585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  686.431850][   T30] audit: type=1400 audit(2000000151.860:1145): avc:  denied  { mount } for  pid=13705 comm="syz.2.2260" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  686.466755][ T5991] usb 4-1: Using ep0 maxpacket: 32
[  686.554077][ T5991] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  686.711337][   T30] audit: type=1400 audit(2000000152.450:1146): avc:  denied  { ioctl } for  pid=13718 comm="syz.2.2263" path="socket:[40598]" dev="sockfs" ino=40598 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  686.785522][T13720] loop6: detected capacity change from 0 to 524287999
[  686.803980][T13720] buffer_io_error: 56 callbacks suppressed
[  686.804012][T13720] Buffer I/O error on dev loop6, logical block 0, async page read
[  686.822766][T13720] Buffer I/O error on dev loop6, logical block 0, async page read
[  686.834049][T13720] Buffer I/O error on dev loop6, logical block 0, async page read
[  686.845144][T13720] Buffer I/O error on dev loop6, logical block 0, async page read
[  686.856455][T13720] Buffer I/O error on dev loop6, logical block 0, async page read
[  686.868027][T13720] Buffer I/O error on dev loop6, logical block 0, async page read
[  686.878689][T13720] Buffer I/O error on dev loop6, logical block 0, async page read
[  686.889593][T13720] Buffer I/O error on dev loop6, logical block 0, async page read
[  686.903024][T13720] ldm_validate_partition_table(): Disk read failed.
[  686.909947][T13720] Buffer I/O error on dev loop6, logical block 0, async page read
[  686.922513][T13720] Buffer I/O error on dev loop6, logical block 0, async page read
[  686.935198][T13720] Dev loop6: unable to read RDB block 0
[  686.947379][T13720]  loop6: unable to read partition table
[  686.956973][T13720] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  687.020868][ T5991] usb 4-1: config 0 has no interface number 0
[  687.034761][ T5991] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  687.046941][   T30] audit: type=1400 audit(2000000152.540:1147): avc:  denied  { append } for  pid=13718 comm="syz.2.2263" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  687.071040][ T5991] usb 4-1: config 0 interface 1 has no altsetting 0
[  687.098863][T13716] veth0: entered promiscuous mode
[  687.105533][T13716] veth0: left promiscuous mode
[  687.110541][   T30] audit: type=1400 audit(2000000152.870:1148): avc:  denied  { mounton } for  pid=13714 comm="syz.5.2262" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  687.123299][ T5991] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  687.174619][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.198882][ T5991] usb 4-1: Product: syz
[  687.207705][ T5991] usb 4-1: Manufacturer: syz
[  687.239567][ T5991] usb 4-1: SerialNumber: syz
[  687.246060][T13719] ldm_validate_partition_table(): Disk read failed.
[  687.253385][T13719] Dev loop6: unable to read RDB block 0
[  687.259276][T13719]  loop6: unable to read partition table
[  687.265117][T13719] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  687.292746][ T5991] usb 4-1: config 0 descriptor??
[  687.541538][ T5991] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  687.553046][ T5991] cx231xx 4-1:0.1: Failed to read PCB config
[  687.559072][ T5991] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71
[  687.572941][ T5991] usb 4-1: USB disconnect, device number 38
[  687.593848][T13734] /dev/nullb0: Can't lookup blockdev
[  687.737670][T13738] sysfs: cannot create duplicate filename '/class/ieee80211/!�'
[  687.746482][T13738] CPU: 0 UID: 0 PID: 13738 Comm: syz.5.2268 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) 
[  687.746509][T13738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  687.746522][T13738] Call Trace:
[  687.746531][T13738]  <TASK>
[  687.746539][T13738]  dump_stack_lvl+0x16c/0x1f0
[  687.746574][T13738]  sysfs_warn_dup+0x7f/0xa0
[  687.746602][T13738]  sysfs_do_create_link_sd+0x124/0x140
[  687.746637][T13738]  sysfs_create_link+0x61/0xc0
[  687.746663][T13738]  device_add+0x62c/0x1a70
[  687.746687][T13738]  ? __pfx_device_add+0x10/0x10
[  687.746703][T13738]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  687.746732][T13738]  ? ieee80211_set_bitrate_flags+0x243/0x6b0
[  687.746771][T13738]  wiphy_register+0x1c9c/0x2850
[  687.746805][T13738]  ? __pfx_wiphy_register+0x10/0x10
[  687.746839][T13738]  ? ieee80211_register_hw+0x2248/0x4140
[  687.746866][T13738]  ieee80211_register_hw+0x24ac/0x4140
[  687.746898][T13738]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  687.746926][T13738]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  687.746948][T13738]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  687.746967][T13738]  ? __hrtimer_setup+0x176/0x280
[  687.746990][T13738]  mac80211_hwsim_new_radio+0x3034/0x54d0
[  687.747031][T13738]  ? __kmalloc_node_track_caller_noprof+0x23e/0x510
[  687.747057][T13738]  ? __pfx___schedule+0x10/0x10
[  687.747081][T13738]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  687.747110][T13738]  ? __asan_memcpy+0x3c/0x60
[  687.747136][T13738]  hwsim_new_radio_nl+0xb51/0x12c0
[  687.747164][T13738]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  687.747188][T13738]  ? lockdep_hardirqs_on+0x7c/0x110
[  687.747223][T13738]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  687.747254][T13738]  genl_family_rcv_msg_doit+0x206/0x2f0
[  687.747282][T13738]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  687.747316][T13738]  ? bpf_lsm_capable+0x9/0x10
[  687.747335][T13738]  ? security_capable+0x7e/0x260
[  687.747359][T13738]  ? ns_capable+0xd7/0x110
[  687.747382][T13738]  genl_rcv_msg+0x55c/0x800
[  687.747409][T13738]  ? __pfx_genl_rcv_msg+0x10/0x10
[  687.747431][T13738]  ? __pfx___schedule+0x10/0x10
[  687.747460][T13738]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  687.747492][T13738]  ? irqentry_exit+0x3b/0x90
[  687.747522][T13738]  netlink_rcv_skb+0x155/0x420
[  687.747542][T13738]  ? __pfx_genl_rcv_msg+0x10/0x10
[  687.747568][T13738]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  687.747587][T13738]  ? preempt_schedule_thunk+0x16/0x30
[  687.747629][T13738]  genl_rcv+0x28/0x40
[  687.747655][T13738]  netlink_unicast+0x53d/0x7f0
[  687.747681][T13738]  ? __pfx_netlink_unicast+0x10/0x10
[  687.747701][T13738]  ? __alloc_skb+0x200/0x380
[  687.747734][T13738]  netlink_sendmsg+0x8d1/0xdd0
[  687.747761][T13738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  687.747786][T13738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  687.747814][T13738]  ____sys_sendmsg+0xa98/0xc70
[  687.747837][T13738]  ? copy_msghdr_from_user+0x10a/0x160
[  687.747866][T13738]  ? __pfx_____sys_sendmsg+0x10/0x10
[  687.747901][T13738]  ___sys_sendmsg+0x134/0x1d0
[  687.747931][T13738]  ? __pfx____sys_sendmsg+0x10/0x10
[  687.747955][T13738]  ? __lock_acquire+0x622/0x1c90
[  687.748020][T13738]  __sys_sendmsg+0x16d/0x220
[  687.748047][T13738]  ? __pfx___sys_sendmsg+0x10/0x10
[  687.748085][T13738]  ? rcu_read_unlock_trace_special+0x2aa/0x3f0
[  687.748114][T13738]  ? rcu_is_watching+0x12/0xc0
[  687.748139][T13738]  do_syscall_64+0xcd/0x4c0
[  687.748169][T13738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.748188][T13738] RIP: 0033:0x7fcd03b8e929
[  687.748203][T13738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  687.748220][T13738] RSP: 002b:00007fcd04a9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  687.748239][T13738] RAX: ffffffffffffffda RBX: 00007fcd03db6160 RCX: 00007fcd03b8e929
[  687.748251][T13738] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d
[  687.748263][T13738] RBP: 00007fcd03c10b39 R08: 0000000000000000 R09: 0000000000000000
[  687.748273][T13738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  687.748284][T13738] R13: 0000000000000000 R14: 00007fcd03db6160 R15: 00007fffad9e3808
[  687.748311][T13738]  </TASK>
[  688.475371][T13751] delete_channel: no stack
[  688.540874][ T5991] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  689.054497][ T5991] usb 4-1: Using ep0 maxpacket: 32
[  689.147160][ T5991] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  689.347539][T13760] loop6: detected capacity change from 0 to 524287999
[  689.365763][T13760] ldm_validate_partition_table(): Disk read failed.
[  689.376030][T13760] Dev loop6: unable to read RDB block 0
[  689.385354][T13760]  loop6: unable to read partition table
[  689.393526][T13760] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  689.609524][ T5991] usb 4-1: config 0 has no interface number 0
[  689.621624][ T5991] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  689.640490][ T5991] usb 4-1: config 0 interface 1 has no altsetting 0
[  689.647792][ T5991] usb 4-1: string descriptor 0 read error: -71
[  689.654361][ T5962] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  689.657036][ T5991] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  689.681713][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.700680][ T5991] usb 4-1: config 0 descriptor??
[  689.727468][ T5991] usb 4-1: can't set config #0, error -71
[  689.734876][ T7262] ldm_validate_partition_table(): Disk read failed.
[  689.741951][ T7262] Dev loop6: unable to read RDB block 0
[  689.747694][ T7262]  loop6: unable to read partition table
[  689.757922][T13761] ldm_validate_partition_table(): Disk read failed.
[  689.765794][T13749] syz.5.2272 (13749): drop_caches: 2
[  689.785838][T13761] Dev loop6: unable to read RDB block 0
[  689.797591][ T5991] usb 4-1: USB disconnect, device number 39
[  689.841458][ T5962] usb 2-1: Using ep0 maxpacket: 8
[  689.849053][ T5962] usb 2-1: config 253 has an invalid interface number: 164 but max is 0
[  689.859965][ T5962] usb 2-1: config 253 has no interface number 0
[  689.869470][T13761]  loop6: unable to read partition table
[  689.928764][T13761] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  689.976003][ T5962] usb 2-1: config 253 interface 164 has no altsetting 0
[  690.059962][ T5962] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.73
[  690.079909][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.401849][ T5962] usb 2-1: Product: syz
[  690.406060][ T5962] usb 2-1: Manufacturer: syz
[  690.522152][ T5962] usb 2-1: SerialNumber: syz
[  692.572246][ T5962] ums-sddr09 2-1:253.164: USB Mass Storage device detected
[  692.791697][ T5962] usb 2-1: USB disconnect, device number 51
[  692.800284][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  692.800294][   T30] audit: type=1400 audit(2000000158.570:1153): avc:  denied  { bind } for  pid=13811 comm="syz.1.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  692.838032][T13783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  692.908309][   T30] audit: type=1400 audit(2000000158.590:1154): avc:  denied  { node_bind } for  pid=13811 comm="syz.1.2293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  692.985957][   T30] audit: type=1400 audit(2000000158.750:1155): avc:  denied  { bind } for  pid=13782 comm="syz.3.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  693.020919][ T5887] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  693.192681][   T30] audit: type=1400 audit(2000000158.750:1156): avc:  denied  { write } for  pid=13782 comm="syz.3.2283" path="socket:[41286]" dev="sockfs" ino=41286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  693.382417][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  693.394204][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  693.431416][ T5887] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  693.440524][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.473929][ T5887] usb 6-1: config 0 descriptor??
[  693.691722][ T5887] usbhid 6-1:0.0: can't add hid device: -71
[  693.698087][ T5887] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  693.742173][ T5887] usb 6-1: USB disconnect, device number 11
[  693.780856][ T5939] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  693.930931][ T5939] usb 2-1: Using ep0 maxpacket: 32
[  694.062683][ T5939] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  694.065524][T13835] binder: BINDER_SET_CONTEXT_MGR already set
[  694.178782][T13835] binder: 13832:13835 ioctl 4018620d 200000000040 returned -16
[  694.331154][ T5939] usb 2-1: config 0 has no interface number 0
[  694.341326][   T30] audit: type=1400 audit(2000000159.820:1157): avc:  denied  { ioctl } for  pid=13832 comm="syz.3.2298" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  694.375840][T13841] binder: 13832:13841 ioctl c0306201 2000000003c0 returned -14
[  694.387608][ T5939] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  694.401424][   T30] audit: type=1400 audit(2000000159.840:1158): avc:  denied  { set_context_mgr } for  pid=13832 comm="syz.3.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  694.401614][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.479907][   T30] audit: type=1400 audit(2000000159.840:1159): avc:  denied  { write } for  pid=13832 comm="syz.3.2298" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  694.502791][ T5939] usb 2-1: Product: syz
[  694.502814][ T5939] usb 2-1: Manufacturer: syz
[  694.502828][ T5939] usb 2-1: SerialNumber: syz
[  694.541133][ T5939] usb 2-1: config 0 descriptor??
[  694.564644][ T5939] radio-si470x 2-1:0.35: could not find interrupt in endpoint
[  694.611402][   T30] audit: type=1400 audit(2000000159.840:1160): avc:  denied  { map } for  pid=13832 comm="syz.3.2298" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  694.621063][ T5939] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5
[  694.762674][ T5939] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  694.981157][ T5939] radio-raremono 2-1:0.35: V4L2 device registered as radio48
[  695.537799][T10063] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  695.632918][ T5962] usb 2-1: USB disconnect, device number 52
[  695.639142][ T5962] radio-raremono 2-1:0.35: Thanko's Raremono disconnected
[  695.691255][T10063] usb 6-1: Using ep0 maxpacket: 8
[  695.698889][T10063] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  695.710606][T10063] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.743274][T10063] usb 6-1: config 0 descriptor??
[  695.923496][   T30] audit: type=1400 audit(2000000161.700:1161): avc:  denied  { mount } for  pid=13858 comm="syz.0.2304" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  696.050083][T13860] veth0: entered promiscuous mode
[  696.063442][T13860] veth0: left promiscuous mode
[  696.204208][   T30] audit: type=1400 audit(2000000161.970:1162): avc:  denied  { create } for  pid=13858 comm="syz.0.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  696.716186][T13866] /dev/nullb0: Can't lookup blockdev
[  697.857741][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2308'.
[  697.891917][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2308'.
[  698.283619][ T5939] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  698.484033][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  698.493490][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  698.493504][   T30] audit: type=1400 audit(2000000164.270:1166): avc:  denied  { ioctl } for  pid=13888 comm="syz-executor" path="socket:[40794]" dev="sockfs" ino=40794 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  698.500351][ T5142] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  698.526591][    C1] vkms_vblank_simulate: vblank timer overrun
[  698.544737][ T5142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  698.553842][ T5142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  698.563060][ T5142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  698.567723][   T30] audit: type=1400 audit(2000000164.320:1167): avc:  denied  { name_connect } for  pid=13886 comm="syz.2.2312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  698.570650][ T5142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  698.601305][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  698.611373][ T5939] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  698.621189][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.638326][ T5939] usb 4-1: config 0 descriptor??
[  698.682927][   T30] audit: type=1400 audit(2000000164.400:1168): avc:  denied  { mounton } for  pid=13888 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  698.704492][    C1] vkms_vblank_simulate: vblank timer overrun
[  698.752913][T13891] openvswitch: netlink: Message has 2 unknown bytes.
[  698.759957][T13891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  698.791115][   T30] audit: type=1400 audit(2000000164.520:1169): avc:  denied  { mounton } for  pid=13886 comm="syz.2.2312" path="/445/file0" dev="tmpfs" ino=2394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  698.878150][T13888] lo speed is unknown, defaulting to 1000
[  698.882460][ T5939] usbhid 4-1:0.0: can't add hid device: -71
[  698.893286][ T5939] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  698.925098][ T5939] usb 4-1: USB disconnect, device number 40
[  699.099715][T13888] chnl_net:caif_netlink_parms(): no params data found
[  699.253669][T13888] bridge0: port 1(bridge_slave_0) entered blocking state
[  699.261590][T13888] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.269696][T13888] bridge_slave_0: entered allmulticast mode
[  699.287887][T13888] bridge_slave_0: entered promiscuous mode
[  699.314847][T13888] bridge0: port 2(bridge_slave_1) entered blocking state
[  699.322884][T13888] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.333443][T13888] bridge_slave_1: entered allmulticast mode
[  699.350833][T13888] bridge_slave_1: entered promiscuous mode
[  699.405835][T10063] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  699.418091][T10063] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  699.444692][T10063] asix 6-1:0.0: probe with driver asix failed with error -71
[  699.463203][T10063] usb 6-1: USB disconnect, device number 12
[  699.476934][T13888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  699.614728][T13888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  699.816965][   T30] audit: type=1400 audit(2000000165.480:1170): avc:  denied  { read } for  pid=13901 comm="syz.3.2314" name="usbmon2" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  699.840409][    C1] vkms_vblank_simulate: vblank timer overrun
[  700.158021][   T30] audit: type=1400 audit(2000000165.480:1171): avc:  denied  { open } for  pid=13901 comm="syz.3.2314" path="/dev/usbmon2" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  700.216766][T13888] team0: Port device team_slave_0 added
[  700.226147][T13888] team0: Port device team_slave_1 added
[  700.261361][T13888] batman_adv: batadv0: Adding interface: batadv_slave_0
[  700.268420][T13888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  700.434108][T13888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  700.460923][T13888] batman_adv: batadv0: Adding interface: batadv_slave_1
[  700.467911][T13888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  700.481564][   T30] audit: type=1400 audit(2000000166.250:1172): avc:  denied  { read } for  pid=13911 comm="syz.3.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  700.493834][    C1] vkms_vblank_simulate: vblank timer overrun
[  700.521832][   T30] audit: type=1400 audit(2000000166.300:1173): avc:  denied  { write } for  pid=13907 comm="syz.1.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  700.563487][T13888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  700.564718][   T30] audit: type=1400 audit(2000000166.320:1174): avc:  denied  { create } for  pid=13911 comm="syz.3.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  700.598110][   T30] audit: type=1400 audit(2000000166.320:1175): avc:  denied  { getopt } for  pid=13911 comm="syz.3.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  700.622753][ T5872] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  700.653264][T13888] hsr_slave_0: entered promiscuous mode
[  700.659445][T13888] hsr_slave_1: entered promiscuous mode
[  700.665346][ T5142] Bluetooth: hci6: command tx timeout
[  700.691566][T13888] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  700.700027][T13888] Cannot create hsr debugfs directory
[  700.900990][ T5872] usb 6-1: Using ep0 maxpacket: 8
[  700.929555][T13917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2318'.
[  701.329863][T13916] 9pnet_fd: Insufficient options for proto=fd
[  701.341453][ T5872] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  701.349821][ T5872] usb 6-1: config 0 has no interface number 0
[  701.359881][ T5872] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  701.370099][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.387071][ T5872] usb 6-1: Product: syz
[  701.391585][ T5872] usb 6-1: Manufacturer: syz
[  701.396268][ T5872] usb 6-1: SerialNumber: syz
[  701.408768][ T5872] usb 6-1: config 0 descriptor??
[  701.799723][T13925] loop6: detected capacity change from 0 to 524287999
[  701.867236][T13926] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  702.447258][T13925] buffer_io_error: 73 callbacks suppressed
[  702.522715][T13925] Buffer I/O error on dev loop6, logical block 0, async page read
[  702.544823][T13925] Buffer I/O error on dev loop6, logical block 0, async page read
[  702.598673][T13925] Buffer I/O error on dev loop6, logical block 0, async page read
[  702.643900][T13925] Buffer I/O error on dev loop6, logical block 0, async page read
[  702.731652][ T5142] Bluetooth: hci6: command tx timeout
[  702.805344][T13925] Buffer I/O error on dev loop6, logical block 0, async page read
[  702.897410][T13925] Buffer I/O error on dev loop6, logical block 0, async page read
[  702.931439][T13925] Buffer I/O error on dev loop6, logical block 0, async page read
[  702.940186][T13925] Buffer I/O error on dev loop6, logical block 0, async page read
[  702.950511][T13925] ldm_validate_partition_table(): Disk read failed.
[  702.958117][T13925] Buffer I/O error on dev loop6, logical block 0, async page read
[  702.967610][T13925] Buffer I/O error on dev loop6, logical block 0, async page read
[  702.977953][T13925] Dev loop6: unable to read RDB block 0
[  702.986697][T13925]  loop6: unable to read partition table
[  702.994176][T13925] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  703.222399][T13928] ldm_validate_partition_table(): Disk read failed.
[  703.238107][T13928] Dev loop6: unable to read RDB block 0
[  703.244198][T13928]  loop6: unable to read partition table
[  703.263606][T13928] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  703.377201][ T5872] usb 6-1: USB disconnect, device number 13
[  703.694980][T13936] loop6: detected capacity change from 0 to 524287999
[  703.707459][T13936] ldm_validate_partition_table(): Disk read failed.
[  703.718959][T13936] Dev loop6: unable to read RDB block 0
[  703.734856][T13936]  loop6: unable to read partition table
[  703.746939][T13936] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  703.923975][ T7262] ldm_validate_partition_table(): Disk read failed.
[  703.951599][ T7262] Dev loop6: unable to read RDB block 0
[  703.969352][ T7262]  loop6: unable to read partition table
[  703.982019][T13935] ldm_validate_partition_table(): Disk read failed.
[  703.988776][T13935] Dev loop6: unable to read RDB block 0
[  703.994723][T13935]  loop6: unable to read partition table
[  704.001249][T13935] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  704.024676][T13942] Invalid option length (1048180) for dns_resolver key
[  704.101407][T10063] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  704.116348][T13888] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  704.424705][T13888] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  704.479305][T13945] veth0: entered promiscuous mode
[  704.492417][T13888] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  704.512793][T13888] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  704.539541][T13945] veth0: left promiscuous mode
[  704.564544][T10063] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  704.579368][T10063] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  704.609729][T10063] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  704.638415][T10063] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.679498][T10063] usb 6-1: config 0 descriptor??
[  704.811279][ T5142] Bluetooth: hci6: command tx timeout
[  704.834655][T13888] 8021q: adding VLAN 0 to HW filter on device bond0
[  704.949214][T13888] 8021q: adding VLAN 0 to HW filter on device team0
[  704.995492][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[  705.002689][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  705.047792][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.055000][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  705.070931][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  705.070948][   T30] audit: type=1400 audit(2000000170.840:1177): avc:  denied  { create } for  pid=13964 comm="syz.1.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  705.133848][T10063] usbhid 6-1:0.0: can't add hid device: -71
[  705.139889][T10063] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  705.155986][T10063] usb 6-1: USB disconnect, device number 14
[  705.166191][   T30] audit: type=1400 audit(2000000170.900:1178): avc:  denied  { read append } for  pid=13964 comm="syz.1.2330" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  705.179291][T13967] qnx4: no qnx4 filesystem (no root dir).
[  705.196876][   T30] audit: type=1400 audit(2000000170.900:1179): avc:  denied  { open } for  pid=13964 comm="syz.1.2330" path="/dev/sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  705.707010][ T2900] block nbd4: Possible stuck request ffff8880268d3b80: control (read@0,4096B). Runtime 120 seconds
[  705.707698][   T30] audit: type=1400 audit(2000000171.050:1180): avc:  denied  { ioctl } for  pid=13962 comm="syz.2.2329" path="socket:[42024]" dev="sockfs" ino=42024 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  706.165907][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2334'.
[  706.188920][T13888] 8021q: adding VLAN 0 to HW filter on device batadv0
[  706.327494][T13983] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2333'.
[  706.439439][T13983] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  706.545399][T13981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2334'.
[  706.561647][   T30] audit: type=1400 audit(2000000172.330:1181): avc:  denied  { read write } for  pid=13978 comm="syz.5.2333" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  707.130615][ T5142] Bluetooth: hci6: command tx timeout
[  707.136518][   T30] audit: type=1400 audit(2000000172.330:1182): avc:  denied  { open } for  pid=13978 comm="syz.5.2333" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  707.481909][T13888] veth0_vlan: entered promiscuous mode
[  707.573567][T13888] veth1_vlan: entered promiscuous mode
[  707.699335][T13997] Invalid option length (1048180) for dns_resolver key
[  707.758490][T13888] veth0_macvtap: entered promiscuous mode
[  707.839462][T13888] veth1_macvtap: entered promiscuous mode
[  707.950336][T14004] openvswitch: netlink: Message has 2 unknown bytes.
[  707.959357][T14004] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  708.215101][T14001] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2340'.
[  708.224285][T14001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2340'.
[  708.233240][T14001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2340'.
[  708.387612][T14009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'.
[  708.412557][T13888] batman_adv: batadv0: Interface activated: batadv_slave_0
[  708.426269][   T30] audit: type=1400 audit(2000000174.170:1183): avc:  denied  { connect } for  pid=14002 comm="syz.1.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  708.465233][T13888] batman_adv: batadv0: Interface activated: batadv_slave_1
[  708.476835][   T30] audit: type=1400 audit(2000000174.170:1184): avc:  denied  { bind } for  pid=14002 comm="syz.1.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  708.507005][T13888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  708.516840][T14003] can: request_module (can-proto-3) failed.
[  708.523102][T13888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  708.537295][   T30] audit: type=1400 audit(2000000174.170:1185): avc:  denied  { write } for  pid=14002 comm="syz.1.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  708.558238][T13888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  708.578367][T13888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  708.635907][   T30] audit: type=1400 audit(2000000174.410:1186): avc:  denied  { append } for  pid=14002 comm="syz.1.2339" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  708.814097][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  708.834052][T14016] autofs: Unknown parameter '���P�8[#��r�ԜQ�#

[  708.834052][T14016] 9�h�{�����q6��aEx�R�U�BteB
:R$��[�U�X��w[I�'
[  708.865941][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.502073][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.520192][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.728722][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2344'.
[  710.093976][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  710.093985][   T30] audit: type=1400 audit(2000000175.870:1199): avc:  denied  { mounton } for  pid=13888 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  710.727796][T14043] loop6: detected capacity change from 0 to 524287999
[  710.740249][T14043] buffer_io_error: 75 callbacks suppressed
[  710.740278][T14043] Buffer I/O error on dev loop6, logical block 0, async page read
[  710.760056][T14043] Buffer I/O error on dev loop6, logical block 0, async page read
[  710.770654][T14043] Buffer I/O error on dev loop6, logical block 0, async page read
[  710.782745][T14043] Buffer I/O error on dev loop6, logical block 0, async page read
[  710.793231][T14043] Buffer I/O error on dev loop6, logical block 0, async page read
[  710.803301][T14043] Buffer I/O error on dev loop6, logical block 0, async page read
[  710.812118][T14043] Buffer I/O error on dev loop6, logical block 0, async page read
[  710.820735][T14043] Buffer I/O error on dev loop6, logical block 0, async page read
[  710.829550][T14043] ldm_validate_partition_table(): Disk read failed.
[  710.838194][T14043] Buffer I/O error on dev loop6, logical block 0, async page read
[  710.848382][T14043] Buffer I/O error on dev loop6, logical block 0, async page read
[  710.862954][T14043] Dev loop6: unable to read RDB block 0
[  710.872433][T14043]  loop6: unable to read partition table
[  710.879073][T14043] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  711.245961][ T7262] ldm_validate_partition_table(): Disk read failed.
[  711.255091][ T7262] Dev loop6: unable to read RDB block 0
[  711.277067][ T7262]  loop6: unable to read partition table
[  711.792021][T14036] ldm_validate_partition_table(): Disk read failed.
[  711.798982][T14036] Dev loop6: unable to read RDB block 0
[  711.804888][T14036]  loop6: unable to read partition table
[  711.810674][T14036] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  711.835656][   T30] audit: type=1400 audit(2000000177.130:1200): avc:  denied  { accept } for  pid=14044 comm="syz.3.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  711.841364][T10063] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  712.372376][T10063] usb 1-1: Using ep0 maxpacket: 32
[  712.815875][T14056] qrtr: Invalid version 0
[  712.887837][T14060] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2351'.
[  713.564679][   T30] audit: type=1400 audit(2000000178.580:1201): avc:  denied  { create } for  pid=14051 comm="syz.2.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  713.758631][   T30] audit: type=1400 audit(2000000178.600:1202): avc:  denied  { write } for  pid=14051 comm="syz.2.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  713.778478][    C0] vkms_vblank_simulate: vblank timer overrun
[  713.802417][T10063] usb 1-1: unable to read config index 0 descriptor/all
[  713.810549][T10063] usb 1-1: can't read configurations, error -71
[  714.166911][T14065] netlink: 'syz.5.2355': attribute type 10 has an invalid length.
[  714.210345][T14065] team0: Device ipvlan1 failed to register rx_handler
[  714.287717][   T30] audit: type=1400 audit(2000000180.060:1203): avc:  denied  { create } for  pid=14072 comm="syz.2.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  714.318624][   T30] audit: type=1400 audit(2000000180.090:1204): avc:  denied  { ioctl } for  pid=14072 comm="syz.2.2358" path="socket:[42627]" dev="sockfs" ino=42627 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  714.578093][   T30] audit: type=1400 audit(2000000180.350:1205): avc:  denied  { write } for  pid=14072 comm="syz.2.2358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1
[  714.989306][ T5962] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  715.331400][ T5962] usb 3-1: device descriptor read/64, error -71
[  715.409636][   T30] audit: type=1400 audit(2000000181.180:1206): avc:  denied  { setopt } for  pid=14090 comm="syz.5.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  715.429228][    C0] vkms_vblank_simulate: vblank timer overrun
[  715.536134][   T30] audit: type=1400 audit(2000000181.220:1207): avc:  denied  { ioctl } for  pid=14076 comm="syz.3.2359" path="socket:[43389]" dev="sockfs" ino=43389 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  715.585111][ T5962] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  715.821501][   T30] audit: type=1400 audit(2000000181.220:1208): avc:  denied  { setopt } for  pid=14076 comm="syz.3.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  715.931386][ T5962] usb 3-1: device descriptor read/64, error -71
[  716.016594][   T30] audit: type=1400 audit(2000000181.790:1209): avc:  denied  { read } for  pid=14108 comm="syz.5.2368" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  716.143519][ T5962] usb usb3-port1: attempt power cycle
[  716.155084][T14109] fuse: Bad value for 'fd'
[  716.584882][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2369'.
[  716.595600][T14112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2369'.
[  716.994897][ T5962] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  717.094765][ T5962] usb 3-1: device descriptor read/8, error -71
[  717.154364][   T30] audit: type=1400 audit(2000000182.930:1210): avc:  denied  { create } for  pid=14116 comm="syz.0.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  717.163262][T14117] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  717.345133][ T5962] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  717.411584][ T5879] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  717.427893][T14123] qnx4: no qnx4 filesystem (no root dir).
[  717.448777][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2374'.
[  717.571703][ T5962] usb 3-1: device not accepting address 51, error -71
[  717.641449][ T5879] usb 6-1: Using ep0 maxpacket: 8
[  717.647067][ T5962] usb usb3-port1: unable to enumerate USB device
[  717.664975][ T5879] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  717.685152][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.696015][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'.
[  717.726817][ T5879] usb 6-1: config 0 descriptor??
[  718.096063][   T30] audit: type=1400 audit(2000000183.760:1211): avc:  denied  { name_bind } for  pid=14128 comm="syz.2.2375" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  718.713090][T14142] FAULT_INJECTION: forcing a failure.
[  718.713090][T14142] name failslab, interval 1, probability 0, space 0, times 0
[  718.728465][T14142] CPU: 0 UID: 0 PID: 14142 Comm: syz.0.2377 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) 
[  718.728487][T14142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  718.728497][T14142] Call Trace:
[  718.728502][T14142]  <TASK>
[  718.728509][T14142]  dump_stack_lvl+0x16c/0x1f0
[  718.728546][T14142]  should_fail_ex+0x512/0x640
[  718.728568][T14142]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  718.728595][T14142]  should_failslab+0xc2/0x120
[  718.728626][T14142]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  718.728647][T14142]  ? getname_flags.part.0+0x4c/0x550
[  718.728669][T14142]  getname_flags.part.0+0x4c/0x550
[  718.728689][T14142]  getname_flags+0x93/0xf0
[  718.728709][T14142]  do_sys_openat2+0xb8/0x1d0
[  718.728726][T14142]  ? __pfx_do_sys_openat2+0x10/0x10
[  718.728745][T14142]  ? __fget_files+0x20e/0x3c0
[  718.728772][T14142]  __x64_sys_open+0x153/0x1e0
[  718.728788][T14142]  ? __pfx___x64_sys_open+0x10/0x10
[  718.728808][T14142]  ? rcu_is_watching+0x12/0xc0
[  718.728831][T14142]  do_syscall_64+0xcd/0x4c0
[  718.728859][T14142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.728875][T14142] RIP: 0033:0x7f8360f8e929
[  718.728890][T14142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  718.728907][T14142] RSP: 002b:00007f8361d26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  718.728924][T14142] RAX: ffffffffffffffda RBX: 00007f83611b6080 RCX: 00007f8360f8e929
[  718.728936][T14142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200
[  718.728947][T14142] RBP: 00007f8361d26090 R08: 0000000000000000 R09: 0000000000000000
[  718.728957][T14142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  718.728968][T14142] R13: 0000000000000000 R14: 00007f83611b6080 R15: 00007ffde76dc048
[  718.728992][T14142]  </TASK>
[  718.740531][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2380'.
[  719.090594][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2380'.
[  719.324926][T14160] delete_channel: no stack
[  719.471094][ T5872] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  719.661604][ T5991] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  719.811813][ T5872] usb 4-1: no configurations
[  719.816426][ T5872] usb 4-1: can't read configurations, error -22
[  719.917425][   T30] audit: type=1400 audit(2000000185.690:1212): avc:  denied  { listen } for  pid=14165 comm="syz.2.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  720.001042][ T5872] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  720.072274][ T5991] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  720.148636][T14168] 9pnet_fd: p9_fd_create_tcp (14168): problem connecting socket to 127.0.0.1
[  720.174782][ T5872] usb 4-1: no configurations
[  720.195256][ T5872] usb 4-1: can't read configurations, error -22
[  720.341899][ T5872] usb usb4-port1: attempt power cycle
[  720.350388][ T5991] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  720.360427][   T30] audit: type=1400 audit(2000000185.910:1213): avc:  denied  { mounton } for  pid=14165 comm="syz.2.2385" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  720.419165][ T5991] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  720.438910][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.751087][ T5872] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  720.786877][ T5872] usb 4-1: no configurations
[  720.791895][ T5872] usb 4-1: can't read configurations, error -22
[  720.820112][T14162] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  720.838838][ T5991] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  720.886032][T14172] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2386'.
[  720.971775][ T5872] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  721.004582][ T5872] usb 4-1: no configurations
[  721.004603][ T5872] usb 4-1: can't read configurations, error -22
[  721.004835][ T5872] usb usb4-port1: unable to enumerate USB device
[  721.037377][T14162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  721.037795][T14162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  721.125563][T14178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2388'.
[  721.125690][T14178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2388'.
[  721.388202][ T5879] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  721.403629][   T30] audit: type=1400 audit(2000000187.180:1214): avc:  denied  { create } for  pid=14182 comm="syz.2.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  721.423229][    C1] vkms_vblank_simulate: vblank timer overrun
[  721.423616][ T5879] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  721.463250][ T5879] asix 6-1:0.0: probe with driver asix failed with error -71
[  721.474656][   T30] audit: type=1400 audit(2000000187.200:1215): avc:  denied  { bind } for  pid=14182 comm="syz.2.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  721.812346][ T5879] usb 6-1: USB disconnect, device number 15
[  722.574229][T14196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2393'.
[  722.586937][T14196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2393'.
[  722.715929][ T5962] usb 1-1: USB disconnect, device number 5
[  722.722586][   T30] audit: type=1400 audit(2000000188.500:1216): avc:  denied  { write } for  pid=14197 comm="syz.2.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  722.742046][    C1] vkms_vblank_simulate: vblank timer overrun
[  723.305304][ T5826] Bluetooth: hci5: command 0x0406 tx timeout
[  724.156984][   T30] audit: type=1400 audit(2000000189.190:1217): avc:  denied  { write } for  pid=14206 comm="syz.2.2400" name="sockstat" dev="proc" ino=4026533445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  724.206552][T10063] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  724.572839][T10063] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  724.631842][T10063] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  724.650325][T10063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  724.682090][T10063] usb 4-1: config 0 descriptor??
[  724.707244][T10063] pwc: Askey VC010 type 2 USB webcam detected.
[  725.118213][T14228] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2404'.
[  725.376766][   T30] audit: type=1400 audit(2000000191.100:1218): avc:  denied  { read } for  pid=14222 comm="syz.1.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  725.405818][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2405'.
[  725.453178][   T30] audit: type=1400 audit(2000000191.180:1219): avc:  denied  { bind } for  pid=14226 comm="syz.2.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  725.879874][   T30] audit: type=1400 audit(2000000191.640:1220): avc:  denied  { read } for  pid=14204 comm="syz.3.2398" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  725.908877][T14205] input input28: cannot allocate more than FF_MAX_EFFECTS effects
[  725.952232][T10063] pwc: recv_control_msg error -32 req 02 val 2b00
[  726.055885][T10063] pwc: recv_control_msg error -32 req 02 val 2700
[  726.072016][T10063] pwc: recv_control_msg error -32 req 02 val 2c00
[  726.081448][   T30] audit: type=1400 audit(2000000191.640:1221): avc:  denied  { open } for  pid=14204 comm="syz.3.2398" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  726.122348][T10063] pwc: recv_control_msg error -32 req 04 val 1000
[  726.135605][T10063] pwc: recv_control_msg error -32 req 04 val 1300
[  726.145858][   T30] audit: type=1400 audit(2000000191.650:1222): avc:  denied  { ioctl } for  pid=14204 comm="syz.3.2398" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  726.174545][T10063] pwc: recv_control_msg error -32 req 04 val 1400
[  726.325990][T14247] Invalid option length (1048180) for dns_resolver key
[  726.340121][T14253] delete_channel: no stack
[  726.431486][T10063] pwc: recv_control_msg error -71 req 02 val 2100
[  726.438366][T10063] pwc: recv_control_msg error -71 req 04 val 1500
[  726.453471][T10063] pwc: recv_control_msg error -71 req 02 val 2500
[  726.474623][T10063] pwc: recv_control_msg error -71 req 02 val 2400
[  726.551626][T10063] pwc: recv_control_msg error -71 req 02 val 2600
[  726.687299][T14259] netlink: 'syz.5.2412': attribute type 1 has an invalid length.
[  726.829521][T10063] pwc: recv_control_msg error -71 req 02 val 2900
[  726.904113][ T5962] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  726.941433][T10063] pwc: recv_control_msg error -71 req 02 val 2800
[  726.957537][T10063] pwc: recv_control_msg error -71 req 04 val 1100
[  726.975862][T10063] pwc: recv_control_msg error -71 req 04 val 1200
[  727.000721][T10063] pwc: Registered as video103.
[  727.030417][T10063] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29
[  727.058835][T14261] bond1: entered promiscuous mode
[  727.091927][T14261] bond1: entered allmulticast mode
[  727.098362][T14261] 8021q: adding VLAN 0 to HW filter on device bond1
[  727.265526][ T5962] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  727.790468][T10063] usb 4-1: USB disconnect, device number 45
[  727.799329][ T5962] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  727.810050][   T30] audit: type=1400 audit(2000000193.560:1223): avc:  denied  { read } for  pid=5176 comm="acpid" name="event4" dev="devtmpfs" ino=3469 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  728.001399][ T5962] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  728.302767][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.323365][   T30] audit: type=1400 audit(2000000193.560:1224): avc:  denied  { open } for  pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3469 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  728.377916][T14254] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  728.390483][ T5962] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  728.514103][   T30] audit: type=1400 audit(2000000193.560:1225): avc:  denied  { ioctl } for  pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3469 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  729.865839][   T30] audit: type=1400 audit(2000000194.330:1226): avc:  denied  { read } for  pid=14280 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  729.966868][   T30] audit: type=1400 audit(2000000195.600:1227): avc:  denied  { listen } for  pid=14280 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  730.132748][ T5962] usb 2-1: USB disconnect, device number 53
[  730.867160][T14299] Invalid option length (1048180) for dns_resolver key
[  730.992939][T14304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2425'.
[  731.160313][T14316] veth0: entered promiscuous mode
[  731.167923][T14316] veth0: left promiscuous mode
[  731.731234][T14312] veth0: entered promiscuous mode
[  731.741508][ T5962] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  731.757605][T14312] veth0: left promiscuous mode
[  732.153797][ T5962] usb 1-1: Using ep0 maxpacket: 32
[  732.178171][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  732.270701][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  732.319780][ T5962] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  732.357682][ T5962] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  732.383124][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.437613][ T5962] usb 1-1: config 0 descriptor??
[  732.492524][T14328] input: syz0 as /devices/virtual/input/input30
[  732.532194][   T30] audit: type=1400 audit(2000000198.260:1228): avc:  denied  { write } for  pid=14326 comm="syz.2.2433" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  733.139929][ T5962] usbhid 1-1:0.0: can't add hid device: -71
[  733.146717][ T5962] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  733.158162][ T5962] usb 1-1: USB disconnect, device number 6
[  733.847519][   T30] audit: type=1400 audit(2000000199.620:1229): avc:  denied  { create } for  pid=14345 comm="syz.1.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  733.899158][T14346] ieee802154 phy0 wpan0: encryption failed: -22
[  733.915446][   T30] audit: type=1400 audit(2000000199.670:1230): avc:  denied  { write } for  pid=14345 comm="syz.1.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  733.930687][T14346] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2437'.
[  733.971117][T14346] netlink: 'syz.1.2437': attribute type 1 has an invalid length.
[  734.233968][   T30] audit: type=1400 audit(2000000200.000:1231): avc:  denied  { getopt } for  pid=14354 comm="syz.5.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  734.376382][ T5962] IPVS: starting estimator thread 0...
[  734.417389][   T30] audit: type=1400 audit(2000000200.190:1232): avc:  denied  { write } for  pid=14356 comm="syz.0.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  734.471490][T14361] IPVS: using max 47 ests per chain, 112800 per kthread
[  734.777593][   T30] audit: type=1400 audit(2000000200.550:1233): avc:  denied  { ioctl } for  pid=14354 comm="syz.5.2442" path="socket:[44391]" dev="sockfs" ino=44391 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  734.823305][T14355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  735.697126][   T31] INFO: task syz.4.1807:12279 blocked for more than 143 seconds.
[  735.706964][   T30] audit: type=1400 audit(2000000201.030:1234): avc:  denied  { connect } for  pid=14368 comm="syz.2.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  735.743747][   T31]       Not tainted 6.16.0-rc1-syzkaller #0
[  735.747225][T14378] loop6: detected capacity change from 0 to 524287999
[  735.761100][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  735.762042][T14378] buffer_io_error: 39 callbacks suppressed
[  735.762053][T14378] Buffer I/O error on dev loop6, logical block 0, async page read
[  735.769872][   T31] task:syz.4.1807      state:D stack:28680 pid:12279 tgid:12278 ppid:8275   task_flags:0x400140 flags:0x00004006
[  735.784872][T14378] Buffer I/O error on dev loop6, logical block 0, async page read
[  735.807780][T14378] Buffer I/O error on dev loop6, logical block 0, async page read
[  735.808197][   T31] Call Trace:
[  735.886045][T14378] Buffer I/O error on dev loop6, logical block 0, async page read
[  735.923559][T14378] Buffer I/O error on dev loop6, logical block 0, async page read
[  735.930859][   T31]  <TASK>
[  735.934426][   T31]  __schedule+0x116a/0x5de0
[  735.939027][   T31]  ? __lock_acquire+0x622/0x1c90
[  735.948500][T14378] Buffer I/O error on dev loop6, logical block 0, async page read
[  735.959443][T14378] Buffer I/O error on dev loop6, logical block 0, async page read
[  735.969518][T14378] Buffer I/O error on dev loop6, logical block 0, async page read
[  735.979171][T14378] ldm_validate_partition_table(): Disk read failed.
[  735.987651][   T31]  ? __pfx___schedule+0x10/0x10
[  735.995710][ T2900] block nbd4: Possible stuck request ffff8880268d3b80: control (read@0,4096B). Runtime 150 seconds
[  736.038349][   T31]  ? find_held_lock+0x2b/0x80
[  736.041040][T14378] Buffer I/O error on dev loop6, logical block 0, async page read
[  736.181080][   T31]  ? schedule+0x2d7/0x3a0
[  736.190175][T14378] Buffer I/O error on dev loop6, logical block 0, async page read
[  736.205365][T14378] Dev loop6: unable to read RDB block 0
[  736.228776][   T31]  schedule+0xe7/0x3a0
[  736.252403][   T31]  schedule_preempt_disabled+0x13/0x30
[  736.284498][   T31]  __mutex_lock+0x6c7/0xb90
[  736.289226][   T31]  ? bdev_release+0x15a/0x6d0
[  736.295963][T14378]  loop6: unable to read partition table
[  736.310893][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  736.316206][T14378] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  736.325696][   T31]  ? find_held_lock+0x2b/0x80
[  736.330521][   T31]  ? do_raw_spin_unlock+0x172/0x230
[  736.338138][   T31]  ? bdev_release+0x15a/0x6d0
[  736.356036][   T31]  bdev_release+0x15a/0x6d0
[  736.366488][   T31]  ? __pfx_blkdev_release+0x10/0x10
[  736.378511][   T31]  blkdev_release+0x15/0x20
[  736.399390][   T31]  __fput+0x3ff/0xb70
[  736.405066][   T31]  task_work_run+0x14d/0x240
[  736.409730][   T31]  ? __pfx_task_work_run+0x10/0x10
[  736.415893][   T31]  get_signal+0x1d1/0x26d0
[  736.420358][   T31]  ? __pfx_get_signal+0x10/0x10
[  736.425763][   T31]  ? __lock_acquire+0xb8a/0x1c90
[  736.430720][   T31]  arch_do_signal_or_restart+0x8f/0x7d0
[  736.436922][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  736.444122][   T31]  ? __might_fault+0x13b/0x190
[  736.448905][   T31]  exit_to_user_mode_loop+0x84/0x110
[  736.455554][   T31]  do_syscall_64+0x3f6/0x4c0
[  736.460152][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.466559][   T31] RIP: 0033:0x7f9b92b8e929
[  736.472274][   T31] RSP: 002b:00007f9b93ac2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  736.480676][   T31] RAX: 0000000000000000 RBX: 00007f9b92db5fa0 RCX: 00007f9b92b8e929
[  736.490415][   T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
[  736.498907][   T31] RBP: 00007f9b92c10b39 R08: 0000000000000000 R09: 0000000000000000
[  736.507428][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  736.515998][   T31] R13: 0000000000000000 R14: 00007f9b92db5fa0 R15: 00007ffd106ad5c8
[  736.524438][   T31]  </TASK>
[  736.527466][   T31] INFO: task syz.4.1807:12282 blocked for more than 144 seconds.
[  736.536750][   T31]       Not tainted 6.16.0-rc1-syzkaller #0
[  736.543256][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  736.552662][   T31] task:syz.4.1807      state:D stack:28888 pid:12282 tgid:12278 ppid:8275   task_flags:0x400040 flags:0x00004004
[  736.565833][   T31] Call Trace:
[  736.569139][   T31]  <TASK>
[  736.574375][   T31]  __schedule+0x116a/0x5de0
[  736.579953][   T31]  ? __lock_acquire+0x622/0x1c90
[  736.585328][   T31]  ? __pfx___schedule+0x10/0x10
[  736.590228][   T31]  ? find_held_lock+0x2b/0x80
[  736.595029][   T31]  ? schedule+0x2d7/0x3a0
[  736.599377][   T31]  schedule+0xe7/0x3a0
[  736.603936][   T31]  schedule_preempt_disabled+0x13/0x30
[  736.609390][   T31]  __mutex_lock+0x6c7/0xb90
[  736.614370][   T31]  ? __pfx___might_resched+0x10/0x10
[  736.619646][   T31]  ? bdev_open+0x41a/0xe40
[  736.624623][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  736.629647][   T31]  ? __pfx_ilookup+0x10/0x10
[  736.634709][   T31]  ? _atomic_dec_and_lock+0xa2/0x120
[  736.639997][   T31]  ? bdev_open+0x41a/0xe40
[  736.644876][   T31]  bdev_open+0x41a/0xe40
[  736.649134][   T31]  blkdev_open+0x280/0x3f0
[  736.654143][   T31]  do_dentry_open+0x741/0x1c10
[  736.659356][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  736.664799][   T31]  vfs_open+0x82/0x3f0
[  736.668860][   T31]  path_openat+0x1de4/0x2cb0
[  736.673937][   T31]  ? __pfx_path_openat+0x10/0x10
[  736.678873][   T31]  ? __lock_acquire+0xb8a/0x1c90
[  736.684412][   T31]  do_filp_open+0x20b/0x470
[  736.688924][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  736.694425][   T31]  ? alloc_fd+0x471/0x7d0
[  736.698771][   T31]  do_sys_openat2+0x11b/0x1d0
[  736.703961][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  736.709162][   T31]  ? bpf_trace_run2+0x2a5/0x590
[  736.714703][   T31]  __x64_sys_openat+0x174/0x210
[  736.719570][   T31]  ? __pfx___x64_sys_openat+0x10/0x10
[  736.725569][   T31]  ? syscall_trace_enter+0x1cb/0x260
[  736.733488][   T31]  ? rcu_is_watching+0x12/0xc0
[  736.738252][   T31]  do_syscall_64+0xcd/0x4c0
[  736.743372][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.749273][   T31] RIP: 0033:0x7f9b92b8d290
[  736.754155][   T31] RSP: 002b:00007f9b93aa0b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  736.763525][   T31] RAX: ffffffffffffffda RBX: 0000000000002002 RCX: 00007f9b92b8d290
[  736.772163][   T31] RDX: 0000000000002002 RSI: 00007f9b93aa0c10 RDI: 00000000ffffff9c
[  736.780157][   T31] RBP: 00007f9b93aa0c10 R08: 0000000000000000 R09: 002364626e2f7665
[  736.788635][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  736.797213][   T31] R13: 0000000000000001 R14: 00007f9b92db6080 R15: 00007ffd106ad5c8
[  736.805617][   T31]  </TASK>
[  736.808674][   T31] 
[  736.808674][   T31] Showing all locks held in the system:
[  736.817249][   T31] 1 lock held by khungtaskd/31:
[  736.822624][   T31]  #0: ffffffff8e5c4840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  736.837552][   T31] 3 locks held by kworker/u9:1/5142:
[  736.843013][   T31]  #0: ffff888033a1b948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  736.853978][   T31]  #1: ffffc900107b7d10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  736.866932][   T31]  #2: ffff8880366fcd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430
[  736.877265][   T31] 2 locks held by getty/5585:
[  736.882573][   T31]  #0: ffff888031fec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  736.893051][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  736.903813][   T31] 1 lock held by udevd/6482:
[  736.908398][   T31]  #0: ffff888026717358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  736.918185][   T31] 1 lock held by syz.4.1807/12279:
[  736.923762][   T31]  #0: ffff888026717358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0
[  736.933940][   T31] 1 lock held by syz.4.1807/12282:
[  736.939045][   T31]  #0: ffff888026717358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  736.948934][   T31] 2 locks held by syz.1.2446/14370:
[  736.954658][   T31]  #0: ffff8880575efa08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270
[  736.966102][   T31]  #1: ffffffff8e5cfe38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  736.976672][   T31] 
[  736.978996][   T31] =============================================
[  736.978996][   T31] 
[  736.988573][   T31] NMI backtrace for cpu 0
[  736.988587][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) 
[  736.988607][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  736.988618][   T31] Call Trace:
[  736.988624][   T31]  <TASK>
[  736.988631][   T31]  dump_stack_lvl+0x116/0x1f0
[  736.988662][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  736.988681][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  736.988706][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  736.988731][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  736.988754][   T31]  watchdog+0xf70/0x12c0
[  736.988778][   T31]  ? __pfx_watchdog+0x10/0x10
[  736.988794][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  736.988819][   T31]  ? __kthread_parkme+0x19e/0x250
[  736.988842][   T31]  ? __pfx_watchdog+0x10/0x10
[  736.988859][   T31]  kthread+0x3c5/0x780
[  736.988875][   T31]  ? __pfx_kthread+0x10/0x10
[  736.988893][   T31]  ? rcu_is_watching+0x12/0xc0
[  736.988915][   T31]  ? __pfx_kthread+0x10/0x10
[  736.988931][   T31]  ret_from_fork+0x5d4/0x6f0
[  736.988956][   T31]  ? __pfx_kthread+0x10/0x10
[  736.988972][   T31]  ret_from_fork_asm+0x1a/0x30
[  736.988998][   T31]  </TASK>
[  736.989003][   T31] Sending NMI from CPU 0 to CPUs 1:
[  737.116952][    C1] NMI backtrace for cpu 1
[  737.116967][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) 
[  737.116983][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  737.116992][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  737.117017][    C1] Code: bb 72 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 4f 2a 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  737.117029][    C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6
[  737.117041][    C1] RAX: 000000000393639f RBX: 0000000000000001 RCX: ffffffff8b7fbc99
[  737.117051][    C1] RDX: 0000000000000000 RSI: ffffffff8de18f45 RDI: ffffffff8c157020
[  737.117059][    C1] RBP: ffffed1003cd6488 R08: 0000000000000001 R09: ffffed10170a6645
[  737.117067][    C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001
[  737.117076][    C1] R13: ffff88801e6b2440 R14: ffffffff90a80c50 R15: 0000000000000000
[  737.117084][    C1] FS:  0000000000000000(0000) GS:ffff888124854000(0000) knlGS:0000000000000000
[  737.117104][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  737.117113][    C1] CR2: 00007f7970781178 CR3: 000000007e28b000 CR4: 00000000003526f0
[  737.117122][    C1] Call Trace:
[  737.117127][    C1]  <TASK>
[  737.117132][    C1]  default_idle+0x13/0x20
[  737.117145][    C1]  default_idle_call+0x6d/0xb0
[  737.117158][    C1]  do_idle+0x391/0x510
[  737.117176][    C1]  ? __pfx_do_idle+0x10/0x10
[  737.117194][    C1]  ? trace_sched_exit_tp+0x31/0x130
[  737.117215][    C1]  cpu_startup_entry+0x4f/0x60
[  737.117230][    C1]  start_secondary+0x21d/0x2b0
[  737.117247][    C1]  ? __pfx_start_secondary+0x10/0x10
[  737.117265][    C1]  common_startup_64+0x13e/0x148
[  737.117282][    C1]  </TASK>
[  737.117985][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  737.295052][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) 
[  737.305126][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  737.315177][   T31] Call Trace:
[  737.318455][   T31]  <TASK>
[  737.321373][   T31]  dump_stack_lvl+0x3d/0x1f0
[  737.325959][   T31]  panic+0x71c/0x800
[  737.329847][   T31]  ? __pfx_panic+0x10/0x10
[  737.334252][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  737.339614][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  737.345591][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  737.350954][   T31]  ? watchdog+0xdda/0x12c0
[  737.355357][   T31]  ? watchdog+0xdcd/0x12c0
[  737.359760][   T31]  watchdog+0xdeb/0x12c0
[  737.363993][   T31]  ? __pfx_watchdog+0x10/0x10
[  737.368655][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  737.373847][   T31]  ? __kthread_parkme+0x19e/0x250
[  737.378863][   T31]  ? __pfx_watchdog+0x10/0x10
[  737.383527][   T31]  kthread+0x3c5/0x780
[  737.387579][   T31]  ? __pfx_kthread+0x10/0x10
[  737.392178][   T31]  ? rcu_is_watching+0x12/0xc0
[  737.396928][   T31]  ? __pfx_kthread+0x10/0x10
[  737.401502][   T31]  ret_from_fork+0x5d4/0x6f0
[  737.406083][   T31]  ? __pfx_kthread+0x10/0x10
[  737.410656][   T31]  ret_from_fork_asm+0x1a/0x30
[  737.415417][   T31]  </TASK>
[  737.418630][   T31] Kernel Offset: disabled
[  737.422932][   T31] Rebooting in 86400 seconds..